Allow cross-user project updates
This commit is contained in:
@@ -76,9 +76,6 @@ func (s *ProjectService) Update(projectUUID, ownerUsername string, req *UpdatePr
|
|||||||
if err != nil {
|
if err != nil {
|
||||||
return nil, ErrProjectNotFound
|
return nil, ErrProjectNotFound
|
||||||
}
|
}
|
||||||
if localProject.OwnerUsername != ownerUsername {
|
|
||||||
return nil, ErrProjectForbidden
|
|
||||||
}
|
|
||||||
|
|
||||||
name := strings.TrimSpace(req.Name)
|
name := strings.TrimSpace(req.Name)
|
||||||
if name == "" {
|
if name == "" {
|
||||||
@@ -116,9 +113,6 @@ func (s *ProjectService) setProjectActive(projectUUID, ownerUsername string, isA
|
|||||||
if err := tx.Where("uuid = ?", projectUUID).First(&project).Error; err != nil {
|
if err := tx.Where("uuid = ?", projectUUID).First(&project).Error; err != nil {
|
||||||
return ErrProjectNotFound
|
return ErrProjectNotFound
|
||||||
}
|
}
|
||||||
if project.OwnerUsername != ownerUsername {
|
|
||||||
return ErrProjectForbidden
|
|
||||||
}
|
|
||||||
if project.IsActive == isActive {
|
if project.IsActive == isActive {
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user