gemma: pkg/controllers/importconfig.go comparison

Merged extented-report branch back into default.

author	Sascha L. Teichmann <sascha.teichmann@intevation.de>
date	Wed, 07 Jul 2021 11:44:40 +0200
parents	e09e003948c7
children

comparison

equal deleted inserted replaced

-:4a6feb5d3727
+:47c2ca05e8ec
 	"gemma.intevation.de/gemma/pkg/scheduler"
 	mw "gemma.intevation.de/gemma/pkg/middleware"
 )
+// RolesRequierer enforces roles when storing schedules.
+type RolesRequierer interface {
+	RequiresRoles() auth.Roles
+}
 func runImportConfig(req *http.Request) (jr mw.JSONResult, err error) {
 	id, _ := strconv.ParseInt(mux.Vars(req)["id"], 10, 64)
 	ctx := req.Context()
 			Message: fmt.Sprintf("No kind %s found", string(cfg.Kind)),
 		}
 		return
 	}
 	config := ctor()
+	session, _ := auth.GetSession(req)
+	if r, ok := config.(RolesRequierer); ok {
+		if roles := r.RequiresRoles(); len(roles) > 0 && !session.Roles.HasAny(roles...) {
+			err = mw.JSONError{
+				Code: http.StatusUnauthorized,
+				Message: fmt.Sprintf(
+					"Not allowed to add config for kind %s", string(cfg.Kind)),
+			}
+			return
+		}
+	}
 	if err = json.Unmarshal(cfg.Config, config); err != nil {
 		return
 	}
-	session, _ := auth.GetSession(req)
 	pc := imports.PersistentConfig{
 		User:       session.User,
 		Kind:       string(cfg.Kind),
 		Attributes: common.Attributes{},

Mercurial > gemma