This commit is contained in:
2024-08-31 10:34:18 +08:00
parent 97cfae5a18
commit 2ab16853ac
22 changed files with 57 additions and 27 deletions

View File

@@ -9,7 +9,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -16,7 +16,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -9,7 +9,10 @@ import { isNumNaN, parseBigInt } from "../../../../../utils.ts";
export const handler: Handlers = {
async GET(req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return new Response("Permission denied", { status: 403 });
}
const gid = parseBigInt(ctx.params.gid);

View File

@@ -24,7 +24,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ReadGallery)
!(Number(user.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -14,7 +14,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ReadGallery)
!(Number(user.permissions) & UserPermission.ReadGallery)
) {
return new Response("Permission denied", { status: 403 });
}

View File

@@ -14,7 +14,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.EditGallery)
!(Number(user.permissions) & UserPermission.EditGallery)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -54,7 +54,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ReadGallery)
!(Number(user.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
@@ -65,7 +65,10 @@ export const handler: Handlers = {
},
async POST(req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.EditGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.EditGallery)
) {
return return_error(403, "Permission denied.");
}
const ct = req.headers.get("Content-Type")?.split(";")[0].trim() || "";
@@ -223,7 +226,10 @@ export const handler: Handlers = {
},
async PUT(req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.EditGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.EditGallery)
) {
return return_error(403, "Permission denied.");
}
const ct = req.headers.get("Content-Type")?.split(";")[0].trim() || "";

View File

@@ -6,7 +6,10 @@ import { User, UserPermission } from "../../../db.ts";
export const handler: Handlers = {
GET(_req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
const token = ctx.params.token;

View File

@@ -13,7 +13,10 @@ import { compareNum } from "../../../utils.ts";
export const handler: Handlers = {
GET(_req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
const st = <SharedToken | undefined> ctx.state.shared_token;

View File

@@ -21,7 +21,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -8,7 +8,10 @@ import { compareNum, isNumNaN, parseBigInt } from "../../../utils.ts";
export const handler: Handlers = {
GET(_req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
const gid = parseBigInt(ctx.params.gid);

View File

@@ -27,7 +27,7 @@ export const handler: Handlers = {
const user = <User | undefined> _ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ReadGallery)
!(Number(user.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -15,8 +15,8 @@ export const handler: Handlers = {
const u = <User | undefined> ctx.state.user;
if (
u && !u.is_admin &&
!(u.permissions & UserPermission.ReadGallery ||
u.permissions & UserPermission.ManageTasks)
!(Number(u.permissions) & UserPermission.ReadGallery ||
Number(u.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -37,7 +37,7 @@ export const handler: Handlers = {
if (typ == "gallery") {
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ShareGallery)
!(Number(user.permissions) & UserPermission.ShareGallery)
) {
return return_error(403, "Permission denied.");
}
@@ -84,7 +84,7 @@ export const handler: Handlers = {
if (typ == "gallery") {
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ShareGallery)
!(Number(user.permissions) & UserPermission.ShareGallery)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -13,7 +13,7 @@ export const handler: Handlers = {
if (typ == "gallery") {
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ShareGallery)
!(Number(user.permissions) & UserPermission.ShareGallery)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -13,7 +13,10 @@ import { isNumNaN, parseBigInt } from "../../../utils.ts";
export const handler: Handlers = {
GET(_req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
const ids = decodeURIComponent(ctx.params.id).split(",");

View File

@@ -6,7 +6,10 @@ import { User, UserPermission } from "../../../db.ts";
export const handler: Handlers = {
GET(_req, _ctx) {
const u = <User | undefined> _ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ReadGallery)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ReadGallery)
) {
return return_error(403, "Permission denied.");
}
const m = get_task_manager();

View File

@@ -17,7 +17,10 @@ import { ImportConfig } from "../../tasks/import.ts";
export const handler: Handlers = {
GET(req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ManageTasks)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}
const t = get_task_manager();
@@ -97,7 +100,10 @@ export const handler: Handlers = {
},
async PUT(req, ctx) {
const u = <User | undefined> ctx.state.user;
if (u && !u.is_admin && !(u.permissions & UserPermission.ManageTasks)) {
if (
u && !u.is_admin &&
!(Number(u.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}
const t = get_task_manager();

View File

@@ -9,7 +9,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -9,7 +9,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -16,7 +16,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ManageTasks)
!(Number(user.permissions) & UserPermission.ManageTasks)
) {
return return_error(403, "Permission denied.");
}

View File

@@ -36,7 +36,7 @@ export const handler: Handlers = {
const user = <User | undefined> ctx.state.user;
if (
user && !user.is_admin &&
!(user.permissions & UserPermission.ReadGallery)
!(Number(user.permissions) & UserPermission.ReadGallery)
) {
return new Response("Permission denied", { status: 403 });
}