[user-backend] Add permissions for scripts

This commit is contained in:
TonyXu-FX
2023-12-10 21:24:01 -05:00
committed by Ivan Chvets
parent 4049e43079
commit b03f1a0ea6
7 changed files with 80 additions and 6 deletions

View File

@@ -23,8 +23,8 @@ namespace OpenWifi {
void RESTAPI_script_handler::DoDelete() {
std::string UUID = GetBinding("uuid", "");
if (UserInfo_.userinfo.userRole != SecurityObjects::ROOT) {
return BadRequest(RESTAPI::Errors::ACCESS_DENIED);
if (!UserInfo_.userinfo.userPermissions["scripts"]["delete"]) {
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
}
if (UUID.empty()) {
@@ -40,8 +40,8 @@ namespace OpenWifi {
void RESTAPI_script_handler::DoPost() {
std::string UUID = GetBinding("uuid", "");
if (UserInfo_.userinfo.userRole != SecurityObjects::ROOT) {
return BadRequest(RESTAPI::Errors::ACCESS_DENIED);
if (!UserInfo_.userinfo.userPermissions["scripts"]["create"]) {
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
}
if (UUID.empty()) {
@@ -86,8 +86,8 @@ namespace OpenWifi {
void RESTAPI_script_handler::DoPut() {
std::string UUID = GetBinding("uuid", "");
if (UserInfo_.userinfo.userRole != SecurityObjects::ROOT) {
return BadRequest(RESTAPI::Errors::ACCESS_DENIED);
if (!UserInfo_.userinfo.userPermissions["scripts"]["update"]) {
return UnAuthorized(RESTAPI::Errors::ACCESS_DENIED);
}
if (UUID.empty()) {