feat: inplement auth case steps
This commit is contained in:
@@ -7,11 +7,12 @@ const { DataTypes, Op } = require('sequelize');
|
||||
module.exports = function (sequelize) {
|
||||
const Step = defineStep(sequelize, DataTypes);
|
||||
const CaseStep = defineCaseStep(sequelize, DataTypes);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectDeveloperFromCaseId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
|
||||
router.delete('/:stepId', async (req, res) => {
|
||||
router.delete('/:stepId', verifySignedIn, verifyProjectDeveloperFromCaseId, async (req, res) => {
|
||||
const stepId = req.params.stepId;
|
||||
// TODO The caseId should not be specified from the front end, but should be traced from stepId by association.
|
||||
const caseId = req.query.parentCaseId;
|
||||
const caseId = req.query.caseId;
|
||||
|
||||
const t = await sequelize.transaction();
|
||||
|
||||
|
||||
@@ -7,10 +7,12 @@ const { DataTypes, Op } = require('sequelize');
|
||||
module.exports = function (sequelize) {
|
||||
const Step = defineStep(sequelize, DataTypes);
|
||||
const CaseStep = defineCaseStep(sequelize, DataTypes);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectDeveloperFromCaseId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
|
||||
router.post('/', async (req, res) => {
|
||||
router.post('/', verifySignedIn, verifyProjectDeveloperFromCaseId, async (req, res) => {
|
||||
const newStepNo = req.query.newStepNo;
|
||||
const caseId = req.query.parentCaseId;
|
||||
const caseId = req.query.caseId;
|
||||
|
||||
const t = await sequelize.transaction();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user