feat: inplement auth for runs and runCases
This commit is contained in:
@@ -5,10 +5,14 @@ const { DataTypes, Op } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
|
||||
router.post('/bulkdelete', async (req, res) => {
|
||||
router.post('/bulkdelete', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
|
||||
const recordsToDelete = req.body;
|
||||
|
||||
// TODO Instead of receiving a combination of runId and caseId from frontend,
|
||||
// receives only an array of caseId and constructs a pair from the query parameter runId
|
||||
try {
|
||||
const existingRunCases = await RunCase.findAll({
|
||||
where: {
|
||||
|
||||
@@ -4,11 +4,15 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes, Op } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
|
||||
router.post('/bulknew', async (req, res) => {
|
||||
router.post('/bulknew', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
|
||||
const recordsToCreate = req.body;
|
||||
|
||||
// TODO Instead of receiving a combination of runId and caseId from frontend,
|
||||
// receives only an array of caseId and constructs a pair from the query parameter runId
|
||||
try {
|
||||
const existingRunCases = await RunCase.findAll({
|
||||
where: {
|
||||
|
||||
@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
|
||||
router.delete('/', async (req, res) => {
|
||||
router.delete('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
|
||||
const runId = req.query.runId;
|
||||
const caseId = req.query.caseId;
|
||||
|
||||
|
||||
@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
|
||||
router.put('/', async (req, res) => {
|
||||
router.put('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
|
||||
const runId = req.query.runId;
|
||||
const caseId = req.query.caseId;
|
||||
const status = req.query.status;
|
||||
|
||||
@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromRunId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
|
||||
router.get('/', async (req, res) => {
|
||||
router.get('/', verifySignedIn, verifyProjectVisibleFromRunId, async (req, res) => {
|
||||
const { runId } = req.query;
|
||||
|
||||
if (!runId) {
|
||||
|
||||
@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
|
||||
const RunCase = defineRunCase(sequelize, DataTypes);
|
||||
|
||||
router.post('/', async (req, res) => {
|
||||
router.post('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
|
||||
const runId = req.query.runId;
|
||||
const caseId = req.query.caseId;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user