yellowadmin/pp-tcms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: project manager cannot delete/edit the project

Browse Source
This commit is contained in:
Takeshi Kimata
2024-06-11 21:53:43 +09:00
parent 996174f7a1
commit 4aaed1e918
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/routes/projects/delete.js
View File

@@ -7,12 +7,12 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) { module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize); const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes); const Project = defineProject(sequelize, DataTypes);
const Folder = defineFolder(sequelize, DataTypes); const Folder = defineFolder(sequelize, DataTypes);
const Run = defineRun(sequelize, DataTypes); const Run = defineRun(sequelize, DataTypes);
router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { router.delete('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
const projectId = req.params.projectId; const projectId = req.params.projectId;
const t = await sequelize.transaction(); const t = await sequelize.transaction();

4
backend/routes/projects/edit.js
View File

@@ -5,10 +5,10 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) { module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize); const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize); const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes); const Project = defineProject(sequelize, DataTypes);
router.put('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => { router.put('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
const projectId = req.params.projectId; const projectId = req.params.projectId;
const { name, detail, isPublic } = req.body; const { name, detail, isPublic } = req.body;
try { try {