yellowadmin/pp-tcms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: even project manager should not edit/delete project (#14)

Browse Source 
* fix: remove unused import

* feat: even project manager should not edit/delete project

* docs: even project manager should not edit/delete project
This commit is contained in:
Takeshi Kimata
2024-07-20 08:23:31 +09:00
committed by GitHub
parent 4c886e4600
commit a1ad775a7a
9 changed files with 64 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/routes/projects/delete.js
View File

@@ -7,12 +7,12 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes);
const Folder = defineFolder(sequelize, DataTypes);
const Run = defineRun(sequelize, DataTypes);
router.delete('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => {
const projectId = req.params.projectId;
const t = await sequelize.transaction();

4
backend/routes/projects/edit.js
View File

@@ -5,10 +5,10 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectManagerFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const { verifyProjectOwner } = require('../../middleware/verifyEditable')(sequelize);
const Project = defineProject(sequelize, DataTypes);
router.put('/:projectId', verifySignedIn, verifyProjectManagerFromProjectId, async (req, res) => {
router.put('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => {
const projectId = req.params.projectId;
const { name, detail, isPublic } = req.body;
try {