DysonNetwork/Swarm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🐛 Bug fixes in permission management

Browse Source
This commit is contained in:
LittleSheep 2025-04-29 22:18:40 +08:00
parent 35792efa9f
commit 8417d766e3
2 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
DysonNetwork.Sphere/Permission/PermissionService.cs
View File

@ -6,6 +6,12 @@ namespace DysonNetwork.Sphere.Permission;
public class PermissionService(AppDatabase db) public class PermissionService(AppDatabase db)
{ {
public async Task<bool> HasPermissionAsync(string actor, string area, string key)
{
var value = await GetPermissionAsync<bool>(actor, area, key);
return value;
}
public async Task<T?> GetPermissionAsync<T>(string actor, string area, string key) public async Task<T?> GetPermissionAsync<T>(string actor, string area, string key)
{ {
var now = SystemClock.Instance.GetCurrentInstant(); var now = SystemClock.Instance.GetCurrentInstant();
@ -17,7 +23,7 @@ public class PermissionService(AppDatabase db)
.ToListAsync(); .ToListAsync();
var permission = await db.PermissionNodes var permission = await db.PermissionNodes
.Where(n => n.GroupId == null || groupsId.Contains(n.GroupId.Value)) .Where(n => n.GroupId == null || groupsId.Contains(n.GroupId.Value))
.Where(n => n.Key == key && n.Actor == actor && n.Area == area) .Where(n => n.Key == key && (n.GroupId != null || n.Actor == actor) && n.Area == area)
.Where(n => n.ExpiredAt == null || n.ExpiredAt < now) .Where(n => n.ExpiredAt == null || n.ExpiredAt < now)
.Where(n => n.AffectedAt == null || n.AffectedAt >= now) .Where(n => n.AffectedAt == null || n.AffectedAt >= now)
.FirstOrDefaultAsync(); .FirstOrDefaultAsync();

6
DysonNetwork.Sphere/Program.cs
View File

@ -212,11 +212,9 @@ app.MapTus("/files/tus", (_) => Task.FromResult<DefaultTusConfiguration>(new()
var userId = httpContext.User.FindFirst("user_id")?.Value; var userId = httpContext.User.FindFirst("user_id")?.Value;
if (userId == null) return; if (userId == null) return;
var isSuperuser = httpContext.User.FindFirst("is_superuser")?.Value == "1";
if (isSuperuser) userId = "super:" + userId;
var enforcer = httpContext.RequestServices.GetRequiredService<IEnforcer>(); var pm = httpContext.RequestServices.GetRequiredService<PermissionService>();
var allowed = await enforcer.EnforceAsync(userId, "global", "files", "create"); var allowed = await pm.HasPermissionAsync($"user:{userId}", "global", "files.create");
if (!allowed) if (!allowed)
{ {
eventContext.FailRequest(HttpStatusCode.Forbidden); eventContext.FailRequest(HttpStatusCode.Forbidden);