Filter grpc endpoints with user

This commit is contained in:
2025-01-24 17:21:28 +08:00
parent 2f256a4c3e
commit 7c3334a57a
3 changed files with 126 additions and 64 deletions

View File

@ -2,6 +2,7 @@ package grpc
import (
"context"
"git.solsynth.dev/hypernet/paperclip/pkg/internal/database"
"git.solsynth.dev/hypernet/paperclip/pkg/internal/models"
"git.solsynth.dev/hypernet/paperclip/pkg/proto"
@ -20,6 +21,10 @@ func (v *Server) GetAttachment(ctx context.Context, request *proto.GetAttachment
return nil, status.Error(codes.InvalidArgument, "you must provide id or random id")
}
if request.UserId != nil {
tx = tx.Where("account_id = ?", request.UserId)
}
var attachment models.Attachment
if err := tx.First(&attachment).Error; err != nil {
return nil, status.Error(codes.NotFound, "attachment not found")
@ -67,6 +72,10 @@ func (v *Server) UpdateVisibility(ctx context.Context, request *proto.UpdateVisi
tx = tx.Where("rid IN ?", request.Rid)
}
if request.UserId != nil {
tx = tx.Where("account_id = ?", request.UserId)
}
var rowsAffected int64
if err := tx.Update("is_indexable", request.IsIndexable).Error; err != nil {
return nil, status.Error(codes.Internal, err.Error())
@ -91,6 +100,10 @@ func (v *Server) DeleteAttachment(ctx context.Context, request *proto.DeleteAtta
tx = tx.Where("rid IN ?", request.Rid)
}
if request.UserId != nil {
tx = tx.Where("account_id = ?", request.UserId)
}
var rowsAffected int64
if err := tx.Delete(&models.Attachment{}).Error; err != nil {
return nil, status.Error(codes.Internal, err.Error())