🐛 Fix check perm panic
This commit is contained in:
@ -60,7 +60,7 @@ func getUserinfo(c *fiber.Ctx) error {
|
||||
First(&data).Error; err != nil {
|
||||
return fiber.NewError(fiber.StatusInternalServerError, err.Error())
|
||||
} else {
|
||||
data.PermNodes = c.Locals("permissions").(map[string]any)
|
||||
data.PermNodes = user.PermNodes
|
||||
}
|
||||
|
||||
var resp fiber.Map
|
||||
|
@ -19,7 +19,7 @@ func EnsureGrantedPerm(c *fiber.Ctx, key string, val any) error {
|
||||
if err := EnsureAuthenticated(c); err != nil {
|
||||
return err
|
||||
}
|
||||
perms := c.Locals("permissions").(map[string]any)
|
||||
perms := c.Locals("user").(*sec.UserInfo).PermNodes
|
||||
if !services.HasPermNode(perms, key, val) {
|
||||
return fiber.NewError(fiber.StatusForbidden, fmt.Sprintf("missing permission: %s", key))
|
||||
}
|
||||
|
Reference in New Issue
Block a user