HyperNet/Reader
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

🛂 Add permission check for listing news

Browse Source
This commit is contained in:
LittleSheep
2025-01-29 19:22:36 +08:00
parent 6abc233f00
commit a9b8fbf558
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/internal/server/api/news_api.go
View File

@@ -3,6 +3,7 @@ package api
import ( import (
"time" "time"
"git.solsynth.dev/hypernet/nexus/pkg/nex/sec"
"git.solsynth.dev/hypernet/reader/pkg/internal/database" "git.solsynth.dev/hypernet/reader/pkg/internal/database"
"git.solsynth.dev/hypernet/reader/pkg/internal/models" "git.solsynth.dev/hypernet/reader/pkg/internal/models"
"github.com/gofiber/fiber/v2" "github.com/gofiber/fiber/v2"
@@ -33,6 +34,10 @@ func getTodayNews(c *fiber.Ctx) error {
} }
func listNewsArticles(c *fiber.Ctx) error { func listNewsArticles(c *fiber.Ctx) error {
if err := sec.EnsureGrantedPerm(c, "ListNews", true); err != nil {
return err
}
take := c.QueryInt("take", 0) take := c.QueryInt("take", 0)
offset := c.QueryInt("offset", 0) offset := c.QueryInt("offset", 0)
source := c.Query("source") source := c.Query("source")