From 0932a5e94acde72373cac07d92b2b10c6cef044d Mon Sep 17 00:00:00 2001
From: LittleSheep <littlesheep.code@hotmail.com>
Date: Wed, 29 Jan 2025 19:17:54 +0800
Subject: [PATCH] :passport_control: Check permission for creating products &
 releases

---
 pkg/internal/server/api/products_api.go | 2 +-
 pkg/internal/server/api/releases_api.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkg/internal/server/api/products_api.go b/pkg/internal/server/api/products_api.go
index 607da7c..69c24c6 100644
--- a/pkg/internal/server/api/products_api.go
+++ b/pkg/internal/server/api/products_api.go
@@ -75,7 +75,7 @@ func getProduct(c *fiber.Ctx) error {
 }
 
 func createProduct(c *fiber.Ctx) error {
-	if err := sec.EnsureAuthenticated(c); err != nil {
+	if err := sec.EnsureGrantedPerm(c, "CreateMaProducts", true); err != nil {
 		return err
 	}
 	user := c.Locals("nex_user").(*sec.UserInfo)
diff --git a/pkg/internal/server/api/releases_api.go b/pkg/internal/server/api/releases_api.go
index 191ee44..11aeef8 100644
--- a/pkg/internal/server/api/releases_api.go
+++ b/pkg/internal/server/api/releases_api.go
@@ -62,7 +62,7 @@ func getRelease(c *fiber.Ctx) error {
 }
 
 func createRelease(c *fiber.Ctx) error {
-	if err := sec.EnsureAuthenticated(c); err != nil {
+	if err := sec.EnsureGrantedPerm(c, "CreateMaReleases", true); err != nil {
 		return err
 	}
 	user := c.Locals("nex_user").(*sec.UserInfo)