f.weber/homebrewery
0
0
Fork 0
mirror of https://github.com/naturalcrit/homebrewery.git synced 2025-12-29 11:12:39 +00:00
Code Wiki Activity

prevent changes to brews from non-authors

Browse Source
This commit is contained in:
Charlie Humphreys
2022-11-16 22:39:06 -06:00
parent 2e305d5636
commit 837708fc0c
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
server/homebrew.api.js
View File

@@ -43,6 +43,9 @@ const getBrew = (accessType, fetchGoogle = true)=>{
}
});
stub = stub?.toObject();
if(stub?.authors && !stub?.authors.includes(req.account.username)) {
throw 'Current logged in user does not have access to this brew.';
}
// If there is a google id, try to find the google brew
if(fetchGoogle && (googleId || stub?.googleId)) {