ahuston-0/hydra
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

* Check the owner.

Browse Source
This commit is contained in:
Eelco Dolstra
2008-11-26 23:31:07 +00:00
parent 2748cfac07
commit 043127c3d4
1 changed files with 11 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/Hydra/lib/Hydra/Controller/Root.pm
View File

@@ -113,12 +113,15 @@ sub updateProject {
my $displayName = trim $c->request->params->{displayname}; my $displayName = trim $c->request->params->{displayname};
die "Invalid display name: $displayName" if $displayName eq ""; die "Invalid display name: $displayName" if $displayName eq "";
my $owner = trim $c->request->params->{owner};
die "Invalid owner: $owner"
unless defined $c->model('DB::Users')->find({username => $owner});
$project->name($projectName); $project->name($projectName);
$project->displayname($displayName); $project->displayname($displayName);
$project->description(trim $c->request->params->{description}); $project->description(trim $c->request->params->{description});
$project->enabled(trim($c->request->params->{enabled}) eq "1" ? 1 : 0); $project->enabled(trim($c->request->params->{enabled}) eq "1" ? 1 : 0);
$project->owner(trim($c->request->params->{owner})) $project->owner($owner) if $c->check_user_roles('admin');
if $c->check_user_roles('admin');
$project->update; $project->update;
@@ -240,10 +243,9 @@ sub project :Local {
if ($subcommand ne "") { if ($subcommand ne "") {
return requireLogin($c) if !$c->user_exists; return requireLogin($c) if !$c->user_exists;
if (!$c->check_user_roles('admin') && $c->user->username ne $project->owner) { return error($c, "Only the project owner or the administrator can perform this operation.")
return error($c, "Only the project owner or the administrator can perform this operation."); unless $c->check_user_roles('admin') || $c->user->username eq $project->owner;
}
if ($subcommand eq "edit") { if ($subcommand eq "edit") {
$c->stash->{edit} = 1; $c->stash->{edit} = 1;
@@ -299,10 +301,9 @@ sub createproject :Local {
my ($self, $c, $subcommand) = @_; my ($self, $c, $subcommand) = @_;
return requireLogin($c) if !$c->user_exists; return requireLogin($c) if !$c->user_exists;
if (!$c->check_user_roles('admin')) { return error($c, "Only administrators can create projects.")
return error($c, "Only administrators can create projects."); unless $c->check_user_roles('admin');
}
if (defined $subcommand && $subcommand eq "submit") { if (defined $subcommand && $subcommand eq "submit") {
eval { eval {