core/oc-lib
6
0
Fork 0
Code Issues 7 Pull Requests Packages Projects Releases Wiki Activity

missed placed

Browse Source
This commit is contained in:
mr
2026-04-22 11:25:32 +02:00
parent b92634ccba
commit 5cda4fdd40
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
models/resources/purchase_resource/purchase_resource.go
View File

@@ -65,7 +65,3 @@ func (r *PurchaseResource) CanDelete() bool { // ENDBuyingDate is passed
} }
return false // only draft bookings can be deleted return false // only draft bookings can be deleted
} }
func (dca *PurchaseResource) ShouldVerifyAuth() bool {
return false // TEMP : by pass
}

4
models/resources/purchase_resource/purchase_resource_accessor.go
View File

@@ -46,3 +46,7 @@ func (a *PurchaseResourceMongoAccessor) GetExec(isDraft bool) func(utils.DBObjec
return d return d
} }
} }
func (dca *PurchaseResourceMongoAccessor) ShouldVerifyAuth() bool {
return false // TEMP : by pass
}

6
models/utils/common.go
View File

@@ -158,6 +158,9 @@ func GenericUpdateOne(change map[string]interface{}, id string, a Accessor) (DBO
} }
func GenericLoadOne[T DBObject](id string, data T, f func(DBObject) (DBObject, int, error), a Accessor) (DBObject, int, error) { func GenericLoadOne[T DBObject](id string, data T, f func(DBObject) (DBObject, int, error), a Accessor) (DBObject, int, error) {
if a.ShouldVerifyAuth() && !data.VerifyAuth("get", a.GetRequest()) {
return nil, 403, errors.New("you are not allowed to access :" + a.GetType().String())
}
res_mongo, code, err := mongo.MONGOService.LoadOne(id, a.GetType().String()) res_mongo, code, err := mongo.MONGOService.LoadOne(id, a.GetType().String())
if err != nil { if err != nil {
return nil, code, err return nil, code, err
@@ -166,9 +169,6 @@ func GenericLoadOne[T DBObject](id string, data T, f func(DBObject) (DBObject, i
return nil, 400, err return nil, 400, err
} }
if a.ShouldVerifyAuth() && !data.VerifyAuth("get", a.GetRequest()) {
return nil, 403, errors.New("you are not allowed to access :" + a.GetType().String())
}
return f(data) return f(data)
} }