the-distro/hydra
1
0
Fork 0
forked from lix-project/hydra
Code Pull requests Activity

* Check the owner.

Browse source
This commit is contained in:
Eelco Dolstra 2008-11-26 23:31:07 +00:00
parent 2748cfac07
commit 043127c3d4
1 changed files with 11 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
src/Hydra/lib/Hydra/Controller/Root.pm
View file

@ -113,12 +113,15 @@ sub updateProject {
my $displayName = trim $c->request->params->{displayname}; my $displayName = trim $c->request->params->{displayname};
die "Invalid display name: $displayName" if $displayName eq ""; die "Invalid display name: $displayName" if $displayName eq "";
my $owner = trim $c->request->params->{owner};
die "Invalid owner: $owner"
unless defined $c->model('DB::Users')->find({username => $owner});
$project->name($projectName); $project->name($projectName);
$project->displayname($displayName); $project->displayname($displayName);
$project->description(trim $c->request->params->{description}); $project->description(trim $c->request->params->{description});
$project->enabled(trim($c->request->params->{enabled}) eq "1" ? 1 : 0); $project->enabled(trim($c->request->params->{enabled}) eq "1" ? 1 : 0);
$project->owner(trim($c->request->params->{owner})) $project->owner($owner) if $c->check_user_roles('admin');
if $c->check_user_roles('admin');
$project->update; $project->update;
@ -241,9 +244,8 @@ sub project :Local {
return requireLogin($c) if !$c->user_exists; return requireLogin($c) if !$c->user_exists;
if (!$c->check_user_roles('admin') && $c->user->username ne $project->owner) { return error($c, "Only the project owner or the administrator can perform this operation.")
return error($c, "Only the project owner or the administrator can perform this operation."); unless $c->check_user_roles('admin') || $c->user->username eq $project->owner;
}
if ($subcommand eq "edit") { if ($subcommand eq "edit") {
$c->stash->{edit} = 1; $c->stash->{edit} = 1;
@ -300,9 +302,8 @@ sub createproject :Local {
return requireLogin($c) if !$c->user_exists; return requireLogin($c) if !$c->user_exists;
if (!$c->check_user_roles('admin')) { return error($c, "Only administrators can create projects.")
return error($c, "Only administrators can create projects."); unless $c->check_user_roles('admin');
}
if (defined $subcommand && $subcommand eq "submit") { if (defined $subcommand && $subcommand eq "submit") {
eval { eval {