zhangyuheng/blessing-skin-server
1
0
Fork 0
forked from mirror/blessing-skin-server
Code Pull Requests Activity

refactor access control

Browse Source
This commit is contained in:
Pig Fang 2020-08-20 08:53:43 +08:00
parent 5b738ffe6f
commit 963334e5ee
No known key found for this signature in database
GPG Key ID: A8198F548DADA9E2
1 changed files with 20 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
app/Http/Controllers/SkinlibController.php
View File

@ -34,6 +34,26 @@ class SkinlibController extends Controller
return $next($request);
})->only(['rename', 'privacy', 'type', 'delete']);
$this->middleware(function (Request $request, $next) {
/** @var User */
$user = $request->user();
/** @var Texture */
$texture = $request->route('texture');
if (!$texture->public) {
if (!Auth::check() || ($user->uid != $texture->uploader && !$user->isAdmin())) {
$statusCode = (int) option('status_code_for_private');
if ($statusCode === 404) {
abort($statusCode, trans('skinlib.show.deleted'));
} else {
abort(403, trans('skinlib.show.private'));
}
}
}
return $next($request);
})->only(['show', 'info']);
}
public function library(Request $request)
@ -91,17 +111,6 @@ class SkinlibController extends Controller
abort(404, trans('skinlib.show.deleted'));
}
if (!$texture->public) {
if (!Auth::check() || ($user->uid != $texture->uploader && !$user->isAdmin())) {
$statusCode = (int) option('status_code_for_private');
if ($statusCode === 404) {
abort($statusCode, trans('skinlib.show.deleted'));
} else {
abort(403, trans('skinlib.show.private'));
}
}
}
$badges = [];
$uploader = $texture->owner;
if ($uploader) {