working commit

app/handler/grant.go

@@ -10,6 +10,9 @@
 package handler
 
 import (
+	"fmt"
+
+	"mstore/app/descr"
 	"mstore/app/operator"
 	"mstore/app/router"
 )
@@ -24,6 +27,20 @@ func (hand *Handler) CreateGrant(rctx *router.Context) {
 		hand.SendError(rctx, err)
 		return
 	}
+	// Rigth checking
+	operatorID, _ := rctx.GetString(userTag)
+	opEnable, err := hand.CheckRight(rctx.Ctx, operatorID, descr.RightWriteGrants, "")
+	if err != nil {
+		err := fmt.Errorf("Operation error: %v", err)
+		hand.SendError(rctx, err)
+		return
+	}
+	if !opEnable {
+		err := fmt.Errorf("Operation not enabled for this account")
+		hand.SendError(rctx, err)
+		return
+	}
+	// Execution of the operation
 	res, err := hand.oper.CreateGrant(rctx.Ctx, params)
 	if err != nil {
 		hand.logg.Errorf("CreateGrant error: %v", err)
@@ -43,6 +60,20 @@ func (hand *Handler) GetGrant(rctx *router.Context) {
 		hand.SendError(rctx, err)
 		return
 	}
+	// Rigth checking
+	operatorID, _ := rctx.GetString(userTag)
+	opEnable, err := hand.CheckRight(rctx.Ctx, operatorID, descr.RightReadGrants, "")
+	if err != nil {
+		err := fmt.Errorf("Operation error: %v", err)
+		hand.SendError(rctx, err)
+		return
+	}
+	if !opEnable {
+		err := fmt.Errorf("Operation not enabled for this account")
+		hand.SendError(rctx, err)
+		return
+	}
+	// Execution of the operation
 	res, err := hand.oper.GetGrant(rctx.Ctx, params)
 	if err != nil {
 		hand.logg.Errorf("CreateGrant error: %v", err)
@@ -62,6 +93,20 @@ func (hand *Handler) ListGrants(rctx *router.Context) {
 		hand.SendError(rctx, err)
 		return
 	}
+	// Rigth checking
+	operatorID, _ := rctx.GetString(userTag)
+	opEnable, err := hand.CheckRight(rctx.Ctx, operatorID, descr.RightReadGrants, "")
+	if err != nil {
+		err := fmt.Errorf("Operation error: %v", err)
+		hand.SendError(rctx, err)
+		return
+	}
+	if !opEnable {
+		err := fmt.Errorf("Operation not enabled for this account")
+		hand.SendError(rctx, err)
+		return
+	}
+	// Execution of the operation
 	res, err := hand.oper.ListGrants(rctx.Ctx, params)
 	if err != nil {
 		hand.logg.Errorf("ListGrants error: %v", err)
@@ -81,6 +126,20 @@ func (hand *Handler) UpdateGrant(rctx *router.Context) {
 		hand.SendError(rctx, err)
 		return
 	}
+	// Rigth checking
+	operatorID, _ := rctx.GetString(userTag)
+	opEnable, err := hand.CheckRight(rctx.Ctx, operatorID, descr.RightWriteGrants, "")
+	if err != nil {
+		err := fmt.Errorf("Operation error: %v", err)
+		hand.SendError(rctx, err)
+		return
+	}
+	if !opEnable {
+		err := fmt.Errorf("Operation not enabled for this account")
+		hand.SendError(rctx, err)
+		return
+	}
+	// Execution of the operation
 	res, err := hand.oper.UpdateGrant(rctx.Ctx, params)
 	if err != nil {
 		hand.logg.Errorf("UpdateGrant error: %v", err)
@@ -100,6 +159,20 @@ func (hand *Handler) DeleteGrant(rctx *router.Context) {
 		hand.SendError(rctx, err)
 		return
 	}
+	// Rigth checking
+	operatorID, _ := rctx.GetString(userTag)
+	opEnable, err := hand.CheckRight(rctx.Ctx, operatorID, descr.RightWriteGrants, "")
+	if err != nil {
+		err := fmt.Errorf("Operation error: %v", err)
+		hand.SendError(rctx, err)
+		return
+	}
+	if !opEnable {
+		err := fmt.Errorf("Operation not enabled for this account")
+		hand.SendError(rctx, err)
+		return
+	}
+	// Execution of the operation
 	res, err := hand.oper.DeleteGrant(rctx.Ctx, params)
 	if err != nil {
 		hand.logg.Errorf("DeleteGrant error: %v", err)