watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-18 19:45:35 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixed share page.

Browse source
This commit is contained in:
Mike Cao 2022-12-13 11:27:55 -08:00
parent cb4c8accea
commit 4c202741c2
11 changed files with 58 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

20
pages/api/websites/[id]/index.ts
View file

@ -22,13 +22,15 @@ export default async (
await useCors(req, res);
await useAuth(req, res);
const {
user: { id: userId },
} = req.auth;
const { id: websiteId } = req.query;
const { user, shareToken } = req.auth;
const userId = user?.id;
const websiteId = req.query.id;
const shared = shareToken?.websiteId === websiteId;
if (req.method === 'GET') {
if (!(await canViewWebsite(userId, websiteId))) {
const canView = await canViewWebsite(userId, websiteId);
if (!canView && !shared) {
return unauthorized(res);
}
@ -38,7 +40,9 @@ export default async (
}
if (req.method === 'POST') {
if (!(await canUpdateWebsite(userId, websiteId))) {
const canUpdate = await canUpdateWebsite(userId, websiteId);
if (!canUpdate) {
return unauthorized(res);
}
@ -56,7 +60,9 @@ export default async (
}
if (req.method === 'DELETE') {
if (!(await canDeleteWebsite(userId, websiteId))) {
const canDelete = await canDeleteWebsite(userId, websiteId);
if (!canDelete) {
return unauthorized(res);
}