fix platform authorization and workflow integrity
This commit is contained in:
@@ -118,6 +118,16 @@ func UpdateUserServiceRelation(ctx *gin.Context) {
|
||||
if !ok {
|
||||
return
|
||||
}
|
||||
var current models.UserServiceRelation
|
||||
if err := common.ActiveRecords(impl.DBService).Select("user_account_id").
|
||||
Where("identity = ?", ctx.Param("identity")).First(¤t).Error; err != nil {
|
||||
common.RespondRecordError(ctx, err)
|
||||
return
|
||||
}
|
||||
if current.UserAccountID != userAccountID {
|
||||
infra.Response.Error(ctx, errcode.ErrInvalidArgument)
|
||||
return
|
||||
}
|
||||
common.UpdateAllowedByIdentity(ctx, &models.UserServiceRelation{}, gin.H{"user_account_id": userAccountID, "gas_basic_id": gasBasicID, "delivery_basic_id": deliveryBasicID, "staff_account_id": staffAccountID}, []string{"user_account_id", "gas_basic_id", "delivery_basic_id", "staff_account_id"})
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user