Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

auth checks

Browse Source
This commit is contained in:
Hemachandar
2026-01-29 18:16:04 +05:30
parent 1c77dcb793
commit 15f31237f4
1 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/shared/api.php
+25
View File
@@ -272,6 +272,14 @@ App::init()
$scopes = \array_merge($scopes, $roles[$role]['scopes']);
$authorization->addRole($role);
}
// For projects resources, ensure admin user has access to the retrieved project(s).
if ($project->getId() === 'console' && str_starts_with($route->getPath(), '/v1/projects')) {
$authorization->setDefaultStatus(true);
} else {
// Otherwise, disable authorization checks.
$authorization->setDefaultStatus(false);
}
}
$scopes = \array_unique($scopes);
@@ -281,6 +289,23 @@ App::init()
$authorization->addRole($authRole);
}
// Ensure admin user has access to the non-console project.
if ($project->getId() !== 'console' && $mode === APP_MODE_ADMIN) {
$action = match ($route->getMethod()) {
Request::METHOD_GET => Database::PERMISSION_READ,
Request::METHOD_DELETE => Database::PERMISSION_DELETE,
default => Database::PERMISSION_UPDATE,
};
$input = new Input($action, $project->getPermissionsByType($action));
$initialStatus = $authorization->getStatus();
$authorization->enable();
if (!$authorization->isValid($input)) {
throw new Exception(Exception::PROJECT_NOT_FOUND);
}
$authorization->setStatus($initialStatus);
}
// Step 6: Update project and user last activity
if (!$project->isEmpty() && $project->getId() !== 'console') {
$accessedAt = $project->getAttribute('accessedAt', 0);