mirror of
https://github.com/appwrite/appwrite.git
synced 2026-05-26 13:51:13 +00:00
updated scopes
This commit is contained in:
+1
-1
@@ -112,8 +112,8 @@ use Appwrite\Utopia\Response\Model\PlatformLinux;
|
||||
use Appwrite\Utopia\Response\Model\PlatformList;
|
||||
use Appwrite\Utopia\Response\Model\PlatformWeb;
|
||||
use Appwrite\Utopia\Response\Model\PlatformWindows;
|
||||
use Appwrite\Utopia\Response\Model\Presence;
|
||||
use Appwrite\Utopia\Response\Model\Preferences;
|
||||
use Appwrite\Utopia\Response\Model\Presence;
|
||||
use Appwrite\Utopia\Response\Model\Project;
|
||||
use Appwrite\Utopia\Response\Model\Provider;
|
||||
use Appwrite\Utopia\Response\Model\ProviderRepository;
|
||||
|
||||
@@ -13,10 +13,10 @@ use Utopia\Database\Validator\Authorization;
|
||||
|
||||
class Action extends PlatformAction
|
||||
{
|
||||
public function setPermission(Document $document, ?array $permissions, Document $user, Authorization $authorization): Document
|
||||
public function setPermission(Document $document, ?array $permissions, User $user, Authorization $authorization): Document
|
||||
{
|
||||
$isAPIKey = User::isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = User::isPrivileged($authorization->getRoles());
|
||||
$isAPIKey = $user->isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = $user->isPrivileged($authorization->getRoles());
|
||||
|
||||
$allowedPermissions = [
|
||||
Database::PERMISSION_READ,
|
||||
|
||||
@@ -30,7 +30,7 @@ class Delete extends Base
|
||||
->setHttpPath('/v1/presences/:presenceId')
|
||||
->desc('Delete presence')
|
||||
->groups(['api', 'presences'])
|
||||
->label('scope', 'users.write')
|
||||
->label('scope', 'documents.write')
|
||||
->label('sdk', new Method(
|
||||
namespace: 'presences',
|
||||
group: 'presences',
|
||||
|
||||
@@ -29,7 +29,7 @@ class Get extends Base
|
||||
->setHttpPath('/v1/presences/:presenceId')
|
||||
->desc('Get presence')
|
||||
->groups(['api', 'presences'])
|
||||
->label('scope', 'users.read')
|
||||
->label('scope', 'documents.read')
|
||||
->label('sdk', new Method(
|
||||
namespace: 'presences',
|
||||
group: 'presences',
|
||||
|
||||
@@ -34,7 +34,7 @@ class Update extends PresenceAction
|
||||
->setHttpPath('/v1/presences/:presenceId')
|
||||
->desc('Update presence')
|
||||
->groups(['api', 'presences'])
|
||||
->label('scope', 'users.write')
|
||||
->label('scope', 'documents.write')
|
||||
->label('sdk', new Method(
|
||||
namespace: 'presences',
|
||||
group: 'presences',
|
||||
@@ -70,11 +70,11 @@ class Update extends PresenceAction
|
||||
?array $permissions,
|
||||
Response $response,
|
||||
Database $dbForProject,
|
||||
Document $user,
|
||||
User $user,
|
||||
Authorization $authorization
|
||||
): void {
|
||||
$isAPIKey = User::isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = User::isPrivileged($authorization->getRoles());
|
||||
$isAPIKey = $user->isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = $user->isPrivileged($authorization->getRoles());
|
||||
|
||||
if ($userId && !$isAPIKey && !$isPrivilegedUser) {
|
||||
throw new Exception(Exception::GENERAL_UNAUTHORIZED_SCOPE, 'userId is not allowed for non-API key and non-privileged users');
|
||||
|
||||
@@ -40,7 +40,7 @@ class Upsert extends PresenceAction
|
||||
->setHttpPath('/v1/presences/:presenceId')
|
||||
->desc('Upsert presence')
|
||||
->groups(['api', 'presences'])
|
||||
->label('scope', 'users.write')
|
||||
->label('scope', 'documents.write')
|
||||
->label('sdk', new Method(
|
||||
namespace: 'presences',
|
||||
group: 'presences',
|
||||
@@ -77,11 +77,11 @@ class Upsert extends PresenceAction
|
||||
array $metadata,
|
||||
Response $response,
|
||||
Database $dbForProject,
|
||||
Document $user,
|
||||
User $user,
|
||||
Authorization $authorization
|
||||
): void {
|
||||
$isAPIKey = User::isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = User::isPrivileged($authorization->getRoles());
|
||||
$isAPIKey = $user->isApp($authorization->getRoles());
|
||||
$isPrivilegedUser = $user->isPrivileged($authorization->getRoles());
|
||||
if ($userId && !$isAPIKey && !$isPrivilegedUser) {
|
||||
throw new Exception(Exception::GENERAL_UNAUTHORIZED_SCOPE, "userId is not allowed for non-API key and non-privileged users");
|
||||
}
|
||||
|
||||
@@ -37,7 +37,7 @@ class XList extends Base
|
||||
->setHttpPath('/v1/presences')
|
||||
->desc('List presences')
|
||||
->groups(['api', 'presences'])
|
||||
->label('scope', 'users.read')
|
||||
->label('scope', 'documents.read')
|
||||
->label('sdk', new Method(
|
||||
namespace: 'presences',
|
||||
group: 'presences',
|
||||
|
||||
Reference in New Issue
Block a user