Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-10 07:55:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

test: additional tests for #12034

Browse Source
This commit is contained in:
Julian Lam
2023-09-26 13:37:43 -04:00
parent bdc221eb37
commit d7e9f32412
2 changed files with 69 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/middleware/user.js
View File

@@ -289,17 +289,20 @@ module.exports = function (middleware) {
}
let cid;
let privilege;
if (req.params.hasOwnProperty('category_id')) {
cid = req.params.category_id;
privilege = 'read';
} else if (req.params.hasOwnProperty('topic_id')) {
cid = await topics.getTopicField(req.params.topic_id, 'cid');
privilege = 'topics:read';
} else {
return false; // not a category or topic url, no check required
}
const [registeredAllowed, verifiedAllowed] = await Promise.all([
privilegeHelpers.isAllowedTo(['read'], 'registered-users', cid),
privilegeHelpers.isAllowedTo(['read'], 'verified-users', cid),
privilegeHelpers.isAllowedTo([privilege], 'registered-users', cid),
privilegeHelpers.isAllowedTo([privilege], 'verified-users', cid),
]);
return !registeredAllowed.pop() && verifiedAllowed.pop();