diff --git a/ExpressAPI/src/middlewares/SecurityMiddleware.ts b/ExpressAPI/src/middlewares/SecurityMiddleware.ts index 4beeee714819ca329ac019fc03557a9f1b31cfcb..85a60561c690c4be012c9444d0e01251ddc150bc 100644 --- a/ExpressAPI/src/middlewares/SecurityMiddleware.ts +++ b/ExpressAPI/src/middlewares/SecurityMiddleware.ts @@ -28,6 +28,9 @@ class SecurityMiddleware { case SecurityCheckType.ENONCE_STAFF: isAllowed = isAllowed || await EnonceManager.isUserAllowedToAccessEnonce(req.boundParams.enonce, req.session.profile); break; + case SecurityCheckType.ENONCE_IS_PUBLISHED: + isAllowed = isAllowed || req.boundParams.enonce.published; + break; default: isAllowed = isAllowed || false; break; diff --git a/ExpressAPI/src/types/SecurityCheckType.ts b/ExpressAPI/src/types/SecurityCheckType.ts index 32a1592d046e2dd2e002dcb5b203fad5882ce1d9..fcb3a6d0c86ca6aed44dfaa0df6f05201e770b62 100644 --- a/ExpressAPI/src/types/SecurityCheckType.ts +++ b/ExpressAPI/src/types/SecurityCheckType.ts @@ -1,6 +1,7 @@ enum SecurityCheckType { - TEACHING_STAFF = 'teachingStaff', - ENONCE_STAFF = 'enonceStaff' + TEACHING_STAFF = 'teachingStaff', + ENONCE_STAFF = 'enonceStaff', + ENONCE_IS_PUBLISHED = 'enonceIsPublished', }