From fed9d5caf3aa92d0682db4fc9160f881344065cc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Minelli?= <michael@minelli.me> Date: Thu, 6 Jul 2023 15:21:58 +0200 Subject: [PATCH] ExerciceRoutes => Create : Add check if enonce is published --- ExpressAPI/src/routes/ExerciceRoutes.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ExpressAPI/src/routes/ExerciceRoutes.ts b/ExpressAPI/src/routes/ExerciceRoutes.ts index 49ac712..657b221 100644 --- a/ExpressAPI/src/routes/ExerciceRoutes.ts +++ b/ExpressAPI/src/routes/ExerciceRoutes.ts @@ -19,6 +19,7 @@ import GitlabAccessLevel from '../shared/types/Gitlab/GitlabAccessLevel' import { Prisma } from '@prisma/client'; import { Enonce, Exercice } from '../types/DatabaseTypes'; import db from '../helpers/DatabaseHelper'; +import SecurityCheckType from '../types/SecurityCheckType'; class ExerciceRoutes implements RoutesManager { @@ -31,7 +32,7 @@ class ExerciceRoutes implements RoutesManager { }; registerOnBackend(backend: Express) { - backend.post('/enonces/:enonceNameOrUrl/exercices', SecurityMiddleware.check(true), ParamsValidatorMiddleware.validate(this.exerciceValidator), this.createExercice.bind(this)); + backend.post('/enonces/:enonceNameOrUrl/exercices', SecurityMiddleware.check(true, SecurityCheckType.ENONCE_IS_PUBLISHED), ParamsValidatorMiddleware.validate(this.exerciceValidator), this.createExercice.bind(this)); } private getExerciceName(enonce: Enonce, members: Array<GitlabUser>, suffix: number): string { -- GitLab