michael/merlyn
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Apply permissioning on document modification endpoints (#637)

Browse Source
This commit is contained in:
Timothy Carambat 2024-01-22 14:31:19 -08:00 committed by GitHub
parent 9a237db3d1
commit d5cde8b7c2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 15 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
server/endpoints/system.js
View File

@ -189,7 +189,7 @@ function systemEndpoints(app) {
app.get( app.get(
"/system/system-vectors", "/system/system-vectors",
[validatedRequest], [validatedRequest, flexUserRoleValid([ROLES.admin, ROLES.manager])],
async (request, response) => { async (request, response) => {
try { try {
const query = queryParams(request); const query = queryParams(request);
@ -207,7 +207,7 @@ function systemEndpoints(app) {
app.delete( app.delete(
"/system/remove-document", "/system/remove-document",
[validatedRequest], [validatedRequest, flexUserRoleValid([ROLES.admin, ROLES.manager])],
async (request, response) => { async (request, response) => {
try { try {
const { name } = reqBody(request); const { name } = reqBody(request);
@ -222,7 +222,7 @@ function systemEndpoints(app) {
app.delete( app.delete(
"/system/remove-folder", "/system/remove-folder",
[validatedRequest], [validatedRequest, flexUserRoleValid([ROLES.admin, ROLES.manager])],
async (request, response) => { async (request, response) => {
try { try {
const { name } = reqBody(request); const { name } = reqBody(request);
@ -235,15 +235,19 @@ function systemEndpoints(app) {
} }
); );
app.get("/system/local-files", [validatedRequest], async (_, response) => { app.get(
try { "/system/local-files",
const localFiles = await viewLocalFiles(); [validatedRequest, flexUserRoleValid([ROLES.admin, ROLES.manager])],
response.status(200).json({ localFiles }); async (_, response) => {
} catch (e) { try {
console.log(e.message, e); const localFiles = await viewLocalFiles();
response.sendStatus(500).end(); response.status(200).json({ localFiles });
} catch (e) {
console.log(e.message, e);
response.sendStatus(500).end();
}
} }
}); );
app.get( app.get(
"/system/document-processing-status", "/system/document-processing-status",