improve security.

2019-08-30 22:32:30 +02:00
parent f5bff403f0
commit 9e88b33595
14 changed files with 109 additions and 39 deletions
--- a/src/main/kotlin/fr/dcproject/routes/CommentArticle.kt
+++ b/src/main/kotlin/fr/dcproject/routes/CommentArticle.kt
@@ -27,10 +27,8 @@ object CommentArticlePaths {
@KtorExperimentalLocationsAPI
 fun Route.commentArticle(repo: CommentArticleRepository) {
    get<CommentArticlePaths.ArticleCommentRequest> {
-        assertCan(VIEW, it.article)
-
        val comment = repo.findByTarget(it.article)
-
+        assertCan(VIEW, comment.result)
        call.respond(HttpStatusCode.OK, comment)
    }

@@ -50,6 +48,7 @@ fun Route.commentArticle(repo: CommentArticleRepository) {

    get<CommentArticlePaths.CitizenCommentArticleRequest> {
        val comments = repo.findByCitizen(it.citizen)
+        assertCan(VIEW, comments.result)
        call.respond(comments)
    }
 }