Comunic/ComunicAPI
1
0
Fork 0
mirror of https://github.com/pierre42100/ComunicAPI synced 2025-06-19 00:25:18 +00:00
Code Issues Projects Releases Wiki Activity

Upgraded groups visibility system.

Browse Source
This commit is contained in:
Pierre HUBERT
2018-07-04 17:28:29 +02:00
parent e8d8fffbd1
commit 796a325590
4 changed files with 144 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
functions/requests.php
View File

@ -570,7 +570,7 @@ function getPostUserDirectory(string $name) : string {
*
* @param string $name The name of variable in the $_POST request
* @return int The ID of the group
* @throws RESTException If the directory is missing
* @throws RESTException If the value is missing
*/
function getPostGroupId(string $name) : int {
@ -583,4 +583,30 @@ function getPostGroupId(string $name) : int {
//Return the ID of the group
return $id;
}
/**
* Get a POST group ID with a check for the minimal access requested
*
* @param string $name The name of the post field containing group ID
* @param int $minAccess The minimal access required
* @return int The ID of the group
*/
function getPostGroupIdWithAccess(string $name, int $minVisibility) : int {
//Get the ID of the group
$groupID = getPostGroupId($name);
//Get the access level of the current user over the group
$accessLevel = components()->groups->getAccessLevel($groupID, userID);
//Check if the user has no access
if($accessLevel == GroupInfo::NO_ACCESS)
Rest_fatal_error(404, "Specified group does not exists !"); //Act like if the group did not exists
//Check access level
if($accessLevel < $minVisibility)
Rest_fatal_error(401, "You do not have enough rights to perform what you intend to do on this group!");
return $groupID;
}