local-it/vikunja-api
Archived
0
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fixed CanDelete

Browse source
This commit is contained in:
konrad 2018-07-12 23:33:21 +02:00 • committed by kolaente
parent b24b245f4d
commit 55c02bc973
Signed by untrusted user who does not match committer: konrad
GPG key ID: F40E70337AB24C9B
4 changed files with 10 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
routes/crud/delete.go
View file

@ -19,7 +19,7 @@ func (c *WebHandler) DeleteWeb(ctx echo.Context) error {
if err != nil {
return echo.NewHTTPError(http.StatusInternalServerError)
}
if !c.CObject.CanDelete(&user) {
if !c.CObject.CanDelete(&user, id) {
return echo.NewHTTPError(http.StatusForbidden)
}