管理员也不能更新别人的节点
This commit is contained in:
1 parent
3e9ff99eaa
commit
17c22a8cd3
1 file changed
+2
-3
+2
-3
@@ -403,9 +403,8 @@ def update_note():
|
|||||||
|
|
||||||
data = call_db_service(DB_SERVER_URL, select_payload)
|
data = call_db_service(DB_SERVER_URL, select_payload)
|
||||||
notes = data['data']
|
notes = data['data']
|
||||||
if not info['user'] == 'admin':
|
if not len(notes) == 1 or not notes[0]['owner'] == info['user']:
|
||||||
if not len(notes) == 1 or not notes[0]['owner'] == info['user']:
|
return jsonify({"error": 'It\'s not your note'}), 403
|
||||||
return jsonify({"error": 'It\'s not your note'}), 403
|
|
||||||
|
|
||||||
# 内容审查
|
# 内容审查
|
||||||
review = review_content(title + '\n' + content, 10)
|
review = review_content(title + '\n' + content, 10)
|
||||||
|
|||||||
Reference in new issue
Block a user