CodeMirror/appwrite
1
0
Fork 0
mirror of synced 2024-06-23 08:40:58 +12:00
Code Issues Projects Releases Wiki Activity

Allow permission reset

Browse source
This commit is contained in:
Eldad Fux 2021-03-15 00:33:59 +02:00
parent bfaf670b4e
commit b69deb594d
1 changed files with 2 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
app/controllers/api/database.php
View file

@ -535,20 +535,12 @@ App::patch('/v1/database/collections/:collectionId/documents/:documentId')
throw new Exception('No document found', 404);
}
//TODO check merge read write permissions
if (!empty($read)) { // Overwrite permissions only when passed
$data['$permissions']['read'] = $read;
}
if (!empty($write)) { // Overwrite permissions only when passed
$data['$permissions']['write'] = $write;
}
$data = \array_merge($document->getArrayCopy(), $data);
$data['$collection'] = $collection->getId(); // Make sure user don't switch collectionID
$data['$id'] = $document->getId(); // Make sure user don't switch document unique ID
$data['$permissions']['read'] = $read;
$data['$permissions']['write'] = $write;
if (empty($data)) {
throw new Exception('Missing payload', 400);