fix: use mod ID in version edit permission check (#107)

mircearoata · web-flow · commit f82f620438f0 · 2025-01-07T02:49:30.000+02:00
diff --git a/gql/directive.go b/gql/directive.go
@@ -78,7 +78,13 @@ func canEditVersion(ctx context.Context, _ interface{}, next graphql.Resolver, f
 		return nil, err
 	}
 
-	if db.UserCanUploadModVersions(ctx, user, getArgument(ctx, field).(string)) {
+	versionID := getArgument(ctx, field).(string)
+	version, err := db.From(ctx).Version.Get(ctx, versionID)
+	if err != nil {
+		return nil, err
+	}
+
+	if db.UserCanUploadModVersions(ctx, user, version.ModID) {
 		return next(ctx)
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -78,7 +78,13 @@ func canEditVersion(ctx context.Context, _ interface{}, next graphql.Resolver, f`
`78`	`78`	`return nil, err`
`79`	`79`	`}`
`80`	`80`
`81`		`- if db.UserCanUploadModVersions(ctx, user, getArgument(ctx, field).(string)) {`
	`81`	`+ versionID := getArgument(ctx, field).(string)`
	`82`	`+ version, err := db.From(ctx).Version.Get(ctx, versionID)`
	`83`	`+ if err != nil {`
	`84`	`+ return nil, err`
	`85`	`+ }`
	`86`	`+`
	`87`	`+ if db.UserCanUploadModVersions(ctx, user, version.ModID) {`
`82`	`88`	`return next(ctx)`
`83`	`89`	`}`
`84`	`90`