Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-20 02:00:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(controller): enforce ownership on notification group, NAT server, and batch move

Browse Source 
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
This commit is contained in:
naiba
2026-05-17 10:24:19 +08:00
co-authored by naiba/CloudCode
parent 423175a425
commit a5995ce045
6 changed files with 109 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/dashboard/controller/nat.go
+18 -8
View File
@@ -53,10 +53,15 @@ func createNAT(c *gin.Context) (uint64, error) {
return 0, err
}
if server, ok := singleton.ServerShared.Get(nf.ServerID); ok {
if !server.HasPermission(c) {
return 0, singleton.Localizer.ErrorT("permission denied")
}
if nf.ServerID == 0 {
return 0, singleton.Localizer.ErrorT("have invalid server id")
}
server, ok := singleton.ServerShared.Get(nf.ServerID)
if !ok {
return 0, singleton.Localizer.ErrorT("have invalid server id")
}
if !server.HasPermission(c) {
return 0, singleton.Localizer.ErrorT("permission denied")
}
uid := getUid(c)
@@ -101,10 +106,15 @@ func updateNAT(c *gin.Context) (any, error) {
return nil, err
}
if server, ok := singleton.ServerShared.Get(nf.ServerID); ok {
if !server.HasPermission(c) {
return nil, singleton.Localizer.ErrorT("permission denied")
}
if nf.ServerID == 0 {
return nil, singleton.Localizer.ErrorT("have invalid server id")
}
server, ok := singleton.ServerShared.Get(nf.ServerID)
if !ok {
return nil, singleton.Localizer.ErrorT("have invalid server id")
}
if !server.HasPermission(c) {
return nil, singleton.Localizer.ErrorT("permission denied")
}
var n model.NAT