MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Renames

This commit is contained in:
Adria Navarro 2023-07-31 10:50:33 +02:00
parent 4c11a6593c
commit 97f7629345
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/server/src/api/routes/row.ts
View File

@ -4,7 +4,7 @@ import authorized from "../../middleware/authorized"
import { paramResource, paramSubResource } from "../../middleware/resourceId" import { paramResource, paramSubResource } from "../../middleware/resourceId"
import { permissions } from "@budibase/backend-core" import { permissions } from "@budibase/backend-core"
import { internalSearchValidator } from "./utils/validators" import { internalSearchValidator } from "./utils/validators"
import guardViewRowInfo from "../../middleware/guardViewRowInfo" import noViewData from "../../middleware/noViewData"
const { PermissionType, PermissionLevel } = permissions const { PermissionType, PermissionLevel } = permissions
const router: Router = new Router() const router: Router = new Router()
@ -175,7 +175,7 @@ router
"/api/:tableId/rows", "/api/:tableId/rows",
paramResource("tableId"), paramResource("tableId"),
authorized(PermissionType.TABLE, PermissionLevel.WRITE), authorized(PermissionType.TABLE, PermissionLevel.WRITE),
guardViewRowInfo(), noViewData(),
rowController.save rowController.save
) )
/** /**
@ -190,7 +190,7 @@ router
"/api/:tableId/rows", "/api/:tableId/rows",
paramResource("tableId"), paramResource("tableId"),
authorized(PermissionType.TABLE, PermissionLevel.WRITE), authorized(PermissionType.TABLE, PermissionLevel.WRITE),
guardViewRowInfo(), noViewData(),
rowController.patch rowController.patch
) )
/** /**

5
packages/server/src/middleware/guardViewRowInfo.ts → packages/server/src/middleware/noViewData.ts
View File

@ -1,12 +1,9 @@
import { Ctx, Row } from "@budibase/types" import { Ctx, Row } from "@budibase/types"
const checkNoViewData = async (ctx: Ctx<Row>) => { export default () => async (ctx: Ctx<Row>, next: any) => {
if (ctx.request.body._viewId) { if (ctx.request.body._viewId) {
ctx.throw(400, "Table row endpoints cannot contain view info") ctx.throw(400, "Table row endpoints cannot contain view info")
} }
}
export default () => async (ctx: any, next: any) => {
await checkNoViewData(ctx)
return next() return next()
} }