chamomind/jws-backend
chamomind/jws-backend
6
0
Fork 0
Code Issues Projects 1 Releases Packages 1 Wiki Activity Actions

fix: missing auth

Browse source
This commit is contained in:
Methapon Metanipat 2024-09-06 13:23:33 +07:00
parent ebb5261b8d
commit ad26a551f0
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/controllers/01-branch-controller.ts
View file

@ -701,6 +701,7 @@ export class BranchController extends Controller {
} }
@Delete("{branchId}/line-image") @Delete("{branchId}/line-image")
@Security("keycloak", MANAGE_ROLES.concat("admin", "branch_manager"))
async deleteLineImage(@Request() req: RequestWithUser, @Path() branchId: string) { async deleteLineImage(@Request() req: RequestWithUser, @Path() branchId: string) {
const record = await prisma.branch.findUnique({ const record = await prisma.branch.findUnique({
include: { include: {
@ -773,6 +774,7 @@ export class BranchController extends Controller {
} }
@Delete("{branchId}/branch-image") @Delete("{branchId}/branch-image")
@Security("keycloak", MANAGE_ROLES.concat("admin", "branch_manager"))
async deleteBranchImage(@Request() req: RequestWithUser, @Path() branchId: string) { async deleteBranchImage(@Request() req: RequestWithUser, @Path() branchId: string) {
const record = await prisma.branch.findUnique({ const record = await prisma.branch.findUnique({
include: { include: {
@ -845,6 +847,7 @@ export class BranchController extends Controller {
} }
@Delete("{branchId}/map-image") @Delete("{branchId}/map-image")
@Security("keycloak", MANAGE_ROLES.concat("admin", "branch_manager"))
async deleteMapImage(@Request() req: RequestWithUser, @Path() branchId: string) { async deleteMapImage(@Request() req: RequestWithUser, @Path() branchId: string) {
const record = await prisma.branch.findUnique({ const record = await prisma.branch.findUnique({
include: { include: {
@ -932,6 +935,7 @@ export class BranchController extends Controller {
} }
@Delete("{branchId}/bank-qr/{bankId}") @Delete("{branchId}/bank-qr/{bankId}")
@Security("keycloak", MANAGE_ROLES.concat("admin", "branch_manager"))
async deleteImage( async deleteImage(
@Request() req: RequestWithUser, @Request() req: RequestWithUser,
@Path() branchId: string, @Path() branchId: string,