rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix bad id used to call authorize

Browse Source 
Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-07-03 10:07:46 +02:00
parent 504cdc8f96
commit 7054540e9c
15 changed files with 74 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
pkg/server/api/console/v1/evidence_resolvers.go
View File

@@ -22,14 +22,14 @@ import (
// File is the resolver for the file field.
func (r *evidenceResolver) File(ctx context.Context, obj *types.Evidence) (*types.File, error) {
if _, err := r.authorize(ctx, obj.ID, probo.ActionFileGet); err != nil {
return nil, err
}
if obj.File == nil {
return nil, nil
}
if _, err := r.authorize(ctx, obj.File.ID, probo.ActionFileGet); err != nil {
return nil, err
}
loaders := dataloader.FromContext(ctx)
file, err := loaders.File.Load(ctx, obj.File.ID)
@@ -48,15 +48,15 @@ func (r *evidenceResolver) File(ctx context.Context, obj *types.Evidence) (*type
// Task is the resolver for the task field.
func (r *evidenceResolver) Task(ctx context.Context, obj *types.Evidence) (*types.Task, error) {
if _, err := r.authorize(ctx, obj.ID, probo.ActionTaskGet); err != nil {
return nil, err
}
if obj.Task == nil {
r.logger.ErrorCtx(ctx, "evidence is not associated with a task")
return nil, gqlutils.Internal(ctx)
}
if _, err := r.authorize(ctx, obj.Task.ID, probo.ActionTaskGet); err != nil {
return nil, err
}
loaders := dataloader.FromContext(ctx)
task, err := loaders.Task.Load(ctx, obj.Task.ID)
@@ -75,7 +75,7 @@ func (r *evidenceResolver) Task(ctx context.Context, obj *types.Evidence) (*type
// Measure is the resolver for the measure field.
func (r *evidenceResolver) Measure(ctx context.Context, obj *types.Evidence) (*types.Measure, error) {
if _, err := r.authorize(ctx, obj.ID, probo.ActionMeasureGet); err != nil {
if _, err := r.authorize(ctx, obj.Measure.ID, probo.ActionMeasureGet); err != nil {
return nil, err
}