search

cesium / atomic

⚛️ De-engineered bifurcarted intranet
MIT License
39 stars 8 forks source link

fix: security flaw with routes protection #416

Closed joaodiaslobo closed 11 months ago

joaodiaslobo commented 12 months ago

Fixes #414

image

reviewpad[bot] commented 12 months ago

AI-Generated Summary: This pull request introduces the functionality to check if the object being accessed has a defined association with the organization in question. The patch adds a plug called 'VerifyAssociation', which validates the association based on the connection parameters supplied. This patch also removes an old exceptions file and modifies the router: several new pipelines with aforementioned plug are added for routes such as "confirm_announcement_association", "confirm_board_association", etc. These pipelines are then used in various scopes in the router ensuring that right authorization and association checks are made. It also modifies how routes are organized for better structure. The total modification includes 135 insertions and 38 deletions across three files.