Should return 403 when user tries to access project they are not a part of

tnc-ca-geo / animl-api

Backend for https://animl.camera

Other

4 stars 0 forks source link

Should return 403 when user tries to access project they are not a part of #193

Open jue-henry opened 4 months ago

jue-henry commented 4 months ago

Currently the GetImages, GetImageById, and GetImageCount APIs do not have any permissions checking. We need to add this additional check for the correct project to /src/api/db/models/utils.js's hasRole function