Ver código fonte

i can only edit my blog, not others

fengchang 1 ano atrás
pai
commit
5cdba4f560

+ 5 - 0
hichina-main-back/src/main/java/com/hichina/main/back/hichinamainback/controller/BlogController.java

@@ -155,6 +155,11 @@ public class BlogController {
         }
         Blog blog = blogs.get(0);
 
+        User user = UserUtil.getUserByCurrentPrincipal(userMapper, UserController.currentUser());
+        if(!blog.getUserId().equals(user.getUserId())){
+            throw new RuntimeException("You can only edit your blog, not others' blog");
+        }
+
         blog.setTitle(request.getTitle());
         blog.setContent(request.getContent());
         blog.setHeadImageUrl(request.getHeadImageUrl());