feat: [#615] authorization layer added for add torrent method of the …

…torrent service
torrust · Aug 3, 2024 · b5171bf · b5171bf
1 parent 1c607c2
commit b5171bf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/src/services/authorization.rs b/src/services/authorization.rs
@@ -45,6 +45,7 @@ pub enum ACTION {
     GetLicensePage,
     GetImageByUrl,
     GetPublicSettings,
+    AddTorrent,
 }
 
 pub struct Service {
@@ -184,10 +185,12 @@ impl CasbinConfiguration {
                 admin, DeleteTorrent
                 admin, BanUser
                 admin, GetImageByUrl
+                admin, AddTorrent
                 registered, GetCategories
                 registered, GetImageByUrl
                 registered, GetPublicSettings
                 registered, GetTags
+                registered, AddTorrent
                 guest, GetCategories
                 guest, GetTags
                 guest, GetAboutPage

diff --git a/src/services/torrent.rs b/src/services/torrent.rs
@@ -134,8 +134,9 @@ impl Index {
         add_torrent_req: AddTorrentRequest,
         user_id: UserId,
     ) -> Result<AddTorrentResponse, ServiceError> {
-        // Guard that the users exists
-        let _user = self.user_repository.get_compact(&user_id).await?;
+        self.authorization_service
+            .authorize(ACTION::AddTorrent, Some(user_id))
+            .await?;
 
         let metadata = self.validate_and_build_metadata(&add_torrent_req).await?;