فهرست منبع

view 권한 없는 경우 이미지도 안 나오게

https://github.com/openNAMU/openNAMU/issues/2126
잉여개발기 (SPDV) 2 سال پیش
والد
کامیت
ce816f831c
3فایلهای تغییر یافته به همراه13 افزوده شده و 9 حذف شده
  1. 1 0
      route/main_view.py
  2. 11 8
      route/main_view_image.py
  3. 1 1
      version.json

+ 1 - 0
route/main_view.py

@@ -1,4 +1,5 @@
 from .tool.func import *
+
 from .main_func_error_404 import main_func_error_404
 
 def main_view(name = ''):

+ 11 - 8
route/main_view_image.py

@@ -3,13 +3,16 @@ from .main_func_error_404 import main_func_error_404
 
 def main_view_image(name = ''):
     with get_db_connect() as conn:
-        name = re.sub(r'\.cache_v(?:[0-9]+)$', '', name)
-        mime_type = re.search(r'([^.]+)$', name)
-        if mime_type:
-            mime_type = mime_type.group(1).lower()
-            if mime_type == 'svg':
-                mime_type = 'svg+xml'
+        if acl_check(conn, '', 'render') != 1:
+            name = re.sub(r'\.cache_v(?:[0-9]+)$', '', name)
+            mime_type = re.search(r'([^.]+)$', name)
+            if mime_type:
+                mime_type = mime_type.group(1).lower()
+                if mime_type == 'svg':
+                    mime_type = 'svg+xml'
 
-            return flask.send_from_directory('./' + load_image_url(conn), name, mimetype = 'image/' + mime_type)
+                return flask.send_from_directory('./' + load_image_url(conn), name, mimetype = 'image/' + mime_type)
+            else:
+                return main_func_error_404()
         else:
-            return main_func_error_404()
+            return re_error(conn, '/ban')

+ 1 - 1
version.json

@@ -1,6 +1,6 @@
 {
     "beta" : {
-        "r_ver" : "v3.5.0-dev58",
+        "r_ver" : "v3.5.0-dev59",
         "c_ver" : "3500376",
         "s_ver" : "3500113"
     }