nik/navidrome
1
0
Fork 0
mirror of https://github.com/navidrome/navidrome.git synced 2026-05-03 06:51:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

enforce admin user requirement in context for command execution

Browse Source 
Signed-off-by: Deluan <deluan@navidrome.org>
This commit is contained in:
Deluan 2025-12-03 19:53:26 -05:00
parent 5c7e35b793
commit 2178a57f8c
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
cmd/utils.go
View File

@ -7,14 +7,21 @@ import (
"github.com/navidrome/navidrome/core/auth" "github.com/navidrome/navidrome/core/auth"
"github.com/navidrome/navidrome/db" "github.com/navidrome/navidrome/db"
"github.com/navidrome/navidrome/log"
"github.com/navidrome/navidrome/model" "github.com/navidrome/navidrome/model"
"github.com/navidrome/navidrome/model/request"
"github.com/navidrome/navidrome/persistence" "github.com/navidrome/navidrome/persistence"
) )
func getAdminContext(ctx context.Context) (model.DataStore, context.Context) { func getAdminContext(ctx context.Context) (model.DataStore, context.Context) {
sqlDB := db.Db() sqlDB := db.Db()
ds := persistence.New(sqlDB) ds := persistence.New(sqlDB)
return ds, auth.WithAdminUser(ctx, ds) ctx = auth.WithAdminUser(ctx, ds)
u, _ := request.UserFrom(ctx)
if !u.IsAdmin {
log.Fatal(ctx, "There must be at least one admin user to run this command.")
}
return ds, ctx
} }
func getUser(ctx context.Context, id string, ds model.DataStore) (*model.User, error) { func getUser(ctx context.Context, id string, ds model.DataStore) (*model.User, error) {