mirror/DisCal-Discord-Bot
1
0
Fork 0
mirror of https://github.com/DreamExposure/DisCal-Discord-Bot.git synced 2026-02-11 05:58:26 -06:00
Code Issues Packages Projects Releases Wiki Activity

Dashboard should now verify permissions better than before.

Browse Source
This commit is contained in:
NovaFox161
2018-05-28 13:24:08 -05:00
parent 411ed24767
commit 2a2cd83b1c
2 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Website/src/main/java/com/cloudcraftgaming/discal/web/handler/DashboardHandler.java
View File

@@ -51,6 +51,12 @@ public class DashboardHandler {
wg.setDiscalRole(PermissionChecker.hasSufficientRole(g, u));
wg.setManageServer(PermissionChecker.hasManageServerRole(g, u));
if (!(wg.isManageServer() || wg.isDiscalRole())) {
//Insufficient perms to edit that guild.
response.redirect("/dashboard", 301);
return response.body();
}
m.remove("selected");
m.put("selected", wg);

27
Website/src/main/resources/web/public/pages/dashboard/dashboard.html
View File

@@ -41,20 +41,35 @@
<h3>Select a guild below!</h3>
<!--TODO: IF YOU CAN MAKE THIS LOOP WORK WITH THE METHOD CALL I WILL PAY YOU-->
<!--TODO: Do this in JS so that it is dynamic!!!-->
<th:block th:each="guild : ${guilds}">
<!--TODO: Remove patron/dev only on full release-->
<th:block th:if="${guild.settings.patronGuild} == true or ${guild.settings.devGuild} == true">
<form method="post" action="/api/v1/dashboard/select/guild">
<input type="hidden" name="guild" th:value="${guild.id}">
<button type="submit" class="guild" th:text="${guild.name}"></button>
</form>
<br>
<th:block th:if="${guild.manageServer} == true or ${guild.discalRole} == true">
<form method="post" action="/api/v1/dashboard/select/guild">
<input type="hidden" name="guild" th:value="${guild.id}">
<button type="submit" class="guild" th:text="${guild.name}"></button>
</form>
<br>
</th:block>
<th:block th:unless="${guild.manageServer} == true or ${guild.discalRole} == true">
<form method="post" action="" disabled="true">
<input type="hidden" name="guild" th:value="${guild.id}">
<button disabled type="submit" class="guild" th:text="${guild.name}"></button>
</form>
<br>
</th:block>
</th:block>
</th:block>
<br>
<br>
<br>
<p>*Guild not listed? Until the full release, only patron guilds are supported!</p>
<p>
*Guild not listed? Until the full release, only patron guilds are supported!
<br>
**Button grayed out/not working? You don't have high enough permissions to manage that server!
</p>
</div>
<div th:unless="${loggedIn}">
<h1>YOU ARE NOT LOGGED IN!</h1>