add internal feign key
This commit is contained in:
@@ -4,11 +4,9 @@ import feign.FeignException;
|
|||||||
import jakarta.servlet.http.HttpServletRequest;
|
import jakarta.servlet.http.HttpServletRequest;
|
||||||
import lombok.RequiredArgsConstructor;
|
import lombok.RequiredArgsConstructor;
|
||||||
import lombok.extern.slf4j.Slf4j;
|
import lombok.extern.slf4j.Slf4j;
|
||||||
import org.springframework.http.HttpHeaders;
|
|
||||||
import org.springframework.http.HttpStatus;
|
import org.springframework.http.HttpStatus;
|
||||||
import org.springframework.http.ResponseEntity;
|
import org.springframework.http.ResponseEntity;
|
||||||
import org.springframework.web.bind.annotation.*;
|
import org.springframework.web.bind.annotation.*;
|
||||||
import org.springframework.web.servlet.mvc.method.annotation.StreamingResponseBody;
|
|
||||||
import ru.soune.nocopy.adminpanel.client.DashBoardAppClient;
|
import ru.soune.nocopy.adminpanel.client.DashBoardAppClient;
|
||||||
import ru.soune.nocopy.adminpanel.dto.BaseRequest;
|
import ru.soune.nocopy.adminpanel.dto.BaseRequest;
|
||||||
import ru.soune.nocopy.adminpanel.dto.BaseResponse;
|
import ru.soune.nocopy.adminpanel.dto.BaseResponse;
|
||||||
@@ -17,8 +15,6 @@ import ru.soune.nocopy.adminpanel.handler.RequestHandler;
|
|||||||
import ru.soune.nocopy.adminpanel.service.AdminSectionPermissionService;
|
import ru.soune.nocopy.adminpanel.service.AdminSectionPermissionService;
|
||||||
import ru.soune.nocopy.adminpanel.util.MessageCode;
|
import ru.soune.nocopy.adminpanel.util.MessageCode;
|
||||||
|
|
||||||
import java.io.IOException;
|
|
||||||
import java.io.OutputStream;
|
|
||||||
import java.util.Map;
|
import java.util.Map;
|
||||||
|
|
||||||
@RestController
|
@RestController
|
||||||
@@ -125,7 +121,7 @@ public class AdminController {
|
|||||||
public ResponseEntity<byte[]> downloadFile(@PathVariable String fileId) {
|
public ResponseEntity<byte[]> downloadFile(@PathVariable String fileId) {
|
||||||
Long currentUserId = (Long) httpServletRequest.getAttribute("userId");
|
Long currentUserId = (Long) httpServletRequest.getAttribute("userId");
|
||||||
|
|
||||||
if (!adminSectionPermissionService.canRead(currentUserId, AdminSection.USERS)) {
|
if (!adminSectionPermissionService.canRead(currentUserId, AdminSection.CONTENT_MODERATION)) {
|
||||||
return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
|
return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user