feat: [#615] authorization layer added to the get torrent info method of the torrent service

mario-nt · mario-nt · commit f8e75709c1a0 · 2024-08-03T16:33:10.000+02:00
diff --git a/src/services/authorization.rs b/src/services/authorization.rs
@@ -49,6 +49,7 @@ pub enum ACTION {
     AddTorrent,
     GetCanonicalInfoHash,
     GenerateTorrentInfoListing,
+    GetTorrentInfo,
 }
 
 pub struct Service {
@@ -192,6 +193,7 @@ impl CasbinConfiguration {
                 admin, AddTorrent
                 admin, GetCanonicalInfoHash
                 admin, GenerateTorrentInfoListing
+                admin, GetTorrentInfo
                 registered, GetCategories
                 registered, GetImageByUrl
                 registered, GetPublicSettings
@@ -200,6 +202,7 @@ impl CasbinConfiguration {
                 registered, AddTorrent
                 registered, GetCanonicalInfoHash
                 registered, GenerateTorrentInfoListing
+                registered, GetTorrentInfo
                 guest, GetCategories
                 guest, GetTags
                 guest, GetAboutPage
@@ -208,6 +211,7 @@ impl CasbinConfiguration {
                 guest, GetTorrent
                 guest, GetCanonicalInfoHash
                 guest, GenerateTorrentInfoListing
+                guest, GetTorrentInfo
                 ",
             ),
         }
diff --git a/src/services/torrent.rs b/src/services/torrent.rs
@@ -333,6 +333,10 @@ impl Index {
         info_hash: &InfoHash,
         opt_user_id: Option<UserId>,
     ) -> Result<TorrentResponse, ServiceError> {
+        self.authorization_service
+            .authorize(ACTION::GetTorrentInfo, opt_user_id)
+            .await?;
+
         let torrent_listing = self.torrent_listing_generator.one_torrent_by_info_hash(info_hash).await?;
 
         let torrent_response = self
