From d65bbc897d1281b0f665e6cfd282ce8031ab2cca Mon Sep 17 00:00:00 2001 From: Imbus <> Date: Thu, 4 Apr 2024 23:23:11 +0200 Subject: [PATCH] Fixing logic error in paths related to getting reports --- backend/internal/handlers/reports/GetAllWeeklyReports.go | 2 +- backend/internal/handlers/reports/GetWeeklyReport.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/internal/handlers/reports/GetAllWeeklyReports.go b/backend/internal/handlers/reports/GetAllWeeklyReports.go index 506312a..d9778b8 100644 --- a/backend/internal/handlers/reports/GetAllWeeklyReports.go +++ b/backend/internal/handlers/reports/GetAllWeeklyReports.go @@ -38,7 +38,7 @@ func GetAllWeeklyReports(c *fiber.Ctx) error { return c.Status(500).SendString(err.Error()) } - if pm && target_user != username { + if !(pm || target_user == username) { log.Info("Unauthorized access") return c.Status(403).SendString("Unauthorized access") } diff --git a/backend/internal/handlers/reports/GetWeeklyReport.go b/backend/internal/handlers/reports/GetWeeklyReport.go index 206ed33..2b6827e 100644 --- a/backend/internal/handlers/reports/GetWeeklyReport.go +++ b/backend/internal/handlers/reports/GetWeeklyReport.go @@ -47,7 +47,7 @@ func GetWeeklyReport(c *fiber.Ctx) error { return c.Status(500).SendString(err.Error()) } - if pm && target_user != username { + if !(pm || target_user == username) { log.Info("Unauthorized access") return c.Status(403).SendString("Unauthorized access") }