summaryrefslogtreecommitdiffstats
path: root/routers/api/v1/org
diff options
context:
space:
mode:
authorEthan Koenig <ethantkoenig@gmail.com>2017-12-20 23:43:26 -0800
committerLauris BH <lauris@nix.lv>2017-12-21 09:43:26 +0200
commit515cdaa85d6087d91a61ebe74fae39e0c4bdf1c4 (patch)
tree3a7143fc376af4402ca9008876be3afdc0c18efc /routers/api/v1/org
parent529482135c8e9304dd7cdf08772eaba61d903894 (diff)
downloadgitea-515cdaa85d6087d91a61ebe74fae39e0c4bdf1c4.tar.gz
gitea-515cdaa85d6087d91a61ebe74fae39e0c4bdf1c4.zip
Fix ignored errors when checking if organization, team member (#3177)
Diffstat (limited to 'routers/api/v1/org')
-rw-r--r--routers/api/v1/org/member.go41
-rw-r--r--routers/api/v1/org/team.go6
2 files changed, 35 insertions, 12 deletions
diff --git a/routers/api/v1/org/member.go b/routers/api/v1/org/member.go
index 7cae7c19fa..0cc5317802 100644
--- a/routers/api/v1/org/member.go
+++ b/routers/api/v1/org/member.go
@@ -67,7 +67,15 @@ func ListMembers(ctx *context.APIContext) {
// responses:
// "200":
// "$ref": "#/responses/UserList"
- publicOnly := ctx.User == nil || !ctx.Org.Organization.IsOrgMember(ctx.User.ID)
+ publicOnly := true
+ if ctx.User != nil {
+ isMember, err := ctx.Org.Organization.IsOrgMember(ctx.User.ID)
+ if err != nil {
+ ctx.Error(500, "IsOrgMember", err)
+ return
+ }
+ publicOnly = !isMember
+ }
listMembers(ctx, publicOnly)
}
@@ -119,19 +127,30 @@ func IsMember(ctx *context.APIContext) {
if ctx.Written() {
return
}
- if ctx.User != nil && ctx.Org.Organization.IsOrgMember(ctx.User.ID) {
- if ctx.Org.Organization.IsOrgMember(userToCheck.ID) {
- ctx.Status(204)
- } else {
+ if ctx.User != nil {
+ userIsMember, err := ctx.Org.Organization.IsOrgMember(ctx.User.ID)
+ if err != nil {
+ ctx.Error(500, "IsOrgMember", err)
+ return
+ } else if userIsMember {
+ userToCheckIsMember, err := ctx.Org.Organization.IsOrgMember(ctx.User.ID)
+ if err != nil {
+ ctx.Error(500, "IsOrgMember", err)
+ } else if userToCheckIsMember {
+ ctx.Status(204)
+ } else {
+ ctx.Status(404)
+ }
+ return
+ } else if ctx.User.ID == userToCheck.ID {
ctx.Status(404)
+ return
}
- } else if ctx.User != nil && ctx.User.ID == userToCheck.ID {
- ctx.Status(404)
- } else {
- redirectURL := fmt.Sprintf("%sapi/v1/orgs/%s/public_members/%s",
- setting.AppURL, ctx.Org.Organization.Name, userToCheck.Name)
- ctx.Redirect(redirectURL, 302)
}
+
+ redirectURL := fmt.Sprintf("%sapi/v1/orgs/%s/public_members/%s",
+ setting.AppURL, ctx.Org.Organization.Name, userToCheck.Name)
+ ctx.Redirect(redirectURL, 302)
}
// IsPublicMember check if a user is a public member of an organization
diff --git a/routers/api/v1/org/team.go b/routers/api/v1/org/team.go
index eead7dd8fd..b999d62aa1 100644
--- a/routers/api/v1/org/team.go
+++ b/routers/api/v1/org/team.go
@@ -176,7 +176,11 @@ func GetTeamMembers(ctx *context.APIContext) {
// responses:
// "200":
// "$ref": "#/responses/UserList"
- if !models.IsOrganizationMember(ctx.Org.Team.OrgID, ctx.User.ID) {
+ isMember, err := models.IsOrganizationMember(ctx.Org.Team.OrgID, ctx.User.ID)
+ if err != nil {
+ ctx.Error(500, "IsOrganizationMember", err)
+ return
+ } else if !isMember {
ctx.Status(404)
return
}