vw_small

Hardened fork of Vaultwarden (https://github.com/dani-garcia/vaultwarden) with fewer features.
git clone https://git.philomathiclife.com/repos/vw_small
Log | Files | Refs | README

commit 9cf449e1c529ab7b21f25729050b35ca39cbc4e9
parent e5c9d19e2596af85d37222c93a9b6a812ad25b4e
Author: Miroslav Prasil <miroslav@prasil.info>
Date:   Fri, 11 May 2018 11:45:55 +0100

Error on invalid collection ID in post_collections_admin

Diffstat:
Msrc/api/core/ciphers.rs | 4+++-
1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/api/core/ciphers.rs b/src/api/core/ciphers.rs @@ -322,7 +322,7 @@ fn post_collections_admin(uuid: String, data: Json<CollectionsAdminData>, header for collection in posted_collections.symmetric_difference(&current_collections) { match Collection::find_by_uuid(&collection, &conn) { - None => (), // Does not exist, what now? + None => err!("Invalid collection ID provided"), Some(collection) => { if collection.is_writable_by_user(&headers.user.uuid, &conn) { if posted_collections.contains(&collection.uuid) { // Add to collection @@ -330,6 +330,8 @@ fn post_collections_admin(uuid: String, data: Json<CollectionsAdminData>, header } else { // Remove from collection CollectionCipher::delete(&cipher.uuid, &collection.uuid, &conn); } + } else { + err!("No rights to modify the collection") } } }