X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fmiddlewares%2Fuser-right.ts;h=7cea7aa1e6c0e34eb2e812df4024956da44d7cc8;hb=40256645ffd269838cbe5aa19e8a9f283d4ab817;hp=5d63ebaf4f361dfaf373c2a8db5b5200b877b0ed;hpb=3fd3ab2d34d512b160a5e6084d7609be7b4f4452;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/user-right.ts b/server/middlewares/user-right.ts index 5d63ebaf4..7cea7aa1e 100644 --- a/server/middlewares/user-right.ts +++ b/server/middlewares/user-right.ts @@ -1,15 +1,21 @@ import * as express from 'express' import 'express-validator' import { UserRight } from '../../shared' -import { logger } from '../helpers' +import { logger } from '../helpers/logger' import { UserModel } from '../models/account/user' function ensureUserHasRight (userRight: UserRight) { return function (req: express.Request, res: express.Response, next: express.NextFunction) { const user = res.locals.oauth.token.user as UserModel if (user.hasRight(userRight) === false) { - logger.info('User %s does not have right %s to access to %s.', user.username, UserRight[userRight], req.path) - return res.sendStatus(403) + const message = `User ${user.username} does not have right ${UserRight[userRight]} to access to ${req.path}.` + logger.info(message) + + return res.status(403) + .json({ + error: message + }) + .end() } return next()