Merge pull request #2 from Wilcolab/feat/fail

chore: fail
Wilcolab · Jan 17, 2024 · ad8370b · ad8370b
2 parents 8988ac0 + 4f60302
commit ad8370b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/backend/src/main/java/io/spring/api/CommentsApi.java b/backend/src/main/java/io/spring/api/CommentsApi.java
@@ -1,13 +1,15 @@
 package io.spring.api;
 
 import com.fasterxml.jackson.annotation.JsonRootName;
+import io.spring.api.exception.NoAuthorizationException;
 import io.spring.api.exception.ResourceNotFoundException;
 import io.spring.application.CommentQueryService;
 import io.spring.application.data.CommentData;
 import io.spring.core.comment.Comment;
 import io.spring.core.comment.CommentRepository;
 import io.spring.core.item.Item;
 import io.spring.core.item.ItemRepository;
+import io.spring.core.service.AuthorizationService;
 import io.spring.core.user.User;
 import java.util.HashMap;
 import java.util.List;
@@ -70,6 +72,9 @@ public ResponseEntity deleteComment(
         .findById(item.getId(), commentId)
         .map(
             comment -> {
+              if (!AuthorizationService.canWriteComment(user, item, comment)) {
+                throw new NoAuthorizationException();
+              }
               commentRepository.remove(comment);
               return ResponseEntity.noContent().build();
             })