github
/
alist
mirror of https://github.com/Xhofe/alist
1
0
Fork 0
Code Issues Releases Wiki Activity

feat: only show `CanAccess` search results (#2548) 

* feat: only show `CanAccess` search results

* have done in frontend

Co-authored-by: Noah Hsu <i@nn.ci>
pull/2555/head
BoYanZh 2022-12-02 10:09:39 +08:00 committed by GitHub
parent 9c1ffdbb82
commit 4c5be5f07f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
server/handles/search.go
View File

@ -1,11 +1,17 @@
package handles
import (
"path"
"strings"
"github.com/alist-org/alist/v3/internal/db"
"github.com/alist-org/alist/v3/internal/errs"
"github.com/alist-org/alist/v3/internal/model"
"github.com/alist-org/alist/v3/internal/search"
"github.com/alist-org/alist/v3/pkg/utils"
"github.com/alist-org/alist/v3/server/common"
"github.com/gin-gonic/gin"
"github.com/pkg/errors"
)
type SearchResp struct {
@ -28,8 +34,24 @@ func Search(c *gin.Context) {
common.ErrorResp(c, err, 500)
return
}
filteredNodes := []model.SearchNode{}
user := c.MustGet("user").(*model.User)
for _, node := range nodes {
if !strings.HasPrefix(node.Parent, user.BasePath) {
continue
}
meta, err := db.GetNearestMeta(node.Parent)
if err != nil && !errors.Is(errors.Cause(err), errs.MetaNotFound) {
continue
}
if !common.CanAccess(user, meta, path.Join(node.Parent, node.Name), "") {
continue
}
// node.Parent = "/" + strings.Replace(node.Parent, user.BasePath, "", 1)
filteredNodes = append(filteredNodes, node)
}
common.SuccessResp(c, common.PageResp{
Content: utils.MustSliceConvert(nodes, nodeToSearchResp),
Content: utils.MustSliceConvert(filteredNodes, nodeToSearchResp),
Total: total,
})
}