added another state check
Signed-off-by: Stephan Richter <s.richter@srsoftware.de>
This commit is contained in:
@@ -72,11 +72,11 @@ public class DocumentApi extends BaseHandler {
|
||||
private boolean deleteDocument(HttpExchange ex, long docId, UmbrellaUser user) throws IOException, UmbrellaException {
|
||||
var doc = db.loadDoc(docId);
|
||||
var companyId = doc.companyId();
|
||||
var company = companies.get(companyId);
|
||||
var members = companies.getMembers(companyId);
|
||||
var isMember = false;
|
||||
for (var member : members) isMember |= user.equals(member);
|
||||
if (!isMember) return sendContent(ex,HTTP_FORBIDDEN,"You are mot a member of company "+doc.companyId());
|
||||
if (!isMember) throw new UmbrellaException(HTTP_FORBIDDEN,"You are mot a member of company {0}",doc.companyId());
|
||||
if (doc.state() != NEW) throw new UmbrellaException(HTTP_BAD_REQUEST,"This document has already been sent");
|
||||
return sendContent(ex,db.deleteDoc(docId));
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user