feat: 코스 삭제할 때 권한 확인 #83

boostcampwm-2024 · Nov 13, 2024 · 0750aa7 · 0750aa7
1 parent d1e9908
commit 0750aa7
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/backend/src/course/course.controller.ts b/backend/src/course/course.controller.ts
@@ -70,7 +70,9 @@ export class CourseController {
   }
 
   @Patch('/:id/info')
+  @UseGuards(JwtAuthGuard, CoursePermissionGuard)
   async updateCourseInfo(
+    @AuthUser() user: AuthUser,
     @Param('id') id: number,
     @Body() updateCourseInfoRequest: UpdateCourseInfoRequest,
   ) {
@@ -79,7 +81,9 @@ export class CourseController {
   }
 
   @Patch('/:id/visibility')
+  @UseGuards(JwtAuthGuard, CoursePermissionGuard)
   async updateCourseVisibility(
+    @AuthUser() user: AuthUser,
     @Param('id') id: number,
     @Body('isPublic') isPublic: boolean,
   ) {
@@ -88,7 +92,8 @@ export class CourseController {
   }
 
   @Delete('/:id')
-  async deleteCourse(@Param('id') id: number) {
+  @UseGuards(JwtAuthGuard, CoursePermissionGuard)
+  async deleteCourse(@AuthUser() user: AuthUser, @Param('id') id: number) {
     return await this.courseService.deleteCourse(id);
   }
 }