Disallow accessing identity page when logged in

And disallow calls to fetchPerson when not our own profile or unlogged

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel
2020-10-02 09:52:47 +02:00
parent beba4a16ea
commit d41aa3b2fd
23 changed files with 1097 additions and 1026 deletions

View File

@@ -157,7 +157,7 @@ msgid "No user to validate with this email was found"
msgstr "No se encontró ningún usuario para validar con este correo electrónico"
#, elixir-format
#: lib/graphql/resolvers/person.ex:217 lib/graphql/resolvers/user.ex:76
#: lib/graphql/resolvers/person.ex:232 lib/graphql/resolvers/user.ex:76
#: lib/graphql/resolvers/user.ex:219
msgid "No user with this email was found"
msgstr "No se encontró ningún usuario con este correo electrónico"
@@ -166,9 +166,9 @@ msgstr "No se encontró ningún usuario con este correo electrónico"
#: lib/graphql/resolvers/comment.ex:36 lib/graphql/resolvers/comment.ex:98
#: lib/graphql/resolvers/event.ex:281 lib/graphql/resolvers/feed_token.ex:28 lib/graphql/resolvers/group.ex:243
#: lib/graphql/resolvers/member.ex:77 lib/graphql/resolvers/participant.ex:29
#: lib/graphql/resolvers/participant.ex:163 lib/graphql/resolvers/participant.ex:192 lib/graphql/resolvers/person.ex:142
#: lib/graphql/resolvers/person.ex:176 lib/graphql/resolvers/person.ex:241 lib/graphql/resolvers/person.ex:273
#: lib/graphql/resolvers/person.ex:286 lib/graphql/resolvers/picture.ex:75 lib/graphql/resolvers/report.ex:110
#: lib/graphql/resolvers/participant.ex:163 lib/graphql/resolvers/participant.ex:192 lib/graphql/resolvers/person.ex:157
#: lib/graphql/resolvers/person.ex:191 lib/graphql/resolvers/person.ex:256 lib/graphql/resolvers/person.ex:288
#: lib/graphql/resolvers/person.ex:301 lib/graphql/resolvers/picture.ex:75 lib/graphql/resolvers/report.ex:110
#: lib/graphql/resolvers/todos.ex:57
msgid "Profile is not owned by authenticated user"
msgstr "El perfil no es propiedad del usuario autenticado"
@@ -360,12 +360,12 @@ msgid "Anonymous participation is not enabled"
msgstr "La participación anónima no está habilitada"
#, elixir-format
#: lib/graphql/resolvers/person.ex:173
#: lib/graphql/resolvers/person.ex:188
msgid "Cannot remove the last administrator of a group"
msgstr "No se puede eliminar al último administrador de un grupo"
#, elixir-format
#: lib/graphql/resolvers/person.ex:170
#: lib/graphql/resolvers/person.ex:185
msgid "Cannot remove the last identity of a user"
msgstr "No se puede eliminar la última identidad de un usuario"
@@ -395,7 +395,7 @@ msgid "Event id not found"
msgstr "ID de evento no encontrado"
#, elixir-format
#: lib/graphql/error.ex:83 lib/graphql/resolvers/event.ex:236
#: lib/graphql/error.ex:89 lib/graphql/resolvers/event.ex:236
#: lib/graphql/resolvers/event.ex:278
msgid "Event not found"
msgstr "Evento no encontrado"
@@ -459,7 +459,7 @@ msgid "Person with ID %{id} not found"
msgstr "Persona con ID%{id} no encontrada"
#, elixir-format
#: lib/graphql/resolvers/person.ex:46
#: lib/graphql/resolvers/person.ex:52
msgid "Person with username %{username} not found"
msgstr "Persona con nombre de usuario %{username} no encontrada"
@@ -498,7 +498,7 @@ msgid "Profile is not member of group"
msgstr "El perfil no es miembro del grupo"
#, elixir-format
#: lib/graphql/resolvers/person.ex:139 lib/graphql/resolvers/person.ex:167
#: lib/graphql/resolvers/person.ex:154 lib/graphql/resolvers/person.ex:182
msgid "Profile not found"
msgstr "Perfil no encontrado"
@@ -554,12 +554,12 @@ msgid "User doesn't own profile"
msgstr "El usuario no posee el perfil"
#, elixir-format
#: lib/graphql/resolvers/person.ex:308
#: lib/graphql/error.ex:87 lib/graphql/resolvers/person.ex:323
msgid "User not found"
msgstr "Usuario no encontrado"
#, elixir-format
#: lib/graphql/resolvers/person.ex:220
#: lib/graphql/resolvers/person.ex:235
msgid "You already have a profile for this user"
msgstr "Ya tienes un perfil para este usuario"
@@ -649,11 +649,6 @@ msgid "You need to be logged-in and a moderator to list action logs"
msgstr ""
"Debe iniciar sesión y un moderador para enumerar los registros de acción"
#, elixir-format
#: lib/graphql/resolvers/person.ex:73
msgid "You need to be logged-in and a moderator to list persons"
msgstr "Debe iniciar sesión y un moderador para enumerar personas"
#, elixir-format
#: lib/graphql/resolvers/report.ex:28
msgid "You need to be logged-in and a moderator to list reports"
@@ -700,11 +695,6 @@ msgstr "Debe iniciar sesión para acceder a las discusiones"
msgid "You need to be logged-in to access resources"
msgstr "Debes iniciar sesión para acceder a los recursos"
#, elixir-format
#: lib/graphql/resolvers/person.ex:118
msgid "You need to be logged-in to create a new identity"
msgstr "Debe iniciar sesión para crear una nueva identidad"
#, elixir-format
#: lib/graphql/resolvers/event.ex:213
msgid "You need to be logged-in to create events"
@@ -730,11 +720,6 @@ msgstr "Debe iniciar sesión para crear recursos"
msgid "You need to be logged-in to delete an event"
msgstr "Debe iniciar sesión para eliminar un evento"
#, elixir-format
#: lib/graphql/resolvers/person.ex:181
msgid "You need to be logged-in to delete an identity"
msgstr "Debe iniciar sesión para eliminar una identidad"
#, elixir-format
#: lib/graphql/resolvers/post.ex:209
msgid "You need to be logged-in to delete posts"
@@ -760,11 +745,6 @@ msgstr "Debes iniciar sesión para salir de un evento"
msgid "You need to be logged-in to update an event"
msgstr "Debe iniciar sesión para actualizar un evento"
#, elixir-format
#: lib/graphql/resolvers/person.ex:147
msgid "You need to be logged-in to update an identity"
msgstr "Debe iniciar sesión para actualizar una identidad"
#, elixir-format
#: lib/graphql/resolvers/post.ex:176
msgid "You need to be logged-in to update posts"
@@ -780,16 +760,6 @@ msgstr "Debes iniciar sesión para actualizar los recursos"
msgid "You need to be logged-in to view a resource preview"
msgstr "Debe iniciar sesión para ver una vista previa del recurso"
#, elixir-format
#: lib/graphql/resolvers/person.ex:84
msgid "You need to be logged-in to view current person"
msgstr "Debes iniciar sesión para ver la persona actual"
#, elixir-format
#: lib/graphql/resolvers/person.ex:95
msgid "You need to be logged-in to view your list of identities"
msgstr "Debe iniciar sesión para ver su lista de identidades"
#, elixir-format
#: lib/graphql/resolvers/picture.ex:83
msgid "You need to login to upload a picture"
@@ -834,7 +804,47 @@ msgstr ""
msgid "This email is already used."
msgstr ""
#, elixir-format, fuzzy
#: lib/graphql/error.ex:82
#, elixir-format
#: lib/graphql/error.ex:88
msgid "Post not found"
msgstr "Informe no encontrado"
#, elixir-format
#: lib/graphql/error.ex:75
msgid "Invalid arguments passed"
msgstr ""
#, elixir-format
#: lib/graphql/error.ex:81
msgid "Invalid credentials"
msgstr ""
#, elixir-format
#: lib/graphql/error.ex:79
msgid "Reset your password to login"
msgstr ""
#, elixir-format, fuzzy
#: lib/graphql/error.ex:86
msgid "Resource not found"
msgstr "Informe no encontrado"
#, elixir-format
#: lib/graphql/error.ex:90
msgid "Something went wrong"
msgstr ""
#, elixir-format
#: lib/graphql/error.ex:74
msgid "Unknown Resource"
msgstr ""
#, elixir-format, fuzzy
#: lib/graphql/error.ex:84
msgid "You don't have permission to do this"
msgstr "No tienes permiso para eliminar este token"
#, elixir-format, fuzzy
#: lib/graphql/error.ex:76
msgid "You need to be logged in"
msgstr "Debes iniciar sesión para eliminar su cuenta"