fix for #158

semaphoreui · Feb 16, 2018 · 5e26bfb · 5e26bfb
1 parent fe5dcdc
commit 5e26bfb
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/api/tasks/http.go b/api/tasks/http.go
@@ -105,6 +105,13 @@ func GetTaskOutput(w http.ResponseWriter, r *http.Request) {
 
 func RemoveTask(w http.ResponseWriter, r *http.Request) {
 	task := context.Get(r, "task").(db.Task)
+	editor := context.Get(r, "user").(*db.User)
+
+	if editor.Admin != true {
+		log.Warn(editor.Username + " doesn't permit task log deletion")
+		w.WriteHeader(http.StatusUnauthorized)
+		return
+	}
 
 	statements := []string{
 		"delete from task__output where task_id=?",