diff --git a/src/handlers/delete_file.rs b/src/handlers/delete_file.rs index 11eedafff40898854ddd8f4a3ae4af56a81136b6..17d59d03f814f826f0efc651334e8eb26879ac0b 100644 --- a/src/handlers/delete_file.rs +++ b/src/handlers/delete_file.rs @@ -24,18 +24,21 @@ pub async fn delete_file(req: &mut Request, res: &mut Response, depot: &mut Depo debug!("Received request to delete file: {}", filename); - // Grab the key from the auth handler. + // Grab the user key from the auth handler. let client_key = depot .get::<Key>("client_key") .expect("Failed to grab API Key from depot") .clone(); - // Grab they key from the database. + // Grab the file's owner key from the db. let owner = db::check_owner(sqlconn, filename).await; // Compare the client_key and owner. let authorized = match owner { - Ok(owner_key) => client_key.uuid == owner_key, + Ok(owner_key) => { + debug!("Deletion attempt: user: {} file owner: {:?}", client_key.uuid, owner_key); + client_key.uuid == owner_key + } Err(_) => false, };