feat: [#615] authorization layer added for add torrent method of the torrent service

Author: mario-nt

src/services/authorization.rs

@@ -45,6 +45,7 @@ pub enum ACTION {
     GetLicensePage,
     GetImageByUrl,
     GetPublicSettings,
+    AddTorrent,
 }
 
 pub struct Service {
@@ -184,10 +185,12 @@ impl CasbinConfiguration {
                 admin, DeleteTorrent
                 admin, BanUser
                 admin, GetImageByUrl
+                admin, AddTorrent
                 registered, GetCategories
                 registered, GetImageByUrl
                 registered, GetPublicSettings
                 registered, GetTags
+                registered, AddTorrent
                 guest, GetCategories
                 guest, GetTags
                 guest, GetAboutPage

src/services/torrent.rs

@@ -134,8 +134,9 @@ impl Index {
         add_torrent_req: AddTorrentRequest,
         user_id: UserId,
     ) -> Result<AddTorrentResponse, ServiceError> {
-        // Guard that the users exists
-        let _user = self.user_repository.get_compact(&user_id).await?;
+        self.authorization_service
+            .authorize(ACTION::AddTorrent, Some(user_id))
+            .await?;
 
         let metadata = self.validate_and_build_metadata(&add_torrent_req).await?;