#35 게시글 UPDATE 기능 수정 - 접근 권한 설정

routes/boardRouter.js

@@ -101,12 +101,25 @@ router.get('/edit', function(request, response){
 			// var like_num = 10000; // 좋아요 연결 후 반영하기
 			var content = result2[0].content;
 
-			db.query(`SELECT nickname FROM user WHERE kakaoid = ?;`, [userId], function(err3, result3){
-
-				var user_id = result3[0].nickname;
 
-				var html = board_edit.HTML(title, content, queryData.id)
-				response.send(html);
+			db.query(`SELECT nickname FROM user WHERE kakaoid = ?;`, [userId], function(err3, result3){
+
+				if(!request.isAuthenticated()){
+					response.send('<script>alert("로그인이 필요한 서비스입니다.");\
+					location.href="/oauth/kakao";</script>');
+				}else{
+					if( userId !== request.user.kakaoid){
+						response.send('<script>alert("접근 권한이 없습니다.");\
+						location.href="/board";</script>');
+					}else{
+						// var user_id = result3[0].nickname;
+
+						var html = board_edit.HTML(title, content, queryData.id)
+						response.send(html);
+					}
+				}
+
+
 			})	
 
 		});

routes/boardUpdateProcessRouter.js

@@ -4,7 +4,6 @@ const res = require('express/lib/response');
 const { fstat } = require('fs');
 const router = express.Router();
 const mysql = require('mysql');
-const passport = require('passport');
 const db = require('../config/db.js');
 
 
@@ -15,7 +14,6 @@ router.post('/', function(request, response) {
 
         let title = body.title;
         let content = body.content;
-
 
         db.query(`UPDATE post SET title=?, content=?, updatedate=? WHERE id=?`, [title, content, null, queryData.id], function(err, result){
             if (err) console.error("err : " + err);