UpdatePartyDocumentDirect를 PartyOwner만 동작하도록 함

core/group_party.go

@@ -710,7 +710,6 @@ func (gp *groupParty) ClientDisconnected(ctx wshandler.ApiCallContext) {
 			Tag: []string{"MemberDocFull"},
 		})
 
-
 	}
 }
 
@@ -722,9 +721,27 @@ func (gp *groupParty) UpdatePartyMemberDocumentDirect(ctx wshandler.ApiCallConte
 }
 
 func (gp *groupParty) UpdatePartyDocumentDirect(ctx wshandler.ApiCallContext) {
+	// 파티 오너만 가능
 	gidobj, _ := primitive.ObjectIDFromHex(ctx.Arguments[0].(string))
 	doc := ctx.Arguments[1].(map[string]any)
 
+	gd := groupDoc{
+		id: gidobj,
+		rh: gp.rh,
+	}
+
+	incharge, err := gp.rh.JSONGet(gd.strid(), "$._incharge")
+	if err != nil {
+		logger.Println("UpdatePartyDocumentDirect failed. gp.rh.JSONGet returns err :", err)
+		return
+	}
+
+	if !strings.Contains(incharge.(string), gd.tid(ctx.CallBy.Accid)) {
+		// incharge가 아니네?
+		logger.Println("UpdatePartyDocumentDirect failed. caller is not incharge")
+		return
+	}
+
 	gp.updatePartyDocument(gidobj, doc)
 }