From 80abfd583d40e6b08fd3f68ebde5f1004bb5d523 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dalibor=20Markovi=C4=87?= Date: Thu, 16 Jul 2026 13:13:21 +0200 Subject: [PATCH] StornoProdaje: zahtevajDozvolu umesto direktnog ImaDozvolu (kao servis/nabavka) --- internal/handler/prodaja.go | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/internal/handler/prodaja.go b/internal/handler/prodaja.go index 241c485..7ac9c4b 100644 --- a/internal/handler/prodaja.go +++ b/internal/handler/prodaja.go @@ -613,9 +613,8 @@ func parseFormuProdaje(r *http.Request, validneStope map[float64]bool) (model.Pr // StornoProdaje stornira prodajni nalog: vraća artikle na stanje i označava nalog kao storniran func (h *Handler) StornoProdaje(w http.ResponseWriter, r *http.Request) { - k := middleware.KorisnikIzKonteksta(r.Context()) - if !h.DozvoleRepo.ImaDozvolu(r.Context(), k.Uloga, "prodaja.storno") { - http.Error(w, "Nemate dozvolu za storniranje prodaje.", http.StatusForbidden) + k, ok := h.zahtevajDozvolu(w, r, "prodaja.storno") + if !ok { return } id, err := parseID(chi.URLParam(r, "id"))