different customers for different users

1 files changed, 4 insertions, 3 deletions

diff --git a/customer/service.go b/customer/service.go
index c5d7cb8..f1108c6 100644
--- a/customer/service.go
+++ b/customer/service.go
@@ -36,8 +36,8 @@ func getCustomer(customer *Customer, id uint) error {
 	return nil
 }
 
-func getCustomers(customers *[]Customer) error {
-	res := db.Find(&customers)
+func getCustomers(customers *[]Customer, userId uint) error {
+	res := db.Where("user_id = ?", userId).Find(&customers)
 
 	// TODO: handle potential errors
 	if res.Error != nil {
@@ -58,13 +58,14 @@ func (c *Customer) upsert() error {
 }
 
 func (c *Customer) del() error {
-	res := db.Delete(c)
+	res := db.Where("id = ? and user_id = ?", c.ID, c.UserID).Delete(c)
 
 	// TODO: handle potential errors
 	if res.Error != nil {
 		return res.Error
 	}
 
+	// returns 404 if either row doesn't exist or if the user doesn't own it
 	if res.RowsAffected == 0 {
 		return e.ErrNotFound
 	}