Rust Programming By Example

Securing the config.toml access

This time, not much to do! We just need to add a check when a user wants to list, download, or overwrite the file. Which means that the three following commands have to be updated:

• List
• Retr
• Stor

Let's start with List. Before the first add_file_info function call, just wrap the add_file_info function call around this block:

if self.is_admin || entry.path() != self.server_root.join(CONFIG_FILE) {

Before the second one, add the following:

if self.is_admin || path != self.server_root.join(CONFIG_FILE)

Now let's update the retr function. Take the following condition:

if path.is_file() {

Replace it with this:

if path.is_file() && (self.is_admin || path != self.server_root.join(CONFIG_FILE)) {

Finally, let's update ...