Work on login

php/auto/connection.php

@@ -1,8 +1,8 @@
 <?php
-$servername = getenv('DB_HOSTNAME');
-$username = getenv('DB_USERNAME');
-$password = getenv('DB_PASS');
-$dbname = getenv('DB_NAME');
+$servername = $_ENV['DB_HOSTNAME'];
+$username = $_ENV['DB_USERNAME'];
+$password = $_ENV['DB_PASS'];
+$dbname = $_ENV['DB_NAME'];
 
 try {
   $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
@@ -11,7 +11,7 @@ try {
   $conn->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
   $conn->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
 } catch(PDOException $e) {
-  echo json_encode(["error" => "error.connect.faild"]);
+  echo json_encode(["error" => "error.connect.faild", "exc" => $e->getMessage()]);
   exit;
 }
 

php/auto/user.php

@@ -1,11 +1,12 @@
 <?php
 
-function hasPermission(string $resourceName, string $actionName): bool
+function hasPermission(string $resourceName, string $actionName)
 {
     global $conn;
 
     if(!isset($_SESSION['id'])){
-        return false;
+        http_response_code(401);
+        exit;  
     }
 
     $sql = "
@@ -28,5 +29,8 @@ function hasPermission(string $resourceName, string $actionName): bool
  
     $result = $stmt->fetch();
  
-    return ((int) $result['permission_count']) > 0;
+    if(((int) $result['permission_count']) <= 0){
+        http_response_code(403);
+        exit;
+    }
 }