UserMembershipAuthorization.js 817 B

12345678910111213141516171819202122232425262728293031323334353637
  1. const UserMembershipAuthorization = {
  2. hasStaffAccess(requiredStaffAccess) {
  3. return req => {
  4. if (!req.user) {
  5. return false
  6. }
  7. return (
  8. requiredStaffAccess &&
  9. req.user.staffAccess &&
  10. req.user.staffAccess[requiredStaffAccess]
  11. )
  12. }
  13. },
  14. hasEntityAccess() {
  15. return req => {
  16. if (!req.entity) {
  17. return false
  18. }
  19. return req.entity[req.entityConfig.fields.access].some(accessUserId =>
  20. accessUserId.equals(req.user._id)
  21. )
  22. }
  23. },
  24. isEntityMember() {
  25. return req => {
  26. if (!req.entity) {
  27. return false
  28. }
  29. return req.entity[req.entityConfig.fields.membership].some(accessUserId =>
  30. accessUserId.equals(req.user._id)
  31. )
  32. }
  33. },
  34. }
  35. module.exports = UserMembershipAuthorization