Initial commit

express/middleware/user.js

@@ -0,0 +1,95 @@
+const user = {}
+
+user.enhance = (req, res, next) => {
+  // Make req.user available to view engine.
+  res.locals.user = req.user
+
+  // Extend the req.user object with 3 rolechecking methods.
+  if (!req.user) return next()
+  req.user.hasRole = hasRole
+  req.user.hasDictionaryRole = hasDictionaryRole
+  req.user.hasAnyDictionaryRole = hasAnyDictionaryRole
+  req.user.isEditorOfConsultancyEntry = isEditorOfConsultancyEntry
+
+  next()
+}
+
+user.isDictionaryAdmin = (req, res, next) => {
+  const { dictionaryId } = req.params
+  const isAdmin = req.user.hasDictionaryRole(dictionaryId, 'administration')
+
+  if (isAdmin) return next()
+
+  if (req.isAjax) return res.status(400).end()
+  res.redirect(req.baseUrl)
+}
+
+user.isDictionaryEditor = (req, res, next) => {
+  const { dictionaryId } = req.params
+  const isEditor = req.user.hasAnyDictionaryRole(dictionaryId)
+
+  if (isEditor) return next()
+
+  if (req.isAjax) return res.status(400).end()
+  res.redirect(req.baseUrl)
+}
+
+/**
+ * Checks if the user has a specific role.
+ *
+ * @param {'portal admin'|'dictionaries admin'|'consultancy admin'|'consultant'|'editor'} roleName
+ * @returns {boolean}
+ */
+function hasRole(roleName) {
+  return this.userRoles.some(role => role.roleName === roleName)
+}
+
+/**
+ * Checks if the user has a specific dictionary role.
+ *
+ * @param {number} dictionaryId
+ * @param {'administration'|'terminologyReview'|'languageReview'|'editing'} roleName
+ * @returns {boolean}
+ */
+function hasDictionaryRole(dictionaryId, roleName) {
+  return this.userRoles.some(role => {
+    const validDictionaryRoles = [
+      'administration',
+      'editing',
+      'terminologyReview',
+      'languageReview'
+    ]
+    return (
+      role.dictionaryId === +dictionaryId &&
+      role.roleName === 'editor' &&
+      validDictionaryRoles.includes(roleName) &&
+      role[roleName]
+    )
+  })
+}
+
+/**
+ * Checks if the user has any dictionary role for the specified dictionary.
+ *
+ * @param {number} dictionaryId
+ * @returns {boolean}
+ */
+function hasAnyDictionaryRole(dictionaryId) {
+  return this.userRoles.some(role => {
+    return role.dictionaryId === +dictionaryId && role.roleName === 'editor'
+  })
+}
+
+/**
+ * Checks if the user is an editor of the speficied consultancy entry.
+ *
+ * @param {number} consultancyEntryId
+ * @returns {boolean}
+ */
+function isEditorOfConsultancyEntry(consultancyEntryId) {
+  return this.assignedConsultancyEntries.some(entry => {
+    return entry.id === +consultancyEntryId
+  })
+}
+
+module.exports = user