114 lines
3.0 KiB
JavaScript
114 lines
3.0 KiB
JavaScript
const user = {}
|
|
|
|
user.enhance = (req, res, next) => {
|
|
// Make req.user available to view engine.
|
|
res.locals.user = req.user
|
|
|
|
// Extend the req.user object with 3 rolechecking methods.
|
|
if (!req.user) return next()
|
|
req.user.hasRole = hasRole
|
|
req.user.hasDictionaryRole = hasDictionaryRole
|
|
req.user.hasAnyDictionaryRole = hasAnyDictionaryRole
|
|
req.user.isEditorOfConsultancyEntry = isEditorOfConsultancyEntry
|
|
|
|
next()
|
|
}
|
|
|
|
user.isAuthenticated = (req, res, next) => {
|
|
if (req.isAuthenticated()) return next()
|
|
|
|
if (req.isAjax) return res.status(400).end()
|
|
res.redirect(req.baseUrl || '/')
|
|
}
|
|
|
|
user.isDictionaryAdmin = (req, res, next) => {
|
|
const { dictionaryId } = req.params
|
|
const isAdmin = req.user.hasDictionaryRole(dictionaryId, 'administration')
|
|
|
|
if (isAdmin) return next()
|
|
|
|
if (req.isAjax) return res.status(400).end()
|
|
res.redirect(req.baseUrl || '/')
|
|
}
|
|
|
|
user.isDictionaryEditor = (req, res, next) => {
|
|
const { dictionaryId } = req.params
|
|
const isEditor = req.user.hasAnyDictionaryRole(dictionaryId)
|
|
|
|
if (isEditor) return next()
|
|
|
|
if (req.isAjax) return res.status(400).end()
|
|
res.redirect(req.baseUrl || '/')
|
|
}
|
|
|
|
user.canContentEdit = (req, res, next) => {
|
|
const { dictionaryId } = req.params
|
|
const isEditor = req.user.hasAnyDictionaryRole(dictionaryId)
|
|
const isPortalAdmin = req.user.hasRole('portal admin')
|
|
const isDictionariesAdmin = req.user.hasRole('dictionaries admin')
|
|
if (isEditor || isPortalAdmin || isDictionariesAdmin) return next()
|
|
|
|
if (req.isAjax) return res.status(400).end()
|
|
res.redirect(req.baseUrl || '/')
|
|
}
|
|
|
|
/**
|
|
* Checks if the user has a specific role.
|
|
*
|
|
* @param {'portal admin'|'dictionaries admin'|'consultancy admin'|'consultant'|'editor'} roleName
|
|
* @returns {boolean}
|
|
*/
|
|
function hasRole(roleName) {
|
|
return this.userRoles.some(role => role.roleName === roleName)
|
|
}
|
|
|
|
/**
|
|
* Checks if the user has a specific dictionary role.
|
|
*
|
|
* @param {number} dictionaryId
|
|
* @param {'administration'|'terminologyReview'|'languageReview'|'editing'} roleName
|
|
* @returns {boolean}
|
|
*/
|
|
function hasDictionaryRole(dictionaryId, roleName) {
|
|
return this.userRoles.some(role => {
|
|
const validDictionaryRoles = [
|
|
'administration',
|
|
'editing',
|
|
'terminologyReview',
|
|
'languageReview'
|
|
]
|
|
return (
|
|
role.dictionaryId === +dictionaryId &&
|
|
role.roleName === 'editor' &&
|
|
validDictionaryRoles.includes(roleName) &&
|
|
role[roleName]
|
|
)
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Checks if the user has any dictionary role for the specified dictionary.
|
|
*
|
|
* @param {number} dictionaryId
|
|
* @returns {boolean}
|
|
*/
|
|
function hasAnyDictionaryRole(dictionaryId) {
|
|
return this.userRoles.some(role => {
|
|
return role.dictionaryId === +dictionaryId && role.roleName === 'editor'
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Checks if the user is an editor of the speficied consultancy entry.
|
|
*
|
|
* @param {number} consultancyEntryId
|
|
* @returns {boolean}
|
|
*/
|
|
function isEditorOfConsultancyEntry(consultancyEntryId) {
|
|
return this.assignedConsultancyEntries.some(entry => {
|
|
return entry.id === +consultancyEntryId
|
|
})
|
|
}
|
|
|
|
module.exports = user
|