mirror of
https://github.com/bpatrik/pigallery2.git
synced 2024-12-16 11:37:13 +02:00
59 lines
1.8 KiB
TypeScript
59 lines
1.8 KiB
TypeScript
|
|
import {UserManager} from "../model/memory/UserManager";
|
|
import {NextFunction, Request, Response} from "express";
|
|
import {Error, ErrorCodes} from "../../common/entities/Error";
|
|
import {UserRoles} from "../../common/entities/User";
|
|
import {ObjectManagerRepository} from "../model/ObjectManagerRepository";
|
|
|
|
export class UserRequestConstrainsMWs {
|
|
|
|
|
|
public static forceSelfRequest(req:Request, res:Response, next:NextFunction){
|
|
if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) {
|
|
return next();
|
|
}
|
|
if(req.session.user.id !== req.params.id){
|
|
return next(new Error(ErrorCodes.NOT_AUTHORISED));
|
|
}
|
|
|
|
return next();
|
|
}
|
|
|
|
|
|
public static notSelfRequest(req:Request, res:Response, next:NextFunction){
|
|
if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) {
|
|
return next();
|
|
}
|
|
|
|
if(req.session.user.id === req.params.id){
|
|
return next(new Error(ErrorCodes.NOT_AUTHORISED));
|
|
}
|
|
|
|
return next();
|
|
}
|
|
|
|
public static notSelfRequestOr2Admins(req:Request, res:Response, next:NextFunction){
|
|
if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) {
|
|
return next();
|
|
}
|
|
|
|
if(req.session.user.id !== req.params.id){
|
|
return next();
|
|
}
|
|
|
|
ObjectManagerRepository.getInstance().getUserManager().find({minRole:UserRoles.Admin}, (err, result) =>{
|
|
if ((err) || (!result)) {
|
|
return next(new Error(ErrorCodes.GENERAL_ERROR));
|
|
}
|
|
if(result.length <= 1) {
|
|
return next(new Error(ErrorCodes.GENERAL_ERROR));
|
|
}
|
|
|
|
});
|
|
|
|
return next();
|
|
}
|
|
|
|
|
|
|
|
} |