server/middlewares/user-right.ts

   1 import * as express from 'express'
   2 import 'express-validator'
   3 import { UserRight } from '../../shared'
   4 import { logger } from '../helpers/logger'
   5 import { UserModel } from '../models/account/user'
   6
   7 function ensureUserHasRight (userRight: UserRight) {
   8   return function (req: express.Request, res: express.Response, next: express.NextFunction) {
   9     const user = res.locals.oauth.token.user as UserModel
  10     if (user.hasRight(userRight) === false) {
  11       logger.info('User %s does not have right %s to access to %s.', user.username, UserRight[userRight], req.path)
  12       return res.sendStatus(403)
  13     }
  14
  15     return next()
  16   }
  17 }
  18
  19 // ---------------------------------------------------------------------------
  20
  21 export {
  22   ensureUserHasRight
  23 }