1 files changed, 17 insertions, 0 deletions

diff --git a/server/middlewares/admin.ts b/server/middlewares/admin.ts
new file mode 100644
index 000000000..ebafa36a4
--- /dev/null
+++ b/server/middlewares/admin.ts
@@ -0,0 +1,17 @@
+const logger = require('../helpers/logger')
+
+function ensureIsAdmin (req, res, next) {
+  const user = res.locals.oauth.token.user
+  if (user.isAdmin() === false) {
+    logger.info('A non admin user is trying to access to an admin content.')
+    return res.sendStatus(403)
+  }
+
+  return next()
+}
+
+// ---------------------------------------------------------------------------
+
+export {
+  ensureIsAdmin
+}