blob: bcb60ab959ee2094380bd78abac4888726cd11ad (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
'use strict'
const constants = require('../initializers/constants')
const logger = require('../helpers/logger')
const adminMiddleware = {
ensureIsAdmin: ensureIsAdmin
}
function ensureIsAdmin (req, res, next) {
const user = res.locals.oauth.token.user
if (user.role !== constants.USER_ROLES.ADMIN) {
logger.info('A non admin user is trying to access to an admin content.')
return res.sendStatus(403)
}
return next()
}
// ---------------------------------------------------------------------------
module.exports = adminMiddleware
|
