Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-08-31 05:16:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

refactor: remove usage of middlewares

Browse Source 
Specifically, middleware.isAdmin|exposePrivilegeSet|exposePrivileges
This commit is contained in:
Julian Lam
2020-10-29 07:56:28 -04:00
parent bff53de03f
commit 266d7587b2
8 changed files with 50 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/controllers/write/admin.js
View File

@@ -1,13 +1,16 @@
'use strict';
const meta = require('../../meta');
const privileges = require('../../privileges');
const helpers = require('../helpers');
const Admin = module.exports;
Admin.updateSetting = async (req, res) => {
if (!res.locals.privileges['admin:settings']) {
const ok = await privileges.admin.can('admin:settings', req.uid);
if (!ok) {
return helpers.formatApiResponse(403, res);
}

14
src/controllers/write/categories.js
View File

@@ -1,5 +1,6 @@
'use strict';
const privileges = require('../../privileges');
const categories = require('../../categories');
const api = require('../../api');
@@ -7,12 +8,23 @@ const helpers = require('../helpers');
const Categories = module.exports;
const hasAdminPrivilege = async (uid) => {
const ok = await privileges.admin.can(`admin:categories`, uid);
if (!ok) {
throw new Error('[[error:no-privileges]]');
}
};
Categories.create = async (req, res) => {
await hasAdminPrivilege(req.uid);
const response = await api.categories.create(req, req.body);
helpers.formatApiResponse(200, res, response);
};
Categories.update = async (req, res) => {
await hasAdminPrivilege(req.uid);
const payload = {};
payload[req.params.cid] = req.body;
await api.categories.update(req, payload);
@@ -21,6 +33,8 @@ Categories.update = async (req, res) => {
};
Categories.delete = async (req, res) => {
await hasAdminPrivilege(req.uid);
await api.categories.delete(req, { cid: req.params.cid });
helpers.formatApiResponse(200, res);
};

22
src/controllers/write/users.js
View File

@@ -2,13 +2,22 @@
const api = require('../../api');
const meta = require('../../meta');
const privileges = require('../../privileges');
const utils = require('../../utils');
const helpers = require('../helpers');
const Users = module.exports;
const hasAdminPrivilege = async (uid, privilege) => {
const ok = await privileges.admin.can(`admin:${privilege}`, uid);
if (!ok) {
throw new Error('[[error:no-privileges]]');
}
};
Users.create = async (req, res) => {
await hasAdminPrivilege(req.uid, 'users');
const userObj = await api.users.create(req, req.body);
helpers.formatApiResponse(200, res, userObj);
};
@@ -24,6 +33,7 @@ Users.delete = async (req, res) => {
};
Users.deleteMany = async (req, res) => {
await hasAdminPrivilege(req.uid, 'users');
await api.users.deleteMany(req, req.body);
helpers.formatApiResponse(200, res);
};
@@ -49,19 +59,20 @@ Users.unfollow = async (req, res) => {
};
Users.ban = async (req, res) => {
await hasAdminPrivilege(req.uid, 'users');
await api.users.ban(req, { ...req.body, uid: req.params.uid });
helpers.formatApiResponse(200, res);
};
Users.unban = async (req, res) => {
await hasAdminPrivilege(req.uid, 'users');
await api.users.unban(req, { ...req.body, uid: req.params.uid });
helpers.formatApiResponse(200, res);
};
Users.generateToken = async (req, res) => {
if (!res.locals.privileges['admin:settings']) {
return helpers.formatApiResponse(403, res, new Error('[[error:no-privileges]]'));
} else if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10)) {
await hasAdminPrivilege(req.uid, 'settings');
if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10)) {
return helpers.formatApiResponse(401, res);
}
@@ -80,9 +91,8 @@ Users.generateToken = async (req, res) => {
};
Users.deleteToken = async (req, res) => {
if (!res.locals.privileges['admin:settings']) {
return helpers.formatApiResponse(403, res, new Error('[[error:no-privileges]]'));
} else if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10)) {
await hasAdminPrivilege(req.uid, 'settings');
if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10)) {
return helpers.formatApiResponse(401, res);
}