Essential backend functionality, including logins.
This commit is contained in:
13
utils/requirePermission.js
Normal file
13
utils/requirePermission.js
Normal file
@@ -0,0 +1,13 @@
|
||||
'use strict';
|
||||
|
||||
// Adapted from https://stackoverflow.com/questions/9609325/node-js-express-js-user-permission-security-model
|
||||
module.exports = function requirePermission(permission) {
|
||||
return function(req, res, next) {
|
||||
console.log(req.user);
|
||||
if (req.user && req.user.permissions[permission]) {
|
||||
next();
|
||||
} else {
|
||||
res.status(403).send(`Permission ${permission} not met.`);
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user