feat: add integration access settings (#725)
* feat: add integration access settings * fix: typecheck and test issues * fix: test timeout * chore: address pull request feedback * chore: add throw if action forbidden for integration permissions * fix: unable to create new migrations because of duplicate prevId in sqlite snapshots * chore: add sqlite migration for integration permissions * test: add unit tests for integration access * test: add permission checks to integration router tests * test: add unit test for integration permissions * chore: add mysql migration * fix: format issues
This commit is contained in:
26
packages/auth/permissions/integration-permissions.ts
Normal file
26
packages/auth/permissions/integration-permissions.ts
Normal file
@@ -0,0 +1,26 @@
|
||||
import type { Session } from "next-auth";
|
||||
|
||||
import type { IntegrationPermission } from "@homarr/definitions";
|
||||
|
||||
export interface IntegrationPermissionsProps {
|
||||
userPermissions: {
|
||||
permission: IntegrationPermission;
|
||||
}[];
|
||||
groupPermissions: {
|
||||
permission: IntegrationPermission;
|
||||
}[];
|
||||
}
|
||||
|
||||
export const constructIntegrationPermissions = (integration: IntegrationPermissionsProps, session: Session | null) => {
|
||||
return {
|
||||
hasFullAccess: session?.user.permissions.includes("integration-full-all"),
|
||||
hasInteractAccess:
|
||||
integration.userPermissions.some(({ permission }) => permission === "interact") ||
|
||||
integration.groupPermissions.some(({ permission }) => permission === "interact") ||
|
||||
session?.user.permissions.includes("integration-interact-all"),
|
||||
hasUseAccess:
|
||||
integration.userPermissions.length >= 1 ||
|
||||
integration.groupPermissions.length >= 1 ||
|
||||
session?.user.permissions.includes("integration-use-all"),
|
||||
};
|
||||
};
|
||||
Reference in New Issue
Block a user