408cdeb5c3
* feat: add integration access settings * fix: typecheck and test issues * fix: test timeout * chore: address pull request feedback * chore: add throw if action forbidden for integration permissions * fix: unable to create new migrations because of duplicate prevId in sqlite snapshots * chore: add sqlite migration for integration permissions * test: add unit tests for integration access * test: add permission checks to integration router tests * test: add unit test for integration permissions * chore: add mysql migration * fix: format issues
42 lines
1.2 KiB
TypeScript
42 lines
1.2 KiB
TypeScript
import type { Session } from "next-auth";
|
|
|
|
import type { BoardPermission } from "@homarr/definitions";
|
|
|
|
export type BoardPermissionsProps = (
|
|
| {
|
|
creator: {
|
|
id: string;
|
|
} | null;
|
|
}
|
|
| {
|
|
creatorId: string | null;
|
|
}
|
|
) & {
|
|
userPermissions: {
|
|
permission: BoardPermission;
|
|
}[];
|
|
groupPermissions: {
|
|
permission: BoardPermission;
|
|
}[];
|
|
isPublic: boolean;
|
|
};
|
|
|
|
export const constructBoardPermissions = (board: BoardPermissionsProps, session: Session | null) => {
|
|
const creatorId = "creator" in board ? board.creator?.id : board.creatorId;
|
|
|
|
return {
|
|
hasFullAccess: session?.user.id === creatorId || session?.user.permissions.includes("board-full-all"),
|
|
hasChangeAccess:
|
|
session?.user.id === creatorId ||
|
|
board.userPermissions.some(({ permission }) => permission === "modify") ||
|
|
board.groupPermissions.some(({ permission }) => permission === "modify") ||
|
|
session?.user.permissions.includes("board-modify-all"),
|
|
hasViewAccess:
|
|
session?.user.id === creatorId ||
|
|
board.userPermissions.length >= 1 ||
|
|
board.groupPermissions.length >= 1 ||
|
|
board.isPublic ||
|
|
session?.user.permissions.includes("board-view-all"),
|
|
};
|
|
};
|