4nk/lecoffre-back
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(middlewares): add access to admin services for super-admin

Browse Source
This commit is contained in:
OxSaitama 2023-07-24 13:59:47 +02:00
parent 2f5720f2b3
commit ad4b43e56e
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/app/middlewares/RulesHandler.ts
View File

@ -9,13 +9,13 @@ export default async function ruleHandler(req: Request, response: Response, next
response.status(HttpCodes.UNAUTHORIZED).send("Missing rules in JWT");
return;
}
// const namespace = req.path && req.path.split("/")[3];
// const role = req.body.user.role;
const namespace = req.path && req.path.split("/")[3];
const role = req.body.user.role;
// if (namespace != "notary" && role != namespace) {
// response.status(HttpCodes.UNAUTHORIZED).send("Unauthorized with this role");
// return;
// }
if (namespace != "notary" && role != namespace && role != "super-admin") {
response.status(HttpCodes.UNAUTHORIZED).send("Unauthorized with this role");
return;
}
if (!rules.includes(req.method + " " + service)) {
response.status(HttpCodes.UNAUTHORIZED).send("Unauthorized with those rules");