You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22 lines
606 B
22 lines
606 B
const securityManager = require('./db/SecurityManager');
|
|
|
|
// checks for padAccess
|
|
module.exports = async function (req, res) {
|
|
try {
|
|
const {session: {user} = {}} = req;
|
|
const accessObj = await securityManager.checkAccess(
|
|
req.params.pad, req.cookies.sessionID, req.cookies.token, user);
|
|
|
|
if (accessObj.accessStatus === 'grant') {
|
|
// there is access, continue
|
|
return true;
|
|
} else {
|
|
// no access
|
|
res.status(403).send("403 - Can't touch this");
|
|
return false;
|
|
}
|
|
} catch (err) {
|
|
// @TODO - send internal server error here?
|
|
throw err;
|
|
}
|
|
};
|