Lint project

This commit is contained in:
Kurt Hutten
2020-11-11 03:18:10 +11:00
parent d8efead4e8
commit 39898270df
33 changed files with 852 additions and 481 deletions

View File

@@ -142,7 +142,7 @@ export const requireAuth = ({ role } = {}) => {
throw new ForbiddenError("You don't have access to do that.")
}
if(context.currentUser?.sub === '5cea3906-1e8e-4673-8f0d-89e6a963c096') {
if (context.currentUser?.sub === '5cea3906-1e8e-4673-8f0d-89e6a963c096') {
throw new ForbiddenError("That's a local admin ONLY.")
}
}

View File

@@ -7,37 +7,38 @@ export const requireOwnership = async ({ userId, userName, partId } = {}) => {
if (!context.currentUser) {
throw new AuthenticationError("You don't have permission to do that.")
}
if(!userId && !userName && !partId) {
if (!userId && !userName && !partId) {
throw new ForbiddenError("You don't have access to do that.")
}
if(context.currentUser.roles?.includes('admin')) {
if (context.currentUser.roles?.includes('admin')) {
return
}
const netlifyUserId = context.currentUser?.sub
if(userId && userId !== netlifyUserId) {
if (userId && userId !== netlifyUserId) {
throw new ForbiddenError("You don't own this resource.")
}
if(userName) {
if (userName) {
const user = await db.user.findOne({
where: { userName },
})
if(!user || user.id !== netlifyUserId) {
if (!user || user.id !== netlifyUserId) {
throw new ForbiddenError("You don't own this resource.")
}
}
if(partId) {
const user = await db.part.findOne({
where: { id: partId },
}).user()
if (partId) {
const user = await db.part
.findOne({
where: { id: partId },
})
.user()
if(!user || user.id !== netlifyUserId) {
if (!user || user.id !== netlifyUserId) {
throw new ForbiddenError("You don't own this resource.")
}
}
}