import {UserManager} from "../model/memory/UserManager"; import {NextFunction, Request, Response} from "express"; import {Error, ErrorCodes} from "../../common/entities/Error"; import {UserRoles} from "../../common/entities/User"; import {ObjectManagerRepository} from "../model/ObjectManagerRepository"; export class UserRequestConstrainsMWs { public static forceSelfRequest(req:Request, res:Response, next:NextFunction){ if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) { return next(); } if(req.session.user.id !== req.params.id){ return next(new Error(ErrorCodes.NOT_AUTHORISED)); } return next(); } public static notSelfRequest(req:Request, res:Response, next:NextFunction){ if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) { return next(); } if(req.session.user.id === req.params.id){ return next(new Error(ErrorCodes.NOT_AUTHORISED)); } return next(); } public static notSelfRequestOr2Admins(req:Request, res:Response, next:NextFunction){ if ((typeof req.params === 'undefined') || (typeof req.params.id === 'undefined')) { return next(); } if(req.session.user.id !== req.params.id){ return next(); } //TODO: fix it! ObjectManagerRepository.getInstance().getUserManager().find({minRole:UserRoles.Admin}, (err, result) =>{ if ((err) || (!result)) { return next(new Error(ErrorCodes.GENERAL_ERROR)); } if(result.length <= 1) { return next(new Error(ErrorCodes.GENERAL_ERROR)); } }); return next(); } }