Permission based on owners of groups

2020-12-31 15:00:02 -05:00
parent cb51fae2f6
commit 07f3c8b023
2 changed files with 40 additions and 29 deletions
@@ -2,21 +2,33 @@

 const {Group} = require('../models/group_ldap');

-let byGroup = async function(user, groups){
+let byGroup = async function(user, groups, ownerOf){
 	for(let group of groups){
 		try{
+			console.log('checking group', group, 'for access', groups, ownerOf)
 			group = await Group.get(group);
 			if(group.member.includes(user.dn)) return true
 		}catch(error){
-			throw error;
+			console.error('Error byGroup', groups, ownerOf);
 		}
-
-		let error = new Error('Insufficient Permission');
-		error.name = 'Insufficient Permission';
-		error.message = `You do not have permission to perform this action.`;
-		error.status = 401;
-		throw error;
 	}
+
+	for(let group of ownerOf || []){
+		try{
+			console.log('checking group owners', group, 'for access', groups, ownerOf)
+
+			group = await Group.get(group);
+			if(group.owner.includes(user.dn)) return true
+		}catch(error){
+			console.error('Error byGroup', groups, ownerOf);
+		}
+	}
+
+	let error = new Error('Insufficient Permission');
+	error.name = 'Insufficient Permission';
+	error.message = `You do not have permission to perform this action.`;
+	error.status = 401;
+	throw error;
 }

 module.exports = {byGroup};