32 lines
723 B
JavaScript
32 lines
723 B
JavaScript
'use strict';
|
|
|
|
const {Group} = require('../models/group_ldap');
|
|
|
|
let byGroup = async function(user, groups, ownerOf){
|
|
for(let group of groups){
|
|
try{
|
|
group = await Group.get(group);
|
|
if(group.member.includes(user.dn)) return true
|
|
}catch(error){
|
|
// group not found, continue checking
|
|
}
|
|
}
|
|
|
|
for(let group of ownerOf || []){
|
|
try{
|
|
group = await Group.get(group);
|
|
if(group.owner.includes(user.dn)) return true
|
|
}catch(error){
|
|
// group not found, continue checking
|
|
}
|
|
}
|
|
|
|
let error = new Error('Insufficient Permission');
|
|
error.name = 'Insufficient Permission';
|
|
error.message = `You do not have permission to perform this action.`;
|
|
error.status = 401;
|
|
throw error;
|
|
}
|
|
|
|
module.exports = {byGroup};
|