mvep-api/src/middleware/permissions-middleware.ts at cda71bd3de070bedad8dd68db17083f512c3005f · The-Software-Squad/mvep-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
import { Request, Response, NextFunction } from "express-serve-static-core";
import expressAsyncHandler from "express-async-handler";
import SudoUser from "../resources/Sudouser/sudouser-model";

export const verifySuperAdmin = expressAsyncHandler(
    async (req: Request, res: Response, next: NextFunction) => {
        const loggedInSudoUser = await SudoUser.findById(req.loggedInSudoUserId);
        if (!loggedInSudoUser) {
            res.status(400);
            throw new Error("Sudo user is not logged in");
        }
        if (loggedInSudoUser?.role !== 1) {
            res.status(400);
            throw new Error("Not authorized to do the task");
        }
        next();
    }
)

export const verifyAdmin = expressAsyncHandler(
    async (req: Request, res: Response, next: NextFunction) => {
        const loggedInSudoUser = await SudoUser.findById(req.loggedInSudoUserId);
        if (!loggedInSudoUser) {
            res.json(400);
            throw new Error("Sudo user is not logged in");
        }
        if (loggedInSudoUser?.role !== 2) {
            res.status(400);
            throw new Error("Not authorized to do the task");
        }
        next();
    }
)

export const verifyCreator = expressAsyncHandler(
    async (req: Request, res: Response, next: NextFunction) => {
        const loggedInSudoUser = await SudoUser.findById(req.loggedInSudoUserId);
        if (!loggedInSudoUser) {
            res.json(400);
            throw new Error("Sudo user is not logged in");
        }
        if (loggedInSudoUser?.role !== 3) {
            res.status(400);
            throw new Error("Not authorized to do the task");
        }
        next();
    }
)