1490c3a14b
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Tom Moor <tom@getoutline.com>
82 lines
1.8 KiB
TypeScript
82 lines
1.8 KiB
TypeScript
import {
|
||
Attachment,
|
||
FileOperation,
|
||
Team,
|
||
User,
|
||
Collection,
|
||
Comment,
|
||
Document,
|
||
Group,
|
||
Notification,
|
||
UserMembership,
|
||
} from "@server/models";
|
||
import { _abilities, _can, _cannot, _authorize } from "./cancan";
|
||
import "./apiKey";
|
||
import "./attachment";
|
||
import "./authenticationProvider";
|
||
import "./collection";
|
||
import "./comment";
|
||
import "./document";
|
||
import "./fileOperation";
|
||
import "./integration";
|
||
import "./pins";
|
||
import "./searchQuery";
|
||
import "./share";
|
||
import "./star";
|
||
import "./subscription";
|
||
import "./user";
|
||
import "./team";
|
||
import "./group";
|
||
import "./webhookSubscription";
|
||
import "./notification";
|
||
import "./userMembership";
|
||
|
||
type Policy = Record<string, boolean>;
|
||
|
||
// this should not be needed but is a workaround for this TypeScript issue:
|
||
// https://github.com/microsoft/TypeScript/issues/36931
|
||
export const authorize: typeof _authorize = _authorize;
|
||
|
||
export const can = _can;
|
||
|
||
export const cannot = _cannot;
|
||
|
||
export const abilities = _abilities;
|
||
|
||
/*
|
||
* Given a user and a model – output an object which describes the actions the
|
||
* user may take against the model. This serialized policy is used for testing
|
||
* and sent in API responses to allow clients to adjust which UI is displayed.
|
||
*/
|
||
export function serialize(
|
||
model: User,
|
||
target:
|
||
| Attachment
|
||
| Collection
|
||
| Comment
|
||
| FileOperation
|
||
| Team
|
||
| Document
|
||
| User
|
||
| Group
|
||
| Notification
|
||
| UserMembership
|
||
| null
|
||
): Policy {
|
||
const output = {};
|
||
abilities.forEach((ability) => {
|
||
if (model instanceof ability.model && target instanceof ability.target) {
|
||
let response = true;
|
||
|
||
try {
|
||
response = can(model, ability.action, target);
|
||
} catch (err) {
|
||
response = false;
|
||
}
|
||
|
||
output[ability.action] = response;
|
||
}
|
||
});
|
||
return output;
|
||
}
|