642c11ff7d
* WIP: Archive * WIP * Finishing up archive endpoints * WIP * Update docs * Flow * Stash * Add toast message confirmations * Redirect handling, fixed publishhing info for archived docs * Redirect to collection instead of home, remove unused pub info * Account for deleted parent * Trash -> Archive Allow reading of archived docs * Dont overload deletedAt * Fixes * 💚 * ParentDocumentId wipe for unarchived sub docs * Fix: CMD+S exits editing Fix: Duplicate user name on published but unedited docs * Improve jank on paginated lists * Prevent editing when archived * 💚 Separate lint / flow steps
50 lines
1.2 KiB
JavaScript
50 lines
1.2 KiB
JavaScript
// @flow
|
|
import policy from './policy';
|
|
import { Document, Revision, User } from '../models';
|
|
|
|
const { allow, cannot } = policy;
|
|
|
|
allow(User, 'create', Document);
|
|
|
|
allow(User, ['read', 'delete'], Document, (user, document) => {
|
|
if (document.collection) {
|
|
if (cannot(user, 'read', document.collection)) return false;
|
|
}
|
|
|
|
return user.teamId === document.teamId;
|
|
});
|
|
|
|
allow(User, ['update', 'share'], Document, (user, document) => {
|
|
if (document.collection) {
|
|
if (cannot(user, 'read', document.collection)) return false;
|
|
}
|
|
if (document.archivedAt) return false;
|
|
|
|
return user.teamId === document.teamId;
|
|
});
|
|
|
|
allow(User, 'archive', Document, (user, document) => {
|
|
if (document.collection) {
|
|
if (cannot(user, 'read', document.collection)) return false;
|
|
}
|
|
if (!document.publishedAt) return false;
|
|
|
|
return user.teamId === document.teamId;
|
|
});
|
|
|
|
allow(User, 'unarchive', Document, (user, document) => {
|
|
if (document.collection) {
|
|
if (cannot(user, 'read', document.collection)) return false;
|
|
}
|
|
if (!document.archivedAt) return false;
|
|
|
|
return user.teamId === document.teamId;
|
|
});
|
|
|
|
allow(
|
|
Document,
|
|
'restore',
|
|
Revision,
|
|
(document, revision) => document.id === revision.documentId
|
|
);
|