feat: #7743, privileges
Barış Soner Uşaklı
6 years ago
parent
627ecaf6bb
commit
faccb191ec
@ -1,232 +1,164 @@
|
|||||||
|
|
||||||
'use strict';
|
'use strict';
|
||||||
|
|
||||||
var async = require('async');
|
const _ = require('lodash');
|
||||||
var _ = require('lodash');
|
|
||||||
|
|
||||||
var categories = require('../categories');
|
const categories = require('../categories');
|
||||||
var user = require('../user');
|
const user = require('../user');
|
||||||
var groups = require('../groups');
|
const groups = require('../groups');
|
||||||
var helpers = require('./helpers');
|
const helpers = require('./helpers');
|
||||||
var plugins = require('../plugins');
|
const plugins = require('../plugins');
|
||||||
|
const utils = require('../utils');
|
||||||
|
|
||||||
module.exports = function (privileges) {
|
module.exports = function (privileges) {
|
||||||
privileges.categories = {};
|
privileges.categories = {};
|
||||||
|
|
||||||
privileges.categories.list = function (cid, callback) {
|
|
||||||
// Method used in admin/category controller to show all users/groups with privs in that given cid
|
// Method used in admin/category controller to show all users/groups with privs in that given cid
|
||||||
async.waterfall([
|
privileges.categories.list = async function (cid) {
|
||||||
function (next) {
|
async function getLabels() {
|
||||||
async.parallel({
|
return await utils.promiseParallel({
|
||||||
labels: function (next) {
|
users: plugins.fireHook('filter:privileges.list_human', privileges.privilegeLabels.slice()),
|
||||||
async.parallel({
|
groups: plugins.fireHook('filter:privileges.groups.list_human', privileges.privilegeLabels.slice()),
|
||||||
users: async.apply(plugins.fireHook, 'filter:privileges.list_human', privileges.privilegeLabels.slice()),
|
});
|
||||||
groups: async.apply(plugins.fireHook, 'filter:privileges.groups.list_human', privileges.privilegeLabels.slice()),
|
}
|
||||||
}, next);
|
|
||||||
},
|
const payload = await utils.promiseParallel({
|
||||||
users: function (next) {
|
labels: getLabels(),
|
||||||
helpers.getUserPrivileges(cid, 'filter:privileges.list', privileges.userPrivilegeList, next);
|
users: helpers.getUserPrivileges(cid, 'filter:privileges.list', privileges.userPrivilegeList),
|
||||||
},
|
groups: helpers.getGroupPrivileges(cid, 'filter:privileges.groups.list', privileges.groupPrivilegeList),
|
||||||
groups: function (next) {
|
});
|
||||||
helpers.getGroupPrivileges(cid, 'filter:privileges.groups.list', privileges.groupPrivilegeList, next);
|
|
||||||
},
|
|
||||||
}, next);
|
|
||||||
},
|
|
||||||
function (payload, next) {
|
|
||||||
// This is a hack because I can't do {labels.users.length} to echo the count in templates.js
|
// This is a hack because I can't do {labels.users.length} to echo the count in templates.js
|
||||||
payload.columnCountUser = payload.labels.users.length + 2;
|
payload.columnCountUser = payload.labels.users.length + 2;
|
||||||
payload.columnCountUserOther = payload.labels.users.length - privileges.privilegeLabels.length;
|
payload.columnCountUserOther = payload.labels.users.length - privileges.privilegeLabels.length;
|
||||||
payload.columnCountGroup = payload.labels.groups.length + 2;
|
payload.columnCountGroup = payload.labels.groups.length + 2;
|
||||||
payload.columnCountGroupOther = payload.labels.groups.length - privileges.privilegeLabels.length;
|
payload.columnCountGroupOther = payload.labels.groups.length - privileges.privilegeLabels.length;
|
||||||
next(null, payload);
|
return payload;
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.get = function (cid, uid, callback) {
|
privileges.categories.get = async function (cid, uid) {
|
||||||
var privs = ['topics:create', 'topics:read', 'topics:tag', 'read'];
|
const privs = ['topics:create', 'topics:read', 'topics:tag', 'read'];
|
||||||
async.waterfall([
|
|
||||||
function (next) {
|
const [userPrivileges, isAdministrator, isModerator] = await Promise.all([
|
||||||
async.parallel({
|
helpers.isUserAllowedTo(privs, uid, cid),
|
||||||
privileges: function (next) {
|
user.isAdministrator(uid),
|
||||||
helpers.isUserAllowedTo(privs, uid, cid, next);
|
user.isModerator(uid, cid),
|
||||||
},
|
]);
|
||||||
isAdministrator: function (next) {
|
|
||||||
user.isAdministrator(uid, next);
|
const privData = _.zipObject(privs, userPrivileges);
|
||||||
},
|
const isAdminOrMod = isAdministrator || isModerator;
|
||||||
isModerator: function (next) {
|
|
||||||
user.isModerator(uid, cid, next);
|
return await plugins.fireHook('filter:privileges.categories.get', {
|
||||||
},
|
'topics:create': privData['topics:create'] || isAdministrator,
|
||||||
}, next);
|
'topics:read': privData['topics:read'] || isAdministrator,
|
||||||
},
|
'topics:tag': privData['topics:tag'] || isAdministrator,
|
||||||
function (results, next) {
|
read: privData.read || isAdministrator,
|
||||||
var privData = _.zipObject(privs, results.privileges);
|
|
||||||
var isAdminOrMod = results.isAdministrator || results.isModerator;
|
|
||||||
|
|
||||||
plugins.fireHook('filter:privileges.categories.get', {
|
|
||||||
'topics:create': privData['topics:create'] || results.isAdministrator,
|
|
||||||
'topics:read': privData['topics:read'] || results.isAdministrator,
|
|
||||||
'topics:tag': privData['topics:tag'] || results.isAdministrator,
|
|
||||||
read: privData.read || results.isAdministrator,
|
|
||||||
cid: cid,
|
cid: cid,
|
||||||
uid: uid,
|
uid: uid,
|
||||||
editable: isAdminOrMod,
|
editable: isAdminOrMod,
|
||||||
view_deleted: isAdminOrMod,
|
view_deleted: isAdminOrMod,
|
||||||
isAdminOrMod: isAdminOrMod,
|
isAdminOrMod: isAdminOrMod,
|
||||||
}, next);
|
});
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.isAdminOrMod = function (cid, uid, callback) {
|
privileges.categories.isAdminOrMod = async function (cid, uid) {
|
||||||
if (parseInt(uid, 10) <= 0) {
|
if (parseInt(uid, 10) <= 0) {
|
||||||
return setImmediate(callback, null, false);
|
return false;
|
||||||
}
|
}
|
||||||
helpers.some([
|
const [isAdmin, isMod] = await Promise.all([
|
||||||
function (next) {
|
user.isAdministrator(uid),
|
||||||
user.isModerator(uid, cid, next);
|
user.isModerator(uid, cid),
|
||||||
},
|
]);
|
||||||
function (next) {
|
return isAdmin || isMod;
|
||||||
user.isAdministrator(uid, next);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.isUserAllowedTo = function (privilege, cid, uid, callback) {
|
privileges.categories.isUserAllowedTo = async function (privilege, cid, uid) {
|
||||||
if (!cid) {
|
if (!cid) {
|
||||||
return setImmediate(callback, null, false);
|
return false;
|
||||||
}
|
}
|
||||||
if (Array.isArray(cid)) {
|
const results = await helpers.isUserAllowedTo(privilege, uid, Array.isArray(cid) ? cid : [cid]);
|
||||||
helpers.isUserAllowedTo(privilege, uid, cid, function (err, results) {
|
|
||||||
callback(err, Array.isArray(results) && results.length ? results : false);
|
if (Array.isArray(results) && results.length) {
|
||||||
});
|
return Array.isArray(cid) ? results : results[0];
|
||||||
} else {
|
|
||||||
helpers.isUserAllowedTo(privilege, uid, [cid], function (err, results) {
|
|
||||||
callback(err, Array.isArray(results) && results.length ? results[0] : false);
|
|
||||||
});
|
|
||||||
}
|
}
|
||||||
|
return false;
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.can = function (privilege, cid, uid, callback) {
|
privileges.categories.can = async function (privilege, cid, uid) {
|
||||||
if (!cid) {
|
if (!cid) {
|
||||||
return setImmediate(callback, null, false);
|
return false;
|
||||||
}
|
}
|
||||||
async.waterfall([
|
const [disabled, isAdmin, isAllowed] = await Promise.all([
|
||||||
function (next) {
|
categories.getCategoryField(cid, 'disabled'),
|
||||||
async.parallel({
|
user.isAdministrator(uid),
|
||||||
disabled: async.apply(categories.getCategoryField, cid, 'disabled'),
|
privileges.categories.isUserAllowedTo(privilege, cid, uid),
|
||||||
isAdmin: async.apply(user.isAdministrator, uid),
|
]);
|
||||||
isAllowed: async.apply(privileges.categories.isUserAllowedTo, privilege, cid, uid),
|
return !disabled && (isAllowed || isAdmin);
|
||||||
}, next);
|
|
||||||
},
|
|
||||||
function (results, next) {
|
|
||||||
next(null, !results.disabled && (results.isAllowed || results.isAdmin));
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.filterCids = function (privilege, cids, uid, callback) {
|
privileges.categories.filterCids = async function (privilege, cids, uid) {
|
||||||
if (!Array.isArray(cids) || !cids.length) {
|
if (!Array.isArray(cids) || !cids.length) {
|
||||||
return callback(null, []);
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
cids = _.uniq(cids);
|
cids = _.uniq(cids);
|
||||||
|
const results = await privileges.categories.getBase(privilege, cids, uid);
|
||||||
async.waterfall([
|
return cids.filter(function (cid, index) {
|
||||||
function (next) {
|
return !!cid && !results.categories[index].disabled && (results.allowedTo[index] || results.isAdmin);
|
||||||
privileges.categories.getBase(privilege, cids, uid, next);
|
|
||||||
},
|
|
||||||
function (results, next) {
|
|
||||||
cids = cids.filter(function (cid, index) {
|
|
||||||
return !results.categories[index].disabled &&
|
|
||||||
(results.allowedTo[index] || results.isAdmin);
|
|
||||||
});
|
});
|
||||||
|
|
||||||
next(null, cids.filter(Boolean));
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.getBase = function (privilege, cids, uid, callback) {
|
privileges.categories.getBase = async function (privilege, cids, uid) {
|
||||||
async.parallel({
|
return await utils.promiseParallel({
|
||||||
categories: function (next) {
|
categories: categories.getCategoriesFields(cids, ['disabled']),
|
||||||
categories.getCategoriesFields(cids, ['disabled'], next);
|
allowedTo: helpers.isUserAllowedTo(privilege, uid, cids),
|
||||||
},
|
isAdmin: user.isAdministrator(uid),
|
||||||
allowedTo: function (next) {
|
});
|
||||||
helpers.isUserAllowedTo(privilege, uid, cids, next);
|
|
||||||
},
|
|
||||||
isAdmin: function (next) {
|
|
||||||
user.isAdministrator(uid, next);
|
|
||||||
},
|
|
||||||
}, callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.filterUids = function (privilege, cid, uids, callback) {
|
privileges.categories.filterUids = async function (privilege, cid, uids) {
|
||||||
if (!uids.length) {
|
if (!uids.length) {
|
||||||
return setImmediate(callback, null, []);
|
return [];
|
||||||
}
|
}
|
||||||
|
|
||||||
uids = _.uniq(uids);
|
uids = _.uniq(uids);
|
||||||
|
|
||||||
async.waterfall([
|
const [allowedTo, isAdmins] = await Promise.all([
|
||||||
function (next) {
|
helpers.isUsersAllowedTo(privilege, uids, cid),
|
||||||
async.parallel({
|
user.isAdministrator(uids),
|
||||||
allowedTo: function (next) {
|
]);
|
||||||
helpers.isUsersAllowedTo(privilege, uids, cid, next);
|
return uids.filter((uid, index) => allowedTo[index] || isAdmins[index]);
|
||||||
},
|
|
||||||
isAdmins: function (next) {
|
|
||||||
user.isAdministrator(uids, next);
|
|
||||||
},
|
|
||||||
}, next);
|
|
||||||
},
|
|
||||||
function (results, next) {
|
|
||||||
uids = uids.filter(function (uid, index) {
|
|
||||||
return results.allowedTo[index] || results.isAdmins[index];
|
|
||||||
});
|
|
||||||
next(null, uids);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.give = function (privileges, cid, groupName, callback) {
|
privileges.categories.give = async function (privileges, cid, groupName) {
|
||||||
helpers.giveOrRescind(groups.join, privileges, cid, groupName, callback);
|
await helpers.giveOrRescind(groups.join, privileges, cid, groupName);
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.rescind = function (privileges, cid, groupName, callback) {
|
privileges.categories.rescind = async function (privileges, cid, groupName) {
|
||||||
helpers.giveOrRescind(groups.leave, privileges, cid, groupName, callback);
|
await helpers.giveOrRescind(groups.leave, privileges, cid, groupName);
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.canMoveAllTopics = function (currentCid, targetCid, uid, callback) {
|
privileges.categories.canMoveAllTopics = async function (currentCid, targetCid, uid) {
|
||||||
async.waterfall([
|
const [isAdmin, isModerators] = await Promise.all([
|
||||||
function (next) {
|
user.isAdministrator(uid),
|
||||||
async.parallel({
|
user.isModerator(uid, [currentCid, targetCid]),
|
||||||
isAdmin: async.apply(user.isAdministrator, uid),
|
]);
|
||||||
isModerators: async.apply(user.isModerator, uid, [currentCid, targetCid]),
|
return isAdmin || !isModerators.includes(false);
|
||||||
}, next);
|
|
||||||
},
|
|
||||||
function (results, next) {
|
|
||||||
next(null, results.isAdmin || !results.isModerators.includes(false));
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.userPrivileges = function (cid, uid, callback) {
|
privileges.categories.userPrivileges = async function (cid, uid) {
|
||||||
var tasks = {};
|
const tasks = {};
|
||||||
|
|
||||||
privileges.userPrivilegeList.forEach(function (privilege) {
|
privileges.userPrivilegeList.forEach(function (privilege) {
|
||||||
tasks[privilege] = async.apply(groups.isMember, uid, 'cid:' + cid + ':privileges:' + privilege);
|
tasks[privilege] = groups.isMember(uid, 'cid:' + cid + ':privileges:' + privilege);
|
||||||
});
|
});
|
||||||
|
return await utils.promiseParallel(tasks);
|
||||||
async.parallel(tasks, callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.categories.groupPrivileges = function (cid, groupName, callback) {
|
privileges.categories.groupPrivileges = async function (cid, groupName) {
|
||||||
var tasks = {};
|
const tasks = {};
|
||||||
|
|
||||||
privileges.groupPrivilegeList.forEach(function (privilege) {
|
privileges.groupPrivilegeList.forEach(function (privilege) {
|
||||||
tasks[privilege] = async.apply(groups.isMember, groupName, 'cid:' + cid + ':privileges:' + privilege);
|
tasks[privilege] = groups.isMember(groupName, 'cid:' + cid + ':privileges:' + privilege);
|
||||||
});
|
});
|
||||||
|
return await utils.promiseParallel(tasks);
|
||||||
async.parallel(tasks, callback);
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
@ -1,189 +1,118 @@
|
|||||||
|
|
||||||
'use strict';
|
'use strict';
|
||||||
|
|
||||||
var async = require('async');
|
const _ = require('lodash');
|
||||||
var _ = require('lodash');
|
|
||||||
|
|
||||||
var groups = require('../groups');
|
const groups = require('../groups');
|
||||||
var plugins = require('../plugins');
|
const plugins = require('../plugins');
|
||||||
var helpers = require('./helpers');
|
const helpers = require('./helpers');
|
||||||
|
|
||||||
module.exports = function (privileges) {
|
module.exports = function (privileges) {
|
||||||
privileges.users = {};
|
privileges.users = {};
|
||||||
|
|
||||||
privileges.users.isAdministrator = function (uid, callback) {
|
privileges.users.isAdministrator = async function (uid) {
|
||||||
if (Array.isArray(uid)) {
|
return await isGroupMember(uid, 'administrators');
|
||||||
groups.isMembers(uid, 'administrators', callback);
|
|
||||||
} else {
|
|
||||||
groups.isMember(uid, 'administrators', callback);
|
|
||||||
}
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.users.isGlobalModerator = function (uid, callback) {
|
privileges.users.isGlobalModerator = async function (uid) {
|
||||||
if (Array.isArray(uid)) {
|
return await isGroupMember(uid, 'Global Moderators');
|
||||||
groups.isMembers(uid, 'Global Moderators', callback);
|
|
||||||
} else {
|
|
||||||
groups.isMember(uid, 'Global Moderators', callback);
|
|
||||||
}
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.users.isModerator = function (uid, cid, callback) {
|
async function isGroupMember(uid, groupName) {
|
||||||
|
return await groups[Array.isArray(uid) ? 'isMembers' : 'isMember'](uid, groupName);
|
||||||
|
}
|
||||||
|
|
||||||
|
privileges.users.isModerator = async function (uid, cid) {
|
||||||
if (Array.isArray(cid)) {
|
if (Array.isArray(cid)) {
|
||||||
isModeratorOfCategories(cid, uid, callback);
|
return await isModeratorOfCategories(cid, uid);
|
||||||
} else if (Array.isArray(uid)) {
|
} else if (Array.isArray(uid)) {
|
||||||
isModeratorsOfCategory(cid, uid, callback);
|
return await isModeratorsOfCategory(cid, uid);
|
||||||
} else {
|
|
||||||
isModeratorOfCategory(cid, uid, callback);
|
|
||||||
}
|
}
|
||||||
|
return await isModeratorOfCategory(cid, uid);
|
||||||
};
|
};
|
||||||
|
|
||||||
function isModeratorOfCategories(cids, uid, callback) {
|
async function isModeratorOfCategories(cids, uid) {
|
||||||
if (parseInt(uid, 10) <= 0) {
|
if (parseInt(uid, 10) <= 0) {
|
||||||
return filterIsModerator(cids, uid, cids.map(() => false), callback);
|
return await filterIsModerator(cids, uid, cids.map(() => false));
|
||||||
}
|
}
|
||||||
var uniqueCids;
|
|
||||||
async.waterfall([
|
const isGlobalModerator = await privileges.users.isGlobalModerator(uid);
|
||||||
function (next) {
|
|
||||||
privileges.users.isGlobalModerator(uid, next);
|
|
||||||
},
|
|
||||||
function (isGlobalModerator, next) {
|
|
||||||
if (isGlobalModerator) {
|
if (isGlobalModerator) {
|
||||||
return filterIsModerator(cids, uid, cids.map(() => true), callback);
|
return await filterIsModerator(cids, uid, cids.map(() => true));
|
||||||
}
|
}
|
||||||
|
const uniqueCids = _.uniq(cids);
|
||||||
|
const isAllowed = await helpers.isUserAllowedTo('moderate', uid, uniqueCids);
|
||||||
|
|
||||||
uniqueCids = _.uniq(cids);
|
const cidToIsAllowed = _.zipObject(uniqueCids, isAllowed);
|
||||||
|
const isModerator = cids.map(cid => cidToIsAllowed[cid]);
|
||||||
helpers.isUserAllowedTo('moderate', uid, uniqueCids, next);
|
return await filterIsModerator(cids, uid, isModerator);
|
||||||
},
|
|
||||||
function (isAllowed, next) {
|
|
||||||
const map = _.zipObject(uniqueCids, isAllowed);
|
|
||||||
const isModerator = cids.map(cid => map[cid]);
|
|
||||||
filterIsModerator(cids, uid, isModerator, next);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
function isModeratorsOfCategory(cid, uids, callback) {
|
async function isModeratorsOfCategory(cid, uids) {
|
||||||
async.waterfall([
|
const [check1, check2, check3] = await Promise.all([
|
||||||
function (next) {
|
privileges.users.isGlobalModerator(uids),
|
||||||
async.parallel([
|
groups.isMembers(uids, 'cid:' + cid + ':privileges:moderate'),
|
||||||
async.apply(privileges.users.isGlobalModerator, uids),
|
groups.isMembersOfGroupList(uids, 'cid:' + cid + ':privileges:groups:moderate'),
|
||||||
async.apply(groups.isMembers, uids, 'cid:' + cid + ':privileges:moderate'),
|
]);
|
||||||
async.apply(groups.isMembersOfGroupList, uids, 'cid:' + cid + ':privileges:groups:moderate'),
|
const isModerator = uids.map((uid, idx) => check1[idx] || check2[idx] || check3[idx]);
|
||||||
], next);
|
return await filterIsModerator(cid, uids, isModerator);
|
||||||
},
|
|
||||||
function (checks, next) {
|
|
||||||
var isModerator = checks[0].map(function (isMember, idx) {
|
|
||||||
return isMember || checks[1][idx] || checks[2][idx];
|
|
||||||
});
|
|
||||||
|
|
||||||
filterIsModerator(cid, uids, isModerator, next);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
function isModeratorOfCategory(cid, uid, callback) {
|
async function isModeratorOfCategory(cid, uid) {
|
||||||
if (parseInt(uid, 10) <= 0) {
|
const result = await isModeratorOfCategories([cid], uid);
|
||||||
return filterIsModerator(cid, uid, false, callback);
|
return result ? result[0] : false;
|
||||||
}
|
|
||||||
async.waterfall([
|
|
||||||
function (next) {
|
|
||||||
async.parallel([
|
|
||||||
async.apply(privileges.users.isGlobalModerator, uid),
|
|
||||||
async.apply(groups.isMember, uid, 'cid:' + cid + ':privileges:moderate'),
|
|
||||||
async.apply(groups.isMemberOfGroupList, uid, 'cid:' + cid + ':privileges:groups:moderate'),
|
|
||||||
], next);
|
|
||||||
},
|
|
||||||
function (checks, next) {
|
|
||||||
var isModerator = checks[0] || checks[1] || checks[2];
|
|
||||||
filterIsModerator(cid, uid, isModerator, next);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
function filterIsModerator(cid, uid, isModerator, callback) {
|
async function filterIsModerator(cid, uid, isModerator) {
|
||||||
async.waterfall([
|
const data = await plugins.fireHook('filter:user.isModerator', { uid: uid, cid: cid, isModerator: isModerator });
|
||||||
function (next) {
|
|
||||||
plugins.fireHook('filter:user.isModerator', { uid: uid, cid: cid, isModerator: isModerator }, next);
|
|
||||||
},
|
|
||||||
function (data, next) {
|
|
||||||
if ((Array.isArray(uid) || Array.isArray(cid)) && !Array.isArray(data.isModerator)) {
|
if ((Array.isArray(uid) || Array.isArray(cid)) && !Array.isArray(data.isModerator)) {
|
||||||
return callback(new Error('filter:user.isModerator - i/o mismatch'));
|
throw new Error('filter:user.isModerator - i/o mismatch');
|
||||||
}
|
}
|
||||||
|
|
||||||
next(null, data.isModerator);
|
return data.isModerator;
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
privileges.users.canEdit = function (callerUid, uid, callback) {
|
privileges.users.canEdit = async function (callerUid, uid) {
|
||||||
if (parseInt(callerUid, 10) === parseInt(uid, 10)) {
|
if (parseInt(callerUid, 10) === parseInt(uid, 10)) {
|
||||||
return process.nextTick(callback, null, true);
|
return true;
|
||||||
}
|
}
|
||||||
async.waterfall([
|
const [isAdmin, isGlobalMod, isTargetAdmin] = await Promise.all([
|
||||||
function (next) {
|
privileges.users.isAdministrator(callerUid),
|
||||||
async.parallel({
|
privileges.users.isGlobalModerator(callerUid),
|
||||||
isAdmin: function (next) {
|
privileges.users.isAdministrator(uid),
|
||||||
privileges.users.isAdministrator(callerUid, next);
|
]);
|
||||||
},
|
|
||||||
isGlobalMod: function (next) {
|
const data = await plugins.fireHook('filter:user.canEdit', {
|
||||||
privileges.users.isGlobalModerator(callerUid, next);
|
isAdmin: isAdmin,
|
||||||
},
|
isGlobalMod: isGlobalMod,
|
||||||
isTargetAdmin: function (next) {
|
isTargetAdmin: isTargetAdmin,
|
||||||
privileges.users.isAdministrator(uid, next);
|
canEdit: isAdmin || (isGlobalMod && !isTargetAdmin),
|
||||||
},
|
callerUid: callerUid,
|
||||||
}, next);
|
uid: uid,
|
||||||
},
|
});
|
||||||
function (results, next) {
|
return data.canEdit;
|
||||||
results.canEdit = results.isAdmin || (results.isGlobalMod && !results.isTargetAdmin);
|
|
||||||
results.callerUid = callerUid;
|
|
||||||
results.uid = uid;
|
|
||||||
plugins.fireHook('filter:user.canEdit', results, next);
|
|
||||||
},
|
|
||||||
function (data, next) {
|
|
||||||
next(null, data.canEdit);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.users.canBanUser = function (callerUid, uid, callback) {
|
privileges.users.canBanUser = async function (callerUid, uid) {
|
||||||
async.waterfall([
|
const [canBan, isTargetAdmin] = await Promise.all([
|
||||||
function (next) {
|
privileges.global.can('ban', callerUid),
|
||||||
async.parallel({
|
privileges.users.isAdministrator(uid),
|
||||||
canBan: function (next) {
|
]);
|
||||||
privileges.global.can('ban', callerUid, next);
|
|
||||||
},
|
const data = await plugins.fireHook('filter:user.canBanUser', {
|
||||||
isTargetAdmin: function (next) {
|
canBan: canBan && !isTargetAdmin,
|
||||||
privileges.users.isAdministrator(uid, next);
|
callerUid: callerUid,
|
||||||
},
|
uid: uid,
|
||||||
}, next);
|
});
|
||||||
},
|
return data.canBan;
|
||||||
function (results, next) {
|
|
||||||
results.canBan = !results.isTargetAdmin && results.canBan;
|
|
||||||
results.callerUid = callerUid;
|
|
||||||
results.uid = uid;
|
|
||||||
plugins.fireHook('filter:user.canBanUser', results, next);
|
|
||||||
},
|
|
||||||
function (data, next) {
|
|
||||||
next(null, data.canBan);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
|
|
||||||
privileges.users.hasBanPrivilege = function (uid, callback) {
|
privileges.users.hasBanPrivilege = async function (uid) {
|
||||||
async.waterfall([
|
const canBan = await privileges.global.can('ban', uid);
|
||||||
function (next) {
|
const data = await plugins.fireHook('filter:user.hasBanPrivilege', {
|
||||||
privileges.global.can('ban', uid, next);
|
|
||||||
},
|
|
||||||
function (canBan, next) {
|
|
||||||
plugins.fireHook('filter:user.hasBanPrivilege', {
|
|
||||||
uid: uid,
|
uid: uid,
|
||||||
canBan: canBan,
|
canBan: canBan,
|
||||||
}, next);
|
});
|
||||||
},
|
return data.canBan;
|
||||||
function (data, next) {
|
|
||||||
next(null, data.canBan);
|
|
||||||
},
|
|
||||||
], callback);
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Loading…
Reference in New Issue