Backend support
This commit is contained in:
@ -19,8 +19,13 @@ allow(User, ['update', 'delete'], User, (actor, user) => {
|
||||
throw new AdminRequiredError();
|
||||
});
|
||||
|
||||
allow(User, ['promote', 'demote'], User, (actor, user) => {
|
||||
if (!user || user.teamId !== actor.teamId) return false;
|
||||
if (actor.isAdmin) return true;
|
||||
throw new AdminRequiredError();
|
||||
});
|
||||
allow(
|
||||
User,
|
||||
['promote', 'demote', 'activate', 'suspend'],
|
||||
User,
|
||||
(actor, user) => {
|
||||
if (!user || user.teamId !== actor.teamId) return false;
|
||||
if (actor.isAdmin) return true;
|
||||
throw new AdminRequiredError();
|
||||
}
|
||||
);
|
||||
|
Reference in New Issue
Block a user