Revoked share links (#664)

* Move to revokation API for share links

* Respect revoked share links
Add documentation for shares endpoints

* 💚
This commit is contained in:
Tom Moor
2018-06-16 12:36:25 -07:00
committed by GitHub
parent fad5976dd2
commit ae502c10c9
10 changed files with 190 additions and 20 deletions

View File

@ -7,7 +7,7 @@ const { allow } = policy;
allow(User, ['read'], Share, (user, share) => user.teamId === share.teamId);
allow(User, ['update'], Share, (user, share) => false);
allow(User, ['delete'], Share, (user, share) => {
allow(User, ['revoke'], Share, (user, share) => {
if (!share || user.teamId !== share.teamId) return false;
if (user.id === share.userId) return true;
if (user.isAdmin) return true;