449dc55aaa
* chore: Upgrade Prettier 1.8 -> 2.0 * chore: Upgrade Babel 6 -> 7 * chore: Upgrade eslint plugins * chore: Add eslint import/order rules * chore: Update flow-typed deps
42 lines
964 B
JavaScript
42 lines
964 B
JavaScript
// @flow
|
|
import { AdminRequiredError } from "../errors";
|
|
import { User } from "../models";
|
|
import policy from "./policy";
|
|
|
|
const { allow } = policy;
|
|
|
|
allow(
|
|
User,
|
|
"read",
|
|
User,
|
|
(actor, user) => user && user.teamId === actor.teamId
|
|
);
|
|
|
|
allow(User, "invite", User, (actor) => {
|
|
return true;
|
|
});
|
|
|
|
allow(User, "update", User, (actor, user) => {
|
|
if (!user || user.teamId !== actor.teamId) return false;
|
|
if (user.id === actor.id) return true;
|
|
throw new AdminRequiredError();
|
|
});
|
|
|
|
allow(User, "delete", User, (actor, user) => {
|
|
if (!user || user.teamId !== actor.teamId) return false;
|
|
if (user.id === actor.id) return true;
|
|
if (actor.isAdmin && !user.lastActiveAt) return true;
|
|
throw new AdminRequiredError();
|
|
});
|
|
|
|
allow(
|
|
User,
|
|
["promote", "demote", "activate", "suspend"],
|
|
User,
|
|
(actor, user) => {
|
|
if (!user || user.teamId !== actor.teamId) return false;
|
|
if (actor.isAdmin) return true;
|
|
throw new AdminRequiredError();
|
|
}
|
|
);
|