e2b28dfeb7
* add policy serialize method * Add policies to collection responses * wip * test: remove .only * refactor: Return policies with team and document requests * store policies on the client * refactor: drive admin UI from policies
46 lines
1.0 KiB
JavaScript
46 lines
1.0 KiB
JavaScript
// @flow
|
||
import { Team, User, Collection, Document } from '../models';
|
||
import policy from './policy';
|
||
import './apiKey';
|
||
import './collection';
|
||
import './document';
|
||
import './integration';
|
||
import './notificationSetting';
|
||
import './share';
|
||
import './user';
|
||
import './team';
|
||
|
||
const { can, abilities } = policy;
|
||
|
||
type Policy = {
|
||
[key: string]: boolean,
|
||
};
|
||
|
||
/*
|
||
* Given a user and a model – output an object which describes the actions the
|
||
* user may take against the model. This serialized policy is used for testing
|
||
* and sent in API responses to allow clients to adjust which UI is displayed.
|
||
*/
|
||
export function serialize(
|
||
model: User,
|
||
target: Team | Collection | Document
|
||
): Policy {
|
||
let output = {};
|
||
|
||
abilities.forEach(ability => {
|
||
if (model instanceof ability.model && target instanceof ability.target) {
|
||
let response = true;
|
||
try {
|
||
response = can(model, ability.action, target);
|
||
} catch (err) {
|
||
response = false;
|
||
}
|
||
output[ability.action] = response;
|
||
}
|
||
});
|
||
|
||
return output;
|
||
}
|
||
|
||
export default policy;
|