ownership

This commit is contained in:
Julian Krauser 2024-10-07 18:09:27 +02:00
parent 72fb6fbc20
commit e2b46becf0
13 changed files with 79 additions and 13 deletions

View file

@ -55,8 +55,9 @@ export default class PermissionHelper {
): (req: Request, res: Response, next: Function) => void {
return (req: Request, res: Response, next: Function) => {
const permissions = req.permissions;
const isOwner = req.isOwner;
if (this.can(permissions, requiredPermissions, section, module)) {
if (isOwner || this.can(permissions, requiredPermissions, section, module)) {
next();
} else {
throw new ForbiddenRequestException(
@ -74,8 +75,9 @@ export default class PermissionHelper {
): (req: Request, res: Response, next: Function) => void {
return (req: Request, res: Response, next: Function) => {
const permissions = req.permissions;
const isOwner = req.isOwner;
if (this.canSection(permissions, requiredPermissions, section)) {
if (isOwner || this.canSection(permissions, requiredPermissions, section)) {
next();
} else {
throw new ForbiddenRequestException(