Ryan/docmost
1
0
Fork 0
mirror of https://github.com/docmost/docmost.git synced 2025-11-13 22:11:16 +10:00
Code Issues Packages Projects Releases Wiki Activity

server: page permissions

Browse Source
This commit is contained in:
Philipinho
2024-04-22 02:25:03 +01:00
parent 3462c7fdbc
commit 28ec542ed6
6 changed files with 149 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
apps/server/src/collaboration/extensions/authentication.extension.ts
View File

@ -2,12 +2,18 @@ import { Extension, onAuthenticatePayload } from '@hocuspocus/server';
import { Injectable, UnauthorizedException } from '@nestjs/common';
import { TokenService } from '../../core/auth/services/token.service';
import { UserRepo } from '@docmost/db/repos/user/user.repo';
import { PageRepo } from '@docmost/db/repos/page/page.repo';
import { SpaceMemberRepo } from '@docmost/db/repos/space/space-member.repo';
import { findHighestUserSpaceRole } from '@docmost/db/repos/space/utils';
import { SpaceRole } from '../../helpers/types/permission';
@Injectable()
export class AuthenticationExtension implements Extension {
constructor(
private tokenService: TokenService,
private userRepo: UserRepo,
private pageRepo: PageRepo,
private readonly spaceMemberRepo: SpaceMemberRepo,
) {}
async onAuthenticate(data: onAuthenticatePayload) {
@ -30,8 +36,25 @@ export class AuthenticationExtension implements Extension {
throw new UnauthorizedException();
}
//TODO: Check if the page exists and verify user permissions for page.
// if all fails, abort connection
const page = await this.pageRepo.findById(documentName);
if (!page) {
throw new UnauthorizedException('Page not found');
}
const userSpaceRoles = await this.spaceMemberRepo.getUserSpaceRoles(
user.id,
page.spaceId,
);
const userSpaceRole = findHighestUserSpaceRole(userSpaceRoles);
if (!userSpaceRole) {
throw new UnauthorizedException();
}
if (userSpaceRole === SpaceRole.READER) {
data.connection.readOnly = true;
}
return {
user,