added ForbidSelfHarm role

PPLBandage · Oct 3, 2024 · 3242fe4 · 3242fe4
1 parent e7c4699
commit 3242fe4
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 2 deletions.
diff --git a/src/auth/auth.service.ts b/src/auth/auth.service.ts
@@ -74,10 +74,10 @@ const generateCookie = (session: string, exp: number): string => {
     return `sessionId=${session}; Path=/; Expires=${date.toUTCString()}; SameSite=Strict`;
 }
 
-export const hasAccess = (user: UserFull | undefined, level: number) => {
+export const hasAccess = (user: UserFull | undefined, level: number, skipSuperAdmin?: boolean) => {
     if (!user) return false;
     const user_roles = user.AccessRoles.map(role => role.level);
-    return user_roles.includes(level) || user_roles.includes(RolesEnum.SuperAdmin);
+    return user_roles.includes(level) || (!skipSuperAdmin ? user_roles.includes(RolesEnum.SuperAdmin) : false);
 }
 
 const generateSnowflake = (increment: bigint): string => {

diff --git a/src/interfaces/types.ts b/src/interfaces/types.ts
@@ -2,6 +2,7 @@ type ValueOf<T> = T[keyof T];
 
 export const RolesEnum = {
     SuperAdmin: 99,
+    ForbidSelfHarm: 4,  // 😁
     UpdateUsers: 3,
     ManageBandages: 1,
     Default: 0

diff --git a/src/workshop/bandage.service.ts b/src/workshop/bandage.service.ts
@@ -300,6 +300,8 @@ export class BandageService {
         if (bandage.categories.some(val => val.id === 4)) check = "under review";
         if (bandage.categories.some(val => val.id === 13)) check = "denied";
 
+        if (hasAccess(session.user, RolesEnum.ForbidSelfHarm, true)) permissions_level = 0;
+
         return {
             statusCode: 200,
             data: {
@@ -348,6 +350,13 @@ export class BandageService {
             }
         }
 
+        if (hasAccess(session.user, RolesEnum.ForbidSelfHarm, true)) {
+            return {
+                statusCode: 403,
+                message: "Forbidden"
+            };
+        }
+
         let title = undefined;
         let description = undefined;
         let categories = undefined;
@@ -441,6 +450,13 @@ export class BandageService {
             };
         }
 
+        if (hasAccess(session.user, RolesEnum.ForbidSelfHarm, true)) {
+            return {
+                statusCode: 403,
+                message: "Forbidden"
+            };
+        }
+
         await this.prisma.bandage.delete({ where: { id: bandage.id } });
         return {
             statusCode: 200,