53 lines
1.2 KiB
Go
53 lines
1.2 KiB
Go
package guard
|
|
|
|
import (
|
|
"voltaserve/cache"
|
|
"voltaserve/errorpkg"
|
|
"voltaserve/model"
|
|
|
|
"github.com/gofiber/fiber/v2/log"
|
|
)
|
|
|
|
type FileGuard struct {
|
|
groupCache *cache.GroupCache
|
|
}
|
|
|
|
func NewFileGuard() *FileGuard {
|
|
return &FileGuard{
|
|
groupCache: cache.NewGroupCache(),
|
|
}
|
|
}
|
|
|
|
func (g *FileGuard) IsAuthorized(user model.User, file model.File, permission string) bool {
|
|
for _, p := range file.GetUserPermissions() {
|
|
if p.GetUserID() == user.GetID() && model.IsEquivalentPermission(p.GetValue(), permission) {
|
|
return true
|
|
}
|
|
}
|
|
for _, p := range file.GetGroupPermissions() {
|
|
g, err := g.groupCache.Get(p.GetGroupID())
|
|
if err != nil {
|
|
log.Error(err)
|
|
return false
|
|
}
|
|
for _, u := range g.GetUsers() {
|
|
if u == user.GetID() && model.IsEquivalentPermission(p.GetValue(), permission) {
|
|
return true
|
|
}
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func (g *FileGuard) Authorize(user model.User, file model.File, permission string) error {
|
|
if !g.IsAuthorized(user, file, permission) {
|
|
err := errorpkg.NewFilePermissionError(user, file, permission)
|
|
if g.IsAuthorized(user, file, model.PermissionViewer) {
|
|
return err
|
|
} else {
|
|
return errorpkg.NewOrganizationNotFoundError(err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|