mirror of
https://github.com/BobbyWibowo/lolisafe.git
synced 2024-12-13 16:06:21 +00:00
d8b78d29ed
and allow migration script to not throw when root user is missing this facilitates safely removing root user altogether via database query if you don't use it
57 lines
1.5 KiB
JavaScript
57 lines
1.5 KiB
JavaScript
const self = {}
|
|
|
|
self.permissions = Object.freeze({
|
|
user: 0, // Upload & delete own files, create & delete albums
|
|
vip: 5, // If used with "retentionPeriods" in config, may have additional retention period options
|
|
vvip: 10, // If used with "retentionPeriods" in config, may have additional retention period options
|
|
moderator: 50, // Delete other user's files
|
|
admin: 80, // Manage users (disable accounts) & create moderators
|
|
superadmin: 100 // Create admins
|
|
// Groups will inherit permissions from groups which have lower value
|
|
// You should NOT have multiple groups with exact same values
|
|
})
|
|
|
|
self.keys = Object.freeze(Object.keys(self.permissions))
|
|
|
|
self.group = user => {
|
|
// root bypass
|
|
if (user.username === 'root') {
|
|
return 'superadmin'
|
|
}
|
|
for (const key of self.keys) {
|
|
if (user.permission === self.permissions[key]) {
|
|
return key
|
|
}
|
|
}
|
|
return null
|
|
}
|
|
|
|
// returns true if user is in the group OR higher
|
|
self.is = (user, group) => {
|
|
// root bypass
|
|
if (user.username === 'root') {
|
|
return true
|
|
}
|
|
if (typeof group !== 'string' || !group) {
|
|
return false
|
|
}
|
|
const permission = user.permission || 0
|
|
return permission >= self.permissions[group]
|
|
}
|
|
|
|
self.higher = (user, target) => {
|
|
const userPermission = user.permission || 0
|
|
const targetPermission = target.permission || 0
|
|
return userPermission > targetPermission
|
|
}
|
|
|
|
self.mapPermissions = user => {
|
|
const map = {}
|
|
Object.keys(self.permissions).forEach(group => {
|
|
map[group] = self.is(user, group)
|
|
})
|
|
return map
|
|
}
|
|
|
|
module.exports = self
|