sudoxreboot/habitica
1
0
Fork 0
mirror of https://github.com/sudoxnym/habitica.git synced 2026-08-01 23:40:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Got accessControl working!!!

Browse source
This commit is contained in:
Tyler Renelle 2012-08-26 11:58:03 -04:00
parent cb6c6f424b
commit 0e4e306046
4 changed files with 23 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
lib/server/index.js
View file

@ -53,6 +53,7 @@ habitrpgMiddleware = function(req, res, next) {
model.setNull('_userId', req.session.userId); model.setNull('_userId', req.session.userId);
model.set('_mobileDevice', /Android|webOS|iPhone|iPad|iPod|BlackBerry/i.test(req.header('User-Agent'))); model.set('_mobileDevice', /Android|webOS|iPhone|iPad|iPod|BlackBerry/i.test(req.header('User-Agent')));
model.set('_nodeEnv', process.env.NODE_ENV); model.set('_nodeEnv', process.env.NODE_ENV);
require('./setupStore').accessControl(store);
return next(); return next();
}; };

16
lib/server/setupStore.js
View file

@ -7,12 +7,16 @@ module.exports.queries = function(store) {
}; };
module.exports.accessControl = function(store) { module.exports.accessControl = function(store) {
store.readPathAccess('users.*', function(userId, accept) { store.accessControl = true;
console.log(accept, 'read.accept'); store.readPathAccess('users.*', function(captures, next) {
return accept(userId === this.session.userId); var allowed;
allowed = captures === this.session.userId;
return next(allowed);
}); });
return store.writeAccess('*', 'users.*', function(mutator, userId, accept) { return store.writeAccess('*', 'users.*', function(captures, value, next) {
console.log(accept, 'write.accept'); var allowed, pathArray;
return accept(userId === this.session.userId); pathArray = captures.split('.');
allowed = pathArray[0] === this.session.userId;
return next(allowed);
}); });
}; };

3
src/server/index.coffee
View file

@ -24,7 +24,6 @@ derby.use(require 'racer-db-mongo')
store = derby.createStore store = derby.createStore
db: {type: 'Mongo', uri: process.env.NODE_DB_URI} db: {type: 'Mongo', uri: process.env.NODE_DB_URI}
listen: server listen: server
# require('./setupStore').accessControl(store)
ONE_YEAR = 1000 * 60 * 60 * 24 * 365 ONE_YEAR = 1000 * 60 * 60 * 24 * 365
root = path.dirname path.dirname __dirname root = path.dirname path.dirname __dirname
@ -42,6 +41,8 @@ habitrpgMiddleware = (req, res, next) ->
# same for production/development # same for production/development
model.set '_nodeEnv', process.env.NODE_ENV model.set '_nodeEnv', process.env.NODE_ENV
require('./setupStore').accessControl(store)
next() next()

22
src/server/setupStore.coffee
View file

@ -4,17 +4,15 @@ module.exports.queries = (store) ->
module.exports.accessControl = (store) -> module.exports.accessControl = (store) ->
# store.accessControl = true store.accessControl = true
# FIXME store.readPathAccess 'users.*', (captures, next) ->
# getting Property 'callback' of object 0,b800598e-0cc5-41e7-931f-431b8888e07a.2,set,users.be06f5d3-5ffd-4a9a-828f-87c5f43d3562,[object Object] is not a function allowed = (captures == @session.userId)
# at Object.module.exports.server._commit.res.fail (node_modules/derby/node_modules/racer/lib/txns/txns.Model.js:319:22) # console.log { readPathAccess: {captures:captures, sessionUserId:@session.userId, allowed:allowed, next:next} }
# at node_modules/derby/node_modules/racer/lib/accessControl/accessControl.Store.js:221:34 next(allowed)
store.readPathAccess 'users.*', (userId, accept) ->
console.log accept, 'read.accept'
accept(userId == @session.userId)
store.writeAccess '*', 'users.*', (mutator, userId, accept) -> store.writeAccess '*', 'users.*', (captures, value, next) ->
console.log accept, 'write.accept' pathArray = captures.split('.')
accept(userId == @session.userId) allowed = (pathArray[0] == @session.userId)
# console.log { writeAccess: {captures:captures, value:value, next:next, pathArray:pathArray} }
next(allowed)