pics/lib/middleware/permission/haspermsmiddleware.js

'use strict';

//todo: refactor
const cache = {
	one: {}, all: {}, any: {},
};

module.exports = {

	one: (requiredPermission) => {
		return cache.one[requiredPermission] || (cache.one[requiredPermission] = function(req, res, next) {
			if (!res.locals.permissions.get(requiredPermission)) {
				const { __ } = res.locals;
				return res.status(403).render('message', {
					'title': __('Forbidden'),
					'message': __('No Permission'),
					'redirect': req.headers.referer || '/',
				});
			}
			next();
		});
	},

	all: (...requiredPermissions) => {
		//these caches working as intended with arrays?
		return cache.all[requiredPermissions] || (cache.all[requiredPermissions] = function(req, res, next) {
			if (!res.locals.permissions.hasAll(...requiredPermissions)) {
				const { __ } = res.locals;
				return res.status(403).render('message', {
					'title': __('Forbidden'),
					'message': __('No Permission'),
					'redirect': req.headers.referer || '/',
				});
			}
			next();
		});
	},

	any: (...requiredPermissions) => {
		//these caches working as intended with arrays?
		return cache.any[requiredPermissions] || (cache.any[requiredPermissions] = function(req, res, next) {
			if (!res.locals.permissions.hasAny(...requiredPermissions)) {
				const { __ } = res.locals;
				return res.status(403).render('message', {
					'title': __('Forbidden'),
					'message': __('No Permission'),
					'redirect': req.headers.referer || '/',
				});
			}
			next();
		});
	},

};