mirror of
https://github.com/documize/community.git
synced 2025-08-02 20:15:26 +02:00
refactored permission code
This commit is contained in:
parent
c12c000ef3
commit
6a651770b5
24 changed files with 753 additions and 632 deletions
|
@ -12,8 +12,6 @@
|
|||
package space
|
||||
|
||||
import (
|
||||
"time"
|
||||
|
||||
"github.com/documize/community/model"
|
||||
)
|
||||
|
||||
|
@ -55,44 +53,6 @@ func (l *Space) IsRestricted() bool {
|
|||
return l.Type == ScopeRestricted
|
||||
}
|
||||
|
||||
// Permission represents a permission for a space and is persisted to the database.
|
||||
type Permission struct {
|
||||
ID uint64 `json:"id"`
|
||||
OrgID string `json:"-"`
|
||||
Who string `json:"who"` // user, role
|
||||
WhoID string `json:"whoId"` // either a user or role ID
|
||||
Action PermissionAction `json:"action"` // view, edit, delete
|
||||
Scope string `json:"scope"` // object, table
|
||||
Location string `json:"location"` // table name
|
||||
RefID string `json:"refId"` // id of row in table / blank when scope=table
|
||||
Created time.Time `json:"created"`
|
||||
}
|
||||
|
||||
// PermissionAction details type of action
|
||||
type PermissionAction string
|
||||
|
||||
const (
|
||||
// SpaceView action means you can view a space and documents therein
|
||||
SpaceView PermissionAction = "view"
|
||||
// SpaceManage action means you can add, remove users, set permissions, but not delete that space
|
||||
SpaceManage PermissionAction = "manage"
|
||||
// SpaceOwner action means you can delete a space and do all SpaceManage functions
|
||||
SpaceOwner PermissionAction = "own"
|
||||
|
||||
// DocumentAdd action means you can create/upload documents to a space
|
||||
DocumentAdd PermissionAction = "doc-add"
|
||||
// DocumentEdit action means you can edit documents in a space
|
||||
DocumentEdit PermissionAction = "doc-edit"
|
||||
// DocumentDelete means you can delete documents in a space
|
||||
DocumentDelete PermissionAction = "doc-delete"
|
||||
// DocumentMove means you can move documents between spaces
|
||||
DocumentMove PermissionAction = "doc-move"
|
||||
// DocumentCopy means you can copy documents within and between spaces
|
||||
DocumentCopy PermissionAction = "doc-copy"
|
||||
// DocumentTemplate means you can create, edit and delete document templates and content blocks
|
||||
DocumentTemplate PermissionAction = "doc-template"
|
||||
)
|
||||
|
||||
// Viewer details who can see a particular space
|
||||
type Viewer struct {
|
||||
Name string `json:"name"`
|
||||
|
@ -104,12 +64,6 @@ type Viewer struct {
|
|||
Email string `json:"email"`
|
||||
}
|
||||
|
||||
// PermissionsModel details which users have what permissions on a given space.
|
||||
type PermissionsModel struct {
|
||||
Message string
|
||||
Permissions []PermissionRecord
|
||||
}
|
||||
|
||||
// AcceptShareModel is used to setup a user who has accepted a shared space.
|
||||
type AcceptShareModel struct {
|
||||
Serial string `json:"serial"`
|
||||
|
@ -132,14 +86,3 @@ type NewSpaceRequest struct {
|
|||
CopyPermission bool `json:"copyPermission"` // copy uer permissions
|
||||
CopyDocument bool `json:"copyDocument"` // copy all documents!
|
||||
}
|
||||
|
||||
// HasPermission checks if action matches one of the required actions?
|
||||
func HasPermission(action PermissionAction, actions ...PermissionAction) bool {
|
||||
for _, a := range actions {
|
||||
if action == a {
|
||||
return true
|
||||
}
|
||||
}
|
||||
|
||||
return false
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue