overleaf/services/real-time/app/coffee/AuthorizationManager.js

/*
 * decaffeinate suggestions:
 * DS101: Remove unnecessary use of Array.from
 * DS102: Remove unnecessary code created because of implicit returns
 * DS207: Consider shorter variations of null checks
 * Full docs: https://github.com/decaffeinate/decaffeinate/blob/master/docs/suggestions.md
 */
let AuthorizationManager;
module.exports = (AuthorizationManager = {
	assertClientCanViewProject(client, callback) {
		if (callback == null) { callback = function(error) {}; }
		return AuthorizationManager._assertClientHasPrivilegeLevel(client, ["readOnly", "readAndWrite", "owner"], callback);
	},

	assertClientCanEditProject(client, callback) {
		if (callback == null) { callback = function(error) {}; }
		return AuthorizationManager._assertClientHasPrivilegeLevel(client, ["readAndWrite", "owner"], callback);
	},
				
	_assertClientHasPrivilegeLevel(client, allowedLevels, callback) {
		if (callback == null) { callback = function(error) {}; }
		if (Array.from(allowedLevels).includes(client.ol_context["privilege_level"])) {
			return callback(null);
		} else {
			return callback(new Error("not authorized"));
		}
	},

	assertClientCanViewProjectAndDoc(client, doc_id, callback) {
		if (callback == null) { callback = function(error) {}; }
		return AuthorizationManager.assertClientCanViewProject(client, function(error) {
			if (error != null) { return callback(error); }
			return AuthorizationManager._assertClientCanAccessDoc(client, doc_id, callback);
		});
	},

	assertClientCanEditProjectAndDoc(client, doc_id, callback) {
		if (callback == null) { callback = function(error) {}; }
		return AuthorizationManager.assertClientCanEditProject(client, function(error) {
			if (error != null) { return callback(error); }
			return AuthorizationManager._assertClientCanAccessDoc(client, doc_id, callback);
		});
	},

	_assertClientCanAccessDoc(client, doc_id, callback) {
		if (callback == null) { callback = function(error) {}; }
		if (client.ol_context[`doc:${doc_id}`] === "allowed") {
			return callback(null);
		} else {
			return callback(new Error("not authorized"));
		}
	},

	addAccessToDoc(client, doc_id, callback) {
		if (callback == null) { callback = function(error) {}; }
		client.ol_context[`doc:${doc_id}`] = "allowed";
		return callback(null);
	},

	removeAccessToDoc(client, doc_id, callback) {
		if (callback == null) { callback = function(error) {}; }
		delete client.ol_context[`doc:${doc_id}`];
		return callback(null);
	}
});