mirror of
https://github.com/overleaf/overleaf.git
synced 2024-11-07 20:31:06 -05:00
da6711dc99
Authorization flags for metrics GitOrigin-RevId: 651587c11317bfc8bb7b1e8143e8c2c820683cb5
65 lines
2.9 KiB
CoffeeScript
65 lines
2.9 KiB
CoffeeScript
UserMembershipAuthorization = require './UserMembershipAuthorization'
|
|
UserMembershipController = require './UserMembershipController'
|
|
SubscriptionGroupController = require '../Subscription/SubscriptionGroupController'
|
|
TeamInvitesController = require '../Subscription/TeamInvitesController'
|
|
AuthorizationMiddlewear = require('../Authorization/AuthorizationMiddlewear')
|
|
|
|
module.exports =
|
|
apply: (webRouter) ->
|
|
# group members routes
|
|
webRouter.get '/manage/groups/:id/members',
|
|
UserMembershipAuthorization.requireGroupManagementAccess,
|
|
UserMembershipController.index
|
|
webRouter.post '/manage/groups/:id/invites',
|
|
UserMembershipAuthorization.requireGroupManagementAccess,
|
|
TeamInvitesController.createInvite
|
|
webRouter.delete '/manage/groups/:id/user/:user_id',
|
|
UserMembershipAuthorization.requireGroupManagementAccess,
|
|
SubscriptionGroupController.removeUserFromGroup
|
|
webRouter.delete '/manage/groups/:id/invites/:email',
|
|
UserMembershipAuthorization.requireGroupManagementAccess,
|
|
TeamInvitesController.revokeInvite
|
|
webRouter.get '/manage/groups/:id/members/export',
|
|
UserMembershipAuthorization.requireGroupManagementAccess,
|
|
UserMembershipController.exportCsv
|
|
|
|
# group managers routes
|
|
webRouter.get "/manage/groups/:id/managers",
|
|
UserMembershipAuthorization.requireGroupManagersManagementAccess,
|
|
UserMembershipController.index
|
|
webRouter.post "/manage/groups/:id/managers",
|
|
UserMembershipAuthorization.requireGroupManagersManagementAccess,
|
|
UserMembershipController.add
|
|
webRouter.delete "/manage/groups/:id/managers/:userId",
|
|
UserMembershipAuthorization.requireGroupManagersManagementAccess,
|
|
UserMembershipController.remove
|
|
|
|
# institution members routes
|
|
webRouter.get "/manage/institutions/:id/managers",
|
|
UserMembershipAuthorization.requireInstitutionManagementAccess,
|
|
UserMembershipController.index
|
|
webRouter.post "/manage/institutions/:id/managers",
|
|
UserMembershipAuthorization.requireInstitutionManagementAccess,
|
|
UserMembershipController.add
|
|
webRouter.delete "/manage/institutions/:id/managers/:userId",
|
|
UserMembershipAuthorization.requireInstitutionManagementAccess,
|
|
UserMembershipController.remove
|
|
|
|
# publisher members routes
|
|
webRouter.get "/manage/publishers/:id/managers",
|
|
UserMembershipAuthorization.requirePublisherManagementAccess,
|
|
UserMembershipController.index
|
|
webRouter.post "/manage/publishers/:id/managers",
|
|
UserMembershipAuthorization.requirePublisherManagementAccess,
|
|
UserMembershipController.add
|
|
webRouter.delete "/manage/publishers/:id/managers/:userId",
|
|
UserMembershipAuthorization.requirePublisherManagementAccess,
|
|
UserMembershipController.remove
|
|
|
|
# create new entitites
|
|
webRouter.get "/entities/:name/create/:id",
|
|
AuthorizationMiddlewear.ensureUserIsSiteAdmin,
|
|
UserMembershipController.new
|
|
webRouter.post "/entities/:name/create/:id",
|
|
AuthorizationMiddlewear.ensureUserIsSiteAdmin,
|
|
UserMembershipController.create
|