tsar/fielderp-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reinitializing codebase and resuming development

Browse Source
This commit is contained in:
Shibi Chakkaravarthy
2026-09-27 00:48:18 +05:30
parent 5e894627f5
commit be7211ac28
23 changed files with 744 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
middlewares/jwt.middleware.js
+20 -20
View File
@@ -62,30 +62,30 @@ export const authorize = (requiredModule, requiredPermission) => {
// 2. Fetch Access and Populate Role
// Assuming Access model has a 'user' field and a 'role' field
const access = await Access.findOne({
user: verifiedPayload.id,
}).populate("role");
// const access = await Access.findOne({
// user: verifiedPayload.id,
// }).populate("role");
console.log("access", access?.role?.modules);
// console.log("access", access?.role?.modules);
if (!access || !access.role) {
throw { code: 403, message: "No role assigned to this user" };
}
// if (!access || !access.role) {
// throw { code: 403, message: "No role assigned to this user" };
// }
// 3. Verify Permissions
const hasPermission = access?.role?.modules?.some(
(mod) =>
(mod.module === requiredModule &&
mod.permission === requiredPermission) ||
(requiredModule === "generic" && requiredPermission === "generic"),
);
// // 3. Verify Permissions
// const hasPermission = access?.role?.modules?.some(
// (mod) =>
// (mod.module === requiredModule &&
// mod.permission === requiredPermission) ||
// (requiredModule === "generic" && requiredPermission === "generic"),
// );
if (!hasPermission) {
throw {
code: 403,
message: `Insufficient permissions for ${requiredModule} (${requiredPermission})`,
};
}
// if (!hasPermission) {
// throw {
// code: 403,
// message: `Insufficient permissions for ${requiredModule} (${requiredPermission})`,
// };
// }
// Success
res.locals.user = verifiedPayload;