mirrors/dbgate
1
0
Fork 0
mirror of https://github.com/dbgate/dbgate synced 2024-11-07 20:26:23 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

Use LOGIN_PERMISSIONS_* to compile permissions directly instead of creating logins. Accept req.user.login in hasPermission

Browse Source
This commit is contained in:
michael-pattern 2024-05-17 10:59:20 -04:00
parent cb9921918f
commit 4214b4f613
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
packages/api/src/utility/hasPermission.js
View File

@ -9,7 +9,8 @@ function hasPermission(tested, req) {
return true;
}
const { user } = (req && req.auth) || {};
const key = user || '';
const { login } = (process.env.OAUTH_PERMISSIONS && req && req.user) || {};
const key = user || login || '';
const logins = getLogins();
if (!userPermissions[key]) {
@ -58,11 +59,7 @@ function getLogins() {
for (const permissions_key of login_permission_keys) {
const login = permissions_key.replace('LOGIN_PERMISSIONS_', '');
const permissions = process.env[permissions_key];
res.push({
login,
password: null,
permissions,
})
userPermissions[login] = compilePermissions(permissions);
}
}