Leahnaya/juxtaposition-ui
1
0
Fork 0
mirror of https://github.com/PretendoNetwork/juxtaposition-ui.git synced 2026-08-21 16:55:31 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: Check user accessLevel instead of server setting for access to test environments

Browse Source
This commit is contained in:
Jemma Poffinbarger
2024-07-29 13:43:20 -05:00
parent 60730f3d10
commit 0d9a70f34b
1 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
src/middleware/checkBan.js
View File

@@ -11,7 +11,28 @@ async function checkBan(request, response, next) {
return next();
}
if (config.server_environment !== 'prod' && request.user.serverAccessLevel !== 'test' && request.user.serverAccessLevel !== 'dev') {
// Set access levels
request.tester = request.user.accessLevel >= 1 && request.user.accessLevel <= 3;
request.moderator = request.user.accessLevel == 2 || request.user.accessLevel == 3;
request.developer = request.user.accessLevel == 3;
// Check if user has access to the environment
let accessAllowed = false;
switch (config.server_environment) {
case 'dev':
accessAllowed = request.developer;
break;
case 'test':
accessAllowed = request.tester || request.moderator || request.developer;
break;
case 'prod':
accessAllowed = true;
break;
default:
accessAllowed = false;
}
if (!accessAllowed) {
response.status(500);
if (request.directory === 'web') {
return response.render('web/login.ejs', {toast: 'No access. Must be tester or dev', cdnURL: config.CDN_domain,});
@@ -22,9 +43,6 @@ async function checkBan(request, response, next) {
});
}
}
// Set moderator status
request.moderator = request.user.accessLevel == 2 || request.user.accessLevel == 3;
request.developer = request.user.accessLevel == 3;
const user = await db.getUserSettings(request.pid);
if (user && moment(user.ban_lift_date) <= moment() && user.account_status !== 3) {
user.account_status = 0;