frontend permission system
This commit is contained in:
@@ -1,3 +1,12 @@
|
|||||||
export const BASE_API_URI = import.meta.env.DEV
|
export const BASE_API_URI = import.meta.env.DEV
|
||||||
? import.meta.env.VITE_BASE_API_URI_DEV
|
? import.meta.env.VITE_BASE_API_URI_DEV
|
||||||
: import.meta.env.VITE_BASE_API_URI_PROD;
|
: import.meta.env.VITE_BASE_API_URI_PROD;
|
||||||
|
|
||||||
|
export const PERMISSIONS = {
|
||||||
|
Member: 1,
|
||||||
|
View: 2,
|
||||||
|
Update: 4,
|
||||||
|
Create: 4,
|
||||||
|
Delete: 4,
|
||||||
|
Super: 8
|
||||||
|
};
|
||||||
|
|||||||
@@ -200,3 +200,13 @@ export function refreshCookie(newToken, cookies) {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* checks the permission of the user
|
||||||
|
* @param {App.Locals['user']} user - The user object
|
||||||
|
* @param {number} required_permission - The required permission
|
||||||
|
* @returns {boolean} - True if the user has the required permission
|
||||||
|
*/
|
||||||
|
export function hasPrivilige(user, required_permission) {
|
||||||
|
return user.role_id >= required_permission;
|
||||||
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user