vikunja-api/models/teams_rights.go

44 lines
1.1 KiB
Go
Raw Normal View History

2018-07-14 17:34:59 +02:00
package models
// CanCreate checks if the user can create a new team
func (t *Team) CanCreate(user *User) bool {
2018-07-14 17:34:59 +02:00
// This is currently a dummy function, later on we could imagine global limits etc.
return true
2018-07-14 17:37:46 +02:00
}
2018-07-14 18:29:24 +02:00
// CanUpdate checks if the user can update a team
func (t *Team) CanUpdate(user *User) bool {
2018-07-14 18:29:24 +02:00
// Check if the current user is in the team and has admin rights in it
exists, _ := x.Where("team_id = ?", t.ID).
2018-07-14 18:29:24 +02:00
And("user_id = ?", user.ID).
And("is_admin = ?", true).
Get(&TeamMember{})
return exists
}
2018-07-16 08:18:15 +02:00
2018-07-16 08:45:38 +02:00
// CanDelete checks if a user can delete a team
func (t *Team) CanDelete(user *User) bool {
//t.ID = id
2018-07-16 08:18:15 +02:00
return t.IsAdmin(user)
}
2018-07-16 08:45:38 +02:00
// IsAdmin returns true when the user is admin of a team
2018-07-16 08:18:15 +02:00
func (t *Team) IsAdmin(user *User) bool {
exists, _ := x.Where("team_id = ?", t.ID).
And("user_id = ?", user.ID).
And("is_admin = ?", true).
Get(&TeamMember{})
return exists
2018-07-16 08:43:47 +02:00
}
2018-07-16 08:45:38 +02:00
// CanRead returns true if the user has read access to the team
2018-07-16 08:43:47 +02:00
func (t *Team) CanRead(user *User) bool {
// Check if the user is in the team
exists, _ := x.Where("team_id = ?", t.ID).
And("user_id = ?", user.ID).
Get(&TeamMember{})
return exists
}