groupcore-utils 2.0.0 → 2.1.0

package/README.md

@@ -324,6 +324,19 @@ Initialize db with this and pass the object to the CRUD class constructor
    */   
 ```
 
+### RBAC
+```
+  require('@groupcollab/core-utils/rbac')
+
+  /**
+   * @method validateAction()
+   * @description validate the action to be carried out
+   * @param {number} id - the main id
+   * @param {number} compareId - id to be compared
+   * @returns {Promise<void>}
+   */
+```
+
 ### Testing
 ```
 npm run test

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groupcore-utils",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Utilities for working with some core features",
   "main": "Utils.js",
   "scripts": {

package/rbac/index.js

@@ -0,0 +1,32 @@
+const EasyRbac = require('easy-rbac');
+
+module.exports = class {
+  /**
+   * @method validateAction()
+   * @description validate the action to be carried out
+   * @param {number} id - the main id
+   * @param {number} compareId - id to be compared
+   * @returns {Promise<void>}
+   */
+  async validateAction({ id, compareId }) {
+    const rbac = new EasyRbac({
+      user: {
+        can: [
+          {
+            name: 'do',
+            when: async (params) => params.id === params.compareId,
+          },
+        ],
+      },
+    });
+
+    const response = await rbac.can('user', 'do', {
+      id,
+      compareId,
+    });
+
+    if (!response) {
+      throw new Error('User not authorized to perform this action!');
+    }
+  }
+};