import Planka upstream

planka/server/api/policies/is-admin-or-project-owner.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isAuthenticated(req, res, proceed) {
+  if (!sails.helpers.users.isAdminOrProjectOwner(req.currentUser)) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};

planka/server/api/policies/is-admin.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isAuthenticated(req, res, proceed) {
+  if (req.currentUser.role !== User.Roles.ADMIN) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};

planka/server/api/policies/is-authenticated.js

@@ -0,0 +1,13 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isAuthenticated(req, res, proceed) {
+  if (!req.currentUser) {
+    // TODO: provide separate error for API keys?
+    return res.unauthorized('Access token is missing, invalid or expired');
+  }
+
+  return proceed();
+};

planka/server/api/policies/is-external.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isExternal(req, res, proceed) {
+  if (req.currentUser.id === User.INTERNAL.id) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};

planka/server/api/policies/is-internal.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isInternal(req, res, proceed) {
+  if (req.currentUser.id !== User.INTERNAL.id) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};

planka/server/api/policies/is-session.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isSession(req, res, proceed) {
+  if (!req.currentSession) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};