feat(authorization): add create connection checks

This commit is contained in:
Ali BARIN
2023-06-23 21:14:32 +00:00
parent f802061722
commit 94e560c262
5 changed files with 10 additions and 0 deletions

View File

@@ -13,6 +13,8 @@ const createConnection = async (
params: Params, params: Params,
context: Context context: Context
) => { ) => {
context.currentUser.can('create', 'Connection');
await App.findOneByKey(params.input.key); await App.findOneByKey(params.input.key);
return await context.currentUser.$relatedQuery('connections').insert({ return await context.currentUser.$relatedQuery('connections').insert({

View File

@@ -13,6 +13,8 @@ const generateAuthUrl = async (
params: Params, params: Params,
context: Context context: Context
) => { ) => {
context.currentUser.can('create', 'Connection');
const connection = await context.currentUser const connection = await context.currentUser
.$relatedQuery('connections') .$relatedQuery('connections')
.findOne({ .findOne({

View File

@@ -11,6 +11,8 @@ const resetConnection = async (
params: Params, params: Params,
context: Context context: Context
) => { ) => {
context.currentUser.can('create', 'Connection');
let connection = await context.currentUser let connection = await context.currentUser
.$relatedQuery('connections') .$relatedQuery('connections')
.findOne({ .findOne({

View File

@@ -13,6 +13,8 @@ const updateConnection = async (
params: Params, params: Params,
context: Context context: Context
) => { ) => {
context.currentUser.can('create', 'Connection');
let connection = await context.currentUser let connection = await context.currentUser
.$relatedQuery('connections') .$relatedQuery('connections')
.findOne({ .findOne({

View File

@@ -13,6 +13,8 @@ const verifyConnection = async (
params: Params, params: Params,
context: Context context: Context
) => { ) => {
context.currentUser.can('create', 'Connection');
let connection = await context.currentUser let connection = await context.currentUser
.$relatedQuery('connections') .$relatedQuery('connections')
.findOne({ .findOne({