23 lines
554 B
JavaScript
23 lines
554 B
JavaScript
|
'use strict'
|
||
|
|
|
||
|
|
const constants = require('../initializers/constants')
|
||
|
|
const logger = require('../helpers/logger')
|
||
|
|
|
||
|
|
const adminMiddleware = {
|
||
|
|
ensureIsAdmin: ensureIsAdmin
|
||
|
|
}
|
||
|
|
|
||
|
|
function ensureIsAdmin (req, res, next) {
|
||
|
|
const user = res.locals.oauth.token.user
|
||
|
|
if (user.role !== constants.USER_ROLES.ADMIN) {
|
||
|
|
logger.info('A non admin user is trying to access to an admin content.')
|
||
|
|
return res.sendStatus(403)
|
||
|
|
}
|
||
|
|
|
||
|
|
return next()
|
||
|
|
}
|
||
|
|
|
||
|
|
// ---------------------------------------------------------------------------
|
||
|
|
|
||
|
|
module.exports = adminMiddleware
|