hubot-aws-cfpb/auth.coffee

CFPB-specific Hubot aws commands. Forked from the excellent https://github.com/yoheimuta/hubot-aws/ and heavily modified for our particular usage needs

module.exports = {
  canAccess: (robot, user) ->
    return true if process.env.HUBOT_AWS_DEBUG

    if robot.auth.isAdmin(user)
      return true

    role = process.env.HUBOT_AWS_CAN_ACCESS_ROLE
    if role && robot.auth.hasRole(user, role)
      return true
    else
      return false
}