openhim-core/src/api/authorisation.coffee

The OpenHIM core application that provides logging and routing of http requests

Channel = require("../model/channels").Channel
logger = require 'winston'
Q = require "q"

exports.inGroup = (group, user) ->
  return user.groups.indexOf(group) >= 0

##
# A promise returning function that returns the list
# of viewable channels for a user.
##
exports.getUserViewableChannels = (user) ->

  # if admin allow all channel
  if exports.inGroup 'admin', user
    return Channel.find({}).exec()
  else
    # otherwise figure out what this user can view
    return Channel.find({ txViewAcl: { $in: user.groups } }).exec()

##
# A promise returning function that returns the list
# of rerunnable channels for a user.
##
exports.getUserRerunableChannels = (user) ->

  # if admin allow all channel
  if exports.inGroup 'admin', user
    return Channel.find({}).exec()
  else
    # otherwise figure out what this user can rerun
    return Channel.find({ txRerunAcl: { $in: user.groups } }).exec()