openhim-core/src/api/authorisation.js

The OpenHIM core application that provides logging and routing of http requests

import { ChannelModelAPI } from '../model/channels'

export function inGroup (group, user) {
  return user.groups.indexOf(group) >= 0
}

/**
 * A promise returning function that returns the list
 * of viewable channels for a user.
 */
export function getUserViewableChannels (user, access = 'txViewAcl') {
  // if admin find all channels
  if (inGroup('admin', user)) {
    return ChannelModelAPI.find({}).exec()
  } else {
    // otherwise only channels that this user has access to
    return ChannelModelAPI.find({[access]: {$in: user.groups}}).exec()
  }
}

/**
 * A promise returning function that returns the list
 * of rerunnable channels for a user.
 */
export function getUserRerunableChannels (user) {
  // if admin allow all channel
  if (inGroup('admin', user)) {
    return ChannelModelAPI.find({}).exec()
  } else {
    // otherwise figure out what this user can rerun
    return ChannelModelAPI.find({txRerunAcl: {$in: user.groups}}).exec()
  }
}