sails-permissions-sequelize/dist/api/policies/OwnerPolicy.js

Sequelize version of : Comprehensive user permissions and entitlements system for sails.js and Waterline. Supports user authentication with passport.js, role-based permissioning, object ownership, and row-level security.

/**
 * TODO - this is setting createdBy, not owner.
 * The comment below, and the name of this file/function is confusing to me
 * Ensure that the 'owner' property of an Object is set upon creation.
 */
'use strict';

module.exports = function OwnerPolicy(req, res, next) {
  //sails.log('OwnerPolicy()');
  if (!req.user || !req.user.id) {
    req.logout();
    return res.send(500, new Error('req.user is not set'));
  }

  /*
  sails.log.verbose('OwnerPolicy user', req.user);
  sails.log.verbose('OwnerPolicy method', req.method);
  sails.log.verbose('OwnerPolicy req.body', req.body);
  */

  if (req.options.modelDefinition.autoCreatedBy === false) {
    // sails.log.verbose('OwnerPolicy hasOwnershipPolicy: false');
    return next();
  }

  if ('POST' == req.method) {
    //req.body || (req.body = { });
    req.body.createdBy = req.user.id;
    req.body.owner = req.user.id;
  }

  //sails.log.verbose('OwnerPolicy req.model', req.model);
  next();
};