we-core/server/controllers/role.js

We.js is a node.js framework for build real time applications, sites or blogs!

/**
 * RolesController
 *
 * @module    :: Controller
 * @description :: Contains logic for handling requests.
 */

module.exports = {
  create: function create(req, res) {
    var name = req.body.name;
    var description = req.body.description;

    if (req.method == 'POST') {
      req.we.acl.createRole({
        name: name, description: description
      }, function (err, role) {
        if (err) {
          req.we.log.error('role:create: error on create role', err);
          res.serverError();
        } else {
          if (res.locals.redirectTo) return res.goTo(res.locals.redirectTo);

          res.ok(role);
        }
      });
    } else {
      res.ok();
    }
  },

  find: function findAll(req, res, next) {
    res.locals.data =  {};

    res.locals.redirectTo = req.we.utils.getRedirectUrl(req, res);

    for (var name in req.we.acl.roles) {
      if (!req.we.acl.roles[name].isSystemRole)
        res.locals.data[name] = req.we.acl.roles[name];
    }

    if (req.method == 'POST' && req.body.action == 'create') {
      return req.we.controllers.role.create(req, res, next);
    } else if (req.method == 'POST' && req.body.action == 'delete') {
      return req.we.controllers.role.delete(req, res, next);
    }

    res.ok();
  },

  updateUserRoles: function updateUserRoles(req, res, next) {
    var we = req.we;

    we.db.models.user.findOne({
      where: { id: req.params.userId }
    }).then(function (u){
      if (!u) return next();

      res.locals.data = u;

      if (req.method == 'POST') {
        var rolesToSave = [];
        var rn;

        // get role object related to id and skip invalid ids
        if (we.utils._.isArray(req.body.userRoles)) {
          // multiple roles
          for (rn in we.acl.roles) {
            if (req.body.userRoles.indexOf( we.acl.roles[rn].name ) > -1) {
              rolesToSave.push(rn);
            }
          }
        } else {
          // single role
          for (rn in we.acl.roles) {
            if (req.body.userRoles == we.acl.roles[rn].name) {
              rolesToSave.push(rn);
              break;
            }
          }
        }

        res.locals.rolesTable = buildUserRolesVar(res, u, we);

        u.setRoles(rolesToSave)
        .then(function () {
          res.addMessage('success', 'role.updateUserRoles.success');
          res.goTo(req.url);
        }).catch(req.queryError);
      } else {
        res.locals.roles = we.acl.roles;
        res.locals.rolesTable = buildUserRolesVar(res, u, we);
        res.ok();
      }
    }).catch(res.queryError);
  },

  /**
   * Add permission to role action
   */
  addPermissionToRole: function addPermissionToRole(req, res, next) {
    var we = req.we;

    if (
      !we.acl.roles[req.params.roleName] ||
      !we.acl.permissions[req.params.permissionName]
    ) return next();

    we.acl.addPermissionToRole(req.params.roleName, req.params.permissionName, function(err) {
      if (err) return res.serverError(err);
      res.ok(we.acl.roles[req.params.roleName]);
    });
  },
  /**
   * remove permission from role action
   */
  removePermissionFromRole: function(req, res, next) {
    var we = req.we;

    if (!we.acl.roles[req.params.roleName]) {
      we.log.warn('Role not found: ',req.params.roleName);
      return next();
    }

    if (!we.acl.permissions[req.params.permissionName]) {
      we.log.warn('Permission not found: ',req.params.permissionName);
      return next();
    }

    we.acl.removePermissionFromRole(req.params.roleName, req.params.permissionName, function(err) {
      if (err) return res.serverError(err);
      res.deleted();
    });
  },

  delete: function deleteRecord(req, res) {
    req.we.acl.deleteRole(req.body.name,
    function (err) {
      if (err) {
        req.we.log.error('role:delete: error on delete role', err);
        return res.serverError();
      }

      if (res.locals.redirectTo)
        return res.goTo(res.locals.redirectTo);

      return res.ok();
    });
  }
};


function buildUserRolesVar(res, u, we) {
  var checked, rolesTable = [];

  for (var roleName in we.acl.roles) {
    checked = false;
    for (var i = 0; i < u.roles.length; i++) {
      if (u.roles[i] === roleName) {
        checked = true;
        break;
      }
    }

    rolesTable.push({
      name: roleName,
      checked: checked,
      role: we.acl.roles[roleName]
    });
  }

  return rolesTable;
}