/
readFile.js
45 lines (37 loc) · 1.1 KB
/
readFile.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
'use strict';
const { files } = require('../state');
const oso = require('../oso');
module.exports = async function readFile(req, res) {
const userId = req.headers.authorization ?? '';
const { id } = req.query;
const authorized = await oso.authorize(
{ type: 'User', id: userId },
'read',
{ type: 'File', id }
);
if (!authorized) {
return res.status(401).json({ message: 'Not authorized' });
}
const file = files.find(f => f.id === id);
if (!file) {
return res.status(404).json({ message: `File ${id} not found` });
}
// Get all users that have a role on this file
const users = groupFactsByUser(
await oso.get('has_role', null, null, { type: 'File', id })
);
return res.json({ file, users });
};
function groupFactsByUser(facts) {
const rolesByUser = new Map();
for (const fact of facts) {
const userId = fact[1].id;
const role = fact[2];
if (!rolesByUser.has(userId)) {
rolesByUser.set(userId, []);
}
const existingRoles = rolesByUser.get(userId);
existingRoles.push(role);
}
return Object.fromEntries(rolesByUser.entries());
}