jaumard/trailpack-acl

'use strict'

const Service = require('trails/service')
const _ = require('lodash')

module.exports = class PermissionService extends Service {
  findRole(roleName) {
    return this.app.services.FootprintService.find('role', roleName)
  }

  findResource(resourceName) {
    return this.app.services.FootprintService.find('resource', resourceName)
  }

  grant(roleName, resourceName, actionName, relation) {
    return this.app.services.FootprintService.create('permission', {
      roleName: roleName,
      resourceName: resourceName,
      action: actionName,
      relation: relation || null
    }, {findOne: true})
  }

  revoke(roleName, resourceName, actionName) {
    return this.app.services.FootprintService.destroy('permission', {
      roleName: roleName,
      resourceName: resourceName,
      action: actionName
    })
  }

  isAllowed(roleName, resourceName, actionName) {
    return this.app.services.FootprintService.find('permission', {
      roleName: roleName,
      resourceName: resourceName,
      action: actionName
    }, {findOne: true})
  }

  isUserAllowed(user, resourceName, actionName) {
    return this.app.services.FootprintService.findAssociation('user', user.id,
      _.get(this.app.config, 'permissions.userRoleFieldName', 'roles'))
      .then(roles => {
        const promises = []
        roles.forEach(role => {
          promises.push(this.isAllowed(role.name, resourceName, actionName))
        })
        return Promise.all(promises).then(permissions => {
          const perms = []
          permissions.forEach(perm => {
            if (perm != null) {
              perms.push(perm)
            }
          })
          return Promise.resolve(perms)
        })
      })
  }

  addRoleToUser(user, roleName) {
    return Promise.all([
      user.addRole(roleName),
      user.save()
    ])
  }

  removeRoleToUser(user, roleName) {
    return Promise.all([
      user.removeRole(roleName),
      user.save()
    ])
  }

  setOwning(model, models) {
    model.belongsToMany(models.User, {
      as: 'owners',
      through: {
        model: models.ItemOwners,
        unique: false,
        scope: {
          ownable: model.name
        }
      },
      foreignKey: 'ownable_id',
      constraints: false,
    })
    models.User.belongsToMany(model, {
      as: 'owners',
      through: {
        model: models.ItemOwners,
        unique: false
      },
      foreignKey: 'owner_id',
      constraints: false,
    })
  }
}