StrafesNET/maps-service
6
Fork 0
Code Issues19 Pull Requests Packages Projects Releases Wiki Activity

submissions: introduce special roles to create submissions you do not own

Browse Source
This commit is contained in:
Quaternions 2025-04-01 16:16:29 -07:00
parent 3bda4803aa
commit d66bd9b112
Signed by: Quaternions
GPG Key ID: D0DF5964F79AC131
1 changed files with 11 additions and 2 deletions

13
pkg/service/security.go

@ -17,6 +17,9 @@ var (
// Submissions roles bitflag // Submissions roles bitflag
type Roles int32 type Roles int32
var ( var (
// Only users with this role are allowed to submit models they don't own
RolesSubmissionCreateNotModelOwner Roles = 1<<8
RolesMapfixCreateNotModelOwner Roles = 1<<7
RolesSubmissionUpload Roles = 1<<6 RolesSubmissionUpload Roles = 1<<6
RolesSubmissionReview Roles = 1<<5 RolesSubmissionReview Roles = 1<<5
RolesSubmissionRelease Roles = 1<<4 RolesSubmissionRelease Roles = 1<<4
@ -37,10 +40,10 @@ var (
RolesAll Roles = ^RolesEmpty RolesAll Roles = ^RolesEmpty
// has SubmissionUpload // has SubmissionUpload
RoleMapAdmin GroupRole = 128 RoleMapAdmin GroupRole = 128
RolesMapAdmin Roles = RolesSubmissionRelease|RolesSubmissionUpload|RolesSubmissionReview|RolesMapCouncil RolesMapAdmin Roles = RolesSubmissionRelease|RolesSubmissionUpload|RolesSubmissionReview|RolesSubmissionCreateNotModelOwner|RolesMapCouncil
// has MapfixReview // has MapfixReview
RoleMapCouncil GroupRole = 64 RoleMapCouncil GroupRole = 64
RolesMapCouncil Roles = RolesMapfixReview|RolesMapfixUpload|RolesMapAccess RolesMapCouncil Roles = RolesMapfixReview|RolesMapfixUpload|RolesMapfixCreateNotModelOwner|RolesMapAccess
// access to downloading maps // access to downloading maps
RoleMapAccess GroupRole = 32 RoleMapAccess GroupRole = 32
RolesMapAccess Roles = RolesMapDownload RolesMapAccess Roles = RolesMapDownload
@ -130,6 +133,12 @@ func (usr UserInfoHandle) GetRoles() (Roles, error) {
} }
// RoleThumbnail // RoleThumbnail
func (usr UserInfoHandle) HasRoleMapfixCreateNotModelOwner() (bool, error) {
return usr.hasRoles(RolesMapfixCreateNotModelOwner)
}
func (usr UserInfoHandle) HasRoleSubmissionCreateNotModelOwner() (bool, error) {
return usr.hasRoles(RolesSubmissionCreateNotModelOwner)
}
func (usr UserInfoHandle) HasRoleMapfixUpload() (bool, error) { func (usr UserInfoHandle) HasRoleMapfixUpload() (bool, error) {
return usr.hasRoles(RolesMapfixUpload) return usr.hasRoles(RolesMapfixUpload)
} }