sails-hook-routes-permissions

About

A sails hook for multi-model auth

Settings

Install

npm install sails-hook-routes-permissions

Define at config/routesPermissions.js

module.exports.routesPermissions = {
  'post /categories/time_products': { //some method and url
    minLevel: 0, //add some validations
    owners: ['player'] //who can access
  },

  'get /categories/:id/available_timetable': {
    minLevel: 0,
    owners: ['player']
  }
}

And define some policie o middleware

module.exports = function(req, res, next) {
  var fullPath = req.method.toLowerCase() + " " + req.url;
  sails.permissions.permissionRoutes(fullPath, function(err, routePermissions){
    if(err){
      // handle error
    }
    var accessKey = req.accessKey;  // define some access method
    var hasValidLevel = routePermissions.minLevel <= accessKey.level; //check your validations
    var hasPermission = routePermissions.owners.indexOf(req.ownerData.ownerModel) != -1; // check if had access
    if (hasPermission && hasValidLevel){
      return next();
    }else if (!hasPermission){
      //handle unauth access
    }
  });
};