refactoring acl

2021-05-19 16:38:22 +02:00
parent c6cb98f502
commit 81932c6e88
3 changed files with 29 additions and 17 deletions
--- a/server/api/controller/oauth.js
+++ b/server/api/controller/oauth.js
@@ -143,11 +143,17 @@ const oauthController = {

    // TODO
    verifyScope (token, scope) {
-      log.debug('VERIFY SCOPE ', scope)
-      if (token.user.is_admin) {
+      // const userScope = [
+      //   'user:remove',
+      //   'user:update',
+      //   'event:write',
+      //   'event:remove'
+      // ]
+      log.debug(`VERIFY SCOPE ${scope} ${token.user.email}`)
+      if (token.user.is_admin && token.user.is_active) {
        return true
      } else {
-        return true
+        return false
      }
    }