var _ = require('lodash'), errors = require('../errors'), ghostBookshelf = require('./base'), when = require('when'), Role, Roles; Role = ghostBookshelf.Model.extend({ tableName: 'roles', users: function () { return this.belongsToMany('User'); }, permissions: function () { return this.belongsToMany('Permission'); } }, { /** * Returns an array of keys permitted in a method's `options` hash, depending on the current method. * @param {String} methodName The name of the method to check valid options for. * @return {Array} Keys allowed in the `options` hash of the model's method. */ permittedOptions: function (methodName) { var options = ghostBookshelf.Model.permittedOptions(), // whitelists for the `options` hash argument on methods, by method name. // these are the only options that can be passed to Bookshelf / Knex. validOptions = { findOne: ['withRelated'] }; if (validOptions[methodName]) { options = options.concat(validOptions[methodName]); } return options; }, permissable: function (roleModelOrId, context, loadedPermissions, hasUserPermission, hasAppPermission) { var self = this, checkAgainst = [], origArgs; // If we passed in an id instead of a model, get the model // then check the permissions if (_.isNumber(roleModelOrId) || _.isString(roleModelOrId)) { // Grab the original args without the first one origArgs = _.toArray(arguments).slice(1); // Get the actual post model return this.findOne({id: roleModelOrId, status: 'all'}).then(function (foundRoleModel) { // Build up the original args but substitute with actual model var newArgs = [foundRoleModel].concat(origArgs); return self.permissable.apply(self, newArgs); }, errors.logAndThrowError); } switch (loadedPermissions.user) { case 'Owner': case 'Administrator': checkAgainst = ['Administrator', 'Editor', 'Author']; break; case 'Editor': checkAgainst = ['Editor', 'Author']; } // If we have a role passed into here if (roleModelOrId && !_.contains(checkAgainst, roleModelOrId.get('name'))) { // Role not in the list of permissible roles hasUserPermission = false; } if (hasUserPermission && hasAppPermission) { return when.resolve(); } return when.reject(); } }); Roles = ghostBookshelf.Collection.extend({ model: Role }); module.exports = { Role: ghostBookshelf.model('Role', Role), Roles: ghostBookshelf.collection('Roles', Roles) };