MusareFork/backend/logic/actions/hooks/ownerRequired.js

const cache = require('../../cache');
const db = require('../../db');
const utils = require('../../utils');
const logger = require('../../logger');
const async = require('async');
const stations = require('../../stations');

module.exports = function(next) {
	return function(session, stationId) {
		let args = [];
		for (let prop in arguments) args.push(arguments[prop]);
		let cb = args[args.length - 1];
		async.waterfall([
			(next) => {
				cache.hget('sessions', session.sessionId, next);
			},
			(session, next) => {
				if (!session || !session.userId) return next('Login required.');
				this.session = session;
				db.models.user.findOne({_id: session.userId}, next);
			},
			(user, next) => {
				if (!user) return next('Login required.');
				if (user.role === 'admin') return next(true);
				stations.getStation(stationId, next);
			},
			(station, next) => {
				if (!station) return next('Station not found.');
				if (station.type === 'community' && station.owner === session.userId) return next(true);
				next('Invalid permissions.');
			}
		], (err) => {
			if (err !== true) {
				err = utils.getError(err);
				logger.info("OWNER_REQUIRED", `User failed to pass owner required check for station "${stationId}". "${err}"`);
				return cb({status: 'failure', message: err});
			}
			logger.info("OWNER_REQUIRED", `User "${session.userId}" passed owner required check for station "${stationId}"`);
			args.push(session.userId);
			next.apply(null, args);
		});
	}
};