MusareFork/backend/logic/actions/hooks/ownerRequired.js

const async = require('async');

const moduleManager = require("../../../index");

const db = moduleManager.modules["db"];
const cache = moduleManager.modules["cache"];
const utils = moduleManager.modules["utils"];
const logger = moduleManager.modules["logger"];
const stations = moduleManager.modules["stations"];

module.exports = function(next) {
	return function(session, stationId) {
		let args = [];
		for (let prop in arguments) args.push(arguments[prop]);
		let cb = args[args.length - 1];
		async.waterfall([
			(next) => {
				cache.hget('sessions', session.sessionId, next);
			},
			(session, next) => {
				if (!session || !session.userId) return next('Login required.');
				this.session = session;
				db.models.user.findOne({_id: session.userId}, next);
			},
			(user, next) => {
				if (!user) return next('Login required.');
				if (user.role === 'admin') return next(true);
				stations.getStation(stationId, next);
			},
			(station, next) => {
				if (!station) return next('Station not found.');
				if (station.type === 'community' && station.owner === session.userId) return next(true);
				next('Invalid permissions.');
			}
		], async (err) => {
			if (err !== true) {
				err = await utils.getError(err);
				logger.info("OWNER_REQUIRED", `User failed to pass owner required check for station "${stationId}". "${err}"`);
				return cb({status: 'failure', message: err});
			}
			logger.info("OWNER_REQUIRED", `User "${session.userId}" passed owner required check for station "${stationId}"`, false);
			next.apply(null, args);
		});
	}
};