Spaces:
Running
Running
| ; | |
| Object.defineProperty(exports, "__esModule", { value: true }); | |
| exports.deriveAdminRole = deriveAdminRole; | |
| exports.assertPlatformAdmin = assertPlatformAdmin; | |
| exports.isPlatformAdmin = isPlatformAdmin; | |
| const common_1 = require("@nestjs/common"); | |
| const shared_types_1 = require("@micprotocol/shared-types"); | |
| function deriveAdminRole(user) { | |
| if (user.adminRole) | |
| return user.adminRole; | |
| if (user.isAdmin) | |
| return shared_types_1.AdminRole.SUPER_ADMIN; | |
| return null; | |
| } | |
| async function assertPlatformAdmin(prisma, userId) { | |
| const user = await prisma.user.findUnique({ | |
| where: { id: userId }, | |
| select: { isAdmin: true, adminRole: true, suspendedAt: true }, | |
| }); | |
| if (!user) { | |
| throw new common_1.ForbiddenException("Admin privileges required"); | |
| } | |
| if (user.suspendedAt) { | |
| throw new common_1.ForbiddenException("Account is suspended"); | |
| } | |
| if (!deriveAdminRole(user)) { | |
| throw new common_1.ForbiddenException("Admin privileges required"); | |
| } | |
| } | |
| async function isPlatformAdmin(prisma, userId) { | |
| try { | |
| await assertPlatformAdmin(prisma, userId); | |
| return true; | |
| } | |
| catch { | |
| return false; | |
| } | |
| } | |
| //# sourceMappingURL=platform-admin.js.map |