summaryrefslogtreecommitdiffstats
path: root/server/api/wakerequests.js
diff options
context:
space:
mode:
Diffstat (limited to 'server/api/wakerequests.js')
-rw-r--r--server/api/wakerequests.js14
1 files changed, 14 insertions, 0 deletions
diff --git a/server/api/wakerequests.js b/server/api/wakerequests.js
index 811fea9..6f6faf3 100644
--- a/server/api/wakerequests.js
+++ b/server/api/wakerequests.js
@@ -7,6 +7,20 @@ const { decorateApp } = require('@awaitjs/express')
var router = decorateApp(express.Router())
const log = require(path.join(__appdir, 'lib', 'log'))
+// Permission check middleware
+router.all(['', '/:x'], async (req, res, next) => {
+ switch (req.method) {
+ case 'POST':
+ if (!await req.user.hasPermission('wakerequests.send')) return res.status(403).send({ error: 'Missing permission', permission: 'wakerequests.send' })
+ break
+
+ default:
+ return res.status(400).send()
+ }
+
+ next()
+})
+
router.postAsync('', async (req, res) => {
const clients = await db.client.findAll({ where: { id: req.body.clients } })
await log({