Newer
Older
export default function hasAccess(session, admin) {
const stag_role = "pub_staging_papperlaweb_papperlaweb";
const prod_role = "pub_prod_papperlaweb_papperlaweb";
// this is just for development purposes
return session ? true : false;
if (process.env.NODE_ENV && process.env.NODE_ENV === "development")
return session ? true : false;
if (!session) return false; // not logged in --> no access
if (!admin) {
// if no admin is required and is logged in --> access
return true;
} else {
if (!session.info.payload.resource_access) return false; // admin required, but no role --> no access
if (session.info.payload.resource_access[prod_role]) {
if (session.info.payload.resource_access[prod_role]?.roles[0] != "admin")
return false; // role incorrect
} else if (session.info.payload.resource_access[stag_role]) {
if (session.info.payload.resource_access[stag_role]?.roles[0] != "admin")
return false; // role incorrect
}
return true;
}
}