Solved some issues with the redirect as well as adding a way to create entities

This commit is contained in:
Tiago Ribeiro
2024-10-16 10:23:59 +01:00
parent de31f77181
commit 1fb7343aa7
10 changed files with 326 additions and 23 deletions

View File

@@ -14,8 +14,9 @@ const db = client.db(process.env.MONGODB_DB);
export default withIronSessionApiRoute(handler, sessionOptions);
async function handler(req: NextApiRequest, res: NextApiResponse) {
if (req.method === "get") return await get(req, res);
if (req.method === "GET") return await get(req, res);
if (req.method === "PATCH") return await patch(req, res);
if (req.method === "DELETE") return await del(req, res);
}
async function get(req: NextApiRequest, res: NextApiResponse) {
@@ -35,9 +36,10 @@ async function del(req: NextApiRequest, res: NextApiResponse) {
const { id } = req.query as { id: string };
const entity = await getEntityWithRoles(id)
if (!entity) return res.status(404).json({ok: false})
if (!entity) return res.status(404).json({ ok: false })
if (!doesEntityAllow(user, entity, "delete_entity_role")) return res.status(403).json({ok: false})
if (!doesEntityAllow(user, entity, "delete_entity") && !["admin", "developer"].includes(user.type))
return res.status(403).json({ok: false})
await deleteEntity(entity)
return res.status(200).json({ok: true});