dialtone_axum 0.1.0

Dialtone Axum Back-end
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

use dialtone_common::{authz::actor::authz_actor_on_host, rest::users::web_user::SystemRole};
use sqlx::{Executor, Postgres};

use crate::{err_unauthorized, response::response_error::ResponseError, start_server::SharedState};

use super::user_authz::authz_for_actor;

pub async fn authz_owner_or_actoradmin_for_actor(
    exec: impl Executor<'_, Database = Postgres>,
    state: &SharedState,
    actor_id: &str,
) -> Result<(), ResponseError> {
    let user_authz = &state.read().await.user_authz;
    let authz = authz_for_actor(exec, user_authz, &actor_id).await?;
    if !authz {
        err_unauthorized!()
    } else {
        Ok(())
    }
}

pub async fn authz_actoradmin_for_actor(
    state: &SharedState,
    actor_id: &str,
) -> Result<(), ResponseError> {
    let user_authz = &state.read().await.user_authz;
    let authz = authz_actor_on_host(&user_authz, &SystemRole::ActorAdmin, &actor_id);
    if !authz {
        err_unauthorized!()
    } else {
        Ok(())
    }
}