add acl controls to models

zzbynzz · Jun 11, 2015 · af90279 · af90279
1 parent 147f1d1
commit af90279
Show file tree

Hide file tree

Showing 10 changed files with 359 additions and 121 deletions.
diff --git a/common/models/User-Identity.js b/common/models/User-Identity.js
@@ -1,6 +1,6 @@
-//var debug = require('debug')('freecc:models:userIdent');
+// var debug = require('debug')('freecc:models:userIdent');
 //
-//module.exports = function(UserIdent) {
+// module.exports = function(UserIdent) {
 //
 //  UserIdent.observe('before save', function(ctx, next) {
 //
@@ -24,4 +24,4 @@
 //      }
 //    });
 //  });
-//};
+// };
diff --git a/common/models/bonfire.json b/common/models/bonfire.json
@@ -1,23 +1,44 @@
 {
   "name": "bonfire",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
     "name": {
       "type": "string",
       "unique": true
     },
-    "difficulty": "string",
-    "description": "array",
-    "tests": "array",
-    "challengeSeed": "array",
+    "difficulty": {
+      "type": "string"
+    },
+    "description": {
+      "type": "array"
+    },
+    "tests": {
+      "type": "array"
+    },
+    "challengeSeed": {
+      "type": "array"
+    },
     "MDNlinks": {
       "type": "array"
     }
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "READ",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW"
+    }
+  ],
   "methods": []
 }
diff --git a/common/models/challenge.json b/common/models/challenge.json
@@ -1,32 +1,77 @@
 {
   "name": "challenge",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
     "name": {
       "type": "string",
       "unique": true
     },
-    "difficulty": "string",
-    "description": "array",
-    "tests": "array",
-    "challengeSeed": "array",
-    "challengeType": "string",
-    "MDNlinks": "array",
-    "nameCn": "string",
-    "descriptionCn": "array",
-    "nameFr": "string",
-    "descriptionFr": "array",
-    "nameRu": "string",
-    "descriptionRu": "array",
-    "nameEs": "string",
-    "descriptionEs": "array",
-    "namePt": "string",
-    "descriptionPt": "array"
+    "difficulty": {
+      "type": "string"
+    },
+    "description": {
+      "type": "array"
+    },
+    "tests": {
+      "type": "array"
+    },
+    "challengeSeed": {
+      "type": "array"
+    },
+    "challengeType": {
+      "type": "string"
+    },
+    "MDNlinks": {
+      "type": "array"
+    },
+    "nameCn": {
+      "type": "string"
+    },
+    "descriptionCn": {
+      "type": "array"
+    },
+    "nameFr": {
+      "type": "string"
+    },
+    "descriptionFr": {
+      "type": "array"
+    },
+    "nameRu": {
+      "type": "string"
+    },
+    "descriptionRu": {
+      "type": "array"
+    },
+    "nameEs": {
+      "type": "string"
+    },
+    "descriptionEs": {
+      "type": "array"
+    },
+    "namePt": {
+      "type": "string"
+    },
+    "descriptionPt": {
+      "type": "array"
+    }
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "READ",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW"
+    }
+  ],
   "methods": []
-}
+}
diff --git a/common/models/comment.json b/common/models/comment.json
@@ -1,8 +1,8 @@
 {
   "name": "comment",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
     "associatedPost": {
       "type": "string",
@@ -28,7 +28,9 @@
       "type": "array",
       "default": []
     },
-    "author": {},
+    "author": {
+      "type": {}
+    },
     "comments": {
       "type": "array",
       "default": []
@@ -40,6 +42,20 @@
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "EXECUTE",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW",
+      "property": "create"
+    }
+  ],
   "methods": []
 }
diff --git a/common/models/field-guide.json b/common/models/field-guide.json
@@ -1,8 +1,8 @@
 {
   "name": "fieldGuide",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
     "name": {
       "type": "string",
@@ -19,6 +19,19 @@
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "READ",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW"
+    }
+  ],
   "methods": []
 }
diff --git a/common/models/job.json b/common/models/job.json
@@ -1,17 +1,40 @@
 {
   "name": "job",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
-    "position": "string",
-    "company": "string",
-    "logoUrl": "string",
-    "postingUrl": "string",
-    "copy": "array"
+    "position": {
+      "type": "string"
+    },
+    "company": {
+      "type": "string"
+    },
+    "logoUrl": {
+      "type": "string"
+    },
+    "postingUrl": {
+      "type": "string"
+    },
+    "copy": {
+      "type": "array"
+    }
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "READ",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW"
+    }
+  ],
   "methods": []
 }
diff --git a/common/models/nonprofit.json b/common/models/nonprofit.json
@@ -1,30 +1,71 @@
 {
   "name": "nonprofit",
   "base": "PersistedModel",
-  "trackChanges": false,
   "idInjection": true,
+  "trackChanges": false,
   "properties": {
     "name": {
       "type": "string",
       "unique": true
     },
-    "requestedDeliverables": "array",
-    "whatDoesNonprofitDo": "string",
-    "websiteLink": "string",
-    "stakeholderName": "string",
-    "stakeholderEmail": "string",
-    "endUser": "string",
-    "approvedDeliverables": "array",
-    "projectDescription": "string",
-    "logoUrl": "string",
-    "imageUrl": "string",
-    "estimatedHours": "number",
-    "interestedCampers": [],
-    "confirmedCampers": [],
-    "currentStatus": "string"
+    "requestedDeliverables": {
+      "type": "array"
+    },
+    "whatDoesNonprofitDo": {
+      "type": "string"
+    },
+    "websiteLink": {
+      "type": "string"
+    },
+    "stakeholderName": {
+      "type": "string"
+    },
+    "stakeholderEmail": {
+      "type": "string"
+    },
+    "endUser": {
+      "type": "string"
+    },
+    "approvedDeliverables": {
+      "type": "array"
+    },
+    "projectDescription": {
+      "type": "string"
+    },
+    "logoUrl": {
+      "type": "string"
+    },
+    "imageUrl": {
+      "type": "string"
+    },
+    "estimatedHours": {
+      "type": "number"
+    },
+    "interestedCampers": {
+      "type": []
+    },
+    "confirmedCampers": {
+      "type": []
+    },
+    "currentStatus": {
+      "type": "string"
+    }
   },
   "validations": [],
   "relations": {},
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    },
+    {
+      "accessType": "READ",
+      "principalType": "ROLE",
+      "principalId": "$authenticated",
+      "permission": "ALLOW"
+    }
+  ],
   "methods": []
 }