54 lines
1.4 KiB
Go
54 lines
1.4 KiB
Go
package common
|
|
|
|
import (
|
|
"github.com/ArtalkJS/Artalk/internal/core"
|
|
"github.com/ArtalkJS/Artalk/internal/entity"
|
|
"github.com/ArtalkJS/Artalk/internal/i18n"
|
|
"github.com/ArtalkJS/Artalk/internal/utils"
|
|
"github.com/gofiber/fiber/v2"
|
|
)
|
|
|
|
func CheckIsAllowed(app *core.App, c *fiber.Ctx, name string, email string, page entity.Page, siteName string) (bool, error) {
|
|
isAdminUser := app.Dao().IsAdminUserByNameEmail(name, email)
|
|
|
|
// 如果用户是管理员，或者当前页只能管理员评论
|
|
if isAdminUser || page.AdminOnly {
|
|
if !CheckIsAdminReq(app, c) {
|
|
return false, RespError(c, i18n.T("Admin access required"), Map{"need_login": true})
|
|
}
|
|
}
|
|
|
|
return true, nil
|
|
}
|
|
|
|
func CheckIsAdminReq(app *core.App, c *fiber.Ctx) bool {
|
|
jwt := GetJwtInstanceByReq(app, c)
|
|
if jwt == nil {
|
|
return false
|
|
}
|
|
|
|
user := GetUserByJwt(app, jwt)
|
|
return user.IsAdmin
|
|
}
|
|
|
|
func GetIsSuperAdmin(app *core.App, c *fiber.Ctx) bool {
|
|
user := GetUserByReq(app, c)
|
|
return user.IsAdmin && user.SiteNames == ""
|
|
}
|
|
|
|
func IsAdminHasSiteAccess(app *core.App, c *fiber.Ctx, siteName string) bool {
|
|
user := GetUserByReq(app, c)
|
|
cookedUser := app.Dao().CookUser(&user)
|
|
|
|
if !user.IsAdmin {
|
|
return false
|
|
}
|
|
|
|
if !GetIsSuperAdmin(app, c) && !utils.ContainsStr(cookedUser.SiteNames, siteName) {
|
|
// 如果账户分配了站点，并且待操作的站点并非处于分配的站点列表
|
|
return false
|
|
}
|
|
|
|
return true
|
|
}
|