1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
/**
* Module dependencies
*/
var mongoose = require('mongoose')
, Schema = mongoose.Schema;
/**
* Schema
*
* Permissions:
* 3 = normal
* 6 = admin
* 9 = owner
* These permissions are set in steps of three, in case
* we need to add more permissions later.
*/
var AccessSchema = new Schema({
user: { type: Schema.ObjectId, ref: 'User' },
creator: { type: Schema.ObjectId, ref: 'User' },
project: { type: Schema.ObjectId, ref: 'Project' },
permissions: { type: Number, default: '3' },
randomToken: { type: String },
created: { type: Date, default: Date.now },
updated: { type: Date, default: Date.now }
});
// the four validations below only apply if you are signing up traditionally
AccessSchema.methods = {
/**
* Generate random access token for Remember Me function
*
* @param {Number} length
* @return {String}
* @api public
*/
generateRandomToken: function(length) {
if (typeof(length) === undefined) length = 16; // default length of token
var chars = '_-abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890'
, token = '';
for (var i = 0; i < length; i++) {
var x = Math.floor(Math.random() * chars.length);
token += chars.charAt(x);
}
return token;
}
}
AccessSchema.statics = {
/**
* Load ALL accesses for a single user
*
* @param {ObjectId} id
* @param {Function} callback
* @api private
*/
loadUser: function(id, callback) {
this.find({ user: id })
.populate('project')
.sort({ 'created': -1 }) // sort by date
.exec(callback);
},
/**
* Load all users associated with a project
*
* @param {ObjectId} project
* @param {Function} callback
* @api private
*/
loadProject: function(project, callback) {
this.find({ project: project })
.populate({path: 'user', select: '_id name'})
.sort({ 'created': 1 }) // sort by date
.exec(callback);
},
/**
* Load all users associated with several projects
*
* @param {Arrau[ObjectId]} projects
* @param {Function} callback
* @api private
*/
loadProjects: function(projects, callback) {
this.find({ project: { $in: projects } })
.populate({ path: 'user', select: '_id name' })
.sort({ 'created': -1 })
.exec(callback);
},
/**
* Check to see if user has access to a particular project
*
* @param {ObjectId} user
* @param {ObjectId} project
* @param {Number} permissisons
* @param {Function} callback
* @api private
*/
checkAccess: function(user, project, permissions, callback) {
if (typeof(permissions) === 'undefined') permissions = 0;
this.findOne({ user: user })
.where('project').equals(project)
.where('permissions').gte(permissions)
.exec(callback);
}
}
mongoose.model('Access', AccessSchema);
|
