authorizer.js

"use strict";

var SbError = require("../lib/SbError.js"),
	events = ["text", "edit", "away", "back", "join", "part", "admit", "expel", "getTexts", "getThreads"],
	sessionUtils = require("../lib/session-utils.js"),
	userUtils = require("../lib/user-utils.js");

module.exports = function (core, config) {
	var domainAuth = require("./rules/domainRules.js")(core, config),
		permissionRules = require("./rules/permissionRules.js")(core, config),
		relationshipRules = require("./rules/relationshipRules.js")(core, config);

	events.forEach(function (event) {
		core.on(event, function (action, next) {
			var error;
			if (!sessionUtils.isWebSession(action.session)) return next();
			if (!action.user.role || action.user.role === "none") {
				action.user.role = "registered";

			}
			error = domainAuth(action);
			if (error) return next(error);
			error = permissionRules(action);
			if (error) return next(error);
			error = relationshipRules(action);
			if (error) return next(error);
			next();
		}, "authorization");
	});

	require("./authRules/initAuth.js")(core, config);
	require("./authRules/userAuth.js")(core, config);
	require("./authRules/roomAuth.js")(core, config);
	require("./authRules/queryAuth.js")(core, config);

	core.on("upload/getPolicy", function (action, next) {
		next();
	}, "authorization");
};