Ghost/core/server/models/plugins/access-rules.js

// # Access Rules
//
// Extends Bookshelf.Model.force to take a 'context' option which provides information on how this query should
// be treated in terms of data access rules - currently just detecting public requests
module.exports = function (Bookshelf) {
    var model = Bookshelf.Model,
        Model;

    Model = Bookshelf.Model.extend({
        /**
         * Cached copy of the context setup for this model instance
         */
        _context: null,

        /**
         * ## Is Public Context?
         * A helper to determine if this is a public request or not
         * @returns {boolean}
         */
        isPublicContext: function isPublicContext() {
            return !!(this._context && this._context.public);
        },

        isInternalContext: function isInternalContext() {
            return !!(this._context && this._context.internal);
        }
    },
    {
        /**
         * ## Forge
         * Ensure that context gets set as part of the forge
         *
         * @param {object} attributes
         * @param {object} options
         * @returns {Bookshelf.Model} model
         */
        forge: function forge(attributes, options) {
            var self = model.forge.apply(this, arguments);

            if (options && options.context) {
                self._context = options.context;
                delete options.context;
            }

            return self;
        }
    });

    Bookshelf.Model = Model;
};