mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-13 14:39:52 +03:00
c5eda57f1e
refs #6589 - add internalAppsPath as a proper config path - middleware/routes will be setup for any internal apps which have the function - this should be refactored into some sort of proper hooks system as part of apps - internal apps get permission to do anything the proxy allows
57 lines
1.7 KiB
JavaScript
57 lines
1.7 KiB
JavaScript
var fs = require('fs'),
|
|
Promise = require('bluebird'),
|
|
path = require('path'),
|
|
parsePackageJson = require('../utils/parse-package-json');
|
|
|
|
function AppPermissions(appPath) {
|
|
this.appPath = appPath;
|
|
this.packagePath = path.join(this.appPath, 'package.json');
|
|
}
|
|
|
|
AppPermissions.prototype.read = function () {
|
|
var self = this;
|
|
|
|
return this.checkPackageContentsExists().then(function (exists) {
|
|
if (!exists) {
|
|
// If no package.json, return default permissions
|
|
return Promise.resolve(AppPermissions.DefaultPermissions);
|
|
}
|
|
|
|
// Read and parse the package.json
|
|
return self.getPackageContents().then(function (parsed) {
|
|
// If no permissions in the package.json then return the default permissions.
|
|
if (!(parsed.ghost && parsed.ghost.permissions)) {
|
|
return Promise.resolve(AppPermissions.DefaultPermissions);
|
|
}
|
|
|
|
// TODO: Validation on permissions object?
|
|
|
|
return Promise.resolve(parsed.ghost.permissions);
|
|
});
|
|
});
|
|
};
|
|
|
|
AppPermissions.prototype.checkPackageContentsExists = function () {
|
|
var self = this;
|
|
|
|
// Mostly just broken out for stubbing in unit tests
|
|
return new Promise(function (resolve) {
|
|
fs.stat(self.packagePath, function (err) {
|
|
var exists = !err;
|
|
resolve(exists);
|
|
});
|
|
});
|
|
};
|
|
|
|
// Get the contents of the package.json in the appPath root
|
|
AppPermissions.prototype.getPackageContents = function () {
|
|
return parsePackageJson(this.packagePath);
|
|
};
|
|
|
|
// Default permissions for an App.
|
|
AppPermissions.DefaultPermissions = {
|
|
posts: ['browse', 'read']
|
|
};
|
|
|
|
module.exports = AppPermissions;
|