Missing file.

src/api/acl.js

@@ -0,0 +1,97 @@
+import {coroutine} from 'bluebird';
+import {ModelAlreadyExists} from '../collection';
+
+//====================================================================
+
+let get = coroutine(function *({subject, object}) {
+  let sieve = {};
+  try {
+    if (subject !== undefined) {
+      sieve.subject = (yield this.users.first({ email: subject })).get('id');
+    }
+    if (object !== undefined) {
+      object = this.getObject(object).id;
+    }
+  } catch (error) {
+    this.throw('NO_SUCH_OBJECT');
+  }
+
+  return this.acls.get(sieve);
+});
+
+get.permission = 'admin';
+
+get.params = {
+  subject: { type: 'string', optional: true },
+  object: { type: 'string', optional: true },
+};
+
+get.description = 'get existing ACLs'
+
+export {get};
+
+//--------------------------------------------------------------------
+
+let getCurrent = coroutine(function *() {
+  return this.acls.get({ subject: this.session.get('user_id') });
+});
+
+getCurrent.permission = '';
+
+getCurrent.description = 'get existing ACLs concerning current user';
+
+export {getCurrent};
+
+//--------------------------------------------------------------------
+
+let set = coroutine(function *({subject, object}) {
+  try {
+    subject = (yield this.users.first({ email: subject })).get('id');
+    object = this.getObject(object).id;
+  } catch (error) {
+    this.throw('NO_SUCH_OBJECT');
+  }
+
+  try {
+    yield this.acls.create(subject, object);
+  } catch (error) {
+    if (!(error instanceof ModelAlreadyExists)) {
+      throw error
+    }
+  }
+});
+
+set.permission = 'admin';
+
+set.params = {
+  subject: { type: 'string' },
+  object: { type: 'string' },
+};
+
+set.description = 'create a new ACL entry';
+
+export {set};
+
+//--------------------------------------------------------------------
+
+let unset = coroutine(function *({subject, object}) {
+  try {
+    subject = (yield this.users.first({ email: subject })).get('id');
+    object = this.getObject(object).id;
+  } catch (error) {
+    this.throw('NO_SUCH_OBJECT');
+  }
+
+  yield this.acls.delete(subject, object);
+});
+
+unset.permission = 'admin';
+
+unset.params = {
+  subject: { type: 'string' },
+  object: { type: 'string' },
+};
+
+unset.description = 'remove an existing ACL entry';
+
+export {unset};