22 lines
684 B
Rust
22 lines
684 B
Rust
use crate::{database::DatabaseError, users::User};
|
|
|
|
/// Infradmin and systemuser have all permissions.
|
|
pub enum Permission {
|
|
// All Users have the right to observe their own sessions
|
|
ListOthersSessions,
|
|
// All Users have the right to revoke their own sessions
|
|
RevokeOthersSessions,
|
|
// All Users have the right to change their own password
|
|
ChangeOthersPasswords,
|
|
}
|
|
|
|
impl User {
|
|
pub fn has_permission(&self, permission: Permission) -> Result<bool, DatabaseError> {
|
|
if self.is_infradmin() || self.is_systemuser() {
|
|
return Ok(true);
|
|
}
|
|
|
|
todo!("Do the permission checking here once permissions are modeled in the DB")
|
|
}
|
|
}
|