All files / libs/kernel/auth/shared/src/abilities/comment-thread-messages definitions.ts

78.84% Statements 82/104
100% Branches 5/5
71.42% Functions 5/7
78.84% Lines 82/104

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 1051x 1x 1x 1x 1x 1x 1x 135x 135x 135x 135x 135x 135x 135x 135x 135x 135x 135x 1x 1x 1x 45x 45x 45x 45x 45x 45x 45x 45x 45x 45x 45x 1x 1x 1x                       1x 1x 1x                       1x 1x 1x 50x 50x 50x 50x 50x 50x 50x 50x 50x 50x 50x 1x 1x 1x 43x 43x 43x 43x 43x 43x 43x 43x 43x 43x 43x 1x 1x 1x 64x 64x 64x 64x 64x 64x 64x 64x 64x 64x 64x 64x 1x  
import { SubjectsEnum, type DefinePermissions, type UserRoleForAccessControl } from '../../types';
 
import { CommentThreadMessagesActions } from './actions';
import { type DeleteCommentThreadMessageSubject, type ModifyCommentThreadMessageSubject } from './subjects';
 
export const commentThreadMessagesAbilityDefinitions = {
  ADMIN({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
 
    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  READ_ONLY_ADMIN({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
 
    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  SCOPED_ADMIN({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );

    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  SCOPED_READ_ONLY_ADMIN({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );

    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  MANAGER({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
 
    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  READ_ONLY_MANAGER({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
 
    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
 
  EMPLOYEE({ user }, { can }) {
    can(
      CommentThreadMessagesActions.delete,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: DeleteCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
 
    can(
      CommentThreadMessagesActions.modify,
      SubjectsEnum.CommentThreadMessage,
      (statementComment: ModifyCommentThreadMessageSubject) => statementComment.authorId === user.id,
    );
  },
} as const satisfies Partial<Record<UserRoleForAccessControl, DefinePermissions>>;