feat(core): Convert eventBus controller to decorator style and improve permissions (#5779)
This commit is contained in:
committed by
GitHub
parent
dd20127961
commit
f15f4bdcf2
12
packages/cli/src/middlewares/isOwner.ts
Normal file
12
packages/cli/src/middlewares/isOwner.ts
Normal file
@@ -0,0 +1,12 @@
|
||||
import type { RequestHandler } from 'express';
|
||||
import { LoggerProxy } from 'n8n-workflow';
|
||||
import type { AuthenticatedRequest } from '@/requests';
|
||||
|
||||
export const isOwnerMiddleware: RequestHandler = (req: AuthenticatedRequest, res, next) => {
|
||||
if (req.user.globalRole.name === 'owner') {
|
||||
next();
|
||||
} else {
|
||||
LoggerProxy.debug('Request failed because user is not owner');
|
||||
res.status(401).send('Unauthorized');
|
||||
}
|
||||
};
|
||||
Reference in New Issue
Block a user