11const userQuery = require ( "../models/users" ) ;
22const members = require ( "../models/members" ) ;
3- const { USER_SENSITIVE_DATA } = require ( "../constants/users " ) ;
3+ const { ROLE_LEVEL , KEYS_NOT_ALLOWED , ACCESS_LEVEL } = require ( "../constants/userDataLevels " ) ;
44
55const retrieveUsers = async ( {
66 id = null ,
77 username = null ,
88 usernames = null ,
99 query = null ,
1010 userdata,
11+ level = ACCESS_LEVEL . PUBLIC ,
12+ role = null ,
1113 userIds = [ ] ,
1214} ) => {
1315 if ( id || username ) {
@@ -17,79 +19,93 @@ const retrieveUsers = async ({
1719 } else {
1820 result = await userQuery . fetchUser ( { username : username } ) ;
1921 }
20- removeSensitiveInfo ( result . user ) ;
22+ const user = levelSpecificAccess ( result . user , level , role ) ;
23+ result . user = user ;
2124 return result ;
2225 } else if ( usernames ) {
2326 const { users } = await userQuery . fetchUsers ( usernames ) ;
24- users . forEach ( ( element ) => {
25- removeSensitiveInfo ( element ) ;
27+ const result = [ ] ;
28+ users . forEach ( ( userdata ) => {
29+ const user = levelSpecificAccess ( userdata , level , role ) ;
30+ result . push ( user ) ;
2631 } ) ;
27- return users ;
32+ return result ;
2833 } else if ( userIds . length > 0 ) {
2934 const userDetails = await userQuery . fetchUserByIds ( userIds ) ;
30-
3135 Object . keys ( userDetails ) . forEach ( ( userId ) => {
3236 removeSensitiveInfo ( userDetails [ userId ] ) ;
3337 } ) ;
34-
3538 return userDetails ;
3639 } else if ( query ) {
3740 const { allUsers, nextId, prevId } = await userQuery . fetchPaginatedUsers ( query ) ;
38- allUsers . forEach ( ( element ) => {
39- removeSensitiveInfo ( element ) ;
41+ const users = [ ] ;
42+ allUsers . forEach ( ( userdata ) => {
43+ const user = levelSpecificAccess ( userdata , level , role ) ;
44+ users . push ( user ) ;
4045 } ) ;
41- return { allUsers , nextId, prevId } ;
46+ return { users , nextId, prevId } ;
4247 } else {
43- removeSensitiveInfo ( userdata ) ;
44- return userdata ;
48+ const result = await userQuery . fetchUser ( { userId : userdata . id } ) ;
49+ return levelSpecificAccess ( result . user , level , role ) ;
4550 }
4651} ;
4752
48- const retrieveDiscordUsers = async ( ) => {
53+ const retrieveDiscordUsers = async ( level = ACCESS_LEVEL . PUBLIC , role = null ) => {
4954 const users = await userQuery . getDiscordUsers ( ) ;
50- users . forEach ( ( element ) => {
51- removeSensitiveInfo ( element ) ;
55+ const usersData = [ ] ;
56+ users . forEach ( ( userdata ) => {
57+ const user = levelSpecificAccess ( userdata , level , role ) ;
58+ usersData . push ( user ) ;
5259 } ) ;
53- return users ;
60+ return usersData ;
5461} ;
5562
5663const retreiveFilteredUsers = async ( query ) => {
5764 const users = await userQuery . getUsersBasedOnFilter ( query ) ;
58- users . forEach ( ( element ) => {
59- removeSensitiveInfo ( element ) ;
65+ users . forEach ( ( userdata ) => {
66+ removeSensitiveInfo ( userdata ) ;
6067 } ) ;
6168 return users ;
6269} ;
6370
6471const retrieveMembers = async ( query ) => {
6572 const allUsers = await members . fetchUsers ( query ) ;
66- allUsers . forEach ( ( element ) => {
67- removeSensitiveInfo ( element ) ;
73+ allUsers . forEach ( ( userdata ) => {
74+ removeSensitiveInfo ( userdata ) ;
6875 } ) ;
6976 return allUsers ;
7077} ;
7178
7279const retrieveUsersWithRole = async ( role ) => {
7380 const users = await members . fetchUsersWithRole ( role ) ;
74- users . forEach ( ( element ) => {
75- removeSensitiveInfo ( element ) ;
81+ users . forEach ( ( userdata ) => {
82+ removeSensitiveInfo ( userdata ) ;
7683 } ) ;
7784 return users ;
7885} ;
7986
80- const removeSensitiveInfo = function ( obj ) {
81- for ( let i = 0 ; i < USER_SENSITIVE_DATA . length ; i ++ ) {
82- if ( Object . prototype . hasOwnProperty . call ( obj , USER_SENSITIVE_DATA [ i ] ) ) {
83- delete obj [ USER_SENSITIVE_DATA [ i ] ] ;
87+ const removeSensitiveInfo = function ( obj , level = ACCESS_LEVEL . PUBLIC ) {
88+ for ( let i = 0 ; i < KEYS_NOT_ALLOWED [ level ] . length ; i ++ ) {
89+ if ( Object . prototype . hasOwnProperty . call ( obj , KEYS_NOT_ALLOWED [ level ] [ i ] ) ) {
90+ delete obj [ KEYS_NOT_ALLOWED [ level ] [ i ] ] ;
8491 }
8592 }
8693} ;
8794
95+ const levelSpecificAccess = ( user , level = ACCESS_LEVEL . PUBLIC , role = null ) => {
96+ if ( level === ACCESS_LEVEL . PUBLIC || ROLE_LEVEL [ level ] . includes ( role ) ) {
97+ removeSensitiveInfo ( user , level ) ;
98+ return user ;
99+ }
100+ return "unauthorized" ;
101+ } ;
102+
88103module . exports = {
89104 retrieveUsers,
90105 removeSensitiveInfo,
91106 retrieveDiscordUsers,
92107 retrieveMembers,
93108 retrieveUsersWithRole,
94109 retreiveFilteredUsers,
110+ levelSpecificAccess,
95111} ;
0 commit comments