maro
82c4261a81
- Restrict meetingPassword field so it isn't leaked via the public REST/GraphQL API - Fix booking slot computation to use Europe/Berlin time instead of the server's UTC clock - Reset email verification when a customer changes their email address - Fix ICS calendar injection via unescaped carriage returns in event descriptions - Bind WebRTC meeting kicks to a persistent client id so they survive a rejoin - Move the meeting signaling token out of the WebSocket query string into the first message - Prevent duplicate signaling connections from leaking when the same participant reconnects - Use the rightmost X-Forwarded-For entry for rate limiting (single trusted reverse proxy) - Use constant-time comparison for the cron endpoint's bearer token - Remove SVG from allowed Media upload types (stored-XSS risk, unused anyway) - Add baseline security headers and a CSP to next.config.ts - Fix CI/CD script injection via unsanitized git ref names in release.yml
38 lines
1.6 KiB
TypeScript
38 lines
1.6 KiB
TypeScript
import type { Access, FieldAccess } from "payload";
|
|
|
|
/**
|
|
* Only the "users" auth collection (Anna/admins) may perform the action —
|
|
* and only with the "admin" role, so adding further roles to Users later
|
|
* only means extending this one check. Site visitors authenticate against
|
|
* the separate "customers" collection (see collections/Customers.ts) and
|
|
* must never be treated as admins here.
|
|
*/
|
|
export const isAdmin: Access = ({ req: { user } }) =>
|
|
user?.collection === "users" && user.role === "admin";
|
|
|
|
export const isAdminFieldLevel: FieldAccess = ({ req: { user } }) =>
|
|
user?.collection === "users" && user.role === "admin";
|
|
|
|
/**
|
|
* Admins always see Analytics; any other "users" account additionally needs
|
|
* its own `canViewAnalytics` flag (see collections/Users.ts) — this is the
|
|
* granular permission the single "admin" role doesn't otherwise provide.
|
|
* Used both as a Payload Access/FieldAccess function and called directly
|
|
* (with a minimal `{ req: { user } }` shape) from the custom admin nav-link
|
|
* and view components, which Payload does not gate via collection access.
|
|
*/
|
|
export const canViewAnalytics: Access = ({ req: { user } }) =>
|
|
user?.collection === "users" && (user.role === "admin" || user.canViewAnalytics === true);
|
|
|
|
/**
|
|
* Admins can read every document (including drafts); everyone else may only
|
|
* read documents whose Payload draft/publish status is "published".
|
|
*/
|
|
export const publishedOrAdmin: Access = ({ req: { user } }) => {
|
|
if (user?.collection === "users" && user.role === "admin") return true;
|
|
|
|
return {
|
|
_status: { equals: "published" },
|
|
};
|
|
};
|