agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-23 17:19:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add view-split-test and modify-split-test capabilities

Browse Source 
GitOrigin-RevId: 3f0752aec332c386ece72d2447d39126065ddb35
This commit is contained in:
Andrew Rumble
2025-07-24 16:49:16 +01:00
committed by Copybot
parent 5ea17cd4b6
commit 811b878eaa
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
services/web/app/src/Features/UserMembership/UserMembershipMiddleware.js
View File

@@ -7,6 +7,7 @@ const EntityConfigs = require('./UserMembershipEntityConfigs')
const Errors = require('../Errors/Errors')
const HttpErrorHandler = require('../Errors/HttpErrorHandler')
const TemplatesManager = require('../Templates/TemplatesManager')
const { useAdminCapabilities } = require('../Helpers/AdminAuthorizationHelper')
// set of middleware arrays or functions that checks user access to an entity
// (publisher, institution, group, template, etc.)
@@ -185,16 +186,20 @@ const UserMembershipMiddleware = {
requireSplitTestMetricsAccess: [
AuthenticationController.requireLogin(),
useAdminCapabilities,
allowAccessIfAny([
UserMembershipAuthorization.hasStaffAccess('splitTestMetrics'),
UserMembershipAuthorization.hasStaffAccess('splitTestManagement'),
UserMembershipAuthorization.hasAdminCapability('view-split-test'),
]),
],
requireSplitTestManagementAccess: [
AuthenticationController.requireLogin(),
useAdminCapabilities,
allowAccessIfAny([
UserMembershipAuthorization.hasStaffAccess('splitTestManagement'),
UserMembershipAuthorization.hasAdminCapability('modify-split-test'),
]),
],