From ad68adee9acc3ef85156e42b038e53496e1915fd Mon Sep 17 00:00:00 2001 From: Shane Kilkelly Date: Mon, 9 Oct 2017 11:13:55 +0100 Subject: [PATCH] Add more commentary on the anonymous path --- .../Features/Authorization/AuthorizationManager.coffee | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/services/web/app/coffee/Features/Authorization/AuthorizationManager.coffee b/services/web/app/coffee/Features/Authorization/AuthorizationManager.coffee index 206ca7ade9..5a3fe9abf9 100644 --- a/services/web/app/coffee/Features/Authorization/AuthorizationManager.coffee +++ b/services/web/app/coffee/Features/Authorization/AuthorizationManager.coffee @@ -34,17 +34,24 @@ module.exports = AuthorizationManager = AuthorizationManager.getPublicAccessLevel project_id, (err, publicAccessLevel) -> return callback(err) if err? if publicAccessLevel == PublicAccessLevels.TOKEN_BASED + # Anonymous users can have read-only access to token-based projects, + # while read-write access must be logged in TokenAccessHandler.requestHasReadOnlyTokenAccess req, project_id, (err, allowed) -> return callback(err) if err? if allowed + # Grant anonymous user read-only access callback null, PrivilegeLevels.READ_ONLY, false else + # Deny anonymous user access callback null, PrivilegeLevels.NONE, false else if publicAccessLevel == PublicAccessLevels.READ_ONLY + # Legacy public read-only access for anonymous user callback null, PrivilegeLevels.READ_ONLY, true else if publicAccessLevel == PublicAccessLevels.READ_AND_WRITE + # Legacy public read-write access for anonymous user callback null, PrivilegeLevels.READ_AND_WRITE, true else + # Deny anonymous user access callback null, PrivilegeLevels.NONE, false else # User is present, get their privilege level from database