request.user.roles und neue Auth-Hooks implementieren #110

Closed
opened 2026-06-25 15:52:43 +02:00 by niboer · 0 comments
Owner

Aufgaben

  • FastifyRequest.user um
    oles: string[] erweitern
  • equireAuth: payload.realm_access?.roles ?? [] in
    equest.user.roles speichern
  • 7 neue Hooks in ackend/src/lib/auth.ts implementieren:

equireOwnDataOrGroupMember(param) - ersetzt
equireOwnDataOrDelegation

equireGroupMember(groupIdParam)

equireOrganizerOrEventAdmin(param) - wie requireOrganizer, auch event-admin erlaubt

equireSelfOrGroupMember(eventIdParam, personIdParam) - ersetzt
equireSelfOrOrganizer

equireCompositeRole(permission)

equireOwnDataOrCompositeRole(permission, param)

equireAddressAccess(personIdParam)

  • Alte Hooks entfernen:
    equireOwnDataOrDelegation,
    equireSelfOrOrganizer
  • Tests in uth.test.ts fuer alle neuen Hooks

Siehe Autorisierungsmatrix in docs/design.md �5.1.

## Aufgaben - [ ] FastifyRequest.user um oles: string[] erweitern - [ ] equireAuth: payload.realm_access?.roles ?? [] in equest.user.roles speichern - [ ] 7 neue Hooks in ackend/src/lib/auth.ts implementieren: - equireOwnDataOrGroupMember(param) - ersetzt equireOwnDataOrDelegation - equireGroupMember(groupIdParam) - equireOrganizerOrEventAdmin(param) - wie requireOrganizer, auch event-admin erlaubt - equireSelfOrGroupMember(eventIdParam, personIdParam) - ersetzt equireSelfOrOrganizer - equireCompositeRole(permission) - equireOwnDataOrCompositeRole(permission, param) - equireAddressAccess(personIdParam) - [ ] Alte Hooks entfernen: equireOwnDataOrDelegation, equireSelfOrOrganizer - [ ] Tests in uth.test.ts fuer alle neuen Hooks Siehe Autorisierungsmatrix in docs/design.md �5.1.
niboer self-assigned this 2026-06-25 15:52:43 +02:00
Sign in to join this conversation.
No description provided.