Skip to content

Calendar · Permissions

3 modules · 31 exports · 1 repository · 11 e2e tests · 6 routes

Who may do what in Calendar: the per-object permissions it builds with every place checking them, and the checks in its code. See Permissions for how authorization works and the reference for every role and feature.

Granted here

Built at read time into what the functions return, a list of the user ids holding each permission. Checks are listed wherever they are, other features' included.

PermissionGranted byChecked in
EDIT
findById
[firstRow.authorId]
DELETE
findById
databaseTimestampToDate(startTimes[0]) > now ? [firstRow.authorId] : []
REPORT_WINNERS
findById
startTimes.every(
	(startTime) => databaseTimestampToDate(startTime) < now,
)
	? [firstRow.authorId]
	: []

Other features' permissions

Checks in this feature's code of permissions another feature grants.

PermissionGranted inChecked in
EDIT_EVENT_INFOTournament

Global roles

The global roles this feature's code checks, see who has each.

RoleChecked in
CALENDAR_EVENT_ADDER
TOURNAMENT_ADDER