const {decorateWithTags} = require('./util'); const KarmaService = require('../../services/karma'); const { SEARCH_ACTIONS, SEARCH_OTHER_USERS, SEARCH_OTHERS_COMMENTS, UPDATE_USER_ROLES, SEARCH_COMMENT_METRICS, LIST_OWN_TOKENS } = require('../../perms/constants'); const User = { action_summaries({id}, _, {loaders: {Actions}}) { return Actions.getSummariesByItemID.load(id); }, actions({id}, _, {user, loaders: {Actions}}) { // Only return the actions if the user is not an admin. if (user && user.can(SEARCH_ACTIONS)) { return Actions.getByID.load(id); } }, comments({id}, {query}, {loaders: {Comments}, user}) { // If there is no user, or there is a user, but they are requesting someone // else's comments, and they aren't allowed, don't return then anything! if (!user || (user.id !== id && !user.can(SEARCH_OTHERS_COMMENTS))) { return null; } // Set the author id on the query. query.author_id = id; return Comments.getByQuery(query); }, profiles({profiles}, _, {user}) { // if the user is not an admin, do not return the profiles if (user && user.can(SEARCH_OTHER_USERS)) { return profiles; } return null; }, tokens({id, tokens}, args, {user}) { if (!user || ((user.id !== id) && !user.can(LIST_OWN_TOKENS))) { return null; } return tokens; }, async ignoredUsers({id}, args, {user, loaders: {Users}}) { // Only allow a logged in user that is either the current user or is a staff // member to access the ignoredUsers of a given user. if (!user || ((user.id !== id) && !user.can(SEARCH_OTHER_USERS))) { return null; } // Return nothing if there is nothing to query for. if (!user.ignoresUsers || user.ignoresUsers.length <= 0) { return []; } const connection = await Users.getByQuery({ids: user.ignoresUsers}); return connection.nodes; }, roles({id, roles}, _, {user}) { // If the user is not an admin, only return the current user's roles. if (user && (user.can(UPDATE_USER_ROLES) || user.id === id)) { return roles; } return null; }, // Extract the reliability from the user metadata if they have permission. reliable(user, _, {user: requestingUser}) { if (requestingUser && requestingUser.can(SEARCH_COMMENT_METRICS)) { return KarmaService.model(user); } }, // suspension({id, suspension}, _, {user}) { // if (user.id !== id && !user.can(VIEW_SUSPENSION_INFO)) { // return null; // } // return suspension; // } }; // Decorate the User type resolver with a tags field. decorateWithTags(User); module.exports = User;