talk/graph/resolvers/user.js

const {decorateWithTags} = require('./util');
const KarmaService = require('../../services/karma');
const {
  SEARCH_ACTIONS,
  SEARCH_OTHER_USERS,
  SEARCH_OTHERS_COMMENTS,
  UPDATE_USER_ROLES,
  SEARCH_COMMENT_METRICS,
  VIEW_SUSPENSION_INFO,
  LIST_OWN_TOKENS
} = require('../../perms/constants');

const User = {
  action_summaries({id}, _, {loaders: {Actions}}) {
    return Actions.getSummariesByItemID.load(id);
  },
  actions({id}, _, {user, loaders: {Actions}}) {

    // Only return the actions if the user is not an admin.
    if (user && user.can(SEARCH_ACTIONS)) {
      return Actions.getByID.load(id);
    }

  },
  created_at({roles, created_at}, _, {user}) {
    if (user && user.can(SEARCH_OTHER_USERS)) {
      return created_at;
    }

    return null;
  },
  comments({id}, _, {loaders: {Comments}, user}) {

    // If the user is not an admin, only return comment list for the owner of
    // the comments.
    if (user && (user.can(SEARCH_OTHERS_COMMENTS) || user.id === id)) {
      return Comments.getByQuery({author_id: id, sort: 'REVERSE_CHRONOLOGICAL'});
    }

    return null;
  },
  profiles({profiles}, _, {user}) {

    // if the user is not an admin, do not return the profiles
    if (user && user.can(SEARCH_OTHER_USERS)) {
      return profiles;
    }

    return null;
  },
  tokens({id, tokens}, args, {user}) {
    if (!user ||  ((user.id !== id) && !user.can(LIST_OWN_TOKENS))) {
      return null;
    }

    return tokens;
  },
  ignoredUsers({id}, args, {user, loaders: {Users}}) {

    // Only allow a logged in user that is either the current user or is a staff
    // member to access the ignoredUsers of a given user.
    if (!user || ((user.id !== id) && !user.can(SEARCH_OTHER_USERS))) {
      return null;
    }

    // Return nothing if there is nothing to query for.
    if (!user.ignoresUsers || user.ignoresUsers.length <= 0) {
      return [];
    }

    return Users.getByQuery({ids: user.ignoresUsers});
  },
  roles({id, roles}, _, {user}) {

    // If the user is not an admin, only return the current user's roles.
    if (user && (user.can(UPDATE_USER_ROLES) || user.id === id)) {
      return roles;
    }

    return null;
  },

  // Extract the reliability from the user metadata if they have permission.
  reliable(user, _, {user: requestingUser}) {
    if (requestingUser && requestingUser.can(SEARCH_COMMENT_METRICS)) {
      return KarmaService.model(user);
    }
  },

  suspension({id, suspension}, _, {user}) {
    if (user.id !== id && !user.can(VIEW_SUSPENSION_INFO)) {
      return null;
    }
    return suspension;
  }
};

// Decorate the User type resolver with a tags field.
decorateWithTags(User);

module.exports = User;