24 lines
757 B
Go
24 lines
757 B
Go
package common
|
|
|
|
import "fmt"
|
|
|
|
// Token is an API token.
|
|
type Token struct {
|
|
ID int
|
|
Value string
|
|
UserID int
|
|
TokenPrivileges Privileges
|
|
UserPrivileges UserPrivileges
|
|
}
|
|
|
|
// OnlyUserPublic returns a string containing "(user.privileges & 1 = 1 OR users.id = <userID>)"
|
|
// if the user does not have the UserPrivilege AdminManageUsers, and returns "1" otherwise.
|
|
func (t Token) OnlyUserPublic(userManagerSeesEverything bool) string {
|
|
if userManagerSeesEverything &&
|
|
t.UserPrivileges&AdminPrivilegeManageUsers == AdminPrivilegeManageUsers {
|
|
return "1"
|
|
}
|
|
// It's safe to use sprintf directly even if it's a query, because UserID is an int.
|
|
return fmt.Sprintf("(users.privileges & 1 = 1 OR users.id = '%d')", t.UserID)
|
|
}
|