Init commit

server/core/middlewares/user-right.ts

@@ -0,0 +1,20 @@
+import express from 'express'
+import { HttpStatusCode, UserRightType } from '@peertube/peertube-models'
+import { logger } from '../helpers/logger.js'
+
+export function ensureUserHasRight (userRight: UserRightType) {
+  return function (req: express.Request, res: express.Response, next: express.NextFunction) {
+    const user = res.locals.oauth.token.user
+    if (user.hasRight(userRight) === false) {
+      const message = `User ${user.username} does not have right (No. ${userRight}) to access to ${req.path}.`
+      logger.info(message)
+
+      return res.fail({
+        status: HttpStatusCode.FORBIDDEN_403,
+        message
+      })
+    }
+
+    return next()
+  }
+}