|
@@ -99,11 +99,14 @@ function requirePermission(...requiredCapabilities) {
|
|
|
if (!Features.hasFeature('saas')) {
|
|
if (!Features.hasFeature('saas')) {
|
|
|
return next()
|
|
return next()
|
|
|
}
|
|
}
|
|
|
- if (!req.user) {
|
|
|
|
|
|
|
+ if (!req.user && !req.oauth_user) {
|
|
|
return next(new Error('no user'))
|
|
return next(new Error('no user'))
|
|
|
}
|
|
}
|
|
|
try {
|
|
try {
|
|
|
- await assertUserPermissions(req.user, requiredCapabilities)
|
|
|
|
|
|
|
+ await assertUserPermissions(
|
|
|
|
|
+ req.user || req.oauth_user,
|
|
|
|
|
+ requiredCapabilities
|
|
|
|
|
+ )
|
|
|
next()
|
|
next()
|
|
|
} catch (error) {
|
|
} catch (error) {
|
|
|
next(error)
|
|
next(error)
|