check autthorization in cat service

2020-01-27 15:29:43 +01:00
parent 6d0194acc0
commit 26e3c0d753
1 changed files with 5 additions and 0 deletions
--- a/packages/bookshop/srv/cat-service.js
+++ b/packages/bookshop/srv/cat-service.js
@@ -4,6 +4,7 @@ const { Books } = cds.entities
 /** Service implementation for CatalogService */
 module.exports = cds.service.impl(function() {
  this.after ('READ', 'Books', each => each.stock > 111 && _addDiscount2(each,11))
+  this.before ('CREATE', 'Orders', _checkOrderCreateAuth)
  this.before ('CREATE', 'Orders', _reduceStock)
 })

@@ -24,3 +25,7 @@ async function _reduceStock (req) {
    )
  }))
 }
+/** Check authorization  */
+function _checkOrderCreateAuth (req) {
+  req.user.country === req.data.country || req.reject(403)
+}