feat: Version 2

Closes #627, closes #1047

server/api/policies/is-admin-or-project-owner.js

@@ -0,0 +1,12 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
+module.exports = async function isAuthenticated(req, res, proceed) {
+  if (!sails.helpers.users.isAdminOrProjectOwner(req.currentUser)) {
+    return res.notFound(); // Forbidden
+  }
+
+  return proceed();
+};

server/api/policies/is-admin.js

@@ -1,5 +1,10 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
 module.exports = async function isAuthenticated(req, res, proceed) {
-  if (!req.currentUser.isAdmin) {
+  if (req.currentUser.role !== User.Roles.ADMIN) {
     return res.notFound(); // Forbidden
   }
 

server/api/policies/is-authenticated.js

@@ -1,3 +1,8 @@
+/*!
+ * Copyright (c) 2024 PLANKA Software GmbH
+ * Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
+ */
+
 module.exports = async function isAuthenticated(req, res, proceed) {
   if (!req.currentUser) {
     return res.unauthorized('Access token is missing, invalid or expired');