Upgrade to proper user management

src/models/calendar/events/credentials.service.ts

@@ -1,4 +1,5 @@
 import * as dotenv from 'dotenv';
+import * as UserService from '../users/users.service';
 
 
 dotenv.config();
@@ -7,34 +8,48 @@ dotenv.config();
  * Checks if the password gives admin privileges (view / create / edit / delete)
  * @param password
  */
-export const checkAdminPrivileges = (password: string) => {
-	return password == process.env.ADMIN_CREDENTIAL;
+export const checkAdminPrivileges = async (sessionId: string, sessionKey: string, ip: string) => {
+	if(sessionId) {
+		let user = await UserService.checkSession(sessionId, sessionKey, ip);
+		return user.is_active;
+	}
+	return false;
 }
 
 /**
  * Checks if the password gives member view privileges
  * @param password
  */
-export const checkMemberPrivileges = (password: string) => {
-	return password == process.env.MEMBER_CREDENTIAL || password == process.env.ADMIN_CREDENTIAL;
+export const checkMemberPrivileges = async (sessionId: string, sessionKey: string, password: string, ip: string) => {
+	if(sessionId) {
+		let user = await UserService.checkSession(sessionId, sessionKey, ip);
+		return user.is_active;
+	}
+
+	return password == process.env.MEMBER_CREDENTIAL;
 }
 
 /**
  * Checks if the password gives management view privileges
  * @param password
  */
-export const checkManagementPrivileges = (password: string) => {
-	return password == process.env.MANAGEMENT_CREDENTIAL || password == process.env.ADMIN_CREDENTIAL;
+export const checkManagementPrivileges = async (sessionId: string, sessionKey: string, password: string, ip: string) => {
+	if(sessionId) {
+		let user = await UserService.checkSession(sessionId, sessionKey, ip);
+		return user.is_active;
+	}
+
+	return password == process.env.MANAGEMENT_CREDENTIAL;
 }
 
-export const hasAccess = (calendarName: string, password: string) => {
+export const hasAccess = async (calendarName: string, sessionId: string, sessionKey: string, password: string, ip: string) => {
 	switch (calendarName) {
 		case 'public':
 			return true;
 		case 'members':
-			return checkMemberPrivileges(password);
+			return await checkMemberPrivileges(sessionId, sessionKey, password, ip);
 		case 'management':
-			return checkManagementPrivileges(password);
+			return await checkManagementPrivileges(sessionId, sessionKey, password, ip);
 		default:
 			return false;
 	}