permissions.js

const {router} = require("ottis");

/* Using our router, we declare permissions for admin role */
const admin = {
  /* define permissions on customer resource */
  customers: [router("*").all()],
  /* define permissions on anonymous-customer resource */
  anonymousCustomers: [router("*").all()],
  /* define permissions on products resource */
  products: [
    router("/").get().post().done(),
    router("/:id").get().put().delete().done(),
    router("/:id/location/:name").get().done()
  ]
};

/* Using our router, we declare permissions for customer role */
const customer = {
  /* define permissions on customer resource */
  customers: [router("/me").get().put().delete().done()],
  /* define permissions on anonymous-customer resource */
  anonymousCustomers: [router("/:id").get().done()],
  /* define permissions on products resource */
  products: [
    router("/").get().done(),
    router("/:id").get().done()
  ]
}

module.exports = {customer, admin};