sails resource policy

Graph.js

/**
* Graph.js
*
* @description :: TODO: You might write a short summary of how this model works and what it represents here.
* @docs        :: http://sailsjs.org/#!documentation/models
*/

module.exports = {

  attributes: {
  	uuid: {
  		type: 'string',
      primaryKey: true,
  		required: true
  	},
  	user: {
  		model: 'User',
      via: 'graphs',
  		required: true
  	}
  }
};

resourceOwner.js

/**
 * Gets the current user from session, or returns 403
 */
module.exports = function(req, res, next) {

  // User is allowed, proceed to controller
  if (req.session.user) {
    if (!req.query) {
      req.query = {};
    }
    sails.log.debug('setting req query');
    req.query.user = req.session.user.id;
    return next();
  }

  // User is not allowed
  else {
    return res.send('You are not permitted to perform this action.', 403);
  }
};

User.js

/**
* User.js
*
* @description :: TODO: You might write a short summary of how this model works and what it represents here.
* @docs        :: http://sailsjs.org/#!documentation/models
*/

var User = {
  // Enforce model schema in the case of schemaless databases
  schema: true,

  attributes: {
    username  : { type: 'string', unique: true },
    email     : { type: 'email',  unique: true },
    passports : { collection: 'Passport', via: 'user' },
    graphs	  : { collection: 'Graph', via: 'user'}
  }
};

module.exports = User;