feat(next/api): category.meta.allow property

leancloud · Apr 18, 2024 · fdf13c0 · fdf13c0
1 parent f40eee8
commit fdf13c0
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/next/api/src/router/ticket.ts b/next/api/src/router/ticket.ts
@@ -362,6 +362,15 @@ router.post('/', async (ctx) => {
   if (!category) {
     return ctx.throw(400, `Category ${data.categoryId} is not exists`);
   }
+  if (category.meta) {
+    const { allow } = category.meta;
+    if (typeof allow === 'string') {
+      const systemRoles = await roleService.getSystemRolesForUser(currentUser.id);
+      if (!systemRoles.includes(allow)) {
+        return ctx.throw(403, `You cannot create ticket with category ${category.id}`);
+      }
+    }
+  }
 
   const { title: fieldTitle, details, attachments, customFields } = extractSystemFields(
     data.customFields