Method checkPermission

api/server/models/Message.ts:493–527

({ userId, chatId, doc = null })

  }

  private static async checkPermission({ userId, chatId, doc = null }) {
    if (!userId || !chatId) {
      throw new Error('Bad data. You have no permission.');
    }

    if (doc && doc.createdUserId !== userId) {
      throw new Error('You do not have permission.');
    }

    const chat = await Chat.findById(chatId).setOptions({ lean: true });

    const teamLeader = await User.findOne({
      'teamsForTeamLeader.teamId': chat.teamId,
    }).setOptions({
      lean: true,
    });

    const team = teamLeader.teamsForTeamLeader.find((team) => {
      return team.teamId === chat.teamId;
    });

    if (!chat && (teamLeader._id.toString() === userId || team.idsOfTeamMembers.includes(userId))) {
      return { team };
    }

    if (
      chat &&
      (teamLeader._id.toString() === userId || team.idsOfTeamMembers.includes(userId)) &&
      (chat.chatParticipantIds === userId || chat.chatParticipantIds.includes(userId))
    ) {
      return { team, chat };
    }

    throw new Error('Permission denied');
  }
}

mongoSchema.loadClass(MessageClass);