Function checkPermissions

server/api/ConnectionRoute.js:77–111

(actionType = "readOwn")

  };

  const checkPermissions = (actionType = "readOwn") => {
    return async (req, res, next) => {
      const { team_id } = req.params;

      // Fetch the TeamRole for the user
      const teamRole = await teamController.getTeamRole(team_id, req.user.id);

      if (!teamRole) {
        return res.status(403).json({ message: "Access denied" });
      }

      const permission = accessControl.can(teamRole.role)[actionType]("connection");
      if (!permission.granted) {
        return res.status(403).json({ message: "Access denied" });
      }

      const { role, projects } = teamRole;

      // Handle permissions for teamOwner and teamAdmin
      if (["teamOwner", "teamAdmin"].includes(role)) {
        req.user.isEditor = true;
        return next();
      }

      if (role === "projectAdmin" || role === "projectViewer" || role === "projectEditor") {
        // save the projects in the user object
        req.user.projects = projects;
        req.user.permittedFields = permission.attributes;

        return next();
      }

      return res.status(403).json({ message: "Access denied" });
    };
  };

  const ensureConnectionBelongsToTeam = async (req, res, next) => {
    try {