challenge #30056080 PREFLIGHT CHECKLIST

Author: maxceem

common/Permission.js

@@ -37,10 +37,35 @@ function providerRoleCheck(req, res, next) {
     next();
   });
 }
+/**
+ * check the user permission
+ * if user role not pilot, then cannot perform pilot actions
+ * @param req
+ * @param res
+ * @param next
+ */
+function pilotRoleCheck(req, res, next) {
+  User.findOne({_id: req.auth.sub}, (err, user) => {
+    if (!user) {
+      throw new errors.AuthenticationRequiredError('Anonymous is not allowed to access', 401);
+    }
+
+    if (user.role !== Role.PILOT) {
+      throw new errors.NotPermittedError('Non-pilot is not allowed to access', 403);
+    }
+    req.auth.payload = {
+      role: Role.PILOT,
+    };
+    next();
+  });
+}
 
 
 module.exports = {
   providerRole() {
     return providerRoleCheck;
   },
+  pilotRole() {
+    return pilotRoleCheck;
+  },
 };

controllers/MissionController.js

@@ -23,6 +23,9 @@ module.exports = {
   getAllByDrone,
   download,
   remove,
+  getPilotChecklist,
+  updatePilotChecklist,
+  fetchPilotMissions,
 };
 
 /**
@@ -98,3 +101,33 @@ function* monthlyCountByDrone(req, res) {
 function* getAllByDrone(req, res) {
   res.json(yield MissionService.getAllByDrone(req.params.droneId, req.query));
 }
+
+/**
+ * Get a pilot checklist
+ *
+ * @param req the request
+ * @param res the response
+ */
+function* getPilotChecklist(req, res) {
+  res.json(yield MissionService.getPilotChecklist(req.params.id, req.auth.sub));
+}
+
+/**
+ * Update a pilot checklist
+ *
+ * @param req the request
+ * @param res the response
+ */
+function* updatePilotChecklist(req, res) {
+  res.json(yield MissionService.updatePilotChecklist(req.params.id, req.auth.sub, req.body));
+}
+
+/**
+ * Fetch pilot mission list
+ *
+ * @param req the request
+ * @param res the response
+ */
+function* fetchPilotMissions(req, res) {
+  res.json(yield MissionService.fetchPilotMissions(req.auth.sub, req.query));
+}