检查用户是否有角色 - 解析云代码

Check if User has Role - Parse Cloud Code

正在编写 Parse Cloud Function (which uses Parse Javascript SDK),我无法检查当前用户是否具有角色“Admin”。我正在查看角色 class 的 Web 视图,并且存在一个名为“Admin”的角色,如果我单击用户的“查看关系”,它会显示当前用户。我怀疑这应该重要,但“管理员”是唯一的角色,当前用户是唯一具有角色的用户。最后,“Admin”角色的 ACL 为 Public Read,因此也不应该引起任何问题。

代码如下:

...
var queryRole = new Parse.Query(Parse.Role);
queryRole.equalTo('name', 'Admin'); 
queryRole.equalTo("users", Parse.User.current());
queryRole.first({
    success: function(result) { // Role Object
        var role = result;
        role ? authorized = true : console.log('Shiet, user not Admin');
    },
    error: function(error) {
        console.log("Bruh, queryRole error");
    }
})
console.log('After test: Auth = ' + authorized);
if (!authorized) {
    response.error("You ain't no admin, measly user");
    return;    
}
...

这会在日志中产生以下结果:

Before test: Auth = false

After test: Auth = false

试一试:

var authorized = false;
console.log('Before test: Auth = ' + authorized);

var queryRole = new Parse.Query(Parse.Role);
queryRole.equalTo('name', 'Admin');
queryRole.first({
    success: function(result) { // Role Object
        console.log("Okay, that's a start... in success 1 with results: " + result);

        var role = result;
        var adminRelation = new Parse.Relation(role, 'users');
        var queryAdmins = adminRelation.query();

        queryAdmins.equalTo('objectId', Parse.User.current().id);
        queryAdmins.first({
            success: function(result) {    // User Object
                var user = result;
                user ? authorized = true : console.log('Shiet, user not Admin');
            }
        });
    },
    error: function(error) {
        console.log("Bruh, can't find the Admin role");
    }
}).then(function() {
    console.log('After test: Auth = ' + authorized);
});

我有一个更简单的解决方案,试试这个:

var adminRoleQuery = new Parse.Query(Parse.Role);
adminRoleQuery.equalTo('name', 'admin');
adminRoleQuery.equalTo('users', req.user);

return adminRoleQuery.first().then(function(adminRole) {
  if (!adminRole) {
    throw new Error('Not an admin');
  }
});

对于那些正在寻找 Parse Server (2018) 答案的人,请参见下文:

Parse.Cloud.define('authorizedUserTest', function(request, response) {


  if(!request.params.username){
    //response.error('no username');
      response.error(request.params);
  }

  var queryRole = new Parse.Query(Parse.Role);
  queryRole.equalTo('name','Admin');

  queryRole.first({ useMasterKey: true }).then(function(promise){
    var role = promise;
    var relation = new Parse.Relation(role, 'users');
    var admins = relation.query();
    admins.equalTo('username', request.user.get('username'));
    admins.first({ useMasterKey: true }).then(function(user){
      if(user){
        response.success(true)
      }
      else {
        response.success(false)
      }
    }, function(err){
      response.error('User is not an admin')
    })
  }, function(err){
    response.error(err)
  })



});

request.params 等于字典 {"username":inputUsernameHere}。

如有任何问题,请随时发表评论。