feature: file uploading

public/_pre.ts

@@ -0,0 +1,26 @@
+import { PRECHECKS } from '@andyburke/serverus/handlers/static';
+import { get_session, get_user, require_user } from '../utils/prechecks.ts';
+import * as CANNED_RESPONSES from '../utils/canned_responses.ts';
+
+export function load() {
+	PRECHECKS.PUT = [
+		get_session,
+		get_user,
+		require_user,
+
+		(request: Request, meta: Record<string, any>): Response | undefined => {
+			const can_write_own_files = meta.user?.permissions.includes('files.write.own');
+			const can_write_all_files = meta.user?.permissions.includes('files.write.all');
+
+			const path = new URL(request.url).pathname;
+
+			const is_to_files = path.toLowerCase().startsWith('/files/');
+			const is_to_home_dir = meta.user?.id && path.toLowerCase().startsWith(`/files/users/${meta.user.id}/`);
+
+			const has_permission = is_to_files && (can_write_all_files || (can_write_own_files && is_to_home_dir));
+			if (!has_permission) {
+				return CANNED_RESPONSES.permission_denied();
+			}
+		}
+	];
+}

public/api/users/index.ts

@@ -10,6 +10,7 @@ import * as bcrypt from '@da/bcrypt';
 
 // TODO: figure out a better solution for doling out permissions
 const DEFAULT_USER_PERMISSIONS: string[] = [
+	'files.write.own',
 	'self.read',
 	'self.write',
 	'rooms.read',