const asyncHandler = require("express-async-handler");
const User = require("../models/userModels");

const hasPerma = (perm) => {
    return asyncHandler(async (req, res, next) => {
        const user = await User.findId(req.user.id)
        if (user && (user.permissions.includes(perm) || !user.permissions.includes("ADMIN"))) {
            return next()
        } else {
            res.status(401); throw new Error('کاربر مجوز لازم را ندارد');
        }
    })
}

module.exports = { name: "hasPermission", run: hasPerma };