0

我想验证用户的访问权限,Admin-Bro以便只有用户帐户的所有者superadmin才能看到Admin-Bro面板中的编辑和删除按钮。但要做到这一点,我需要找到在我的管理面板上登录的当前管理员用户。

那么,我如何找到当前logged-in userin Admin-bro

我尝试过这样的事情,但没有奏效。record is returning all the users in my DB whilecurrentAdmin`没有返回任何内容。

const canModifyUsers = ({ currentAdmin, record }) => {
  return (
    (record && record.params.roles === "superadmin") ||
   currentAdmin._id === record.param.id
  );
};


const adminBro = new AdminBro({
databases: [mongoose],
rootPath: "/admin",

resources: [
{
    resource: User,
    options: {
        properties: {
            encryptedPassword: { isVisible: false },
            password: {
                type: "string",
                isVisible: {
                    list: false,
                    edit: true,
                    filter: false,
                    show: false,
                },
            },
        },
        actions: {
            edit: { isAccessible: canModifyUsers },
            delete: { isAccessible: canModifyUsers },
            new: { isAccessible: canModifyUsers },
        },
    },
  },
 ],
 });
4

0 回答 0