我想验证用户的访问权限,Admin-Bro以便只有用户帐户的所有者superadmin才能看到Admin-Bro面板中的编辑和删除按钮。但要做到这一点,我需要找到在我的管理面板上登录的当前管理员用户。
那么,我如何找到当前logged-in userin Admin-bro?
我尝试过这样的事情,但没有奏效。record is returning all the users in my DB whilecurrentAdmin`没有返回任何内容。
const canModifyUsers = ({ currentAdmin, record }) => {
return (
(record && record.params.roles === "superadmin") ||
currentAdmin._id === record.param.id
);
};
const adminBro = new AdminBro({
databases: [mongoose],
rootPath: "/admin",
resources: [
{
resource: User,
options: {
properties: {
encryptedPassword: { isVisible: false },
password: {
type: "string",
isVisible: {
list: false,
edit: true,
filter: false,
show: false,
},
},
},
actions: {
edit: { isAccessible: canModifyUsers },
delete: { isAccessible: canModifyUsers },
new: { isAccessible: canModifyUsers },
},
},
},
],
});