stylist module

src/authorization/policies/stylist.policy.ts

@@ -0,0 +1,31 @@
+import { Injectable } from '@nestjs/common';
+import { AuthUser } from '../../auth/interfaces/auth-user.interface';
+import { Salon } from '../../salons/entities/salon.entity';
+import { Stylist } from '../../stylists/entities/stylist.entity';
+import { UserRole } from '../../users/enums/user-role.enum';
+import { AuthorizationService } from '../authorization.service';
+
+@Injectable()
+export class StylistPolicy {
+  constructor(private readonly authorizationService: AuthorizationService) {}
+
+  canManageSalon(user: AuthUser, salon: Salon): boolean {
+    if (this.authorizationService.isAdmin(user)) {
+      return true;
+    }
+    return user.role === UserRole.SALON && salon.ownerId === user.id;
+  }
+
+  canUpdate(user: AuthUser, stylist: Stylist): boolean {
+    if (this.authorizationService.isAdmin(user)) {
+      return true;
+    }
+    return (
+      user.role === UserRole.SALON && stylist.salon.ownerId === user.id
+    );
+  }
+
+  canDelete(user: AuthUser, stylist: Stylist): boolean {
+    return this.canUpdate(user, stylist);
+  }
+}