subscription

src/authorization/authorization.module.ts

@@ -9,6 +9,7 @@ import { ReservePolicy } from './policies/reserve.policy';
 import { SalonPolicy } from './policies/salon.policy';
 import { ServicePolicy } from './policies/service.policy';
 import { StylistPolicy } from './policies/stylist.policy';
+import { SubscriptionPolicy } from './policies/subscription.policy';
 
 @Module({
   imports: [TypeOrmModule.forFeature([Permission, UserPermission, Reserve])],
@@ -19,6 +20,7 @@ import { StylistPolicy } from './policies/stylist.policy';
     CustomerPolicy,
     StylistPolicy,
     ReservePolicy,
+    SubscriptionPolicy,
   ],
   exports: [
     AuthorizationService,
@@ -27,6 +29,7 @@ import { StylistPolicy } from './policies/stylist.policy';
     CustomerPolicy,
     StylistPolicy,
     ReservePolicy,
+    SubscriptionPolicy,
   ],
 })
 export class AuthorizationModule {}

src/authorization/enums/permission-code.enum.ts

@@ -18,4 +18,6 @@ export enum PermissionCode {
   SERVICES_DELETE = 'services:delete',
   RESERVES_READ = 'reserves:read',
   RESERVES_WRITE = 'reserves:write',
+  SUBSCRIPTIONS_READ = 'subscriptions:read',
+  SUBSCRIPTIONS_WRITE = 'subscriptions:write',
 }

src/authorization/policies/subscription.policy.ts

@@ -0,0 +1,30 @@
+import { Injectable } from '@nestjs/common';
+import { AuthUser } from '../../auth/interfaces/auth-user.interface';
+import { Salon } from '../../salons/entities/salon.entity';
+import { UserRole } from '../../users/enums/user-role.enum';
+import { AuthorizationService } from '../authorization.service';
+
+@Injectable()
+export class SubscriptionPolicy {
+  constructor(private readonly authorizationService: AuthorizationService) {}
+
+  canRead(user: AuthUser, salon: Salon): boolean {
+    if (this.authorizationService.isAdmin(user)) {
+      return true;
+    }
+    if (user.role === UserRole.SALON) {
+      return salon.ownerId === user.id;
+    }
+    return false;
+  }
+
+  canPurchase(user: AuthUser, salon: Salon): boolean {
+    if (this.authorizationService.isAdmin(user)) {
+      return true;
+    }
+    if (user.role === UserRole.SALON) {
+      return salon.ownerId === user.id;
+    }
+    return false;
+  }
+}