"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.ReadonlyMiddleware = void 0;
const core_1 = require("@midwayjs/core");
const http_1 = require("@midwayjs/core/dist/error/http");
/**
 * 权限中间件
 */
let ReadonlyMiddleware = class ReadonlyMiddleware {
    resolve() {
        return async (ctx, next) => {
            const user = ctx.session.user;
            if (user != null) {
                const permission = user.permission;
                if (permission === 'readOnly') {
                    throw new http_1.ForbiddenError('用户没有编辑权限');
                }
                return await next();
            }
            throw new http_1.UnauthorizedError('用户未登录');
        };
    }
    static getName() {
        return 'permission';
    }
};
ReadonlyMiddleware = __decorate([
    (0, core_1.Middleware)()
], ReadonlyMiddleware);
exports.ReadonlyMiddleware = ReadonlyMiddleware;
