From e6326f772b67059e49b781384954a2e6f6dce744 Mon Sep 17 00:00:00 2001
From: Grzegorz Leoniec <greg@app-interactive.de>
Date: Fri, 18 Jan 2019 10:35:48 +0100
Subject: [PATCH] Secured moderation and admin pages by role

---
 middleware/isAdmin.js     | 5 +++++
 middleware/isModerator.js | 5 +++++
 pages/admin.vue           | 1 +
 pages/moderation.vue      | 1 +
 4 files changed, 12 insertions(+)
 create mode 100644 middleware/isAdmin.js
 create mode 100644 middleware/isModerator.js

diff --git a/middleware/isAdmin.js b/middleware/isAdmin.js
new file mode 100644
index 000000000..4db10bbb6
--- /dev/null
+++ b/middleware/isAdmin.js
@@ -0,0 +1,5 @@
+export default ({ store, error }) => {
+  if (!store.getters['auth/isAdmin']) {
+    return error({ statusCode: 403 })
+  }
+}
diff --git a/middleware/isModerator.js b/middleware/isModerator.js
new file mode 100644
index 000000000..e99793a3e
--- /dev/null
+++ b/middleware/isModerator.js
@@ -0,0 +1,5 @@
+export default ({ store, error }) => {
+  if (!store.getters['auth/isModerator']) {
+    return error({ statusCode: 403 })
+  }
+}
diff --git a/pages/admin.vue b/pages/admin.vue
index ce2c50960..e6d0fd66b 100644
--- a/pages/admin.vue
+++ b/pages/admin.vue
@@ -21,6 +21,7 @@
 
 <script>
 export default {
+  middleware: ['isAdmin'],
   computed: {
     routes() {
       return [
diff --git a/pages/moderation.vue b/pages/moderation.vue
index 16070ae35..0e0660309 100644
--- a/pages/moderation.vue
+++ b/pages/moderation.vue
@@ -21,6 +21,7 @@
 
 <script>
 export default {
+  middleware: ['isModerator'],
   computed: {
     routes() {
       return [