v3: added a roles/permissions system, added user management tab on user profile

api/routes/comments.ts

@@ -8,6 +8,7 @@ import {
   isUpdateCommentRequest,
 } from "../model/interfaces.ts";
 import { authMiddleware } from "../middleware/auth.ts";
+import { can } from "../lib/permissions.ts";
 import { parseOptionalAuth } from "../lib/auth.ts";
 import { parsePagination } from "../lib/pagination.ts";
 import {
@@ -66,7 +67,7 @@ router.post("/dumps/:dumpId/comments", authMiddleware, async (ctx) => {
 // PATCH /api/comments/:commentId — auth required
 router.patch("/comments/:commentId", authMiddleware, async (ctx) => {
   const userId = ctx.state.user.userId;
-  const isAdmin = ctx.state.user.isAdmin ?? false;
+  const canModerate = can(ctx.state.user, "comment:moderate");
   const body = await ctx.request.body.json();
   if (!isUpdateCommentRequest(body)) {
     throw new APIException(
@@ -79,7 +80,7 @@ router.patch("/comments/:commentId", authMiddleware, async (ctx) => {
     ctx.params.commentId,
     body.body,
     userId,
-    isAdmin,
+    canModerate,
   );
   if (!isPrivate) broadcastCommentUpdated(comment);
   const responseBody: APIResponse<Comment> = { success: true, data: comment };
@@ -110,11 +111,11 @@ router.get("/comments/:commentId/likers", async (ctx) => {
 // DELETE /api/comments/:commentId — auth required
 router.delete("/comments/:commentId", authMiddleware, (ctx) => {
   const userId = ctx.state.user.userId;
-  const isAdmin = ctx.state.user.isAdmin ?? false;
+  const canModerate = can(ctx.state.user, "comment:moderate");
   const { dumpId, isPrivate } = deleteComment(
     ctx.params.commentId,
     userId,
-    isAdmin,
+    canModerate,
   );
   if (!isPrivate) broadcastCommentDeleted(ctx.params.commentId, dumpId);
   const responseBody: APIResponse<null> = { success: true, data: null };