fix: faculty users are now recognized as employees

routes/(apps)/mobility/api/mobilites.ts

@@ -1,7 +1,7 @@
 import { FreshContext, Handlers } from "$fresh/server.ts";
 import { db } from "$root/databases/db.ts";
 import { mobilites } from "$root/databases/schema.ts";
-import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { AuthenticatedState, isEmployee } from "$root/defaults/interfaces.ts";
 import { eq } from "npm:drizzle-orm@0.45.2";
 
 const VALID_STATUSES = [
@@ -46,15 +46,14 @@ export const handler: Handlers<null, AuthenticatedState> = {
     request: Request,
     context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    const isEmployee =
-      context.state.session.eduPersonPrimaryAffiliation === "employee";
+    const employeeCheck = isEmployee(context.state.session);
 
     try {
       const body = await request.json();
       const { numEtud, duree, ecole, pays, status, idStage } = body;
 
       // Students can only create mobilites for themselves
-      if (!isEmployee && numEtud !== undefined) {
+      if (!employeeCheck && numEtud !== undefined) {
         // Students cannot set idStage or status
         if (idStage || (status && status !== "contracts_received")) {
           return new Response(null, { status: 403 });

routes/(apps)/mobility/api/mobilites/[idMob].ts

@@ -1,7 +1,7 @@
 import { FreshContext, Handlers } from "$fresh/server.ts";
 import { db } from "$root/databases/db.ts";
 import { mobilites } from "$root/databases/schema.ts";
-import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { AuthenticatedState, isEmployee } from "$root/defaults/interfaces.ts";
 import { eq } from "npm:drizzle-orm@0.45.2";
 
 const VALID_STATUSES = [
@@ -49,7 +49,7 @@ export const handler: Handlers<null, AuthenticatedState> = {
     request: Request,
     context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+    if (!isEmployee(context.state.session)) {
       return FORBIDDEN();
     }
 
@@ -115,7 +115,7 @@ export const handler: Handlers<null, AuthenticatedState> = {
     _request: Request,
     context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+    if (!isEmployee(context.state.session)) {
       return FORBIDDEN();
     }
 

routes/(apps)/mobility/api/mobilites/[idMob]/contrat.ts

@@ -1,7 +1,7 @@
 import { FreshContext, Handlers } from "$fresh/server.ts";
 import { db } from "$root/databases/db.ts";
 import { mobilites } from "$root/databases/schema.ts";
-import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { AuthenticatedState, isEmployee } from "$root/defaults/interfaces.ts";
 import { eq } from "npm:drizzle-orm@0.45.2";
 
 const CONTRACTS_DIR = "uploads/contracts";
@@ -118,7 +118,7 @@ export const handler: Handlers<null, AuthenticatedState> = {
     _request: Request,
     context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+    if (!isEmployee(context.state.session)) {
       return new Response(null, { status: 403 });
     }