Add acl

types/src/front/acl.ts

@@ -0,0 +1,29 @@
+import { ModelId } from "../shared/model_id";
+
+// Supported permissions
+export const SUPPORTED_PERMISSIONS = ["read", "write", "execute"] as const;
+
+export type PermissionType = (typeof SUPPORTED_PERMISSIONS)[number];
+
+// Access Control Entry
+export type ACEType = {
+  groupId: ModelId;
+  permissions: PermissionType[];
+};
+
+// Access Control List
+export type ACLType = {
+  aclEntries: Array<ACEType>;
+};
+
+export function groupHasPermission(
+  acl: ACLType,
+  permission: PermissionType,
+  groupId: ModelId
+): boolean {
+  const entry = acl.aclEntries.find((ace) => ace.groupId === groupId);
+  if (entry) {
+    return entry.permissions.includes(permission);
+  }
+  return false;
+}