create structure for rules checking

server/authorization/address.go

@@ -0,0 +1,51 @@
+package authorization
+
+import (
+
+	"bitbucket.org/nemt/nemt-portal-api/application/viewmodel"
+)
+
+func CanCreateAddress(user viewmodel.User, address viewmodel.OrganizationAddress) bool {
+	//TODO : implement checking 
+
+	userRole, err := grabProfileFromUser(user)
+	if err != nil {
+		return false
+	}
+
+	/*Admin		Provider	Manage all Organizations */
+	if userRole.Key == providerAdmin{
+		return true
+	}
+
+	/* Admin	BCBSI		Manage all Organizations */
+	if userRole.Key == bcbsiAdmin{
+		return true
+	}
+
+	/* Admin	Technical Support		Manage all Organizations */
+	if userRole.Key == brighterDevAdmin{
+		return true
+	}
+
+	/* Admin	Plan	
+	Manage the authenticated Authorized User's Plan (Organization) and children of this Plan*/
+	if userRole.Key == planAdmin {
+		return true
+	}
+
+	/* Super Admin 		Technical Support		Manage all Organizations*/
+	if userRole.Key == superAdmin {
+		return true
+	}
+	
+	return false
+}
+
+func CanUpdateAddress(user viewmodel.User, address viewmodel.OrganizationAddress) bool {
+	return CanCreateAddress(user, address)
+}
+
+func CanDeleteAddress(user viewmodel.User, address viewmodel.OrganizationAddress) bool {
+	return CanCreateAddress(user, address)
+}

server/authorization/contact.go

@@ -0,0 +1,51 @@
+package authorization
+
+import (
+
+	"bitbucket.org/nemt/nemt-portal-api/application/viewmodel"
+)
+
+func CanCreateContact(user viewmodel.User, contact viewmodel.OrganizationContact) bool {
+	//TODO : implement checking 
+
+	userRole, err := grabProfileFromUser(user)
+	if err != nil {
+		return false
+	}
+
+	/*Admin		Provider	Manage all Organizations */
+	if userRole.Key == providerAdmin{
+		return true
+	}
+
+	/* Admin	BCBSI		Manage all Organizations */
+	if userRole.Key == bcbsiAdmin{
+		return true
+	}
+
+	/* Admin	Technical Support		Manage all Organizations */
+	if userRole.Key == brighterDevAdmin{
+		return true
+	}
+
+	/* Admin	Plan	
+	Manage the authenticated Authorized User's Plan (Organization) and children of this Plan*/
+	if userRole.Key == planAdmin {
+		return true
+	}
+
+	/* Super Admin 		Technical Support		Manage all Organizations*/
+	if userRole.Key == superAdmin {
+		return true
+	}
+	
+	return false
+}
+
+func CanUpdateContact(user viewmodel.User, contact viewmodel.OrganizationContact) bool {
+	return CanCreateContact(user, contact)
+}
+
+func CanDeleteContact(user viewmodel.User, contact viewmodel.OrganizationContact) bool {
+	return CanCreateContact(user, contact)
+}

server/authorization/organization.go

@@ -26,3 +26,44 @@ func grabOrgFromUser(user viewmodel.User) (viewmodel.Organization, error) {
 
 	return user.Organizations[0], nil
 }
+
+func CanCreateOrganization(user viewmodel.User, organization viewmodel.Organization ) bool {
+	//TODO : implement checking 
+
+	userRole, err := grabProfileFromUser(user)
+	if err != nil {
+		return false
+	}
+
+	/*Admin		Provider	Manage all Organizations */
+	if userRole.Key == providerAdmin{
+		return true
+	}
+
+	/* Admin	BCBSI		Manage all Organizations */
+	if userRole.Key == bcbsiAdmin{
+		return true
+	}
+
+	/* Admin	Technical Support		Manage all Organizations */
+	if userRole.Key == brighterDevAdmin{
+		return true
+	}
+
+	/* Admin	Plan	
+	Manage the authenticated Authorized User's Plan (Organization) and children of this Plan*/
+	if userRole.Key == planAdmin {
+		return true
+	}
+
+	/* Super Admin 		Technical Support		Manage all Organizations*/
+	if userRole.Key == superAdmin {
+		return true
+	}
+	
+	return false
+}
+
+func CanUpdateOrganization(user viewmodel.User, organization viewmodel.Organization) bool {
+	return CanCreateOrganization(user,organization)
+}