add resource owner to permissions

mattlub commented 7 years ago

update:

related #134

[x] make middleware
- changes name from rolePermission to just permissions
- adds functionality to check if the requesting user owns the resource
[x] write tests
- amend old middleware tests to use new syntax
- write new tests in permissions.test.js

Note: The middleware has not been properly added to routes yet, when it is, full integration tests for the middleware will be created from the old controller tests

the auth is completetly separate from the JWT stuff WIP: currently failing tests because auth is req'd relates #121

mattlub commented 6 years ago

@m4v15 made the change

mattlub commented 6 years ago

@des-des I've changed the names now.

des-des commented 6 years ago

happy for you to merge