From 8420bd9fd8fa07a15851fc477f4e8ab740a9245a Mon Sep 17 00:00:00 2001
From: matt <matt@fiddaman.net>
Date: Mon, 21 Mar 2022 09:15:36 +0000
Subject: [PATCH] Added security validation for User class

---
 lib/User.js | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/lib/User.js b/lib/User.js
index a587803..9178689 100644
--- a/lib/User.js
+++ b/lib/User.js
@@ -295,6 +295,19 @@ class User {
 			}
 		}
 	}
+
+	async hasAccess(u) {
+		let [ userClasses, thisClasses ] = await Promise.all([
+			u.getClasses(),
+			this.getClasses()
+		]);
+
+		userClasses = userClasses.map(c => c.id);
+
+		return thisClasses.filter(c =>
+			userClasses.includes(c.id)
+		).length > 0;
+	}
 }
 
 module.exports = User;