Merge pull request #359 from topcoder-platform/develop

Add 'tgadmin' to administrator auth checks for Topgear

Author: jmgasper

src/services/ReviewService.js

@@ -165,7 +165,7 @@ async function createReview (authUser, entity) {
     entity
   )
 
-  if (_.intersection(authUser.roles, ['Administrator', 'administrator']).length === 0 && !authUser.scopes) {
+  if (_.intersection(authUser.roles, ['Administrator', 'administrator', 'tgadmin']).length === 0 && !authUser.scopes) {
     if (entity.reviewedDate) {
       throw new errors.HttpStatusError(403, 'You are not allowed to set the `reviewedDate` attribute on a review')
     }

src/services/ReviewSummationService.js

@@ -102,7 +102,7 @@ async function createReviewSummation (authUser, entity) {
     item.isFinal = entity.isFinal
   }
 
-  if (_.intersection(authUser.roles, ['Administrator', 'administrator']).length === 0 && !authUser.scopes) {
+  if (_.intersection(authUser.roles, ['Administrator', 'administrator', 'tgadmin']).length === 0 && !authUser.scopes) {
     if (entity.reviewedDate) {
       throw new errors.HttpStatusError(403, 'You are not allowed to set the `reviewedDate` attribute on a review summation')
     }

src/services/SubmissionService.js

@@ -403,7 +403,7 @@ async function createSubmission (authUser, files, entity) {
   }
 
   logger.info('Check User access before creating the submission')
-  if (_.intersection(authUser.roles, ['Administrator', 'administrator']).length === 0 && !authUser.scopes) {
+  if (_.intersection(authUser.roles, ['Administrator', 'administrator', 'tgadmin']).length === 0 && !authUser.scopes) {
     await helper.checkCreateAccess(authUser, item.memberId, challenge)
 
     if (entity.submittedDate) {