From 1f0848d5b9fff7fb2033abfb107d55922831260e Mon Sep 17 00:00:00 2001
From: Ritchie Martori <skawful@gmail.com>
Date: Mon, 17 Dec 2012 15:49:03 -0800
Subject: [PATCH] added login/logout permissions

---
 lib/modules/user-collection.js | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/lib/modules/user-collection.js b/lib/modules/user-collection.js
index 96c82c2..ab48332 100644
--- a/lib/modules/user-collection.js
+++ b/lib/modules/user-collection.js
@@ -181,6 +181,30 @@ UserCollection.prototype.hash = function (password, salt) {
   return crypto.createHmac('sha256', salt).update(password).digest('hex');
 };
 
+UserCollection.prototype.getRequiredPermissions = function (ctx) {
+  var requiredPermissions = Collection.prototype.getRequiredPermissions.apply(this, arguments);
+  
+  if(ctx.method === 'post' && ctx.url === '/login') {
+    requiredPermissions['login'] = true;
+  }
+  
+  if(ctx.method === 'post' && ctx.url === '/logout') {
+    requiredPermissions['logout'] = true;
+  }
+  
+  return requiredPermissions;
+}
+
+
+UserCollection.prototype.getDefaultPermissions = function (ctx) {
+  var defaultPermissions = Collection.prototype.getDefaultPermissions.apply(this, arguments);
+  
+  defaultPermissions['login'] = true;
+  defaultPermissions['logout'] = true;
+  
+  return defaultPermissions;
+}
+
 UserCollection.label = 'Users Collection';
 UserCollection.defaultPath = '/users';