#4 - add support for sharing pages publicly, without login

app/models/auth/PublicUserPermission.model.js

@@ -12,10 +12,18 @@ class PublicUserPermissionModel extends Model {
     }
 
     static async can(permission) {
-        const permission_parts = permission.split(':');
+        const permission_parts = permission.split(':')
+        const permission_checks = []
+        const current_check = []
+
+        for ( const part of permission_parts ) {
+            current_check.push(part)
+            permission_checks.push(current_check.join(':'))
+        }
+
         const match = await this.findOne({
             permission: {
-                $in: permission_parts
+                $in: permission_checks
             }
         })
 

app/models/auth/User.model.js

@@ -76,6 +76,14 @@ class User extends AuthUser {
     is_public_user() {
         return false
     }
+
+    async can(permission) {
+        if ( super.can(permission) ) return true
+
+        const PublicUserPermission = this.models.get('auth:PublicUserPermission')
+        return await PublicUserPermission.can(permission)
+    }
 }
 
+
 module.exports = exports = User