Rocket.Chat/app/api/server/lib/integrations.js

import { Integrations } from '../../../models/server/raw';
import { hasPermissionAsync } from '../../../authorization/server/functions/hasPermission';

const hasIntegrationsPermission = async (userId, integration) => {
	const type = integration.type === 'webhook-incoming' ? 'incoming' : 'outgoing';

	if (await hasPermissionAsync(userId, `manage-${ type }-integrations`)) {
		return true;
	}

	if (userId === integration._createdBy._id) {
		return hasPermissionAsync(userId, `manage-own-${ type }-integrations`);
	}

	return false;
};

export const findOneIntegration = async ({ userId, integrationId, createdBy }) => {
	const integration = await Integrations.findOneByIdAndCreatedByIfExists({ _id: integrationId, createdBy });
	if (!integration) {
		throw new Error('The integration does not exists.');
	}
	if (!await hasIntegrationsPermission(userId, integration)) {
		throw new Error('not-authorized');
	}
	return integration;
};