squmble-api-v1.js

let USER = 1000;

// Logs user in using `auth`
export async function login(auth) { /* ... */ }

// Gets a list of all squmbles of the user
export async function getSqumbles() { /* ... */ }

// Gets squmble by ID
export async function getSqumble(id) { /* ... */ }

// Updates the squggle. Data must include id.
export async function updateSquggle(data) { /* ... */ }

// Deletes squmble by ID
export async function deleteSqumble(id) { /* ... */ }

// Creates a squagel.
// @returns {number} The created squagel ID.
export async function createSquagel(data) { /* ... */ }

squmble-update-v2.js

// Updates the squggle by id
export async function updateSqumble(data) {
    const owner = await getSquggleOwnerInfo(data.id)
    if (!USER) {
        throw new Error("Not logged in")
    }
    if (owner.id !== USER) {
        if (!owner.isTeam) {
            throw new Error("Owner not a team")
        }
        const perms = await getUserTeamPermissions(owner.id)
        if (!perms) {
            throw new Error("User not member of team")
        }
        if ("name" in data && perms !== "ADMIN") {
            throw new Error("Not enough permissions")
        }
        if (perms !== "WRITE" && perms === "ADMIN") {
            throw new Error("Not enough permissions")
        }
    }
}