.js

const create = sessionUser => data => Promise.try(() => transaction(model, async (modelTransaction) => {
  const { CAN_CREATE_ORGANIZATIONS } = getPermissions(sessionUser.permissions);
  const { userId } = sessionUser;
  const { avatar, ...orgData } = data;

  if (!CAN_CREATE_ORGANIZATIONS) {
    throw Unauthorized({ message: 'Sie haben nicht das Recht Organisationen zu erstellen' });
  }

  const insert = params => modelTransaction.query()
    .insert({
      ...orgData,
      ...params,
      createdBy: userId,
      updatedBy: userId,
    })
    .returning(['id', 'name']);
  
  if (avatar) {
    const uuid = await saveAvatar({
      path: orgAvatarPath,
      file: avatar,
    });
    
    return insert({ avatar: uuid });
  } else {
    return insert({});
  }
}));