fix(backend): Merge-conflicten opgelost.

backend/src/middleware/auth/checks/learning-content-auth-checks.ts

@@ -0,0 +1,23 @@
+import {authorize} from "./auth-checks";
+import {AuthenticationInfo} from "../authentication-info";
+import {AuthenticatedRequest} from "../authenticated-request";
+import {getGroup} from "../../../services/groups";
+
+/**
+ * Only allows requests whose learning path personalization query parameters ('forGroup' / 'assignmentNo' / 'classId')
+ * are
+ * - either not set
+ * - or set to a group the user is in,
+ * - or set to anything if the user is a teacher.
+ */
+export const onlyAllowPersonalizationForOwnGroup = authorize(
+    async (auth: AuthenticationInfo, req: AuthenticatedRequest) => {
+        const {forGroup, assignmentNo, classId} = req.params;
+        if (forGroup && assignmentNo && classId) {
+            const group = getGroup(forGroup, parseInt(assignmentNo), classId, false);
+
+        } else {
+            return true;
+        }
+    }
+);