Add auth.operations middleware.

Adds an array of allowed operations on given context to the request
under `req.user.operations`.

lib/www/server/api/middleware/auth/index.js

@@ -2,3 +2,4 @@
 exports.jwt = require('./jwt');
 exports.authentify = require('./authentify');
 exports.access = require('./access');
+exports.operations = require('./operations');

lib/www/server/api/middleware/auth/operations.js

@@ -0,0 +1,12 @@
+const { allowedOperations } = require('../../../lib/db/project/organisations');
+
+async function operations (req, res, next) {
+	if (req.user) {
+		req.user.operations = await allowedOperations(req.user?.organisations, req.params.project ?? null);
+	}
+	next();
+}
+
+module.exports = {
+	operations
+};