[Solved] Given this guard code snippet, what will be the result if the user role is 'user' and the route requires 'admin' role?canActivate(context: ExecutionContext) { const roles = this.reflector.... | NestJS

NestJS - Guards

Given this guard code snippet, what will be the result if the user role is 'user' and the route requires 'admin' role?

canActivate(context: ExecutionContext) {
  const roles = this.reflector.get('roles', context.getHandler());
  const request = context.switchToHttp().getRequest();
  const user = request.user;
  return roles.includes(user.role);
}

AAccess granted

BAccess denied

CRuntime error due to missing roles

DAlways returns true

Step-by-Step Solution

Solution:

Step 1: Understand role check logic
The guard checks if the user's role is included in the allowed roles array.
Step 2: Apply given roles and user role
User role is 'user', route requires 'admin', so roles.includes('user') is false.
Final Answer:
Access denied -> Option B
Quick Check:
User role not in allowed roles = deny access [OK]

Quick Trick: Check if user role is in allowed roles array [OK]

Common Mistakes:

Assuming access is granted if roles differ
Thinking roles includes user role always
Ignoring roles array presence

Master "Guards" in NestJS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Perf

More NestJS Quizzes

Given this guard code snippet, what will be the result if the user role is 'user' and the route requires 'admin' role?

Step 1: Understand role check logic

Step 2: Apply given roles and user role

Final Answer:

Quick Check:

Want More Practice?