@acorex-platform/module-security-management-server 0.0.18 → 2.0.0-next.42

package/server/src/lib/reports/security-report-parameter-groups.js

@@ -0,0 +1,167 @@
+"use strict";
+//#region ----- Imports -----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_PASSWORD_CHANGE_PARAMETER_GROUP = exports.PERMISSION_HOLDERS_PARAMETER_GROUP = exports.ROLE_HOLDERS_PARAMETER_GROUP = exports.USER_EFFECTIVE_PERMISSIONS_PARAMETER_GROUP = exports.USER_EFFECTIVE_ACCESS_PARAMETER_GROUP = void 0;
+const security_report_scope_constants_1 = require("./security-report-scope.constants");
+//#endregion
+//#region ----- Security report parameter groups -----
+/**
+ * Shared date-range + tenant/app scope for historical effective-access reports.
+ *
+ * Tenant / Application are session-scoped at execute time. Tenant remains
+ * selectable only with MaintainTenants; Application stays hidden until a
+ * future tenant-admin capability is introduced.
+ */
+const SCOPE_AND_RANGE_PARAMETERS = [
+    {
+        path: 'dateRange',
+        title: 'Date Range',
+        description: 'Report range using overlap semantics (grant intervals that intersect this range)',
+        widget: {
+            type: 'date-time-editor',
+            options: { format: 'yyyy-MM-dd', showTime: false, defaultValue: 'today' },
+        },
+    },
+    {
+        path: 'tenantId',
+        title: 'Tenant',
+        description: 'Tenant workspace used for grant scope scoring (session tenant unless MaintainTenants)',
+        visible: `{{ permission.check("${security_report_scope_constants_1.SECURITY_REPORT_SELECT_TENANT_PERMISSION}") }}`,
+        widget: {
+            type: 'lookup-editor',
+            options: {
+                entity: 'TenantManagement.Tenant',
+                multiple: false,
+                textField: 'title',
+                valueField: 'id',
+                look: 'select',
+                columns: ['title', 'name'],
+                hasClearButton: true,
+            },
+        },
+    },
+    {
+        path: 'applicationId',
+        title: 'Application',
+        description: 'Always the current session application (not user-selectable yet)',
+        visible: false,
+        widget: {
+            type: 'lookup-editor',
+            options: {
+                entity: 'ApplicationManagement.Application',
+                multiple: false,
+                textField: 'title',
+                valueField: 'id',
+                look: 'select',
+                columns: ['title', 'code'],
+                hasClearButton: true,
+            },
+        },
+    },
+];
+const USER_LOOKUP_PARAMETER = {
+    path: 'userId',
+    title: 'User',
+    description: 'User whose historical grants are reconstructed',
+    widget: {
+        type: 'lookup-editor',
+        options: {
+            entity: 'SecurityManagement.User',
+            multiple: false,
+            textField: 'username',
+            valueField: 'id',
+            look: 'select',
+            columns: ['username', 'email'],
+            hasClearButton: true,
+        },
+    },
+};
+exports.USER_EFFECTIVE_ACCESS_PARAMETER_GROUP = {
+    name: 'userEffectiveAccessFilters',
+    title: 'Effective Access Filters',
+    description: 'User and date range for reconstructed effective access',
+    parameters: [USER_LOOKUP_PARAMETER, ...SCOPE_AND_RANGE_PARAMETERS],
+};
+/** User effective permissions history: shared scope filters + permission contains search. */
+exports.USER_EFFECTIVE_PERMISSIONS_PARAMETER_GROUP = {
+    name: 'userEffectivePermissionsFilters',
+    title: 'Effective Permission Filters',
+    description: 'User, date range, and permission text search for reconstructed effective permissions',
+    parameters: [
+        USER_LOOKUP_PARAMETER,
+        {
+            path: 'permissionSearch',
+            title: '@security-management:reports.parameters.permission-search.title',
+            description: '@security-management:reports.parameters.permission-search.description',
+            widget: {
+                type: 'string-filter',
+                options: {
+                    operations: [
+                        {
+                            name: 'contains',
+                            title: '@general:terms.operators.contains',
+                            hasValue: true,
+                        },
+                    ],
+                    placeholder: '@security-management:reports.parameters.permission-search.placeholder',
+                },
+            },
+        },
+        ...SCOPE_AND_RANGE_PARAMETERS,
+    ],
+};
+exports.ROLE_HOLDERS_PARAMETER_GROUP = {
+    name: 'roleHoldersFilters',
+    title: 'Role Holders Filters',
+    description: 'Role and date range for reconstructed role holders',
+    parameters: [
+        {
+            path: 'roleId',
+            title: 'Role',
+            description: 'Role whose historical holders are reconstructed',
+            widget: {
+                type: 'lookup-editor',
+                options: {
+                    entity: 'SecurityManagement.Role',
+                    multiple: false,
+                    textField: 'name',
+                    valueField: 'id',
+                    look: 'select',
+                    columns: ['name', 'title'],
+                },
+            },
+        },
+        ...SCOPE_AND_RANGE_PARAMETERS,
+    ],
+};
+exports.PERMISSION_HOLDERS_PARAMETER_GROUP = {
+    name: 'permissionHoldersFilters',
+    title: 'Permission Holders Filters',
+    description: 'Permission key and date range for reconstructed holders',
+    parameters: [
+        {
+            path: 'permission',
+            title: '@security-management:reports.parameters.permission-key.title',
+            description: '@security-management:reports.parameters.permission-key.description',
+            widget: {
+                type: 'text-editor',
+                options: {
+                    placeholder: '@security-management:reports.parameters.permission-key.placeholder',
+                },
+            },
+        },
+        ...SCOPE_AND_RANGE_PARAMETERS,
+    ],
+};
+/** User + date range for password-change history (and similar user-scoped security reports). */
+exports.USER_PASSWORD_CHANGE_PARAMETER_GROUP = {
+    name: 'userPasswordChangeFilters',
+    title: '@security-management:reports.parameters.password-change-filters.title',
+    description: '@security-management:reports.parameters.password-change-filters.description',
+    parameters: [
+        Object.assign(Object.assign({}, USER_LOOKUP_PARAMETER), { widget: Object.assign(Object.assign({}, USER_LOOKUP_PARAMETER.widget), { options: Object.assign(Object.assign({}, USER_LOOKUP_PARAMETER.widget.options), { validations: [{ rule: 'required' }] }) }) }),
+        ...SCOPE_AND_RANGE_PARAMETERS,
+    ],
+};
+//#endregion
+//# sourceMappingURL=security-report-parameter-groups.js.map

package/server/src/lib/reports/security-report-parameter-groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-report-parameter-groups.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/security-report-parameter-groups.ts"],"names":[],"mappings":";AAAA,6BAA6B;;;AAE7B,uFAA6F;AAE7F,YAAY;AAEZ,sDAAsD;AAEtD;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG;IACjC;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,kFAAkF;QAC/F,MAAM,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE;SAC1E;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,uFAAuF;QACpG,OAAO,EAAE,wBAAwB,0EAAwC,OAAO;QAChF,MAAM,EAAE;YACN,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE;gBACP,MAAM,EAAE,yBAAyB;gBACjC,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,OAAO;gBAClB,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBAC1B,cAAc,EAAE,IAAI;aACrB;SACF;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,KAAK;QACd,MAAM,EAAE;YACN,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE;gBACP,MAAM,EAAE,mCAAmC;gBAC3C,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,OAAO;gBAClB,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBAC1B,cAAc,EAAE,IAAI;aACrB;SACF;KACF;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,gDAAgD;IAC7D,MAAM,EAAE;QACN,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE;YACP,MAAM,EAAE,yBAAyB;YACjC,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,cAAc,EAAE,IAAI;SACrB;KACF;CACF,CAAC;AAEW,QAAA,qCAAqC,GAAG;IACnD,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,wDAAwD;IACrE,UAAU,EAAE,CAAC,qBAAqB,EAAE,GAAG,0BAA0B,CAAC;CACnE,CAAC;AAEF,6FAA6F;AAChF,QAAA,0CAA0C,GAAG;IACxD,IAAI,EAAE,iCAAiC;IACvC,KAAK,EAAE,8BAA8B;IACrC,WAAW,EAAE,sFAAsF;IACnG,UAAU,EAAE;QACV,qBAAqB;QACrB;YACE,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,iEAAiE;YACxE,WAAW,EAAE,uEAAuE;YACpF,MAAM,EAAE;gBACN,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;oBACP,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE,mCAAmC;4BAC1C,QAAQ,EAAE,IAAI;yBACf;qBACF;oBACD,WAAW,EAAE,uEAAuE;iBACrF;aACF;SACF;QACD,GAAG,0BAA0B;KAC9B;CACF,CAAC;AAEW,QAAA,4BAA4B,GAAG;IAC1C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,oDAAoD;IACjE,UAAU,EAAE;QACV;YACE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,iDAAiD;YAC9D,MAAM,EAAE;gBACN,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,yBAAyB;oBACjC,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,MAAM;oBACjB,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC3B;aACF;SACF;QACD,GAAG,0BAA0B;KAC9B;CACF,CAAC;AAEW,QAAA,kCAAkC,GAAG;IAChD,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,yDAAyD;IACtE,UAAU,EAAE;QACV;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,8DAA8D;YACrE,WAAW,EAAE,oEAAoE;YACjF,MAAM,EAAE;gBACN,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE;oBACP,WAAW,EAAE,oEAAoE;iBAClF;aACF;SACF;QACD,GAAG,0BAA0B;KAC9B;CACF,CAAC;AAEF,gGAAgG;AACnF,QAAA,oCAAoC,GAAG;IAClD,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,uEAAuE;IAC9E,WAAW,EAAE,6EAA6E;IAC1F,UAAU,EAAE;wCAEL,qBAAqB,KACxB,MAAM,kCACD,qBAAqB,CAAC,MAAM,KAC/B,OAAO,kCACF,qBAAqB,CAAC,MAAM,CAAC,OAAO,KACvC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAIzC,GAAG,0BAA0B;KAC9B;CACF,CAAC;AAEF,YAAY"}

package/server/src/lib/reports/security-report-scope.constants.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Capability required to choose Tenant on security history reports
+ * (parameter `visible` + execute-time scope).
+ */
+export declare const SECURITY_REPORT_SELECT_TENANT_PERMISSION = "ApplicationsPlatform:Permission:MaintainTenants";

package/server/src/lib/reports/security-report-scope.constants.js

@@ -0,0 +1,11 @@
+"use strict";
+//#region ----- Security report scope permissions -----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECURITY_REPORT_SELECT_TENANT_PERMISSION = void 0;
+/**
+ * Capability required to choose Tenant on security history reports
+ * (parameter `visible` + execute-time scope).
+ */
+exports.SECURITY_REPORT_SELECT_TENANT_PERMISSION = 'ApplicationsPlatform:Permission:MaintainTenants';
+//#endregion
+//# sourceMappingURL=security-report-scope.constants.js.map

package/server/src/lib/reports/security-report-scope.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-report-scope.constants.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/security-report-scope.constants.ts"],"names":[],"mappings":";AAAA,uDAAuD;;;AAEvD;;;GAGG;AACU,QAAA,wCAAwC,GACnD,iDAAiD,CAAC;AAEpD,YAAY"}

package/server/src/lib/reports/security-report.definitions.d.ts

@@ -0,0 +1,12 @@
+import type { BackendReportCategory, BackendReportDefinition } from '@acorex-platform/framework-server/report';
+export declare const ADMINISTRATION_REPORTS_CATEGORY_ID = "a1000001-0000-4000-8000-000000000001";
+export declare const SECURITY_ACCESS_CATEGORY_ID = "f1000001-0000-4000-8000-000000000001";
+/** Must match {@link SESSIONS_PRESENCE_CATEGORY_ID} in platform-management presence reports. */
+export declare const USER_ACTIVITY_CATEGORY_ID = "p1000001-0000-4000-8000-000000000001";
+export declare const USER_EFFECTIVE_ROLES_HISTORY_REPORT_ID = "f1000001-0000-4000-8000-000000000010";
+export declare const USER_EFFECTIVE_PERMISSIONS_HISTORY_REPORT_ID = "f1000001-0000-4000-8000-000000000011";
+export declare const ROLE_HOLDERS_HISTORY_REPORT_ID = "f1000001-0000-4000-8000-000000000012";
+export declare const PERMISSION_HOLDERS_HISTORY_REPORT_ID = "f1000001-0000-4000-8000-000000000013";
+export declare const USER_PASSWORD_CHANGE_HISTORY_REPORT_ID = "f1000001-0000-4000-8000-000000000015";
+export declare const SECURITY_REPORT_CATEGORIES: BackendReportCategory[];
+export declare const SECURITY_REPORT_DEFINITIONS: BackendReportDefinition[];

package/server/src/lib/reports/security-report.definitions.js

@@ -0,0 +1,386 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECURITY_REPORT_DEFINITIONS = exports.SECURITY_REPORT_CATEGORIES = exports.USER_PASSWORD_CHANGE_HISTORY_REPORT_ID = exports.PERMISSION_HOLDERS_HISTORY_REPORT_ID = exports.ROLE_HOLDERS_HISTORY_REPORT_ID = exports.USER_EFFECTIVE_PERMISSIONS_HISTORY_REPORT_ID = exports.USER_EFFECTIVE_ROLES_HISTORY_REPORT_ID = exports.USER_ACTIVITY_CATEGORY_ID = exports.SECURITY_ACCESS_CATEGORY_ID = exports.ADMINISTRATION_REPORTS_CATEGORY_ID = void 0;
+const module_security_management_contracts_1 = require("@acorex-platform/module-security-management-client/contracts");
+const security_report_parameter_groups_1 = require("./security-report-parameter-groups");
+//#region ----- Stable report definition IDs -----
+exports.ADMINISTRATION_REPORTS_CATEGORY_ID = 'a1000001-0000-4000-8000-000000000001';
+exports.SECURITY_ACCESS_CATEGORY_ID = 'f1000001-0000-4000-8000-000000000001';
+/** Must match {@link SESSIONS_PRESENCE_CATEGORY_ID} in platform-management presence reports. */
+exports.USER_ACTIVITY_CATEGORY_ID = 'p1000001-0000-4000-8000-000000000001';
+exports.USER_EFFECTIVE_ROLES_HISTORY_REPORT_ID = 'f1000001-0000-4000-8000-000000000010';
+exports.USER_EFFECTIVE_PERMISSIONS_HISTORY_REPORT_ID = 'f1000001-0000-4000-8000-000000000011';
+exports.ROLE_HOLDERS_HISTORY_REPORT_ID = 'f1000001-0000-4000-8000-000000000012';
+exports.PERMISSION_HOLDERS_HISTORY_REPORT_ID = 'f1000001-0000-4000-8000-000000000013';
+exports.USER_PASSWORD_CHANGE_HISTORY_REPORT_ID = 'f1000001-0000-4000-8000-000000000015';
+const USER_EFFECTIVE_ROLES_TABLE = 'f1000001-0000-4000-8000-000000000101';
+const USER_EFFECTIVE_PERMISSIONS_TABLE = 'f1000001-0000-4000-8000-000000000102';
+const ROLE_HOLDERS_TABLE = 'f1000001-0000-4000-8000-000000000103';
+const PERMISSION_HOLDERS_TABLE = 'f1000001-0000-4000-8000-000000000104';
+const USER_PASSWORD_CHANGE_TABLE = 'f1000001-0000-4000-8000-000000000106';
+const BASE_EXPORT = {
+    fileNameTemplate: 'Report_{date}_{user}',
+    pdf: { enabled: true, pageSize: 'A4', headerEnabled: true, footerEnabled: true, showPageNumbers: true },
+};
+const MAINTAIN_USERS_AND_ROLES = [module_security_management_contracts_1.AXPAdministrationPermissionKeys.MaintainUsersAndRoles];
+/** Column widget: regional short date (not datetime / raw ISO). */
+const DATE_COLUMN_WIDGET = {
+    type: 'date-time-editor',
+    options: { format: 'date' },
+};
+const DATETIME_COLUMN_WIDGET = {
+    type: 'date-time-editor',
+    options: { format: 'datetime' },
+};
+//#endregion
+//#region ----- Categories -----
+exports.SECURITY_REPORT_CATEGORIES = [
+    {
+        id: exports.ADMINISTRATION_REPORTS_CATEGORY_ID,
+        title: 'Administration',
+        description: 'User access, permissions, sessions, and account activity audit reports',
+        childrenCount: 2,
+        itemsCount: 0,
+    },
+    {
+        id: exports.SECURITY_ACCESS_CATEGORY_ID,
+        title: 'Access History',
+        description: 'Historical roles and permissions reconstructed from Change History (grant assignments)',
+        parentId: exports.ADMINISTRATION_REPORTS_CATEGORY_ID,
+        childrenCount: 0,
+        itemsCount: 4,
+    },
+];
+//#endregion
+//#region ----- Definitions -----
+exports.SECURITY_REPORT_DEFINITIONS = [
+    {
+        id: exports.USER_EFFECTIVE_ROLES_HISTORY_REPORT_ID,
+        title: 'User Role History',
+        description: 'Roles a user held that overlap the selected date range, reconstructed from UserRole Change History',
+        categoryIds: [exports.SECURITY_ACCESS_CATEGORY_ID],
+        permissions: MAINTAIN_USERS_AND_ROLES,
+        parameterGroups: [security_report_parameter_groups_1.USER_EFFECTIVE_ACCESS_PARAMETER_GROUP],
+        entities: [
+            {
+                entity: 'SecurityManagement.User',
+                title: '@security-management:reports.user-effective-roles-history.title',
+                description: '@security-management:reports.user-effective-roles-history.description',
+                display: ['page'],
+                parameters: {
+                    userId: 'id',
+                    dateRange: 'today',
+                },
+                order: 20,
+            },
+        ],
+        layouts: [
+            {
+                id: USER_EFFECTIVE_ROLES_TABLE,
+                title: 'Table View',
+                icon: 'fa-light fa-table',
+                isDefault: true,
+                layout: {
+                    type: 'table',
+                    columns: [
+                        {
+                            field: 'roleName',
+                            title: '@security-management:reports.columns.role-name',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'roleTitle',
+                            title: '@security-management:reports.columns.role-title',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'validFrom',
+                            title: '@security-management:reports.columns.valid-from',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                        {
+                            field: 'validTo',
+                            title: '@security-management:reports.columns.valid-to',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                    ],
+                    options: { pagination: true, stickyHeader: true, stripedRows: true },
+                },
+                dataSource: {
+                    type: 'query',
+                    name: module_security_management_contracts_1.RootConfig.queries.reports.getUserEffectiveRolesHistory,
+                    pagination: true,
+                },
+                export: Object.assign(Object.assign({}, BASE_EXPORT), { fileNameTemplate: 'User_Effective_Roles_History_{date}_{user}', excel: { enabled: true, sheetName: 'Effective Roles History' }, csv: { enabled: true } }),
+            },
+        ],
+        defaultLayoutId: USER_EFFECTIVE_ROLES_TABLE,
+    },
+    {
+        id: exports.USER_EFFECTIVE_PERMISSIONS_HISTORY_REPORT_ID,
+        title: 'User Permission History',
+        description: 'Permissions a user held that overlap the selected date range, reconstructed from UserRole and RolePermission history',
+        categoryIds: [exports.SECURITY_ACCESS_CATEGORY_ID],
+        permissions: MAINTAIN_USERS_AND_ROLES,
+        parameterGroups: [security_report_parameter_groups_1.USER_EFFECTIVE_PERMISSIONS_PARAMETER_GROUP],
+        entities: [
+            {
+                entity: 'SecurityManagement.User',
+                title: '@security-management:reports.user-effective-permissions-history.title',
+                description: '@security-management:reports.user-effective-permissions-history.description',
+                display: ['page'],
+                parameters: {
+                    userId: 'id',
+                    dateRange: 'today',
+                },
+                order: 10,
+            },
+        ],
+        layouts: [
+            {
+                id: USER_EFFECTIVE_PERMISSIONS_TABLE,
+                title: 'Table View',
+                icon: 'fa-light fa-table',
+                isDefault: true,
+                layout: {
+                    type: 'table',
+                    columns: [
+                        {
+                            field: 'permission',
+                            title: '@security-management:reports.columns.permission',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'validFrom',
+                            title: '@security-management:reports.columns.valid-from',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                        {
+                            field: 'validTo',
+                            title: '@security-management:reports.columns.valid-to',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                    ],
+                    options: { pagination: true, stickyHeader: true, stripedRows: true },
+                },
+                dataSource: {
+                    type: 'query',
+                    name: module_security_management_contracts_1.RootConfig.queries.reports.getUserEffectivePermissionsHistory,
+                    pagination: true,
+                },
+                export: Object.assign(Object.assign({}, BASE_EXPORT), { fileNameTemplate: 'User_Effective_Permissions_History_{date}_{user}', excel: { enabled: true, sheetName: 'Effective Permissions History' }, csv: { enabled: true } }),
+            },
+        ],
+        defaultLayoutId: USER_EFFECTIVE_PERMISSIONS_TABLE,
+    },
+    {
+        id: exports.ROLE_HOLDERS_HISTORY_REPORT_ID,
+        title: 'Users by Role',
+        description: 'Users who held a role that overlaps the selected date range, reconstructed from UserRole Change History',
+        categoryIds: [exports.SECURITY_ACCESS_CATEGORY_ID],
+        permissions: MAINTAIN_USERS_AND_ROLES,
+        parameterGroups: [security_report_parameter_groups_1.ROLE_HOLDERS_PARAMETER_GROUP],
+        entities: [
+            {
+                entity: 'SecurityManagement.Role',
+                title: '@security-management:reports.role-holders-history.title',
+                description: '@security-management:reports.role-holders-history.description',
+                display: ['page'],
+                parameters: {
+                    roleId: 'id',
+                    dateRange: 'today',
+                },
+                order: 10,
+            },
+        ],
+        layouts: [
+            {
+                id: ROLE_HOLDERS_TABLE,
+                title: 'Table View',
+                icon: 'fa-light fa-table',
+                isDefault: true,
+                layout: {
+                    type: 'table',
+                    columns: [
+                        {
+                            field: 'username',
+                            title: '@security-management:reports.columns.username',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'displayName',
+                            title: '@security-management:reports.columns.display-name',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'roleTitle',
+                            title: '@security-management:reports.columns.role-title',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'validFrom',
+                            title: '@security-management:reports.columns.valid-from',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                        {
+                            field: 'validTo',
+                            title: '@security-management:reports.columns.valid-to',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                    ],
+                    options: { pagination: true, stickyHeader: true, stripedRows: true },
+                },
+                dataSource: {
+                    type: 'query',
+                    name: module_security_management_contracts_1.RootConfig.queries.reports.getRoleHoldersHistory,
+                    pagination: true,
+                },
+                export: Object.assign(Object.assign({}, BASE_EXPORT), { fileNameTemplate: 'Role_Holders_History_{date}_{user}', excel: { enabled: true, sheetName: 'Role Holders History' }, csv: { enabled: true } }),
+            },
+        ],
+        defaultLayoutId: ROLE_HOLDERS_TABLE,
+    },
+    {
+        id: exports.PERMISSION_HOLDERS_HISTORY_REPORT_ID,
+        title: 'Users by Permission',
+        description: 'Users who held a permission that overlaps the selected date range, reconstructed from grant Change History',
+        categoryIds: [exports.SECURITY_ACCESS_CATEGORY_ID],
+        permissions: MAINTAIN_USERS_AND_ROLES,
+        parameterGroups: [security_report_parameter_groups_1.PERMISSION_HOLDERS_PARAMETER_GROUP],
+        // No host-entity binding: permission keys are not a first-class entity.
+        layouts: [
+            {
+                id: PERMISSION_HOLDERS_TABLE,
+                title: 'Table View',
+                icon: 'fa-light fa-table',
+                isDefault: true,
+                layout: {
+                    type: 'table',
+                    columns: [
+                        {
+                            field: 'username',
+                            title: '@security-management:reports.columns.username',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'displayName',
+                            title: '@security-management:reports.columns.display-name',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'permission',
+                            title: '@security-management:reports.columns.permission',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'validFrom',
+                            title: '@security-management:reports.columns.valid-from',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                        {
+                            field: 'validTo',
+                            title: '@security-management:reports.columns.valid-to',
+                            visible: true,
+                            sortable: true,
+                            widget: DATE_COLUMN_WIDGET,
+                        },
+                    ],
+                    options: { pagination: true, stickyHeader: true, stripedRows: true },
+                },
+                dataSource: {
+                    type: 'query',
+                    name: module_security_management_contracts_1.RootConfig.queries.reports.getPermissionHoldersHistory,
+                    pagination: true,
+                },
+                export: Object.assign(Object.assign({}, BASE_EXPORT), { fileNameTemplate: 'Permission_Holders_History_{date}_{user}', excel: { enabled: true, sheetName: 'Permission Holders History' }, csv: { enabled: true } }),
+            },
+        ],
+        defaultLayoutId: PERMISSION_HOLDERS_TABLE,
+    },
+    {
+        id: exports.USER_PASSWORD_CHANGE_HISTORY_REPORT_ID,
+        title: 'Password Change History',
+        description: 'Password change timestamps for a user in the selected date range (last recorded change on the user profile)',
+        categoryIds: [exports.USER_ACTIVITY_CATEGORY_ID],
+        permissions: MAINTAIN_USERS_AND_ROLES,
+        parameterGroups: [security_report_parameter_groups_1.USER_PASSWORD_CHANGE_PARAMETER_GROUP],
+        entities: [
+            {
+                entity: 'SecurityManagement.User',
+                title: '@security-management:reports.user-password-change-history.title',
+                description: '@security-management:reports.user-password-change-history.description',
+                display: ['page'],
+                parameters: {
+                    userId: 'id',
+                    dateRange: 'today',
+                },
+                order: 40,
+            },
+        ],
+        layouts: [
+            {
+                id: USER_PASSWORD_CHANGE_TABLE,
+                title: 'Table View',
+                icon: 'fa-light fa-key',
+                isDefault: true,
+                layout: {
+                    type: 'table',
+                    columns: [
+                        {
+                            field: 'username',
+                            title: '@security-management:reports.columns.username',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'displayName',
+                            title: '@security-management:reports.columns.display-name',
+                            visible: true,
+                            sortable: true,
+                        },
+                        {
+                            field: 'passwordChangedAt',
+                            title: '@security-management:reports.columns.password-changed-at',
+                            visible: true,
+                            sortable: true,
+                            widget: DATETIME_COLUMN_WIDGET,
+                        },
+                    ],
+                    options: { pagination: true, stickyHeader: true, stripedRows: true },
+                },
+                dataSource: {
+                    type: 'query',
+                    name: module_security_management_contracts_1.RootConfig.queries.reports.getUserPasswordChangeHistory,
+                    pagination: true,
+                },
+                export: Object.assign(Object.assign({}, BASE_EXPORT), { fileNameTemplate: 'User_Password_Changes_{date}_{user}', excel: { enabled: true, sheetName: 'Password Changes' }, csv: { enabled: true } }),
+            },
+        ],
+        defaultLayoutId: USER_PASSWORD_CHANGE_TABLE,
+    },
+];
+//#endregion
+//# sourceMappingURL=security-report.definitions.js.map

package/server/src/lib/reports/security-report.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-report.definitions.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/security-report.definitions.ts"],"names":[],"mappings":";;;AACA,gHAG+D;AAC/D,yFAM4C;AAE5C,kDAAkD;AAErC,QAAA,kCAAkC,GAAG,sCAAsC,CAAC;AAC5E,QAAA,2BAA2B,GAAG,sCAAsC,CAAC;AAClF,gGAAgG;AACnF,QAAA,yBAAyB,GAAG,sCAAsC,CAAC;AAEnE,QAAA,sCAAsC,GAAG,sCAAsC,CAAC;AAChF,QAAA,4CAA4C,GAAG,sCAAsC,CAAC;AACtF,QAAA,8BAA8B,GAAG,sCAAsC,CAAC;AACxE,QAAA,oCAAoC,GAAG,sCAAsC,CAAC;AAC9E,QAAA,sCAAsC,GAAG,sCAAsC,CAAC;AAE7F,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AAC1E,MAAM,gCAAgC,GAAG,sCAAsC,CAAC;AAChF,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAClE,MAAM,wBAAwB,GAAG,sCAAsC,CAAC;AACxE,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AAE1E,MAAM,WAAW,GAAG;IAClB,gBAAgB,EAAE,sBAAsB;IACxC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;CACxG,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,sEAA+B,CAAC,qBAAqB,CAAC,CAAC;AAEzF,mEAAmE;AACnE,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;CAC5B,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;CAChC,CAAC;AAEF,YAAY;AAEZ,gCAAgC;AAEnB,QAAA,0BAA0B,GAA4B;IACjE;QACE,EAAE,EAAE,0CAAkC;QACtC,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,wEAAwE;QACrF,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,CAAC;KACd;IACD;QACE,EAAE,EAAE,mCAA2B;QAC/B,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,wFAAwF;QAC1F,QAAQ,EAAE,0CAAkC;QAC5C,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,CAAC;KACd;CACF,CAAC;AAEF,YAAY;AAEZ,iCAAiC;AAEpB,QAAA,2BAA2B,GAA8B;IACpE;QACE,EAAE,EAAE,8CAAsC;QAC1C,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,oGAAoG;QACtG,WAAW,EAAE,CAAC,mCAA2B,CAAC;QAC1C,WAAW,EAAE,wBAAwB;QACrC,eAAe,EAAE,CAAC,wEAAqC,CAAC;QACxD,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,iEAAiE;gBACxE,WAAW,EAAE,uEAAuE;gBACpF,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,OAAO;iBACnB;gBACD,KAAK,EAAE,EAAE;aACV;SACF;QACD,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,UAAU;4BACjB,KAAK,EAAE,gDAAgD;4BACvD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;wBACD;4BACE,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;qBACF;oBACD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBACrE;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B;oBAC7D,UAAU,EAAE,IAAI;iBACjB;gBACD,MAAM,kCACD,WAAW,KACd,gBAAgB,EAAE,4CAA4C,EAC9D,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,yBAAyB,EAAE,EAC9D,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GACvB;aACF;SACF;QACD,eAAe,EAAE,0BAA0B;KAC5C;IACD;QACE,EAAE,EAAE,oDAA4C;QAChD,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,sHAAsH;QACxH,WAAW,EAAE,CAAC,mCAA2B,CAAC;QAC1C,WAAW,EAAE,wBAAwB;QACrC,eAAe,EAAE,CAAC,6EAA0C,CAAC;QAC7D,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,uEAAuE;gBAC9E,WAAW,EAAE,6EAA6E;gBAC1F,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,OAAO;iBACnB;gBACD,KAAK,EAAE,EAAE;aACV;SACF;QACD,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,gCAAgC;gBACpC,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,YAAY;4BACnB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;wBACD;4BACE,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;qBACF;oBACD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBACrE;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC;oBACnE,UAAU,EAAE,IAAI;iBACjB;gBACD,MAAM,kCACD,WAAW,KACd,gBAAgB,EAAE,kDAAkD,EACpE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,+BAA+B,EAAE,EACpE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GACvB;aACF;SACF;QACD,eAAe,EAAE,gCAAgC;KAClD;IACD;QACE,EAAE,EAAE,sCAA8B;QAClC,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,yGAAyG;QAC3G,WAAW,EAAE,CAAC,mCAA2B,CAAC;QAC1C,WAAW,EAAE,wBAAwB;QACrC,eAAe,EAAE,CAAC,+DAA4B,CAAC;QAC/C,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,yDAAyD;gBAChE,WAAW,EAAE,+DAA+D;gBAC5E,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,OAAO;iBACnB;gBACD,KAAK,EAAE,EAAE;aACV;SACF;QACD,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,kBAAkB;gBACtB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,UAAU;4BACjB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,aAAa;4BACpB,KAAK,EAAE,mDAAmD;4BAC1D,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;wBACD;4BACE,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;qBACF;oBACD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBACrE;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB;oBACtD,UAAU,EAAE,IAAI;iBACjB;gBACD,MAAM,kCACD,WAAW,KACd,gBAAgB,EAAE,oCAAoC,EACtD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAC3D,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GACvB;aACF;SACF;QACD,eAAe,EAAE,kBAAkB;KACpC;IACD;QACE,EAAE,EAAE,4CAAoC;QACxC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4GAA4G;QAC9G,WAAW,EAAE,CAAC,mCAA2B,CAAC;QAC1C,WAAW,EAAE,wBAAwB;QACrC,eAAe,EAAE,CAAC,qEAAkC,CAAC;QACrD,wEAAwE;QACxE,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,wBAAwB;gBAC5B,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,UAAU;4BACjB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,aAAa;4BACpB,KAAK,EAAE,mDAAmD;4BAC1D,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,YAAY;4BACnB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,WAAW;4BAClB,KAAK,EAAE,iDAAiD;4BACxD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;wBACD;4BACE,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,kBAAkB;yBAC3B;qBACF;oBACD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBACrE;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B;oBAC5D,UAAU,EAAE,IAAI;iBACjB;gBACD,MAAM,kCACD,WAAW,KACd,gBAAgB,EAAE,0CAA0C,EAC5D,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,4BAA4B,EAAE,EACjE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GACvB;aACF;SACF;QACD,eAAe,EAAE,wBAAwB;KAC1C;IACD;QACE,EAAE,EAAE,8CAAsC;QAC1C,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,6GAA6G;QAC/G,WAAW,EAAE,CAAC,iCAAyB,CAAC;QACxC,WAAW,EAAE,wBAAwB;QACrC,eAAe,EAAE,CAAC,uEAAoC,CAAC;QACvD,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,iEAAiE;gBACxE,WAAW,EAAE,uEAAuE;gBACpF,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,OAAO;iBACnB;gBACD,KAAK,EAAE,EAAE;aACV;SACF;QACD,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP;4BACE,KAAK,EAAE,UAAU;4BACjB,KAAK,EAAE,+CAA+C;4BACtD,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,aAAa;4BACpB,KAAK,EAAE,mDAAmD;4BAC1D,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;wBACD;4BACE,KAAK,EAAE,mBAAmB;4BAC1B,KAAK,EAAE,0DAA0D;4BACjE,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,sBAAsB;yBAC/B;qBACF;oBACD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBACrE;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B;oBAC7D,UAAU,EAAE,IAAI;iBACjB;gBACD,MAAM,kCACD,WAAW,KACd,gBAAgB,EAAE,qCAAqC,EACvD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,EAAE,EACvD,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GACvB;aACF;SACF;QACD,eAAe,EAAE,0BAA0B;KAC5C;CACF,CAAC;AAEF,YAAY"}

package/server/src/lib/security-management-entity-storage.bootstrap.d.ts

@@ -0,0 +1,26 @@
+import { OnModuleInit } from '@nestjs/common';
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import { UserAssignedRolesMiddleware } from './middlewares/user-assigned-roles.middleware';
+import { DeviceSessionsActiveMiddleware } from './middlewares/device-sessions-active.middleware';
+import { DeviceSessionsAppScopeMiddleware } from './middlewares/device-sessions-app-scope.middleware';
+import { DeviceSessionsTokenRevokeMiddleware } from './middlewares/device-sessions-token-revoke.middleware';
+import { UserEffectiveStateMiddleware } from './middlewares/user-effective-state.middleware';
+import { UserInvitationListMiddleware } from './middlewares/user-invitation-list.middleware';
+import { UserProfileWriteMiddleware } from './middlewares/user-profile-write.middleware';
+/**
+ * Ensures User middlewares join the server pipeline.
+ * Webpack can split `ENTITY_STORAGE_MIDDLEWARE` tokens so `useExisting` aliases
+ * are not discovered — register the instances the same way other modules do.
+ */
+export declare class SecurityManagementEntityStorageBootstrap implements OnModuleInit {
+    private readonly storage;
+    private readonly userAssignedRoles;
+    private readonly userProfileWrite;
+    private readonly userEffectiveState;
+    private readonly userInvitationList;
+    private readonly deviceSessionsAppScope;
+    private readonly deviceSessionsActive;
+    private readonly deviceSessionsTokenRevoke;
+    constructor(storage: EntityStorageMiddlewareService, userAssignedRoles: UserAssignedRolesMiddleware, userProfileWrite: UserProfileWriteMiddleware, userEffectiveState: UserEffectiveStateMiddleware, userInvitationList: UserInvitationListMiddleware, deviceSessionsAppScope: DeviceSessionsAppScopeMiddleware, deviceSessionsActive: DeviceSessionsActiveMiddleware, deviceSessionsTokenRevoke: DeviceSessionsTokenRevokeMiddleware);
+    onModuleInit(): void;
+}