@antelopejs/dms 0.0.1

package/dist/test/unit/implementations/dms/surface-redaction.test.js

@@ -0,0 +1,171 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_core_1 = require("@antelopejs/interface-core");
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const permissionsImpl = __importStar(require("../../../../implementations/dms/permissions"));
+const permissionsResolverImpl = __importStar(require("../../../../implementations/dms/permissions-resolver"));
+const tenantAccessImpl = __importStar(require("../../../../implementations/dms/tenant-access"));
+const page_2 = require("@antelopejs/interface-dms/page");
+const permissionsInterface = __importStar(require("@antelopejs/interface-dms/permissions"));
+const permissionsResolverInterface = __importStar(require("@antelopejs/interface-dms/permissions-resolver"));
+const tenantAccessInterface = __importStar(require("@antelopejs/interface-dms/tenant-access"));
+const page_access_1 = require("../../../helpers/page-access");
+const TENANT = "redaction-tenant";
+const SECRET_SLUG = "/redaction-secret";
+const SECRET_FULL_ID = "pages.redaction-secret";
+const SECRET_NAME = "Quarterly layoffs";
+const SECRET_DESCRIPTION = "Who goes and when";
+const DYNAMIC_SLUG = "/redaction-dynamic/:id/view";
+const DYNAMIC_PATH = "/redaction-dynamic/record-1/view";
+const DYNAMIC_FULL_ID = "pages.redaction-dynamic";
+const PAGE_ACCESS_SCENARIOS = [
+    { name: "anonymous", user: undefined, permissions: [], hasAccess: false },
+    {
+        name: "denied role",
+        user: { _id: "redaction-member" },
+        permissions: [],
+        hasAccess: false,
+    },
+    {
+        name: "authorized role",
+        user: { _id: "redaction-member" },
+        permissions: [SECRET_FULL_ID, DYNAMIC_FULL_ID],
+        hasAccess: true,
+    },
+];
+async function pageEntry(grantedPermissions) {
+    const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)(grantedPermissions);
+    const payload = await (0, page_1.buildSiteLayoutPayload)({ _id: "redaction-member" }, memberModel, roleModel, TENANT);
+    return payload.siteLayout.pages[SECRET_SLUG];
+}
+describe("[unit] implementations/dms/page — inaccessible surfaces are redacted", () => {
+    const cleanups = [];
+    before(async () => {
+        (0, interface_core_1.ImplementInterface)(permissionsInterface, permissionsImpl);
+        (0, interface_core_1.ImplementInterface)(permissionsResolverInterface, permissionsResolverImpl);
+        (0, interface_core_1.ImplementInterface)(tenantAccessInterface, tenantAccessImpl);
+        (0, interface_core_1.ImplementInterface)(page_2.internal, page_1.internal);
+        cleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("redaction-secret", {
+            displayName: SECRET_NAME,
+            description: SECRET_DESCRIPTION,
+            icon: "i-ph-eye-slash",
+            category: page_2.pagesCategory,
+        })));
+        cleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("redaction-dynamic", {
+            displayName: "Dynamic fixture",
+            category: page_2.pagesCategory,
+            urlSlug: "redaction-dynamic/:id/view",
+        })));
+    });
+    after(() => {
+        for (const cleanup of cleanups.splice(0)) {
+            cleanup();
+        }
+    });
+    it("keeps what the caller may reach untouched", async () => {
+        const entry = await pageEntry([SECRET_FULL_ID]);
+        (0, chai_1.expect)(entry?.hasAccess).to.equal(true);
+        (0, chai_1.expect)(entry?.displayName).to.equal(SECRET_NAME);
+        (0, chai_1.expect)(entry?.description).to.equal(SECRET_DESCRIPTION);
+    });
+    it("combines resolved route, shared data and page layout", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([SECRET_FULL_ID]);
+        const payload = await (0, page_1.buildPagePayload)(SECRET_SLUG, { _id: "redaction-member" }, memberModel, roleModel, TENANT);
+        (0, chai_1.expect)(payload.route.fullSlug).to.equal(SECRET_SLUG);
+        (0, chai_1.expect)(payload.route.hasAccess).to.equal(true);
+        (0, chai_1.expect)(payload.shared.siteLayout.pages[SECRET_SLUG]).to.deep.equal(payload.route);
+        (0, chai_1.expect)(payload.layout).to.be.an("object");
+    });
+    it("omits shared navigation data from lightweight page responses", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([SECRET_FULL_ID]);
+        const payload = await (0, page_1.buildPagePayload)(SECRET_SLUG, { _id: "redaction-member" }, memberModel, roleModel, TENANT, false);
+        (0, chai_1.expect)(payload.route.hasAccess).to.equal(true);
+        (0, chai_1.expect)(payload.shared).to.equal(undefined);
+        (0, chai_1.expect)(payload.layout).to.be.an("object");
+    });
+    for (const scenario of PAGE_ACCESS_SCENARIOS) {
+        for (const path of [
+            SECRET_SLUG,
+            `${SECRET_SLUG}/`,
+            DYNAMIC_PATH,
+            `${DYNAMIC_PATH}/`,
+        ]) {
+            it(`preserves lightweight access and redaction for ${scenario.name} at ${path}`, async () => {
+                const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)(scenario.permissions);
+                const [full, lightweight] = await Promise.all([true, false].map((includeShared) => (0, page_1.buildPagePayload)(path, scenario.user, memberModel, roleModel, TENANT, includeShared)));
+                (0, chai_1.expect)(lightweight.route.hasAccess).to.equal(scenario.hasAccess);
+                (0, chai_1.expect)(lightweight.route).to.deep.equal(full.route);
+                (0, chai_1.expect)(lightweight.layout).to.deep.equal(full.layout);
+                (0, chai_1.expect)(lightweight).not.to.have.property("shared");
+                if (scenario.hasAccess)
+                    return;
+                (0, chai_1.expect)(lightweight.route.displayName).to.equal("");
+                (0, chai_1.expect)(lightweight.route.description).to.equal(undefined);
+                (0, chai_1.expect)(lightweight.route.icon).to.equal(undefined);
+                (0, chai_1.expect)(lightweight.route.permission).to.equal(undefined);
+            });
+        }
+    }
+    it("resolves a concrete dynamic path against its registered pattern", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([DYNAMIC_FULL_ID]);
+        const payload = await (0, page_1.buildPagePayload)(DYNAMIC_PATH, { _id: "redaction-member" }, memberModel, roleModel, TENANT);
+        (0, chai_1.expect)(payload.route.fullSlug).to.equal(DYNAMIC_SLUG);
+        (0, chai_1.expect)(payload.route.hasAccess).to.equal(true);
+        (0, chai_1.expect)(payload.layout).to.be.an("object");
+    });
+    it("strips name, description and icon of what it may not", async () => {
+        const entry = await pageEntry([]);
+        (0, chai_1.expect)(entry?.hasAccess).to.equal(false);
+        (0, chai_1.expect)(entry?.displayName).to.equal("");
+        (0, chai_1.expect)(entry?.description).to.equal(undefined);
+        (0, chai_1.expect)(entry?.icon).to.equal(undefined);
+    });
+    it("keeps the structural fields so routing still works", async () => {
+        const entry = await pageEntry([]);
+        (0, chai_1.expect)(entry?.fullId).to.equal(SECRET_FULL_ID);
+        (0, chai_1.expect)(entry?.fullSlug).to.equal(SECRET_SLUG);
+    });
+    it("redacts the navigation tree the same way", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([]);
+        const payload = await (0, page_1.buildSiteLayoutPayload)({ _id: "redaction-member" }, memberModel, roleModel, TENANT);
+        const node = payload.siteLayoutTree.children.pages?.children["redaction-secret"];
+        (0, chai_1.expect)(node?.hasAccess).to.equal(false);
+        (0, chai_1.expect)(node?.displayName).to.equal("");
+        (0, chai_1.expect)(node?.description).to.equal(undefined);
+    });
+});
+//# sourceMappingURL=surface-redaction.test.js.map

package/dist/test/unit/implementations/dms/surface-redaction.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-redaction.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/surface-redaction.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+DAAgE;AAChE,+BAA8B;AAC9B,+DAI8C;AAC9C,6FAA+E;AAC/E,8GAAgG;AAChG,gGAAkF;AAClF,yDAIwC;AACxC,4FAA8E;AAC9E,6GAA+F;AAC/F,+FAAiF;AAEjF,8DAGsC;AAEtC,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAChD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,YAAY,GAAG,6BAA6B,CAAC;AACnD,MAAM,YAAY,GAAG,kCAAkC,CAAC;AACxD,MAAM,eAAe,GAAG,yBAAyB,CAAC;AASlD,MAAM,qBAAqB,GAAyB;IAClD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;IACzE;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAU;QACzC,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,KAAK;KACjB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAU;QACzC,WAAW,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC9C,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF,KAAK,UAAU,SAAS,CAAC,kBAA4B;IACnD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,kBAAkB,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAsB,EAC1C,EAAE,GAAG,EAAE,kBAAkB,EAAU,EACnC,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;IACF,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,IAAA,mCAAkB,EAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAA,mCAAkB,EAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAC;QAC1E,IAAA,mCAAkB,EAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAC5D,IAAA,mCAAkB,EAAC,eAAqB,EAAE,eAAgB,CAAC,CAAC;QAE5D,QAAQ,CAAC,IAAI,CACX,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,kBAAkB,EAAE;YACjC,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,oBAAa;SACxB,CAAC,CACH,CACF,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,mBAAmB,EAAE;YAClC,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,oBAAa;YACvB,OAAO,EAAE,4BAA4B;SACtC,CAAC,CACH,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAEhD,IAAA,aAAM,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAgB,EACpC,WAAW,EACX,EAAE,GAAG,EAAE,kBAAkB,EAAU,EACnC,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;QAEF,IAAA,aAAM,EAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACrD,IAAA,aAAM,EAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAChE,OAAO,CAAC,KAAK,CACd,CAAC;QACF,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAgB,EACpC,WAAW,EACX,EAAE,GAAG,EAAE,kBAAkB,EAAU,EACnC,WAAW,EACX,SAAS,EACT,MAAM,EACN,KAAK,CACN,CAAC;QAEF,IAAA,aAAM,EAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,qBAAqB,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI;YACjB,WAAW;YACX,GAAG,WAAW,GAAG;YACjB,YAAY;YACZ,GAAG,YAAY,GAAG;SACnB,EAAE,CAAC;YACF,EAAE,CAAC,kDAAkD,QAAQ,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC1F,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EACrD,QAAQ,CAAC,WAAW,CACrB,CAAC;gBACF,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAClC,IAAA,uBAAgB,EACd,IAAI,EACJ,QAAQ,CAAC,IAAI,EACb,WAAW,EACX,SAAS,EACT,MAAM,EACN,aAAa,CACd,CACF,CACF,CAAC;gBAEF,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAA,aAAM,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtD,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,QAAQ,CAAC,SAAS;oBAAE,OAAO;gBAC/B,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAgB,EACpC,YAAY,EACZ,EAAE,GAAG,EAAE,kBAAkB,EAAU,EACnC,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;QAEF,IAAA,aAAM,EAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QAElC,IAAA,aAAM,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,IAAA,aAAM,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QAElC,IAAA,aAAM,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAsB,EAC1C,EAAE,GAAG,EAAE,kBAAkB,EAAU,EACnC,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;QACF,MAAM,IAAI,GACR,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEtE,IAAA,aAAM,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvC,IAAA,aAAM,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/implementations/dms/user-can-access-page.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/implementations/dms/user-can-access-page.test.js

@@ -0,0 +1,113 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_core_1 = require("@antelopejs/interface-core");
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const permissionsImpl = __importStar(require("../../../../implementations/dms/permissions"));
+const permissionsResolverImpl = __importStar(require("../../../../implementations/dms/permissions-resolver"));
+const tenantAccessImpl = __importStar(require("../../../../implementations/dms/tenant-access"));
+const page_2 = require("@antelopejs/interface-dms/page");
+const permissionsInterface = __importStar(require("@antelopejs/interface-dms/permissions"));
+const permissionsResolverInterface = __importStar(require("@antelopejs/interface-dms/permissions-resolver"));
+const tenantAccessInterface = __importStar(require("@antelopejs/interface-dms/tenant-access"));
+const page_access_1 = require("../../../helpers/page-access");
+const MODULE_ID = "ucap-mod";
+const TENANT_ID = "ucap-tenant";
+const MODULE_PAGE_FULL_ID = `modules.${MODULE_ID}.ucap-page`;
+const REGULAR_PAGE_FULL_ID = "pages.ucap-normal";
+describe("[unit] implementations/dms/page — userCanAccessPage module gating", () => {
+    before(async () => {
+        (0, interface_core_1.ImplementInterface)(permissionsInterface, permissionsImpl);
+        (0, interface_core_1.ImplementInterface)(permissionsResolverInterface, permissionsResolverImpl);
+        (0, interface_core_1.ImplementInterface)(tenantAccessInterface, tenantAccessImpl);
+        (0, interface_core_1.ImplementInterface)(page_2.internal, page_1.internal);
+        (0, page_2.RegisterModule)({
+            id: MODULE_ID,
+            title: "Realtime test module",
+            description: "Module used by userCanAccessPage tests",
+            icon: "i-ph-cube",
+        });
+        const modulePage = (0, page_2.PageController)("ucap-page", {
+            displayName: "Module page",
+            module: MODULE_ID,
+        });
+        await (0, interface_core_1.GetMetadata)(modulePage, page_2.PageMetadata).Register();
+        const regularPage = (0, page_2.PageController)("ucap-normal", {
+            displayName: "Regular page",
+            category: page_2.pagesCategory,
+        });
+        await (0, interface_core_1.GetMetadata)(regularPage, page_2.PageMetadata).Register();
+    });
+    it("denies a non-owner whose role grants the module page permission", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+            MODULE_PAGE_FULL_ID,
+        ]);
+        const nonOwner = { _id: "user-1" };
+        (0, chai_1.expect)(await (0, page_1.userCanAccessPage)(nonOwner, MODULE_PAGE_FULL_ID, memberModel, roleModel, TENANT_ID)).to.equal(false);
+    });
+    it("allows the platform owner on a module page", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([]);
+        const owner = { _id: "user-2", owner: true };
+        (0, chai_1.expect)(await (0, page_1.userCanAccessPage)(owner, MODULE_PAGE_FULL_ID, memberModel, roleModel, TENANT_ID)).to.equal(true);
+    });
+    it("denies unauthenticated access to a module page", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([]);
+        (0, chai_1.expect)(await (0, page_1.userCanAccessPage)(undefined, MODULE_PAGE_FULL_ID, memberModel, roleModel, TENANT_ID)).to.equal(false);
+    });
+    it("unmarks a module page permission when the page unregisters (hot reload)", async () => {
+        const customPermissionId = "ucap-custom-perm";
+        const reloadedPage = (0, page_2.PageController)("ucap-reloaded", {
+            displayName: "Reloaded module page",
+            module: MODULE_ID,
+            permission: { id: customPermissionId },
+        });
+        const meta = (0, interface_core_1.GetMetadata)(reloadedPage, page_2.PageMetadata);
+        await meta.Register();
+        (0, chai_1.expect)(permissionsInterface.IsModuleScopedPermission(customPermissionId)).to.equal(true);
+        if (!meta.pageInfo)
+            throw new Error("pageInfo not initialized");
+        page_2.internal.RegisterPage.unregister(meta.pageInfo);
+        (0, chai_1.expect)(permissionsInterface.IsModuleScopedPermission(customPermissionId)).to.equal(false);
+    });
+    it("keeps granting access to regular pages through role permissions", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+            REGULAR_PAGE_FULL_ID,
+        ]);
+        const nonOwner = { _id: "user-3" };
+        (0, chai_1.expect)(await (0, page_1.userCanAccessPage)(nonOwner, REGULAR_PAGE_FULL_ID, memberModel, roleModel, TENANT_ID)).to.equal(true);
+    });
+});
+//# sourceMappingURL=user-can-access-page.test.js.map

package/dist/test/unit/implementations/dms/user-can-access-page.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-can-access-page.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/user-can-access-page.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+DAA6E;AAC7E,+BAA8B;AAC9B,+DAG8C;AAC9C,6FAA+E;AAC/E,8GAAgG;AAChG,gGAAkF;AAClF,yDAMwC;AACxC,4FAA8E;AAC9E,6GAA+F;AAC/F,+FAAiF;AAEjF,8DAAoE;AAEpE,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,mBAAmB,GAAG,WAAW,SAAS,YAAY,CAAC;AAC7D,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAEjD,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,MAAM,CAAC,KAAK,IAAI,EAAE;QAGhB,IAAA,mCAAkB,EAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAA,mCAAkB,EAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAC;QAC1E,IAAA,mCAAkB,EAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAC5D,IAAA,mCAAkB,EAAC,eAAqB,EAAE,eAAgB,CAAC,CAAC;QAE5D,IAAA,qBAAc,EAAC;YACb,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,wCAAwC;YACrD,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAA,qBAAc,EAAC,WAAW,EAAE;YAC7C,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,IAAA,4BAAW,EAAC,UAAU,EAAE,mBAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEvD,MAAM,WAAW,GAAG,IAAA,qBAAc,EAAC,aAAa,EAAE;YAChD,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,oBAAa;SACxB,CAAC,CAAC;QACH,MAAM,IAAA,4BAAW,EAAC,WAAW,EAAE,mBAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC;YACtD,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAU,CAAC;QAC3C,IAAA,aAAM,EACJ,MAAM,IAAA,wBAAiB,EACrB,QAAQ,EACR,mBAAmB,EACnB,WAAW,EACX,SAAS,EACT,SAAS,CACV,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAU,CAAC;QACrD,IAAA,aAAM,EACJ,MAAM,IAAA,wBAAiB,EACrB,KAAK,EACL,mBAAmB,EACnB,WAAW,EACX,SAAS,EACT,SAAS,CACV,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,CAAC,CAAC;QAC5D,IAAA,aAAM,EACJ,MAAM,IAAA,wBAAiB,EACrB,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,SAAS,EACT,SAAS,CACV,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QAKvF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC,eAAe,EAAE;YACnD,WAAW,EAAE,sBAAsB;YACnC,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,4BAAW,EAAC,YAAY,EAAE,mBAAY,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAA,aAAM,EACJ,oBAAoB,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAClE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChE,eAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAA,aAAM,EACJ,oBAAoB,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAClE,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC;YACtD,oBAAoB;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAU,CAAC;QAC3C,IAAA,aAAM,EACJ,MAAM,IAAA,wBAAiB,EACrB,QAAQ,EACR,oBAAoB,EACpB,WAAW,EACX,SAAS,EACT,SAAS,CACV,CACF,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/implementations/dms/user-permissions-gate.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/implementations/dms/user-permissions-gate.test.js

@@ -0,0 +1,158 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_core_1 = require("@antelopejs/interface-core");
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const permissionsImpl = __importStar(require("../../../../implementations/dms/permissions"));
+const permissionsResolverImpl = __importStar(require("../../../../implementations/dms/permissions-resolver"));
+const tenantAccessImpl = __importStar(require("../../../../implementations/dms/tenant-access"));
+const page_2 = require("@antelopejs/interface-dms/page");
+const permissionsInterface = __importStar(require("@antelopejs/interface-dms/permissions"));
+const permissionsResolverInterface = __importStar(require("@antelopejs/interface-dms/permissions-resolver"));
+const tenantAccessInterface = __importStar(require("@antelopejs/interface-dms/tenant-access"));
+const page_access_1 = require("../../../helpers/page-access");
+const DENIED_TENANT = "perm-denied-tenant";
+const ALLOWED_TENANT = "perm-allowed-tenant";
+const RECOVERY_FULL_ID = "pages.perm-recovery";
+const RECOVERY_COMPONENT_ID = `${RECOVERY_FULL_ID}.settleButton`;
+const PRODUCT_FULL_ID = "pages.perm-product";
+const SHARED_PERMISSION_ID = "perm-shared";
+const gateInfo = (0, page_access_1.denyingTenantGate)("perm-gate", DENIED_TENANT);
+async function resolveFor(grantedPermissions, tenantId, user = { _id: "perm-member" }) {
+    const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)(grantedPermissions);
+    return (0, page_1.resolveUserPermissions)(user, memberModel, roleModel, tenantId);
+}
+describe("[unit] implementations/dms/page — permission filter under a gate", () => {
+    const RECOVERY = "pages.recovery";
+    const GATED = "pages.gated";
+    it("answers nothing when no surface carries the flag", () => {
+        const surfaces = new Map([
+            [RECOVERY, false],
+            [GATED, false],
+        ]);
+        (0, chai_1.expect)([
+            ...(0, page_1.filterPermissionsForBypassedSurfaces)(new Set([RECOVERY, "*"]), surfaces),
+        ]).to.deep.equal([]);
+    });
+    it("keeps the wildcard only when a surface carries the flag", () => {
+        const surfaces = new Map([[RECOVERY, true]]);
+        (0, chai_1.expect)([
+            ...(0, page_1.filterPermissionsForBypassedSurfaces)(new Set(["*"]), surfaces),
+        ]).to.deep.equal(["*"]);
+    });
+    it("keeps the descendants of a flagged surface and drops the others", () => {
+        const surfaces = new Map([
+            [RECOVERY, true],
+            [GATED, false],
+        ]);
+        const kept = (0, page_1.filterPermissionsForBypassedSurfaces)(new Set([RECOVERY, `${RECOVERY}.table.export`, GATED, `${GATED}.table`]), surfaces);
+        (0, chai_1.expect)([...kept].sort()).to.deep.equal([RECOVERY, `${RECOVERY}.table.export`].sort());
+    });
+    it("lets the nearest declared surface decide inside a shared namespace", () => {
+        const surfaces = new Map([
+            [RECOVERY, true],
+            [`${RECOVERY}.nested`, false],
+        ]);
+        const kept = (0, page_1.filterPermissionsForBypassedSurfaces)(new Set([`${RECOVERY}.form`, `${RECOVERY}.nested.form`]), surfaces);
+        (0, chai_1.expect)([...kept]).to.deep.equal([`${RECOVERY}.form`]);
+    });
+});
+describe("[unit] implementations/dms/page — permissions under a tenant gate", () => {
+    const suiteCleanups = [];
+    before(async () => {
+        (0, interface_core_1.ImplementInterface)(permissionsInterface, permissionsImpl);
+        (0, interface_core_1.ImplementInterface)(permissionsResolverInterface, permissionsResolverImpl);
+        (0, interface_core_1.ImplementInterface)(tenantAccessInterface, tenantAccessImpl);
+        (0, interface_core_1.ImplementInterface)(page_2.internal, page_1.internal);
+        suiteCleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("perm-recovery", {
+            displayName: "Recovery",
+            category: page_2.pagesCategory,
+            bypassTenantAccessGate: true,
+        })));
+        suiteCleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("perm-product", {
+            displayName: "Product",
+            category: page_2.pagesCategory,
+        })));
+        tenantAccessInterface.RegisterTenantAccessGate(gateInfo);
+    });
+    after(() => {
+        tenantAccessInterface.internal.RegisterTenantAccessGate.unregister(gateInfo);
+        for (const cleanup of suiteCleanups.splice(0)) {
+            cleanup();
+        }
+    });
+    it("keeps the permissions of the surfaces that stay reachable", async () => {
+        const granted = await resolveFor([RECOVERY_FULL_ID, RECOVERY_COMPONENT_ID, PRODUCT_FULL_ID], DENIED_TENANT);
+        (0, chai_1.expect)(granted.sort()).to.deep.equal([RECOVERY_FULL_ID, RECOVERY_COMPONENT_ID].sort());
+    });
+    it("drops the permissions of every gated surface", async () => {
+        (0, chai_1.expect)(await resolveFor([PRODUCT_FULL_ID], DENIED_TENANT)).to.deep.equal([]);
+    });
+    it("keeps the owner wildcard so the recovery page stays usable", async () => {
+        const owner = { _id: "perm-owner", owner: true };
+        (0, chai_1.expect)(await resolveFor([], DENIED_TENANT, owner)).to.deep.equal(["*"]);
+    });
+    it("keeps a shared permission namespace out when a gated page declares it too", async () => {
+        const cleanups = [];
+        cleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("perm-shared-open", {
+            displayName: "Shared, reachable",
+            category: page_2.pagesCategory,
+            permission: { id: SHARED_PERMISSION_ID },
+            bypassTenantAccessGate: true,
+        })));
+        cleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("perm-shared-gated", {
+            displayName: "Shared, gated",
+            category: page_2.pagesCategory,
+            permission: { id: SHARED_PERMISSION_ID },
+        })));
+        try {
+            (0, chai_1.expect)(await resolveFor([SHARED_PERMISSION_ID, `${SHARED_PERMISSION_ID}.table`], DENIED_TENANT)).to.deep.equal([]);
+        }
+        finally {
+            for (const cleanup of cleanups)
+                cleanup();
+        }
+    });
+    it("returns the whole set when no gate denies the tenant", async () => {
+        const granted = await resolveFor([RECOVERY_FULL_ID, PRODUCT_FULL_ID], ALLOWED_TENANT);
+        (0, chai_1.expect)(granted.sort()).to.deep.equal([RECOVERY_FULL_ID, PRODUCT_FULL_ID].sort());
+    });
+    it("returns nothing for an unauthenticated caller", async () => {
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([PRODUCT_FULL_ID]);
+        (0, chai_1.expect)(await (0, page_1.resolveUserPermissions)(undefined, memberModel, roleModel, ALLOWED_TENANT)).to.deep.equal([]);
+    });
+});
+//# sourceMappingURL=user-permissions-gate.test.js.map

package/dist/test/unit/implementations/dms/user-permissions-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions-gate.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/user-permissions-gate.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+DAAgE;AAChE,+BAA8B;AAC9B,+DAI8C;AAC9C,6FAA+E;AAC/E,8GAAgG;AAChG,gGAAkF;AAClF,yDAIwC;AACxC,4FAA8E;AAC9E,6GAA+F;AAC/F,+FAAiF;AAEjF,8DAIsC;AAEtC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,qBAAqB,GAAG,GAAG,gBAAgB,eAAe,CAAC;AACjE,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAE3C,MAAM,QAAQ,GAAG,IAAA,+BAAiB,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAE/D,KAAK,UAAU,UAAU,CACvB,kBAA4B,EAC5B,QAAgB,EAChB,OAAa,EAAE,GAAG,EAAE,aAAa,EAAU;IAE3C,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,kBAAkB,CAAC,CAAC;IAC5E,OAAO,IAAA,6BAAsB,EAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED,QAAQ,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAChF,MAAM,QAAQ,GAAG,gBAAgB,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC;IAE5B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,CAAC,QAAQ,EAAE,KAAK,CAAC;YACjB,CAAC,KAAK,EAAE,KAAK,CAAC;SACf,CAAC,CAAC;QACH,IAAA,aAAM,EAAC;YACL,GAAG,IAAA,2CAAoC,EACrC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EACxB,QAAQ,CACT;SACF,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAA,aAAM,EAAC;YACL,GAAG,IAAA,2CAAoC,EAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAChB,CAAC,KAAK,EAAE,KAAK,CAAC;SACf,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,2CAAoC,EAC/C,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,eAAe,EAAE,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,EACxE,QAAQ,CACT,CAAC;QACF,IAAA,aAAM,EAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACpC,CAAC,QAAQ,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC,IAAI,EAAE,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAChB,CAAC,GAAG,QAAQ,SAAS,EAAE,KAAK,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,2CAAoC,EAC/C,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,OAAO,EAAE,GAAG,QAAQ,cAAc,CAAC,CAAC,EACxD,QAAQ,CACT,CAAC;QACF,IAAA,aAAM,EAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,MAAM,aAAa,GAAsB,EAAE,CAAC;IAE5C,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,IAAA,mCAAkB,EAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAA,mCAAkB,EAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAC;QAC1E,IAAA,mCAAkB,EAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAC5D,IAAA,mCAAkB,EAAC,eAAqB,EAAE,eAAgB,CAAC,CAAC;QAE5D,aAAa,CAAC,IAAI,CAChB,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,eAAe,EAAE;YAC9B,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,oBAAa;YACvB,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CACH,CACF,CAAC;QACF,aAAa,CAAC,IAAI,CAChB,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,cAAc,EAAE;YAC7B,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,oBAAa;SACxB,CAAC,CACH,CACF,CAAC;QAEF,qBAAqB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,qBAAqB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,UAAU,CAChE,QAAQ,CACT,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,CAAC,EAC1D,aAAa,CACd,CAAC;QACF,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAClC,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC,IAAI,EAAE,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACtE,EAAE,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAU,CAAC;QACzD,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CACX,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,kBAAkB,EAAE;YACjC,WAAW,EAAE,mBAAmB;YAChC,QAAQ,EAAE,oBAAa;YACvB,UAAU,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE;YACxC,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CACH,CACF,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,mBAAmB,EAAE;YAClC,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,oBAAa;YACvB,UAAU,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE;SACzC,CAAC,CACH,CACF,CAAC;QAEF,IAAI,CAAC;YACH,IAAA,aAAM,EACJ,MAAM,UAAU,CACd,CAAC,oBAAoB,EAAE,GAAG,oBAAoB,QAAQ,CAAC,EACvD,aAAa,CACd,CACF,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,CAAC,gBAAgB,EAAE,eAAe,CAAC,EACnC,cAAc,CACf,CAAC;QACF,IAAA,aAAM,EAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAClC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3E,IAAA,aAAM,EACJ,MAAM,IAAA,6BAAsB,EAC1B,SAAS,EACT,WAAW,EACX,SAAS,EACT,cAAc,CACf,CACF,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/implementations/dms/warn-once.test.d.ts

@@ -0,0 +1 @@
+export {};