@anzusystems/common-admin 2.0.0-rc.1 → 2.0.0-rc.10

package/dist/domains/log/valueObject/LogLevel.js.map

@@ -1 +1 @@
-{"version":3,"file":"LogLevel.js","names":["LogLevel","useLogLevel","logLevelOptions","ref","item","value"],"sources":["../../../../src/domains/log/valueObject/LogLevel.ts"],"sourcesContent":["import { ref } from 'vue'\nimport type { ValueObjectOption } from '@/shared/types/ValueObject'\n\nexport const LogLevel = {\n  Debug: 'DEBUG',\n  Info: 'INFO',\n  Notice: 'NOTICE',\n  Warning: 'WARNING',\n  Error: 'ERROR',\n  Critical: 'CRITICAL',\n  Alert: 'ALERT',\n  Emergency: 'EMERGENCY',\n} as const\nexport type LogLevelType = (typeof LogLevel)[keyof typeof LogLevel]\n\nexport function useLogLevel() {\n  const logLevelOptions = ref<ValueObjectOption<LogLevelType>[]>([\n    {\n      value: LogLevel.Debug,\n      title: LogLevel.Debug,\n      color: 'blue-grey lighten-5',\n    },\n    {\n      value: LogLevel.Info,\n      title: LogLevel.Info,\n      color: 'blue-grey lighten-3',\n    },\n    {\n      value: LogLevel.Notice,\n      title: LogLevel.Notice,\n      color: 'amber lighten-4',\n    },\n    {\n      value: LogLevel.Warning,\n      title: LogLevel.Warning,\n      color: 'amber',\n    },\n    {\n      value: LogLevel.Error,\n      title: LogLevel.Error,\n      color: 'red',\n    },\n    {\n      value: LogLevel.Critical,\n      title: LogLevel.Critical,\n      color: 'red accent-4',\n    },\n    {\n      value: LogLevel.Alert,\n      title: LogLevel.Alert,\n      color: 'pink',\n    },\n    {\n      value: LogLevel.Emergency,\n      title: LogLevel.Emergency,\n      color: 'ping darken-4',\n    },\n  ])\n\n  const getLogLevelOption = (value: LogLevelType) => {\n    return logLevelOptions.value.find((item) => item.value === value)\n  }\n\n  return {\n    logLevelOptions,\n    getLogLevelOption,\n  }\n}\n"],"mappings":";;AAGA,IAAaA,IAAW;CACtB,OAAO;CACP,MAAM;CACN,QAAQ;CACR,SAAS;CACT,OAAO;CACP,UAAU;CACV,OAAO;CACP,WAAW;AACb;AAGA,SAAgBC,IAAc;CAC5B,IAAMC,IAAkBC,EAAuC;EAC7D;GACE,OAAOH,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;CACF,CAAC;CAMD,OAAO;EACL;EACA,oBANyB,MAClBE,EAAgB,MAAM,MAAM,MAASE,EAAK,UAAUC,CAAK;CAMlE;AACF"}
+{"version":3,"file":"LogLevel.js","names":["LogLevel","useLogLevel","logLevelOptions","ref","item","value"],"sources":["../../../../src/domains/log/valueObject/LogLevel.ts"],"sourcesContent":["import { ref } from 'vue'\nimport type { ValueObjectOption } from '@/shared/types/ValueObject'\n\nexport const LogLevel = {\n  Debug: 'DEBUG',\n  Info: 'INFO',\n  Notice: 'NOTICE',\n  Warning: 'WARNING',\n  Error: 'ERROR',\n  Critical: 'CRITICAL',\n  Alert: 'ALERT',\n  Emergency: 'EMERGENCY',\n} as const\nexport type LogLevelType = (typeof LogLevel)[keyof typeof LogLevel]\n\nexport function useLogLevel() {\n  const logLevelOptions = ref<ValueObjectOption<LogLevelType>[]>([\n    {\n      value: LogLevel.Debug,\n      title: LogLevel.Debug,\n      color: 'blue-grey-lighten-5',\n    },\n    {\n      value: LogLevel.Info,\n      title: LogLevel.Info,\n      color: 'blue-grey-lighten-3',\n    },\n    {\n      value: LogLevel.Notice,\n      title: LogLevel.Notice,\n      color: 'amber-lighten-4',\n    },\n    {\n      value: LogLevel.Warning,\n      title: LogLevel.Warning,\n      color: 'amber',\n    },\n    {\n      value: LogLevel.Error,\n      title: LogLevel.Error,\n      color: 'red',\n    },\n    {\n      value: LogLevel.Critical,\n      title: LogLevel.Critical,\n      color: 'red-accent-4',\n    },\n    {\n      value: LogLevel.Alert,\n      title: LogLevel.Alert,\n      color: 'pink',\n    },\n    {\n      value: LogLevel.Emergency,\n      title: LogLevel.Emergency,\n      color: 'pink-darken-4',\n    },\n  ])\n\n  const getLogLevelOption = (value: LogLevelType) => {\n    return logLevelOptions.value.find((item) => item.value === value)\n  }\n\n  return {\n    logLevelOptions,\n    getLogLevelOption,\n  }\n}\n"],"mappings":";;AAGA,IAAaA,IAAW;CACtB,OAAO;CACP,MAAM;CACN,QAAQ;CACR,SAAS;CACT,OAAO;CACP,UAAU;CACV,OAAO;CACP,WAAW;AACb;AAGA,SAAgBC,IAAc;CAC5B,IAAMC,IAAkBC,EAAuC;EAC7D;GACE,OAAOH,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;CACF,CAAC;CAMD,OAAO;EACL;EACA,oBANyB,MAClBE,EAAgB,MAAM,MAAM,MAASE,EAAK,UAAUC,CAAK;CAMlE;AACF"}

package/dist/domains/permission/components/APermissionEditor.js

@@ -1,7 +1,6 @@
 import e from "./APermissionEditor.vue_vue_type_script_setup_true_lang.js";
-//#region src/domains/permission/components/APermissionEditor.vue
+// src/domains/permission/components/APermissionEditor.vue
 var t = e;
-//#endregion
 export { t as default };
 
 //# sourceMappingURL=APermissionEditor.js.map

package/dist/domains/permission/components/APermissionEditor.js.map

@@ -1 +1 @@
-{"version":3,"file":"APermissionEditor.js","names":["_sfc_main","APermissionEditor_vue_vue_type_script_setup_true_lang_default","APermissionEditor_default"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * The grants the subject already has from roles and groups. Undefined means \"this model is a\n     * group, not a user\": the origin column then reads every explicit grant as coming from the\n     * group itself rather than from the user.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation below writes a whole object back through `modelValue`: editing\n// the model in place would not re-trigger the parent's watchers that guard unsaved changes.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * \"Allow everything in this subject\", but it refuses to undo a deliberate restriction: an action\n * someone explicitly set to deny or owner-only is left alone and counted, and the count is\n * reported. Silently widening those is the one way this button could grant access nobody asked\n * for.\n */\n// Called with a subject from the template's own loop over `permissionConfig.config`.\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":""}
+{"version":3,"file":"APermissionEditor.js","names":["_sfc_main","APermissionEditor_vue_vue_type_script_setup_true_lang_default","APermissionEditor_default"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global, see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * Grants the subject already has from roles and groups.\n     * Undefined means the model is a group, not a user. The origin\n     * column then attributes every explicit grant to the group itself.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation writes a whole object back through `modelValue`.\n// Editing in place would not trigger the parent's unsaved-changes watchers.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * Allows every action in the subject, except actions explicitly set to deny or owner-only.\n * Those are left alone and their count is reported, so the button never widens a deliberate restriction.\n */\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionEditor.vue.d.ts

@@ -2,14 +2,14 @@ import { AxiosClientFn } from '../../api/utils/client';
 import { Permissions } from '../../auth/types/Permission';
 type __VLS_Props = {
     client: AxiosClientFn;
-    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */
+    /** Which backend's permission vocabulary to draw. Never a global, see `permissionConfigActions`. */
     system: string;
     entity?: string | undefined;
     endPoint?: string | undefined;
     /**
-     * The grants the subject already has from roles and groups. Undefined means "this model is a
-     * group, not a user": the origin column then reads every explicit grant as coming from the
-     * group itself rather than from the user.
+     * Grants the subject already has from roles and groups.
+     * Undefined means the model is a group, not a user. The origin
+     * column then attributes every explicit grant to the group itself.
      */
     resolvedPermissions?: Permissions | undefined;
     roles?: string[];

package/dist/domains/permission/components/APermissionEditor.vue_vue_type_script_setup_true_lang.js

@@ -1,18 +1,18 @@
-import { cloneDeep as e, isUndefined as t } from "../../../shared/utils/common.js";
-import { useAlerts as n } from "../../system/composables/alerts.js";
-import { objectDeletePropertyByPath as r, objectGetValueByPath as i, objectSetValueByPath as a } from "../../../shared/utils/object.js";
-import { Grant as o } from "../../auth/valueObject/Grant.js";
-import { ROLE_SUPER_ADMIN as s } from "../../auth/composables/defineAuth.js";
-import { GrantOrigin as c, GrantOriginDefault as l } from "../valueObject/GrantOrigin.js";
-import u from "./APermissionGrantEditor.js";
-import d from "./APermissionValueChip.js";
-import { usePermissionConfigActions as f } from "../config/composables/permissionConfigActions.js";
+import { useAlerts as e } from "../../system/composables/alerts.js";
+import { ROLE_SUPER_ADMIN as t } from "../../auth/composables/defineAuth.js";
+import n from "./APermissionGrantEditor.js";
+import r from "./APermissionValueChip.js";
+import { usePermissionConfigActions as i } from "../config/composables/permissionConfigActions.js";
+import { Grant as a } from "../../auth/valueObject/Grant.js";
+import { GrantOrigin as o, GrantOriginDefault as s } from "../valueObject/GrantOrigin.js";
+import { cloneDeep as c, isUndefined as l } from "../../../shared/utils/common.js";
+import { objectDeletePropertyByPath as u, objectGetValueByPath as d, objectSetValueByPath as f } from "../../../shared/utils/object.js";
 import { Fragment as p, computed as m, createBlock as h, createCommentVNode as g, createElementBlock as _, createElementVNode as v, createTextVNode as y, createVNode as b, defineComponent as x, mergeModels as S, openBlock as C, renderList as w, toDisplayString as T, unref as E, useModel as D, withCtx as O } from "vue";
 import { useI18n as k } from "vue-i18n";
 import { VCard as A, VCardText as j } from "vuetify/components/VCard";
 import { VBtn as M } from "vuetify/components/VBtn";
 import { VTable as N } from "vuetify/components/VTable";
-//#region src/domains/permission/components/APermissionEditor.vue?vue&type=script&setup=true&lang.ts
+// src/domains/permission/components/APermissionEditor.vue?vue&type=script&setup=true&lang.ts
 var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled" }, L = { key: 0 }, R = /*@__PURE__*/ x({
 	__name: "APermissionEditor",
 	props: /*@__PURE__*/ S({
@@ -32,32 +32,32 @@ var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled
 	}),
 	emits: ["update:modelValue"],
 	setup(x) {
-		let S = x, R = D(x, "modelValue"), { t: z } = k(), { showWarning: B } = n(), V = m(() => e(R.value)), { permissionConfig: H, loadingPermissionConfig: U, isPermissionConfigInitialized: W, translatePermission: G } = f({
+		let S = x, R = D(x, "modelValue"), { t: z } = k(), { showWarning: B } = e(), V = m(() => c(R.value)), { permissionConfig: H, loadingPermissionConfig: U, isPermissionConfigInitialized: W, translatePermission: G } = i({
 			client: S.client,
 			system: S.system,
 			entity: S.entity,
 			endPoint: S.endPoint
-		}), K = (e, n, i) => {
-			let o = e + "_" + n;
-			t(i) && Object.hasOwn(V.value, o) ? (r(V.value, o), R.value = V.value) : (a(V.value, o, i), R.value = V.value);
-		}, q = (e, t) => i(V.value, e + "_" + t), J = (e, n) => {
-			let r = i(H.value.config, e + "." + n + ".grants");
-			return t(r) ? H.value.defaultGrants : r;
-		}, Y = [o.Deny, o.AllowOwner], X = (e, t) => {
+		}), K = (e, t, n) => {
+			let r = e + "_" + t;
+			l(n) && Object.hasOwn(V.value, r) ? (u(V.value, r), R.value = V.value) : (f(V.value, r, n), R.value = V.value);
+		}, q = (e, t) => d(V.value, e + "_" + t), J = (e, t) => {
+			let n = d(H.value.config, e + "." + t + ".grants");
+			return l(n) ? H.value.defaultGrants : n;
+		}, Y = [a.Deny, a.AllowOwner], X = (e, t) => {
 			let n = e + "_" + t;
 			return Object.hasOwn(V.value, n) ? Y.includes(q(e, t)) : !1;
 		}, Z = (e) => {
 			let t = 0;
-			for (let n of Object.keys(H.value.config[e])) J(e, n).includes(o.Allow) && (X(e, n) ? t++ : a(V.value, e + "_" + n, o.Allow));
+			for (let n of Object.keys(H.value.config[e])) J(e, n).includes(a.Allow) && (X(e, n) ? t++ : f(V.value, e + "_" + n, a.Allow));
 			R.value = V.value, t > 0 && B(z("common.permissionEditor.restrictiveGrantKept", { count: t }, t));
-		}, Q = m(() => S.roles.includes(s)), $ = (e, t) => {
-			if (Q.value) return o.Allow;
+		}, Q = m(() => S.roles.includes(t)), $ = (e, t) => {
+			if (Q.value) return a.Allow;
 			let n = e + "_" + t;
-			return S.resolvedPermissions && Object.hasOwn(S.resolvedPermissions, n) ? i(S.resolvedPermissions, n) : Object.hasOwn(V.value, n) ? i(V.value, n) : o.Deny;
-		}, ee = (e, n) => {
-			if (Q.value) return c.Role;
-			let r = e + "_" + n;
-			return t(S.resolvedPermissions) ? Object.hasOwn(V.value, r) ? c.Group : l : Object.hasOwn(V.value, r) ? c.User : Object.hasOwn(S.resolvedPermissions, r) ? c.Group : l;
+			return S.resolvedPermissions && Object.hasOwn(S.resolvedPermissions, n) ? d(S.resolvedPermissions, n) : Object.hasOwn(V.value, n) ? d(V.value, n) : a.Deny;
+		}, ee = (e, t) => {
+			if (Q.value) return o.Role;
+			let n = e + "_" + t;
+			return l(S.resolvedPermissions) ? Object.hasOwn(V.value, n) ? o.Group : s : Object.hasOwn(V.value, n) ? o.User : Object.hasOwn(S.resolvedPermissions, n) ? o.Group : s;
 		};
 		return (e, t) => (C(), h(A, { loading: E(U) }, {
 			default: O(() => [b(j, null, {
@@ -81,7 +81,7 @@ var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled
 						_: 1
 					}, 8, ["data-cy", "onClick"]))], 8, F)]), (C(!0), _(p, null, w(Object.keys(E(H).config[e]), (t) => (C(), _("tr", { key: t }, [
 						v("td", null, [y(T(E(G)("actions", t)) + " ", 1), v("div", I, T(e) + "_" + T(t), 1)]),
-						x.readonly ? g("", !0) : (C(), _("td", L, [b(u, {
+						x.readonly ? g("", !0) : (C(), _("td", L, [b(n, {
 							"available-grants": J(e, t),
 							"selected-grant": q(e, t),
 							onChange: (n) => K(e, t, n)
@@ -90,7 +90,7 @@ var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled
 							"selected-grant",
 							"onChange"
 						])])),
-						v("td", null, [b(d, {
+						v("td", null, [b(r, {
 							grant: $(e, t),
 							"grant-origin": ee(e, t)
 						}, null, 8, ["grant", "grant-origin"])])
@@ -103,7 +103,6 @@ var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled
 		}, 8, ["loading"]));
 	}
 });
-//#endregion
 export { R as default };
 
 //# sourceMappingURL=APermissionEditor.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionEditor.vue_vue_type_script_setup_true_lang.js.map

@@ -1 +1 @@
-{"version":3,"file":"APermissionEditor.vue_vue_type_script_setup_true_lang.js","names":["_useModel","_openBlock","_createBlock","_component_VCard","_unref","_withCtx","_createVNode","_component_VCardText","_component_VTable","_createElementVNode","_toDisplayString","_createElementBlock","_createCommentVNode","_Fragment","_renderList","_createTextVNode","_component_VBtn","APermissionGrantEditor","APermissionValueChip","APermissionGrantEditor_default","APermissionValueChip_default","_hoisted_1","_hoisted_2","_hoisted_3","_hoisted_4","APermissionEditor_vue_vue_type_script_setup_true_lang_default","\"modelValue\"","\"modelModifiers\"","props","__props","modelValue","useModel","useI18n","useAlerts","permissions","computed","cloneDeep","usePermissionConfigActions","changeGrant","permissionName","subject","action","isUndefined","grant","objectDeletePropertyByPath","objectSetValueByPath","getSelectedGrant","objectGetValueByPath","getAvailableGrants","grants","permissionConfig","RESTRICTIVE_GRANTS","Grant","isExplicitRestrictiveGrant","allowAllActions","keptRestrictiveGrantCount","showWarning","t","hasSuperAdminRole","ROLE_SUPER_ADMIN","getResolvedGrant","getGrantOrigin","GrantOrigin","GrantOriginDefault","openBlock","createBlock","VCard","unref","loadingPermissionConfig","withCtx","createVNode","VCardText","isPermissionConfigInitialized","VTable","createElementVNode","toDisplayString","createCommentVNode","createElementBlock","Fragment","renderList","permissionSubject","createTextVNode","translatePermission","VBtn","permissionAction","$event"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * The grants the subject already has from roles and groups. Undefined means \"this model is a\n     * group, not a user\": the origin column then reads every explicit grant as coming from the\n     * group itself rather than from the user.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation below writes a whole object back through `modelValue`: editing\n// the model in place would not re-trigger the parent's watchers that guard unsaved changes.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * \"Allow everything in this subject\", but it refuses to undo a deliberate restriction: an action\n * someone explicitly set to deny or owner-only is left alone and counted, and the count is\n * reported. Silently widening those is the one way this button could grant access nobody asked\n * for.\n */\n// Called with a subject from the template's own loop over `permissionConfig.config`.\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeA,IAAM4B,IAAQC,GA0BRC,IAAa9B,EAAwB6B,GAAA,YAAmB,GAExD,EAAE,SAAMG,EAAQ,GAChB,EAAE,mBAAgBC,EAAU,GAI5BC,IAAcC,QAAeC,EAAUN,EAAW,KAAK,CAAC,GAGxD,EAAE,qBAAkB,4BAAyB,kCAA+B,2BAChFO,EAA2B;GACzB,QAAQT,EAAM;GACd,QAAQA,EAAM;GACd,QAAQA,EAAM;GACd,UAAUA,EAAM;EAClB,CAAC,GAGGU,KAAe,GAAiB,GAAgB,MAAsB;GAC1E,IAAMC,IAAiBC,IAAU,MAAMC;GACvC,AAAIC,EAAYC,CAAK,KAAK,OAAO,OAAOT,EAAY,OAAOK,CAAc,KACvEK,EAA2BV,EAAY,OAAOK,CAAc,GAC5D,EAAW,QAAQL,EAAY,UAGjCW,EAAqBX,EAAY,OAAOK,GAAgBI,CAAK,GAC7D,EAAW,QAAQT,EAAY;EACjC,GAEMY,KAAoB,GAAiB,MAClCC,EAAqBb,EAAY,OAAOM,IAAU,MAAMC,CAAM,GAGjEO,KAAsB,GAAiB,MAAgC;GAC3E,IAAMC,IAASF,EAAqBG,EAAiB,MAAM,QAAQV,IAAU,MAAMC,IAAS,SAAS;GAIrG,OAHIC,EAAYO,CAAM,IACbC,EAAiB,MAAM,gBAEzBD;EACT,GAEME,IAAkC,CAACC,EAAM,MAAMA,EAAM,UAAU,GAE/DC,KAA8B,GAAiB,MAAmB;GACtE,IAAMd,IAAiBC,IAAU,MAAMC;GAEvC,OADK,OAAO,OAAOP,EAAY,OAAOK,CAAc,IAC7CY,EAAmB,SAASL,EAAiBN,GAASC,CAAM,CAAC,IADN;EAEhE,GASMa,KAAmB,MAAoB;GAC3C,IAAIC,IAA4B;GAChC,KAAK,IAAMd,KAAU,OAAO,KAAKS,EAAiB,MAAM,OAAOV,EAAS,GACtE,AAAKQ,EAAmBR,GAASC,CAAM,CAAC,CAAC,SAASW,EAAM,KAAK,MACzDC,EAA2Bb,GAASC,CAAM,IAC5C,MAGFI,EAAqBX,EAAY,OAAOM,IAAU,MAAMC,GAAQW,EAAM,KAAK;GAG7E,AADA,EAAW,QAAQlB,EAAY,OAC3BqB,IAA4B,KAC9BC,EACEC,EAAE,gDAAgD,EAAE,OAAOF,EAA0B,GAAGA,CAAyB,CACnH;EAEJ,GAEMG,IAAoBvB,QAAeP,EAAM,MAAM,SAAS+B,CAAgB,CAAC,GAEzEC,KAAoB,GAAiB,MAAmB;GAC5D,IAAIF,EAAkB,OAAO,OAAON,EAAM;GAC1C,IAAMb,IAAiBC,IAAU,MAAMC;GAOvC,OANIb,EAAM,uBAAuB,OAAO,OAAOA,EAAM,qBAAqBW,CAAc,IAC/EQ,EAAqBnB,EAAM,qBAAqBW,CAAc,IAEnE,OAAO,OAAOL,EAAY,OAAOK,CAAc,IAC1CQ,EAAqBb,EAAY,OAAOK,CAAc,IAExDa,EAAM;EACf,GAEMS,MAAkB,GAAiB,MAAmB;GAC1D,IAAIH,EAAkB,OAAO,OAAOI,EAAY;GAChD,IAAMvB,IAAiBC,IAAU,MAAMC;GAOvC,OANIC,EAAYd,EAAM,mBAAmB,IACnC,OAAO,OAAOM,EAAY,OAAOK,CAAc,IAAUuB,EAAY,QAClEC,IAEL,OAAO,OAAO7B,EAAY,OAAOK,CAAc,IAAUuB,EAAY,OACrE,OAAO,OAAOlC,EAAM,qBAAqBW,CAAc,IAAUuB,EAAY,QAC1EC;EACT;E,kBAIE9D,EAAA,GAAAC,EA6DQC,GAAA,EA7DA,SAASC,EAAAgE,CAAA,EAAuB,GAAA;GACtC,SAAA/D,QA2DY,CA3DZC,EA2DYC,GAAA,MAAA;IA1DV,SAAAF,QAyDS,CAzDKD,EAAAoE,CAAA,KAAdvE,EAAA,GAAAC,EAyDSM,GAAA,EAAA,KAAA,EAAA,GAAA;KAxDP,SAAAH,QAQQ,CARRI,EAQQ,SAAA,MAAA,CAPNA,EAMK,MAAA,MAAA;MALHA,EAAgD,MAAA,MAAAC,EAAzCN,EAAAqD,CAAA,CAAC,CAAA,8BAAA,CAAA,GAAA,CAAA;MACG5B,EAAA,W,aAAX5B,EAAA,GAAAU,EAEK,MAAAU,GAAAX,EADAN,EAAAqD,CAAA,CAAC,CAAA,mCAAA,CAAA,GAAA,CAAA;MAENhD,EAA6D,MAAA,MAAAC,EAAtDN,EAAAqD,CAAA,CAAC,CAAA,2CAAA,CAAA,GAAA,CAAA;K,MAGZhD,EA8CQ,SAAA,MAAA,EA7CNR,EAAA,EAAA,GAAAU,EA4CWE,GAAA,MAAAC,EA3CmB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,MAAM,IAAxD,OACDjD,EAAA,GAAAU,EAAAE,GAAA,EAAA,KAAAmE,EAAiB,GAAA,CAEvBvE,EAiBK,MAAA,MAAA,CAhBHA,EAeK,MAAA;MAdF,SAASoB,EAAA,WAAQ,IAAA;MAClB,OAAM;K,IAEHd,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,YAAaF,CAAiB,CAAA,IAAI,KACxD,CAAA,GACSnD,EAAA,W,aADT5B,EAAA,GAAAC,EASOc,GAAA;;MAPL,MAAK;MACL,SAAQ;MACR,OAAM;MACL,WAAO,wBAA0BgE;MACjC,UAAK,MAAE1B,EAAgB0B,CAAiB;;MAEzC,SAAA3E,QAA2C,CAAxCU,EAAAL,EAAAN,EAAAqD,CAAA,CAAC,CAAA,kCAAA,CAAA,GAAA,CAAA,C;;K,2CAIVxD,EAAA,EAAA,GAAAU,EAqBKE,GAAA,MAAAC,EApBwB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,OAAO8B,EAAiB,IAAzE,OADT/E,EAAA,GAAAU,EAqBK,MAAA,EAnBF,KAAKyE,EAAgB,GAAA;MAEtB3E,EAGK,MAAA,MAAA,CAFAM,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,WAAYE,CAAgB,CAAA,IAAI,KACtD,CAAA,GAAA3E,EAA+F,OAA/Fc,GAA+Fb,EAAjDsE,CAAiB,IAAG,MAACtE,EAAG0E,CAAgB,GAAA,CAAA,C;MAE7EvD,EAAA,W,aAAX5B,EAAA,GAAAU,EAMK,MAAAa,GAAA,CALHlB,EAIEW,GAAA;OAHC,oBAAkB+B,EAAmBgC,GAAmBI,CAAgB;OACxE,kBAAgBtC,EAAiBkC,GAAmBI,CAAgB;OACpE,WAAM,MAAE9C,EAAY0C,GAAmBI,GAAkBC,CAAM;;;;;;MAGpE5E,EAKK,MAAA,MAAA,CAJHH,EAGEY,GAAA;OAFC,OAAO0C,EAAiBoB,GAAmBI,CAAgB;OAC3D,gBAAcvB,GAAemB,GAAmBI,CAAgB"}
+{"version":3,"file":"APermissionEditor.vue_vue_type_script_setup_true_lang.js","names":["_useModel","_openBlock","_createBlock","_component_VCard","_unref","_withCtx","_createVNode","_component_VCardText","_component_VTable","_createElementVNode","_toDisplayString","_createElementBlock","_createCommentVNode","_Fragment","_renderList","_createTextVNode","_component_VBtn","APermissionGrantEditor","APermissionValueChip","APermissionGrantEditor_default","APermissionValueChip_default","_hoisted_1","_hoisted_2","_hoisted_3","_hoisted_4","APermissionEditor_vue_vue_type_script_setup_true_lang_default","\"modelValue\"","\"modelModifiers\"","props","__props","modelValue","useModel","useI18n","useAlerts","permissions","computed","cloneDeep","usePermissionConfigActions","changeGrant","permissionName","subject","action","isUndefined","grant","objectDeletePropertyByPath","objectSetValueByPath","getSelectedGrant","objectGetValueByPath","getAvailableGrants","grants","permissionConfig","RESTRICTIVE_GRANTS","Grant","isExplicitRestrictiveGrant","allowAllActions","keptRestrictiveGrantCount","showWarning","t","hasSuperAdminRole","ROLE_SUPER_ADMIN","getResolvedGrant","getGrantOrigin","GrantOrigin","GrantOriginDefault","openBlock","createBlock","VCard","unref","loadingPermissionConfig","withCtx","createVNode","VCardText","isPermissionConfigInitialized","VTable","createElementVNode","toDisplayString","createCommentVNode","createElementBlock","Fragment","renderList","permissionSubject","createTextVNode","translatePermission","VBtn","permissionAction","$event"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global, see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * Grants the subject already has from roles and groups.\n     * Undefined means the model is a group, not a user. The origin\n     * column then attributes every explicit grant to the group itself.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation writes a whole object back through `modelValue`.\n// Editing in place would not trigger the parent's unsaved-changes watchers.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * Allows every action in the subject, except actions explicitly set to deny or owner-only.\n * Those are left alone and their count is reported, so the button never widens a deliberate restriction.\n */\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeA,IAAM4B,IAAQC,GA0BRC,IAAa9B,EAAwB6B,GAAA,YAAmB,GAExD,EAAE,SAAMG,EAAQ,GAChB,EAAE,mBAAgBC,EAAU,GAI5BC,IAAcC,QAAeC,EAAUN,EAAW,KAAK,CAAC,GAGxD,EAAE,qBAAkB,4BAAyB,kCAA+B,2BAChFO,EAA2B;GACzB,QAAQT,EAAM;GACd,QAAQA,EAAM;GACd,QAAQA,EAAM;GACd,UAAUA,EAAM;EAClB,CAAC,GAGGU,KAAe,GAAiB,GAAgB,MAAsB;GAC1E,IAAMC,IAAiBC,IAAU,MAAMC;GACvC,AAAIC,EAAYC,CAAK,KAAK,OAAO,OAAOT,EAAY,OAAOK,CAAc,KACvEK,EAA2BV,EAAY,OAAOK,CAAc,GAC5D,EAAW,QAAQL,EAAY,UAGjCW,EAAqBX,EAAY,OAAOK,GAAgBI,CAAK,GAC7D,EAAW,QAAQT,EAAY;EACjC,GAEMY,KAAoB,GAAiB,MAClCC,EAAqBb,EAAY,OAAOM,IAAU,MAAMC,CAAM,GAGjEO,KAAsB,GAAiB,MAAgC;GAC3E,IAAMC,IAASF,EAAqBG,EAAiB,MAAM,QAAQV,IAAU,MAAMC,IAAS,SAAS;GAIrG,OAHIC,EAAYO,CAAM,IACbC,EAAiB,MAAM,gBAEzBD;EACT,GAEME,IAAkC,CAACC,EAAM,MAAMA,EAAM,UAAU,GAE/DC,KAA8B,GAAiB,MAAmB;GACtE,IAAMd,IAAiBC,IAAU,MAAMC;GAEvC,OADK,OAAO,OAAOP,EAAY,OAAOK,CAAc,IAC7CY,EAAmB,SAASL,EAAiBN,GAASC,CAAM,CAAC,IADN;EAEhE,GAMMa,KAAmB,MAAoB;GAC3C,IAAIC,IAA4B;GAChC,KAAK,IAAMd,KAAU,OAAO,KAAKS,EAAiB,MAAM,OAAOV,EAAS,GACtE,AAAKQ,EAAmBR,GAASC,CAAM,CAAC,CAAC,SAASW,EAAM,KAAK,MACzDC,EAA2Bb,GAASC,CAAM,IAC5C,MAGFI,EAAqBX,EAAY,OAAOM,IAAU,MAAMC,GAAQW,EAAM,KAAK;GAG7E,AADA,EAAW,QAAQlB,EAAY,OAC3BqB,IAA4B,KAC9BC,EACEC,EAAE,gDAAgD,EAAE,OAAOF,EAA0B,GAAGA,CAAyB,CACnH;EAEJ,GAEMG,IAAoBvB,QAAeP,EAAM,MAAM,SAAS+B,CAAgB,CAAC,GAEzEC,KAAoB,GAAiB,MAAmB;GAC5D,IAAIF,EAAkB,OAAO,OAAON,EAAM;GAC1C,IAAMb,IAAiBC,IAAU,MAAMC;GAOvC,OANIb,EAAM,uBAAuB,OAAO,OAAOA,EAAM,qBAAqBW,CAAc,IAC/EQ,EAAqBnB,EAAM,qBAAqBW,CAAc,IAEnE,OAAO,OAAOL,EAAY,OAAOK,CAAc,IAC1CQ,EAAqBb,EAAY,OAAOK,CAAc,IAExDa,EAAM;EACf,GAEMS,MAAkB,GAAiB,MAAmB;GAC1D,IAAIH,EAAkB,OAAO,OAAOI,EAAY;GAChD,IAAMvB,IAAiBC,IAAU,MAAMC;GAOvC,OANIC,EAAYd,EAAM,mBAAmB,IACnC,OAAO,OAAOM,EAAY,OAAOK,CAAc,IAAUuB,EAAY,QAClEC,IAEL,OAAO,OAAO7B,EAAY,OAAOK,CAAc,IAAUuB,EAAY,OACrE,OAAO,OAAOlC,EAAM,qBAAqBW,CAAc,IAAUuB,EAAY,QAC1EC;EACT;E,kBAIE9D,EAAA,GAAAC,EA6DQC,GAAA,EA7DA,SAASC,EAAAgE,CAAA,EAAuB,GAAA;GACtC,SAAA/D,QA2DY,CA3DZC,EA2DYC,GAAA,MAAA;IA1DV,SAAAF,QAyDS,CAzDKD,EAAAoE,CAAA,KAAdvE,EAAA,GAAAC,EAyDSM,GAAA,EAAA,KAAA,EAAA,GAAA;KAxDP,SAAAH,QAQQ,CARRI,EAQQ,SAAA,MAAA,CAPNA,EAMK,MAAA,MAAA;MALHA,EAAgD,MAAA,MAAAC,EAAzCN,EAAAqD,CAAA,CAAC,CAAA,8BAAA,CAAA,GAAA,CAAA;MACG5B,EAAA,W,aAAX5B,EAAA,GAAAU,EAEK,MAAAU,GAAAX,EADAN,EAAAqD,CAAA,CAAC,CAAA,mCAAA,CAAA,GAAA,CAAA;MAENhD,EAA6D,MAAA,MAAAC,EAAtDN,EAAAqD,CAAA,CAAC,CAAA,2CAAA,CAAA,GAAA,CAAA;K,MAGZhD,EA8CQ,SAAA,MAAA,EA7CNR,EAAA,EAAA,GAAAU,EA4CWE,GAAA,MAAAC,EA3CmB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,MAAM,IAAxD,OACDjD,EAAA,GAAAU,EAAAE,GAAA,EAAA,KAAAmE,EAAiB,GAAA,CAEvBvE,EAiBK,MAAA,MAAA,CAhBHA,EAeK,MAAA;MAdF,SAASoB,EAAA,WAAQ,IAAA;MAClB,OAAM;K,IAEHd,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,YAAaF,CAAiB,CAAA,IAAI,KACxD,CAAA,GACSnD,EAAA,W,aADT5B,EAAA,GAAAC,EASOc,GAAA;;MAPL,MAAK;MACL,SAAQ;MACR,OAAM;MACL,WAAO,wBAA0BgE;MACjC,UAAK,MAAE1B,EAAgB0B,CAAiB;;MAEzC,SAAA3E,QAA2C,CAAxCU,EAAAL,EAAAN,EAAAqD,CAAA,CAAC,CAAA,kCAAA,CAAA,GAAA,CAAA,C;;K,2CAIVxD,EAAA,EAAA,GAAAU,EAqBKE,GAAA,MAAAC,EApBwB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,OAAO8B,EAAiB,IAAzE,OADT/E,EAAA,GAAAU,EAqBK,MAAA,EAnBF,KAAKyE,EAAgB,GAAA;MAEtB3E,EAGK,MAAA,MAAA,CAFAM,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,WAAYE,CAAgB,CAAA,IAAI,KACtD,CAAA,GAAA3E,EAA+F,OAA/Fc,GAA+Fb,EAAjDsE,CAAiB,IAAG,MAACtE,EAAG0E,CAAgB,GAAA,CAAA,C;MAE7EvD,EAAA,W,aAAX5B,EAAA,GAAAU,EAMK,MAAAa,GAAA,CALHlB,EAIEW,GAAA;OAHC,oBAAkB+B,EAAmBgC,GAAmBI,CAAgB;OACxE,kBAAgBtC,EAAiBkC,GAAmBI,CAAgB;OACpE,WAAM,MAAE9C,EAAY0C,GAAmBI,GAAkBC,CAAM;;;;;;MAGpE5E,EAKK,MAAA,MAAA,CAJHH,EAGEY,GAAA;OAFC,OAAO0C,EAAiBoB,GAAmBI,CAAgB;OAC3D,gBAAcvB,GAAemB,GAAmBI,CAAgB"}

package/dist/domains/permission/components/APermissionGrantEditor.js

@@ -1,7 +1,6 @@
 import e from "./APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js";
-//#region src/domains/permission/components/APermissionGrantEditor.vue
+// src/domains/permission/components/APermissionGrantEditor.vue
 var t = e;
-//#endregion
 export { t as default };
 
 //# sourceMappingURL=APermissionGrantEditor.js.map

package/dist/domains/permission/components/APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js

@@ -2,7 +2,7 @@ import { useGrant as e } from "../../auth/valueObject/Grant.js";
 import { Fragment as t, computed as n, createBlock as r, createElementBlock as i, createTextVNode as a, defineComponent as o, openBlock as s, renderList as c, toDisplayString as l, unref as u, withCtx as d } from "vue";
 import { VBtn as f } from "vuetify/components/VBtn";
 import { VBtnToggle as p } from "vuetify/components/VBtnToggle";
-//#region src/domains/permission/components/APermissionGrantEditor.vue?vue&type=script&setup=true&lang.ts
+// src/domains/permission/components/APermissionGrantEditor.vue?vue&type=script&setup=true&lang.ts
 var m = /*@__PURE__*/ o({
 	__name: "APermissionGrantEditor",
 	props: {
@@ -39,7 +39,6 @@ var m = /*@__PURE__*/ o({
 		}, 8, ["modelValue"]));
 	}
 });
-//#endregion
 export { m as default };
 
 //# sourceMappingURL=APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionValueChip.js

@@ -1,7 +1,6 @@
 import e from "./APermissionValueChip.vue_vue_type_script_setup_true_lang.js";
-//#region src/domains/permission/components/APermissionValueChip.vue
+// src/domains/permission/components/APermissionValueChip.vue
 var t = e;
-//#endregion
 export { t as default };
 
 //# sourceMappingURL=APermissionValueChip.js.map

package/dist/domains/permission/components/APermissionValueChip.vue_vue_type_script_setup_true_lang.js

@@ -2,7 +2,7 @@ import { useGrant as e } from "../../auth/valueObject/Grant.js";
 import { GrantOriginDefault as t, useGrantOrigin as n } from "../valueObject/GrantOrigin.js";
 import { computed as r, createBlock as i, createCommentVNode as a, createElementBlock as o, createTextVNode as s, defineComponent as c, openBlock as l, toDisplayString as u, unref as d, withCtx as f } from "vue";
 import { VChip as p } from "vuetify/components/VChip";
-//#region src/domains/permission/components/APermissionValueChip.vue?vue&type=script&setup=true&lang.ts
+// src/domains/permission/components/APermissionValueChip.vue?vue&type=script&setup=true&lang.ts
 var m = {
 	key: 0,
 	class: "ml-1"
@@ -26,7 +26,6 @@ var m = {
 		}, 8, ["color"])) : a("", !0);
 	}
 });
-//#endregion
 export { h as default };
 
 //# sourceMappingURL=APermissionValueChip.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/composables/permissionActions.d.ts

@@ -9,12 +9,9 @@ export interface PermissionActionsParams {
     endPoint?: string;
 }
 /**
- * Builds the grant map a user would end up with, for the editor's "resolved" column, out of what
- * the page already holds: the groups the user is in plus the grants set on the user directly.
- *
- * It is not the backend's `resolvedPermissions`. That one arrives with the record and includes
- * roles; this one is what the screen would send if saved now, so the editor can show the effect of
- * a group the operator has just ticked without a round trip.
+ * Builds the user's resulting grant map for the editor's "resolved" column, from the user's groups plus direct grants.
+ * This is not the backend's `resolvedPermissions`, which includes roles. It reflects what
+ * a save would send now, so a just-ticked group shows its effect without a round trip.
  */
 export declare const usePermissionActions: (params: PermissionActionsParams) => {
     resolvePermissions: (user: AnzuUser) => Permissions;

package/dist/domains/permission/composables/permissionActions.js

@@ -1,13 +1,13 @@
-import { isUndefined as e } from "../../../shared/utils/common.js";
-import { objectGetValueByPath as t, objectSetValueByPath as n } from "../../../shared/utils/object.js";
-import { useCachedPermissionGroups as r } from "../group/composables/cachedPermissionGroups.js";
-//#region src/domains/permission/composables/permissionActions.ts
+import { useCachedPermissionGroups as e } from "../group/composables/cachedPermissionGroups.js";
+import { isUndefined as t } from "../../../shared/utils/common.js";
+import { objectGetValueByPath as n, objectSetValueByPath as r } from "../../../shared/utils/object.js";
+// src/domains/permission/composables/permissionActions.ts
 var i = (i) => {
-	let { getCachedPermissionGroup: a } = r(i), o = (r) => {
-		let i = {}, o = r.map((e) => a(e));
-		for (let r of o) if (!e(r)) for (let e in r.permissions) {
-			let a = t(r.permissions, e);
-			Object.hasOwn(i, e) ? t(i, e) < a && n(i, e, a) : n(i, e, a);
+	let { getCachedPermissionGroup: a } = e(i), o = (e) => {
+		let i = {}, o = e.map((e) => a(e));
+		for (let e of o) if (!t(e)) for (let t in e.permissions) {
+			let a = n(e.permissions, t);
+			Object.hasOwn(i, t) ? n(i, t) < a && r(i, t, a) : r(i, t, a);
 		}
 		return i;
 	};
@@ -19,7 +19,6 @@ var i = (i) => {
 		resolveGroupPermissions: o
 	};
 };
-//#endregion
 export { i as usePermissionActions };
 
 //# sourceMappingURL=permissionActions.js.map

package/dist/domains/permission/composables/permissionActions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionActions.js","names":["usePermissionActions","useCachedPermissionGroups","params","resolveGroupPermissions","permissions","permissionGroups","permissionGroupIds","getCachedPermissionGroup","id","permissionGroup","permissionName","grant","objectGetValueByPath","objectSetValueByPath","user"],"sources":["../../../../src/domains/permission/composables/permissionActions.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useCachedPermissionGroups } from '@/domains/permission/group/composables/cachedPermissionGroups'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionActionsParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\n/**\n * Builds the grant map a user would end up with, for the editor's \"resolved\" column, out of what\n * the page already holds: the groups the user is in plus the grants set on the user directly.\n *\n * It is not the backend's `resolvedPermissions`. That one arrives with the record and includes\n * roles; this one is what the screen would send if saved now, so the editor can show the effect of\n * a group the operator has just ticked without a round trip.\n */\nexport const usePermissionActions = (params: PermissionActionsParams) => {\n  const { getCachedPermissionGroup } = useCachedPermissionGroups(params)\n\n  const resolveGroupPermissions = (permissionGroupIds: IntegerId[]): Permissions => {\n    const permissions: Permissions = {}\n    const permissionGroups = permissionGroupIds.map((id) => getCachedPermissionGroup(id))\n\n    for (const permissionGroup of permissionGroups) {\n      if (isUndefined(permissionGroup)) continue\n      for (const permissionName in permissionGroup.permissions) {\n        const grant = objectGetValueByPath(permissionGroup.permissions, permissionName)\n        if (!Object.hasOwn(permissions, permissionName)) {\n          objectSetValueByPath(permissions, permissionName, grant)\n          continue\n        }\n        // Grants are ordered deny < allowOwner < allow, so the widest group wins. Two groups that\n        // disagree do not cancel out.\n        if (objectGetValueByPath(permissions, permissionName) < grant) {\n          objectSetValueByPath(permissions, permissionName, grant)\n        }\n      }\n    }\n    return permissions\n  }\n\n  /** A grant set on the user directly always beats whatever the groups say. */\n  const resolvePermissions = (user: AnzuUser): Permissions => ({\n    ...resolveGroupPermissions(user.permissionGroups),\n    ...user.permissions,\n  })\n\n  return {\n    resolvePermissions,\n    resolveGroupPermissions,\n  }\n}\n"],"mappings":";;;;AAuBA,IAAaA,KAAwB,MAAoC;CACvE,IAAM,EAAE,gCAA6BC,EAA0BC,CAAM,GAE/DC,KAA2B,MAAiD;EAChF,IAAMC,IAA2B,CAAC,GAC5BC,IAAmBC,EAAmB,KAAK,MAAOC,EAAyBC,CAAE,CAAC;EAEpF,KAAK,IAAMC,KAAmBJ,GAC5B,IAAI,GAAYI,CAAe,GAC/B,KAAK,IAAMC,KAAkBD,EAAgB,aAAa;GACxD,IAAME,IAAQC,EAAqBH,EAAgB,aAAaC,CAAc;GAC9E,AAAK,OAAO,OAAON,GAAaM,CAAc,IAM1CE,EAAqBR,GAAaM,CAAc,IAAIC,KACtDE,EAAqBT,GAAaM,GAAgBC,CAAK,IANvDE,EAAqBT,GAAaM,GAAgBC,CAAK;EAQ3D;EAEF,OAAOP;CACT;CAQA,OAAO;EACL,qBAN0B,OAAiC;GAC3D,GAAGD,EAAwBW,EAAK,gBAAgB;GAChD,GAAGA,EAAK;EACV;EAIE;CACF;AACF"}
+{"version":3,"file":"permissionActions.js","names":["usePermissionActions","useCachedPermissionGroups","params","resolveGroupPermissions","permissions","permissionGroups","permissionGroupIds","getCachedPermissionGroup","id","permissionGroup","permissionName","grant","objectGetValueByPath","objectSetValueByPath","user"],"sources":["../../../../src/domains/permission/composables/permissionActions.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useCachedPermissionGroups } from '@/domains/permission/group/composables/cachedPermissionGroups'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionActionsParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\n/**\n * Builds the user's resulting grant map for the editor's \"resolved\" column, from the user's groups plus direct grants.\n * This is not the backend's `resolvedPermissions`, which includes roles. It reflects what\n * a save would send now, so a just-ticked group shows its effect without a round trip.\n */\nexport const usePermissionActions = (params: PermissionActionsParams) => {\n  const { getCachedPermissionGroup } = useCachedPermissionGroups(params)\n\n  const resolveGroupPermissions = (permissionGroupIds: IntegerId[]): Permissions => {\n    const permissions: Permissions = {}\n    const permissionGroups = permissionGroupIds.map((id) => getCachedPermissionGroup(id))\n\n    for (const permissionGroup of permissionGroups) {\n      if (isUndefined(permissionGroup)) continue\n      for (const permissionName in permissionGroup.permissions) {\n        const grant = objectGetValueByPath(permissionGroup.permissions, permissionName)\n        if (!Object.hasOwn(permissions, permissionName)) {\n          objectSetValueByPath(permissions, permissionName, grant)\n          continue\n        }\n        // Grants are ordered deny < allowOwner < allow, so the widest group wins. Two groups that\n        // disagree do not cancel out.\n        if (objectGetValueByPath(permissions, permissionName) < grant) {\n          objectSetValueByPath(permissions, permissionName, grant)\n        }\n      }\n    }\n    return permissions\n  }\n\n  /** A grant set on the user directly always beats whatever the groups say. */\n  const resolvePermissions = (user: AnzuUser): Permissions => ({\n    ...resolveGroupPermissions(user.permissionGroups),\n    ...user.permissions,\n  })\n\n  return {\n    resolvePermissions,\n    resolveGroupPermissions,\n  }\n}\n"],"mappings":";;;;AAoBA,IAAaA,KAAwB,MAAoC;CACvE,IAAM,EAAE,gCAA6BC,EAA0BC,CAAM,GAE/DC,KAA2B,MAAiD;EAChF,IAAMC,IAA2B,CAAC,GAC5BC,IAAmBC,EAAmB,KAAK,MAAOC,EAAyBC,CAAE,CAAC;EAEpF,KAAK,IAAMC,KAAmBJ,GAC5B,IAAI,GAAYI,CAAe,GAC/B,KAAK,IAAMC,KAAkBD,EAAgB,aAAa;GACxD,IAAME,IAAQC,EAAqBH,EAAgB,aAAaC,CAAc;GAC9E,AAAK,OAAO,OAAON,GAAaM,CAAc,IAM1CE,EAAqBR,GAAaM,CAAc,IAAIC,KACtDE,EAAqBT,GAAaM,GAAgBC,CAAK,IANvDE,EAAqBT,GAAaM,GAAgBC,CAAK;EAQ3D;EAEF,OAAOP;CACT;CAQA,OAAO;EACL,qBAN0B,OAAiC;GAC3D,GAAGD,EAAwBW,EAAK,gBAAgB;GAChD,GAAGA,EAAK;EACV;EAIE;CACF;AACF"}

package/dist/domains/permission/config/api/permissionConfigApi.d.ts

@@ -5,8 +5,8 @@ export declare const PERMISSION_CONFIG_ENDPOINT = "/adm/v1/permissions/config";
 export interface PermissionConfigApiParams {
     client: AxiosClientFn;
     /**
-     * Which backend this instance talks to. It reaches `useApiRequest` for error context and is the
-     * key everything downstream is stored under, so two systems can be loaded side by side.
+     * Which backend this instance talks to. It reaches `useApiRequest` for error context.
+     * It is also the storage key downstream, so two systems can be loaded side by side.
      */
     system: string;
     /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */

package/dist/domains/permission/config/api/permissionConfigApi.js

@@ -1,5 +1,5 @@
 import { useApiRequest as e } from "../../../api/composables/useApiRequest.js";
-//#region src/domains/permission/config/api/permissionConfigApi.ts
+// src/domains/permission/config/api/permissionConfigApi.ts
 var t = "permissionConfig", n = "/adm/v1/permissions/config", r = ({ client: r, system: i, entity: a = t, endPoint: o = n }) => ({ useFetchPermissionConfig: () => e({
 	client: r,
 	method: "GET",
@@ -9,7 +9,6 @@ var t = "permissionConfig", n = "/adm/v1/permissions/config", r = ({ client: r,
 	validationEntity: a,
 	urlTemplate: o
 }) });
-//#endregion
 export { n as PERMISSION_CONFIG_ENDPOINT, t as PERMISSION_CONFIG_ENTITY, r as usePermissionConfigApi };
 
 //# sourceMappingURL=permissionConfigApi.js.map

package/dist/domains/permission/config/api/permissionConfigApi.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionConfigApi.js","names":["PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","usePermissionConfigApi","useApiRequest","entity","endPoint"],"sources":["../../../../../src/domains/permission/config/api/permissionConfigApi.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport const PERMISSION_CONFIG_ENTITY = 'permissionConfig'\nexport const PERMISSION_CONFIG_ENDPOINT = '/adm/v1/permissions/config'\n\nexport interface PermissionConfigApiParams {\n  client: AxiosClientFn\n  /**\n   * Which backend this instance talks to. It reaches `useApiRequest` for error context and is the\n   * key everything downstream is stored under, so two systems can be loaded side by side.\n   */\n  system: string\n  /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */\n  entity?: string\n  endPoint?: string\n}\n\nexport const usePermissionConfigApi = ({\n  client,\n  system,\n  entity = PERMISSION_CONFIG_ENTITY,\n  endPoint = PERMISSION_CONFIG_ENDPOINT,\n}: PermissionConfigApiParams) => {\n  const useFetchPermissionConfig = () =>\n    useApiRequest<PermissionConfig, null>({\n      client,\n      method: 'GET',\n      system,\n      entity,\n      // The config endpoint never answers a field-level validation failure, but the pair is kept\n      // consistent with the rest of the shared api so a future one lands on real labels.\n      validationSystem: 'common',\n      validationEntity: entity,\n      urlTemplate: endPoint,\n    })\n\n  return {\n    useFetchPermissionConfig,\n  }\n}\n"],"mappings":";;AAIA,IAAaA,IAA2B,oBAC3BC,IAA6B,8BAc7BC,KAA0B,EACrC,WACA,WACA,YAASF,GACT,cAAWC,SAeJ,EACL,gCAbAE,EAAsC;CACpC;CACA,QAAQ;CACR;CACA;CAGA,kBAAkB;CAClB,kBAAkBC;CAClB,aAAaC;AACf,CAAC,EAIH"}
+{"version":3,"file":"permissionConfigApi.js","names":["PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","usePermissionConfigApi","useApiRequest","entity","endPoint"],"sources":["../../../../../src/domains/permission/config/api/permissionConfigApi.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport const PERMISSION_CONFIG_ENTITY = 'permissionConfig'\nexport const PERMISSION_CONFIG_ENDPOINT = '/adm/v1/permissions/config'\n\nexport interface PermissionConfigApiParams {\n  client: AxiosClientFn\n  /**\n   * Which backend this instance talks to. It reaches `useApiRequest` for error context.\n   * It is also the storage key downstream, so two systems can be loaded side by side.\n   */\n  system: string\n  /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */\n  entity?: string\n  endPoint?: string\n}\n\nexport const usePermissionConfigApi = ({\n  client,\n  system,\n  entity = PERMISSION_CONFIG_ENTITY,\n  endPoint = PERMISSION_CONFIG_ENDPOINT,\n}: PermissionConfigApiParams) => {\n  const useFetchPermissionConfig = () =>\n    useApiRequest<PermissionConfig, null>({\n      client,\n      method: 'GET',\n      system,\n      entity,\n      // The config endpoint never returns field-level validation failures.\n      // The pair stays consistent with the rest of the shared api so a future one gets real labels.\n      validationSystem: 'common',\n      validationEntity: entity,\n      urlTemplate: endPoint,\n    })\n\n  return {\n    useFetchPermissionConfig,\n  }\n}\n"],"mappings":";;AAIA,IAAaA,IAA2B,oBAC3BC,IAA6B,8BAc7BC,KAA0B,EACrC,WACA,WACA,YAASF,GACT,cAAWC,SAeJ,EACL,gCAbAE,EAAsC;CACpC;CACA,QAAQ;CACR;CACA;CAGA,kBAAkB;CAClB,kBAAkBC;CAClB,aAAaC;AACf,CAAC,EAIH"}

package/dist/domains/permission/config/composables/permissionConfigActions.d.ts

@@ -2,17 +2,13 @@ import { AxiosClientFn } from '../../../api/utils/client';
 import { PermissionTranslationGroup } from '../types/PermissionConfig';
 export interface PermissionConfigActionsParams {
     client: AxiosClientFn;
-    /**
-     * The system this config belongs to. It is a parameter and not a global -- admin-inhouse used to
-     * read it from a `curSystem` ref, which made the whole module impossible to use from a page that
-     * shows two systems at once and impossible to move here at all.
-     */
+    /** The system this config belongs to. A parameter, not a global, so a page can show two systems at once. */
     system: string;
     entity?: string;
     endPoint?: string;
     /**
-     * Fetch as soon as the composable is built, the way every admin does today. Turn it off where
-     * the caller wants to decide when (a dialog that may never open, a test).
+     * Fetch as soon as the composable is built, as every admin does.
+     * Turn off where the caller decides when, e.g. a dialog that may never open or a test.
      */
     autoFetch?: boolean;
 }

package/dist/domains/permission/config/composables/permissionConfigActions.js

@@ -1,17 +1,17 @@
 import { useAlerts as e } from "../../../system/composables/alerts.js";
-import { objectGetValueByPath as t } from "../../../../shared/utils/object.js";
-import { useLanguageSettings as n } from "../../../system/composables/languageSettings.js";
-import { PERMISSION_CONFIG_ENDPOINT as r, PERMISSION_CONFIG_ENTITY as i, usePermissionConfigApi as a } from "../api/permissionConfigApi.js";
-import { usePermissionConfigStore as o } from "../store/permissionConfigStore.js";
+import { useLanguageSettings as t } from "../../../system/composables/languageSettings.js";
+import { PERMISSION_CONFIG_ENDPOINT as n, PERMISSION_CONFIG_ENTITY as r, usePermissionConfigApi as i } from "../api/permissionConfigApi.js";
+import { usePermissionConfigStore as a } from "../store/permissionConfigStore.js";
+import { objectGetValueByPath as o } from "../../../../shared/utils/object.js";
 import { computed as s } from "vue";
-//#region src/domains/permission/config/composables/permissionConfigActions.ts
+// src/domains/permission/config/composables/permissionConfigActions.ts
 var c = /* @__PURE__ */ new Map(), l = (l) => {
-	let { client: u, system: d, entity: f = i, endPoint: p = r, autoFetch: m = !0 } = l, { showErrorsDefault: h } = e(), { useFetchPermissionConfig: g } = a({
+	let { client: u, system: d, entity: f = r, endPoint: p = n, autoFetch: m = !0 } = l, { showErrorsDefault: h } = e(), { useFetchPermissionConfig: g } = i({
 		client: u,
 		system: d,
 		entity: f,
 		endPoint: p
-	}), _ = o(), v = s(() => _.getEntry(d)), y = s(() => v.value.config), b = s(() => v.value.loading), x = s(() => v.value.initialized), S = async () => {
+	}), _ = a(), v = s(() => _.getEntry(d)), y = s(() => v.value.config), b = s(() => v.value.loading), x = s(() => v.value.initialized), S = async () => {
 		_.setLoading(d, !0);
 		try {
 			let { execute: e } = g();
@@ -27,17 +27,16 @@ var c = /* @__PURE__ */ new Map(), l = (l) => {
 		if (t) return t;
 		let n = S();
 		return c.set(d, n), n;
-	}, { currentLanguageCode: w } = n();
+	}, { currentLanguageCode: w } = t();
 	return m && C(), {
 		permissionConfig: y,
 		loadingPermissionConfig: b,
 		isPermissionConfigInitialized: x,
 		fetchPermissionConfig: C,
-		translatePermission: (e, n) => t(y.value.translation, e + "." + n + "." + w.value) ?? n,
+		translatePermission: (e, t) => o(y.value.translation, e + "." + t + "." + w.value) ?? t,
 		resetPermissionConfig: () => _.resetSystem(d)
 	};
 };
-//#endregion
 export { l as usePermissionConfigActions };
 
 //# sourceMappingURL=permissionConfigActions.js.map

package/dist/domains/permission/config/composables/permissionConfigActions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionConfigActions.js","names":["inFlight","usePermissionConfigActions","PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","params","useAlerts","usePermissionConfigApi","store","usePermissionConfigStore","entry","computed","system","permissionConfig","loadingPermissionConfig","isPermissionConfigInitialized","runFetch","useFetchPermissionConfig","execute","error","fetchPermissionConfig","force","running","started","useLanguageSettings","autoFetch","objectGetValueByPath","group","key","currentLanguageCode"],"sources":["../../../../../src/domains/permission/config/composables/permissionConfigActions.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useLanguageSettings } from '@/domains/system/composables/languageSettings'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport {\n  PERMISSION_CONFIG_ENDPOINT,\n  PERMISSION_CONFIG_ENTITY,\n  usePermissionConfigApi,\n} from '@/domains/permission/config/api/permissionConfigApi'\nimport { usePermissionConfigStore } from '@/domains/permission/config/store/permissionConfigStore'\nimport type { PermissionTranslationGroup } from '@/domains/permission/config/types/PermissionConfig'\nimport { objectGetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionConfigActionsParams {\n  client: AxiosClientFn\n  /**\n   * The system this config belongs to. It is a parameter and not a global -- admin-inhouse used to\n   * read it from a `curSystem` ref, which made the whole module impossible to use from a page that\n   * shows two systems at once and impossible to move here at all.\n   */\n  system: string\n  entity?: string\n  endPoint?: string\n  /**\n   * Fetch as soon as the composable is built, the way every admin does today. Turn it off where\n   * the caller wants to decide when (a dialog that may never open, a test).\n   */\n  autoFetch?: boolean\n}\n\n/**\n * One request per system, however many components ask at once. The map lives at module scope\n * because the de-duplication has to span composable instances: a page with the editor open twice\n * builds two of these, and both would otherwise fire the same GET.\n */\nconst inFlight = new Map<string, Promise<void>>()\n\nexport const usePermissionConfigActions = (params: PermissionConfigActionsParams) => {\n  const {\n    client,\n    system,\n    entity = PERMISSION_CONFIG_ENTITY,\n    endPoint = PERMISSION_CONFIG_ENDPOINT,\n    autoFetch = true,\n  } = params\n\n  const { showErrorsDefault } = useAlerts()\n  const { useFetchPermissionConfig } = usePermissionConfigApi({ client, system, entity, endPoint })\n  const store = usePermissionConfigStore()\n\n  const entry = computed(() => store.getEntry(system))\n  const permissionConfig = computed(() => entry.value.config)\n  const loadingPermissionConfig = computed(() => entry.value.loading)\n  const isPermissionConfigInitialized = computed(() => entry.value.initialized)\n\n  const runFetch = async () => {\n    store.setLoading(system, true)\n    try {\n      const { execute } = useFetchPermissionConfig()\n      store.setConfig(system, await execute())\n    } catch (error) {\n      showErrorsDefault(error)\n    } finally {\n      // Always, including on the failure path. Without it a backend that is down leaves the\n      // editor's card spinning for the rest of the session.\n      store.setLoading(system, false)\n      inFlight.delete(system)\n    }\n  }\n\n  const fetchPermissionConfig = async (force = false) => {\n    if (!force && isPermissionConfigInitialized.value) return\n    const running = inFlight.get(system)\n    if (running) return running\n    const started = runFetch()\n    inFlight.set(system, started)\n    return started\n  }\n\n  const { currentLanguageCode } = useLanguageSettings()\n\n  /**\n   * Falls back to the raw key, which is the contract the admins rely on: the ACL vocabulary lives\n   * in the backend yaml, never in front-end i18n, so an untranslated action is shown as\n   * `weather_location_ui` rather than as a blank cell.\n   */\n  const translatePermission = (group: PermissionTranslationGroup, key: string): string => {\n    const translated = objectGetValueByPath(\n      permissionConfig.value.translation,\n      group + '.' + key + '.' + currentLanguageCode.value\n    )\n\n    return translated ?? key\n  }\n\n  if (autoFetch) void fetchPermissionConfig()\n\n  return {\n    permissionConfig,\n    loadingPermissionConfig,\n    isPermissionConfigInitialized,\n    fetchPermissionConfig,\n    translatePermission,\n    resetPermissionConfig: () => store.resetSystem(system),\n  }\n}\n"],"mappings":";;;;;;;AAmCA,IAAMA,oBAAW,IAAI,IAA2B,GAEnCC,KAA8B,MAA0C;CACnF,IAAM,EACJ,WACA,WACA,YAASC,GACT,cAAWC,GACX,eAAY,OACVC,GAEE,EAAE,yBAAsBC,EAAU,GAClC,EAAE,gCAA6BC,EAAuB;EAAE;EAAQ;EAAQ;EAAQ;CAAS,CAAC,GAC1FC,IAAQC,EAAyB,GAEjCC,IAAQC,QAAeH,EAAM,SAASI,CAAM,CAAC,GAC7CC,IAAmBF,QAAeD,EAAM,MAAM,MAAM,GACpDI,IAA0BH,QAAeD,EAAM,MAAM,OAAO,GAC5DK,IAAgCJ,QAAeD,EAAM,MAAM,WAAW,GAEtEM,IAAW,YAAY;EAC3B,EAAM,WAAWJ,GAAQ,EAAI;EAC7B,IAAI;GACF,IAAM,EAAE,eAAYK,EAAyB;GAC7C,EAAM,UAAUL,GAAQ,MAAMM,EAAQ,CAAC;EACzC,SAASC,GAAO;GACd,EAAkBA,CAAK;EACzB,UAAU;GAIR,AADAX,EAAM,WAAWI,GAAQ,EAAK,GAC9BX,EAAS,OAAOW,CAAM;EACxB;CACF,GAEMQ,IAAwB,OAAO,IAAQ,OAAU;EACrD,IAAI,CAACC,KAASN,EAA8B,OAAO;EACnD,IAAMO,IAAUrB,EAAS,IAAIW,CAAM;EACnC,IAAIU,GAAS,OAAOA;EACpB,IAAMC,IAAUP,EAAS;EAEzB,OADAf,EAAS,IAAIW,GAAQW,CAAO,GACrBA;CACT,GAEM,EAAE,2BAAwBC,EAAoB;CAkBpD,OAFIC,KAAWL,EAA2B,GAEnC;EACL;EACA;EACA;EACA;EACA,sBAhB2B,GAAmC,MAC3CM,EACjBb,EAAiB,MAAM,aACvBc,IAAQ,MAAMC,IAAM,MAAMC,EAAoB,KAGzC,KAAcD;EAWrB,6BAA6BpB,EAAM,YAAYI,CAAM;CACvD;AACF"}
+{"version":3,"file":"permissionConfigActions.js","names":["inFlight","usePermissionConfigActions","PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","params","useAlerts","usePermissionConfigApi","store","usePermissionConfigStore","entry","computed","system","permissionConfig","loadingPermissionConfig","isPermissionConfigInitialized","runFetch","useFetchPermissionConfig","execute","error","fetchPermissionConfig","force","running","started","useLanguageSettings","autoFetch","objectGetValueByPath","group","key","currentLanguageCode"],"sources":["../../../../../src/domains/permission/config/composables/permissionConfigActions.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useLanguageSettings } from '@/domains/system/composables/languageSettings'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport {\n  PERMISSION_CONFIG_ENDPOINT,\n  PERMISSION_CONFIG_ENTITY,\n  usePermissionConfigApi,\n} from '@/domains/permission/config/api/permissionConfigApi'\nimport { usePermissionConfigStore } from '@/domains/permission/config/store/permissionConfigStore'\nimport type { PermissionTranslationGroup } from '@/domains/permission/config/types/PermissionConfig'\nimport { objectGetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionConfigActionsParams {\n  client: AxiosClientFn\n  /** The system this config belongs to. A parameter, not a global, so a page can show two systems at once. */\n  system: string\n  entity?: string\n  endPoint?: string\n  /**\n   * Fetch as soon as the composable is built, as every admin does.\n   * Turn off where the caller decides when, e.g. a dialog that may never open or a test.\n   */\n  autoFetch?: boolean\n}\n\n/**\n * One request per system, however many components ask.\n * Module scope, because de-duplication must span composable\n * instances. Two open editors would otherwise fire the same GET.\n */\nconst inFlight = new Map<string, Promise<void>>()\n\nexport const usePermissionConfigActions = (params: PermissionConfigActionsParams) => {\n  const {\n    client,\n    system,\n    entity = PERMISSION_CONFIG_ENTITY,\n    endPoint = PERMISSION_CONFIG_ENDPOINT,\n    autoFetch = true,\n  } = params\n\n  const { showErrorsDefault } = useAlerts()\n  const { useFetchPermissionConfig } = usePermissionConfigApi({ client, system, entity, endPoint })\n  const store = usePermissionConfigStore()\n\n  const entry = computed(() => store.getEntry(system))\n  const permissionConfig = computed(() => entry.value.config)\n  const loadingPermissionConfig = computed(() => entry.value.loading)\n  const isPermissionConfigInitialized = computed(() => entry.value.initialized)\n\n  const runFetch = async () => {\n    store.setLoading(system, true)\n    try {\n      const { execute } = useFetchPermissionConfig()\n      store.setConfig(system, await execute())\n    } catch (error) {\n      showErrorsDefault(error)\n    } finally {\n      // Always, including on failure. Otherwise a down backend leaves the editor's card spinning for the session.\n      store.setLoading(system, false)\n      inFlight.delete(system)\n    }\n  }\n\n  const fetchPermissionConfig = async (force = false) => {\n    if (!force && isPermissionConfigInitialized.value) return\n    const running = inFlight.get(system)\n    if (running) return running\n    const started = runFetch()\n    inFlight.set(system, started)\n    return started\n  }\n\n  const { currentLanguageCode } = useLanguageSettings()\n\n  /**\n   * Falls back to the raw key, which the admins rely on.\n   * The ACL vocabulary lives in the backend yaml, not in front-end i18n, so\n   * an untranslated action shows as `weather_location_ui`, not a blank cell.\n   */\n  const translatePermission = (group: PermissionTranslationGroup, key: string): string => {\n    const translated = objectGetValueByPath(\n      permissionConfig.value.translation,\n      group + '.' + key + '.' + currentLanguageCode.value\n    )\n\n    return translated ?? key\n  }\n\n  if (autoFetch) void fetchPermissionConfig()\n\n  return {\n    permissionConfig,\n    loadingPermissionConfig,\n    isPermissionConfigInitialized,\n    fetchPermissionConfig,\n    translatePermission,\n    resetPermissionConfig: () => store.resetSystem(system),\n  }\n}\n"],"mappings":";;;;;;;AA+BA,IAAMA,oBAAW,IAAI,IAA2B,GAEnCC,KAA8B,MAA0C;CACnF,IAAM,EACJ,WACA,WACA,YAASC,GACT,cAAWC,GACX,eAAY,OACVC,GAEE,EAAE,yBAAsBC,EAAU,GAClC,EAAE,gCAA6BC,EAAuB;EAAE;EAAQ;EAAQ;EAAQ;CAAS,CAAC,GAC1FC,IAAQC,EAAyB,GAEjCC,IAAQC,QAAeH,EAAM,SAASI,CAAM,CAAC,GAC7CC,IAAmBF,QAAeD,EAAM,MAAM,MAAM,GACpDI,IAA0BH,QAAeD,EAAM,MAAM,OAAO,GAC5DK,IAAgCJ,QAAeD,EAAM,MAAM,WAAW,GAEtEM,IAAW,YAAY;EAC3B,EAAM,WAAWJ,GAAQ,EAAI;EAC7B,IAAI;GACF,IAAM,EAAE,eAAYK,EAAyB;GAC7C,EAAM,UAAUL,GAAQ,MAAMM,EAAQ,CAAC;EACzC,SAASC,GAAO;GACd,EAAkBA,CAAK;EACzB,UAAU;GAGR,AADAX,EAAM,WAAWI,GAAQ,EAAK,GAC9BX,EAAS,OAAOW,CAAM;EACxB;CACF,GAEMQ,IAAwB,OAAO,IAAQ,OAAU;EACrD,IAAI,CAACC,KAASN,EAA8B,OAAO;EACnD,IAAMO,IAAUrB,EAAS,IAAIW,CAAM;EACnC,IAAIU,GAAS,OAAOA;EACpB,IAAMC,IAAUP,EAAS;EAEzB,OADAf,EAAS,IAAIW,GAAQW,CAAO,GACrBA;CACT,GAEM,EAAE,2BAAwBC,EAAoB;CAkBpD,OAFIC,KAAWL,EAA2B,GAEnC;EACL;EACA;EACA;EACA;EACA,sBAhB2B,GAAmC,MAC3CM,EACjBb,EAAiB,MAAM,aACvBc,IAAQ,MAAMC,IAAM,MAAMC,EAAoB,KAGzC,KAAcD;EAWrB,6BAA6BpB,EAAM,YAAYI,CAAM;CACvD;AACF"}

package/dist/domains/permission/config/factory/PermissionConfigFactory.js

@@ -1,4 +1,4 @@
-//#region src/domains/permission/config/factory/PermissionConfigFactory.ts
+// src/domains/permission/config/factory/PermissionConfigFactory.ts
 function e() {
 	return { createPermissionConfig: () => ({
 		config: {},
@@ -11,7 +11,6 @@ function e() {
 		}
 	}) };
 }
-//#endregion
 export { e as usePermissionConfigFactory };
 
 //# sourceMappingURL=PermissionConfigFactory.js.map

package/dist/domains/permission/config/store/permissionConfigStore.d.ts

@@ -1,9 +1,7 @@
 import { PermissionConfig } from '../types/PermissionConfig';
 /**
- * One entry per system. The admins this replaces kept `loading` and `initialized` as two module
- * booleans shared by every system they fetched, which is wrong the moment the fetches run in
- * parallel: the first one to finish cleared the flag for all of them, and the first one to fail
- * left it set forever because there was no `finally`.
+ * One entry per system. Shared `loading` and `initialized` flags break with parallel fetches.
+ * The first fetch to finish would clear the flag for all, and a failure without `finally` would leave it set forever.
  */
 export interface PermissionConfigEntry {
     config: PermissionConfig;

package/dist/domains/permission/config/store/permissionConfigStore.js

@@ -1,7 +1,7 @@
 import { usePermissionConfigFactory as e } from "../factory/PermissionConfigFactory.js";
 import { ref as t } from "vue";
 import { defineStore as n } from "pinia";
-//#region src/domains/permission/config/store/permissionConfigStore.ts
+// src/domains/permission/config/store/permissionConfigStore.ts
 var r = n("commonAdminPermissionConfigStore", () => {
 	let { createPermissionConfig: n } = e(), r = t(/* @__PURE__ */ new Map()), i = () => ({
 		config: n(),
@@ -41,7 +41,6 @@ var r = n("commonAdminPermissionConfigStore", () => {
 		reset: l
 	};
 });
-//#endregion
 export { r as usePermissionConfigStore };
 
 //# sourceMappingURL=permissionConfigStore.js.map