@arcblock/did-connect-service 4.1.11 → 4.1.13

package/dist/access/change-role.js

@@ -0,0 +1,52 @@
+const ROLE_LEVEL = { owner: 3, admin: 2, member: 1, guest: 0 };
+const ASSIGNABLE_ROLES = new Set(["admin", "member", "guest"]);
+export async function changeMembershipRole(params) {
+    const { store, instanceDid, callerDid, callerRole, targetDid, newRole, ip } = params;
+    if (!newRole || !ASSIGNABLE_ROLES.has(newRole)) {
+        return {
+            ok: false,
+            status: 400,
+            code: "VALIDATION_ERROR",
+            message: "Invalid role. Must be 'admin', 'member', or 'guest'",
+        };
+    }
+    if (targetDid === callerDid) {
+        return { ok: false, status: 409, code: "CONFLICT", message: "Cannot change your own role" };
+    }
+    // Only owner can assign admin role
+    if (newRole === "admin" && callerRole !== "owner") {
+        return {
+            ok: false,
+            status: 403,
+            code: "FORBIDDEN",
+            message: "Only the owner can assign admin role",
+        };
+    }
+    const membership = await store.getMembership(targetDid, instanceDid);
+    if (!membership) {
+        return { ok: false, status: 404, code: "NOT_FOUND", message: "Member not found" };
+    }
+    const oldRole = membership.role;
+    const callerLevel = ROLE_LEVEL[callerRole] ?? 0;
+    const targetLevel = ROLE_LEVEL[oldRole] ?? 0;
+    // Cannot modify someone at same or higher level (admin can't change admin/owner)
+    if (targetLevel >= callerLevel) {
+        return {
+            ok: false,
+            status: 403,
+            code: "FORBIDDEN",
+            message: "Cannot change the role of a member with equal or higher privileges",
+        };
+    }
+    await store.updateMembershipRole(targetDid, instanceDid, newRole, callerDid);
+    await store.createAuditLog({
+        action: "user.role_change",
+        operatorDid: callerDid,
+        targetDid,
+        metadata: { oldRole, newRole },
+        ip,
+        instanceDid,
+    });
+    return { ok: true, oldRole };
+}
+//# sourceMappingURL=change-role.js.map

package/dist/access/change-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-role.js","sourceRoot":"","sources":["../../src/access/change-role.ts"],"names":[],"mappings":"AAwBA,MAAM,UAAU,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACvF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAqB/D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAErF,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,qDAAqD;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IAC9F,CAAC;IAED,mCAAmC;IACnC,IAAI,OAAO,KAAK,OAAO,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,sCAAsC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC;IAChC,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7C,iFAAiF;IACjF,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oEAAoE;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,kBAAkB;QAC1B,WAAW,EAAE,SAAS;QACtB,SAAS;QACT,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;QAC9B,EAAE;QACF,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}