@aristid/leav-types 1.6.0-dce6fd17 → 1.6.0-f3020e13

package/apps/core/config/default.d.ts

@@ -128,6 +128,7 @@ export declare namespace permissions {
     let enableCache_1: boolean;
     export { enableCache_1 as enableCache };
     export let enableAccessRecordByDefaultBackendFilter: boolean;
+    export let enableAttributeDependentValuesPermissions: boolean;
 }
 export declare namespace amqp {
     namespace connOpt {

package/apps/core/src/__tests__/e2e/api/_fixtures/fakeplugin/index.d.ts

@@ -1,7 +1,11 @@
 import { type i18n } from 'i18next';
 import { type IPluginInitModule } from '_types/plugin';
+import { type IValueRepo } from '../../../../../infra/value/valueRepo';
+import { type IAttributeDomain } from '../../../../../domain/attribute/attributeDomain';
 interface IDeps {
     translator: i18n;
+    'core.infra.value': IValueRepo;
+    'core.domain.attribute': IAttributeDomain;
 }
-export default function ({ translator }: IDeps): IPluginInitModule;
+export default function ({ translator, 'core.infra.value': valueRepo, 'core.domain.attribute': attributeDomain, }: IDeps): IPluginInitModule;
 export {};

package/apps/core/src/__tests__/e2e/api/e2eUtils.d.ts

@@ -5,12 +5,13 @@ import FormData from 'form-data';
 import { type ActionsListConfig } from '_types/actionsList';
 import { type ITreeElement } from '_types/tree';
 import { AttributeFormats, type AttributeTypes, type IAttributeVersionsConf, type IEmbeddedAttribute } from '../../../_types/attribute';
+import { type ITreePermissionsDependentValuesConf } from '_types/permissions';
 export interface IGlobalThis {
     guestUser: IE2EUserParams;
     nonAdminUser: IE2EUserParams;
     nonAdminGroupId: string;
 }
-interface IE2EUser {
+export interface IE2EUser {
     userId: string;
     getAuthToken: () => Promise<string>;
 }
@@ -51,6 +52,7 @@ export declare function gqlSaveAttribute(params: {
     unique?: boolean;
     actionsList?: ActionsListConfig;
     required?: boolean;
+    permissions_conf_dependent_values?: ITreePermissionsDependentValuesConf;
 }): Promise<any>;
 export declare function gqlSaveTree(id: string, label: string, libraries: string[]): Promise<any>;
 export declare function gqlCreateRecord(library: string): Promise<string>;
@@ -63,6 +65,7 @@ export declare function gqlCreateRecord(library: string): Promise<string>;
  * @return Node ID
  */
 export declare function gqlAddElemToTree(treeId: string, element: ITreeElement, parent?: string | null, order?: number): Promise<string>;
+export declare function gqlGetValue(libraryId: string, recordId: string, attributeId: string): Promise<any>;
 export declare function gqlSaveValue(attributeId: string, libraryId: string, recordId: string, value: string | number): Promise<void>;
 export declare function gqlSaveVersionProfile(profileId: string, label: string, trees: string[]): Promise<void>;
 /**

package/apps/core/src/__tests__/e2e/api/task/tasksAdminPermissions.test.d.ts

@@ -0,0 +1 @@
+export {};

package/apps/core/src/__tests__/e2e/api/taskUtils.d.ts

@@ -0,0 +1,4 @@
+import { type ITask, TaskStatus } from '../../../_types/tasksManager';
+export declare function getTask(taskId: string): Promise<ITask>;
+export declare function waitForTaskCompletion(id: string, timeout?: number, interval?: number): Promise<ITask>;
+export declare function waitForTaskCompletedWithStatus(taskId: string, expectedStatus: TaskStatus.DONE | TaskStatus.FAILED): Promise<ITask>;

package/apps/core/src/__tests__/e2e/api/trees/treeNodeChildrenQuery.test.d.ts

@@ -0,0 +1 @@
+export {};

package/apps/core/src/__tests__/integration/infra/integrationTestRepoUtils.d.ts

@@ -1,7 +1,9 @@
 import { type ILibraryRepo } from 'infra/library/libraryRepo';
+import { type IPermissionRepo } from 'infra/permission/permissionRepo';
 import { type IRecordRepo } from 'infra/record/recordRepo';
 import { type ITreeRepo } from 'infra/tree/treeRepo';
 export declare const getLibraryRepo: () => ILibraryRepo;
 export declare const getRecordRepo: () => IRecordRepo;
 export declare const getTreeRepo: () => ITreeRepo;
+export declare const getPermissionRepo: () => IPermissionRepo;
 export * from '../integrationTestUtils';

package/apps/core/src/__tests__/integration/infra/permissionRepo.test.d.ts

@@ -0,0 +1 @@
+export {};

package/apps/core/src/__tests__/mocks/attribute.d.ts

@@ -33,6 +33,7 @@ export declare const mockAttrTree: {
     settings?: import("../../_types/shared").IKeyValue<any>;
     multi_link_display_option?: MultiDisplayOption;
     multi_tree_display_option?: MultiDisplayOption;
+    permissions_conf_dependent_values?: import("../../_types/permissions").ITreePermissionsDependentValuesConf;
     label?: import("../../_types/systemTranslation").ISystemTranslation | string;
 };
 export declare const mockAttrTreeVersionable: IAttribute;

package/apps/core/src/_types/actionsList.d.ts

@@ -5,7 +5,9 @@ import { type IValue } from './value';
 import { type Errors } from './errors';
 export declare enum ActionsListEvents {
     SAVE_VALUE = "saveValue",
+    POST_SAVE_VALUE = "postSaveValue",
     DELETE_VALUE = "deleteValue",
+    POST_DELETE_VALUE = "postDeleteValue",
     GET_VALUE = "getValue"
 }
 export declare enum ActionsListIOTypes {

package/apps/core/src/_types/attribute.d.ts

@@ -1,5 +1,5 @@
 import { type ActionsListEvents, type ActionsListIOTypes, type ActionsListConfig } from './actionsList';
-import { type ITreePermissionsConf } from './permissions';
+import { type ITreePermissionsDependentValuesConf, type ITreePermissionsConf } from './permissions';
 import { type IQueryInfos } from './queryInfos';
 import { type IRecord } from './record';
 import { type IGetCoreEntitiesParams, type IKeyValue } from './shared';
@@ -28,6 +28,10 @@ export interface IAttribute extends ICoreEntity {
     settings?: IKeyValue<any>;
     multi_link_display_option?: MultiDisplayOption;
     multi_tree_display_option?: MultiDisplayOption;
+    /**
+     * only for tree attribute
+     */
+    permissions_conf_dependent_values?: ITreePermissionsDependentValuesConf;
 }
 export declare enum ValueVersionMode {
     SIMPLE = "simple",

package/apps/core/src/_types/config.d.ts

@@ -1,6 +1,6 @@
 import { type Options } from 'amqplib';
 import { type IKeyValue } from './shared';
-import { type PermissionsActions, type AdminPermissionsActions, type ApplicationPermissionsActions, type AttributePermissionsActions, type LibraryPermissionsActions, type PermissionTypes, type RecordAttributePermissionsActions, type RecordPermissionsActions, type TreeNodePermissionsActions, type TreePermissionsActions } from './permissions';
+import { type PermissionsActions, type AdminPermissionsActions, type ApplicationPermissionsActions, type AttributePermissionsActions, type LibraryPermissionsActions, type PermissionTypes, type RecordAttributePermissionsActions, type RecordPermissionsActions, type TreeNodePermissionsActions, type TreePermissionsActions, type AttributeDependentValuesPermissionsActions } from './permissions';
 export interface IConfig {
     coreMode: CoreMode;
     server: IServer;
@@ -158,6 +158,7 @@ interface IPermissionsByTypesAndActions {
     [PermissionTypes.ADMIN]?: IPermissionsByActions<AdminPermissionsActions>;
     [PermissionTypes.APPLICATION]?: IPermissionsByActions<ApplicationPermissionsActions>;
     [PermissionTypes.ATTRIBUTE]?: IPermissionsByActions<AttributePermissionsActions>;
+    [PermissionTypes.ATTRIBUTE_DEPENDENT_VALUES]?: IPermissionsByActions<AttributeDependentValuesPermissionsActions>;
     [PermissionTypes.LIBRARY]?: IPermissionsByActions<LibraryPermissionsActions>;
     [PermissionTypes.RECORD]?: IPermissionsByActions<RecordPermissionsActions>;
     [PermissionTypes.RECORD_ATTRIBUTE]?: IPermissionsByActions<RecordAttributePermissionsActions>;
@@ -170,6 +171,7 @@ export interface IPermissions {
     adminGroup: IPermissionsByTypesAndActions;
     enableCache: boolean;
     enableAccessRecordByDefaultBackendFilter: boolean;
+    enableAttributeDependentValuesPermissions: boolean;
 }
 export interface IAmqp {
     connOpt: Options.Connect;

package/apps/core/src/_types/errors.d.ts

@@ -8,6 +8,7 @@ export declare enum Errors {
     ATTRIBUTE_USED_BY_LIBRARY = "ATTRIBUTE_USED_BY_LIBRARY",
     ATTRIBUTE_USED_IN_METADATA = "ATTRIBUTE_USED_IN_METADATA",
     CANNOT_SAVE_METADATA = "CANNOT_SAVE_METADATA",
+    CANNOT_SAVE_PERMISSIONS_DEPENDENT_VALUES = "CANNOT_SAVE_PERMISSIONS_DEPENDENT_VALUES",
     DUPLICATE_DIRECTORY_NAMES = "DUPLICATE_DIRECTORY_NAMES",
     DUPLICATE_FILENAMES = "DUPLICATE_FILENAMES",
     ELEMENT_ALREADY_PRESENT = "ELEMENT_ALREADY_PRESENT",

package/apps/core/src/_types/permissions.d.ts

@@ -5,6 +5,7 @@ export declare enum PermissionTypes {
     ADMIN = "admin",
     LIBRARY = "library",
     ATTRIBUTE = "attribute",
+    ATTRIBUTE_DEPENDENT_VALUES = "attribute_dependent_values",
     TREE = "tree",
     TREE_NODE = "tree_node",
     TREE_LIBRARY = "tree_library",
@@ -33,14 +34,18 @@ export declare enum AttributePermissionsActions {
     ACCESS_ATTRIBUTE = "access_attribute",
     EDIT_VALUE = "edit_value"
 }
+export declare enum AttributeDependentValuesPermissionsActions {
+    SET_VALUE = "set_value"
+}
 export declare enum TreePermissionsActions {
     ACCESS_TREE = "access_tree",
-    EDIT_CHILDREN = "edit_children"
+    EDIT_CHILDREN = "edit_children",
+    DETACH = "detach"
 }
 export declare enum TreeNodePermissionsActions {
     ACCESS_TREE = "access_tree",
-    DETACH = "detach",
-    EDIT_CHILDREN = "edit_children"
+    EDIT_CHILDREN = "edit_children",
+    DETACH = "detach"
 }
 export declare enum ApplicationPermissionsActions {
     ADMIN_APPLICATION = "admin_application",
@@ -81,7 +86,7 @@ export declare enum AdminPermissionsActions {
     ACCESS_LOGS = "admin_access_logs",
     IMPORT_CONFIG_CLEAR_DATABASE = "admin_import_config_clear_database"
 }
-export type PermissionsActions = LibraryPermissionsActions | RecordPermissionsActions | RecordAttributePermissionsActions | AdminPermissionsActions | AttributePermissionsActions | TreePermissionsActions | TreeNodePermissionsActions | ApplicationPermissionsActions;
+export type PermissionsActions = LibraryPermissionsActions | RecordPermissionsActions | RecordAttributePermissionsActions | AdminPermissionsActions | AttributePermissionsActions | AttributeDependentValuesPermissionsActions | TreePermissionsActions | TreeNodePermissionsActions | ApplicationPermissionsActions;
 export interface ILabeledPermissionsAction {
     label: ISystemTranslation;
     name: PermissionsActions | string;
@@ -103,6 +108,12 @@ export interface ITreePermissionsConf {
      */
     relation: PermissionsRelations;
 }
+export interface ITreePermissionsDependentValuesConf {
+    /**
+     * IDs of attributes used for permissions
+     */
+    dependenciesTreeAttributes: string[];
+}
 export interface IPermissionsTreeTarget {
     /**
      * Tree ID
@@ -113,6 +124,9 @@ export interface IPermissionsTreeTarget {
      */
     nodeId: string | null;
 }
+export interface IPermissionsDependenciesTreeTarget extends IPermissionsTreeTarget {
+    attributeId: string;
+}
 export interface IPermission {
     /**
      * Permission type
@@ -135,6 +149,12 @@ export interface IPermission {
     };
     /**
      * What element on permissions tree is concerned by this permission
+     * In case of type PermissionTypes.ATTRIBUTE_DEPENDENT_VALUES, this is the value tree target
      */
     permissionTreeTarget?: IPermissionsTreeTarget;
+    /**
+     * For dependent values tree attribute permissions, the list of attributes on which this permission depends
+     * Only for PermissionTypes.ATTRIBUTE_DEPENDENT_VALUES
+     */
+    dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
 }

package/apps/core/src/app/core/libraryApp/libraryApp.d.ts

@@ -6,6 +6,7 @@ import { type ITreeDomain } from 'domain/tree/treeDomain';
 import { type IViewDomain } from 'domain/view/viewDomain';
 import { type IGraphqlAppModule, type IGraphqlApp } from '../../graphql/graphqlApp';
 import { type ICoreApp } from '../coreApp';
+import { type IExportProfileDomain } from 'domain/export/exportProfileDomain';
 export type ICoreLibraryApp = IGraphqlAppModule;
 interface IDeps {
     'core.domain.library'?: ILibraryDomain;
@@ -14,8 +15,9 @@ interface IDeps {
     'core.domain.tree'?: ITreeDomain;
     'core.domain.view'?: IViewDomain;
     'core.domain.permission'?: IPermissionDomain;
+    'core.domain.export.exportProfile'?: IExportProfileDomain;
     'core.app.graphql'?: IGraphqlApp;
     'core.app.core'?: ICoreApp;
 }
-export default function ({ 'core.domain.library': libraryDomain, 'core.domain.record': recordDomain, 'core.domain.attribute': attributeDomain, 'core.domain.tree': treeDomain, 'core.domain.view': viewDomain, 'core.domain.permission': permissionDomain, 'core.app.graphql': graphqlApp, 'core.app.core': coreApp, }?: IDeps): ICoreLibraryApp;
+export default function ({ 'core.domain.library': libraryDomain, 'core.domain.record': recordDomain, 'core.domain.attribute': attributeDomain, 'core.domain.tree': treeDomain, 'core.domain.view': viewDomain, 'core.domain.permission': permissionDomain, 'core.domain.export.exportProfile': exportProfileDomain, 'core.app.graphql': graphqlApp, 'core.app.core': coreApp, }?: IDeps): ICoreLibraryApp;
 export {};

package/apps/core/src/app/core/permissionApp/_types.d.ts

@@ -1,8 +1,9 @@
-import { type IPermissionsTreeTarget, type PermissionsActions, type PermissionTypes } from '_types/permissions';
+import { type IPermissionsDependenciesTreeTarget, type IPermissionsTreeTarget, type PermissionsActions, type PermissionTypes } from '_types/permissions';
 export interface IInheritedPermissionsQueryParams {
     type: PermissionTypes;
     applyTo: string;
     actions: PermissionsActions[];
     userGroupNodeId: string;
     permissionTreeTarget: IPermissionsTreeTarget;
+    dependenciesTreeTargets: IPermissionsDependenciesTreeTarget[];
 }

package/apps/core/src/app/core/treeApp/treeApp.d.ts

@@ -7,6 +7,7 @@ import { type IGraphqlAppModule, type IGraphqlApp } from '../../graphql/graphqlA
 import { type ICoreApp } from '../coreApp';
 import { type ICoreSubscriptionsHelpersApp } from '../helpers/subscriptions';
 import { type IRecordPermissionDomain } from '../../../domain/permission/recordPermissionDomain';
+import { type IAttributeDependentValuesPermissionDomain } from 'domain/permission/attributeDependentValuesPermissionDomain';
 export type ITreeAttributeApp = IGraphqlAppModule;
 interface IDeps {
     'core.domain.tree': ITreeDomain;
@@ -18,6 +19,7 @@ interface IDeps {
     'core.app.core.subscriptionsHelper': ICoreSubscriptionsHelpersApp;
     'core.domain.library': ILibraryDomain;
     'core.domain.permission.record': IRecordPermissionDomain;
+    'core.domain.permission.attributeDependentValues': IAttributeDependentValuesPermissionDomain;
 }
-export default function ({ 'core.domain.tree': treeDomain, 'core.domain.attribute': attributeDomain, 'core.domain.permission': permissionDomain, 'core.domain.eventsManager': eventsManagerDomain, 'core.app.core': coreApp, 'core.app.graphql': graphqlApp, 'core.app.core.subscriptionsHelper': subscriptionsHelper, 'core.domain.library': libraryDomain, 'core.domain.permission.record': recordPermissionDomain, }: IDeps): ITreeAttributeApp;
+export default function ({ 'core.domain.tree': treeDomain, 'core.domain.attribute': attributeDomain, 'core.domain.permission': permissionDomain, 'core.domain.eventsManager': eventsManagerDomain, 'core.app.core': coreApp, 'core.app.graphql': graphqlApp, 'core.app.core.subscriptionsHelper': subscriptionsHelper, 'core.domain.library': libraryDomain, 'core.domain.permission.record': recordPermissionDomain, 'core.domain.permission.attributeDependentValues': attributeDependentValuesPermissionDomain, }: IDeps): ITreeAttributeApp;
 export {};

package/apps/core/src/domain/attribute/helpers/attributeALHelper.d.ts

@@ -1,6 +1,7 @@
 import { type IUtils } from 'utils/utils';
 import { type ActionsListConfig } from '../../../_types/actionsList';
 import { type IAttribute, type IOAllowedTypes } from '../../../_types/attribute';
-export declare const getAllowedInputTypes: (attribute: IAttribute) => IOAllowedTypes;
+declare const getAllowedInputTypes: (attribute: IAttribute) => IOAllowedTypes;
+export default getAllowedInputTypes;
 export declare const getAllowedOutputTypes: (attribute: IAttribute) => IOAllowedTypes;
 export declare const getActionsListToSave: (attrDataToSave: IAttribute, existingAttrData: IAttribute, newAttr: boolean, utils: IUtils) => ActionsListConfig;

package/apps/core/src/domain/export/exportProfileDomain.d.ts

@@ -1,23 +1,33 @@
 import { type ILibraryDomain } from '../library/libraryDomain';
 import { type IQueryInfos } from '../../_types/queryInfos';
+import { type IAttributeDomain } from 'domain/attribute/attributeDomain';
+import { type IConfig } from '_types/config';
+export interface IExportProfileColumn {
+    columnLabel: string;
+    attribute: string;
+}
+export interface IExportProfile {
+    label: string;
+    columns: IExportProfileColumn[];
+    error?: {
+        message: string;
+    };
+}
 export interface IExportProfileConfig {
     defaultProfile: string;
-    profiles: Array<{
-        label: string;
-        columns: Array<{
-            columnLabel: string;
-            attribute: string;
-        }>;
-    }>;
+    profiles: IExportProfile[];
 }
 export interface IExportColumn {
     columnLabel: string;
     attribute: string;
 }
 export interface IExportProfileDomain {
+    getExportProfileConfig(libraryId: string, ctx: IQueryInfos): Promise<IExportProfileConfig | null>;
     getColumnsFromProfileConfig(profile: string | undefined, library: string, ctx: IQueryInfos): Promise<IExportColumn[]>;
 }
 export interface IExportProfileDomainDeps {
     'core.domain.library': ILibraryDomain;
+    'core.domain.attribute': IAttributeDomain;
+    config: IConfig;
 }
-export default function ({ 'core.domain.library': libraryDomain }: IExportProfileDomainDeps): IExportProfileDomain;
+export default function ({ 'core.domain.library': libraryDomain, 'core.domain.attribute': attributeDomain, config, }: IExportProfileDomainDeps): IExportProfileDomain;

package/apps/core/src/domain/form/helpers/getElementValues.d.ts

@@ -1,6 +1,5 @@
 import { type IRecordDomain } from 'domain/record/recordDomain';
 import { type IUtils } from 'utils/utils';
-import { type ILogger } from '@leav/logger';
 import { type IQueryInfos } from '_types/queryInfos';
 import { type IValue, type IValueVersion } from '_types/value';
 import { type IFormElement } from '../../../_types/forms';
@@ -12,7 +11,6 @@ export declare const getElementValues: (params: {
     deps: {
         "core.domain.record"?: IRecordDomain;
         "core.utils"?: IUtils;
-        "core.utils.logger"?: ILogger;
     };
     ctx: IQueryInfos;
 }) => Promise<{

package/apps/core/src/domain/permission/_types.d.ts

@@ -1,4 +1,4 @@
-import { type AdminPermissionsActions, type ApplicationPermissionsActions, type AttributePermissionsActions, type IPermissionsTreeTarget, type ITreePermissionsConf, type LibraryPermissionsActions, type PermissionsActions, type PermissionTypes, type RecordAttributePermissionsActions, type RecordPermissionsActions, type TreeNodePermissionsActions, type TreePermissionsActions } from '_types/permissions';
+import { type IPermissionsDependenciesTreeTarget, type AdminPermissionsActions, type ApplicationPermissionsActions, type AttributePermissionsActions, type IPermissionsTreeTarget, type ITreePermissionsConf, type LibraryPermissionsActions, type PermissionsActions, type PermissionTypes, type RecordAttributePermissionsActions, type RecordPermissionsActions, type TreeNodePermissionsActions, type TreePermissionsActions } from '_types/permissions';
 import { type IQueryInfos } from '_types/queryInfos';
 import { type IGetDefaultPermissionParams } from './helpers/defaultPermission';
 export declare const PERMISSIONS_CACHE_HEADER = "permissions";
@@ -15,6 +15,7 @@ export interface IGetSimplePermissionsParams {
     action: PermissionsActions;
     usersGroupNodeId: string;
     permissionTreeTarget?: IPermissionsTreeTarget;
+    dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
     ctx: IQueryInfos;
 }
 export interface IGetPermissionsByActionsParams {
@@ -23,6 +24,7 @@ export interface IGetPermissionsByActionsParams {
     actions: PermissionsActions[];
     usersGroupNodeId: string;
     permissionTreeTarget?: IPermissionsTreeTarget;
+    dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
     ctx: IQueryInfos;
 }
 export type PermByActionsRes = {
@@ -121,6 +123,7 @@ export interface IGetInheritedPermissionsParams {
     action: PermissionsActions;
     userGroupId: string;
     permissionTreeTarget?: IPermissionsTreeTarget;
+    dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
     ctx: IQueryInfos;
 }
 export interface IIsAllowedParams {

package/apps/core/src/domain/permission/attributeDependentValuesPermissionDomain.d.ts

@@ -0,0 +1,35 @@
+import { type IQueryInfos } from '_types/queryInfos';
+import { type IValueRepo } from 'infra/value/valueRepo';
+import { type AttributeDependentValuesPermissionsActions, type IPermissionsDependenciesTreeTarget, type IPermissionsTreeTarget } from '../../_types/permissions';
+import { type IAttributeDomain } from '../attribute/attributeDomain';
+import { type IPermissionByUserGroupsHelper } from './helpers/permissionByUserGroups';
+import { type IElementAncestorsHelper } from 'domain/tree/helpers/elementAncestors';
+import { type IDefaultPermissionHelper } from './helpers/defaultPermission';
+import { type IConfig } from '_types/config';
+export interface IAttributeDependentValuesPermissionDomain {
+    getAttributeDependentValuesPermission(params: {
+        action: AttributeDependentValuesPermissionsActions;
+        attributeId: string;
+        recordLibrary: string;
+        recordId: string;
+        valueNodeId: string;
+        ctx: IQueryInfos;
+    }): Promise<boolean>;
+    getInheritedAttributeDependentValuesPermission(params: {
+        action: AttributeDependentValuesPermissionsActions;
+        attributeId: string;
+        userGroupId: string;
+        permissionTreeTarget: IPermissionsTreeTarget;
+        dependenciesTreeTargets: IPermissionsDependenciesTreeTarget[];
+        ctx: IQueryInfos;
+    }): Promise<boolean>;
+}
+export interface IRecordAttributePermissionDomainDeps {
+    'core.domain.permission.helpers.permissionByUserGroups': IPermissionByUserGroupsHelper;
+    'core.domain.permission.helpers.defaultPermission': IDefaultPermissionHelper;
+    'core.domain.attribute': IAttributeDomain;
+    'core.domain.tree.helpers.elementAncestors': IElementAncestorsHelper;
+    'core.infra.value': IValueRepo;
+    config: IConfig;
+}
+export default function (deps: IRecordAttributePermissionDomainDeps): IAttributeDependentValuesPermissionDomain;

package/apps/core/src/domain/permission/helpers/permissionByUserGroups.d.ts

@@ -2,7 +2,7 @@ import { type IReducePermissionsArrayHelper } from './reducePermissionsArray';
 import { type ISimplePermissionHelper } from './simplePermission';
 import { type IDefaultPermissionHelper } from './defaultPermission';
 import { type TreePath } from '../../../_types/tree';
-import { type PermissionsActions, type PermissionTypes } from '../../../_types/permissions';
+import { PermissionTypes, type IPermissionsDependenciesTreeTarget, type PermissionsActions } from '../../../_types/permissions';
 import { type IQueryInfos } from '../../../_types/queryInfos';
 import { type ICachesService } from '../../../infra/cache/cacheService';
 import { type IConfig } from '_types/config';
@@ -23,6 +23,7 @@ interface IGetPermissionByUserGroupsParams {
         tree: string;
         path: TreePath;
     };
+    dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
     getDefaultGlobalPermission?: GetDefaultGlobalPermission;
     ctx: IQueryInfos;
 }

package/apps/core/src/domain/permission/index.d.ts

@@ -1,6 +1,7 @@
 export { default as admin } from './adminPermissionDomain';
 export { default as application } from './applicationPermissionDomain';
 export { default as attribute } from './attributePermissionDomain';
+export { default as attributeDependentValues } from './attributeDependentValuesPermissionDomain';
 export { default as library } from './libraryPermissionDomain';
 export { default } from './permissionDomain';
 export { default as recordAttribute } from './recordAttributePermissionDomain';

package/apps/core/src/domain/permission/permissionDomain.d.ts

@@ -8,6 +8,7 @@ import { type ILabeledPermissionsAction, type IPermission, PermissionTypes } fro
 import { type IAdminPermissionDomain } from './adminPermissionDomain';
 import { type IApplicationPermissionDomain } from './applicationPermissionDomain';
 import { type IAttributePermissionDomain } from './attributePermissionDomain';
+import { type IAttributeDependentValuesPermissionDomain } from './attributeDependentValuesPermissionDomain';
 import { type ILibraryPermissionDomain } from './libraryPermissionDomain';
 import { type IRecordAttributePermissionDomain } from './recordAttributePermissionDomain';
 import { type IRecordPermissionDomain } from './recordPermissionDomain';
@@ -18,11 +19,11 @@ import { type IGetActionsByTypeParams, type IGetInheritedPermissionsParams, type
 import { type IDefaultPermissionHelper } from './helpers/defaultPermission';
 export interface IPermissionDomain {
     savePermission(permData: IPermission, ctx: IQueryInfos): Promise<IPermission>;
-    getPermissionsByActions({ type, applyTo, actions, usersGroupNodeId, permissionTreeTarget, ctx, }: IGetPermissionsByActionsParams): Promise<PermByActionsRes>;
+    getPermissionsByActions({ type, applyTo, actions, usersGroupNodeId, permissionTreeTarget, dependenciesTreeTargets, ctx, }: IGetPermissionsByActionsParams): Promise<PermByActionsRes>;
     /**
      * Retrieve herited permission: ignore permission defined on given element, force retrieval of herited permission
      */
-    getInheritedPermissions({ type, applyTo, action, userGroupId, permissionTreeTarget, ctx, }: IGetInheritedPermissionsParams): Promise<boolean>;
+    getInheritedPermissions({ type, applyTo, action, userGroupId, permissionTreeTarget, dependenciesTreeTargets, ctx, }: IGetInheritedPermissionsParams): Promise<boolean>;
     isAllowed({ type, action, applyTo, target, ctx }: IIsAllowedParams): Promise<boolean>;
     getActionsByType(params: IGetActionsByTypeParams): Promise<ILabeledPermissionsAction[]>;
     registerActions(type: PermissionTypes, actions: string[], applyOn?: string[]): void;
@@ -33,6 +34,7 @@ export interface IPermissionDomainDeps {
     'core.domain.permission.library': ILibraryPermissionDomain;
     'core.domain.permission.record': IRecordPermissionDomain;
     'core.domain.permission.attribute': IAttributePermissionDomain;
+    'core.domain.permission.attributeDependentValues': IAttributeDependentValuesPermissionDomain;
     'core.domain.permission.recordAttribute': IRecordAttributePermissionDomain;
     'core.domain.permission.tree': ITreePermissionDomain;
     'core.domain.permission.treeNode': ITreeNodePermissionDomain;

package/apps/core/src/domain/tasksManager/tasksManagerDomain.d.ts

@@ -1,6 +1,7 @@
 import { type IAmqpService } from '@leav/message-broker';
 import { type AwilixContainer } from 'awilix';
 import { type IEventsManagerDomain } from 'domain/eventsManager/eventsManagerDomain';
+import { type IAdminPermissionDomain } from 'domain/permission/adminPermissionDomain';
 import { type IUtils } from 'utils/utils';
 import { type ILogger } from '@leav/logger';
 import type * as Config from '_types/config';
@@ -62,9 +63,10 @@ export interface ITasksManagerDomainDeps {
     'core.infra.task': ITaskRepo;
     'core.depsManager': AwilixContainer;
     'core.domain.eventsManager': IEventsManagerDomain;
+    'core.domain.permission.admin': IAdminPermissionDomain;
     'core.utils.logger': ILogger;
     'core.utils': IUtils;
     'core.utils.getSystemQueryContext': GetSystemQueryContext;
 }
-export default function ({ config, 'core.infra.amqpService': amqpService, 'core.infra.task': taskRepo, 'core.depsManager': depsManager, 'core.domain.eventsManager': eventsManager, 'core.utils.logger': logger, 'core.utils': utils, 'core.utils.getSystemQueryContext': getSystemQueryContext, }: ITasksManagerDomainDeps): ITasksManagerDomain;
+export default function ({ config, 'core.infra.amqpService': amqpService, 'core.infra.task': taskRepo, 'core.depsManager': depsManager, 'core.domain.eventsManager': eventsManager, 'core.domain.permission.admin': adminPermissionDomain, 'core.utils.logger': logger, 'core.utils': utils, 'core.utils.getSystemQueryContext': getSystemQueryContext, }: ITasksManagerDomainDeps): ITasksManagerDomain;
 export {};

package/apps/core/src/domain/value/_types.d.ts

@@ -8,6 +8,7 @@ export interface IDeleteValueParams {
     recordId: string;
     attribute: string;
     value?: IValue;
+    skipReadonly?: boolean;
     ctx: IQueryInfos;
 }
 export interface IRunActionListParams {

package/apps/core/src/domain/value/helpers/canSaveRecordValue.d.ts

@@ -1,6 +1,7 @@
+import { type IAttributeDependentValuesPermissionDomain } from 'domain/permission/attributeDependentValuesPermissionDomain';
 import { type IRecordAttributePermissionDomain } from 'domain/permission/recordAttributePermissionDomain';
 import { type IRecordPermissionDomain } from 'domain/permission/recordPermissionDomain';
-import { type IAttribute } from '_types/attribute';
+import { type IAttribute } from '../../../_types/attribute';
 import { type IConfig } from '_types/config';
 import { type IQueryInfos } from '_types/queryInfos';
 import { type IValue } from '_types/value';
@@ -21,6 +22,7 @@ interface ICanSaveRecordValueParams {
     deps: {
         recordPermissionDomain: IRecordPermissionDomain;
         recordAttributePermissionDomain: IRecordAttributePermissionDomain;
+        attributeDependentValuesPermissionDomain: IAttributeDependentValuesPermissionDomain;
         config: IConfig;
     };
 }

package/apps/core/src/domain/value/helpers/postDeleteValue.d.ts

@@ -0,0 +1,28 @@
+import { type IActionsListDomain } from 'domain/actionsList/actionsListDomain';
+import { type IAttributeDomain } from 'domain/attribute/attributeDomain';
+import { type IUtils } from 'utils/utils';
+import { type IAttribute } from '_types/attribute';
+import { type IQueryInfos } from '_types/queryInfos';
+import { type IValue } from '_types/value';
+/**
+ * Parameters for post-delete value processing.
+ */
+interface IPostDeleteValueParams {
+    libraryId: string;
+    recordId: string;
+    attribute: IAttribute;
+    value: IValue;
+    ctx: IQueryInfos;
+    deps: {
+        actionsListDomain: IActionsListDomain;
+        attributeDomain: IAttributeDomain;
+        utils: IUtils;
+    };
+}
+/**
+ * Executes post-delete action lists on deleted value
+ * Action lists can perform side effects
+ * Unlike pre-delete value actions, this runs AFTER the value is persisted to the database.
+ */
+declare const postDeleteValue: (params: IPostDeleteValueParams) => Promise<void>;
+export default postDeleteValue;

package/apps/core/src/domain/value/helpers/postSaveValue.d.ts

@@ -0,0 +1,28 @@
+import { type IActionsListDomain } from 'domain/actionsList/actionsListDomain';
+import { type IAttributeDomain } from 'domain/attribute/attributeDomain';
+import { type IUtils } from 'utils/utils';
+import { type IAttribute } from '_types/attribute';
+import { type IQueryInfos } from '_types/queryInfos';
+import { type IValue } from '_types/value';
+/**
+ * Parameters for post-save value processing.
+ */
+interface IPostSaveValueParams {
+    libraryId: string;
+    recordId: string;
+    attribute: IAttribute;
+    value: IValue;
+    ctx: IQueryInfos;
+    deps: {
+        actionsListDomain: IActionsListDomain;
+        attributeDomain: IAttributeDomain;
+        utils: IUtils;
+    };
+}
+/**
+ * Executes post-save action lists on saved value
+ * Action lists can perform side effects
+ * Unlike pre-save value actions, this runs AFTER the value is persisted to the database.
+ */
+declare const postSaveValue: (params: IPostSaveValueParams) => Promise<void>;
+export default postSaveValue;

package/apps/core/src/domain/value/valueDomain.d.ts

@@ -18,6 +18,7 @@ import { type IValueVersion, type ISaveValue, type IValue, type IValuesOptions,
 import { type IActionsListDomain } from '../actionsList/actionsListDomain';
 import { type IAttributeDomain } from '../attribute/attributeDomain';
 import { type IValidateHelper } from '../helpers/validate';
+import { type IAttributeDependentValuesPermissionDomain } from 'domain/permission/attributeDependentValuesPermissionDomain';
 import { type IRecordAttributePermissionDomain } from '../permission/recordAttributePermissionDomain';
 import { type IRecordPermissionDomain } from '../permission/recordPermissionDomain';
 import { type IDeleteValueParams } from './_types';
@@ -64,6 +65,7 @@ export interface IValueDomain {
         recordId: string;
         attribute: string;
         value: ISaveValue;
+        skipReadonly?: boolean;
         ctx: IQueryInfos;
     }): Promise<IValue[]>;
     /**
@@ -79,6 +81,7 @@ export interface IValueDomain {
         ctx: IQueryInfos;
         keepEmpty?: boolean;
         skipPermission?: boolean;
+        skipReadonly?: boolean;
     }): Promise<ISaveBatchValueResult>;
     deleteValue(params: IDeleteValueParams): Promise<IValue[]>;
     formatValue(params: {
@@ -121,6 +124,7 @@ export interface IValueDomainDeps {
     config: Config.IConfig;
     'core.domain.actionsList': IActionsListDomain;
     'core.domain.attribute': IAttributeDomain;
+    'core.domain.permission.attributeDependentValues': IAttributeDependentValuesPermissionDomain;
     'core.domain.permission.recordAttribute': IRecordAttributePermissionDomain;
     'core.domain.permission.record': IRecordPermissionDomain;
     'core.domain.eventsManager': IEventsManagerDomain;
@@ -142,5 +146,5 @@ export interface IValueDomainDeps {
     'core.utils.logger': ILogger;
     'core.domain.tree': ITreeDomain;
 }
-declare const valueDomain: ({ config, "core.domain.actionsList": actionsListDomain, "core.domain.attribute": attributeDomain, "core.domain.permission.recordAttribute": recordAttributePermissionDomain, "core.domain.permission.record": recordPermissionDomain, "core.domain.eventsManager": eventsManager, "core.domain.helpers.validate": validate, "core.domain.helpers.updateRecordLastModif": updateRecordLastModif, "core.domain.tree.helpers.elementAncestors": elementAncestors, "core.domain.tree.helpers.getDefaultElement": getDefaultElementHelper, "core.domain.record.helpers.sendRecordUpdateEvent": sendRecordUpdateEvent, "core.domain.record.helpers.createRecord": createRecordHelper, "core.domain.record.helpers.findRecords": findRecordsHelper, "core.domain.permission.helpers.recordInCreationBypass": recordInCreationBypassHelper, "core.domain.record.helpers.deleteRecord": deleteRecordHelper, "core.domain.attribute.helpers.ifLibraryJoinLinkAttribute": ifLibraryJoinLinkAttribute, "core.domain.versionProfile": versionProfileDomain, "core.infra.record": recordRepo, "core.infra.tree": treeRepo, "core.infra.value": valueRepo, "core.utils": utils, "core.utils.logger": logger, }: IValueDomainDeps) => IValueDomain;
+declare const valueDomain: ({ config, "core.domain.actionsList": actionsListDomain, "core.domain.attribute": attributeDomain, "core.domain.permission.attributeDependentValues": attributeDependentValuesPermissionDomain, "core.domain.permission.recordAttribute": recordAttributePermissionDomain, "core.domain.permission.record": recordPermissionDomain, "core.domain.eventsManager": eventsManager, "core.domain.helpers.validate": validate, "core.domain.helpers.updateRecordLastModif": updateRecordLastModif, "core.domain.tree.helpers.elementAncestors": elementAncestors, "core.domain.tree.helpers.getDefaultElement": getDefaultElementHelper, "core.domain.record.helpers.sendRecordUpdateEvent": sendRecordUpdateEvent, "core.domain.record.helpers.createRecord": createRecordHelper, "core.domain.record.helpers.findRecords": findRecordsHelper, "core.domain.permission.helpers.recordInCreationBypass": recordInCreationBypassHelper, "core.domain.record.helpers.deleteRecord": deleteRecordHelper, "core.domain.attribute.helpers.ifLibraryJoinLinkAttribute": ifLibraryJoinLinkAttribute, "core.domain.versionProfile": versionProfileDomain, "core.infra.record": recordRepo, "core.infra.tree": treeRepo, "core.infra.value": valueRepo, "core.utils": utils, "core.utils.logger": logger, }: IValueDomainDeps) => IValueDomain;
 export default valueDomain;

package/apps/core/src/infra/db/helpers/libraryUtils.d.ts

@@ -26,7 +26,9 @@ export declare const commonAttributeData: {
             name: string;
             is_system: boolean;
         }[];
+        postSaveValue: any[];
         deleteValue: any[];
+        postDeleteValue: any[];
     };
 };
 export declare const createLibraries: (libraries: MigrationLibraryToCreate[], dbService: IDbService, libraryRepo: ILibraryRepo, ctx: IQueryInfos) => Promise<void>;

package/apps/core/src/infra/permission/permissionRepo.d.ts

@@ -1,5 +1,5 @@
 import { type IQueryInfos } from '_types/queryInfos';
-import { type IPermission, type IPermissionsTreeTarget, type PermissionsActions, type PermissionTypes } from '../../_types/permissions';
+import { type IPermissionsDependenciesTreeTarget, type IPermission, type IPermissionsTreeTarget, type PermissionsActions, type PermissionTypes } from '../../_types/permissions';
 import { type IDbService } from '../db/dbService';
 import { type IDbUtils } from '../db/dbUtils';
 export interface IPermissionRepo {
@@ -7,11 +7,12 @@ export interface IPermissionRepo {
         permData: IPermission;
         ctx: IQueryInfos;
     }): Promise<IPermission>;
-    getPermissions({ type, applyTo, usersGroupNodeId, permissionTreeTarget, ctx, }: {
+    getPermissions({ type, applyTo, usersGroupNodeId, permissionTreeTarget, dependenciesTreeTargets, ctx, }: {
         type: PermissionTypes;
         applyTo: string;
         usersGroupNodeId: string | null;
         permissionTreeTarget?: IPermissionsTreeTarget;
+        dependenciesTreeTargets?: IPermissionsDependenciesTreeTarget[];
         ctx: IQueryInfos;
     }): Promise<IPermission | null>;
     getAllPermissionsForTree({ type, applyTo, actionKey, treeId, groupsIds, ctx, }: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aristid/leav-types",
-  "version": "1.6.0-dce6fd17",
+  "version": "1.6.0-f3020e13",
   "description": "Shared Leav types",
   "scripts": {
     "tscheck": "",