@authup/server-core 1.0.0-beta.12 → 1.0.0-beta.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/database/utils/uniqueness.d.ts +1 -1
- package/dist/database/utils/uniqueness.d.ts.map +1 -1
- package/dist/database/utils/uniqueness.js +69 -5
- package/dist/database/utils/uniqueness.js.map +1 -1
- package/dist/domains/permission/entity.d.ts.map +1 -1
- package/dist/domains/permission/entity.js +2 -1
- package/dist/domains/permission/entity.js.map +1 -1
- package/dist/http/controllers/client/handlers/create.d.ts.map +1 -1
- package/dist/http/controllers/client/handlers/create.js +3 -1
- package/dist/http/controllers/client/handlers/create.js.map +1 -1
- package/dist/http/controllers/client/handlers/delete.js +1 -1
- package/dist/http/controllers/client/handlers/delete.js.map +1 -1
- package/dist/http/controllers/client/handlers/read.js +2 -2
- package/dist/http/controllers/client/handlers/read.js.map +1 -1
- package/dist/http/controllers/client/handlers/update.d.ts.map +1 -1
- package/dist/http/controllers/client/handlers/update.js +5 -1
- package/dist/http/controllers/client/handlers/update.js.map +1 -1
- package/dist/http/controllers/client/utils/validation.d.ts +1 -1
- package/dist/http/controllers/client/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/client/utils/validation.js +0 -5
- package/dist/http/controllers/client/utils/validation.js.map +1 -1
- package/dist/http/controllers/client-scope/handlers/create.js +1 -1
- package/dist/http/controllers/client-scope/handlers/create.js.map +1 -1
- package/dist/http/controllers/client-scope/handlers/delete.js +1 -1
- package/dist/http/controllers/client-scope/handlers/delete.js.map +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/create.js +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/create.js.map +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/delete.js +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/delete.js.map +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/update.js +1 -1
- package/dist/http/controllers/identity-provide-role/handlers/update.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/create.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/create.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/delete.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/delete.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/read.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/read.js.map +1 -1
- package/dist/http/controllers/identity-provider/handlers/update.js +1 -1
- package/dist/http/controllers/identity-provider/handlers/update.js.map +1 -1
- package/dist/http/controllers/permission/handlers/create.d.ts.map +1 -1
- package/dist/http/controllers/permission/handlers/create.js +3 -1
- package/dist/http/controllers/permission/handlers/create.js.map +1 -1
- package/dist/http/controllers/permission/handlers/delete.js +1 -1
- package/dist/http/controllers/permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/permission/handlers/update.d.ts.map +1 -1
- package/dist/http/controllers/permission/handlers/update.js +5 -1
- package/dist/http/controllers/permission/handlers/update.js.map +1 -1
- package/dist/http/controllers/permission/utils/validation.d.ts.map +1 -1
- package/dist/http/controllers/permission/utils/validation.js +25 -0
- package/dist/http/controllers/permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/realm/handlers/create.js +1 -1
- package/dist/http/controllers/realm/handlers/create.js.map +1 -1
- package/dist/http/controllers/realm/handlers/delete.js +1 -1
- package/dist/http/controllers/realm/handlers/delete.js.map +1 -1
- package/dist/http/controllers/realm/handlers/update.js +1 -1
- package/dist/http/controllers/realm/handlers/update.js.map +1 -1
- package/dist/http/controllers/robot/handlers/create.js +1 -1
- package/dist/http/controllers/robot/handlers/create.js.map +1 -1
- package/dist/http/controllers/robot/handlers/delete.js +1 -1
- package/dist/http/controllers/robot/handlers/delete.js.map +1 -1
- package/dist/http/controllers/robot/handlers/read.js +4 -4
- package/dist/http/controllers/robot/handlers/read.js.map +1 -1
- package/dist/http/controllers/robot/handlers/update.js +1 -1
- package/dist/http/controllers/robot/handlers/update.js.map +1 -1
- package/dist/http/controllers/robot-permission/handlers/create.js +1 -1
- package/dist/http/controllers/robot-permission/handlers/create.js.map +1 -1
- package/dist/http/controllers/robot-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/robot-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/robot-permission/utils/validation.js +1 -1
- package/dist/http/controllers/robot-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/robot-role/handlers/create.js +1 -1
- package/dist/http/controllers/robot-role/handlers/create.js.map +1 -1
- package/dist/http/controllers/robot-role/handlers/delete.js +1 -1
- package/dist/http/controllers/robot-role/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role/handlers/create.d.ts.map +1 -1
- package/dist/http/controllers/role/handlers/create.js +7 -5
- package/dist/http/controllers/role/handlers/create.js.map +1 -1
- package/dist/http/controllers/role/handlers/delete.js +1 -1
- package/dist/http/controllers/role/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role/handlers/update.d.ts.map +1 -1
- package/dist/http/controllers/role/handlers/update.js +5 -1
- package/dist/http/controllers/role/handlers/update.js.map +1 -1
- package/dist/http/controllers/role/utils/validaiton.d.ts +2 -2
- package/dist/http/controllers/role/utils/validaiton.d.ts.map +1 -1
- package/dist/http/controllers/role/utils/validaiton.js +5 -10
- package/dist/http/controllers/role/utils/validaiton.js.map +1 -1
- package/dist/http/controllers/role-attribute/handlers/create.js +1 -1
- package/dist/http/controllers/role-attribute/handlers/create.js.map +1 -1
- package/dist/http/controllers/role-attribute/handlers/delete.js +1 -1
- package/dist/http/controllers/role-attribute/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role-attribute/handlers/update.js +1 -1
- package/dist/http/controllers/role-attribute/handlers/update.js.map +1 -1
- package/dist/http/controllers/role-permission/handlers/create.js +1 -1
- package/dist/http/controllers/role-permission/handlers/create.js.map +1 -1
- package/dist/http/controllers/role-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/role-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/role-permission/utils/validation.js +1 -1
- package/dist/http/controllers/role-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/scope/handlers/create.d.ts.map +1 -1
- package/dist/http/controllers/scope/handlers/create.js +3 -1
- package/dist/http/controllers/scope/handlers/create.js.map +1 -1
- package/dist/http/controllers/scope/handlers/delete.js +1 -1
- package/dist/http/controllers/scope/handlers/delete.js.map +1 -1
- package/dist/http/controllers/scope/handlers/update.d.ts.map +1 -1
- package/dist/http/controllers/scope/handlers/update.js +6 -1
- package/dist/http/controllers/scope/handlers/update.js.map +1 -1
- package/dist/http/controllers/scope/utils/validaiton.d.ts +2 -2
- package/dist/http/controllers/scope/utils/validaiton.d.ts.map +1 -1
- package/dist/http/controllers/scope/utils/validaiton.js +4 -9
- package/dist/http/controllers/scope/utils/validaiton.js.map +1 -1
- package/dist/http/controllers/user/handlers/create.js +1 -1
- package/dist/http/controllers/user/handlers/create.js.map +1 -1
- package/dist/http/controllers/user/handlers/delete.js +1 -1
- package/dist/http/controllers/user/handlers/delete.js.map +1 -1
- package/dist/http/controllers/user/handlers/read.js +1 -1
- package/dist/http/controllers/user/handlers/read.js.map +1 -1
- package/dist/http/controllers/user/handlers/update.js +1 -1
- package/dist/http/controllers/user/handlers/update.js.map +1 -1
- package/dist/http/controllers/user/utils/validation.js +1 -1
- package/dist/http/controllers/user/utils/validation.js.map +1 -1
- package/dist/http/controllers/user-attribute/handlers/create.js +1 -1
- package/dist/http/controllers/user-attribute/handlers/create.js.map +1 -1
- package/dist/http/controllers/user-attribute/handlers/delete.js +1 -1
- package/dist/http/controllers/user-attribute/handlers/delete.js.map +1 -1
- package/dist/http/controllers/user-attribute/handlers/read.js +1 -1
- package/dist/http/controllers/user-attribute/handlers/read.js.map +1 -1
- package/dist/http/controllers/user-attribute/handlers/update.js +1 -1
- package/dist/http/controllers/user-attribute/handlers/update.js.map +1 -1
- package/dist/http/controllers/user-permission/handlers/create.js +1 -1
- package/dist/http/controllers/user-permission/handlers/create.js.map +1 -1
- package/dist/http/controllers/user-permission/handlers/delete.js +1 -1
- package/dist/http/controllers/user-permission/handlers/delete.js.map +1 -1
- package/dist/http/controllers/user-permission/utils/validation.js +1 -1
- package/dist/http/controllers/user-permission/utils/validation.js.map +1 -1
- package/dist/http/controllers/user-role/handlers/create.js +1 -1
- package/dist/http/controllers/user-role/handlers/create.js.map +1 -1
- package/dist/http/controllers/user-role/handlers/delete.js +1 -1
- package/dist/http/controllers/user-role/handlers/delete.js.map +1 -1
- package/dist/http/middleware/built-in/auth/module.js +1 -1
- package/dist/http/middleware/built-in/auth/module.js.map +1 -1
- package/dist/http/middleware/built-in/auth/verify.js +4 -4
- package/dist/http/middleware/built-in/auth/verify.js.map +1 -1
- package/dist/http/type.d.ts +2 -2
- package/dist/http/type.d.ts.map +1 -1
- package/package.json +8 -9
|
@@ -21,7 +21,7 @@ async function deleteRoleAttributeRouteHandler(req, res) {
|
|
|
21
21
|
if (!entity) {
|
|
22
22
|
throw new http_1.NotFoundError();
|
|
23
23
|
}
|
|
24
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
24
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
25
25
|
if (!ability.has(core_kit_1.PermissionName.ROLE_EDIT) ||
|
|
26
26
|
!(0, core_kit_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
|
|
27
27
|
throw new http_1.ForbiddenError('You are not permitted to drop an attribute of this role...');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QACtC,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,4DAA4D,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA3BD,0EA2BC"}
|
|
@@ -28,7 +28,7 @@ async function updateRoleAttributeRouteHandler(req, res) {
|
|
|
28
28
|
throw new http_1.NotFoundError();
|
|
29
29
|
}
|
|
30
30
|
entity = repository.merge(entity, result.data);
|
|
31
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
31
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
32
32
|
if (!ability.has(core_kit_1.PermissionName.ROLE_EDIT) ||
|
|
33
33
|
!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
|
|
34
34
|
throw new http_1.ForbiddenError('You are not permitted to update an attribute for this role...');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QACtC,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,+DAA+D,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA7BD,0EA6BC"}
|
|
@@ -22,7 +22,7 @@ const constants_1 = require("../../../request/constants");
|
|
|
22
22
|
* @param res
|
|
23
23
|
*/
|
|
24
24
|
async function createRolePermissionRouteHandler(req, res) {
|
|
25
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
25
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
26
26
|
if (!ability.has(core_kit_1.PermissionName.ROLE_PERMISSION_ADD)) {
|
|
27
27
|
throw new http_1.ForbiddenError();
|
|
28
28
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAE6B;AAC7B,4CAAmD;AACnD,oCAAuD;AACvD,0DAAqE;AAErE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAE6B;AAC7B,4CAAmD;AACnD,oCAAuD;AACvD,0DAAqE;AAErE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAA2B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAEtF,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAnBD,4EAmBC"}
|
|
@@ -21,7 +21,7 @@ const env_1 = require("../../../utils/env");
|
|
|
21
21
|
*/
|
|
22
22
|
async function deleteRolePermissionRouteHandler(req, res) {
|
|
23
23
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
24
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
24
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
25
25
|
if (!ability.has(core_kit_1.PermissionName.ROLE_PERMISSION_DROP)) {
|
|
26
26
|
throw new http_1.ForbiddenError();
|
|
27
27
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AAEnD;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AAEnD;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAc,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAvCD,4EAuCC"}
|
|
@@ -44,7 +44,7 @@ async function runRolePermissionValidation(req, operation) {
|
|
|
44
44
|
}
|
|
45
45
|
result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
|
|
46
46
|
// ----------------------------------------------
|
|
47
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
47
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
48
48
|
await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.PermissionEntity, {
|
|
49
49
|
id: 'permission_id',
|
|
50
50
|
entity: 'permission',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6D;AAC7D,+CAA2E;AAG3E,iDAAmE;AACnE,0CAAkE;AAElE,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAmD,IAAA,wCAA2B,GAAE,CAAC;IAE7F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;aACvB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/role-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6D;AAC7D,+CAA2E;AAG3E,iDAAmE;AACnE,0CAAkE;AAElE,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAmD,IAAA,wCAA2B,GAAE,CAAC;IAE7F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;aACvB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,0BAAgB,EAAE;QACtE,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,YAAY;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3D,CAAC;QAED,IACI,CAAC,IAAA,yBAAiB,EAAC,GAAG,CAAC;YACvB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAC/C,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,sEAAsE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,yBAAc,CAAC,mBAAmB,CAAC,CAAC;IACvE,IAAI,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC3C,CAAC;IAED,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;QAChE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AArFD,kEAqFC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/create.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/create.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAkBxF"}
|
|
@@ -11,16 +11,18 @@ const http_1 = require("@ebec/http");
|
|
|
11
11
|
const core_kit_1 = require("@authup/core-kit");
|
|
12
12
|
const routup_1 = require("routup");
|
|
13
13
|
const typeorm_extension_1 = require("typeorm-extension");
|
|
14
|
+
const database_1 = require("../../../../database");
|
|
14
15
|
const domains_1 = require("../../../../domains");
|
|
15
16
|
const utils_1 = require("../../../utils");
|
|
16
17
|
const utils_2 = require("../utils");
|
|
17
18
|
const request_1 = require("../../../request");
|
|
18
19
|
async function createScopeRouteHandler(req, res) {
|
|
19
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
20
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
20
21
|
if (!ability.has(core_kit_1.PermissionName.SCOPE_ADD)) {
|
|
21
22
|
throw new http_1.ForbiddenError();
|
|
22
23
|
}
|
|
23
24
|
const result = await (0, utils_2.runScopeValidation)(req, request_1.RequestHandlerOperation.CREATE);
|
|
25
|
+
await (0, database_1.enforceUniquenessForDatabaseEntity)(domains_1.ScopeEntity, result.data);
|
|
24
26
|
// ----------------------------------------------
|
|
25
27
|
const dataSource = await (0, typeorm_extension_1.useDataSource)();
|
|
26
28
|
const repository = dataSource.getRepository(domains_1.ScopeEntity);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAA8C;AAC9C,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAkD;AAClD,0CAA+C;AAC/C,oCAA8C;AAC9C,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAkB,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,IAAA,6CAAkC,EAAC,qBAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAEnE,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE9C,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAlBD,0DAkBC"}
|
|
@@ -15,7 +15,7 @@ const domains_1 = require("../../../../domains");
|
|
|
15
15
|
const utils_1 = require("../../../utils");
|
|
16
16
|
async function deleteScopeRouteHandler(req, res) {
|
|
17
17
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
18
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
18
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
19
19
|
if (!ability.has(core_kit_1.PermissionName.SCOPE_DROP)) {
|
|
20
20
|
throw new http_1.ForbiddenError();
|
|
21
21
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAExC,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAExC,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAjCD,0DAiCC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA0CxF"}
|
|
@@ -11,13 +11,14 @@ const http_1 = require("@ebec/http");
|
|
|
11
11
|
const core_kit_1 = require("@authup/core-kit");
|
|
12
12
|
const routup_1 = require("routup");
|
|
13
13
|
const typeorm_extension_1 = require("typeorm-extension");
|
|
14
|
+
const database_1 = require("../../../../database");
|
|
14
15
|
const domains_1 = require("../../../../domains");
|
|
15
16
|
const utils_1 = require("../../../utils");
|
|
16
17
|
const utils_2 = require("../utils");
|
|
17
18
|
const request_1 = require("../../../request");
|
|
18
19
|
async function updateScopeRouteHandler(req, res) {
|
|
19
20
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
20
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
21
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
21
22
|
if (!ability.has(core_kit_1.PermissionName.SCOPE_EDIT)) {
|
|
22
23
|
throw new http_1.NotFoundError();
|
|
23
24
|
}
|
|
@@ -37,6 +38,10 @@ async function updateScopeRouteHandler(req, res) {
|
|
|
37
38
|
throw new http_1.ForbiddenError();
|
|
38
39
|
}
|
|
39
40
|
// ----------------------------------------------
|
|
41
|
+
await (0, database_1.enforceUniquenessForDatabaseEntity)(domains_1.ScopeEntity, result.data, {
|
|
42
|
+
id: entity.id,
|
|
43
|
+
});
|
|
44
|
+
// ----------------------------------------------
|
|
40
45
|
entity = repository.merge(entity, result.data);
|
|
41
46
|
await repository.save(entity);
|
|
42
47
|
return (0, routup_1.sendAccepted)(res, entity);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAA8C;AAC9C,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAkD;AAClD,0CAA+C;AAC/C,oCAA8C;AAC9C,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAkB,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IACzD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,IAAA,6CAAkC,EAAC,qBAAW,EAAE,MAAM,CAAC,IAAI,EAAE;QAC/D,EAAE,EAAE,MAAM,CAAC,EAAE;KAChB,CAAC,CAAC;IAEH,iDAAiD;IAEjD,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA1CD,0DA0CC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import type { Request } from 'routup';
|
|
2
|
-
import { ScopeEntity } from '../../../../domains';
|
|
2
|
+
import type { ScopeEntity } from '../../../../domains';
|
|
3
3
|
import type { ExpressValidationResult } from '../../../validation';
|
|
4
|
-
import { RequestHandlerOperation } from '../../../request
|
|
4
|
+
import { RequestHandlerOperation } from '../../../request';
|
|
5
5
|
export declare function runScopeValidation(req: Request, operation: `${RequestHandlerOperation.CREATE}` | `${RequestHandlerOperation.UPDATE}`): Promise<ExpressValidationResult<ScopeEntity>>;
|
|
6
6
|
//# sourceMappingURL=validaiton.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validaiton.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaiton.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"validaiton.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaiton.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAQnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,GAAG,uBAAuB,CAAC,MAAM,EAAE,GACpF,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CA2DhD"}
|
|
@@ -11,18 +11,17 @@ const kit_1 = require("@authup/kit");
|
|
|
11
11
|
const core_kit_1 = require("@authup/core-kit");
|
|
12
12
|
const express_validator_1 = require("express-validator");
|
|
13
13
|
const http_1 = require("@ebec/http");
|
|
14
|
-
const database_1 = require("../../../../database");
|
|
15
14
|
const domains_1 = require("../../../../domains");
|
|
16
15
|
const utils_1 = require("../../../utils");
|
|
17
16
|
const validation_1 = require("../../../validation");
|
|
18
|
-
const
|
|
17
|
+
const request_1 = require("../../../request");
|
|
19
18
|
async function runScopeValidation(req, operation) {
|
|
20
19
|
const result = (0, validation_1.initExpressValidationResult)();
|
|
21
|
-
const nameChain =
|
|
20
|
+
const nameChain = (0, express_validator_1.check)('name')
|
|
22
21
|
.exists()
|
|
23
22
|
.isString()
|
|
24
23
|
.notEmpty();
|
|
25
|
-
if (operation ===
|
|
24
|
+
if (operation === request_1.RequestHandlerOperation.UPDATE)
|
|
26
25
|
nameChain.optional();
|
|
27
26
|
await nameChain.run(req);
|
|
28
27
|
await (0, express_validator_1.check)('description')
|
|
@@ -56,15 +55,11 @@ async function runScopeValidation(req, operation) {
|
|
|
56
55
|
throw new http_1.BadRequestError((0, validation_1.buildRequestValidationErrorMessage)('realm_id'));
|
|
57
56
|
}
|
|
58
57
|
}
|
|
59
|
-
else if (operation ===
|
|
58
|
+
else if (operation === request_1.RequestHandlerOperation.CREATE &&
|
|
60
59
|
!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'))) {
|
|
61
60
|
throw new http_1.BadRequestError((0, validation_1.buildRequestValidationErrorMessage)('realm_id'));
|
|
62
61
|
}
|
|
63
62
|
// ----------------------------------------------
|
|
64
|
-
if (operation === constants_1.RequestHandlerOperation.CREATE) {
|
|
65
|
-
await (0, database_1.enforceUniquenessForDatabaseEntity)(domains_1.ScopeEntity, result.data);
|
|
66
|
-
}
|
|
67
|
-
// ----------------------------------------------
|
|
68
63
|
return result;
|
|
69
64
|
}
|
|
70
65
|
exports.runScopeValidation = runScopeValidation;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validaiton.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaiton.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAE0B;AAC1B,yDAA4D;AAC5D,qCAA6C;
|
|
1
|
+
{"version":3,"file":"validaiton.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaiton.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAE0B;AAC1B,yDAA4D;AAC5D,qCAA6C;AAG7C,iDAAkD;AAClD,0CAA+C;AAE/C,oDAM6B;AAC7B,8CAA2D;AAEpD,KAAK,UAAU,kBAAkB,CACpC,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAA0C,IAAA,wCAA2B,GAAE,CAAC;IAEpF,MAAM,SAAS,GAAG,IAAA,yBAAK,EAAC,MAAM,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE,CAAC;IAEhB,IAAI,SAAS,KAAK,iCAAuB,CAAC,MAAM;QAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;IAEvE,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,IAAA,yBAAK,EAAC,aAAa,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;SAC/B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;aAClB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,OAAO,CAAC,IAAI,CAAC;aACb,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,qBAAW,EAAE;QACjE,EAAE,EAAE,UAAU;QACd,MAAM,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,IAAI,IAAA,mBAAa,EAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC;SAAM,IACH,SAAS,KAAK,iCAAuB,CAAC,MAAM;QAC5C,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EACvD,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AA9DD,gDA8DC"}
|
|
@@ -16,7 +16,7 @@ const env_1 = require("../../../utils/env");
|
|
|
16
16
|
const utils_1 = require("../utils");
|
|
17
17
|
const constants_1 = require("../../../request/constants");
|
|
18
18
|
async function createUserRouteHandler(req, res) {
|
|
19
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
19
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
20
20
|
if (!ability.has(core_kit_1.PermissionName.USER_ADD)) {
|
|
21
21
|
throw new http_1.ForbiddenError('You are not permitted to add a user.');
|
|
22
22
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAAqD;AACrD,4CAAmD;AACnD,oCAA6C;AAC7C,0DAAqE;AAE9D,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAAqD;AACrD,4CAAmD;AACnD,oCAA6C;AAC7C,0DAAqE;AAE9D,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,qBAAc,CAAC,sCAAsC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEpE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEvB,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAjBD,wDAiBC"}
|
|
@@ -15,7 +15,7 @@ const domains_1 = require("../../../../domains");
|
|
|
15
15
|
const utils_1 = require("../../../utils");
|
|
16
16
|
async function deleteUserRouteHandler(req, res) {
|
|
17
17
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
18
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
18
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
19
19
|
if (!ability.has(core_kit_1.PermissionName.USER_DROP)) {
|
|
20
20
|
throw new http_1.ForbiddenError('You are not authorized to drop a user.');
|
|
21
21
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,qBAAc,CAAC,wCAAwC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,sBAAe,CAAC,kCAAkC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,CAAC,sDAAsD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA/BD,wDA+BC"}
|
|
@@ -35,7 +35,7 @@ function buildFieldsOption(req) {
|
|
|
35
35
|
'realm_id',
|
|
36
36
|
],
|
|
37
37
|
};
|
|
38
|
-
if ((0, utils_2.useRequestEnv)(req, '
|
|
38
|
+
if ((0, utils_2.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT)) {
|
|
39
39
|
options.allowed = ['email'];
|
|
40
40
|
}
|
|
41
41
|
return options;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAG2B;AAC3B,qCAA2C;AAC3C,+CAE0B;AAC1B,qCAEqB;AAErB,iDAAoG;AACpG,6CAA6C;AAC7C,4CAAqE;AACrE,0CAA+C;AAE/C,SAAS,iBAAiB,CAAC,GAAY;IACnC,MAAM,OAAO,GAAyC;QAClD,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;KACJ,CAAC;IAEF,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAG2B;AAC3B,qCAA2C;AAC3C,+CAE0B;AAC1B,qCAEqB;AAErB,iDAAoG;AACpG,6CAA6C;AAC7C,4CAAqE;AACrE,0CAA+C;AAE/C,SAAS,iBAAiB,CAAC,GAAY;IACnC,MAAM,OAAO,GAAyC;QAClD,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;KACJ,CAAC;IAEF,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE;KACJ,CAAC,CAAC;IAEH,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAjCD,0DAiCC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE9D,IAAI,UAAU,GAAc,EAAE,CAAC;IAE/B,IACI,IAAA,gBAAQ,EAAC,EAAE,CAAC;QACZ,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAC9B,CAAC;QACC,UAAU,GAAG,IAAA,2CAAkC,EAAC,mBAAa,CAAC,IAAI,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAElG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,+CAA+C;YAC/C,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,IAAA,gBAAQ,EAAC,EAAE,CAAC,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,cAAc,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAnDD,wDAmDC"}
|
|
@@ -19,7 +19,7 @@ const request_1 = require("../../../request");
|
|
|
19
19
|
async function updateUserRouteHandler(req, res) {
|
|
20
20
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
21
21
|
const env = (0, utils_1.useRequestEnv)(req);
|
|
22
|
-
if (!env.
|
|
22
|
+
if (!env.abilities.has(core_kit_1.PermissionName.USER_EDIT) &&
|
|
23
23
|
env.userId !== id) {
|
|
24
24
|
throw new http_1.ForbiddenError('You are not authorized to modify a user.');
|
|
25
25
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAqD;AACrD,0CAA+C;AAC/C,oCAA6C;AAC7C,8CAA2D;AAEpD,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAE/B,IACI,CAAC,GAAG,CAAC,
|
|
1
|
+
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAqD;AACrD,0CAA+C;AAC/C,oCAA6C;AAC7C,8CAA2D;AAEpD,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAE/B,IACI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QAC5C,GAAG,CAAC,MAAM,KAAK,EAAE,EACnB,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,0CAA0C,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC;SAC9C,SAAS,CAAC,YAAY,CAAC;SACvB,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAEpC,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,qBAAc,CAAC,kDAAkD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,IACI,MAAM,CAAC,IAAI,CAAC,IAAI;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAClC,CAAC;QACC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QACjD,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA7DD,wDA6DC"}
|
|
@@ -16,7 +16,7 @@ const utils_1 = require("../../../utils");
|
|
|
16
16
|
const validation_1 = require("../../../validation");
|
|
17
17
|
const request_1 = require("../../../request");
|
|
18
18
|
async function runUserValidation(req, operation) {
|
|
19
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
19
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
20
20
|
const result = (0, validation_1.initExpressValidationResult)();
|
|
21
21
|
const nameChain = (0, express_validator_1.check)('name')
|
|
22
22
|
.exists()
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,yDAA4D;AAC5D,+CAE0B;AAC1B,qCAA6C;AAG7C,iDAAkD;AAClD,0CAA+C;AAE/C,oDAM6B;AAC7B,8CAA2D;AAEpD,KAAK,UAAU,iBAAiB,CACnC,GAAY,EACZ,SAAoF;IAEpF,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,yDAA4D;AAC5D,+CAE0B;AAC1B,qCAA6C;AAG7C,iDAAkD;AAClD,0CAA+C;AAE/C,oDAM6B;AAC7B,8CAA2D;AAEpD,KAAK,UAAU,iBAAiB,CACnC,GAAY,EACZ,SAAoF;IAEpF,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,MAAM,GAAyC,IAAA,wCAA2B,GAAE,CAAC;IAEnF,MAAM,SAAS,GAAG,IAAA,yBAAK,EAAC,MAAM,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,sBAAe,CAAC,kDAAkD,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IACP,IAAI,SAAS,KAAK,iCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,SAAS,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,IACI,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,QAAQ,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EACvC,CAAC;QACC,MAAM,IAAA,yBAAK,EAAC,aAAa,CAAC;aACrB,SAAS,EAAE;aACX,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IAEjD,MAAM,IAAA,yBAAK,EAAC,YAAY,CAAC;SACpB,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,IAAA,yBAAK,EAAC,cAAc,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,QAAQ,EAAE;SACV,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,IACI,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,QAAQ,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EACvC,CAAC;QACC,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,SAAS,EAAE;aACX,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,aAAa,CAAC;aACrB,SAAS,EAAE;aACX,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,IAAI,SAAS,KAAK,iCAAuB,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;iBAClB,MAAM,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,gBAAgB,CAAC;aACxB,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,qBAAW,EAAE;QACjE,EAAE,EAAE,UAAU;QACd,MAAM,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,IACI,SAAS,KAAK,iCAAuB,CAAC,MAAM;QAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACvB,CAAC;QACC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,IAAI,IAAA,mBAAa,EAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AA5ID,8CA4IC"}
|
|
@@ -21,7 +21,7 @@ async function createUserAttributeRouteHandler(req, res) {
|
|
|
21
21
|
return (0, routup_1.sendAccepted)(res);
|
|
22
22
|
}
|
|
23
23
|
if (result.data.user_id !== (0, env_1.useRequestEnv)(req, 'userId')) {
|
|
24
|
-
if (!(0, env_1.useRequestEnv)(req, '
|
|
24
|
+
if (!(0, env_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
|
|
25
25
|
!(0, core_kit_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), result.data.realm_id)) {
|
|
26
26
|
throw new http_1.ForbiddenError('You are not permitted to set an attribute for the given user...');
|
|
27
27
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAG0B;AAE1B,mCAAmD;AACnD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AACnD,oCAAsD;AACtD,0DAAqE;AAE9D,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IACI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACtD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAG0B;AAE1B,mCAAmD;AACnD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AACnD,oCAAsD;AACtD,0DAAqE;AAE9D,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IACI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACtD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7E,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,iEAAiE,CAAC,CAAC;QAChG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE9C,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAzBD,0EAyBC"}
|
|
@@ -22,7 +22,7 @@ async function deleteUserAttributeRouteHandler(req, res) {
|
|
|
22
22
|
throw new http_1.NotFoundError();
|
|
23
23
|
}
|
|
24
24
|
if (entity.user_id !== (0, env_1.useRequestEnv)(req, 'userId')) {
|
|
25
|
-
if (!(0, env_1.useRequestEnv)(req, '
|
|
25
|
+
if (!(0, env_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
|
|
26
26
|
!(0, core_kit_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
|
|
27
27
|
throw new http_1.ForbiddenError('You are not permitted to drop an attribute for the given user...');
|
|
28
28
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,kEAAkE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,0EA8BC"}
|
|
@@ -19,7 +19,7 @@ async function getManyUserAttributeRouteHandler(req, res) {
|
|
|
19
19
|
const dataSource = await (0, typeorm_extension_1.useDataSource)();
|
|
20
20
|
const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
|
|
21
21
|
const query = repository.createQueryBuilder('userAttribute');
|
|
22
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
22
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
23
23
|
query.where(new typeorm_1.Brackets((qb) => {
|
|
24
24
|
(0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_1.useRequestEnv)(req, 'realm'));
|
|
25
25
|
if (!ability.has(core_kit_1.PermissionName.USER_EDIT)) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,qCAAmC;AACnC,yDAE2B;AAC3B,qCAA4E;AAC5E,+CAA2E;AAC3E,iDAG6B;AAC7B,0CAA+C;AAExC,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,qCAAmC;AACnC,yDAE2B;AAC3B,qCAA4E;AAC5E,+CAA2E;AAC3E,iDAG6B;AAC7B,0CAA+C;AAExC,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,KAAK,CAAC,KAAK,CAAC,IAAI,kBAAQ,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5B,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,eAAe;QAC7B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;SACjD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SAC7E;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KAEJ,CAAC,CAAC;AACP,CAAC;AAvCD,4EAuCC;AAEM,KAAK,UAAU,+BAA+B,CACjD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAe,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,MAAM,CAAC,OAAO,EACjD,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA3BD,0EA2BC"}
|
|
@@ -29,7 +29,7 @@ async function updateUserAttributeRouteHandler(req, res) {
|
|
|
29
29
|
}
|
|
30
30
|
entity = repository.merge(entity, result.data);
|
|
31
31
|
if (entity.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
|
|
32
|
-
if (!(0, utils_1.useRequestEnv)(req, '
|
|
32
|
+
if (!(0, utils_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
|
|
33
33
|
!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
|
|
34
34
|
throw new http_1.ForbiddenError('You are not permitted to update an attribute for the given user...');
|
|
35
35
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,oEAAoE,CAAC,CAAC;QACnG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAhCD,0EAgCC"}
|
|
@@ -22,7 +22,7 @@ const constants_1 = require("../../../request/constants");
|
|
|
22
22
|
* @param res
|
|
23
23
|
*/
|
|
24
24
|
async function createUserPermissionRouteHandler(req, res) {
|
|
25
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
25
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
26
26
|
if (!ability.has(core_kit_1.PermissionName.USER_PERMISSION_ADD)) {
|
|
27
27
|
throw new http_1.ForbiddenError();
|
|
28
28
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AACnD,oCAAuD;AACvD,0DAAqE;AAErE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AACnD,oCAAuD;AACvD,0DAAqE;AAErE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAA2B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAEtF,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAnBD,4EAmBC"}
|
|
@@ -21,7 +21,7 @@ const env_1 = require("../../../utils/env");
|
|
|
21
21
|
*/
|
|
22
22
|
async function deleteUserPermissionRouteHandler(req, res) {
|
|
23
23
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
24
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
24
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
25
25
|
if (!ability.has(core_kit_1.PermissionName.USER_PERMISSION_DROP)) {
|
|
26
26
|
throw new http_1.ForbiddenError();
|
|
27
27
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AAEnD;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AAEnD;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IACI,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAC7E,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAc,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAzCD,4EAyCC"}
|
|
@@ -44,7 +44,7 @@ async function runUserPermissionValidation(req, operation) {
|
|
|
44
44
|
}
|
|
45
45
|
result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
|
|
46
46
|
// ----------------------------------------------
|
|
47
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
47
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
48
48
|
await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.PermissionEntity, {
|
|
49
49
|
id: 'permission_id',
|
|
50
50
|
entity: 'permission',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6D;AAC7D,+CAA2E;AAG3E,iDAE6B;AAC7B,0CAAkE;AAElE,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAmD,IAAA,wCAA2B,GAAE,CAAC;IAE7F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6D;AAC7D,+CAA2E;AAG3E,iDAE6B;AAC7B,0CAAkE;AAElE,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAmD,IAAA,wCAA2B,GAAE,CAAC;IAE7F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,0BAAgB,EAAE;QACtE,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,YAAY;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3D,CAAC;QAED,IACI,CAAC,IAAA,yBAAiB,EAAC,GAAG,CAAC;YACvB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAC/C,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,sEAAsE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,yBAAc,CAAC,mBAAmB,CAAC,CAAC;IAC7E,IAAI,gBAAgB,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;QAChE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,IACI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACtF,CAAC;YACC,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AAvFD,kEAuFC"}
|
|
@@ -16,7 +16,7 @@ const env_1 = require("../../../utils/env");
|
|
|
16
16
|
const utils_1 = require("../utils");
|
|
17
17
|
const constants_1 = require("../../../request/constants");
|
|
18
18
|
async function createUserRoleRouteHandler(req, res) {
|
|
19
|
-
const ability = (0, env_1.useRequestEnv)(req, '
|
|
19
|
+
const ability = (0, env_1.useRequestEnv)(req, 'abilities');
|
|
20
20
|
if (!ability.has(core_kit_1.PermissionName.USER_ROLE_ADD)) {
|
|
21
21
|
throw new http_1.ForbiddenError();
|
|
22
22
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAAqD;AACrD,4CAAmD;AACnD,oCAAiD;AACjD,0DAAqE;AAE9D,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAAkD;AAClD,iDAAqD;AACrD,4CAAmD;AACnD,oCAAiD;AACjD,0DAAqE;AAE9D,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAqB,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAEhF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAfD,gEAeC"}
|
|
@@ -15,7 +15,7 @@ const domains_1 = require("../../../../domains");
|
|
|
15
15
|
const utils_1 = require("../../../utils");
|
|
16
16
|
async function deleteUserRoleRouteHandler(req, res) {
|
|
17
17
|
const id = (0, routup_1.useRequestParam)(req, 'id');
|
|
18
|
-
const ability = (0, utils_1.useRequestEnv)(req, '
|
|
18
|
+
const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
|
|
19
19
|
if (!ability.has(core_kit_1.PermissionName.USER_ROLE_DROP)) {
|
|
20
20
|
throw new http_1.ForbiddenError();
|
|
21
21
|
}
|