@authup/server-core 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/http/controllers/user/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AA8ChD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiCxF;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA6DvF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AA+ChD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiCxF;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwEvF"}

package/dist/http/controllers/user/handlers/read.js

@@ -6,7 +6,8 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneUserRouteHandler = exports.getManyUserRouteHandler = void 0;
+exports.getManyUserRouteHandler = getManyUserRouteHandler;
+exports.getOneUserRouteHandler = getOneUserRouteHandler;
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
@@ -16,6 +17,7 @@ const kit_1 = require("@authup/kit");
 const domains_1 = require("../../../../domains");
 const utils_1 = require("../../../../utils");
 const oauth2_1 = require("../../../oauth2");
+const request_1 = require("../../../request");
 const utils_2 = require("../../../utils");
 function buildFieldsOption(req) {
     const options = {
@@ -35,7 +37,7 @@ function buildFieldsOption(req) {
             'realm_id',
         ],
     };
-    if ((0, utils_2.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT)) {
+    if ((0, utils_2.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_UPDATE)) {
         options.allowed = ['email'];
     }
     return options;
@@ -70,28 +72,23 @@ async function getManyUserRouteHandler(req, res) {
         },
     });
 }
-exports.getManyUserRouteHandler = getManyUserRouteHandler;
 async function getOneUserRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const userRepository = new domains_1.UserRepository(dataSource);
     const query = userRepository.createQueryBuilder('user');
-    const scopes = (0, utils_2.useRequestEnv)(req, 'scopes');
-    let attributes = [];
-    if ((0, utils_1.isSelfId)(id) &&
-        (0, utils_2.useRequestEnv)(req, 'userId')) {
-        attributes = (0, oauth2_1.resolveOAuth2SubAttributesForScope)(kit_1.OAuth2SubKind.USER, scopes);
-        const validAttributes = userRepository.metadata.columns.map((column) => column.databaseName);
-        for (let i = 0; i < attributes.length; i++) {
-            const isValid = validAttributes.includes(attributes[i]);
-            if (isValid) {
-                // todo: remove attribute from attributes
-                query.addSelect(`user.${attributes[i]}`);
-            }
-        }
-        query.where('user.id = :id', { id: (0, utils_2.useRequestEnv)(req, 'userId') });
+    const userId = (0, utils_2.useRequestEnv)(req, 'userId');
+    let isMe = false;
+    if ((0, utils_1.isSelfId)(id) && userId) {
+        isMe = true;
+        query.where('user.id = :id', { id: userId });
     }
     else if ((0, kit_1.isUUID)(id)) {
+        if (id === userId) {
+            isMe = true;
+        }
         query.where('user.id = :id', { id });
     }
     else {
@@ -99,6 +96,24 @@ async function getOneUserRouteHandler(req, res) {
         const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(req, 'realmId'), true);
         query.andWhere('user.realm_id = :realmId', { realmId: realm.id });
     }
+    const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
+    const hasAbility = ability.has(core_kit_1.PermissionName.USER_READ) ||
+        ability.has(core_kit_1.PermissionName.USER_UPDATE) ||
+        ability.has(core_kit_1.PermissionName.USER_DELETE);
+    if (!isMe && !hasAbility) {
+        throw new http_1.ForbiddenError();
+    }
+    const scopes = (0, utils_2.useRequestEnv)(req, 'scopes');
+    if (isMe) {
+        const attributes = (0, oauth2_1.resolveOAuth2SubAttributesForScope)(kit_1.OAuth2SubKind.USER, scopes);
+        const validAttributes = userRepository.metadata.columns.map((column) => column.databaseName);
+        for (let i = 0; i < attributes.length; i++) {
+            const isValid = validAttributes.includes(attributes[i]);
+            if (isValid) {
+                query.addSelect(`user.${attributes[i]}`);
+            }
+        }
+    }
     (0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_2.useRequestEnv)(req, 'realm'));
     (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'user',
@@ -111,11 +126,9 @@ async function getOneUserRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if ((0, utils_1.isSelfId)(id) &&
-        (0, oauth2_1.hasOAuth2Scope)(scopes, core_kit_1.ScopeName.GLOBAL)) {
+    if ((isMe && (0, oauth2_1.hasOAuth2Scope)(scopes, core_kit_1.ScopeName.GLOBAL)) || hasAbility) {
         await userRepository.findAndAppendExtraAttributesTo(entity);
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneUserRouteHandler = getOneUserRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/user/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAG2B;AAC3B,qCAA2C;AAC3C,+CAE0B;AAC1B,qCAEqB;AAErB,iDAAoG;AACpG,6CAA6C;AAC7C,4CAAqF;AACrF,0CAA+C;AAE/C,SAAS,iBAAiB,CAAC,GAAY;IACnC,MAAM,OAAO,GAAyC;QAClD,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;KACJ,CAAC;IAEF,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE;KACJ,CAAC,CAAC;IAEH,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAjCD,0DAiCC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,UAAU,GAAc,EAAE,CAAC;IAE/B,IACI,IAAA,gBAAQ,EAAC,EAAE,CAAC;QACZ,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAC9B,CAAC;QACC,UAAU,GAAG,IAAA,2CAAkC,EAAC,mBAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5E,MAAM,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAClC,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACV,yCAAyC;gBACzC,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,IAAA,gBAAQ,EAAC,EAAE,CAAC;QACZ,IAAA,uBAAc,EAAC,MAAM,EAAE,oBAAS,CAAC,MAAM,CAAC,EAC1C,CAAC;QACC,MAAM,cAAc,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA7DD,wDA6DC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkDH,0DAiCC;AAED,wDAwEC;AA3JD,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAG2B;AAC3B,qCAA2D;AAC3D,+CAE0B;AAC1B,qCAEqB;AAErB,iDAAoG;AACpG,6CAA6C;AAC7C,4CAAqF;AACrF,8CAAqD;AACrD,0CAA+C;AAE/C,SAAS,iBAAiB,CAAC,GAAY;IACnC,MAAM,OAAO,GAAyC;QAClD,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;KACJ,CAAC;IAEF,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE;KACJ,CAAC,CAAC;IAEH,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE5C,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,IAAI,IAAA,gBAAQ,EAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC;QACZ,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAChB,IAAI,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,UAAU,GAAa,IAAA,2CAAkC,EAAC,mBAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5F,MAAM,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAClC,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,IAAA,uBAAc,EAAC,MAAM,EAAE,oBAAS,CAAC,MAAM,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;QACnE,MAAM,cAAc,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateUserRouteHandler = void 0;
+exports.updateUserRouteHandler = updateUserRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -17,10 +17,10 @@ const utils_1 = require("../../../utils");
 const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function updateUserRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
     const env = (0, utils_1.useRequestEnv)(req);
-    if (!ability.has(core_kit_1.PermissionName.USER_EDIT) &&
+    if (!ability.has(core_kit_1.PermissionName.USER_UPDATE) &&
         env.userId !== id) {
         throw new http_1.ForbiddenError('You are not authorized to modify a user.');
     }
@@ -28,7 +28,7 @@ async function updateUserRouteHandler(req, res) {
     const data = await validator.execute(req, {
         group: request_1.RequestHandlerOperation.UPDATE,
     });
-    if (!ability.has(core_kit_1.PermissionName.USER_EDIT)) {
+    if (!ability.has(core_kit_1.PermissionName.USER_UPDATE)) {
         delete data.name_locked;
         delete data.active;
         delete data.status;
@@ -66,5 +66,4 @@ async function updateUserRouteHandler(req, res) {
     await repository.save(entity);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updateUserRouteHandler = updateUserRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/user/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAqD;AACrD,0CAA+C;AAC/C,oCAAgD;AAChD,8CAA2D;AAEpD,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAE/B,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QACtC,GAAG,CAAC,MAAM,KAAK,EAAE,EACnB,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,0CAA0C,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,4BAAoB,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC;SAC9C,SAAS,CAAC,YAAY,CAAC;SACvB,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAEpC,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,qBAAc,CAAC,kDAAkD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,IACI,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAC3B,CAAC;QACC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AArED,wDAqEC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,wDAqEC;AAhFD,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAqD;AACrD,0CAA+C;AAC/C,oCAAgD;AAChD,8CAA8E;AAEvE,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAE/B,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC;QACxC,GAAG,CAAC,MAAM,KAAK,EAAE,EACnB,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,0CAA0C,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,4BAAoB,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,WAAW,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC;SAC9C,SAAS,CAAC,YAAY,CAAC;SACvB,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAEpC,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,qBAAc,CAAC,kDAAkD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,IACI,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAC3B,CAAC;QACC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-attribute/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmChG"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+ChG"}

package/dist/http/controllers/user-attribute/handlers/create.js

@@ -6,40 +6,51 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserAttributeRouteHandler = void 0;
+exports.createUserAttributeRouteHandler = createUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
-const utils_2 = require("../utils");
+const utils_1 = require("../../../../utils");
+const utils_2 = require("../../../utils");
+const utils_3 = require("../utils");
 const request_1 = require("../../../request");
 async function createUserAttributeRouteHandler(req, res) {
-    const validator = new utils_2.UserAttributeRequestValidator();
+    const validator = new utils_3.UserAttributeRequestValidator();
     const data = await validator.execute(req, {
         group: request_1.RequestHandlerOperation.CREATE,
     });
+    const userId = (0, utils_2.useRequestEnv)(req, 'userId');
     if (data.user) {
         data.realm_id = data.user.realm_id;
         data.user_id = data.user.id;
     }
     else {
-        const { id } = (0, utils_1.useRequestEnv)(req, 'realm');
+        const { id } = (0, utils_2.useRequestEnv)(req, 'realm');
         data.realm_id = id;
-        data.user_id = (0, utils_1.useRequestEnv)(req, 'userId');
+        if (userId) {
+            data.user_id = userId;
+        }
+        else {
+            throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForAttribute)('user_id'));
+        }
     }
-    if (data.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, utils_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
-            !(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), data.realm_id)) {
+    const abilities = (0, utils_2.useRequestEnv)(req, 'abilities');
+    if (data.user_id !== userId) {
+        if (!abilities.has(core_kit_1.PermissionName.USER_UPDATE) ||
+            !(0, core_kit_1.isRealmResourceWritable)((0, utils_2.useRequestEnv)(req, 'realm'), data.realm_id)) {
             throw new http_1.ForbiddenError('You are not permitted to set an attribute for the given user...');
         }
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     const entity = repository.create(data);
+    if (data.user_id !== userId &&
+        !abilities.can(core_kit_1.PermissionName.USER_UPDATE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createUserAttributeRouteHandler = createUserAttributeRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/user-attribute/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAyD;AACzD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAChC,CAAC;SAAM,CAAC;QACJ,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,IACI,IAAI,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAC/C,CAAC;QACC,IACI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,iEAAiE,CAAC,CAAC;QAChG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAnCD,0EAmCC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,0EA+CC;AA7DD,qCAA6D;AAC7D,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAA0D;AAC1D,6CAAkE;AAClE,0CAA+C;AAC/C,oCAAyD;AACzD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAChC,CAAC;SAAM,CAAC;QACJ,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAC1B,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,SAAS,CAAC,CAAC,CAAC;QACxE,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC1B,IACI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC;YAC1C,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,iEAAiE,CAAC,CAAC;QAChG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,IACI,IAAI,CAAC,OAAO,KAAK,MAAM;QACvB,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EACpE,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user-attribute/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8BhG"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA6BhG"}

package/dist/http/controllers/user-attribute/handlers/delete.js

@@ -6,25 +6,28 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserAttributeRouteHandler = void 0;
+exports.deleteUserAttributeRouteHandler = deleteUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function deleteUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     const entity = await repository.findOneBy({ id });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (entity.user_id !== (0, env_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, env_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
-            !(0, core_kit_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
-            throw new http_1.ForbiddenError('You are not permitted to drop an attribute for the given user...');
+    if (entity.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
+        if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
+            throw new http_1.ForbiddenError('You are not permitted for the resource realm.');
+        }
+        if (!(0, utils_1.useRequestEnv)(req, 'abilities').can(core_kit_1.PermissionName.USER_UPDATE, { attributes: entity })) {
+            throw new http_1.ForbiddenError();
         }
     }
     const { id: entityId } = entity;
@@ -32,5 +35,4 @@ async function deleteUserAttributeRouteHandler(req, res) {
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteUserAttributeRouteHandler = deleteUserAttributeRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/user-attribute/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,kEAAkE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,0EA8BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,0EA6BC;AAvCD,qCAA2D;AAE3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAA0D;AAC1D,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,qBAAc,CAAC,+CAA+C,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,qBAAc,EAAE,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-attribute/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAchD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuCjG;AAED,wBAAsB,+BAA+B,CACjD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CAwBf"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAehD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4CjG;AAED,wBAAsB,+BAA+B,CACjD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CA8Bf"}

package/dist/http/controllers/user-attribute/handlers/read.js

@@ -6,7 +6,8 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneUserAttributeRouteHandler = exports.getManyUserAttributeRouteHandler = void 0;
+exports.getManyUserAttributeRouteHandler = getManyUserAttributeRouteHandler;
+exports.getOneUserAttributeRouteHandler = getOneUserAttributeRouteHandler;
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_1 = require("typeorm");
@@ -14,16 +15,21 @@ const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 const utils_1 = require("../../../utils");
 async function getManyUserAttributeRouteHandler(req, res) {
+    const userId = (0, utils_1.useRequestEnv)(req, 'userId');
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!userId && !ability.has(core_kit_1.PermissionName.USER_READ)) {
+        throw new http_1.ForbiddenError();
+    }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     const query = repository.createQueryBuilder('userAttribute');
-    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
     query.where(new typeorm_1.Brackets((qb) => {
         (0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_1.useRequestEnv)(req, 'realm'));
-        if (!ability.has(core_kit_1.PermissionName.USER_EDIT)) {
-            qb.orWhere('userAttribute.user_id = :userId', { userId: (0, utils_1.useRequestEnv)(req, 'userId') });
+        if (!ability.has(core_kit_1.PermissionName.USER_READ)) {
+            qb.orWhere('userAttribute.user_id = :userId', { userId });
         }
     }));
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
@@ -47,23 +53,26 @@ async function getManyUserAttributeRouteHandler(req, res) {
         },
     });
 }
-exports.getManyUserAttributeRouteHandler = getManyUserAttributeRouteHandler;
 async function getOneUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    if (typeof id !== 'string') {
-        throw new http_1.BadRequestError();
+    const id = (0, request_1.useRequestIDParam)(req);
+    const userId = (0, utils_1.useRequestEnv)(req, 'userId');
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!userId && !ability.has(core_kit_1.PermissionName.USER_READ)) {
+        throw new http_1.ForbiddenError();
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
-    const result = await repository.findOneBy({ id });
-    if (!result) {
+    const entity = await repository.findOneBy({ id });
+    if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (!(0, core_kit_1.isRealmResourceReadable)((0, utils_1.useRequestEnv)(req, 'realm'), result.realm_id) &&
-        (0, utils_1.useRequestEnv)(req, 'userId') !== result.user_id) {
-        throw new http_1.ForbiddenError('You are not authorized to read this user attribute...');
+    if (!(0, core_kit_1.isRealmResourceReadable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
+        throw new http_1.ForbiddenError('You are not permitted for the resource realm.');
     }
-    return (0, routup_1.send)(res, result);
+    if (userId !== entity.user_id &&
+        !ability.can(core_kit_1.PermissionName.USER_READ, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
+    return (0, routup_1.send)(res, entity);
 }
-exports.getOneUserAttributeRouteHandler = getOneUserAttributeRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/user-attribute/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,qCAAmC;AACnC,yDAE2B;AAC3B,qCAA4E;AAC5E,+CAA2E;AAC3E,iDAG6B;AAC7B,0CAA+C;AAExC,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,KAAK,CAAC,KAAK,CAAC,IAAI,kBAAQ,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5B,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,eAAe;QAC7B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;SACjD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SAC7E;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KAEJ,CAAC,CAAC;AACP,CAAC;AAvCD,4EAuCC;AAEM,KAAK,UAAU,+BAA+B,CACjD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAe,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,MAAM,CAAC,OAAO,EACjD,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA3BD,0EA2BC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkBH,4EA4CC;AAED,0EAiCC;AA/FD,+CAAsD;AAEtD,mCAA8B;AAC9B,qCAAmC;AACnC,yDAE2B;AAC3B,qCAA2D;AAC3D,+CAA2E;AAC3E,iDAG6B;AAC7B,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,KAAK,CAAC,KAAK,CAAC,IAAI,kBAAQ,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5B,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,eAAe;QAC7B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;SACjD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SAC7E;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KAEJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,+BAA+B,CACjD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IAED,IACI,MAAM,KAAK,MAAM,CAAC,OAAO;QACzB,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAChE,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user-attribute/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgChG"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiChG"}

package/dist/http/controllers/user-attribute/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateUserAttributeRouteHandler = void 0;
+exports.updateUserAttributeRouteHandler = updateUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -16,7 +16,7 @@ const utils_1 = require("../../../utils");
 const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function updateUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const validator = new utils_2.UserAttributeRequestValidator();
     const data = await validator.execute(req, {
         group: request_1.RequestHandlerOperation.UPDATE,
@@ -28,8 +28,10 @@ async function updateUserAttributeRouteHandler(req, res) {
         throw new http_1.NotFoundError();
     }
     entity = repository.merge(entity, data);
-    if (entity.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, utils_1.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_EDIT) ||
+    const userId = (0, utils_1.useRequestEnv)(req, 'userId');
+    const abilities = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (entity.user_id !== userId) {
+        if (!abilities.can(core_kit_1.PermissionName.USER_UPDATE, { attributes: entity }) ||
             !(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
             throw new http_1.ForbiddenError('You are not permitted to update an attribute for the given user...');
         }
@@ -37,5 +39,4 @@ async function updateUserAttributeRouteHandler(req, res) {
     await repository.save(entity);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updateUserAttributeRouteHandler = updateUserAttributeRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/user-attribute/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAyD;AACzD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;YAC9D,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,oEAAoE,CAAC,CAAC;QACnG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAhCD,0EAgCC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,0EAiCC;AA3CD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAyD;AACzD,8CAA8E;AAEvE,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,IACI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YAClE,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,oEAAoE,CAAC,CAAC;QACnG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-permission/handlers/create.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserPermissionRouteHandler = void 0;
+exports.createUserPermissionRouteHandler = createUserPermissionRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -24,7 +24,7 @@ const request_1 = require("../../../request");
  */
 async function createUserPermissionRouteHandler(req, res) {
     const abilities = (0, utils_2.useRequestEnv)(req, 'abilities');
-    if (!abilities.has(core_kit_1.PermissionName.USER_PERMISSION_ADD)) {
+    if (!abilities.has(core_kit_1.PermissionName.USER_PERMISSION_CREATE)) {
         throw new http_1.ForbiddenError();
     }
     // ----------------------------------------------
@@ -33,7 +33,7 @@ async function createUserPermissionRouteHandler(req, res) {
         group: request_1.RequestHandlerOperation.CREATE,
     });
     const policyEvaluationContext = {
-        resource: data,
+        attributes: data,
     };
     // ----------------------------------------------
     if (data.permission) {
@@ -42,7 +42,7 @@ async function createUserPermissionRouteHandler(req, res) {
         }
         data.permission_realm_id = data.permission.realm_id;
         const ability = (0, core_kit_1.buildAbilityFromPermission)(data.permission);
-        if (!abilities.has(ability, policyEvaluationContext)) {
+        if (!abilities.can(ability, policyEvaluationContext)) {
             throw new http_1.ForbiddenError('The target permission is not owned.');
         }
     }
@@ -54,7 +54,7 @@ async function createUserPermissionRouteHandler(req, res) {
         data.user_realm_id = data.user.realm_id;
     }
     // ----------------------------------------------
-    if (!abilities.has(core_kit_1.PermissionName.USER_PERMISSION_ADD, policyEvaluationContext)) {
+    if (!abilities.can(core_kit_1.PermissionName.USER_PERMISSION_CREATE, policyEvaluationContext)) {
         throw new http_1.ForbiddenError();
     }
     // ----------------------------------------------
@@ -64,5 +64,4 @@ async function createUserPermissionRouteHandler(req, res) {
     entity = await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createUserPermissionRouteHandler = createUserPermissionRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/user-permission/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA6D;AAC7D,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAA2D;AAC3D,6CAAkE;AAClE,0CAA+C;AAC/C,oCAA0D;AAC1D,8CAA2D;AAE3D;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,SAAS,GAAG,IAAI,sCAA8B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAA6B;QACtD,QAAQ,EAAE,IAA4C;KACzD,CAAC;IAEF,iDAAiD;IAEjD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAEpD,MAAM,OAAO,GAAG,IAAA,qCAA0B,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAc,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;IAED,iDAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,SAAS,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAzDD,4EAyDC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAsBH,4EAyDC;AA5ED,qCAA6D;AAC7D,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAA2D;AAC3D,6CAAkE;AAClE,0CAA+C;AAC/C,oCAA0D;AAC1D,8CAA2D;AAE3D;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,SAAS,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,SAAS,GAAG,IAAI,sCAA8B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAA6B;QACtD,UAAU,EAAE,IAA4C;KAC3D,CAAC;IAEF,iDAAiD;IAEjD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAEpD,MAAM,OAAO,GAAG,IAAA,qCAA0B,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAc,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;IAED,iDAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,SAAS,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user-permission/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+CjG"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+CjG"}

package/dist/http/controllers/user-permission/handlers/delete.js

@@ -6,12 +6,13 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserPermissionRouteHandler = void 0;
+exports.deleteUserPermissionRouteHandler = deleteUserPermissionRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 const utils_1 = require("../../../utils");
 /**
  * Drop a permission by id of a specific user.
@@ -20,9 +21,9 @@ const utils_1 = require("../../../utils");
  * @param res
  */
 async function deleteUserPermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.USER_PERMISSION_DROP)) {
+    if (!ability.has(core_kit_1.PermissionName.USER_PERMISSION_DELETE)) {
         throw new http_1.ForbiddenError();
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -44,7 +45,7 @@ async function deleteUserPermissionRouteHandler(req, res) {
         throw new http_1.ForbiddenError();
     }
     // ----------------------------------------------
-    if (!ability.has(core_kit_1.PermissionName.USER_PERMISSION_DROP, { resource: entity })) {
+    if (!ability.can(core_kit_1.PermissionName.USER_PERMISSION_DELETE, { attributes: entity })) {
         throw new http_1.ForbiddenError();
     }
     // ----------------------------------------------
@@ -54,5 +55,4 @@ async function deleteUserPermissionRouteHandler(req, res) {
     // ----------------------------------------------
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteUserPermissionRouteHandler = deleteUserPermissionRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/user-permission/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,0CAA+C;AAE/C;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,EAAE;SACL;QACD,SAAS,EAAE;YACP,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;SACnB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA/CD,4EA+CC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,4EA+CC;AA9DD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAA2D;AAC3D,8CAAqD;AACrD,0CAA+C;AAE/C;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,EAAE;SACL;QACD,SAAS,EAAE;YACP,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;SACnB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-permission/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwBlG;AAID;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAYjG"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiClG;AAID;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAqBjG"}