@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/http/controllers/user/utils/validator.js

@@ -0,0 +1,81 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserRequestValidator = void 0;
+const core_kit_1 = require("@authup/core-kit");
+const http_1 = require("@ebec/http");
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
+const request_1 = require("../../../request");
+class UserRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
+    }
+    mountAll() {
+        this.mount('name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .notEmpty()
+            .custom((value) => {
+            const isValid = (0, core_kit_1.isValidUserName)(value);
+            if (!isValid) {
+                throw new http_1.BadRequestError('Only the characters [A-Za-z0-9-_.]+ are allowed.');
+            }
+            return isValid;
+        })
+            .optional({ nullable: true })));
+        this.mount('name_locked', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isBoolean()
+            .optional()));
+        // ----------------------------------------------
+        this.mount('first_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .notEmpty()
+            .isLength({ min: 3, max: 128 })
+            .optional({ nullable: true })));
+        this.mount('last_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .notEmpty()
+            .isLength({ min: 3, max: 128 })
+            .optional({ nullable: true })));
+        // ----------------------------------------------
+        this.mount('display_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isString()
+            .isLength({ min: 3, max: 256 })
+            .optional({ values: 'null' })));
+        // ----------------------------------------------
+        this.mount('email', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .isEmail()
+            .optional({ nullable: true })));
+        // ----------------------------------------------
+        this.mount('password', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .isLength({ min: 5, max: 512 })
+            .optional({ nullable: true })));
+        // ----------------------------------------------
+        this.mount('active', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isBoolean()
+            .optional()));
+        this.mount('name_locked', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isBoolean()
+            .optional()));
+        this.mount('realm_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .isUUID()
+            .optional()));
+        this.mount('status', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .isLength({ min: 5, max: 256 })
+            .optional({ nullable: true })));
+        this.mount('status_message', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .isLength({ min: 5, max: 256 })
+            .optional({ nullable: true })));
+    }
+}
+exports.UserRequestValidator = UserRequestValidator;
+//# sourceMappingURL=validator.js.map

package/dist/http/controllers/user/utils/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/utils/validator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAE0B;AAC1B,qCAA6C;AAC7C,kEAA6D;AAE7D,qCAAoC;AAEpC,8CAA2D;AAE3D,MAAa,oBAAqB,SAAQ,mBAEzC;IACG,YAAY,UAAwC,EAAE;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC9C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,OAAO,GAAG,IAAA,0BAAe,EAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,sBAAe,CAAC,kDAAkD,CAAC,CAAC;YAClF,CAAC;YAED,OAAO,OAAO,CAAC;QACnB,CAAC,CAAC;aACD,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACrD,SAAS,EAAE;aACX,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElB,iDAAiD;QAEjD,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACpD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACnD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,iDAAiD;QAEjD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACtD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,iDAAiD;QAEjD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC/C,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,iDAAiD;QAEjD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAClD,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,iDAAiD;QAEjD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAChD,SAAS,EAAE;aACX,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACrD,SAAS,EAAE;aACX,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElB,IAAI,CAAC,KAAK,CACN,UAAU,EACV,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,EAAE,CAAC,CACnB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAChD,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACxD,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;CACJ;AAzFD,oDAyFC"}

package/dist/http/controllers/user-attribute/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAyBhG"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiDhG"}

package/dist/http/controllers/user-attribute/handlers/create.js

@@ -6,31 +6,54 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserAttributeRouteHandler = void 0;
+exports.createUserAttributeRouteHandler = createUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
-const utils_1 = require("../utils");
-const constants_1 = require("../../../request/constants");
+const utils_1 = require("../../../../utils");
+const utils_2 = require("../utils");
+const request_1 = require("../../../request");
+const authorization_1 = require("../utils/authorization");
 async function createUserAttributeRouteHandler(req, res) {
-    const result = await (0, utils_1.runUserAttributeValidation)(req, constants_1.RequestHandlerOperation.CREATE);
-    if (!result) {
-        return (0, routup_1.sendAccepted)(res);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_SELF_MANAGE,
+        ],
+    });
+    const validator = new utils_2.UserAttributeRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group: request_1.RequestHandlerOperation.CREATE,
+    });
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.UserAttributeEntity,
+    });
+    const identity = (0, request_1.useRequestIdentity)(req);
+    if (data.user) {
+        data.realm_id = data.user.realm_id;
     }
-    if (result.data.user_id !== (0, env_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, env_1.useRequestEnv)(req, 'ability').has(core_1.PermissionName.USER_EDIT) ||
-            !(0, core_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), result.data.realm_id)) {
-            throw new http_1.ForbiddenError('You are not permitted to set an attribute for the given user...');
-        }
+    else if (identity &&
+        identity.type === 'user') {
+        data.user_id = identity.id;
+        data.realm_id = identity.realmId;
+    }
+    else {
+        throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForAttribute)('user_id'));
     }
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
-    const entity = repository.create(result.data);
+    const entity = repository.create(data);
+    const canAbility = await (0, authorization_1.canRequestManageUserAttribute)(req, entity);
+    if (!canAbility) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createUserAttributeRouteHandler = createUserAttributeRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/user-attribute/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,uCAGsB;AAEtB,mCAAmD;AACnD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AACnD,oCAAsD;AACtD,0DAAqE;AAE9D,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IACI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACtD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,qBAAc,CAAC,SAAS,CAAC;YAC5D,CAAC,IAAA,8BAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7E,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,iEAAiE,CAAC,CAAC;QAChG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE9C,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAzBD,0EAyBC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,0EAiDC;AA/DD,qCAA6D;AAC7D,+CAE0B;AAE1B,mCAAqC;AACrC,yDAA6E;AAC7E,4DAAiE;AACjE,iDAA0D;AAC1D,6CAAkE;AAClE,oCAAyD;AACzD,8CAA8F;AAC9F,0DAAuE;AAEhE,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IACtD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,6BAAmB;KACpC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IACvC,CAAC;SAAM,IACH,QAAQ;QACR,QAAQ,CAAC,IAAI,KAAK,MAAM,EAC1B,CAAC;QACC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;IACrC,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAA6B,EAClD,GAAG,EACH,MAAM,CACT,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user-attribute/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8BhG"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgChG"}

package/dist/http/controllers/user-attribute/handlers/delete.js

@@ -6,31 +6,36 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserAttributeRouteHandler = void 0;
+exports.deleteUserAttributeRouteHandler = deleteUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const request_1 = require("../../../request");
+const authorization_1 = require("../utils/authorization");
 async function deleteUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_SELF_MANAGE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     const entity = await repository.findOneBy({ id });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (entity.user_id !== (0, env_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, env_1.useRequestEnv)(req, 'ability').has(core_1.PermissionName.USER_EDIT) ||
-            !(0, core_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
-            throw new http_1.ForbiddenError('You are not permitted to drop an attribute for the given user...');
-        }
+    const canAbility = await (0, authorization_1.canRequestManageUserAttribute)(req, entity);
+    if (!canAbility) {
+        throw new http_1.ForbiddenError();
     }
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteUserAttributeRouteHandler = deleteUserAttributeRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/user-attribute/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAE3D,uCAAuE;AAEvE,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,4CAAmD;AAE5C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,qBAAc,CAAC,SAAS,CAAC;YAC5D,CAAC,IAAA,8BAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,kEAAkE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,0EA8BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,0EAgCC;AAzCD,qCAA2D;AAC3D,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAA0D;AAC1D,8CAAoE;AACpE,0DAAuE;AAEhE,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,6CAA6B,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-attribute/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAchD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuCjG;AAED,wBAAsB,+BAA+B,CACjD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CAwBf"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAahD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiDjG;AAED,wBAAsB,+BAA+B,CACjD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CAyBf"}

package/dist/http/controllers/user-attribute/handlers/read.js

@@ -6,26 +6,27 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneUserAttributeRouteHandler = exports.getManyUserAttributeRouteHandler = void 0;
+exports.getManyUserAttributeRouteHandler = getManyUserAttributeRouteHandler;
+exports.getOneUserAttributeRouteHandler = getOneUserAttributeRouteHandler;
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
-const typeorm_1 = require("typeorm");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
+const request_1 = require("../../../request");
+const authorization_1 = require("../utils/authorization");
 async function getManyUserAttributeRouteHandler(req, res) {
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_SELF_MANAGE,
+        ],
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     const query = repository.createQueryBuilder('userAttribute');
-    const ability = (0, utils_1.useRequestEnv)(req, 'ability');
-    query.where(new typeorm_1.Brackets((qb) => {
-        (0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_1.useRequestEnv)(req, 'realm'));
-        if (!ability.has(core_1.PermissionName.USER_EDIT)) {
-            qb.orWhere('userAttribute.user_id = :userId', { userId: (0, utils_1.useRequestEnv)(req, 'userId') });
-        }
-    }));
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'userAttribute',
         filters: {
@@ -38,32 +39,46 @@ async function getManyUserAttributeRouteHandler(req, res) {
             maxLimit: 50,
         },
     });
-    const [entities, total] = await query.getManyAndCount();
+    const queryOutput = await query.getManyAndCount();
+    const [entities] = queryOutput;
+    let [, total] = queryOutput;
+    const data = [];
+    for (let i = 0; i < entities.length; i++) {
+        const canAbility = await (0, authorization_1.canRequestManageUserAttribute)(req, entities[i]);
+        if (canAbility) {
+            data.push(entities[i]);
+        }
+        else {
+            total--;
+        }
+    }
     return (0, routup_1.send)(res, {
-        data: entities,
+        data,
         meta: {
             total,
             ...pagination,
         },
     });
 }
-exports.getManyUserAttributeRouteHandler = getManyUserAttributeRouteHandler;
 async function getOneUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    if (typeof id !== 'string') {
-        throw new http_1.BadRequestError();
-    }
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_SELF_MANAGE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
-    const result = await repository.findOneBy({ id });
-    if (!result) {
+    const entity = await repository.findOneBy({ id });
+    if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (!(0, core_1.isRealmResourceReadable)((0, utils_1.useRequestEnv)(req, 'realm'), result.realm_id) &&
-        (0, utils_1.useRequestEnv)(req, 'userId') !== result.user_id) {
-        throw new http_1.ForbiddenError('You are not authorized to read this user attribute...');
+    const canAbility = await (0, authorization_1.canRequestManageUserAttribute)(req, entity);
+    if (!canAbility) {
+        throw new http_1.ForbiddenError();
     }
-    return (0, routup_1.send)(res, result);
+    return (0, routup_1.send)(res, entity);
 }
-exports.getOneUserAttributeRouteHandler = getOneUserAttributeRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/user-attribute/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,qCAAmC;AACnC,yDAE2B;AAC3B,qCAA4E;AAC5E,uCAAuE;AACvE,iDAG6B;AAC7B,0CAA+C;AAExC,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAE9C,KAAK,CAAC,KAAK,CAAC,IAAI,kBAAQ,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5B,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,EAAE,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,eAAe;QAC7B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;SACjD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SAC7E;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KAEJ,CAAC,CAAC;AACP,CAAC;AAvCD,4EAuCC;AAEM,KAAK,UAAU,+BAA+B,CACjD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAe,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,MAAM,CAAC,OAAO,EACjD,CAAC;QACC,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA3BD,0EA2BC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,4EAiDC;AAED,0EA4BC;AA7FD,+CAAsD;AAEtD,mCAA8B;AAC9B,yDAE2B;AAC3B,qCAA2D;AAC3D,+CAAkD;AAClD,iDAE6B;AAC7B,8CAAoE;AACpE,0DAAuE;AAEhE,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAE7D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,eAAe;QAC7B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;SACjD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SAC7E;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAClD,MAAM,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC;IAC/B,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC;IAE5B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAA6B,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzE,IAAI,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,KAAK,EAAE,CAAC;QACZ,CAAC;IACL,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI;QACJ,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,+BAA+B,CACjD,GAAY,EACZ,GAAa;IAEb,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,6CAA6B,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user-attribute/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgChG"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAWhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwChG"}

package/dist/http/controllers/user-attribute/handlers/update.js

@@ -6,36 +6,46 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateUserAttributeRouteHandler = void 0;
+exports.updateUserAttributeRouteHandler = updateUserAttributeRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
 const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
-const utils_2 = require("../utils");
+const utils_1 = require("../utils");
 const request_1 = require("../../../request");
+const authorization_1 = require("../utils/authorization");
 async function updateUserAttributeRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    const result = await (0, utils_2.runUserAttributeValidation)(req, request_1.RequestHandlerOperation.UPDATE);
-    if (!result) {
-        return (0, routup_1.sendAccepted)(res);
-    }
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.checkOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_SELF_MANAGE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req);
+    const validator = new utils_1.UserAttributeRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group: request_1.RequestHandlerOperation.UPDATE,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.UserAttributeEntity,
+    });
     const repository = dataSource.getRepository(domains_1.UserAttributeEntity);
     let entity = await repository.findOneBy({ id });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    entity = repository.merge(entity, result.data);
-    if (entity.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
-        if (!(0, utils_1.useRequestEnv)(req, 'ability').has(core_1.PermissionName.USER_EDIT) ||
-            !(0, core_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
-            throw new http_1.ForbiddenError('You are not permitted to update an attribute for the given user...');
-        }
+    entity = repository.merge(entity, data);
+    const canAbility = await (0, authorization_1.canRequestManageUserAttribute)(req, entity);
+    if (!canAbility) {
+        throw new http_1.ForbiddenError();
     }
     await repository.save(entity);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updateUserAttributeRouteHandler = updateUserAttributeRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/user-attribute/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,uCAAuE;AAEvE,mCAAuD;AACvD,yDAAkD;AAClD,iDAA0D;AAC1D,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA0B,EAAC,GAAG,EAAE,iCAAuB,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IAEjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAE/C,IACI,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;QACC,IACI,CAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,qBAAc,CAAC,SAAS,CAAC;YAC5D,CAAC,IAAA,8BAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxE,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,oEAAoE,CAAC,CAAC;QACnG,CAAC;IACL,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAhCD,0EAgCC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAeH,0EAwCC;AArDD,qCAA2D;AAC3D,+CAAkD;AAElD,mCAAsC;AACtC,yDAA6E;AAC7E,4DAAiE;AACjE,iDAA0D;AAC1D,oCAAyD;AACzD,8CAE0B;AAC1B,0DAAuE;AAEhE,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,UAAU,CAAC;QAC/B,IAAI,EAAE;YAEF,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,SAAS,GAAG,IAAI,qCAA6B,EAAE,CAAC;IACtD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,6BAAmB;KACpC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,6BAAmB,CAAC,CAAC;IACjE,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAA6B,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-attribute/module.d.ts

@@ -1,4 +1,4 @@
-import type { UserAttribute } from '@authup/core';
+import type { UserAttribute } from '@authup/core-kit';
 export declare class UserAttributeController {
     getMany(req: any, res: any): Promise<UserAttribute[]>;
     add(user: NonNullable<UserAttribute>, req: any, res: any): Promise<UserAttribute>;

package/dist/http/controllers/user-attribute/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-attribute/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AASlD,qBAEa,uBAAuB;IAE1B,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,aAAa,EAAE,CAAC;IAKrB,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,EACzB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;IAKpB,GAAG,CACQ,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,aAAa,CAAC;IAKnB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,EAC7B,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;IAKpB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;CAG7B"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-attribute/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAStD,qBAEa,uBAAuB;IAE1B,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,aAAa,EAAE,CAAC;IAKrB,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,EACzB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;IAKpB,GAAG,CACQ,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,aAAa,CAAC;IAKnB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,EAC7B,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;IAKpB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACzB,OAAO,CAAC,aAAa,CAAC;CAG7B"}

package/dist/http/controllers/user-attribute/utils/authorization.d.ts

@@ -0,0 +1,4 @@
+import type { Request } from 'routup';
+import type { UserAttributeEntity } from '../../../../domains';
+export declare function canRequestManageUserAttribute(req: Request, entity: UserAttributeEntity): Promise<boolean>;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/http/controllers/user-attribute/utils/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/authorization.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,wBAAsB,6BAA6B,CAC/C,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,mBAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAuCnB"}

package/dist/http/controllers/user-attribute/utils/authorization.js

@@ -0,0 +1,49 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canRequestManageUserAttribute = canRequestManageUserAttribute;
+const core_kit_1 = require("@authup/core-kit");
+const request_1 = require("../../../request");
+async function canRequestManageUserAttribute(req, entity) {
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    const identity = (0, request_1.useRequestIdentity)(req);
+    const isMe = identity &&
+        identity.type === 'user' &&
+        identity.id === entity.user_id;
+    try {
+        if (isMe) {
+            await permissionChecker.check({
+                name: core_kit_1.PermissionName.USER_SELF_MANAGE,
+                data: {
+                    attributes: entity,
+                },
+            });
+            return true;
+        }
+    }
+    catch (e) {
+        if (!isMe) {
+            return false;
+        }
+    }
+    if (!isMe) {
+        try {
+            await permissionChecker.check({
+                name: core_kit_1.PermissionName.USER_UPDATE,
+                data: {
+                    attributes: entity,
+                },
+            });
+        }
+        catch (e) {
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=authorization.js.map

package/dist/http/controllers/user-attribute/utils/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/authorization.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,sEA0CC;AA/CD,+CAAkD;AAGlD,8CAAqE;AAE9D,KAAK,UAAU,6BAA6B,CAC/C,GAAY,EACZ,MAA2B;IAE3B,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,QAAQ;QACjB,QAAQ,CAAC,IAAI,KAAK,MAAM;QACxB,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC;IAEnC,IAAI,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,iBAAiB,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,yBAAc,CAAC,gBAAgB;gBACrC,IAAI,EAAE;oBACF,UAAU,EAAE,MAAM;iBACrB;aACJ,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,CAAC;YACD,MAAM,iBAAiB,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,yBAAc,CAAC,WAAW;gBAChC,IAAI,EAAE;oBACF,UAAU,EAAE,MAAM;iBACrB;aACJ,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/http/controllers/user-attribute/utils/validation.d.ts

@@ -1,6 +1,8 @@
-import type { Request } from 'routup';
+import type { ContainerOptions } from 'validup';
+import { Container } from 'validup';
 import type { UserAttributeEntity } from '../../../../domains';
-import type { ExpressValidationResult } from '../../../validation';
-import { RequestHandlerOperation } from '../../../request/constants';
-export declare function runUserAttributeValidation(req: Request, operation: `${RequestHandlerOperation.CREATE}` | `${RequestHandlerOperation.UPDATE}`): Promise<ExpressValidationResult<UserAttributeEntity>>;
+export declare class UserAttributeRequestValidator extends Container<UserAttributeEntity> {
+    constructor(options?: ContainerOptions<UserAttributeEntity>);
+    mountAll(): void;
+}
 //# sourceMappingURL=validation.d.ts.map

package/dist/http/controllers/user-attribute/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/validation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAMnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,wBAAsB,0BAA0B,CAC5C,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,GAAG,uBAAuB,CAAC,MAAM,EAAE,GACpF,OAAO,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC,CAmDxD"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/validation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,qBAAa,6BAA8B,SAAQ,SAAS,CAC5D,mBAAmB,CAClB;gBACe,OAAO,GAAE,gBAAgB,CAAC,mBAAmB,CAAM;IAM/D,QAAQ;CA2BX"}