@autofleet/zehut 3.1.2-beta.13 → 3.1.2-beta.15

package/lib/user/ApiUser.js

@@ -82,13 +82,13 @@ class ApiUser {
         return Object.keys(this.privatePermissions[key] || {});
     }
     get elevatedPermissions() {
-        let permissions = {
+        const permissions = {
             fleets: {},
             businessModels: {},
             demandSources: {},
         };
         [...this.privateElevatedPermissionsHash.values()].forEach((elevatedPermissions) => {
-            permissions = (0, utils_1.mergePermissions)(permissions, elevatedPermissions);
+            (0, utils_1.mergePermissions)(permissions, elevatedPermissions);
         });
         return permissions;
     }
@@ -96,7 +96,14 @@ class ApiUser {
         if (!this.privatePermissions) {
             throw new Error('Cannot get permissions without calling (async) getUserPermissions before');
         }
-        const permissions = (0, utils_1.mergePermissions)(this.privatePermissions, this.elevatedPermissions);
+        const permissions = {
+            ...this.privatePermissions,
+            fleets: { ...this.privatePermissions.fleets },
+            businessModels: { ...this.privatePermissions.businessModels },
+            demandSources: { ...this.privatePermissions.demandSources },
+            // Clone other nested objects as needed
+        };
+        (0, utils_1.mergePermissions)(permissions, this.elevatedPermissions);
         return permissions;
     }
     elevatePermissions(addedPermissions) {

package/lib/user/api-user-flows.test.js

@@ -136,7 +136,7 @@ describe('E2E', () => {
         closeServer1();
         expect(error.message).toEqual('Entity id on elevatePermissions is not a valid UUID, provided: nnn');
     });
-    it.only('should correctly handle elevation of permissions and their reversion', async () => {
+    it('should correctly handle elevation of permissions and their reversion', async () => {
         let capturedError = null;
         // Snapshots to capture state after each step
         let afterFirstElevationElevated = {

package/lib/utils.js

@@ -98,13 +98,14 @@ const getContextAttributes = (contextId, decodedToken) => {
 };
 exports.getContextAttributes = getContextAttributes;
 const mergePermissions = (target, sources) => {
-    const base = JSON.parse(JSON.stringify(target));
     Object.keys(sources).forEach((topLevelKey) => {
-        base[topLevelKey] ?? (base[topLevelKey] = {});
+        // eslint-disable-next-line no-param-reassign
+        target[topLevelKey] ?? (target[topLevelKey] = {});
         Object.entries(sources[topLevelKey]).forEach(([entityId, perms]) => {
-            base[topLevelKey][entityId] = (base[topLevelKey][entityId] || []).concat(perms);
+            // eslint-disable-next-line no-param-reassign
+            target[topLevelKey][entityId] = (target[topLevelKey][entityId] || []).concat(perms);
         });
     });
-    return base;
+    return target;
 };
 exports.mergePermissions = mergePermissions;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autofleet/zehut",
-  "version": "3.1.2-beta.13",
+  "version": "3.1.2-beta.15",
   "description": "manage user's identity",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",