@budibase/backend-core 2.9.39-alpha.8 → 2.9.39

package/dist/src/security/permissions.js

@@ -1,188 +1,150 @@
 "use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var permissions_exports = {};
-__export(permissions_exports, {
-  BUILDER: () => BUILDER,
-  BUILTIN_PERMISSIONS: () => BUILTIN_PERMISSIONS,
-  BuiltinPermissionID: () => BuiltinPermissionID,
-  GLOBAL_BUILDER: () => GLOBAL_BUILDER,
-  Permission: () => Permission,
-  PermissionLevel: () => import_types2.PermissionLevel,
-  PermissionType: () => import_types2.PermissionType,
-  doesHaveBasePermission: () => doesHaveBasePermission,
-  getAllowedLevels: () => getAllowedLevels,
-  getBuiltinPermissionByID: () => getBuiltinPermissionByID,
-  getBuiltinPermissions: () => getBuiltinPermissions,
-  isPermissionLevelHigherThanRead: () => isPermissionLevelHigherThanRead,
-  levelToNumber: () => levelToNumber
-});
-module.exports = __toCommonJS(permissions_exports);
-var import_types = require("@budibase/types");
-var import_types2 = require("@budibase/types");
-var import_flatten = __toESM(require("lodash/flatten"));
-var import_cloneDeep = __toESM(require("lodash/fp/cloneDeep"));
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GLOBAL_BUILDER = exports.BUILDER = exports.isPermissionLevelHigherThanRead = exports.doesHaveBasePermission = exports.getBuiltinPermissionByID = exports.getBuiltinPermissions = exports.BUILTIN_PERMISSIONS = exports.BuiltinPermissionID = exports.getAllowedLevels = exports.levelToNumber = exports.Permission = exports.PermissionLevel = exports.PermissionType = void 0;
+const types_1 = require("@budibase/types");
+var types_2 = require("@budibase/types");
+Object.defineProperty(exports, "PermissionType", { enumerable: true, get: function () { return types_2.PermissionType; } });
+Object.defineProperty(exports, "PermissionLevel", { enumerable: true, get: function () { return types_2.PermissionLevel; } });
+const flatten_1 = __importDefault(require("lodash/flatten"));
+const cloneDeep_1 = __importDefault(require("lodash/fp/cloneDeep"));
 class Permission {
-  constructor(type, level) {
-    this.type = type;
-    this.level = level;
-  }
+    constructor(type, level) {
+        this.type = type;
+        this.level = level;
+    }
 }
+exports.Permission = Permission;
 function levelToNumber(perm) {
-  switch (perm) {
-    case import_types.PermissionLevel.EXECUTE:
-      return 0;
-    case import_types.PermissionLevel.READ:
-      return 1;
-    case import_types.PermissionLevel.WRITE:
-      return 2;
-    case import_types.PermissionLevel.ADMIN:
-      return 3;
-    default:
-      return -1;
-  }
+    switch (perm) {
+        // not everything has execute privileges
+        case types_1.PermissionLevel.EXECUTE:
+            return 0;
+        case types_1.PermissionLevel.READ:
+            return 1;
+        case types_1.PermissionLevel.WRITE:
+            return 2;
+        case types_1.PermissionLevel.ADMIN:
+            return 3;
+        default:
+            return -1;
+    }
 }
+exports.levelToNumber = levelToNumber;
+/**
+ * Given the specified permission level for the user return the levels they are allowed to carry out.
+ * @param {string} userPermLevel The permission level of the user.
+ * @return {string[]} All the permission levels this user is allowed to carry out.
+ */
 function getAllowedLevels(userPermLevel) {
-  switch (userPermLevel) {
-    case import_types.PermissionLevel.EXECUTE:
-      return [import_types.PermissionLevel.EXECUTE];
-    case import_types.PermissionLevel.READ:
-      return [import_types.PermissionLevel.EXECUTE, import_types.PermissionLevel.READ];
-    case import_types.PermissionLevel.WRITE:
-    case import_types.PermissionLevel.ADMIN:
-      return [
-        import_types.PermissionLevel.EXECUTE,
-        import_types.PermissionLevel.READ,
-        import_types.PermissionLevel.WRITE
-      ];
-    default:
-      return [];
-  }
+    switch (userPermLevel) {
+        case types_1.PermissionLevel.EXECUTE:
+            return [types_1.PermissionLevel.EXECUTE];
+        case types_1.PermissionLevel.READ:
+            return [types_1.PermissionLevel.EXECUTE, types_1.PermissionLevel.READ];
+        case types_1.PermissionLevel.WRITE:
+        case types_1.PermissionLevel.ADMIN:
+            return [
+                types_1.PermissionLevel.EXECUTE,
+                types_1.PermissionLevel.READ,
+                types_1.PermissionLevel.WRITE,
+            ];
+        default:
+            return [];
+    }
 }
-var BuiltinPermissionID = /* @__PURE__ */ ((BuiltinPermissionID2) => {
-  BuiltinPermissionID2["PUBLIC"] = "public";
-  BuiltinPermissionID2["READ_ONLY"] = "read_only";
-  BuiltinPermissionID2["WRITE"] = "write";
-  BuiltinPermissionID2["ADMIN"] = "admin";
-  BuiltinPermissionID2["POWER"] = "power";
-  return BuiltinPermissionID2;
-})(BuiltinPermissionID || {});
-const BUILTIN_PERMISSIONS = {
-  PUBLIC: {
-    _id: "public" /* PUBLIC */,
-    name: "Public",
-    permissions: [
-      new Permission(import_types.PermissionType.WEBHOOK, import_types.PermissionLevel.EXECUTE)
-    ]
-  },
-  READ_ONLY: {
-    _id: "read_only" /* READ_ONLY */,
-    name: "Read only",
-    permissions: [
-      new Permission(import_types.PermissionType.QUERY, import_types.PermissionLevel.READ),
-      new Permission(import_types.PermissionType.TABLE, import_types.PermissionLevel.READ)
-    ]
-  },
-  WRITE: {
-    _id: "write" /* WRITE */,
-    name: "Read/Write",
-    permissions: [
-      new Permission(import_types.PermissionType.QUERY, import_types.PermissionLevel.WRITE),
-      new Permission(import_types.PermissionType.TABLE, import_types.PermissionLevel.WRITE),
-      new Permission(import_types.PermissionType.AUTOMATION, import_types.PermissionLevel.EXECUTE),
-      new Permission(import_types.PermissionType.LEGACY_VIEW, import_types.PermissionLevel.READ)
-    ]
-  },
-  POWER: {
-    _id: "power" /* POWER */,
-    name: "Power",
-    permissions: [
-      new Permission(import_types.PermissionType.TABLE, import_types.PermissionLevel.WRITE),
-      new Permission(import_types.PermissionType.USER, import_types.PermissionLevel.READ),
-      new Permission(import_types.PermissionType.AUTOMATION, import_types.PermissionLevel.EXECUTE),
-      new Permission(import_types.PermissionType.WEBHOOK, import_types.PermissionLevel.READ),
-      new Permission(import_types.PermissionType.LEGACY_VIEW, import_types.PermissionLevel.READ)
-    ]
-  },
-  ADMIN: {
-    _id: "admin" /* ADMIN */,
-    name: "Admin",
-    permissions: [
-      new Permission(import_types.PermissionType.TABLE, import_types.PermissionLevel.ADMIN),
-      new Permission(import_types.PermissionType.USER, import_types.PermissionLevel.ADMIN),
-      new Permission(import_types.PermissionType.AUTOMATION, import_types.PermissionLevel.ADMIN),
-      new Permission(import_types.PermissionType.WEBHOOK, import_types.PermissionLevel.READ),
-      new Permission(import_types.PermissionType.QUERY, import_types.PermissionLevel.ADMIN),
-      new Permission(import_types.PermissionType.LEGACY_VIEW, import_types.PermissionLevel.READ)
-    ]
-  }
+exports.getAllowedLevels = getAllowedLevels;
+var BuiltinPermissionID;
+(function (BuiltinPermissionID) {
+    BuiltinPermissionID["PUBLIC"] = "public";
+    BuiltinPermissionID["READ_ONLY"] = "read_only";
+    BuiltinPermissionID["WRITE"] = "write";
+    BuiltinPermissionID["ADMIN"] = "admin";
+    BuiltinPermissionID["POWER"] = "power";
+})(BuiltinPermissionID = exports.BuiltinPermissionID || (exports.BuiltinPermissionID = {}));
+exports.BUILTIN_PERMISSIONS = {
+    PUBLIC: {
+        _id: BuiltinPermissionID.PUBLIC,
+        name: "Public",
+        permissions: [
+            new Permission(types_1.PermissionType.WEBHOOK, types_1.PermissionLevel.EXECUTE),
+        ],
+    },
+    READ_ONLY: {
+        _id: BuiltinPermissionID.READ_ONLY,
+        name: "Read only",
+        permissions: [
+            new Permission(types_1.PermissionType.QUERY, types_1.PermissionLevel.READ),
+            new Permission(types_1.PermissionType.TABLE, types_1.PermissionLevel.READ),
+        ],
+    },
+    WRITE: {
+        _id: BuiltinPermissionID.WRITE,
+        name: "Read/Write",
+        permissions: [
+            new Permission(types_1.PermissionType.QUERY, types_1.PermissionLevel.WRITE),
+            new Permission(types_1.PermissionType.TABLE, types_1.PermissionLevel.WRITE),
+            new Permission(types_1.PermissionType.AUTOMATION, types_1.PermissionLevel.EXECUTE),
+            new Permission(types_1.PermissionType.LEGACY_VIEW, types_1.PermissionLevel.READ),
+        ],
+    },
+    POWER: {
+        _id: BuiltinPermissionID.POWER,
+        name: "Power",
+        permissions: [
+            new Permission(types_1.PermissionType.TABLE, types_1.PermissionLevel.WRITE),
+            new Permission(types_1.PermissionType.USER, types_1.PermissionLevel.READ),
+            new Permission(types_1.PermissionType.AUTOMATION, types_1.PermissionLevel.EXECUTE),
+            new Permission(types_1.PermissionType.WEBHOOK, types_1.PermissionLevel.READ),
+            new Permission(types_1.PermissionType.LEGACY_VIEW, types_1.PermissionLevel.READ),
+        ],
+    },
+    ADMIN: {
+        _id: BuiltinPermissionID.ADMIN,
+        name: "Admin",
+        permissions: [
+            new Permission(types_1.PermissionType.TABLE, types_1.PermissionLevel.ADMIN),
+            new Permission(types_1.PermissionType.USER, types_1.PermissionLevel.ADMIN),
+            new Permission(types_1.PermissionType.AUTOMATION, types_1.PermissionLevel.ADMIN),
+            new Permission(types_1.PermissionType.WEBHOOK, types_1.PermissionLevel.READ),
+            new Permission(types_1.PermissionType.QUERY, types_1.PermissionLevel.ADMIN),
+            new Permission(types_1.PermissionType.LEGACY_VIEW, types_1.PermissionLevel.READ),
+        ],
+    },
 };
 function getBuiltinPermissions() {
-  return (0, import_cloneDeep.default)(BUILTIN_PERMISSIONS);
+    return (0, cloneDeep_1.default)(exports.BUILTIN_PERMISSIONS);
 }
+exports.getBuiltinPermissions = getBuiltinPermissions;
 function getBuiltinPermissionByID(id) {
-  const perms = Object.values(BUILTIN_PERMISSIONS);
-  return perms.find((perm) => perm._id === id);
+    const perms = Object.values(exports.BUILTIN_PERMISSIONS);
+    return perms.find(perm => perm._id === id);
 }
+exports.getBuiltinPermissionByID = getBuiltinPermissionByID;
 function doesHaveBasePermission(permType, permLevel, rolesHierarchy) {
-  const basePermissions = [
-    ...new Set(rolesHierarchy.map((role) => role.permissionId))
-  ];
-  const builtins = Object.values(BUILTIN_PERMISSIONS);
-  let permissions = (0, import_flatten.default)(
-    builtins.filter((builtin) => basePermissions.indexOf(builtin._id) !== -1).map((builtin) => builtin.permissions)
-  );
-  for (let permission of permissions) {
-    if (permission.type === permType && getAllowedLevels(permission.level).indexOf(permLevel) !== -1) {
-      return true;
+    const basePermissions = [
+        ...new Set(rolesHierarchy.map(role => role.permissionId)),
+    ];
+    const builtins = Object.values(exports.BUILTIN_PERMISSIONS);
+    let permissions = (0, flatten_1.default)(builtins
+        .filter(builtin => basePermissions.indexOf(builtin._id) !== -1)
+        .map(builtin => builtin.permissions));
+    for (let permission of permissions) {
+        if (permission.type === permType &&
+            getAllowedLevels(permission.level).indexOf(permLevel) !== -1) {
+            return true;
+        }
     }
-  }
-  return false;
+    return false;
 }
+exports.doesHaveBasePermission = doesHaveBasePermission;
 function isPermissionLevelHigherThanRead(level) {
-  return levelToNumber(level) > 1;
+    return levelToNumber(level) > 1;
 }
-const BUILDER = import_types.PermissionType.BUILDER;
-const GLOBAL_BUILDER = import_types.PermissionType.GLOBAL_BUILDER;
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  BUILDER,
-  BUILTIN_PERMISSIONS,
-  BuiltinPermissionID,
-  GLOBAL_BUILDER,
-  Permission,
-  PermissionLevel,
-  PermissionType,
-  doesHaveBasePermission,
-  getAllowedLevels,
-  getBuiltinPermissionByID,
-  getBuiltinPermissions,
-  isPermissionLevelHigherThanRead,
-  levelToNumber
-});
-//# sourceMappingURL=permissions.js.map
+exports.isPermissionLevelHigherThanRead = isPermissionLevelHigherThanRead;
+// utility as a lot of things need simply the builder permission
+exports.BUILDER = types_1.PermissionType.BUILDER;
+exports.GLOBAL_BUILDER = types_1.PermissionType.GLOBAL_BUILDER;
+//# sourceMappingURL=permissions.js.map

package/dist/src/security/permissions.js.map

@@ -1,7 +1 @@
-{
-  "version": 3,
-  "sources": ["../../../src/security/permissions.ts"],
-  "sourcesContent": ["import { PermissionType, PermissionLevel } from \"@budibase/types\"\nexport { PermissionType, PermissionLevel } from \"@budibase/types\"\nimport flatten from \"lodash/flatten\"\nimport cloneDeep from \"lodash/fp/cloneDeep\"\n\nexport type RoleHierarchy = {\n  permissionId: string\n}[]\n\nexport class Permission {\n  type: PermissionType\n  level: PermissionLevel\n\n  constructor(type: PermissionType, level: PermissionLevel) {\n    this.type = type\n    this.level = level\n  }\n}\n\nexport function levelToNumber(perm: PermissionLevel) {\n  switch (perm) {\n    // not everything has execute privileges\n    case PermissionLevel.EXECUTE:\n      return 0\n    case PermissionLevel.READ:\n      return 1\n    case PermissionLevel.WRITE:\n      return 2\n    case PermissionLevel.ADMIN:\n      return 3\n    default:\n      return -1\n  }\n}\n\n/**\n * Given the specified permission level for the user return the levels they are allowed to carry out.\n * @param {string} userPermLevel The permission level of the user.\n * @return {string[]} All the permission levels this user is allowed to carry out.\n */\nexport function getAllowedLevels(userPermLevel: PermissionLevel): string[] {\n  switch (userPermLevel) {\n    case PermissionLevel.EXECUTE:\n      return [PermissionLevel.EXECUTE]\n    case PermissionLevel.READ:\n      return [PermissionLevel.EXECUTE, PermissionLevel.READ]\n    case PermissionLevel.WRITE:\n    case PermissionLevel.ADMIN:\n      return [\n        PermissionLevel.EXECUTE,\n        PermissionLevel.READ,\n        PermissionLevel.WRITE,\n      ]\n    default:\n      return []\n  }\n}\n\nexport enum BuiltinPermissionID {\n  PUBLIC = \"public\",\n  READ_ONLY = \"read_only\",\n  WRITE = \"write\",\n  ADMIN = \"admin\",\n  POWER = \"power\",\n}\n\nexport const BUILTIN_PERMISSIONS = {\n  PUBLIC: {\n    _id: BuiltinPermissionID.PUBLIC,\n    name: \"Public\",\n    permissions: [\n      new Permission(PermissionType.WEBHOOK, PermissionLevel.EXECUTE),\n    ],\n  },\n  READ_ONLY: {\n    _id: BuiltinPermissionID.READ_ONLY,\n    name: \"Read only\",\n    permissions: [\n      new Permission(PermissionType.QUERY, PermissionLevel.READ),\n      new Permission(PermissionType.TABLE, PermissionLevel.READ),\n    ],\n  },\n  WRITE: {\n    _id: BuiltinPermissionID.WRITE,\n    name: \"Read/Write\",\n    permissions: [\n      new Permission(PermissionType.QUERY, PermissionLevel.WRITE),\n      new Permission(PermissionType.TABLE, PermissionLevel.WRITE),\n      new Permission(PermissionType.AUTOMATION, PermissionLevel.EXECUTE),\n      new Permission(PermissionType.LEGACY_VIEW, PermissionLevel.READ),\n    ],\n  },\n  POWER: {\n    _id: BuiltinPermissionID.POWER,\n    name: \"Power\",\n    permissions: [\n      new Permission(PermissionType.TABLE, PermissionLevel.WRITE),\n      new Permission(PermissionType.USER, PermissionLevel.READ),\n      new Permission(PermissionType.AUTOMATION, PermissionLevel.EXECUTE),\n      new Permission(PermissionType.WEBHOOK, PermissionLevel.READ),\n      new Permission(PermissionType.LEGACY_VIEW, PermissionLevel.READ),\n    ],\n  },\n  ADMIN: {\n    _id: BuiltinPermissionID.ADMIN,\n    name: \"Admin\",\n    permissions: [\n      new Permission(PermissionType.TABLE, PermissionLevel.ADMIN),\n      new Permission(PermissionType.USER, PermissionLevel.ADMIN),\n      new Permission(PermissionType.AUTOMATION, PermissionLevel.ADMIN),\n      new Permission(PermissionType.WEBHOOK, PermissionLevel.READ),\n      new Permission(PermissionType.QUERY, PermissionLevel.ADMIN),\n      new Permission(PermissionType.LEGACY_VIEW, PermissionLevel.READ),\n    ],\n  },\n}\n\nexport function getBuiltinPermissions() {\n  return cloneDeep(BUILTIN_PERMISSIONS)\n}\n\nexport function getBuiltinPermissionByID(id: string) {\n  const perms = Object.values(BUILTIN_PERMISSIONS)\n  return perms.find(perm => perm._id === id)\n}\n\nexport function doesHaveBasePermission(\n  permType: PermissionType,\n  permLevel: PermissionLevel,\n  rolesHierarchy: RoleHierarchy\n) {\n  const basePermissions = [\n    ...new Set(rolesHierarchy.map(role => role.permissionId)),\n  ]\n  const builtins = Object.values(BUILTIN_PERMISSIONS)\n  let permissions = flatten(\n    builtins\n      .filter(builtin => basePermissions.indexOf(builtin._id) !== -1)\n      .map(builtin => builtin.permissions)\n  )\n  for (let permission of permissions) {\n    if (\n      permission.type === permType &&\n      getAllowedLevels(permission.level).indexOf(permLevel) !== -1\n    ) {\n      return true\n    }\n  }\n  return false\n}\n\nexport function isPermissionLevelHigherThanRead(level: PermissionLevel) {\n  return levelToNumber(level) > 1\n}\n\n// utility as a lot of things need simply the builder permission\nexport const BUILDER = PermissionType.BUILDER\nexport const GLOBAL_BUILDER = PermissionType.GLOBAL_BUILDER\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAgD;AAChD,IAAAA,gBAAgD;AAChD,qBAAoB;AACpB,uBAAsB;AAMf,MAAM,WAAW;AAAA,EAItB,YAAY,MAAsB,OAAwB;AACxD,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,cAAc,MAAuB;AACnD,UAAQ,MAAM;AAAA,IAEZ,KAAK,6BAAgB;AACnB,aAAO;AAAA,IACT,KAAK,6BAAgB;AACnB,aAAO;AAAA,IACT,KAAK,6BAAgB;AACnB,aAAO;AAAA,IACT,KAAK,6BAAgB;AACnB,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAOO,SAAS,iBAAiB,eAA0C;AACzE,UAAQ,eAAe;AAAA,IACrB,KAAK,6BAAgB;AACnB,aAAO,CAAC,6BAAgB,OAAO;AAAA,IACjC,KAAK,6BAAgB;AACnB,aAAO,CAAC,6BAAgB,SAAS,6BAAgB,IAAI;AAAA,IACvD,KAAK,6BAAgB;AAAA,IACrB,KAAK,6BAAgB;AACnB,aAAO;AAAA,QACL,6BAAgB;AAAA,QAChB,6BAAgB;AAAA,QAChB,6BAAgB;AAAA,MAClB;AAAA,IACF;AACE,aAAO,CAAC;AAAA,EACZ;AACF;AAEO,IAAK,sBAAL,kBAAKC,yBAAL;AACL,EAAAA,qBAAA,YAAS;AACT,EAAAA,qBAAA,eAAY;AACZ,EAAAA,qBAAA,WAAQ;AACR,EAAAA,qBAAA,WAAQ;AACR,EAAAA,qBAAA,WAAQ;AALE,SAAAA;AAAA,GAAA;AAQL,MAAM,sBAAsB;AAAA,EACjC,QAAQ;AAAA,IACN,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,MACX,IAAI,WAAW,4BAAe,SAAS,6BAAgB,OAAO;AAAA,IAChE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,MACX,IAAI,WAAW,4BAAe,OAAO,6BAAgB,IAAI;AAAA,MACzD,IAAI,WAAW,4BAAe,OAAO,6BAAgB,IAAI;AAAA,IAC3D;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,MACX,IAAI,WAAW,4BAAe,OAAO,6BAAgB,KAAK;AAAA,MAC1D,IAAI,WAAW,4BAAe,OAAO,6BAAgB,KAAK;AAAA,MAC1D,IAAI,WAAW,4BAAe,YAAY,6BAAgB,OAAO;AAAA,MACjE,IAAI,WAAW,4BAAe,aAAa,6BAAgB,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,MACX,IAAI,WAAW,4BAAe,OAAO,6BAAgB,KAAK;AAAA,MAC1D,IAAI,WAAW,4BAAe,MAAM,6BAAgB,IAAI;AAAA,MACxD,IAAI,WAAW,4BAAe,YAAY,6BAAgB,OAAO;AAAA,MACjE,IAAI,WAAW,4BAAe,SAAS,6BAAgB,IAAI;AAAA,MAC3D,IAAI,WAAW,4BAAe,aAAa,6BAAgB,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,MACX,IAAI,WAAW,4BAAe,OAAO,6BAAgB,KAAK;AAAA,MAC1D,IAAI,WAAW,4BAAe,MAAM,6BAAgB,KAAK;AAAA,MACzD,IAAI,WAAW,4BAAe,YAAY,6BAAgB,KAAK;AAAA,MAC/D,IAAI,WAAW,4BAAe,SAAS,6BAAgB,IAAI;AAAA,MAC3D,IAAI,WAAW,4BAAe,OAAO,6BAAgB,KAAK;AAAA,MAC1D,IAAI,WAAW,4BAAe,aAAa,6BAAgB,IAAI;AAAA,IACjE;AAAA,EACF;AACF;AAEO,SAAS,wBAAwB;AACtC,aAAO,iBAAAC,SAAU,mBAAmB;AACtC;AAEO,SAAS,yBAAyB,IAAY;AACnD,QAAM,QAAQ,OAAO,OAAO,mBAAmB;AAC/C,SAAO,MAAM,KAAK,UAAQ,KAAK,QAAQ,EAAE;AAC3C;AAEO,SAAS,uBACd,UACA,WACA,gBACA;AACA,QAAM,kBAAkB;AAAA,IACtB,GAAG,IAAI,IAAI,eAAe,IAAI,UAAQ,KAAK,YAAY,CAAC;AAAA,EAC1D;AACA,QAAM,WAAW,OAAO,OAAO,mBAAmB;AAClD,MAAI,kBAAc,eAAAC;AAAA,IAChB,SACG,OAAO,aAAW,gBAAgB,QAAQ,QAAQ,GAAG,MAAM,EAAE,EAC7D,IAAI,aAAW,QAAQ,WAAW;AAAA,EACvC;AACA,WAAS,cAAc,aAAa;AAClC,QACE,WAAW,SAAS,YACpB,iBAAiB,WAAW,KAAK,EAAE,QAAQ,SAAS,MAAM,IAC1D;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,gCAAgC,OAAwB;AACtE,SAAO,cAAc,KAAK,IAAI;AAChC;AAGO,MAAM,UAAU,4BAAe;AAC/B,MAAM,iBAAiB,4BAAe;",
-  "names": ["import_types", "BuiltinPermissionID", "cloneDeep", "flatten"]
-}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/security/permissions.ts"],"names":[],"mappings":";;;;;;AAAA,2CAAiE;AACjE,yCAAiE;AAAxD,uGAAA,cAAc,OAAA;AAAE,wGAAA,eAAe,OAAA;AACxC,6DAAoC;AACpC,oEAA2C;AAM3C,MAAa,UAAU;IAIrB,YAAY,IAAoB,EAAE,KAAsB;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CACF;AARD,gCAQC;AAED,SAAgB,aAAa,CAAC,IAAqB;IACjD,QAAQ,IAAI,EAAE;QACZ,wCAAwC;QACxC,KAAK,uBAAe,CAAC,OAAO;YAC1B,OAAO,CAAC,CAAA;QACV,KAAK,uBAAe,CAAC,IAAI;YACvB,OAAO,CAAC,CAAA;QACV,KAAK,uBAAe,CAAC,KAAK;YACxB,OAAO,CAAC,CAAA;QACV,KAAK,uBAAe,CAAC,KAAK;YACxB,OAAO,CAAC,CAAA;QACV;YACE,OAAO,CAAC,CAAC,CAAA;KACZ;AACH,CAAC;AAdD,sCAcC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,aAA8B;IAC7D,QAAQ,aAAa,EAAE;QACrB,KAAK,uBAAe,CAAC,OAAO;YAC1B,OAAO,CAAC,uBAAe,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,uBAAe,CAAC,IAAI;YACvB,OAAO,CAAC,uBAAe,CAAC,OAAO,EAAE,uBAAe,CAAC,IAAI,CAAC,CAAA;QACxD,KAAK,uBAAe,CAAC,KAAK,CAAC;QAC3B,KAAK,uBAAe,CAAC,KAAK;YACxB,OAAO;gBACL,uBAAe,CAAC,OAAO;gBACvB,uBAAe,CAAC,IAAI;gBACpB,uBAAe,CAAC,KAAK;aACtB,CAAA;QACH;YACE,OAAO,EAAE,CAAA;KACZ;AACH,CAAC;AAhBD,4CAgBC;AAED,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,wCAAiB,CAAA;IACjB,8CAAuB,CAAA;IACvB,sCAAe,CAAA;IACf,sCAAe,CAAA;IACf,sCAAe,CAAA;AACjB,CAAC,EANW,mBAAmB,GAAnB,2BAAmB,KAAnB,2BAAmB,QAM9B;AAEY,QAAA,mBAAmB,GAAG;IACjC,MAAM,EAAE;QACN,GAAG,EAAE,mBAAmB,CAAC,MAAM;QAC/B,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE;YACX,IAAI,UAAU,CAAC,sBAAc,CAAC,OAAO,EAAE,uBAAe,CAAC,OAAO,CAAC;SAChE;KACF;IACD,SAAS,EAAE;QACT,GAAG,EAAE,mBAAmB,CAAC,SAAS;QAClC,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE;YACX,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,IAAI,CAAC;YAC1D,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,IAAI,CAAC;SAC3D;KACF;IACD,KAAK,EAAE;QACL,GAAG,EAAE,mBAAmB,CAAC,KAAK;QAC9B,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC3D,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC3D,IAAI,UAAU,CAAC,sBAAc,CAAC,UAAU,EAAE,uBAAe,CAAC,OAAO,CAAC;YAClE,IAAI,UAAU,CAAC,sBAAc,CAAC,WAAW,EAAE,uBAAe,CAAC,IAAI,CAAC;SACjE;KACF;IACD,KAAK,EAAE;QACL,GAAG,EAAE,mBAAmB,CAAC,KAAK;QAC9B,IAAI,EAAE,OAAO;QACb,WAAW,EAAE;YACX,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC3D,IAAI,UAAU,CAAC,sBAAc,CAAC,IAAI,EAAE,uBAAe,CAAC,IAAI,CAAC;YACzD,IAAI,UAAU,CAAC,sBAAc,CAAC,UAAU,EAAE,uBAAe,CAAC,OAAO,CAAC;YAClE,IAAI,UAAU,CAAC,sBAAc,CAAC,OAAO,EAAE,uBAAe,CAAC,IAAI,CAAC;YAC5D,IAAI,UAAU,CAAC,sBAAc,CAAC,WAAW,EAAE,uBAAe,CAAC,IAAI,CAAC;SACjE;KACF;IACD,KAAK,EAAE;QACL,GAAG,EAAE,mBAAmB,CAAC,KAAK;QAC9B,IAAI,EAAE,OAAO;QACb,WAAW,EAAE;YACX,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC3D,IAAI,UAAU,CAAC,sBAAc,CAAC,IAAI,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC1D,IAAI,UAAU,CAAC,sBAAc,CAAC,UAAU,EAAE,uBAAe,CAAC,KAAK,CAAC;YAChE,IAAI,UAAU,CAAC,sBAAc,CAAC,OAAO,EAAE,uBAAe,CAAC,IAAI,CAAC;YAC5D,IAAI,UAAU,CAAC,sBAAc,CAAC,KAAK,EAAE,uBAAe,CAAC,KAAK,CAAC;YAC3D,IAAI,UAAU,CAAC,sBAAc,CAAC,WAAW,EAAE,uBAAe,CAAC,IAAI,CAAC;SACjE;KACF;CACF,CAAA;AAED,SAAgB,qBAAqB;IACnC,OAAO,IAAA,mBAAS,EAAC,2BAAmB,CAAC,CAAA;AACvC,CAAC;AAFD,sDAEC;AAED,SAAgB,wBAAwB,CAAC,EAAU;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAmB,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,CAAA;AAC5C,CAAC;AAHD,4DAGC;AAED,SAAgB,sBAAsB,CACpC,QAAwB,EACxB,SAA0B,EAC1B,cAA6B;IAE7B,MAAM,eAAe,GAAG;QACtB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KAC1D,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAmB,CAAC,CAAA;IACnD,IAAI,WAAW,GAAG,IAAA,iBAAO,EACvB,QAAQ;SACL,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;SAC9D,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAA;IACD,KAAK,IAAI,UAAU,IAAI,WAAW,EAAE;QAClC,IACE,UAAU,CAAC,IAAI,KAAK,QAAQ;YAC5B,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAC5D;YACA,OAAO,IAAI,CAAA;SACZ;KACF;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAvBD,wDAuBC;AAED,SAAgB,+BAA+B,CAAC,KAAsB;IACpE,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AACjC,CAAC;AAFD,0EAEC;AAED,gEAAgE;AACnD,QAAA,OAAO,GAAG,sBAAc,CAAC,OAAO,CAAA;AAChC,QAAA,cAAc,GAAG,sBAAc,CAAC,cAAc,CAAA"}