@casual-simulation/aux-records 3.2.13 → 3.2.14-alpha.7890390188

package/PolicyStore.d.ts

@@ -1,23 +1,9 @@
 import { ServerError } from '@casual-simulation/aux-common/Errors';
-import { PolicyDocument } from '@casual-simulation/aux-common';
-import { PrivacyFeatures } from './AuthStore';
+import { ActionKinds, PermissionOptions, ResourceKinds, SubjectType, PrivacyFeatures } from '@casual-simulation/aux-common';
 /**
  * Defines an interface for objects that are able to store and retrieve policy documents.
  */
 export interface PolicyStore {
-    /**
-     * Gets the list of policy documents that apply to the given marker and user.
-     * @param recordName The name of the record that the policies belong to.
-     * @param userId The ID of the user that is attempting to utilize the markers. Null if the user is not logged in.
-     * @param marker The marker.
-     */
-    listPoliciesForMarkerAndUser(recordName: string, userId: string, marker: string): Promise<ListMarkerPoliciesResult>;
-    /**
-     * Lists the user-created policices for the given record.
-     * @param recordName The name of the record.
-     * @param startingMarker The marker that policies should be listed after. If null, then the list starts with the first policy.
-     */
-    listUserPolicies(recordName: string, startingMarker: string | null): Promise<ListUserPoliciesStoreResult>;
     /**
      * Lists the roles that are assigned to the user.
      * @param recordName The name of the record that the role assignments belong to.
@@ -43,18 +29,110 @@ export interface PolicyStore {
      */
     listAssignments?(recordName: string, startingRole: string | null): Promise<ListedRoleAssignments>;
     /**
-     * Gets the user-created policy for the given marker.
+     * Gets the privacy features that are enabled for the given user.
+     * Returns null if the given user does not exist.
+     * @param userId The ID of the user.
+     */
+    getUserPrivacyFeatures(userId: string): Promise<PrivacyFeatures>;
+    /**
+     * Gets the privacy features for the owner of the given record.
+     * Returns null if the record does not exist or if the record does not have an owner.
      * @param recordName The name of the record.
-     * @param marker The name of the marker.
      */
-    getUserPolicy(recordName: string, marker: string): Promise<GetUserPolicyResult>;
+    getRecordOwnerPrivacyFeatures(recordName: string): Promise<PrivacyFeatures>;
+    /**
+     * Gets the permission for the given subject, resource, and action.
+     * @param subjectType The type of the subject. Must be either a user, inst, or role.
+     * @param subjectId The ID of the subject.
+     * @param recordName The name of the record that the resource belongs to.
+     * @param resourceKind The kind of the resource.
+     * @param resourceId The ID of the resource.
+     * @param action The action that the subject is attempting to perform on the resource.
+     * @param currentTimeMs The current unix time in milliseconds.
+     */
+    getPermissionForSubjectAndResource(subjectType: SubjectType, subjectId: string, recordName: string, resourceKind: ResourceKinds, resourceId: string, action: ActionKinds, currentTimeMs: number): Promise<GetResourcePermissionResult>;
     /**
-     * Updates the policy for the given marker.
+     * Gets the permission for the given subject, markers, and action.
+     * @param subjectType The type of the subject. Must be either a user, inst, or role.
+     * @param subjectId The ID of the subject.
+     * @param recordName The name of the record that the resource belongs to.
+     * @param resourceKind The kind of the resource.
+     * @param markers The markers that are applied to the resource.
+     * @param action The action that the subject is attempting to perform on the resource.
+     * @param currentTimeMs The current unix time in milliseconds.
+     */
+    getPermissionForSubjectAndMarkers(subjectType: SubjectType, subjectId: string, recordName: string, resourceKind: ResourceKinds, markers: string[], action: ActionKinds, currentTimeMs: number): Promise<GetMarkerPermissionResult>;
+    /**
+     * Assigns the given permission to the given subject for the given resource.
+     * @param recordName The name of the record that the resource exists in.
+     * @param subjectType The type of the subject. This can be either a user, inst, or role.
+     * @param subjectId The ID of the subject.
+     * @param resourceKind The kind of the resource.
+     * @param resourceId The ID of the resource.
+     * @param action The action that the subject is allowed to perform on the resource. If null, then all actions are allowed.
+     * @param options The options for the permission.
+     * @param expireTimeMs The time that the permission expires. If null, then the permission never expires.
+     */
+    assignPermissionToSubjectAndResource(recordName: string, subjectType: SubjectType, subjectId: string, resourceKind: ResourceKinds, resourceId: string, action: ActionKinds, options: PermissionOptions, expireTimeMs: number | null): Promise<AssignPermissionToSubjectAndResourceResult>;
+    /**
+     * Assigns the given permission to the given subject for the given resource.
+     * @param recordName The name of the record that the resource exists in.
+     * @param subjectType The type of the subject. This can be either a user, inst, or role.
+     * @param subjectId The ID of the subject.
+     * @param resourceKind The kind of the resource.
+     * @param marker The ID of the marker.
+     * @param action The action that the subject is allowed to perform on the resource. If null, then all actions are allowed.
+     * @param options The options for the permission.
+     * @param expireTimeMs The time that the permission expires. If null, then the permission never expires.
+     */
+    assignPermissionToSubjectAndMarker(recordName: string, subjectType: SubjectType, subjectId: string, resourceKind: ResourceKinds, marker: string, action: ActionKinds, options: PermissionOptions, expireTimeMs: number | null): Promise<AssignPermissionToSubjectAndMarkerResult>;
+    /**
+     * Deletes the given resource permission assignment from the store.
+     * @param id The ID of the resource permission assignment.
+     */
+    deleteResourcePermissionAssignmentById(id: string): Promise<DeletePermissionAssignmentResult>;
+    /**
+     * Deletes the given marker permission assignment from the store.
+     * @param id The ID of the permission assignment.
+     */
+    deleteMarkerPermissionAssignmentById(id: string): Promise<DeletePermissionAssignmentResult>;
+    /**
+     * Lists the resource permission assignments for the given record.
+     * @param recordName The name of the record.
+     */
+    listPermissionsInRecord(recordName: string): Promise<ListPermissionsInRecordResult>;
+    /**
+     * Lists the resource permission assignments for the given record and resource.
+     * @param recordName The name of the record.
+     * @param resourceKind The kind of the resource.
+     * @param resourceId The ID of the resource.
+     */
+    listPermissionsForResource(recordName: string, resourceKind: ResourceKinds, resourceId: string): Promise<ResourcePermissionAssignment[]>;
+    /**
+     * Lists the marker permission assignments for the given record and marker.
+     * @param recordName The record that the permission assignments should be listed for.
+     * @param marker The marker that the permission assignments should be listed for.
+     */
+    listPermissionsForMarker(recordName: string, marker: string): Promise<MarkerPermissionAssignment[]>;
+    /**
+     * Lists the resource permission assignments for the given subject in the given record.
      * @param recordName The name of the record.
-     * @param marker The name of the marker.
-     * @param document The new policy document.
+     * @param subjectType The type of the subject.
+     * @param subjectId The ID of the subject.
+     */
+    listPermissionsForSubject(recordName: string, subjectType: SubjectType, subjectId: string): Promise<ListPermissionsInRecordResult>;
+    /**
+     * Gets the marker permission assignment with the given ID.
+     * Returns null if no assignment was found.
+     * @param id The ID of the assignment.
+     */
+    getMarkerPermissionAssignmentById(id: string): Promise<MarkerPermissionAssignment>;
+    /**
+     * Gets the resource permission assignment with the given ID.
+     * Returns null if no assignment was found.
+     * @param id The ID of the assignment.
      */
-    updateUserPolicy(recordName: string, marker: string, policy: UserPolicyRecord): Promise<UpdateUserPolicyResult>;
+    getResourcePermissionAssignmentById(id: string): Promise<ResourcePermissionAssignment>;
     /**
      * Assigns the given role to the given subject.
      * If the role already is assigned, then it will be overwritten.
@@ -76,51 +154,6 @@ export interface PolicyStore {
      */
     revokeSubjectRole(recordName: string, subjectId: string, type: 'user' | 'inst', role: string): Promise<UpdateUserRolesResult>;
 }
-/**
- * Defines an interface that represents a user-created policy.
- */
-export interface UserPolicyRecord {
-    /**
-     * The policy document.
-     */
-    document: PolicyDocument;
-    /**
-     * The list of markers that are applied to the policy.
-     */
-    markers: string[];
-}
-export interface ListedUserPolicy extends UserPolicyRecord {
-    /**
-     * The marker that this policy is for.
-     */
-    marker: string;
-}
-export type GetUserPolicyResult = GetUserPolicySuccess | GetUserPolicyFailure;
-export interface GetUserPolicySuccess {
-    success: true;
-    document: PolicyDocument;
-    markers: string[];
-}
-export interface GetUserPolicyFailure {
-    success: false;
-    errorCode: ServerError | 'policy_not_found';
-    errorMessage: string;
-}
-export type UpdateUserPolicyResult = UpdateUserPolicySuccess | UpdateUserPolicyFailure;
-export interface UpdateUserPolicySuccess {
-    success: true;
-}
-export interface UpdateUserPolicyFailure {
-    success: false;
-    errorCode: ServerError | 'policy_too_large';
-    errorMessage: string;
-}
-export interface UpdateRolesUpdate {
-    /**
-     * The roles that should be assigned.
-     */
-    roles: AssignedRole[];
-}
 export interface AssignedRole {
     /**
      * The name of the role.
@@ -141,17 +174,6 @@ export interface UpdateUserRolesFailure {
     errorCode: ServerError | 'roles_too_large';
     errorMessage: string;
 }
-export type ListUserPoliciesStoreResult = ListUserPoliciesStoreSuccess | ListUserPoliciesStoreFailure;
-export interface ListUserPoliciesStoreSuccess {
-    success: true;
-    policies: ListedUserPolicy[];
-    totalCount: number;
-}
-export interface ListUserPoliciesStoreFailure {
-    success: false;
-    errorCode: ServerError;
-    errorMessage: string;
-}
 export interface ListedRoleAssignments {
     assignments: RoleAssignment[];
     totalCount: number;
@@ -167,25 +189,232 @@ export interface InstRoleAssignment {
     inst: string;
     role: AssignedRole;
 }
-export interface ListMarkerPoliciesResult {
+/**
+ * Gets the expiration time that can be used for comparision.
+ * If given null, then this function returns Infinity.
+ * Otherwise, it returns the given time.
+ * @param expireTimeMs The time that the role expires in milliseconds.
+ */
+export declare function getExpireTime(expireTimeMs: number | null): number;
+export type GetResourcePermissionResult = GetResourcePermissionSuccess | GetResourcePermissionFailure;
+export interface GetResourcePermissionSuccess {
+    success: true;
     /**
-     * The policies that were returned.
+     * The permission that was assigned to the subject.
+     * Null if no permission was found.
      */
-    policies: PolicyDocument[];
+    permissionAssignment: ResourcePermissionAssignment | null;
+}
+export interface GetResourcePermissionFailure {
+    success: false;
     /**
-     * The privacy features that are enabled for the record owner.
+     * The error code.
      */
-    recordOwnerPrivacyFeatures: PrivacyFeatures;
+    errorCode: ServerError;
     /**
-     * The privacy features that are enabled for the user.
+     * The error message.
      */
-    userPrivacyFeatures: PrivacyFeatures;
+    errorMessage: string;
+}
+export interface PermissionAssignment {
+    /**
+     * The ID of the permission assignment.
+     */
+    id: string;
+    /**
+     * The name of the record.
+     */
+    recordName: string;
+    /**
+     * The kind of the actions that the subject is allowed to perform.
+     * Null if the subject is allowed to perform any action.
+     */
+    action: ActionKinds | null;
+    /**
+     * The options for the permission assignment.
+     */
+    options: PermissionOptions;
+    /**
+     * The ID of the subject.
+     */
+    subjectId: string;
+    /**
+     * The type of the subject.
+     */
+    subjectType: SubjectType;
+    /**
+     * The ID of the user that the assignment grants permission to.
+     * Null if the subject type is not "user".
+     */
+    userId: string | null;
+    /**
+     * The time that the permission expires.
+     * Null if the permission never expires.
+     */
+    expireTimeMs: number | null;
 }
 /**
- * Gets the expiration time that can be used for comparision.
- * If given null, then this function returns Infinity.
- * Otherwise, it returns the given time.
- * @param expireTimeMs The time that the role expires in milliseconds.
+ * Defines an interface that represents a resource permission assignment.
  */
-export declare function getExpireTime(expireTimeMs: number | null): number;
+export interface ResourcePermissionAssignment extends PermissionAssignment {
+    /**
+     * The kind of the resource.
+     */
+    resourceKind: ResourceKinds;
+    /**
+     * The ID of the resource.
+     */
+    resourceId: string;
+}
+/**
+ * Defines an interface that represents a marker permission assignment.
+ */
+export interface MarkerPermissionAssignment extends PermissionAssignment {
+    /**
+     * The marker that the permission applies to.
+     */
+    marker: string;
+    /**
+     * The kind of the resource.
+     * Null if the permission applies to all resources.
+     */
+    resourceKind: ResourceKinds | null;
+}
+export type GetMarkerPermissionResult = GetMarkerPermissionSuccess | GetMarkerPermissionFailure;
+export interface GetMarkerPermissionSuccess {
+    success: true;
+    /**
+     * The permission that was assigned to the subject.
+     * Null if no permission was found.
+     */
+    permissionAssignment: MarkerPermissionAssignment | null;
+}
+export interface GetMarkerPermissionFailure {
+    success: false;
+    /**
+     * The error code.
+     */
+    errorCode: ServerError;
+    /**
+     * The error message.
+     */
+    errorMessage: string;
+}
+export type AssignPermissionToSubjectAndResourceResult = AssignPermissionToSubjectAndResourceSuccess | AssignPermissionToSubjectAndResourceFailure;
+export interface AssignPermissionToSubjectAndResourceSuccess {
+    success: true;
+    /**
+     * The assignment that was created or updated.
+     */
+    permissionAssignment: ResourcePermissionAssignment;
+}
+export interface AssignPermissionToSubjectAndResourceFailure {
+    success: false;
+    errorCode: ServerError | 'permission_already_exists';
+    errorMessage: string;
+}
+export type AssignPermissionToSubjectAndMarkerResult = AssignPermissionToSubjectAndMarkerSuccess | AssignPermissionToSubjectAndMarkerFailure;
+export interface AssignPermissionToSubjectAndMarkerSuccess {
+    success: true;
+    /**
+     * The assignment that was created or updated.
+     */
+    permissionAssignment: MarkerPermissionAssignment;
+}
+export interface AssignPermissionToSubjectAndMarkerFailure {
+    success: false;
+    errorCode: ServerError | 'permission_already_exists';
+    errorMessage: string;
+}
+export type DeletePermissionAssignmentResult = DeletePermissionAssignmentSuccess | DeletePermissionAssignmentFailure;
+export interface DeletePermissionAssignmentSuccess {
+    success: true;
+}
+export interface DeletePermissionAssignmentFailure {
+    success: false;
+    errorCode: ServerError;
+    errorMessage: string;
+}
+export type ListPermissionsInRecordResult = ListPermissionsInRecordSuccess | ListPermissionsInRecordFailure;
+export interface ListPermissionsInRecordSuccess {
+    success: true;
+    resourceAssignments: ResourcePermissionAssignment[];
+    markerAssignments: MarkerPermissionAssignment[];
+}
+export interface ListPermissionsInRecordFailure {
+    success: false;
+    errorCode: ServerError;
+    errorMessage: string;
+}
+/**
+ * Gets the publicRead permission for the given resource kind and action.
+ * @param resourceKind The kind of the resource.
+ * @param action The kind of the action.
+ */
+export declare function getPublicReadPermission(resourceKind: ResourceKinds, action: ActionKinds): {
+    resourceKind: "data";
+    action: "read" | "list";
+} | {
+    resourceKind: "inst" | "file";
+    action: "read";
+} | {
+    resourceKind: "event";
+    action: "count";
+};
+/**
+ * Gets the publicWrite permission for the given resource kind and action.
+ * @param resourceKind The kind of the resource.
+ * @param action The kind of the action.
+ */
+export declare function getPublicWritePermission(resourceKind: ResourceKinds, action: ActionKinds): {
+    resourceKind: "data";
+    action: "create" | "read" | "update" | "delete" | "list";
+} | {
+    resourceKind: "file";
+    action: "create" | "read" | "delete";
+} | {
+    resourceKind: "event";
+    action: "create" | "increment" | "count";
+} | {
+    resourceKind: "inst";
+    action: "create" | "read" | "delete" | "sendAction" | "updateData";
+};
+export declare function getPublicMarkerPermission(marker: string, resourceKind: ResourceKinds, action: ActionKinds): {
+    resourceKind: "inst" | "file";
+    action: "read";
+} | {
+    resourceKind: "data";
+    action: "create" | "read" | "update" | "delete" | "list";
+} | {
+    resourceKind: "file";
+    action: "create" | "read" | "delete";
+} | {
+    resourceKind: "event";
+    action: "create" | "increment" | "count";
+} | {
+    resourceKind: "inst";
+    action: "create" | "read" | "delete" | "sendAction" | "updateData";
+};
+export declare function getPublicMarkersPermission(markers: string[], resourceKind: ResourceKinds, action: ActionKinds): {
+    resourceKind: "inst" | "file";
+    action: "read";
+    marker: string;
+} | {
+    resourceKind: "data";
+    action: "create" | "read" | "update" | "delete" | "list";
+    marker: string;
+} | {
+    resourceKind: "file";
+    action: "create" | "read" | "delete";
+    marker: string;
+} | {
+    resourceKind: "event";
+    action: "create" | "increment" | "count";
+    marker: string;
+} | {
+    resourceKind: "inst";
+    action: "create" | "read" | "delete" | "sendAction" | "updateData";
+    marker: string;
+};
+export declare function getSubjectUserId(subjectType: SubjectType, subjectId: string): string | null;
 //# sourceMappingURL=PolicyStore.d.ts.map

package/PolicyStore.js

@@ -1,3 +1,18 @@
+import { PUBLIC_READ_MARKER, PUBLIC_WRITE_MARKER, } from '@casual-simulation/aux-common';
+// export interface ListMarkerPoliciesResult {
+//     /**
+//      * The policies that were returned.
+//      */
+//     policies: PolicyDocument[];
+//     /**
+//      * The privacy features that are enabled for the record owner.
+//      */
+//     recordOwnerPrivacyFeatures: PrivacyFeatures;
+//     /**
+//      * The privacy features that are enabled for the user.
+//      */
+//     userPrivacyFeatures: PrivacyFeatures;
+// }
 /**
  * Gets the expiration time that can be used for comparision.
  * If given null, then this function returns Infinity.
@@ -7,4 +22,114 @@
 export function getExpireTime(expireTimeMs) {
     return expireTimeMs !== null && expireTimeMs !== void 0 ? expireTimeMs : Infinity;
 }
+/**
+ * Gets the publicRead permission for the given resource kind and action.
+ * @param resourceKind The kind of the resource.
+ * @param action The kind of the action.
+ */
+export function getPublicReadPermission(resourceKind, action) {
+    if (resourceKind === 'data') {
+        // data.read and data.list
+        if (action === 'read' || action === 'list') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    else if (resourceKind === 'file' || resourceKind === 'inst') {
+        // file.read, inst.read
+        if (action === 'read') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    else if (resourceKind === 'event') {
+        // event.count
+        if (action === 'count') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    // All other actions are not allowed.
+    return null;
+}
+/**
+ * Gets the publicWrite permission for the given resource kind and action.
+ * @param resourceKind The kind of the resource.
+ * @param action The kind of the action.
+ */
+export function getPublicWritePermission(resourceKind, action) {
+    if (resourceKind === 'data') {
+        if (action === 'read' ||
+            action === 'create' ||
+            action === 'update' ||
+            action === 'delete' ||
+            action === 'list') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    else if (resourceKind === 'file') {
+        if (action === 'read' || action === 'delete' || action === 'create') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    else if (resourceKind === 'event') {
+        if (action === 'increment' ||
+            action === 'count' ||
+            action === 'create') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    else if (resourceKind === 'inst') {
+        if (action === 'read' ||
+            action === 'updateData' ||
+            action === 'sendAction' ||
+            action === 'delete' ||
+            action === 'create') {
+            return {
+                resourceKind,
+                action,
+            };
+        }
+    }
+    return null;
+}
+export function getPublicMarkerPermission(marker, resourceKind, action) {
+    if (marker === PUBLIC_READ_MARKER) {
+        return getPublicReadPermission(resourceKind, action);
+    }
+    else if (marker === PUBLIC_WRITE_MARKER) {
+        return getPublicWritePermission(resourceKind, action);
+    }
+    return null;
+}
+export function getPublicMarkersPermission(markers, resourceKind, action) {
+    for (let marker of markers) {
+        const result = getPublicMarkerPermission(marker, resourceKind, action);
+        if (result) {
+            return Object.assign({ marker }, result);
+        }
+    }
+    return null;
+}
+export function getSubjectUserId(subjectType, subjectId) {
+    if (subjectType === 'user') {
+        return subjectId;
+    }
+    return null;
+}
 //# sourceMappingURL=PolicyStore.js.map

package/PolicyStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"PolicyStore.js","sourceRoot":"","sources":["PolicyStore.ts"],"names":[],"mappings":"AAkQA;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,YAA2B;IACrD,OAAO,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,QAAQ,CAAC;AACpC,CAAC"}
+{"version":3,"file":"PolicyStore.js","sourceRoot":"","sources":["PolicyStore.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,kBAAkB,EAClB,mBAAmB,GAKtB,MAAM,+BAA+B,CAAC;AAgbvC,8CAA8C;AAC9C,UAAU;AACV,0CAA0C;AAC1C,UAAU;AACV,kCAAkC;AAElC,UAAU;AACV,qEAAqE;AACrE,UAAU;AACV,mDAAmD;AAEnD,UAAU;AACV,6DAA6D;AAC7D,UAAU;AACV,4CAA4C;AAC5C,IAAI;AAEJ;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,YAA2B;IACrD,OAAO,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,QAAQ,CAAC;AACpC,CAAC;AAoRD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACnC,YAA2B,EAC3B,MAAmB;IAEnB,IAAI,YAAY,KAAK,MAAM,EAAE;QACzB,0BAA0B;QAC1B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE;YACxC,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;SAAM,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,MAAM,EAAE;QAC3D,uBAAuB;QACvB,IAAI,MAAM,KAAK,MAAM,EAAE;YACnB,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;SAAM,IAAI,YAAY,KAAK,OAAO,EAAE;QACjC,cAAc;QACd,IAAI,MAAM,KAAK,OAAO,EAAE;YACpB,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;IAED,qCAAqC;IACrC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACpC,YAA2B,EAC3B,MAAmB;IAEnB,IAAI,YAAY,KAAK,MAAM,EAAE;QACzB,IACI,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,QAAQ;YACnB,MAAM,KAAK,QAAQ;YACnB,MAAM,KAAK,QAAQ;YACnB,MAAM,KAAK,MAAM,EACnB;YACE,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;SAAM,IAAI,YAAY,KAAK,MAAM,EAAE;QAChC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE;YACjE,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;SAAM,IAAI,YAAY,KAAK,OAAO,EAAE;QACjC,IACI,MAAM,KAAK,WAAW;YACtB,MAAM,KAAK,OAAO;YAClB,MAAM,KAAK,QAAQ,EACrB;YACE,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;SAAM,IAAI,YAAY,KAAK,MAAM,EAAE;QAChC,IACI,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,YAAY;YACvB,MAAM,KAAK,YAAY;YACvB,MAAM,KAAK,QAAQ;YACnB,MAAM,KAAK,QAAQ,EACrB;YACE,OAAO;gBACH,YAAY;gBACZ,MAAM;aACT,CAAC;SACL;KACJ;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACrC,MAAc,EACd,YAA2B,EAC3B,MAAmB;IAEnB,IAAI,MAAM,KAAK,kBAAkB,EAAE;QAC/B,OAAO,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;KACxD;SAAM,IAAI,MAAM,KAAK,mBAAmB,EAAE;QACvC,OAAO,wBAAwB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;KACzD;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,OAAiB,EACjB,YAA2B,EAC3B,MAAmB;IAEnB,KAAK,IAAI,MAAM,IAAI,OAAO,EAAE;QACxB,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE;YACR,uBACI,MAAM,IACH,MAAM,EACX;SACL;KACJ;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,WAAwB,EACxB,SAAiB;IAEjB,IAAI,WAAW,KAAK,MAAM,EAAE;QACxB,OAAO,SAAS,CAAC;KACpB;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/RecordsServer.d.ts

@@ -60,10 +60,9 @@ export declare class RecordsServer {
     private _listRecords;
     private _createRecord;
     private _createRecordKey;
-    private _policyGrantPermission;
-    private _policyRevokePermission;
-    private _policyRead;
-    private _policyList;
+    private _grantPermission;
+    private _revokePermission;
+    private _listPermissions;
     private _roleUserList;
     private _roleInstList;
     private _roleAssignmentsList;