@cocreate/socket-server 1.8.0 → 1.8.1

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## [1.8.1](https://github.com/CoCreate-app/CoCreate-socket-server/compare/v1.8.0...v1.8.1) (2023-05-20)
+
+
+### Bug Fixes
+
+* Refactor socket server code to re check permissions using platformId when organization.dbUrl is false. ([e0cae7a](https://github.com/CoCreate-app/CoCreate-socket-server/commit/e0cae7a0a2eb9c740f36a3306fc038a9c68329ab))
+* updated dependencies to their latest versions ([84d2f1d](https://github.com/CoCreate-app/CoCreate-socket-server/commit/84d2f1d0a67b021682f5b9b543ededb995830231))
+
 # [1.8.0](https://github.com/CoCreate-app/CoCreate-socket-server/compare/v1.7.7...v1.8.0) (2023-05-19)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cocreate/socket-server",
-  "version": "1.8.0",
+  "version": "1.8.1",
   "description": "CoCreate-socket-server",
   "keywords": [
     "cocreate-socket",
@@ -40,8 +40,8 @@
   },
   "homepage": "https://cocreate.app/docs/CoCreate-socket-server",
   "dependencies": {
-    "@cocreate/docs": "^1.5.13",
-    "@cocreate/uuid": "^1.2.61"
+    "@cocreate/docs": "^1.7.11",
+    "@cocreate/uuid": "^1.4.10"
   },
   "devDependencies": {
     "express": "^4.17.1",

package/src/index.js

@@ -153,28 +153,16 @@ class SocketServer extends EventEmitter {
                         // if (action == 'syncServer')
                         // 	this.emit('createDocument', socket, data);
                         // else
-                        if (user_id && permission.dbUrl === false && action.includes('Document') && (data.collection == 'organizations' || data.collection == 'users')) {
+                        if (permission.dbUrl === false) {
                             data.database = process.env.organization_id
                             data.organization_id = process.env.organization_id
-                            if (data.document) {
-                                if (Array.isArray(data.document) && data.document[0])
-                                    data.document = data.document[0]
-
-                                if (data.collection == 'organizations' && data.document._id !== socket.config.organization_id)
-                                    return this.send(socket, 'Access Denied', { action, permission, ...data })
-                                else if (data.collection == 'users' && data.document._id !== user_id)
-                                    return this.send(socket, 'Access Denied', { action, permission, ...data })
+
+                            const permission2 = await this.permissionInstance.check(action, data, req, user_id)
+                            if (!permission2 || permission2.error) {
+                                return this.send(socket, 'Access Denied', { action, permission2, ...data })
                             }
-                            delete data.filter
-                            delete data.document.organization_id
-                            if (action == 'updateDocument')
-                                data.upsert = false
-                        } else if (action === 'createOrganization' || action === 'signIn') {
-                            data.database = process.env.organization_id
-                            data.organization_id = process.env.organization_id
-                        } else {
+                        } else
                             return this.send(socket, 'Access Denied', { action, permission, ...data })
-                        }
                     }
                 }