@develit-services/rbac 0.2.2 → 0.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/dist/export/worker.cjs +262 -1
  2. package/dist/export/worker.d.cts +11 -4
  3. package/dist/export/worker.d.mts +11 -4
  4. package/dist/export/worker.d.ts +11 -4
  5. package/dist/export/worker.mjs +262 -2
  6. package/package.json +1 -1
package/dist/export/worker.cjs CHANGED
@@ -798,7 +798,268 @@ function defineRbacService(config = { scopes: [] }) {
798
798
  };
799
799
  }
800
800
 
801
- const RbacService = defineRbacService();
801
+ const organizationScopedKeys = (scopes) => {
802
+ const out = scopes.map((scope) => {
803
+ const [prefix, ...rest] = scope.split(".");
804
+ return `${prefix}.{jwt.user.rawUserMetaData.organizationId}.${rest.join(".")}`;
805
+ });
806
+ return out;
807
+ };
808
+ const TEST_SCOPES = [
809
+ "test.read",
810
+ "test.edit",
811
+ "test.delete",
812
+ "test.{jwt.organizationId}.read",
813
+ "test.{jwt.user.rawUserMetaData.organizationId}.read",
814
+ "test.{jwt.user.rawUserMetaData.organizationId}.edit",
815
+ "test.{param.resourceId}.read",
816
+ "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read",
817
+ "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read",
818
+ "test.{invalid}.scope",
819
+ "test.{}.scope",
820
+ "test.{jwt.}.scope",
821
+ "test.{.key}.scope"
822
+ ];
823
+ const TICKET_SCOPES = [
824
+ "tickets.read",
825
+ "tickets.create",
826
+ "tickets.edit",
827
+ "tickets.delete",
828
+ "tickets.archive",
829
+ "tickets.automations.pause",
830
+ "tickets.automations.resume",
831
+ "tickets.dependencies.read",
832
+ "tickets.dependencies.create",
833
+ "tickets.dependencies.edit",
834
+ "tickets.dependencies.delete",
835
+ "tickets.confirmation.send",
836
+ "tickets.confirmation.download",
837
+ "tickets.payments.create",
838
+ "tickets.payments.read",
839
+ "tickets.payments.edit",
840
+ "tickets.payments.delete",
841
+ "tickets.payments.confirmation.send",
842
+ "tickets.payments.confirmation.download",
843
+ "tickets.logs.read",
844
+ "tickets.logs.create",
845
+ "tickets.logs.delete"
846
+ ];
847
+ const CLIENT_SCOPES = [
848
+ "clients.read",
849
+ "clients.create",
850
+ "clients.edit",
851
+ "clients.delete",
852
+ "clients.pin.read",
853
+ // if not - gw returns **** for pin
854
+ "clients.pin.edit",
855
+ // if not - fe should not allow pin change
856
+ "clients.trader.edit",
857
+ "clients.logs.read",
858
+ "clients.logs.create",
859
+ "clients.logs.delete"
860
+ ];
861
+ const USER_SCOPES = [
862
+ "users.read",
863
+ "users.create",
864
+ "users.edit",
865
+ "users.delete",
866
+ "users.ban",
867
+ "users.password.reset.send",
868
+ "users.password.edit",
869
+ "users.2fa.enable",
870
+ "users.2fa.disable",
871
+ "users.roles.read",
872
+ "users.roles.edit",
873
+ "users.scopes.read",
874
+ "users.scopes.assign",
875
+ "users.scopes.delete",
876
+ "users.logs.read",
877
+ "users.logs.create",
878
+ "users.logs.delete"
879
+ ];
880
+ [
881
+ // Ticket scopes
882
+ ...TICKET_SCOPES,
883
+ ...organizationScopedKeys(TICKET_SCOPES),
884
+ // Client scopes
885
+ ...CLIENT_SCOPES,
886
+ ...organizationScopedKeys(CLIENT_SCOPES),
887
+ // User scopes
888
+ ...USER_SCOPES,
889
+ ...organizationScopedKeys(USER_SCOPES),
890
+ // Trader scopes
891
+ "traders.read",
892
+ "traders.create",
893
+ "traders.edit",
894
+ "traders.delete",
895
+ "traders.logs",
896
+ // Role scopes
897
+ "roles.read",
898
+ "roles.create",
899
+ "roles.edit",
900
+ "roles.delete",
901
+ "roles.scopes.assign",
902
+ // assign scopes to roles
903
+ "roles.scopes.delete",
904
+ // delete scopes from roles
905
+ "roles.logs.read",
906
+ "roles.logs.create",
907
+ "roles.logs.delete",
908
+ "roles.users.read",
909
+ // read users assigned to roles
910
+ // Ledger scopes
911
+ // 'accounts.read',
912
+ // 'accounts.create',
913
+ // 'accounts.edit',
914
+ // 'accounts.delete',
915
+ // 'accounts.archive',
916
+ // 'accounts.balance',
917
+ // 'accounts.identifiers.create',
918
+ // 'accounts.identifiers.read',
919
+ // 'accounts.identifiers.edit',
920
+ // 'accounts.identifiers.delete',
921
+ // 'accounts.transactions.read',
922
+ // 'accounts.logs.read',
923
+ // 'accounts.logs.create',
924
+ // 'accounts.logs.delete',
925
+ ...TEST_SCOPES
926
+ ];
927
+ const LABELED_SCOPES = [
928
+ { label: "Zobrazit tikety", value: "tickets.read" },
929
+ {
930
+ label: "Zobrazit tikety v r\xE1mci organizace",
931
+ value: "tickets.{jwt.user.rawUserMetaData.organizationId}.read"
932
+ },
933
+ { label: "Vytvo\u0159it tiket", value: "tickets.create" },
934
+ { label: "Upravit tiket", value: "tickets.edit" },
935
+ { label: "Smazat tiket", value: "tickets.delete" },
936
+ { label: "Archivovat tiket", value: "tickets.archive" },
937
+ {
938
+ label: "Pozastavit automatizaci tiketu",
939
+ value: "tickets.automations.pause"
940
+ },
941
+ { label: "Obnovit automatizaci tiketu", value: "tickets.automations.resume" },
942
+ { label: "Zobrazit z\xE1vislosti tiket\u016F", value: "tickets.dependencies.read" },
943
+ { label: "Vytvo\u0159it z\xE1vislosti tiket\u016F", value: "tickets.dependencies.create" },
944
+ { label: "Upravit z\xE1vislosti tiket\u016F", value: "tickets.dependencies.edit" },
945
+ { label: "Smazat z\xE1vislosti tiket\u016F", value: "tickets.dependencies.delete" },
946
+ { label: "Poslat potvrzen\xED tiketu", value: "tickets.confirmation.send" },
947
+ {
948
+ label: "St\xE1hnout potvrzen\xED tiketu",
949
+ value: "tickets.confirmation.download"
950
+ },
951
+ { label: "Vytvo\u0159it platbu tiketu", value: "tickets.payments.create" },
952
+ { label: "Zobrazit platby tiketu", value: "tickets.payments.read" },
953
+ { label: "Upravit platby tiketu", value: "tickets.payments.edit" },
954
+ { label: "Smazat platby tiketu", value: "tickets.payments.delete" },
955
+ {
956
+ label: "Poslat potvrzen\xED platby tiketu",
957
+ value: "tickets.payments.confirmation.send"
958
+ },
959
+ {
960
+ label: "St\xE1hnout potvrzen\xED platby tiketu",
961
+ value: "tickets.payments.confirmation.download"
962
+ },
963
+ { label: "Zobrazit logy tiketu", value: "tickets.logs.read" },
964
+ { label: "Vytvo\u0159it logy tiketu", value: "tickets.logs.create" },
965
+ { label: "Smazat logy tiketu", value: "tickets.logs.delete" },
966
+ { label: "Zobrazit obchodn\xEDky", value: "traders.read" },
967
+ { label: "Vytvo\u0159it obchodn\xEDky", value: "traders.create" },
968
+ { label: "Upravit obchodn\xEDky", value: "traders.edit" },
969
+ { label: "Smazat obchodn\xEDky", value: "traders.delete" },
970
+ { label: "Logy obchodn\xEDk\u016F", value: "traders.logs" },
971
+ { label: "Zobrazit klienty", value: "clients.read" },
972
+ { label: "Vytvo\u0159it klienty", value: "clients.create" },
973
+ { label: "Upravit klienty", value: "clients.edit" },
974
+ { label: "Smazat klienty", value: "clients.delete" },
975
+ { label: "Zobrazit PIN klienta", value: "clients.pin.read" },
976
+ { label: "Upravit PIN klienta", value: "clients.pin.edit" },
977
+ // { label: 'Zobrazit limity klienta', value: 'clients.limits.read' },
978
+ // { label: 'Upravit limity klienta', value: 'clients.limits.edit' },
979
+ // { label: 'Přiřadit obchodníka klientovi', value: 'clients.trader.assign' },
980
+ { label: "Upravit obchodn\xEDka klienta", value: "clients.trader.edit" },
981
+ { label: "Zobrazit logy klient\u016F", value: "clients.logs.read" },
982
+ { label: "Vytvo\u0159it logy klient\u016F", value: "clients.logs.create" },
983
+ { label: "Smazat logy klient\u016F", value: "clients.logs.delete" },
984
+ { label: "Zobrazit u\u017Eivatele", value: "users.read" },
985
+ { label: "Vytvo\u0159it u\u017Eivatele", value: "users.create" },
986
+ { label: "Upravit u\u017Eivatele", value: "users.edit" },
987
+ { label: "Smazat u\u017Eivatele", value: "users.delete" },
988
+ // { label: 'Archivovat uživatele', value: 'users.archive' },
989
+ { label: "Poslat reset hesla", value: "users.password.reset.send" },
990
+ // { label: 'Zobrazit oprávnění uživatelů', value: 'users.permissions.read' },
991
+ // { label: 'Přiřadit oprávnění uživatelům', value: 'users.permissions.assign' },
992
+ // { label: 'Odebrat oprávnění uživatelům', value: 'users.permissions.delete' },
993
+ { label: "Povolit 2FA u\u017Eivatel\u016Fm", value: "users.2fa.enable" },
994
+ { label: "Zak\xE1zat 2FA u\u017Eivatel\u016Fm", value: "users.2fa.disable" },
995
+ { label: "Zobrazit logy u\u017Eivatel\u016F", value: "users.logs.read" },
996
+ { label: "Vytvo\u0159it logy u\u017Eivatel\u016F", value: "users.logs.create" },
997
+ { label: "Smazat logy u\u017Eivatel\u016F", value: "users.logs.delete" },
998
+ { label: "Zobrazit role", value: "roles.read" },
999
+ { label: "Vytvo\u0159it role", value: "roles.create" },
1000
+ { label: "Upravit role", value: "roles.edit" },
1001
+ { label: "Smazat role", value: "roles.delete" },
1002
+ // { label: 'Přiřadit oprávnění rolím', value: 'roles.permissions.assign' },
1003
+ // { label: 'Odebrat oprávnění rolím', value: 'roles.permissions.delete' },
1004
+ { label: "Zobrazit logy rol\xED", value: "roles.logs.read" },
1005
+ { label: "Vytvo\u0159it logy rol\xED", value: "roles.logs.create" },
1006
+ { label: "Smazat logy rol\xED", value: "roles.logs.delete" },
1007
+ { label: "Zobrazit u\u017Eivatele p\u0159i\u0159azen\xE9 k rol\xEDm", value: "roles.users.read" },
1008
+ // Test scopes
1009
+ { label: "Test: Read", value: "test.read" },
1010
+ { label: "Test: Edit", value: "test.edit" },
1011
+ { label: "Test: Delete", value: "test.delete" },
1012
+ {
1013
+ label: "Test: Organization ID Read (JWT - invalid path)",
1014
+ value: "test.{jwt.organizationId}.read"
1015
+ },
1016
+ {
1017
+ label: "Test: Organization Read (JWT)",
1018
+ value: "test.{jwt.user.rawUserMetaData.organizationId}.read"
1019
+ },
1020
+ {
1021
+ label: "Test: Organization Edit (JWT)",
1022
+ value: "test.{jwt.user.rawUserMetaData.organizationId}.edit"
1023
+ },
1024
+ {
1025
+ label: "Test: Resource Read (Param)",
1026
+ value: "test.{param.resourceId}.read"
1027
+ },
1028
+ {
1029
+ label: "Test: Organization Resource Read (Multiple JWT placeholders)",
1030
+ value: "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read"
1031
+ },
1032
+ {
1033
+ label: "Test: Organization Branch Read (JWT userData)",
1034
+ value: "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read"
1035
+ },
1036
+ { label: "Test: Invalid placeholder format", value: "test.{invalid}.scope" },
1037
+ { label: "Test: Empty placeholder", value: "test.{}.scope" },
1038
+ { label: "Test: Empty key placeholder", value: "test.{jwt.}.scope" },
1039
+ { label: "Test: Empty type placeholder", value: "test.{.key}.scope" }
1040
+ // { label: 'Zobrazit účty', value: 'accounts.read' },
1041
+ // { label: 'Vytvořit účty', value: 'accounts.create' },
1042
+ // { label: 'Upravit účty', value: 'accounts.edit' },
1043
+ // { label: 'Smazat účty', value: 'accounts.delete' },
1044
+ // { label: 'Archivovat účty', value: 'accounts.archive' },
1045
+ // { label: 'Zobrazit zůstatek účtu', value: 'accounts.balance' },
1046
+ // {
1047
+ // label: 'Vytvořit identifikátory účtu',
1048
+ // value: 'accounts.identifiers.create',
1049
+ // },
1050
+ // { label: 'Zobrazit identifikátory účtu', value: 'accounts.identifiers.read' },
1051
+ // { label: 'Upravit identifikátory účtu', value: 'accounts.identifiers.edit' },
1052
+ // { label: 'Smazat identifikátory účtu', value: 'accounts.identifiers.delete' },
1053
+ // { label: 'Zobrazit transakce účtu', value: 'accounts.transactions.read' },
1054
+ // { label: 'Zobrazit logy účtů', value: 'accounts.logs.read' },
1055
+ // { label: 'Vytvořit logy účtů', value: 'accounts.logs.create' },
1056
+ // { label: 'Smazat logy účtů', value: 'accounts.logs.delete' },
1057
+ ];
1058
+
1059
+ const RbacService = defineRbacService({
1060
+ scopes: LABELED_SCOPES
1061
+ });
802
1062
 
1063
+ exports.LABELED_SCOPES = LABELED_SCOPES;
803
1064
  exports.default = RbacService;
804
1065
  exports.defineRbacService = defineRbacService;
package/dist/export/worker.d.cts CHANGED
@@ -1,6 +1,6 @@
1
1
  import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
2
2
  import { IRPCResponse } from '@develit-io/backend-sdk';
3
- import { L as LabeledScope, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DB0xguAY.cjs';
3
+ import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DB0xguAY.cjs';
4
4
  import { WorkerEntrypoint } from 'cloudflare:workers';
5
5
  import { DrizzleD1Database } from 'drizzle-orm/d1';
6
6
  import 'zod';
@@ -9,7 +9,7 @@ import '../shared/rbac.CqpxM3E5.cjs';
9
9
  import 'drizzle-orm/sqlite-core';
10
10
 
11
11
  declare const RbacServiceBase_base: (abstract new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv, {}>) & (abstract new (...args: any[]) => _develit_io_backend_sdk.DevelitWorkerMethods);
12
- declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledScope[]> extends RbacServiceBase_base {
12
+ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = LabeledScope$1[]> extends RbacServiceBase_base {
13
13
  readonly db: DrizzleD1Database<typeof tables>;
14
14
  readonly SCOPES: TScopes;
15
15
  constructor(ctx: ExecutionContext, env: RbacEnv, scopes: TScopes);
@@ -35,12 +35,19 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledS
35
35
  deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
36
36
  updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;
37
37
  }
38
- declare function defineRbacService<const TScopes extends readonly LabeledScope[]>(config?: {
38
+ declare function defineRbacService<const TScopes extends readonly LabeledScope$1[]>(config?: {
39
39
  scopes: TScopes;
40
40
  }): new (ctx: ExecutionContext, env: RbacEnv) => RbacServiceBase<TScopes>;
41
41
 
42
+ declare const SCOPES: readonly ["tickets.read", "tickets.create", "tickets.edit", "tickets.delete", "tickets.archive", "tickets.automations.pause", "tickets.automations.resume", "tickets.dependencies.read", "tickets.dependencies.create", "tickets.dependencies.edit", "tickets.dependencies.delete", "tickets.confirmation.send", "tickets.confirmation.download", "tickets.payments.create", "tickets.payments.read", "tickets.payments.edit", "tickets.payments.delete", "tickets.payments.confirmation.send", "tickets.payments.confirmation.download", "tickets.logs.read", "tickets.logs.create", "tickets.logs.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.archive", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.pause", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.resume", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "clients.read", "clients.create", "clients.edit", "clients.delete", "clients.pin.read", "clients.pin.edit", "clients.trader.edit", "clients.logs.read", "clients.logs.create", "clients.logs.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.read", "clients.{jwt.user.rawUserMetaData.organizationId}.create", "clients.{jwt.user.rawUserMetaData.organizationId}.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.read", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.trader.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.read", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.create", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "users.read", "users.create", "users.edit", "users.delete", "users.ban", "users.password.reset.send", "users.password.edit", "users.2fa.enable", "users.2fa.disable", "users.roles.read", "users.roles.edit", "users.scopes.read", "users.scopes.assign", "users.scopes.delete", "users.logs.read", "users.logs.create", "users.logs.delete", "users.{jwt.user.rawUserMetaData.organizationId}.read", "users.{jwt.user.rawUserMetaData.organizationId}.create", "users.{jwt.user.rawUserMetaData.organizationId}.edit", "users.{jwt.user.rawUserMetaData.organizationId}.delete", "users.{jwt.user.rawUserMetaData.organizationId}.ban", "users.{jwt.user.rawUserMetaData.organizationId}.password.reset.send", "users.{jwt.user.rawUserMetaData.organizationId}.password.edit", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.enable", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.disable", "users.{jwt.user.rawUserMetaData.organizationId}.roles.read", "users.{jwt.user.rawUserMetaData.organizationId}.roles.edit", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.read", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.assign", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.delete", "users.{jwt.user.rawUserMetaData.organizationId}.logs.read", "users.{jwt.user.rawUserMetaData.organizationId}.logs.create", "users.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "traders.read", "traders.create", "traders.edit", "traders.delete", "traders.logs", "roles.read", "roles.create", "roles.edit", "roles.delete", "roles.scopes.assign", "roles.scopes.delete", "roles.logs.read", "roles.logs.create", "roles.logs.delete", "roles.users.read", "test.read", "test.edit", "test.delete", "test.{jwt.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.edit", "test.{param.resourceId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read", "test.{invalid}.scope", "test.{}.scope", "test.{jwt.}.scope", "test.{.key}.scope"];
43
+ type LabeledScope = {
44
+ label: string;
45
+ value: (typeof SCOPES)[number];
46
+ };
47
+ declare const LABELED_SCOPES: LabeledScope[];
48
+
42
49
  declare const _default: new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv>;
43
50
 
44
51
  // @ts-ignore
45
52
  export = _default;
46
- export { defineRbacService };
53
+ export { LABELED_SCOPES, defineRbacService };
package/dist/export/worker.d.mts CHANGED
@@ -1,6 +1,6 @@
1
1
  import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
2
2
  import { IRPCResponse } from '@develit-io/backend-sdk';
3
- import { L as LabeledScope, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CocWK7y6.mjs';
3
+ import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CocWK7y6.mjs';
4
4
  import { WorkerEntrypoint } from 'cloudflare:workers';
5
5
  import { DrizzleD1Database } from 'drizzle-orm/d1';
6
6
  import 'zod';
@@ -9,7 +9,7 @@ import '../shared/rbac.CqpxM3E5.mjs';
9
9
  import 'drizzle-orm/sqlite-core';
10
10
 
11
11
  declare const RbacServiceBase_base: (abstract new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv, {}>) & (abstract new (...args: any[]) => _develit_io_backend_sdk.DevelitWorkerMethods);
12
- declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledScope[]> extends RbacServiceBase_base {
12
+ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = LabeledScope$1[]> extends RbacServiceBase_base {
13
13
  readonly db: DrizzleD1Database<typeof tables>;
14
14
  readonly SCOPES: TScopes;
15
15
  constructor(ctx: ExecutionContext, env: RbacEnv, scopes: TScopes);
@@ -35,10 +35,17 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledS
35
35
  deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
36
36
  updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;
37
37
  }
38
- declare function defineRbacService<const TScopes extends readonly LabeledScope[]>(config?: {
38
+ declare function defineRbacService<const TScopes extends readonly LabeledScope$1[]>(config?: {
39
39
  scopes: TScopes;
40
40
  }): new (ctx: ExecutionContext, env: RbacEnv) => RbacServiceBase<TScopes>;
41
41
 
42
+ declare const SCOPES: readonly ["tickets.read", "tickets.create", "tickets.edit", "tickets.delete", "tickets.archive", "tickets.automations.pause", "tickets.automations.resume", "tickets.dependencies.read", "tickets.dependencies.create", "tickets.dependencies.edit", "tickets.dependencies.delete", "tickets.confirmation.send", "tickets.confirmation.download", "tickets.payments.create", "tickets.payments.read", "tickets.payments.edit", "tickets.payments.delete", "tickets.payments.confirmation.send", "tickets.payments.confirmation.download", "tickets.logs.read", "tickets.logs.create", "tickets.logs.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.archive", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.pause", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.resume", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "clients.read", "clients.create", "clients.edit", "clients.delete", "clients.pin.read", "clients.pin.edit", "clients.trader.edit", "clients.logs.read", "clients.logs.create", "clients.logs.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.read", "clients.{jwt.user.rawUserMetaData.organizationId}.create", "clients.{jwt.user.rawUserMetaData.organizationId}.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.read", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.trader.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.read", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.create", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "users.read", "users.create", "users.edit", "users.delete", "users.ban", "users.password.reset.send", "users.password.edit", "users.2fa.enable", "users.2fa.disable", "users.roles.read", "users.roles.edit", "users.scopes.read", "users.scopes.assign", "users.scopes.delete", "users.logs.read", "users.logs.create", "users.logs.delete", "users.{jwt.user.rawUserMetaData.organizationId}.read", "users.{jwt.user.rawUserMetaData.organizationId}.create", "users.{jwt.user.rawUserMetaData.organizationId}.edit", "users.{jwt.user.rawUserMetaData.organizationId}.delete", "users.{jwt.user.rawUserMetaData.organizationId}.ban", "users.{jwt.user.rawUserMetaData.organizationId}.password.reset.send", "users.{jwt.user.rawUserMetaData.organizationId}.password.edit", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.enable", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.disable", "users.{jwt.user.rawUserMetaData.organizationId}.roles.read", "users.{jwt.user.rawUserMetaData.organizationId}.roles.edit", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.read", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.assign", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.delete", "users.{jwt.user.rawUserMetaData.organizationId}.logs.read", "users.{jwt.user.rawUserMetaData.organizationId}.logs.create", "users.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "traders.read", "traders.create", "traders.edit", "traders.delete", "traders.logs", "roles.read", "roles.create", "roles.edit", "roles.delete", "roles.scopes.assign", "roles.scopes.delete", "roles.logs.read", "roles.logs.create", "roles.logs.delete", "roles.users.read", "test.read", "test.edit", "test.delete", "test.{jwt.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.edit", "test.{param.resourceId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read", "test.{invalid}.scope", "test.{}.scope", "test.{jwt.}.scope", "test.{.key}.scope"];
43
+ type LabeledScope = {
44
+ label: string;
45
+ value: (typeof SCOPES)[number];
46
+ };
47
+ declare const LABELED_SCOPES: LabeledScope[];
48
+
42
49
  declare const _default: new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv>;
43
50
 
44
- export { _default as default, defineRbacService };
51
+ export { LABELED_SCOPES, _default as default, defineRbacService };
package/dist/export/worker.d.ts CHANGED
@@ -1,6 +1,6 @@
1
1
  import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
2
2
  import { IRPCResponse } from '@develit-io/backend-sdk';
3
- import { L as LabeledScope, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CAcqvrNj.js';
3
+ import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CAcqvrNj.js';
4
4
  import { WorkerEntrypoint } from 'cloudflare:workers';
5
5
  import { DrizzleD1Database } from 'drizzle-orm/d1';
6
6
  import 'zod';
@@ -9,7 +9,7 @@ import '../shared/rbac.CqpxM3E5.js';
9
9
  import 'drizzle-orm/sqlite-core';
10
10
 
11
11
  declare const RbacServiceBase_base: (abstract new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv, {}>) & (abstract new (...args: any[]) => _develit_io_backend_sdk.DevelitWorkerMethods);
12
- declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledScope[]> extends RbacServiceBase_base {
12
+ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = LabeledScope$1[]> extends RbacServiceBase_base {
13
13
  readonly db: DrizzleD1Database<typeof tables>;
14
14
  readonly SCOPES: TScopes;
15
15
  constructor(ctx: ExecutionContext, env: RbacEnv, scopes: TScopes);
@@ -35,12 +35,19 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledS
35
35
  deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
36
36
  updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;
37
37
  }
38
- declare function defineRbacService<const TScopes extends readonly LabeledScope[]>(config?: {
38
+ declare function defineRbacService<const TScopes extends readonly LabeledScope$1[]>(config?: {
39
39
  scopes: TScopes;
40
40
  }): new (ctx: ExecutionContext, env: RbacEnv) => RbacServiceBase<TScopes>;
41
41
 
42
+ declare const SCOPES: readonly ["tickets.read", "tickets.create", "tickets.edit", "tickets.delete", "tickets.archive", "tickets.automations.pause", "tickets.automations.resume", "tickets.dependencies.read", "tickets.dependencies.create", "tickets.dependencies.edit", "tickets.dependencies.delete", "tickets.confirmation.send", "tickets.confirmation.download", "tickets.payments.create", "tickets.payments.read", "tickets.payments.edit", "tickets.payments.delete", "tickets.payments.confirmation.send", "tickets.payments.confirmation.download", "tickets.logs.read", "tickets.logs.create", "tickets.logs.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.archive", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.pause", "tickets.{jwt.user.rawUserMetaData.organizationId}.automations.resume", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.dependencies.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.edit", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.delete", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.send", "tickets.{jwt.user.rawUserMetaData.organizationId}.payments.confirmation.download", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.read", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.create", "tickets.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "clients.read", "clients.create", "clients.edit", "clients.delete", "clients.pin.read", "clients.pin.edit", "clients.trader.edit", "clients.logs.read", "clients.logs.create", "clients.logs.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.read", "clients.{jwt.user.rawUserMetaData.organizationId}.create", "clients.{jwt.user.rawUserMetaData.organizationId}.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.delete", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.read", "clients.{jwt.user.rawUserMetaData.organizationId}.pin.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.trader.edit", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.read", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.create", "clients.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "users.read", "users.create", "users.edit", "users.delete", "users.ban", "users.password.reset.send", "users.password.edit", "users.2fa.enable", "users.2fa.disable", "users.roles.read", "users.roles.edit", "users.scopes.read", "users.scopes.assign", "users.scopes.delete", "users.logs.read", "users.logs.create", "users.logs.delete", "users.{jwt.user.rawUserMetaData.organizationId}.read", "users.{jwt.user.rawUserMetaData.organizationId}.create", "users.{jwt.user.rawUserMetaData.organizationId}.edit", "users.{jwt.user.rawUserMetaData.organizationId}.delete", "users.{jwt.user.rawUserMetaData.organizationId}.ban", "users.{jwt.user.rawUserMetaData.organizationId}.password.reset.send", "users.{jwt.user.rawUserMetaData.organizationId}.password.edit", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.enable", "users.{jwt.user.rawUserMetaData.organizationId}.2fa.disable", "users.{jwt.user.rawUserMetaData.organizationId}.roles.read", "users.{jwt.user.rawUserMetaData.organizationId}.roles.edit", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.read", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.assign", "users.{jwt.user.rawUserMetaData.organizationId}.scopes.delete", "users.{jwt.user.rawUserMetaData.organizationId}.logs.read", "users.{jwt.user.rawUserMetaData.organizationId}.logs.create", "users.{jwt.user.rawUserMetaData.organizationId}.logs.delete", "traders.read", "traders.create", "traders.edit", "traders.delete", "traders.logs", "roles.read", "roles.create", "roles.edit", "roles.delete", "roles.scopes.assign", "roles.scopes.delete", "roles.logs.read", "roles.logs.create", "roles.logs.delete", "roles.users.read", "test.read", "test.edit", "test.delete", "test.{jwt.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.read", "test.{jwt.user.rawUserMetaData.organizationId}.edit", "test.{param.resourceId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read", "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read", "test.{invalid}.scope", "test.{}.scope", "test.{jwt.}.scope", "test.{.key}.scope"];
43
+ type LabeledScope = {
44
+ label: string;
45
+ value: (typeof SCOPES)[number];
46
+ };
47
+ declare const LABELED_SCOPES: LabeledScope[];
48
+
42
49
  declare const _default: new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv>;
43
50
 
44
51
  // @ts-ignore
45
52
  export = _default;
46
- export { defineRbacService };
53
+ export { LABELED_SCOPES, defineRbacService };
package/dist/export/worker.mjs CHANGED
@@ -794,6 +794,266 @@ function defineRbacService(config = { scopes: [] }) {
794
794
  };
795
795
  }
796
796
 
797
- const RbacService = defineRbacService();
797
+ const organizationScopedKeys = (scopes) => {
798
+ const out = scopes.map((scope) => {
799
+ const [prefix, ...rest] = scope.split(".");
800
+ return `${prefix}.{jwt.user.rawUserMetaData.organizationId}.${rest.join(".")}`;
801
+ });
802
+ return out;
803
+ };
804
+ const TEST_SCOPES = [
805
+ "test.read",
806
+ "test.edit",
807
+ "test.delete",
808
+ "test.{jwt.organizationId}.read",
809
+ "test.{jwt.user.rawUserMetaData.organizationId}.read",
810
+ "test.{jwt.user.rawUserMetaData.organizationId}.edit",
811
+ "test.{param.resourceId}.read",
812
+ "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read",
813
+ "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read",
814
+ "test.{invalid}.scope",
815
+ "test.{}.scope",
816
+ "test.{jwt.}.scope",
817
+ "test.{.key}.scope"
818
+ ];
819
+ const TICKET_SCOPES = [
820
+ "tickets.read",
821
+ "tickets.create",
822
+ "tickets.edit",
823
+ "tickets.delete",
824
+ "tickets.archive",
825
+ "tickets.automations.pause",
826
+ "tickets.automations.resume",
827
+ "tickets.dependencies.read",
828
+ "tickets.dependencies.create",
829
+ "tickets.dependencies.edit",
830
+ "tickets.dependencies.delete",
831
+ "tickets.confirmation.send",
832
+ "tickets.confirmation.download",
833
+ "tickets.payments.create",
834
+ "tickets.payments.read",
835
+ "tickets.payments.edit",
836
+ "tickets.payments.delete",
837
+ "tickets.payments.confirmation.send",
838
+ "tickets.payments.confirmation.download",
839
+ "tickets.logs.read",
840
+ "tickets.logs.create",
841
+ "tickets.logs.delete"
842
+ ];
843
+ const CLIENT_SCOPES = [
844
+ "clients.read",
845
+ "clients.create",
846
+ "clients.edit",
847
+ "clients.delete",
848
+ "clients.pin.read",
849
+ // if not - gw returns **** for pin
850
+ "clients.pin.edit",
851
+ // if not - fe should not allow pin change
852
+ "clients.trader.edit",
853
+ "clients.logs.read",
854
+ "clients.logs.create",
855
+ "clients.logs.delete"
856
+ ];
857
+ const USER_SCOPES = [
858
+ "users.read",
859
+ "users.create",
860
+ "users.edit",
861
+ "users.delete",
862
+ "users.ban",
863
+ "users.password.reset.send",
864
+ "users.password.edit",
865
+ "users.2fa.enable",
866
+ "users.2fa.disable",
867
+ "users.roles.read",
868
+ "users.roles.edit",
869
+ "users.scopes.read",
870
+ "users.scopes.assign",
871
+ "users.scopes.delete",
872
+ "users.logs.read",
873
+ "users.logs.create",
874
+ "users.logs.delete"
875
+ ];
876
+ [
877
+ // Ticket scopes
878
+ ...TICKET_SCOPES,
879
+ ...organizationScopedKeys(TICKET_SCOPES),
880
+ // Client scopes
881
+ ...CLIENT_SCOPES,
882
+ ...organizationScopedKeys(CLIENT_SCOPES),
883
+ // User scopes
884
+ ...USER_SCOPES,
885
+ ...organizationScopedKeys(USER_SCOPES),
886
+ // Trader scopes
887
+ "traders.read",
888
+ "traders.create",
889
+ "traders.edit",
890
+ "traders.delete",
891
+ "traders.logs",
892
+ // Role scopes
893
+ "roles.read",
894
+ "roles.create",
895
+ "roles.edit",
896
+ "roles.delete",
897
+ "roles.scopes.assign",
898
+ // assign scopes to roles
899
+ "roles.scopes.delete",
900
+ // delete scopes from roles
901
+ "roles.logs.read",
902
+ "roles.logs.create",
903
+ "roles.logs.delete",
904
+ "roles.users.read",
905
+ // read users assigned to roles
906
+ // Ledger scopes
907
+ // 'accounts.read',
908
+ // 'accounts.create',
909
+ // 'accounts.edit',
910
+ // 'accounts.delete',
911
+ // 'accounts.archive',
912
+ // 'accounts.balance',
913
+ // 'accounts.identifiers.create',
914
+ // 'accounts.identifiers.read',
915
+ // 'accounts.identifiers.edit',
916
+ // 'accounts.identifiers.delete',
917
+ // 'accounts.transactions.read',
918
+ // 'accounts.logs.read',
919
+ // 'accounts.logs.create',
920
+ // 'accounts.logs.delete',
921
+ ...TEST_SCOPES
922
+ ];
923
+ const LABELED_SCOPES = [
924
+ { label: "Zobrazit tikety", value: "tickets.read" },
925
+ {
926
+ label: "Zobrazit tikety v r\xE1mci organizace",
927
+ value: "tickets.{jwt.user.rawUserMetaData.organizationId}.read"
928
+ },
929
+ { label: "Vytvo\u0159it tiket", value: "tickets.create" },
930
+ { label: "Upravit tiket", value: "tickets.edit" },
931
+ { label: "Smazat tiket", value: "tickets.delete" },
932
+ { label: "Archivovat tiket", value: "tickets.archive" },
933
+ {
934
+ label: "Pozastavit automatizaci tiketu",
935
+ value: "tickets.automations.pause"
936
+ },
937
+ { label: "Obnovit automatizaci tiketu", value: "tickets.automations.resume" },
938
+ { label: "Zobrazit z\xE1vislosti tiket\u016F", value: "tickets.dependencies.read" },
939
+ { label: "Vytvo\u0159it z\xE1vislosti tiket\u016F", value: "tickets.dependencies.create" },
940
+ { label: "Upravit z\xE1vislosti tiket\u016F", value: "tickets.dependencies.edit" },
941
+ { label: "Smazat z\xE1vislosti tiket\u016F", value: "tickets.dependencies.delete" },
942
+ { label: "Poslat potvrzen\xED tiketu", value: "tickets.confirmation.send" },
943
+ {
944
+ label: "St\xE1hnout potvrzen\xED tiketu",
945
+ value: "tickets.confirmation.download"
946
+ },
947
+ { label: "Vytvo\u0159it platbu tiketu", value: "tickets.payments.create" },
948
+ { label: "Zobrazit platby tiketu", value: "tickets.payments.read" },
949
+ { label: "Upravit platby tiketu", value: "tickets.payments.edit" },
950
+ { label: "Smazat platby tiketu", value: "tickets.payments.delete" },
951
+ {
952
+ label: "Poslat potvrzen\xED platby tiketu",
953
+ value: "tickets.payments.confirmation.send"
954
+ },
955
+ {
956
+ label: "St\xE1hnout potvrzen\xED platby tiketu",
957
+ value: "tickets.payments.confirmation.download"
958
+ },
959
+ { label: "Zobrazit logy tiketu", value: "tickets.logs.read" },
960
+ { label: "Vytvo\u0159it logy tiketu", value: "tickets.logs.create" },
961
+ { label: "Smazat logy tiketu", value: "tickets.logs.delete" },
962
+ { label: "Zobrazit obchodn\xEDky", value: "traders.read" },
963
+ { label: "Vytvo\u0159it obchodn\xEDky", value: "traders.create" },
964
+ { label: "Upravit obchodn\xEDky", value: "traders.edit" },
965
+ { label: "Smazat obchodn\xEDky", value: "traders.delete" },
966
+ { label: "Logy obchodn\xEDk\u016F", value: "traders.logs" },
967
+ { label: "Zobrazit klienty", value: "clients.read" },
968
+ { label: "Vytvo\u0159it klienty", value: "clients.create" },
969
+ { label: "Upravit klienty", value: "clients.edit" },
970
+ { label: "Smazat klienty", value: "clients.delete" },
971
+ { label: "Zobrazit PIN klienta", value: "clients.pin.read" },
972
+ { label: "Upravit PIN klienta", value: "clients.pin.edit" },
973
+ // { label: 'Zobrazit limity klienta', value: 'clients.limits.read' },
974
+ // { label: 'Upravit limity klienta', value: 'clients.limits.edit' },
975
+ // { label: 'Přiřadit obchodníka klientovi', value: 'clients.trader.assign' },
976
+ { label: "Upravit obchodn\xEDka klienta", value: "clients.trader.edit" },
977
+ { label: "Zobrazit logy klient\u016F", value: "clients.logs.read" },
978
+ { label: "Vytvo\u0159it logy klient\u016F", value: "clients.logs.create" },
979
+ { label: "Smazat logy klient\u016F", value: "clients.logs.delete" },
980
+ { label: "Zobrazit u\u017Eivatele", value: "users.read" },
981
+ { label: "Vytvo\u0159it u\u017Eivatele", value: "users.create" },
982
+ { label: "Upravit u\u017Eivatele", value: "users.edit" },
983
+ { label: "Smazat u\u017Eivatele", value: "users.delete" },
984
+ // { label: 'Archivovat uživatele', value: 'users.archive' },
985
+ { label: "Poslat reset hesla", value: "users.password.reset.send" },
986
+ // { label: 'Zobrazit oprávnění uživatelů', value: 'users.permissions.read' },
987
+ // { label: 'Přiřadit oprávnění uživatelům', value: 'users.permissions.assign' },
988
+ // { label: 'Odebrat oprávnění uživatelům', value: 'users.permissions.delete' },
989
+ { label: "Povolit 2FA u\u017Eivatel\u016Fm", value: "users.2fa.enable" },
990
+ { label: "Zak\xE1zat 2FA u\u017Eivatel\u016Fm", value: "users.2fa.disable" },
991
+ { label: "Zobrazit logy u\u017Eivatel\u016F", value: "users.logs.read" },
992
+ { label: "Vytvo\u0159it logy u\u017Eivatel\u016F", value: "users.logs.create" },
993
+ { label: "Smazat logy u\u017Eivatel\u016F", value: "users.logs.delete" },
994
+ { label: "Zobrazit role", value: "roles.read" },
995
+ { label: "Vytvo\u0159it role", value: "roles.create" },
996
+ { label: "Upravit role", value: "roles.edit" },
997
+ { label: "Smazat role", value: "roles.delete" },
998
+ // { label: 'Přiřadit oprávnění rolím', value: 'roles.permissions.assign' },
999
+ // { label: 'Odebrat oprávnění rolím', value: 'roles.permissions.delete' },
1000
+ { label: "Zobrazit logy rol\xED", value: "roles.logs.read" },
1001
+ { label: "Vytvo\u0159it logy rol\xED", value: "roles.logs.create" },
1002
+ { label: "Smazat logy rol\xED", value: "roles.logs.delete" },
1003
+ { label: "Zobrazit u\u017Eivatele p\u0159i\u0159azen\xE9 k rol\xEDm", value: "roles.users.read" },
1004
+ // Test scopes
1005
+ { label: "Test: Read", value: "test.read" },
1006
+ { label: "Test: Edit", value: "test.edit" },
1007
+ { label: "Test: Delete", value: "test.delete" },
1008
+ {
1009
+ label: "Test: Organization ID Read (JWT - invalid path)",
1010
+ value: "test.{jwt.organizationId}.read"
1011
+ },
1012
+ {
1013
+ label: "Test: Organization Read (JWT)",
1014
+ value: "test.{jwt.user.rawUserMetaData.organizationId}.read"
1015
+ },
1016
+ {
1017
+ label: "Test: Organization Edit (JWT)",
1018
+ value: "test.{jwt.user.rawUserMetaData.organizationId}.edit"
1019
+ },
1020
+ {
1021
+ label: "Test: Resource Read (Param)",
1022
+ value: "test.{param.resourceId}.read"
1023
+ },
1024
+ {
1025
+ label: "Test: Organization Resource Read (Multiple JWT placeholders)",
1026
+ value: "test.organization.{jwt.user.rawUserMetaData.organizationId}.resource.{jwt.user.rawUserMetaData.organizationId}.read"
1027
+ },
1028
+ {
1029
+ label: "Test: Organization Branch Read (JWT userData)",
1030
+ value: "test.organization.{jwt.user.rawUserMetaData.organizationId}.branch.{jwt.userData.organizationBranchId}.read"
1031
+ },
1032
+ { label: "Test: Invalid placeholder format", value: "test.{invalid}.scope" },
1033
+ { label: "Test: Empty placeholder", value: "test.{}.scope" },
1034
+ { label: "Test: Empty key placeholder", value: "test.{jwt.}.scope" },
1035
+ { label: "Test: Empty type placeholder", value: "test.{.key}.scope" }
1036
+ // { label: 'Zobrazit účty', value: 'accounts.read' },
1037
+ // { label: 'Vytvořit účty', value: 'accounts.create' },
1038
+ // { label: 'Upravit účty', value: 'accounts.edit' },
1039
+ // { label: 'Smazat účty', value: 'accounts.delete' },
1040
+ // { label: 'Archivovat účty', value: 'accounts.archive' },
1041
+ // { label: 'Zobrazit zůstatek účtu', value: 'accounts.balance' },
1042
+ // {
1043
+ // label: 'Vytvořit identifikátory účtu',
1044
+ // value: 'accounts.identifiers.create',
1045
+ // },
1046
+ // { label: 'Zobrazit identifikátory účtu', value: 'accounts.identifiers.read' },
1047
+ // { label: 'Upravit identifikátory účtu', value: 'accounts.identifiers.edit' },
1048
+ // { label: 'Smazat identifikátory účtu', value: 'accounts.identifiers.delete' },
1049
+ // { label: 'Zobrazit transakce účtu', value: 'accounts.transactions.read' },
1050
+ // { label: 'Zobrazit logy účtů', value: 'accounts.logs.read' },
1051
+ // { label: 'Vytvořit logy účtů', value: 'accounts.logs.create' },
1052
+ // { label: 'Smazat logy účtů', value: 'accounts.logs.delete' },
1053
+ ];
1054
+
1055
+ const RbacService = defineRbacService({
1056
+ scopes: LABELED_SCOPES
1057
+ });
798
1058
 
799
- export { RbacService as default, defineRbacService };
1059
+ export { LABELED_SCOPES, RbacService as default, defineRbacService };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@develit-services/rbac",
3
- "version": "0.2.2",
3
+ "version": "0.2.3",
4
4
  "author": "Develit.io s.r.o.",
5
5
  "type": "module",
6
6
  "exports": {