@entity-access/entity-access 1.0.378 → 1.0.379

package/src/tests/model/createContext.ts

@@ -1,367 +0,0 @@
-import { IClassOf } from "../../decorators/IClassOf.js";
-import { BaseDriver } from "../../drivers/base/BaseDriver.js";
-import { ContextEvents } from "../../index.js";
-import { ShoppingContext, User, statusPublished } from "./ShoppingContext.js";
-
-const status = statusPublished;
-
-export async function createContext(driver: BaseDriver, events?: ContextEvents) {
-
-    const copy = { ... driver } as BaseDriver;
-    (copy as any).connectionString = { ... driver.connectionString };
-    Object.setPrototypeOf(copy, Object.getPrototypeOf(driver));
-    const context = new ShoppingContext(copy, events);
-
-    await context.connection.ensureDatabase();
-
-    await context.connection.automaticMigrations().migrate(context);
-
-    await seed(context);
-
-    driver.connectionString.database = context.driver.connectionString.database;
-    return context;
-
-}
-
-// export default function () {
-
-// }
-
-async function seed(context: ShoppingContext) {
-    const now = new Date();
-
-    // add admin user...
-    context.users.add({
-        userName: "admin",
-        dateCreated: new Date()
-    });
-    // add seller
-    const seller = context.users.add({
-        userName: "self",
-        dateCreated: new Date()
-    });
-
-    addHeadPhones(context, now, seller);
-
-    const clothes = addMaleClothes(context, seller);
-
-    addFemaleClothes(context, seller);
-
-    await context.saveChanges();
-
-    const product = clothes[0];
-    const productPrice = product.prices[0];
-
-    const user = context.users.add({
-        userName: "customer1",
-        dateCreated: new Date(),
-        orders: [
-            context.orders.add({
-                orderDate: new Date(),
-                orderItems:[
-                    context.orderItems.add({
-                        product,
-                        productPrice,
-                        amount: productPrice.amount
-                    })
-                ]
-            })
-        ]
-    });
-
-    await context.saveChanges();
-}
-
-function addFemaleClothes(context: ShoppingContext, owner: User) {
-    const category = context.categories.add({
-        name: "Female Clothes",
-        categoryID: "clothes/female"
-    });
-
-    const startDate = new Date();
-    const active = true;
-
-    context.products.add({
-        name: "White T-Shirt",
-        owner,
-        status,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Red T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Blue T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Pink T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    });
-}
-
-function addMaleClothes(context: ShoppingContext, owner: User) {
-    const category = context.categories.add({
-        name: "Male Clothes",
-        categoryID: "clothes/male"
-    });
-
-    const startDate = new Date();
-    const active = true;
-
-    return [context.products.add({
-        name: "White T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    }),
-    context.products.add({
-        name: "Red T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    }),
-    context.products.add({
-        name: "Blue T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    }),
-    context.products.add({
-        name: "Pink T-Shirt",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                amount: 20,
-                active,
-                startDate
-            })
-        ]
-    })];
-}
-
-export const headPhoneCategory = "head-phones";
-function addHeadPhones(context: ShoppingContext, now: Date, owner: User) {
-    const category = context.categories.add({
-        name: "Headphones",
-        categoryID: headPhoneCategory,
-        children: [
-            context.categories.add({
-                name: "Bluetooth",
-                categoryID: `${headPhoneCategory}/blue-tooth`,
-                children: [
-                    context.categories.add({
-                        name: "BT 200",
-                        categoryID: `${headPhoneCategory}/blue-tooth/bt-200`,
-                    })
-                ]
-            })
-        ]
-    });
-
-
-    const startDate = new Date();
-    const active = true;
-
-    context.products.add({
-        name: "Jabber Head Phones",
-        owner,
-        status,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 100
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Sony Head Phones",
-        owner,
-        status,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 120
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Sony Head Phones Black",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 140
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Sony Head Phones Blue",
-        owner,
-        status,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 140
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Jabber Head Phones Black",
-        status,
-        owner,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 140
-            })
-        ]
-    });
-
-    context.products.add({
-        name: "Jabber Head Phones Blue",
-        owner,
-        status,
-        categories: [
-            context.productCategories.add({
-                category
-            })
-        ],
-        prices: [
-            context.productPrices.add({
-                active,
-                startDate,
-                amount: 140
-            })
-        ]
-    });
-}
-

package/src/tests/pool/pool-test.ts

@@ -1,79 +0,0 @@
-/* eslint-disable no-console */
-import assert from "assert";
-import ObjectPool from "../../common/ObjectPool.js";
-import sleep from "../../common/sleep.js";
-
-
-export default async function () {
-    let id = 1;
-    const logs = [] as string[];
-    try {
-        const pool = new ObjectPool({
-            asyncFactory: async () => {
-                await sleep(1);
-                return Promise.resolve({ id: id++, toString() { return `item-${this.id}`; } });
-            },
-            subscribeForRemoval: (po, clear) => void 0,
-            destroy(item) {
-                return Promise.resolve();
-            },
-            maxSize: 5,
-            poolSize: 2,
-            maxWait: 5000,
-            logger: (t) => logs.push(t)
-        });
-
-        const c1 = await pool.acquire();
-        const c2 = await pool.acquire();
-
-        assert.equal(2, c2.id);
-
-        assert.notStrictEqual(c1, c2);
-
-        await c1[Symbol.asyncDispose]();
-
-        assert.equal(pool.freeSize, 1);
-
-        const c3 = await pool.acquire();
-        assert.strictEqual(c1, c3);
-        assert.notStrictEqual(c2, c3);
-        assert.strictEqual(pool.freeSize, 0);
-
-        const c4 = await pool.acquire();
-        assert.notStrictEqual(c4, c1);
-        assert.notStrictEqual(c4, c2);
-
-        assert.strictEqual(pool.currentSize, 3);
-
-        await c4[Symbol.asyncDispose]();
-        await c2[Symbol.asyncDispose]();
-
-        assert.equal(pool.currentSize, 3);
-
-        assert.equal(pool.freeSize, 2);
-
-        await pool.acquire();
-        await pool.acquire();
-        await pool.acquire();
-        const last = await pool.acquire();
-        let lastError;
-        try {
-            await pool.acquire();
-        } catch (error) {
-            lastError = error;
-        }
-        if (!lastError) {
-            assert.fail("Failed");
-        }
-
-        // free last after few milliseconds
-        setTimeout(() => {
-            last[Symbol.asyncDispose]().catch(console.error);
-        }, 10);
-
-        // this should not fail
-        await pool.acquire();
-    } finally {
-        console.log(logs.join("\n"));
-    }
-}

package/src/tests/query/combine.ts

@@ -1,28 +0,0 @@
-import * as assert from "assert";
-import { IQuery, Query, QueryPart } from "../../query/Query.js";
-
-export default function () {
-    const id = 1;
-    const q = Query.create `SELECT * FROM Accounts WHERE ${id}`;
-    assert.equal("SELECT * FROM Accounts WHERE @p0", q.toString());
-
-    const p = q.parts[1] as QueryPart;
-    assert.equal(id, p.value);
-
-    // lets combine multiple queries...
-
-    const id2 = 2;
-
-    const orConstraints = [];
-    orConstraints.push(Query.create `ID == ${id}`);
-    orConstraints.push(Query.create `ID == ${id2}`);
-
-    const final = Query.create `SELECT * FROM Accounts WHERE ${Query.join(orConstraints, " OR ")}`;
-    assert.equal("SELECT * FROM Accounts WHERE ID == @p0 OR ID == @p1", final.toString());
-
-    const rn = "D" + Date.now();
-    const create = Query.create `CREATE Database ${Query.literal(rn)}`;
-    assert.equal(`CREATE Database ${rn}`, create.toString());
-
-
-}

package/src/tests/security/ShoppingContextEvents.ts

@@ -1,23 +0,0 @@
-import ContextEvents from "../../model/events/ContextEvents.js";
-import { Order, OrderItem, Product, ProductCategory, ProductPrice, User } from "../model/ShoppingContext.js";
-import { UserFile } from "../model/UseFile.js";
-import { OrderEvents, OrderItemEvents } from "./events/OrderEvents.js";
-import { ProductEvents, ProductCategoryEvents, ProductPriceEvents } from "./events/ProductEvents.js";
-import { UserEvents } from "./events/UserEvents.js";
-import { UserFileEvents } from "./events/UserFileEvents.js";
-
-export class ShoppingContextEvents extends ContextEvents {
-
-    constructor() {
-        super();
-
-        this.register(User, UserEvents);
-        this.register(Product, ProductEvents);
-        this.register(ProductCategory, ProductCategoryEvents);
-        this.register(ProductPrice, ProductPriceEvents);
-        this.register(Order, OrderEvents);
-        this.register(OrderItem, OrderItemEvents);
-        this.register(UserFile, UserFileEvents);
-    }
-
-}

package/src/tests/security/events/OrderEvents.ts

@@ -1,72 +0,0 @@
-import Inject from "../../../di/di.js";
-import { IEntityQuery } from "../../../model/IFilterWithParameter.js";
-import EntityEvents, { ForeignKeyFilter } from "../../../model/events/EntityEvents.js";
-import { Order, OrderItem, User } from "../../model/ShoppingContext.js";
-import { UserInfo } from "./UserInfo.js";
-
-export class OrderEvents extends EntityEvents<Order> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<Order>): IEntityQuery<Order> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-
-        // user can access orders placed by the user or orders with products owned by user
-
-        return query.where({ userID }, (p) => (x) => x.customerID === p.userID || x.orderItems.some((item) => item.product.ownerID === p.userID));
-    }
-
-    modify(query: IEntityQuery<Order>): IEntityQuery<Order> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-        // user can only modify placed orders
-        return query.where({ userID }, (p) => (x) => x.customerID === p.userID || x.orderItems.some((item) => item.product.ownerID === p.userID));
-    }
-
-    onForeignKeyFilter(filter: ForeignKeyFilter<Order>): IEntityQuery<any> {
-        if (filter.is((x) => x.customer)) {
-            return filter.read();
-        }
-    }
-}
-
-export class OrderItemEvents extends EntityEvents<OrderItem> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<OrderItem>): IEntityQuery<OrderItem> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-
-        // user can access orders placed by the user or orders with products owned by user
-
-        return query.where({ userID }, (p) => (x) => x.order.customerID === p.userID || x.product.ownerID === p.userID);
-    }
-
-    modify(query: IEntityQuery<OrderItem>): IEntityQuery<OrderItem> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-        // user can only modify placed orders
-        return query.where({ userID }, (p) => (x) => x.order.customerID === p.userID || x.product.ownerID === p.userID);
-    }
-
-    onForeignKeyFilter(filter: ForeignKeyFilter<OrderItem>): IEntityQuery<any> {
-        if (filter.is((x) => x.product)) {
-            return filter.read();
-        }
-        if (filter.is((x) => x.productPrice)) {
-            return filter.read();
-        }
-    }
-}

package/src/tests/security/events/ProductEvents.ts

@@ -1,102 +0,0 @@
-import EntityAccessError from "../../../common/EntityAccessError.js";
-import Inject from "../../../di/di.js";
-import { IEntityQuery } from "../../../model/IFilterWithParameter.js";
-import ChangeEntry from "../../../model/changes/ChangeEntry.js";
-import EntityEvents from "../../../model/events/EntityEvents.js";
-import { Product, ProductCategory, ProductPrice } from "../../model/ShoppingContext.js";
-import { UserInfo } from "./UserInfo.js";
-const statusPublished = "published";
-
-export class ProductEvents extends EntityEvents<Product> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<Product>): IEntityQuery<Product> {
-        const { userID } = this.user;
-
-        // admin can access everything so return null
-        if (this.user.admin) {
-            return null;
-        }
-        // everyone can read published or own products
-        return query.where({ userID, statusPublished }, (p) => (x) => x.ownerID === p.userID || x.status === p.statusPublished);
-    }
-
-    modify(query: IEntityQuery<Product>): IEntityQuery<Product> {
-        const { userID } = this.user;
-
-        // admin can access everything so return null
-        if (this.user.admin) {
-            return null;
-        }
-
-        // customer can modify its own products
-        return query.where({ userID }, (p) => (x) => x.ownerID === p.userID);
-    }
-
-    afterUpdate(entity: Product, entry: ChangeEntry<Product>): void | Promise<void> {
-        entity.updated = Array.from(entry.updated.keys()).map((x) => x.name);
-        entity.nameUpdated = entry.isUpdated("name");
-    }
-
-    afterInsert(entity: Product, entry: ChangeEntry<Product>): void | Promise<void> {
-        entity.afterInsertInvoked = true;
-    }
-
-}
-
-export class ProductCategoryEvents extends EntityEvents<ProductCategory> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<ProductCategory>): IEntityQuery<ProductCategory> {
-        return null;
-    }
-
-    modify(query: IEntityQuery<ProductCategory>): IEntityQuery<ProductCategory> {
-        const { userID } = this.user;
-
-        // admin can access everything so return null
-        if (this.user.admin) {
-            return null;
-        }
-
-        EntityAccessError.throw("Access denied");
-    }
-
-}
-
-
-export class ProductPriceEvents extends EntityEvents<ProductPrice> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<ProductPrice>): IEntityQuery<ProductPrice> {
-
-        const { userID } = this.user;
-
-        // admin can access everything so return null
-        if (this.user.admin) {
-            return null;
-        }
-
-        // user can view prices of only published or own products
-        return query.where({ userID, statusPublished } , (p) => (x) => x.product.status === p.statusPublished || x.product.ownerID === p.userID);
-    }
-
-    modify(query: IEntityQuery<ProductPrice>): IEntityQuery<ProductPrice> {
-        const { userID } = this.user;
-
-        // admin can access everything so return null
-        if (this.user.admin) {
-            return null;
-        }
-
-        // user can only edit its own prices
-        return query.where({ userID }, (p) => (x) => x.product.ownerID === p.userID);
-    }
-
-}

package/src/tests/security/events/UserEvents.ts

@@ -1,28 +0,0 @@
-import Inject from "../../../di/di.js";
-import { IEntityQuery } from "../../../model/IFilterWithParameter.js";
-import EntityEvents from "../../../model/events/EntityEvents.js";
-import { User } from "../../model/ShoppingContext.js";
-import { UserInfo } from "./UserInfo.js";
-export class UserEvents extends EntityEvents<User> {
-
-    @Inject
-    user: UserInfo;
-
-    filter(query: IEntityQuery<User>): IEntityQuery<User> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-        return query.where({ userID }, (p) => (x) => x.userID === p.userID
-            || x.orders.some(
-                (op) => op.orderItems.some((oi) => oi.product.ownerID === p.userID)));
-    }
-
-    modify(query: IEntityQuery<User>): IEntityQuery<User> {
-        if (this.user.admin) {
-            return null;
-        }
-        const { userID } = this.user;
-        return query.where({ userID}, (p) => (x) => x.userID === p.userID);
-    }
-}