@esfaenza/access-control 13.3.3 → 13.3.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/esm2020/lib/access-control.directive.mjs +16 -11
- package/esm2020/lib/access-control.module.mjs +5 -3
- package/esm2020/lib/access-control.service.mjs +35 -12
- package/esm2020/lib/models/AccessControlModuleConfig.mjs +1 -1
- package/esm2020/lib/tokens.mjs +7 -7
- package/fesm2015/esfaenza-access-control.mjs +60 -29
- package/fesm2015/esfaenza-access-control.mjs.map +1 -1
- package/fesm2020/esfaenza-access-control.mjs +58 -29
- package/fesm2020/esfaenza-access-control.mjs.map +1 -1
- package/lib/access-control.directive.d.ts +12 -9
- package/lib/access-control.service.d.ts +8 -6
- package/lib/models/AccessControlModuleConfig.d.ts +5 -3
- package/lib/tokens.d.ts +6 -6
- package/package.json +1 -1
|
@@ -17,16 +17,19 @@ export class AccessControlDirective {
|
|
|
17
17
|
this.templateRef = templateRef;
|
|
18
18
|
this.viewContainer = viewContainer;
|
|
19
19
|
this._ac = _ac;
|
|
20
|
+
/**
|
|
21
|
+
* Espressione da processare scritta come {Chiave}:{Valore}
|
|
22
|
+
*
|
|
23
|
+
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions.
|
|
24
|
+
*
|
|
25
|
+
* Nelle ultime versioni del template è anche presente di default la custom permission "X" che indica se l'applicaizone è Esterna o no
|
|
26
|
+
*/
|
|
27
|
+
this.ac = null;
|
|
28
|
+
/** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */
|
|
29
|
+
this.acAbsolute = false;
|
|
20
30
|
}
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
*
|
|
24
|
-
* @param {string} expression espressione da processare scritta come {Chiave}:{Valore}
|
|
25
|
-
*
|
|
26
|
-
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions
|
|
27
|
-
*/
|
|
28
|
-
set ac(expression) {
|
|
29
|
-
var allow = this._ac.has(expression);
|
|
31
|
+
ngOnInit() {
|
|
32
|
+
var allow = this._ac.has(this.ac, this.acAbsolute);
|
|
30
33
|
//Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template
|
|
31
34
|
if (allow)
|
|
32
35
|
this.viewContainer.createEmbeddedView(this.templateRef);
|
|
@@ -35,7 +38,7 @@ export class AccessControlDirective {
|
|
|
35
38
|
}
|
|
36
39
|
}
|
|
37
40
|
AccessControlDirective.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, deps: [{ token: i0.TemplateRef }, { token: i0.ViewContainerRef }, { token: i1.AccessControlService }], target: i0.ɵɵFactoryTarget.Directive });
|
|
38
|
-
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac" }, ngImport: i0 });
|
|
41
|
+
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac", acAbsolute: "acAbsolute" }, ngImport: i0 });
|
|
39
42
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, decorators: [{
|
|
40
43
|
type: Directive,
|
|
41
44
|
args: [{
|
|
@@ -43,5 +46,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImpo
|
|
|
43
46
|
}]
|
|
44
47
|
}], ctorParameters: function () { return [{ type: i0.TemplateRef }, { type: i0.ViewContainerRef }, { type: i1.AccessControlService }]; }, propDecorators: { ac: [{
|
|
45
48
|
type: Input
|
|
49
|
+
}], acAbsolute: [{
|
|
50
|
+
type: Input
|
|
46
51
|
}] } });
|
|
47
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
52
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { LocalizationModule } from '@esfaenza/localizations';
|
|
2
2
|
import { NgModule } from '@angular/core';
|
|
3
|
-
import { ACC_LOCALE, ACC_CUSTOMKEY } from './tokens';
|
|
3
|
+
import { ACC_LOCALE, ACC_CUSTOMKEY, ACC_DEF_COND, ACC_DEF_COND_OP } from './tokens';
|
|
4
4
|
import { AccessControlService } from './access-control.service';
|
|
5
5
|
import { AccessControlRouteGuard } from './AccessControlRouteGuard';
|
|
6
6
|
import { AccessControlDirective } from './access-control.directive';
|
|
@@ -14,7 +14,9 @@ export class AccessControlModule {
|
|
|
14
14
|
AccessControlService,
|
|
15
15
|
AccessControlRouteGuard,
|
|
16
16
|
{ provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },
|
|
17
|
-
{ provide: ACC_CUSTOMKEY, useValue: config?.customKey || null }
|
|
17
|
+
{ provide: ACC_CUSTOMKEY, useValue: config?.customKey || null },
|
|
18
|
+
{ provide: ACC_DEF_COND, useValue: config?.defaultCondition || null },
|
|
19
|
+
{ provide: ACC_DEF_COND_OP, useValue: config?.defaultConditionLogicalOperator || '||' }
|
|
18
20
|
]
|
|
19
21
|
};
|
|
20
22
|
}
|
|
@@ -30,4 +32,4 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImpo
|
|
|
30
32
|
exports: [AccessControlDirective, ContextAwareDirective]
|
|
31
33
|
}]
|
|
32
34
|
}] });
|
|
33
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
35
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,12 +1,15 @@
|
|
|
1
1
|
// Angular
|
|
2
|
-
import { Injectable } from "@angular/core";
|
|
2
|
+
import { Inject, Injectable, Optional } from "@angular/core";
|
|
3
|
+
import { ACC_DEF_COND, ACC_DEF_COND_OP } from "./tokens";
|
|
3
4
|
import * as i0 from "@angular/core";
|
|
4
5
|
/**
|
|
5
6
|
* Entrypoint di tutte le operazioni esposte dalla libreria access-control
|
|
6
7
|
*/
|
|
7
8
|
export class AccessControlService {
|
|
8
9
|
/** @ignore */
|
|
9
|
-
constructor() {
|
|
10
|
+
constructor(ACC_DEF_COND, ACC_DEF_COND_OP) {
|
|
11
|
+
this.ACC_DEF_COND = ACC_DEF_COND;
|
|
12
|
+
this.ACC_DEF_COND_OP = ACC_DEF_COND_OP;
|
|
10
13
|
/**
|
|
11
14
|
* Indica se l'Identity è stata inizializzata
|
|
12
15
|
*/
|
|
@@ -35,6 +38,12 @@ export class AccessControlService {
|
|
|
35
38
|
* @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom
|
|
36
39
|
*/
|
|
37
40
|
initializeCustomPermissions(customPermissions) {
|
|
41
|
+
for (let i = 0; i < customPermissions.length; i++) {
|
|
42
|
+
if (customPermissions[i].key.length > 1) {
|
|
43
|
+
console.error("[@esfaenza/access-control] Custom permission initialized with keys longer than a single characters. Ignoring EVERYTHING.");
|
|
44
|
+
return;
|
|
45
|
+
}
|
|
46
|
+
}
|
|
38
47
|
this.taggedItemsCache = customPermissions;
|
|
39
48
|
this.InitializedCustom = true;
|
|
40
49
|
}
|
|
@@ -50,7 +59,7 @@ export class AccessControlService {
|
|
|
50
59
|
*
|
|
51
60
|
* @ignore
|
|
52
61
|
*/
|
|
53
|
-
hasACExpression(expression) {
|
|
62
|
+
hasACExpression(expression, absolute = false) {
|
|
54
63
|
if (!this.Initialized)
|
|
55
64
|
console.error("Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service");
|
|
56
65
|
if (!expression)
|
|
@@ -59,7 +68,11 @@ export class AccessControlService {
|
|
|
59
68
|
console.warn("Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default");
|
|
60
69
|
return true;
|
|
61
70
|
}
|
|
62
|
-
//
|
|
71
|
+
// Per le espressioni di visibilità "dirette" sulla X ignoro le condizioni di default perché sono condizioni fisiche piuttosto che logiche
|
|
72
|
+
// Significa che siamo o dentro o fuori da un iframe e questo ovviamente va a soprassedere eventuali condizioni logiche del tipo "sono Jace Admin"
|
|
73
|
+
if (this.ACC_DEF_COND && this.ACC_DEF_COND_OP && !absolute && expression != 'X:0' && expression != 'X:1')
|
|
74
|
+
expression = `(${expression}) ${this.ACC_DEF_COND_OP} ${this.ACC_DEF_COND}`;
|
|
75
|
+
// Espressione già valutata, non serve rivalutarla
|
|
63
76
|
if (this.cache[expression])
|
|
64
77
|
return this.cache[expression];
|
|
65
78
|
var RolesPermissionsRegexp = /.:[^|&()]+/g;
|
|
@@ -81,7 +94,7 @@ export class AccessControlService {
|
|
|
81
94
|
return ret;
|
|
82
95
|
}
|
|
83
96
|
/**
|
|
84
|
-
* Utilizzato da hasACExpression
|
|
97
|
+
* Utilizzato da hasACExpression dentro eval
|
|
85
98
|
*
|
|
86
99
|
* @ignore
|
|
87
100
|
*/
|
|
@@ -93,7 +106,7 @@ export class AccessControlService {
|
|
|
93
106
|
return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;
|
|
94
107
|
}
|
|
95
108
|
/**
|
|
96
|
-
* Utilizzato da hasACExpression
|
|
109
|
+
* Utilizzato da hasACExpression dentro eval
|
|
97
110
|
*
|
|
98
111
|
* @ignore
|
|
99
112
|
*/
|
|
@@ -105,7 +118,7 @@ export class AccessControlService {
|
|
|
105
118
|
return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;
|
|
106
119
|
}
|
|
107
120
|
/**
|
|
108
|
-
* Utilizzato da hasACExpression
|
|
121
|
+
* Utilizzato da hasACExpression dentro eval
|
|
109
122
|
*
|
|
110
123
|
* @ignore
|
|
111
124
|
*/
|
|
@@ -121,13 +134,23 @@ export class AccessControlService {
|
|
|
121
134
|
/**
|
|
122
135
|
* Entry point che controlla un'espressione identificante un permesso, ad esempio "P:visualizzazione" controlla che l'utente collegato abbia un permesso che si chiama "visualizzazione"
|
|
123
136
|
*/
|
|
124
|
-
has(expr) {
|
|
125
|
-
return this.hasACExpression(expr);
|
|
137
|
+
has(expr, absolute = false) {
|
|
138
|
+
return this.hasACExpression(expr, absolute);
|
|
126
139
|
}
|
|
127
140
|
}
|
|
128
|
-
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
|
|
141
|
+
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [{ token: ACC_DEF_COND, optional: true }, { token: ACC_DEF_COND_OP, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
|
|
129
142
|
AccessControlService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService });
|
|
130
143
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, decorators: [{
|
|
131
144
|
type: Injectable
|
|
132
|
-
}], ctorParameters: function () { return [
|
|
133
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
145
|
+
}], ctorParameters: function () { return [{ type: undefined, decorators: [{
|
|
146
|
+
type: Optional
|
|
147
|
+
}, {
|
|
148
|
+
type: Inject,
|
|
149
|
+
args: [ACC_DEF_COND]
|
|
150
|
+
}] }, { type: undefined, decorators: [{
|
|
151
|
+
type: Optional
|
|
152
|
+
}, {
|
|
153
|
+
type: Inject,
|
|
154
|
+
args: [ACC_DEF_COND_OP]
|
|
155
|
+
}] }]; } });
|
|
156
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -3,4 +3,4 @@
|
|
|
3
3
|
*/
|
|
4
4
|
export class AccessControlModuleConfig {
|
|
5
5
|
}
|
|
6
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
6
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQWNjZXNzQ29udHJvbE1vZHVsZUNvbmZpZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3Byb2plY3RzL2FjY2Vzcy1jb250cm9sL3NyYy9saWIvbW9kZWxzL0FjY2Vzc0NvbnRyb2xNb2R1bGVDb25maWcudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUE7O0dBRUc7QUFDSCxNQUFNLE9BQU8seUJBQXlCO0NBaUJyQyIsInNvdXJjZXNDb250ZW50IjpbIi8qKlxyXG4gKiBDb25maWd1cmF6aW9uZSBNb2R1bG8gQWNjZXNzQ29udHJvbC4gU2Ugbm9uIGZvcm5pdGEgdmVycsOgIGdlbmVyYXRhIGF1dG9tYXRpY2FtZW50ZSBjb24gbG9jYWxlICdpdC1JVCdcclxuICovXHJcbmV4cG9ydCBjbGFzcyBBY2Nlc3NDb250cm9sTW9kdWxlQ29uZmlnIHtcclxuXHJcbiAgICAvKipcclxuICAgICAqIGxvY2FsZSBkZWxsJ2FwcGxpY2F6aW9uZSBpbiBmb3JtYSBzdGFuZGFyZCwgYWQgZXNlbXBpbyBcIml0LUlUXCIsIFwiZW4tVVNcIiwgZXRjLi4uXHJcbiAgICAgKiBcclxuICAgICAqIEF0dHVhbG1lbnRlIHNpIHN1cHBvcnRhbm8gc29sbyBsZSBsaW5ndWUgSXRhbGlhbm8gZSBJbmdsZXNlXHJcbiAgICAgKi9cclxuICAgIGxvY2FsZTogc3RyaW5nO1xyXG5cclxuICAgIC8qKiBDaGlhdmUgY3VzdG9tIHN1IGN1aSBsYSAqKmNvbnRleHRBd2FyZURpcmVjdGl2ZSoqIHNpIGJhc2EgcGVyIGNvbnRyb2xsYXJlIHNlIGwnZWxlbWVudG8gw6ggYWJpbGl0YXRvIG8gbWVubyAqL1xyXG4gICAgY3VzdG9tS2V5OiBzdHJpbmc7XHJcblxyXG4gICAgLyoqIENvbmRpemlvbmUgZGkgZGVmYXVsdCBkYSBhZ2dpdW5nZXJlIGEgb2duaSBjb25kaXppb25lIHV0ZW50ZS4gRXM6ICdSOkphY2UgQWRtaW4nICovXHJcbiAgICBkZWZhdWx0Q29uZGl0aW9uPzogc3RyaW5nO1xyXG5cclxuICAgIC8qKiBSZWxhemlvbmUgbG9naWNhIGZyYSBsYSBjb25kaXppb25lIGRpIGRlZmF1bHQgZSBsYSBjb25kaXppb25lIHV0ZW50ZS4gRXM6ICd8fCcuIERpIGRlZmF1bHQgdmllbmUgdXRpbGl6emF0byBsJ09SIGxvZ2ljbyAqL1xyXG4gICAgZGVmYXVsdENvbmRpdGlvbkxvZ2ljYWxPcGVyYXRvcj86IHN0cmluZztcclxufSJdfQ==
|
package/esm2020/lib/tokens.mjs
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
import { InjectionToken } from '@angular/core';
|
|
2
|
-
/**
|
|
3
|
-
* Token che racchiude il locale scelto per l'applicazione
|
|
4
|
-
*/
|
|
2
|
+
/** Token che racchiude il locale scelto per l'applicazione */
|
|
5
3
|
export const ACC_LOCALE = new InjectionToken('ACC_LOCALE');
|
|
6
|
-
/**
|
|
7
|
-
* Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext
|
|
8
|
-
*/
|
|
4
|
+
/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */
|
|
9
5
|
export const ACC_CUSTOMKEY = new InjectionToken('ACC_CUSTOMKEY');
|
|
10
|
-
|
|
6
|
+
/** Token che indica la condizione di default da aggiungere ai check utente */
|
|
7
|
+
export const ACC_DEF_COND = new InjectionToken('ACC_DEF_COND');
|
|
8
|
+
/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */
|
|
9
|
+
export const ACC_DEF_COND_OP = new InjectionToken('ACC_DEF_COND_OP');
|
|
10
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -4,14 +4,14 @@ import { InjectionToken, Injectable, Optional, Inject, Directive, Input, NgModul
|
|
|
4
4
|
import * as i1 from '@esfaenza/extensions';
|
|
5
5
|
import * as i3 from '@angular/router';
|
|
6
6
|
|
|
7
|
-
/**
|
|
8
|
-
* Token che racchiude il locale scelto per l'applicazione
|
|
9
|
-
*/
|
|
7
|
+
/** Token che racchiude il locale scelto per l'applicazione */
|
|
10
8
|
const ACC_LOCALE = new InjectionToken('ACC_LOCALE');
|
|
11
|
-
/**
|
|
12
|
-
|
|
13
|
-
*/
|
|
14
|
-
const
|
|
9
|
+
/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */
|
|
10
|
+
const ACC_CUSTOMKEY = new InjectionToken('ACC_CUSTOMKEY');
|
|
11
|
+
/** Token che indica la condizione di default da aggiungere ai check utente */
|
|
12
|
+
const ACC_DEF_COND = new InjectionToken('ACC_DEF_COND');
|
|
13
|
+
/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */
|
|
14
|
+
const ACC_DEF_COND_OP = new InjectionToken('ACC_DEF_COND_OP');
|
|
15
15
|
|
|
16
16
|
// Angular
|
|
17
17
|
/**
|
|
@@ -19,7 +19,9 @@ const ACC_CUSTOMKEY = new InjectionToken('ACC_CUSTOMKEY');
|
|
|
19
19
|
*/
|
|
20
20
|
class AccessControlService {
|
|
21
21
|
/** @ignore */
|
|
22
|
-
constructor() {
|
|
22
|
+
constructor(ACC_DEF_COND, ACC_DEF_COND_OP) {
|
|
23
|
+
this.ACC_DEF_COND = ACC_DEF_COND;
|
|
24
|
+
this.ACC_DEF_COND_OP = ACC_DEF_COND_OP;
|
|
23
25
|
/**
|
|
24
26
|
* Indica se l'Identity è stata inizializzata
|
|
25
27
|
*/
|
|
@@ -48,6 +50,12 @@ class AccessControlService {
|
|
|
48
50
|
* @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom
|
|
49
51
|
*/
|
|
50
52
|
initializeCustomPermissions(customPermissions) {
|
|
53
|
+
for (let i = 0; i < customPermissions.length; i++) {
|
|
54
|
+
if (customPermissions[i].key.length > 1) {
|
|
55
|
+
console.error("[@esfaenza/access-control] Custom permission initialized with keys longer than a single characters. Ignoring EVERYTHING.");
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
}
|
|
51
59
|
this.taggedItemsCache = customPermissions;
|
|
52
60
|
this.InitializedCustom = true;
|
|
53
61
|
}
|
|
@@ -63,7 +71,7 @@ class AccessControlService {
|
|
|
63
71
|
*
|
|
64
72
|
* @ignore
|
|
65
73
|
*/
|
|
66
|
-
hasACExpression(expression) {
|
|
74
|
+
hasACExpression(expression, absolute = false) {
|
|
67
75
|
if (!this.Initialized)
|
|
68
76
|
console.error("Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service");
|
|
69
77
|
if (!expression)
|
|
@@ -72,7 +80,11 @@ class AccessControlService {
|
|
|
72
80
|
console.warn("Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default");
|
|
73
81
|
return true;
|
|
74
82
|
}
|
|
75
|
-
//
|
|
83
|
+
// Per le espressioni di visibilità "dirette" sulla X ignoro le condizioni di default perché sono condizioni fisiche piuttosto che logiche
|
|
84
|
+
// Significa che siamo o dentro o fuori da un iframe e questo ovviamente va a soprassedere eventuali condizioni logiche del tipo "sono Jace Admin"
|
|
85
|
+
if (this.ACC_DEF_COND && this.ACC_DEF_COND_OP && !absolute && expression != 'X:0' && expression != 'X:1')
|
|
86
|
+
expression = `(${expression}) ${this.ACC_DEF_COND_OP} ${this.ACC_DEF_COND}`;
|
|
87
|
+
// Espressione già valutata, non serve rivalutarla
|
|
76
88
|
if (this.cache[expression])
|
|
77
89
|
return this.cache[expression];
|
|
78
90
|
var RolesPermissionsRegexp = /.:[^|&()]+/g;
|
|
@@ -94,7 +106,7 @@ class AccessControlService {
|
|
|
94
106
|
return ret;
|
|
95
107
|
}
|
|
96
108
|
/**
|
|
97
|
-
* Utilizzato da hasACExpression
|
|
109
|
+
* Utilizzato da hasACExpression dentro eval
|
|
98
110
|
*
|
|
99
111
|
* @ignore
|
|
100
112
|
*/
|
|
@@ -106,7 +118,7 @@ class AccessControlService {
|
|
|
106
118
|
return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;
|
|
107
119
|
}
|
|
108
120
|
/**
|
|
109
|
-
* Utilizzato da hasACExpression
|
|
121
|
+
* Utilizzato da hasACExpression dentro eval
|
|
110
122
|
*
|
|
111
123
|
* @ignore
|
|
112
124
|
*/
|
|
@@ -118,7 +130,7 @@ class AccessControlService {
|
|
|
118
130
|
return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;
|
|
119
131
|
}
|
|
120
132
|
/**
|
|
121
|
-
* Utilizzato da hasACExpression
|
|
133
|
+
* Utilizzato da hasACExpression dentro eval
|
|
122
134
|
*
|
|
123
135
|
* @ignore
|
|
124
136
|
*/
|
|
@@ -135,15 +147,27 @@ class AccessControlService {
|
|
|
135
147
|
/**
|
|
136
148
|
* Entry point che controlla un'espressione identificante un permesso, ad esempio "P:visualizzazione" controlla che l'utente collegato abbia un permesso che si chiama "visualizzazione"
|
|
137
149
|
*/
|
|
138
|
-
has(expr) {
|
|
139
|
-
return this.hasACExpression(expr);
|
|
150
|
+
has(expr, absolute = false) {
|
|
151
|
+
return this.hasACExpression(expr, absolute);
|
|
140
152
|
}
|
|
141
153
|
}
|
|
142
|
-
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
|
|
154
|
+
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [{ token: ACC_DEF_COND, optional: true }, { token: ACC_DEF_COND_OP, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
|
|
143
155
|
AccessControlService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService });
|
|
144
156
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, decorators: [{
|
|
145
157
|
type: Injectable
|
|
146
|
-
}], ctorParameters: function () {
|
|
158
|
+
}], ctorParameters: function () {
|
|
159
|
+
return [{ type: undefined, decorators: [{
|
|
160
|
+
type: Optional
|
|
161
|
+
}, {
|
|
162
|
+
type: Inject,
|
|
163
|
+
args: [ACC_DEF_COND]
|
|
164
|
+
}] }, { type: undefined, decorators: [{
|
|
165
|
+
type: Optional
|
|
166
|
+
}, {
|
|
167
|
+
type: Inject,
|
|
168
|
+
args: [ACC_DEF_COND_OP]
|
|
169
|
+
}] }];
|
|
170
|
+
} });
|
|
147
171
|
|
|
148
172
|
/**
|
|
149
173
|
* Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe
|
|
@@ -276,16 +300,19 @@ class AccessControlDirective {
|
|
|
276
300
|
this.templateRef = templateRef;
|
|
277
301
|
this.viewContainer = viewContainer;
|
|
278
302
|
this._ac = _ac;
|
|
303
|
+
/**
|
|
304
|
+
* Espressione da processare scritta come {Chiave}:{Valore}
|
|
305
|
+
*
|
|
306
|
+
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions.
|
|
307
|
+
*
|
|
308
|
+
* Nelle ultime versioni del template è anche presente di default la custom permission "X" che indica se l'applicaizone è Esterna o no
|
|
309
|
+
*/
|
|
310
|
+
this.ac = null;
|
|
311
|
+
/** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */
|
|
312
|
+
this.acAbsolute = false;
|
|
279
313
|
}
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
*
|
|
283
|
-
* @param {string} expression espressione da processare scritta come {Chiave}:{Valore}
|
|
284
|
-
*
|
|
285
|
-
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions
|
|
286
|
-
*/
|
|
287
|
-
set ac(expression) {
|
|
288
|
-
var allow = this._ac.has(expression);
|
|
314
|
+
ngOnInit() {
|
|
315
|
+
var allow = this._ac.has(this.ac, this.acAbsolute);
|
|
289
316
|
//Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template
|
|
290
317
|
if (allow)
|
|
291
318
|
this.viewContainer.createEmbeddedView(this.templateRef);
|
|
@@ -294,7 +321,7 @@ class AccessControlDirective {
|
|
|
294
321
|
}
|
|
295
322
|
}
|
|
296
323
|
AccessControlDirective.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, deps: [{ token: i0.TemplateRef }, { token: i0.ViewContainerRef }, { token: AccessControlService }], target: i0.ɵɵFactoryTarget.Directive });
|
|
297
|
-
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac" }, ngImport: i0 });
|
|
324
|
+
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac", acAbsolute: "acAbsolute" }, ngImport: i0 });
|
|
298
325
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, decorators: [{
|
|
299
326
|
type: Directive,
|
|
300
327
|
args: [{
|
|
@@ -302,6 +329,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImpo
|
|
|
302
329
|
}]
|
|
303
330
|
}], ctorParameters: function () { return [{ type: i0.TemplateRef }, { type: i0.ViewContainerRef }, { type: AccessControlService }]; }, propDecorators: { ac: [{
|
|
304
331
|
type: Input
|
|
332
|
+
}], acAbsolute: [{
|
|
333
|
+
type: Input
|
|
305
334
|
}] } });
|
|
306
335
|
|
|
307
336
|
/**
|
|
@@ -362,7 +391,9 @@ class AccessControlModule {
|
|
|
362
391
|
AccessControlService,
|
|
363
392
|
AccessControlRouteGuard,
|
|
364
393
|
{ provide: ACC_LOCALE, useValue: (config === null || config === void 0 ? void 0 : config.locale) || 'it-IT' },
|
|
365
|
-
{ provide: ACC_CUSTOMKEY, useValue: (config === null || config === void 0 ? void 0 : config.customKey) || null }
|
|
394
|
+
{ provide: ACC_CUSTOMKEY, useValue: (config === null || config === void 0 ? void 0 : config.customKey) || null },
|
|
395
|
+
{ provide: ACC_DEF_COND, useValue: (config === null || config === void 0 ? void 0 : config.defaultCondition) || null },
|
|
396
|
+
{ provide: ACC_DEF_COND_OP, useValue: (config === null || config === void 0 ? void 0 : config.defaultConditionLogicalOperator) || '||' }
|
|
366
397
|
]
|
|
367
398
|
};
|
|
368
399
|
}
|
|
@@ -393,5 +424,5 @@ class AccessControlModuleConfig {
|
|
|
393
424
|
* Generated bundle index. Do not edit.
|
|
394
425
|
*/
|
|
395
426
|
|
|
396
|
-
export { ACC_CUSTOMKEY, ACC_LOCALE, AccessControlDirective, AccessControlModule, AccessControlModuleConfig, AccessControlRouteGuard, AccessControlService, ComponentContext, ContextAwareDirective };
|
|
427
|
+
export { ACC_CUSTOMKEY, ACC_DEF_COND, ACC_DEF_COND_OP, ACC_LOCALE, AccessControlDirective, AccessControlModule, AccessControlModuleConfig, AccessControlRouteGuard, AccessControlService, ComponentContext, ContextAwareDirective };
|
|
397
428
|
//# sourceMappingURL=esfaenza-access-control.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"esfaenza-access-control.mjs","sources":["../../../projects/access-control/src/lib/tokens.ts","../../../projects/access-control/src/lib/access-control.service.ts","../../../projects/access-control/src/lib/AccessControlRouteGuard.ts","../../../projects/access-control/src/lib/access-control.directive.ts","../../../projects/access-control/src/lib/models/ComponentContext.ts","../../../projects/access-control/src/lib/context-aware.directive.ts","../../../projects/access-control/src/lib/access-control.module.ts","../../../projects/access-control/src/lib/models/AccessControlModuleConfig.ts","../../../projects/access-control/src/public-api.ts","../../../projects/access-control/src/esfaenza-access-control.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\n/**\r\n * Token che racchiude il locale scelto per l'applicazione\r\n */\r\nexport const ACC_LOCALE: InjectionToken<string> = new InjectionToken<string>('ACC_LOCALE');\r\n\r\n/**\r\n * Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext\r\n */\r\nexport const ACC_CUSTOMKEY: InjectionToken<string> = new InjectionToken<string>('ACC_CUSTOMKEY');","// Angular\r\nimport { Injectable } from \"@angular/core\";\r\n\r\n/**\r\n * Entrypoint di tutte le operazioni esposte dalla libreria access-control\r\n */\r\n@Injectable()\r\nexport class AccessControlService {\r\n\r\n /**\r\n * Indica se l'Identity è stata inizializzata\r\n */\r\n public Initialized: boolean = false;\r\n\r\n /**\r\n * Indica se sono state effettuate inizializzazioni di Custom Permissions\r\n */\r\n public InitializedCustom: boolean = false;\r\n\r\n /** @ignore */\r\n private cache: {} = {};\r\n\r\n /** @ignore */\r\n private taggedItemsCache: { key: string, items: string[] }[] = [];\r\n\r\n /**\r\n * Identity associata a quest'istanza del Servizio Access Control, utile se si vuole avere accesso a Ruoli e Permessi direttamente da qui, per qualsivoglia motivo\r\n */\r\n public Identity: { Roles: string[], Permissions: string[] };\r\n\r\n /** @ignore */\r\n constructor() { }\r\n\r\n /**\r\n * Inizializza l'Identity del servizio con il modello specificato\r\n * \r\n * @params {{ Roles: string[], Permissions: string[] }} identity Identità applicativa con ruoli e permessi\r\n */\r\n public initializeIdentity(identity: { Roles: string[], Permissions: string[] }) {\r\n this.Identity = identity;\r\n this.Initialized = true;\r\n }\r\n\r\n /**\r\n * Inizializza i permessi Custom del servizio con il modello specificato\r\n * \r\n * @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom\r\n */\r\n public initializeCustomPermissions(customPermissions: { key: string, items: string[] }[]) {\r\n this.taggedItemsCache = customPermissions;\r\n this.InitializedCustom = true;\r\n }\r\n\r\n /**\r\n * Indica se nella sessione attuale esiste un utente loggato. Fa un semplice controllo di presenza sull'Identity\r\n */\r\n public isLoggedIn() {\r\n return !!this.Identity;\r\n }\r\n\r\n /**\r\n * Expression è scritta tipo --> R:Role1 && P:Permission1 || (R:Role2 && P:Permission1)\r\n * Quindi piuttosto che implementarsi un parser della madonna in stile Alessandro prendo la strada stronza e veloce con l'eval :P\r\n * \r\n * @ignore\r\n */\r\n private hasACExpression(expression: string): boolean {\r\n if (!this.Initialized)\r\n console.error(\"Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service\");\r\n\r\n if (!expression)\r\n return true;\r\n\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n\r\n //Espressione già valutata, non serve rivalutarla\r\n if (this.cache[expression])\r\n return this.cache[expression];\r\n\r\n var RolesPermissionsRegexp = /.:[^|&()]+/g;\r\n\r\n var matches = expression.match(RolesPermissionsRegexp);\r\n \r\n if (!matches)\r\n throw \"Espressione Access Control non valida: \" + expression + \". Assicurarsi che sia scritta in modo corretto\";\r\n\r\n matches.forEach(t => {\r\n var splits = t.split(':');\r\n if (splits[0] == \"R\")\r\n expression = expression.replace(t.trim(), \"this.hasRole('\" + splits[1].trim() + \"')\");\r\n else if (splits[0] == \"P\")\r\n expression = expression.replace(t.trim(), \"this.hasPermission('\" + splits[1].trim() + \"')\");\r\n else\r\n expression = expression.replace(t.trim(), \"this.hasCustom('\" + splits[1].trim() + \"', '\" + splits[0].trim() + \"')\");\r\n });\r\n\r\n var ret = <boolean>eval(expression);\r\n // Cache valore\r\n this.cache[expression] = ret;\r\n return ret;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasRole(role: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasPermission(permission: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasCustom(value: string, tag: string): boolean {\r\n var items = this.taggedItemsCache.find(t => t.key == tag)?.items;\r\n if (!items)\r\n return true;\r\n else if (items.length == 0)\r\n return false;\r\n else\r\n return !!items.find(t => t == value);\r\n }\r\n\r\n /**\r\n * Entry point che controlla un'espressione identificante un permesso, ad esempio \"P:visualizzazione\" controlla che l'utente collegato abbia un permesso che si chiama \"visualizzazione\"\r\n */\r\n public has(expr: string) {\r\n return this.hasACExpression(expr);\r\n }\r\n}","//Angular\r\nimport { ActivatedRouteSnapshot, CanActivateChild, RouterStateSnapshot } from \"@angular/router\";\r\nimport { Injectable, Optional, Inject } from \"@angular/core\";\r\nimport { Router } from \"@angular/router\";\r\n\r\n//Libs\r\nimport { LocalizationService } from \"@esfaenza/localizations\";\r\nimport { MessageService } from \"@esfaenza/extensions\";\r\n\r\n//Models\r\nimport { ACC_LOCALE } from \"./tokens\";\r\nimport { AccessControlService } from './access-control.service';\r\n\r\n/**\r\n * Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe\r\n * che la ereditavalorizzare la variabile Routes con le route permesse dal modulo e il permesso per cui si vuole riservare l'accesso. Ad esempio:\r\n * \r\n * ```typescript\r\n * @Injectable()\r\n * export class HasAuthGuardComponent extends BaseRouterGuard {\r\n * constructor(acc: AccessControlService, router: Router, ms: MessageService, ts: BaseTokenService) {\r\n * super(ms, acc, router, ts);\r\n * this.Routes = [\r\n * { route: \"page_route\", permission: \"P:perm_one\" },\r\n * { route: \"*\", permission: \"R:role_one\" }\r\n * ]\r\n * }\r\n * }\r\n * ```\r\n */\r\n@Injectable()\r\nexport class AccessControlRouteGuard implements CanActivateChild {\r\n /**\r\n * @ignore\r\n */\r\n private lc: LocalizationService;\r\n\r\n /**\r\n * Route di login che serve per reindirizzare alla pagina di login in caso di fallimento del controllo sui Permessi\r\n * \r\n * @default\r\n */\r\n protected LoginRoute : string = \"login\";\r\n\r\n /**\r\n * Permette di specificare delle Route sempre consentite, anche a livello di \"Radice\". Ad esempio la Root \"test\" permetterà\r\n * l'accesso a tutte le route che anche solo iniziano per \"test\"\r\n */\r\n protected AlwaysAllowedRoots: string[] = [];\r\n \r\n /**\r\n * Lista di Route con la loro espressione di controllo per valutare i permessi\r\n */\r\n protected Routes: { route: any; permission: string; }[] = [];\r\n\r\n /**\r\n * @ignore\r\n */\r\n constructor(private msgService : MessageService, private ac: AccessControlService, private router: Router, @Optional() @Inject(ACC_LOCALE) LOCALE: string) {\r\n this.lc = new LocalizationService(LOCALE ?? 'it-IT');\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n canActivateChild(route: ActivatedRouteSnapshot, _: RouterStateSnapshot): Promise<boolean> {\r\n var url = route.url.join('/');\r\n //Se l'applicazione non è pronta e non sto navigando nelle pagine consentite\r\n if (!this.ac.Initialized && !this.AlwaysAllowedRoots.find(r => url.indexOf(r) != -1))\r\n return Promise.resolve(false);\r\n \r\n var routeMatched: boolean = false;\r\n for (let i = 0; i < this.Routes.length; i++) {\r\n let r = this.Routes[i];\r\n //Se faccio match con la route significa che ho navigato in una delle route conosciute, altrimenti avverto ma lascio andare\r\n if (url.indexOf(r.route) != -1) {\r\n routeMatched = true;\r\n return this.handleMatch(url, r);\r\n }\r\n }\r\n //Se non faccio nessun match ma ho una route wildcard (*) prendo quella e controllo su quella\r\n if (!routeMatched) {\r\n var wildcardRoute = this.Routes.find(r => r.route == \"*\");\r\n if (wildcardRoute)\r\n return this.handleMatch(url, wildcardRoute);\r\n else\r\n console.log(\"Navigaizone avvenuta su route sconosciuta: \" + url);\r\n }\r\n return Promise.resolve(true);\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n private handleMatch(fromurl: string, r: any) {\r\n let identity = this.ac.Identity;\r\n\r\n if (this.ac.has(r.permission) ||\r\n (\r\n // Considero anche la possibilità di avere l'access control inizializzato ma che l'account scope non sia ancora presente\r\n // in questo caso suppongo sia un hard refresh e mi fido del fatto che l'utente possa entrarci\r\n // TODO: Fixare meglio concatenando una promise che va a prendere l'account scope se serve\r\n this.ac.Initialized &&\r\n (!identity.Roles || identity.Roles.length == 0) &&\r\n (!identity.Permissions || identity.Permissions.length == 0)\r\n ))\r\n return Promise.resolve(true);\r\n else {\r\n //Se sono nel sito originale (non ho aperto un newtab) blocco la navigazione\r\n //Se ho aperto una nuova tab invece rispedisco al login\r\n if (window.history.length > 2 && this.ac.isLoggedIn()) {\r\n this.msgService.simpleError(this.lc.loc(\"You don't have the required permissions to view this page. The navigation has been blocked\"));\r\n return Promise.resolve(false);\r\n }\r\n else {\r\n this.onRedirectInProgress();\r\n this.router.navigate([this.LoginRoute, { fromUrl: fromurl }]);\r\n }\r\n }\r\n }\r\n\r\n /**\r\n * Callback che viene eseguito prima che la Guard reindirizzi al login\r\n */\r\n protected onRedirectInProgress() {\r\n }\r\n}","// Angular\r\nimport { Directive, Input, TemplateRef, ViewContainerRef } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\n\r\n/**\r\n * Direttiva che permette di gestire il controllo accessi su componenti HTML. \r\n * \r\n * Per gli esempi di utilizzo fare riferimento al README.\r\n */\r\n@Directive({\r\n selector: '[ac]',\r\n})\r\nexport class AccessControlDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(private templateRef: TemplateRef<any>, private viewContainer: ViewContainerRef, private _ac: AccessControlService) { }\r\n\r\n /**\r\n * Input autoreferenziale per la direttiva\r\n * \r\n * @param {string} expression espressione da processare scritta come {Chiave}:{Valore}\r\n * \r\n * Le {Chiave} disponibili sono di default \"R\" per i ruoli e \"P\" per i permessi. È possibile espanderle con le Custom Permissions\r\n */\r\n @Input() set ac(expression: string) {\r\n var allow = this._ac.has(expression);\r\n\r\n //Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template\r\n\r\n if (allow) this.viewContainer.createEmbeddedView(this.templateRef);\r\n else this.viewContainer.clear();\r\n }\r\n}","import { Injectable } from '@angular/core';\r\n\r\n/**\r\n * Token da iniettare per ogni singolo componente per cui si vuole disattivare/attivare massivamente degli input in maniera contestuale\r\n */\r\n@Injectable()\r\nexport class ComponentContext{\r\n /**\r\n * Nome del Contesto assegnato al Componente\r\n */\r\n name : string;\r\n}","// Angular\r\nimport { Directive, ElementRef, Optional, Inject } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\nimport { ACC_CUSTOMKEY } from \"./tokens\"\r\n\r\n// Classi\r\nimport { ComponentContext } from \"./models/ComponentContext\";\r\n\r\n/**\r\n * Direttiva che permette di capire se l'elemento HTML su cui è utilizzata dev'essere disabilitato o no.\r\n * \r\n * Non ha effetto sugli elementi dichiarati in componenti che non dichiarano alcun ComponentContext\r\n */\r\n@Directive({\r\n selector: '[contextAware]',\r\n})\r\nexport class ContextAwareDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(element: ElementRef, @Optional() private context: ComponentContext, private ac: AccessControlService, @Optional() @Inject(ACC_CUSTOMKEY) private ACC_CUSTOMKEY: string) {\r\n var allow = !this.context || !this.context.name || !this.ACC_CUSTOMKEY || this.ac.has(this.ACC_CUSTOMKEY + \":\" + this.context.name,);\r\n\r\n if (!allow)\r\n element.nativeElement.setAttribute(\"enabled\", \"true\");\r\n }\r\n}","import { LocalizationModule } from '@esfaenza/localizations';\r\nimport { NgModule, ModuleWithProviders } from '@angular/core';\r\n\r\nimport { ACC_LOCALE, ACC_CUSTOMKEY} from './tokens';\r\n\r\nimport { AccessControlModuleConfig } from './models/AccessControlModuleConfig';\r\nimport { AccessControlService } from './access-control.service';\r\nimport { AccessControlRouteGuard } from './AccessControlRouteGuard';\r\nimport { AccessControlDirective } from './access-control.directive';\r\nimport { ContextAwareDirective } from './context-aware.directive';\r\n\r\n@NgModule({\r\n imports: [LocalizationModule],\r\n declarations: [AccessControlDirective, ContextAwareDirective],\r\n exports:[AccessControlDirective, ContextAwareDirective]\r\n})\r\nexport class AccessControlModule {\r\n static forRoot(config?: AccessControlModuleConfig): ModuleWithProviders<AccessControlModule> {\r\n return {\r\n ngModule: AccessControlModule,\r\n providers: [\r\n AccessControlService,\r\n AccessControlRouteGuard,\r\n { provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },\r\n { provide: ACC_CUSTOMKEY, useValue: config?.customKey || null }\r\n ]\r\n };\r\n }\r\n}","/**\r\n * Configurazione Modulo AccessControl. Se non fornita verrà generata automaticamente con locale 'it-IT'\r\n */\r\nexport class AccessControlModuleConfig {\r\n\r\n /**\r\n * locale dell'applicazione in forma standard, ad esempio \"it-IT\", \"en-US\", etc...\r\n * \r\n * Attualmente si supportano solo le lingue Italiano e Inglese\r\n */\r\n locale: string;\r\n\r\n /**\r\n * Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno\r\n */\r\n customKey: string;\r\n}","/*\r\n * Public API Surface of access-control\r\n */\r\n\r\nexport * from './lib/access-control.module';\r\nexport * from './lib/access-control.service';\r\nexport * from './lib/access-control.directive'\r\nexport * from './lib/context-aware.directive';\r\nexport * from \"./lib/models/AccessControlModuleConfig\";\r\nexport * from \"./lib/AccessControlRouteGuard\";\r\nexport * from \"./lib/tokens\";\r\nexport * from \"./lib/models/ComponentContext\";","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AAEA;;;MAGa,UAAU,GAA2B,IAAI,cAAc,CAAS,YAAY,EAAE;AAE3F;;;MAGa,aAAa,GAA2B,IAAI,cAAc,CAAS,eAAe;;ACV/F;AAGA;;;MAIa,oBAAoB;;IAwB/B;;;;QAnBO,gBAAW,GAAY,KAAK,CAAC;;;;QAK7B,sBAAiB,GAAY,KAAK,CAAC;;QAGlC,UAAK,GAAO,EAAE,CAAC;;QAGf,qBAAgB,GAAuC,EAAE,CAAC;KAQjD;;;;;;IAOV,kBAAkB,CAAC,QAAoD;QAC5E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;KACzB;;;;;;IAOM,2BAA2B,CAAC,iBAAqD;QACtF,IAAI,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;KAC/B;;;;IAKM,UAAU;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;KACxB;;;;;;;IAQO,eAAe,CAAC,UAAkB;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,OAAO,CAAC,KAAK,CAAC,uHAAuH,CAAC,CAAC;QAEzI,IAAI,CAAC,UAAU;YACb,OAAO,IAAI,CAAC;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;;QAGD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,IAAI,sBAAsB,GAAG,aAAa,CAAC;QAE3C,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO;YACV,MAAM,yCAAyC,GAAG,UAAU,GAAG,gDAAgD,CAAC;QAElH,OAAO,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBAClB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;iBACnF,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBACvB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;;gBAE5F,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;SACvH,CAAC,CAAC;QAEH,IAAI,GAAG,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;;QAEpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC;KACZ;;;;;;IAOO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACzG;;;;;;IAOO,aAAa,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACjI;;;;;;IAOO,SAAS,CAAC,KAAa,EAAE,GAAW;;QAC1C,IAAI,KAAK,GAAG,MAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,0CAAE,KAAK,CAAC;QACjE,IAAI,CAAC,KAAK;YACR,OAAO,IAAI,CAAC;aACT,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC;;YAEb,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;KACxC;;;;IAKM,GAAG,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;KACnC;;kHAhJU,oBAAoB;sHAApB,oBAAoB;4FAApB,oBAAoB;kBADhC,UAAU;;;ACOX;;;;;;;;;;;;;;;;;MAkBa,uBAAuB;;;;IA2BhC,YAAoB,UAA2B,EAAU,EAAwB,EAAU,MAAc,EAAkC,MAAc;QAArI,eAAU,GAAV,UAAU,CAAiB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAAU,WAAM,GAAN,MAAM,CAAQ;;;;;;QAhB/F,eAAU,GAAY,OAAO,CAAC;;;;;QAM9B,uBAAkB,GAAa,EAAE,CAAC;;;;QAKlC,WAAM,GAA0C,EAAE,CAAC;QAMzD,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,OAAO,CAAC,CAAC;KACxD;;;;IAKD,gBAAgB,CAAC,KAA6B,EAAE,CAAsB;QAClE,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;QAE9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,YAAY,GAAY,KAAK,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;;YAEvB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC5B,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACnC;SACJ;;QAED,IAAI,CAAC,YAAY,EAAE;YACf,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;YAC1D,IAAI,aAAa;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;;gBAE5C,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,GAAG,CAAC,CAAC;SACxE;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;;;;IAKO,WAAW,CAAC,OAAe,EAAE,CAAM;QACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;QAEhC,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;;;;;YAKrB,IAAI,CAAC,EAAE,CAAC,WAAW;iBAClB,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;iBAC9C,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9D;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC5B;;;YAGD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;gBACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC,CAAC;gBACvI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aACjC;iBACI;gBACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aACjE;SACJ;KACJ;;;;IAKS,oBAAoB;KAC7B;;qHA9FQ,uBAAuB,uGA2B+F,UAAU;yHA3BhI,uBAAuB;4FAAvB,uBAAuB;kBADnC,UAAU;;;8BA4BqG,QAAQ;;8BAAI,MAAM;+BAAC,UAAU;;;;AC1D7I;AAMA;;;;;MAQa,sBAAsB;;;;;;IAO/B,YAAoB,WAA6B,EAAU,aAA+B,EAAU,GAAyB;QAAzG,gBAAW,GAAX,WAAW,CAAkB;QAAU,kBAAa,GAAb,aAAa,CAAkB;QAAU,QAAG,GAAH,GAAG,CAAsB;KAAK;;;;;;;;IASlI,IAAa,EAAE,CAAC,UAAkB;QAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;;QAIrC,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;;YAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KACnC;;oHAvBQ,sBAAsB;wGAAtB,sBAAsB;4FAAtB,sBAAsB;kBAHlC,SAAS;mBAAC;oBACP,QAAQ,EAAE,MAAM;iBACnB;iKAiBgB,EAAE;sBAAd,KAAK;;;AC5BV;;;MAIa,gBAAgB;;8GAAhB,gBAAgB;kHAAhB,gBAAgB;4FAAhB,gBAAgB;kBAD5B,UAAU;;;ACLX;AAUA;;;;;MAQa,qBAAqB;;;;;;IAO9B,YAAY,OAAmB,EAAsB,OAAyB,EAAU,EAAwB,EAA6C,aAAqB;QAA7H,YAAO,GAAP,OAAO,CAAkB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAA6C,kBAAa,GAAb,aAAa,CAAQ;QAC9K,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC;QAErI,IAAI,CAAC,KAAK;YACN,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;KAC7D;;mHAZQ,qBAAqB,0HAOwG,aAAa;uGAP1I,qBAAqB;4FAArB,qBAAqB;kBAHjC,SAAS;mBAAC;oBACP,QAAQ,EAAE,gBAAgB;iBAC7B;;;8BAQqC,QAAQ;;8BAAyE,QAAQ;;8BAAI,MAAM;+BAAC,aAAa;;;;MCT1I,mBAAmB;IAC9B,OAAO,OAAO,CAAC,MAAkC;QAC/C,OAAO;YACL,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE;gBACT,oBAAoB;gBACpB,uBAAuB;gBACvB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,OAAO,EAAE;gBAC5D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,KAAI,IAAI,EAAE;aAChE;SACF,CAAC;KACH;;iHAXU,mBAAmB;kHAAnB,mBAAmB,iBAHf,sBAAsB,EAAE,qBAAqB,aADlD,kBAAkB,aAEnB,sBAAsB,EAAE,qBAAqB;kHAE3C,mBAAmB,YAJrB,CAAC,kBAAkB,CAAC;4FAIlB,mBAAmB;kBAL/B,QAAQ;mBAAC;oBACR,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,YAAY,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;oBAC7D,OAAO,EAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;iBACxD;;;ACfD;;;MAGa,yBAAyB;;;ACHtC;;;;ACAA;;;;;;"}
|
|
1
|
+
{"version":3,"file":"esfaenza-access-control.mjs","sources":["../../../projects/access-control/src/lib/tokens.ts","../../../projects/access-control/src/lib/access-control.service.ts","../../../projects/access-control/src/lib/AccessControlRouteGuard.ts","../../../projects/access-control/src/lib/access-control.directive.ts","../../../projects/access-control/src/lib/models/ComponentContext.ts","../../../projects/access-control/src/lib/context-aware.directive.ts","../../../projects/access-control/src/lib/access-control.module.ts","../../../projects/access-control/src/lib/models/AccessControlModuleConfig.ts","../../../projects/access-control/src/public-api.ts","../../../projects/access-control/src/esfaenza-access-control.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\n/** Token che racchiude il locale scelto per l'applicazione */\r\nexport const ACC_LOCALE: InjectionToken<string> = new InjectionToken<string>('ACC_LOCALE');\r\n\r\n/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */\r\nexport const ACC_CUSTOMKEY: InjectionToken<string> = new InjectionToken<string>('ACC_CUSTOMKEY');\r\n\r\n/** Token che indica la condizione di default da aggiungere ai check utente */\r\nexport const ACC_DEF_COND: InjectionToken<string> = new InjectionToken<string>('ACC_DEF_COND');\r\n\r\n/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */\r\nexport const ACC_DEF_COND_OP: InjectionToken<string> = new InjectionToken<string>('ACC_DEF_COND_OP');","// Angular\r\nimport { Inject, Injectable, Optional } from \"@angular/core\";\r\nimport { ACC_DEF_COND, ACC_DEF_COND_OP } from \"./tokens\";\r\n\r\n/**\r\n * Entrypoint di tutte le operazioni esposte dalla libreria access-control\r\n */\r\n@Injectable()\r\nexport class AccessControlService {\r\n\r\n /**\r\n * Indica se l'Identity è stata inizializzata\r\n */\r\n public Initialized: boolean = false;\r\n\r\n /**\r\n * Indica se sono state effettuate inizializzazioni di Custom Permissions\r\n */\r\n public InitializedCustom: boolean = false;\r\n\r\n /** @ignore */\r\n private cache: {} = {};\r\n\r\n /** @ignore */\r\n private taggedItemsCache: { key: string, items: string[] }[] = [];\r\n\r\n /**\r\n * Identity associata a quest'istanza del Servizio Access Control, utile se si vuole avere accesso a Ruoli e Permessi direttamente da qui, per qualsivoglia motivo\r\n */\r\n public Identity: { Roles: string[], Permissions: string[] };\r\n\r\n /** @ignore */\r\n constructor(@Optional() @Inject(ACC_DEF_COND) private ACC_DEF_COND: string, @Optional() @Inject(ACC_DEF_COND_OP) private ACC_DEF_COND_OP: string,) { }\r\n\r\n /**\r\n * Inizializza l'Identity del servizio con il modello specificato\r\n * \r\n * @params {{ Roles: string[], Permissions: string[] }} identity Identità applicativa con ruoli e permessi\r\n */\r\n public initializeIdentity(identity: { Roles: string[], Permissions: string[] }) {\r\n this.Identity = identity;\r\n this.Initialized = true;\r\n }\r\n\r\n /**\r\n * Inizializza i permessi Custom del servizio con il modello specificato\r\n * \r\n * @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom\r\n */\r\n public initializeCustomPermissions(customPermissions: { key: string, items: string[] }[]) {\r\n for (let i = 0; i < customPermissions.length; i++) {\r\n if (customPermissions[i].key.length > 1) {\r\n console.error(\"[@esfaenza/access-control] Custom permission initialized with keys longer than a single characters. Ignoring EVERYTHING.\");\r\n return;\r\n }\r\n }\r\n\r\n this.taggedItemsCache = customPermissions;\r\n this.InitializedCustom = true;\r\n }\r\n\r\n /**\r\n * Indica se nella sessione attuale esiste un utente loggato. Fa un semplice controllo di presenza sull'Identity\r\n */\r\n public isLoggedIn() {\r\n return !!this.Identity;\r\n }\r\n\r\n /**\r\n * Expression è scritta tipo --> R:Role1 && P:Permission1 || (R:Role2 && P:Permission1)\r\n * Quindi piuttosto che implementarsi un parser della madonna in stile Alessandro prendo la strada stronza e veloce con l'eval :P\r\n * \r\n * @ignore\r\n */\r\n private hasACExpression(expression: string, absolute: boolean = false): boolean {\r\n if (!this.Initialized)\r\n console.error(\"Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service\");\r\n\r\n if (!expression)\r\n return true;\r\n\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n\r\n // Per le espressioni di visibilità \"dirette\" sulla X ignoro le condizioni di default perché sono condizioni fisiche piuttosto che logiche\r\n // Significa che siamo o dentro o fuori da un iframe e questo ovviamente va a soprassedere eventuali condizioni logiche del tipo \"sono Jace Admin\"\r\n if(this.ACC_DEF_COND && this.ACC_DEF_COND_OP && !absolute && expression != 'X:0' && expression != 'X:1')\r\n expression = `(${expression}) ${this.ACC_DEF_COND_OP} ${this.ACC_DEF_COND}`;\r\n \r\n // Espressione già valutata, non serve rivalutarla\r\n if (this.cache[expression])\r\n return this.cache[expression];\r\n\r\n var RolesPermissionsRegexp = /.:[^|&()]+/g;\r\n\r\n var matches = expression.match(RolesPermissionsRegexp);\r\n \r\n if (!matches)\r\n throw \"Espressione Access Control non valida: \" + expression + \". Assicurarsi che sia scritta in modo corretto\";\r\n\r\n matches.forEach(t => {\r\n var splits = t.split(':');\r\n if (splits[0] == \"R\")\r\n expression = expression.replace(t.trim(), \"this.hasRole('\" + splits[1].trim() + \"')\");\r\n else if (splits[0] == \"P\")\r\n expression = expression.replace(t.trim(), \"this.hasPermission('\" + splits[1].trim() + \"')\");\r\n else\r\n expression = expression.replace(t.trim(), \"this.hasCustom('\" + splits[1].trim() + \"', '\" + splits[0].trim() + \"')\");\r\n });\r\n\r\n var ret = <boolean>eval(expression);\r\n // Cache valore\r\n this.cache[expression] = ret;\r\n return ret;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasRole(role: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasPermission(permission: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasCustom(value: string, tag: string): boolean {\r\n var items = this.taggedItemsCache.find(t => t.key == tag)?.items;\r\n if (!items)\r\n return true;\r\n else if (items.length == 0)\r\n return false;\r\n else\r\n return !!items.find(t => t == value);\r\n }\r\n\r\n /**\r\n * Entry point che controlla un'espressione identificante un permesso, ad esempio \"P:visualizzazione\" controlla che l'utente collegato abbia un permesso che si chiama \"visualizzazione\"\r\n */\r\n public has(expr: string, absolute: boolean = false) {\r\n return this.hasACExpression(expr, absolute);\r\n }\r\n}","//Angular\r\nimport { ActivatedRouteSnapshot, CanActivateChild, RouterStateSnapshot } from \"@angular/router\";\r\nimport { Injectable, Optional, Inject } from \"@angular/core\";\r\nimport { Router } from \"@angular/router\";\r\n\r\n//Libs\r\nimport { LocalizationService } from \"@esfaenza/localizations\";\r\nimport { MessageService } from \"@esfaenza/extensions\";\r\n\r\n//Models\r\nimport { ACC_LOCALE } from \"./tokens\";\r\nimport { AccessControlService } from './access-control.service';\r\n\r\n/**\r\n * Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe\r\n * che la ereditavalorizzare la variabile Routes con le route permesse dal modulo e il permesso per cui si vuole riservare l'accesso. Ad esempio:\r\n * \r\n * ```typescript\r\n * @Injectable()\r\n * export class HasAuthGuardComponent extends BaseRouterGuard {\r\n * constructor(acc: AccessControlService, router: Router, ms: MessageService, ts: BaseTokenService) {\r\n * super(ms, acc, router, ts);\r\n * this.Routes = [\r\n * { route: \"page_route\", permission: \"P:perm_one\" },\r\n * { route: \"*\", permission: \"R:role_one\" }\r\n * ]\r\n * }\r\n * }\r\n * ```\r\n */\r\n@Injectable()\r\nexport class AccessControlRouteGuard implements CanActivateChild {\r\n /**\r\n * @ignore\r\n */\r\n private lc: LocalizationService;\r\n\r\n /**\r\n * Route di login che serve per reindirizzare alla pagina di login in caso di fallimento del controllo sui Permessi\r\n * \r\n * @default\r\n */\r\n protected LoginRoute : string = \"login\";\r\n\r\n /**\r\n * Permette di specificare delle Route sempre consentite, anche a livello di \"Radice\". Ad esempio la Root \"test\" permetterà\r\n * l'accesso a tutte le route che anche solo iniziano per \"test\"\r\n */\r\n protected AlwaysAllowedRoots: string[] = [];\r\n \r\n /**\r\n * Lista di Route con la loro espressione di controllo per valutare i permessi\r\n */\r\n protected Routes: { route: any; permission: string; }[] = [];\r\n\r\n /**\r\n * @ignore\r\n */\r\n constructor(private msgService : MessageService, private ac: AccessControlService, private router: Router, @Optional() @Inject(ACC_LOCALE) LOCALE: string) {\r\n this.lc = new LocalizationService(LOCALE ?? 'it-IT');\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n canActivateChild(route: ActivatedRouteSnapshot, _: RouterStateSnapshot): Promise<boolean> {\r\n var url = route.url.join('/');\r\n //Se l'applicazione non è pronta e non sto navigando nelle pagine consentite\r\n if (!this.ac.Initialized && !this.AlwaysAllowedRoots.find(r => url.indexOf(r) != -1))\r\n return Promise.resolve(false);\r\n \r\n var routeMatched: boolean = false;\r\n for (let i = 0; i < this.Routes.length; i++) {\r\n let r = this.Routes[i];\r\n //Se faccio match con la route significa che ho navigato in una delle route conosciute, altrimenti avverto ma lascio andare\r\n if (url.indexOf(r.route) != -1) {\r\n routeMatched = true;\r\n return this.handleMatch(url, r);\r\n }\r\n }\r\n //Se non faccio nessun match ma ho una route wildcard (*) prendo quella e controllo su quella\r\n if (!routeMatched) {\r\n var wildcardRoute = this.Routes.find(r => r.route == \"*\");\r\n if (wildcardRoute)\r\n return this.handleMatch(url, wildcardRoute);\r\n else\r\n console.log(\"Navigaizone avvenuta su route sconosciuta: \" + url);\r\n }\r\n return Promise.resolve(true);\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n private handleMatch(fromurl: string, r: any) {\r\n let identity = this.ac.Identity;\r\n\r\n if (this.ac.has(r.permission) ||\r\n (\r\n // Considero anche la possibilità di avere l'access control inizializzato ma che l'account scope non sia ancora presente\r\n // in questo caso suppongo sia un hard refresh e mi fido del fatto che l'utente possa entrarci\r\n // TODO: Fixare meglio concatenando una promise che va a prendere l'account scope se serve\r\n this.ac.Initialized &&\r\n (!identity.Roles || identity.Roles.length == 0) &&\r\n (!identity.Permissions || identity.Permissions.length == 0)\r\n ))\r\n return Promise.resolve(true);\r\n else {\r\n //Se sono nel sito originale (non ho aperto un newtab) blocco la navigazione\r\n //Se ho aperto una nuova tab invece rispedisco al login\r\n if (window.history.length > 2 && this.ac.isLoggedIn()) {\r\n this.msgService.simpleError(this.lc.loc(\"You don't have the required permissions to view this page. The navigation has been blocked\"));\r\n return Promise.resolve(false);\r\n }\r\n else {\r\n this.onRedirectInProgress();\r\n this.router.navigate([this.LoginRoute, { fromUrl: fromurl }]);\r\n }\r\n }\r\n }\r\n\r\n /**\r\n * Callback che viene eseguito prima che la Guard reindirizzi al login\r\n */\r\n protected onRedirectInProgress() {\r\n }\r\n}","// Angular\r\nimport { Directive, Input, TemplateRef, ViewContainerRef } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\n\r\n/**\r\n * Direttiva che permette di gestire il controllo accessi su componenti HTML. \r\n * \r\n * Per gli esempi di utilizzo fare riferimento al README.\r\n */\r\n@Directive({\r\n selector: '[ac]',\r\n})\r\nexport class AccessControlDirective {\r\n \r\n /** \r\n * Espressione da processare scritta come {Chiave}:{Valore}\r\n * \r\n * Le {Chiave} disponibili sono di default \"R\" per i ruoli e \"P\" per i permessi. È possibile espanderle con le Custom Permissions.\r\n * \r\n * Nelle ultime versioni del template è anche presente di default la custom permission \"X\" che indica se l'applicaizone è Esterna o no\r\n */\r\n @Input() ac : string = null;\r\n\r\n /** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */\r\n @Input() acAbsolute: boolean = false;\r\n\r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(private templateRef: TemplateRef<any>, private viewContainer: ViewContainerRef, private _ac: AccessControlService) { }\r\n\r\n\r\n ngOnInit(){\r\n var allow = this._ac.has(this.ac, this.acAbsolute);\r\n\r\n //Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template\r\n\r\n if (allow) this.viewContainer.createEmbeddedView(this.templateRef);\r\n else this.viewContainer.clear();\r\n }\r\n\r\n}","import { Injectable } from '@angular/core';\r\n\r\n/**\r\n * Token da iniettare per ogni singolo componente per cui si vuole disattivare/attivare massivamente degli input in maniera contestuale\r\n */\r\n@Injectable()\r\nexport class ComponentContext{\r\n /**\r\n * Nome del Contesto assegnato al Componente\r\n */\r\n name : string;\r\n}","// Angular\r\nimport { Directive, ElementRef, Optional, Inject } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\nimport { ACC_CUSTOMKEY } from \"./tokens\"\r\n\r\n// Classi\r\nimport { ComponentContext } from \"./models/ComponentContext\";\r\n\r\n/**\r\n * Direttiva che permette di capire se l'elemento HTML su cui è utilizzata dev'essere disabilitato o no.\r\n * \r\n * Non ha effetto sugli elementi dichiarati in componenti che non dichiarano alcun ComponentContext\r\n */\r\n@Directive({\r\n selector: '[contextAware]',\r\n})\r\nexport class ContextAwareDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(element: ElementRef, @Optional() private context: ComponentContext, private ac: AccessControlService, @Optional() @Inject(ACC_CUSTOMKEY) private ACC_CUSTOMKEY: string) {\r\n var allow = !this.context || !this.context.name || !this.ACC_CUSTOMKEY || this.ac.has(this.ACC_CUSTOMKEY + \":\" + this.context.name,);\r\n\r\n if (!allow)\r\n element.nativeElement.setAttribute(\"enabled\", \"true\");\r\n }\r\n}","import { LocalizationModule } from '@esfaenza/localizations';\r\nimport { NgModule, ModuleWithProviders } from '@angular/core';\r\n\r\nimport { ACC_LOCALE, ACC_CUSTOMKEY, ACC_DEF_COND, ACC_DEF_COND_OP } from './tokens';\r\n\r\nimport { AccessControlModuleConfig } from './models/AccessControlModuleConfig';\r\nimport { AccessControlService } from './access-control.service';\r\nimport { AccessControlRouteGuard } from './AccessControlRouteGuard';\r\nimport { AccessControlDirective } from './access-control.directive';\r\nimport { ContextAwareDirective } from './context-aware.directive';\r\n\r\n@NgModule({\r\n imports: [LocalizationModule],\r\n declarations: [AccessControlDirective, ContextAwareDirective],\r\n exports:[AccessControlDirective, ContextAwareDirective]\r\n})\r\nexport class AccessControlModule {\r\n static forRoot(config?: AccessControlModuleConfig): ModuleWithProviders<AccessControlModule> {\r\n return {\r\n ngModule: AccessControlModule,\r\n providers: [\r\n AccessControlService,\r\n AccessControlRouteGuard,\r\n { provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },\r\n { provide: ACC_CUSTOMKEY, useValue: config?.customKey || null },\r\n { provide: ACC_DEF_COND, useValue: config?.defaultCondition || null },\r\n { provide: ACC_DEF_COND_OP, useValue: config?.defaultConditionLogicalOperator || '||' }\r\n ]\r\n };\r\n }\r\n}","/**\r\n * Configurazione Modulo AccessControl. Se non fornita verrà generata automaticamente con locale 'it-IT'\r\n */\r\nexport class AccessControlModuleConfig {\r\n\r\n /**\r\n * locale dell'applicazione in forma standard, ad esempio \"it-IT\", \"en-US\", etc...\r\n * \r\n * Attualmente si supportano solo le lingue Italiano e Inglese\r\n */\r\n locale: string;\r\n\r\n /** Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno */\r\n customKey: string;\r\n\r\n /** Condizione di default da aggiungere a ogni condizione utente. Es: 'R:Jace Admin' */\r\n defaultCondition?: string;\r\n\r\n /** Relazione logica fra la condizione di default e la condizione utente. Es: '||'. Di default viene utilizzato l'OR logico */\r\n defaultConditionLogicalOperator?: string;\r\n}","/*\r\n * Public API Surface of access-control\r\n */\r\n\r\nexport * from './lib/access-control.module';\r\nexport * from './lib/access-control.service';\r\nexport * from './lib/access-control.directive'\r\nexport * from './lib/context-aware.directive';\r\nexport * from \"./lib/models/AccessControlModuleConfig\";\r\nexport * from \"./lib/AccessControlRouteGuard\";\r\nexport * from \"./lib/tokens\";\r\nexport * from \"./lib/models/ComponentContext\";","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AAEA;MACa,UAAU,GAA2B,IAAI,cAAc,CAAS,YAAY,EAAE;AAE3F;MACa,aAAa,GAA2B,IAAI,cAAc,CAAS,eAAe,EAAE;AAEjG;MACa,YAAY,GAA2B,IAAI,cAAc,CAAS,cAAc,EAAE;AAE/F;MACa,eAAe,GAA2B,IAAI,cAAc,CAAS,iBAAiB;;ACZnG;AAIA;;;MAIa,oBAAoB;;IAwB/B,YAAsD,YAAoB,EAA+C,eAAuB;QAA1F,iBAAY,GAAZ,YAAY,CAAQ;QAA+C,oBAAe,GAAf,eAAe,CAAQ;;;;QAnBzI,gBAAW,GAAY,KAAK,CAAC;;;;QAK7B,sBAAiB,GAAY,KAAK,CAAC;;QAGlC,UAAK,GAAO,EAAE,CAAC;;QAGf,qBAAgB,GAAuC,EAAE,CAAC;KAQoF;;;;;;IAO/I,kBAAkB,CAAC,QAAoD;QAC5E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;KACzB;;;;;;IAOM,2BAA2B,CAAC,iBAAqD;QACtF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACjD,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;gBACvC,OAAO,CAAC,KAAK,CAAC,0HAA0H,CAAC,CAAC;gBAC1I,OAAO;aACR;SACF;QAED,IAAI,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;KAC/B;;;;IAKM,UAAU;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;KACxB;;;;;;;IAQO,eAAe,CAAC,UAAkB,EAAE,WAAoB,KAAK;QACnE,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,OAAO,CAAC,KAAK,CAAC,uHAAuH,CAAC,CAAC;QAEzI,IAAI,CAAC,UAAU;YACb,OAAO,IAAI,CAAC;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;;;QAID,IAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK;YACrG,UAAU,GAAG,IAAI,UAAU,KAAK,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;;QAG9E,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,IAAI,sBAAsB,GAAG,aAAa,CAAC;QAE3C,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO;YACV,MAAM,yCAAyC,GAAG,UAAU,GAAG,gDAAgD,CAAC;QAElH,OAAO,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBAClB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;iBACnF,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBACvB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;;gBAE5F,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;SACvH,CAAC,CAAC;QAEH,IAAI,GAAG,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;;QAEpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC;KACZ;;;;;;IAOO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACzG;;;;;;IAOO,aAAa,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACjI;;;;;;IAOO,SAAS,CAAC,KAAa,EAAE,GAAW;;QAC1C,IAAI,KAAK,GAAG,MAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,0CAAE,KAAK,CAAC;QACjE,IAAI,CAAC,KAAK;YACR,OAAO,IAAI,CAAC;aACT,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC;;YAEb,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;KACxC;;;;IAKM,GAAG,CAAC,IAAY,EAAE,WAAoB,KAAK;QAChD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;KAC7C;;kHA5JU,oBAAoB,kBAwBC,YAAY,6BAAoD,eAAe;sHAxBpG,oBAAoB;4FAApB,oBAAoB;kBADhC,UAAU;;;8BAyBI,QAAQ;;8BAAI,MAAM;+BAAC,YAAY;;8BAAiC,QAAQ;;8BAAI,MAAM;+BAAC,eAAe;;;;ACnBjH;;;;;;;;;;;;;;;;;MAkBa,uBAAuB;;;;IA2BhC,YAAoB,UAA2B,EAAU,EAAwB,EAAU,MAAc,EAAkC,MAAc;QAArI,eAAU,GAAV,UAAU,CAAiB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAAU,WAAM,GAAN,MAAM,CAAQ;;;;;;QAhB/F,eAAU,GAAY,OAAO,CAAC;;;;;QAM9B,uBAAkB,GAAa,EAAE,CAAC;;;;QAKlC,WAAM,GAA0C,EAAE,CAAC;QAMzD,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,OAAO,CAAC,CAAC;KACxD;;;;IAKD,gBAAgB,CAAC,KAA6B,EAAE,CAAsB;QAClE,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;QAE9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,YAAY,GAAY,KAAK,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;;YAEvB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC5B,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACnC;SACJ;;QAED,IAAI,CAAC,YAAY,EAAE;YACf,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;YAC1D,IAAI,aAAa;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;;gBAE5C,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,GAAG,CAAC,CAAC;SACxE;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;;;;IAKO,WAAW,CAAC,OAAe,EAAE,CAAM;QACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;QAEhC,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;;;;;YAKrB,IAAI,CAAC,EAAE,CAAC,WAAW;iBAClB,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;iBAC9C,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9D;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC5B;;;YAGD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;gBACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC,CAAC;gBACvI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aACjC;iBACI;gBACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aACjE;SACJ;KACJ;;;;IAKS,oBAAoB;KAC7B;;qHA9FQ,uBAAuB,uGA2B+F,UAAU;yHA3BhI,uBAAuB;4FAAvB,uBAAuB;kBADnC,UAAU;;;8BA4BqG,QAAQ;;8BAAI,MAAM;+BAAC,UAAU;;;;AC1D7I;AAMA;;;;;MAQa,sBAAsB;;;;;;IAmB/B,YAAoB,WAA6B,EAAU,aAA+B,EAAU,GAAyB;QAAzG,gBAAW,GAAX,WAAW,CAAkB;QAAU,kBAAa,GAAb,aAAa,CAAkB;QAAU,QAAG,GAAH,GAAG,CAAsB;;;;;;;;QAVpH,OAAE,GAAY,IAAI,CAAC;;QAGnB,eAAU,GAAY,KAAK,CAAC;KAO6F;IAGlI,QAAQ;QACJ,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;;QAInD,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;;YAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KACnC;;oHA7BQ,sBAAsB;wGAAtB,sBAAsB;4FAAtB,sBAAsB;kBAHlC,SAAS;mBAAC;oBACP,QAAQ,EAAE,MAAM;iBACnB;iKAUY,EAAE;sBAAV,KAAK;gBAGG,UAAU;sBAAlB,KAAK;;;ACxBV;;;MAIa,gBAAgB;;8GAAhB,gBAAgB;kHAAhB,gBAAgB;4FAAhB,gBAAgB;kBAD5B,UAAU;;;ACLX;AAUA;;;;;MAQa,qBAAqB;;;;;;IAO9B,YAAY,OAAmB,EAAsB,OAAyB,EAAU,EAAwB,EAA6C,aAAqB;QAA7H,YAAO,GAAP,OAAO,CAAkB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAA6C,kBAAa,GAAb,aAAa,CAAQ;QAC9K,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC;QAErI,IAAI,CAAC,KAAK;YACN,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;KAC7D;;mHAZQ,qBAAqB,0HAOwG,aAAa;uGAP1I,qBAAqB;4FAArB,qBAAqB;kBAHjC,SAAS;mBAAC;oBACP,QAAQ,EAAE,gBAAgB;iBAC7B;;;8BAQqC,QAAQ;;8BAAyE,QAAQ;;8BAAI,MAAM;+BAAC,aAAa;;;;MCT1I,mBAAmB;IAC9B,OAAO,OAAO,CAAC,MAAkC;QAC/C,OAAO;YACL,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE;gBACT,oBAAoB;gBACpB,uBAAuB;gBACvB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,OAAO,EAAE;gBAC5D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,KAAI,IAAI,EAAE;gBAC/D,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB,KAAI,IAAI,EAAE;gBACrE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,+BAA+B,KAAI,IAAI,EAAE;aACxF;SACF,CAAC;KACH;;iHAbU,mBAAmB;kHAAnB,mBAAmB,iBAHf,sBAAsB,EAAE,qBAAqB,aADlD,kBAAkB,aAEnB,sBAAsB,EAAE,qBAAqB;kHAE3C,mBAAmB,YAJrB,CAAC,kBAAkB,CAAC;4FAIlB,mBAAmB;kBAL/B,QAAQ;mBAAC;oBACR,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,YAAY,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;oBAC7D,OAAO,EAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;iBACxD;;;ACfD;;;MAGa,yBAAyB;;;ACHtC;;;;ACAA;;;;;;"}
|
|
@@ -4,14 +4,14 @@ import { InjectionToken, Injectable, Optional, Inject, Directive, Input, NgModul
|
|
|
4
4
|
import * as i1 from '@esfaenza/extensions';
|
|
5
5
|
import * as i3 from '@angular/router';
|
|
6
6
|
|
|
7
|
-
/**
|
|
8
|
-
* Token che racchiude il locale scelto per l'applicazione
|
|
9
|
-
*/
|
|
7
|
+
/** Token che racchiude il locale scelto per l'applicazione */
|
|
10
8
|
const ACC_LOCALE = new InjectionToken('ACC_LOCALE');
|
|
11
|
-
/**
|
|
12
|
-
|
|
13
|
-
*/
|
|
14
|
-
const
|
|
9
|
+
/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */
|
|
10
|
+
const ACC_CUSTOMKEY = new InjectionToken('ACC_CUSTOMKEY');
|
|
11
|
+
/** Token che indica la condizione di default da aggiungere ai check utente */
|
|
12
|
+
const ACC_DEF_COND = new InjectionToken('ACC_DEF_COND');
|
|
13
|
+
/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */
|
|
14
|
+
const ACC_DEF_COND_OP = new InjectionToken('ACC_DEF_COND_OP');
|
|
15
15
|
|
|
16
16
|
// Angular
|
|
17
17
|
/**
|
|
@@ -19,7 +19,9 @@ const ACC_CUSTOMKEY = new InjectionToken('ACC_CUSTOMKEY');
|
|
|
19
19
|
*/
|
|
20
20
|
class AccessControlService {
|
|
21
21
|
/** @ignore */
|
|
22
|
-
constructor() {
|
|
22
|
+
constructor(ACC_DEF_COND, ACC_DEF_COND_OP) {
|
|
23
|
+
this.ACC_DEF_COND = ACC_DEF_COND;
|
|
24
|
+
this.ACC_DEF_COND_OP = ACC_DEF_COND_OP;
|
|
23
25
|
/**
|
|
24
26
|
* Indica se l'Identity è stata inizializzata
|
|
25
27
|
*/
|
|
@@ -48,6 +50,12 @@ class AccessControlService {
|
|
|
48
50
|
* @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom
|
|
49
51
|
*/
|
|
50
52
|
initializeCustomPermissions(customPermissions) {
|
|
53
|
+
for (let i = 0; i < customPermissions.length; i++) {
|
|
54
|
+
if (customPermissions[i].key.length > 1) {
|
|
55
|
+
console.error("[@esfaenza/access-control] Custom permission initialized with keys longer than a single characters. Ignoring EVERYTHING.");
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
}
|
|
51
59
|
this.taggedItemsCache = customPermissions;
|
|
52
60
|
this.InitializedCustom = true;
|
|
53
61
|
}
|
|
@@ -63,7 +71,7 @@ class AccessControlService {
|
|
|
63
71
|
*
|
|
64
72
|
* @ignore
|
|
65
73
|
*/
|
|
66
|
-
hasACExpression(expression) {
|
|
74
|
+
hasACExpression(expression, absolute = false) {
|
|
67
75
|
if (!this.Initialized)
|
|
68
76
|
console.error("Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service");
|
|
69
77
|
if (!expression)
|
|
@@ -72,7 +80,11 @@ class AccessControlService {
|
|
|
72
80
|
console.warn("Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default");
|
|
73
81
|
return true;
|
|
74
82
|
}
|
|
75
|
-
//
|
|
83
|
+
// Per le espressioni di visibilità "dirette" sulla X ignoro le condizioni di default perché sono condizioni fisiche piuttosto che logiche
|
|
84
|
+
// Significa che siamo o dentro o fuori da un iframe e questo ovviamente va a soprassedere eventuali condizioni logiche del tipo "sono Jace Admin"
|
|
85
|
+
if (this.ACC_DEF_COND && this.ACC_DEF_COND_OP && !absolute && expression != 'X:0' && expression != 'X:1')
|
|
86
|
+
expression = `(${expression}) ${this.ACC_DEF_COND_OP} ${this.ACC_DEF_COND}`;
|
|
87
|
+
// Espressione già valutata, non serve rivalutarla
|
|
76
88
|
if (this.cache[expression])
|
|
77
89
|
return this.cache[expression];
|
|
78
90
|
var RolesPermissionsRegexp = /.:[^|&()]+/g;
|
|
@@ -94,7 +106,7 @@ class AccessControlService {
|
|
|
94
106
|
return ret;
|
|
95
107
|
}
|
|
96
108
|
/**
|
|
97
|
-
* Utilizzato da hasACExpression
|
|
109
|
+
* Utilizzato da hasACExpression dentro eval
|
|
98
110
|
*
|
|
99
111
|
* @ignore
|
|
100
112
|
*/
|
|
@@ -106,7 +118,7 @@ class AccessControlService {
|
|
|
106
118
|
return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;
|
|
107
119
|
}
|
|
108
120
|
/**
|
|
109
|
-
* Utilizzato da hasACExpression
|
|
121
|
+
* Utilizzato da hasACExpression dentro eval
|
|
110
122
|
*
|
|
111
123
|
* @ignore
|
|
112
124
|
*/
|
|
@@ -118,7 +130,7 @@ class AccessControlService {
|
|
|
118
130
|
return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;
|
|
119
131
|
}
|
|
120
132
|
/**
|
|
121
|
-
* Utilizzato da hasACExpression
|
|
133
|
+
* Utilizzato da hasACExpression dentro eval
|
|
122
134
|
*
|
|
123
135
|
* @ignore
|
|
124
136
|
*/
|
|
@@ -134,15 +146,25 @@ class AccessControlService {
|
|
|
134
146
|
/**
|
|
135
147
|
* Entry point che controlla un'espressione identificante un permesso, ad esempio "P:visualizzazione" controlla che l'utente collegato abbia un permesso che si chiama "visualizzazione"
|
|
136
148
|
*/
|
|
137
|
-
has(expr) {
|
|
138
|
-
return this.hasACExpression(expr);
|
|
149
|
+
has(expr, absolute = false) {
|
|
150
|
+
return this.hasACExpression(expr, absolute);
|
|
139
151
|
}
|
|
140
152
|
}
|
|
141
|
-
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
|
|
153
|
+
AccessControlService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, deps: [{ token: ACC_DEF_COND, optional: true }, { token: ACC_DEF_COND_OP, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
|
|
142
154
|
AccessControlService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService });
|
|
143
155
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlService, decorators: [{
|
|
144
156
|
type: Injectable
|
|
145
|
-
}], ctorParameters: function () { return [
|
|
157
|
+
}], ctorParameters: function () { return [{ type: undefined, decorators: [{
|
|
158
|
+
type: Optional
|
|
159
|
+
}, {
|
|
160
|
+
type: Inject,
|
|
161
|
+
args: [ACC_DEF_COND]
|
|
162
|
+
}] }, { type: undefined, decorators: [{
|
|
163
|
+
type: Optional
|
|
164
|
+
}, {
|
|
165
|
+
type: Inject,
|
|
166
|
+
args: [ACC_DEF_COND_OP]
|
|
167
|
+
}] }]; } });
|
|
146
168
|
|
|
147
169
|
/**
|
|
148
170
|
* Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe
|
|
@@ -273,16 +295,19 @@ class AccessControlDirective {
|
|
|
273
295
|
this.templateRef = templateRef;
|
|
274
296
|
this.viewContainer = viewContainer;
|
|
275
297
|
this._ac = _ac;
|
|
298
|
+
/**
|
|
299
|
+
* Espressione da processare scritta come {Chiave}:{Valore}
|
|
300
|
+
*
|
|
301
|
+
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions.
|
|
302
|
+
*
|
|
303
|
+
* Nelle ultime versioni del template è anche presente di default la custom permission "X" che indica se l'applicaizone è Esterna o no
|
|
304
|
+
*/
|
|
305
|
+
this.ac = null;
|
|
306
|
+
/** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */
|
|
307
|
+
this.acAbsolute = false;
|
|
276
308
|
}
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
*
|
|
280
|
-
* @param {string} expression espressione da processare scritta come {Chiave}:{Valore}
|
|
281
|
-
*
|
|
282
|
-
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions
|
|
283
|
-
*/
|
|
284
|
-
set ac(expression) {
|
|
285
|
-
var allow = this._ac.has(expression);
|
|
309
|
+
ngOnInit() {
|
|
310
|
+
var allow = this._ac.has(this.ac, this.acAbsolute);
|
|
286
311
|
//Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template
|
|
287
312
|
if (allow)
|
|
288
313
|
this.viewContainer.createEmbeddedView(this.templateRef);
|
|
@@ -291,7 +316,7 @@ class AccessControlDirective {
|
|
|
291
316
|
}
|
|
292
317
|
}
|
|
293
318
|
AccessControlDirective.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, deps: [{ token: i0.TemplateRef }, { token: i0.ViewContainerRef }, { token: AccessControlService }], target: i0.ɵɵFactoryTarget.Directive });
|
|
294
|
-
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac" }, ngImport: i0 });
|
|
319
|
+
AccessControlDirective.ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "12.0.0", version: "13.3.11", type: AccessControlDirective, selector: "[ac]", inputs: { ac: "ac", acAbsolute: "acAbsolute" }, ngImport: i0 });
|
|
295
320
|
i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImport: i0, type: AccessControlDirective, decorators: [{
|
|
296
321
|
type: Directive,
|
|
297
322
|
args: [{
|
|
@@ -299,6 +324,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "13.3.11", ngImpo
|
|
|
299
324
|
}]
|
|
300
325
|
}], ctorParameters: function () { return [{ type: i0.TemplateRef }, { type: i0.ViewContainerRef }, { type: AccessControlService }]; }, propDecorators: { ac: [{
|
|
301
326
|
type: Input
|
|
327
|
+
}], acAbsolute: [{
|
|
328
|
+
type: Input
|
|
302
329
|
}] } });
|
|
303
330
|
|
|
304
331
|
/**
|
|
@@ -357,7 +384,9 @@ class AccessControlModule {
|
|
|
357
384
|
AccessControlService,
|
|
358
385
|
AccessControlRouteGuard,
|
|
359
386
|
{ provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },
|
|
360
|
-
{ provide: ACC_CUSTOMKEY, useValue: config?.customKey || null }
|
|
387
|
+
{ provide: ACC_CUSTOMKEY, useValue: config?.customKey || null },
|
|
388
|
+
{ provide: ACC_DEF_COND, useValue: config?.defaultCondition || null },
|
|
389
|
+
{ provide: ACC_DEF_COND_OP, useValue: config?.defaultConditionLogicalOperator || '||' }
|
|
361
390
|
]
|
|
362
391
|
};
|
|
363
392
|
}
|
|
@@ -388,5 +417,5 @@ class AccessControlModuleConfig {
|
|
|
388
417
|
* Generated bundle index. Do not edit.
|
|
389
418
|
*/
|
|
390
419
|
|
|
391
|
-
export { ACC_CUSTOMKEY, ACC_LOCALE, AccessControlDirective, AccessControlModule, AccessControlModuleConfig, AccessControlRouteGuard, AccessControlService, ComponentContext, ContextAwareDirective };
|
|
420
|
+
export { ACC_CUSTOMKEY, ACC_DEF_COND, ACC_DEF_COND_OP, ACC_LOCALE, AccessControlDirective, AccessControlModule, AccessControlModuleConfig, AccessControlRouteGuard, AccessControlService, ComponentContext, ContextAwareDirective };
|
|
392
421
|
//# sourceMappingURL=esfaenza-access-control.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"esfaenza-access-control.mjs","sources":["../../../projects/access-control/src/lib/tokens.ts","../../../projects/access-control/src/lib/access-control.service.ts","../../../projects/access-control/src/lib/AccessControlRouteGuard.ts","../../../projects/access-control/src/lib/access-control.directive.ts","../../../projects/access-control/src/lib/models/ComponentContext.ts","../../../projects/access-control/src/lib/context-aware.directive.ts","../../../projects/access-control/src/lib/access-control.module.ts","../../../projects/access-control/src/lib/models/AccessControlModuleConfig.ts","../../../projects/access-control/src/public-api.ts","../../../projects/access-control/src/esfaenza-access-control.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\n/**\r\n * Token che racchiude il locale scelto per l'applicazione\r\n */\r\nexport const ACC_LOCALE: InjectionToken<string> = new InjectionToken<string>('ACC_LOCALE');\r\n\r\n/**\r\n * Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext\r\n */\r\nexport const ACC_CUSTOMKEY: InjectionToken<string> = new InjectionToken<string>('ACC_CUSTOMKEY');","// Angular\r\nimport { Injectable } from \"@angular/core\";\r\n\r\n/**\r\n * Entrypoint di tutte le operazioni esposte dalla libreria access-control\r\n */\r\n@Injectable()\r\nexport class AccessControlService {\r\n\r\n /**\r\n * Indica se l'Identity è stata inizializzata\r\n */\r\n public Initialized: boolean = false;\r\n\r\n /**\r\n * Indica se sono state effettuate inizializzazioni di Custom Permissions\r\n */\r\n public InitializedCustom: boolean = false;\r\n\r\n /** @ignore */\r\n private cache: {} = {};\r\n\r\n /** @ignore */\r\n private taggedItemsCache: { key: string, items: string[] }[] = [];\r\n\r\n /**\r\n * Identity associata a quest'istanza del Servizio Access Control, utile se si vuole avere accesso a Ruoli e Permessi direttamente da qui, per qualsivoglia motivo\r\n */\r\n public Identity: { Roles: string[], Permissions: string[] };\r\n\r\n /** @ignore */\r\n constructor() { }\r\n\r\n /**\r\n * Inizializza l'Identity del servizio con il modello specificato\r\n * \r\n * @params {{ Roles: string[], Permissions: string[] }} identity Identità applicativa con ruoli e permessi\r\n */\r\n public initializeIdentity(identity: { Roles: string[], Permissions: string[] }) {\r\n this.Identity = identity;\r\n this.Initialized = true;\r\n }\r\n\r\n /**\r\n * Inizializza i permessi Custom del servizio con il modello specificato\r\n * \r\n * @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom\r\n */\r\n public initializeCustomPermissions(customPermissions: { key: string, items: string[] }[]) {\r\n this.taggedItemsCache = customPermissions;\r\n this.InitializedCustom = true;\r\n }\r\n\r\n /**\r\n * Indica se nella sessione attuale esiste un utente loggato. Fa un semplice controllo di presenza sull'Identity\r\n */\r\n public isLoggedIn() {\r\n return !!this.Identity;\r\n }\r\n\r\n /**\r\n * Expression è scritta tipo --> R:Role1 && P:Permission1 || (R:Role2 && P:Permission1)\r\n * Quindi piuttosto che implementarsi un parser della madonna in stile Alessandro prendo la strada stronza e veloce con l'eval :P\r\n * \r\n * @ignore\r\n */\r\n private hasACExpression(expression: string): boolean {\r\n if (!this.Initialized)\r\n console.error(\"Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service\");\r\n\r\n if (!expression)\r\n return true;\r\n\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n\r\n //Espressione già valutata, non serve rivalutarla\r\n if (this.cache[expression])\r\n return this.cache[expression];\r\n\r\n var RolesPermissionsRegexp = /.:[^|&()]+/g;\r\n\r\n var matches = expression.match(RolesPermissionsRegexp);\r\n \r\n if (!matches)\r\n throw \"Espressione Access Control non valida: \" + expression + \". Assicurarsi che sia scritta in modo corretto\";\r\n\r\n matches.forEach(t => {\r\n var splits = t.split(':');\r\n if (splits[0] == \"R\")\r\n expression = expression.replace(t.trim(), \"this.hasRole('\" + splits[1].trim() + \"')\");\r\n else if (splits[0] == \"P\")\r\n expression = expression.replace(t.trim(), \"this.hasPermission('\" + splits[1].trim() + \"')\");\r\n else\r\n expression = expression.replace(t.trim(), \"this.hasCustom('\" + splits[1].trim() + \"', '\" + splits[0].trim() + \"')\");\r\n });\r\n\r\n var ret = <boolean>eval(expression);\r\n // Cache valore\r\n this.cache[expression] = ret;\r\n return ret;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasRole(role: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasPermission(permission: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression\r\n * \r\n * @ignore\r\n */\r\n private hasCustom(value: string, tag: string): boolean {\r\n var items = this.taggedItemsCache.find(t => t.key == tag)?.items;\r\n if (!items)\r\n return true;\r\n else if (items.length == 0)\r\n return false;\r\n else\r\n return !!items.find(t => t == value);\r\n }\r\n\r\n /**\r\n * Entry point che controlla un'espressione identificante un permesso, ad esempio \"P:visualizzazione\" controlla che l'utente collegato abbia un permesso che si chiama \"visualizzazione\"\r\n */\r\n public has(expr: string) {\r\n return this.hasACExpression(expr);\r\n }\r\n}","//Angular\r\nimport { ActivatedRouteSnapshot, CanActivateChild, RouterStateSnapshot } from \"@angular/router\";\r\nimport { Injectable, Optional, Inject } from \"@angular/core\";\r\nimport { Router } from \"@angular/router\";\r\n\r\n//Libs\r\nimport { LocalizationService } from \"@esfaenza/localizations\";\r\nimport { MessageService } from \"@esfaenza/extensions\";\r\n\r\n//Models\r\nimport { ACC_LOCALE } from \"./tokens\";\r\nimport { AccessControlService } from './access-control.service';\r\n\r\n/**\r\n * Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe\r\n * che la ereditavalorizzare la variabile Routes con le route permesse dal modulo e il permesso per cui si vuole riservare l'accesso. Ad esempio:\r\n * \r\n * ```typescript\r\n * @Injectable()\r\n * export class HasAuthGuardComponent extends BaseRouterGuard {\r\n * constructor(acc: AccessControlService, router: Router, ms: MessageService, ts: BaseTokenService) {\r\n * super(ms, acc, router, ts);\r\n * this.Routes = [\r\n * { route: \"page_route\", permission: \"P:perm_one\" },\r\n * { route: \"*\", permission: \"R:role_one\" }\r\n * ]\r\n * }\r\n * }\r\n * ```\r\n */\r\n@Injectable()\r\nexport class AccessControlRouteGuard implements CanActivateChild {\r\n /**\r\n * @ignore\r\n */\r\n private lc: LocalizationService;\r\n\r\n /**\r\n * Route di login che serve per reindirizzare alla pagina di login in caso di fallimento del controllo sui Permessi\r\n * \r\n * @default\r\n */\r\n protected LoginRoute : string = \"login\";\r\n\r\n /**\r\n * Permette di specificare delle Route sempre consentite, anche a livello di \"Radice\". Ad esempio la Root \"test\" permetterà\r\n * l'accesso a tutte le route che anche solo iniziano per \"test\"\r\n */\r\n protected AlwaysAllowedRoots: string[] = [];\r\n \r\n /**\r\n * Lista di Route con la loro espressione di controllo per valutare i permessi\r\n */\r\n protected Routes: { route: any; permission: string; }[] = [];\r\n\r\n /**\r\n * @ignore\r\n */\r\n constructor(private msgService : MessageService, private ac: AccessControlService, private router: Router, @Optional() @Inject(ACC_LOCALE) LOCALE: string) {\r\n this.lc = new LocalizationService(LOCALE ?? 'it-IT');\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n canActivateChild(route: ActivatedRouteSnapshot, _: RouterStateSnapshot): Promise<boolean> {\r\n var url = route.url.join('/');\r\n //Se l'applicazione non è pronta e non sto navigando nelle pagine consentite\r\n if (!this.ac.Initialized && !this.AlwaysAllowedRoots.find(r => url.indexOf(r) != -1))\r\n return Promise.resolve(false);\r\n \r\n var routeMatched: boolean = false;\r\n for (let i = 0; i < this.Routes.length; i++) {\r\n let r = this.Routes[i];\r\n //Se faccio match con la route significa che ho navigato in una delle route conosciute, altrimenti avverto ma lascio andare\r\n if (url.indexOf(r.route) != -1) {\r\n routeMatched = true;\r\n return this.handleMatch(url, r);\r\n }\r\n }\r\n //Se non faccio nessun match ma ho una route wildcard (*) prendo quella e controllo su quella\r\n if (!routeMatched) {\r\n var wildcardRoute = this.Routes.find(r => r.route == \"*\");\r\n if (wildcardRoute)\r\n return this.handleMatch(url, wildcardRoute);\r\n else\r\n console.log(\"Navigaizone avvenuta su route sconosciuta: \" + url);\r\n }\r\n return Promise.resolve(true);\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n private handleMatch(fromurl: string, r: any) {\r\n let identity = this.ac.Identity;\r\n\r\n if (this.ac.has(r.permission) ||\r\n (\r\n // Considero anche la possibilità di avere l'access control inizializzato ma che l'account scope non sia ancora presente\r\n // in questo caso suppongo sia un hard refresh e mi fido del fatto che l'utente possa entrarci\r\n // TODO: Fixare meglio concatenando una promise che va a prendere l'account scope se serve\r\n this.ac.Initialized &&\r\n (!identity.Roles || identity.Roles.length == 0) &&\r\n (!identity.Permissions || identity.Permissions.length == 0)\r\n ))\r\n return Promise.resolve(true);\r\n else {\r\n //Se sono nel sito originale (non ho aperto un newtab) blocco la navigazione\r\n //Se ho aperto una nuova tab invece rispedisco al login\r\n if (window.history.length > 2 && this.ac.isLoggedIn()) {\r\n this.msgService.simpleError(this.lc.loc(\"You don't have the required permissions to view this page. The navigation has been blocked\"));\r\n return Promise.resolve(false);\r\n }\r\n else {\r\n this.onRedirectInProgress();\r\n this.router.navigate([this.LoginRoute, { fromUrl: fromurl }]);\r\n }\r\n }\r\n }\r\n\r\n /**\r\n * Callback che viene eseguito prima che la Guard reindirizzi al login\r\n */\r\n protected onRedirectInProgress() {\r\n }\r\n}","// Angular\r\nimport { Directive, Input, TemplateRef, ViewContainerRef } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\n\r\n/**\r\n * Direttiva che permette di gestire il controllo accessi su componenti HTML. \r\n * \r\n * Per gli esempi di utilizzo fare riferimento al README.\r\n */\r\n@Directive({\r\n selector: '[ac]',\r\n})\r\nexport class AccessControlDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(private templateRef: TemplateRef<any>, private viewContainer: ViewContainerRef, private _ac: AccessControlService) { }\r\n\r\n /**\r\n * Input autoreferenziale per la direttiva\r\n * \r\n * @param {string} expression espressione da processare scritta come {Chiave}:{Valore}\r\n * \r\n * Le {Chiave} disponibili sono di default \"R\" per i ruoli e \"P\" per i permessi. È possibile espanderle con le Custom Permissions\r\n */\r\n @Input() set ac(expression: string) {\r\n var allow = this._ac.has(expression);\r\n\r\n //Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template\r\n\r\n if (allow) this.viewContainer.createEmbeddedView(this.templateRef);\r\n else this.viewContainer.clear();\r\n }\r\n}","import { Injectable } from '@angular/core';\r\n\r\n/**\r\n * Token da iniettare per ogni singolo componente per cui si vuole disattivare/attivare massivamente degli input in maniera contestuale\r\n */\r\n@Injectable()\r\nexport class ComponentContext{\r\n /**\r\n * Nome del Contesto assegnato al Componente\r\n */\r\n name : string;\r\n}","// Angular\r\nimport { Directive, ElementRef, Optional, Inject } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\nimport { ACC_CUSTOMKEY } from \"./tokens\"\r\n\r\n// Classi\r\nimport { ComponentContext } from \"./models/ComponentContext\";\r\n\r\n/**\r\n * Direttiva che permette di capire se l'elemento HTML su cui è utilizzata dev'essere disabilitato o no.\r\n * \r\n * Non ha effetto sugli elementi dichiarati in componenti che non dichiarano alcun ComponentContext\r\n */\r\n@Directive({\r\n selector: '[contextAware]',\r\n})\r\nexport class ContextAwareDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(element: ElementRef, @Optional() private context: ComponentContext, private ac: AccessControlService, @Optional() @Inject(ACC_CUSTOMKEY) private ACC_CUSTOMKEY: string) {\r\n var allow = !this.context || !this.context.name || !this.ACC_CUSTOMKEY || this.ac.has(this.ACC_CUSTOMKEY + \":\" + this.context.name,);\r\n\r\n if (!allow)\r\n element.nativeElement.setAttribute(\"enabled\", \"true\");\r\n }\r\n}","import { LocalizationModule } from '@esfaenza/localizations';\r\nimport { NgModule, ModuleWithProviders } from '@angular/core';\r\n\r\nimport { ACC_LOCALE, ACC_CUSTOMKEY} from './tokens';\r\n\r\nimport { AccessControlModuleConfig } from './models/AccessControlModuleConfig';\r\nimport { AccessControlService } from './access-control.service';\r\nimport { AccessControlRouteGuard } from './AccessControlRouteGuard';\r\nimport { AccessControlDirective } from './access-control.directive';\r\nimport { ContextAwareDirective } from './context-aware.directive';\r\n\r\n@NgModule({\r\n imports: [LocalizationModule],\r\n declarations: [AccessControlDirective, ContextAwareDirective],\r\n exports:[AccessControlDirective, ContextAwareDirective]\r\n})\r\nexport class AccessControlModule {\r\n static forRoot(config?: AccessControlModuleConfig): ModuleWithProviders<AccessControlModule> {\r\n return {\r\n ngModule: AccessControlModule,\r\n providers: [\r\n AccessControlService,\r\n AccessControlRouteGuard,\r\n { provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },\r\n { provide: ACC_CUSTOMKEY, useValue: config?.customKey || null }\r\n ]\r\n };\r\n }\r\n}","/**\r\n * Configurazione Modulo AccessControl. Se non fornita verrà generata automaticamente con locale 'it-IT'\r\n */\r\nexport class AccessControlModuleConfig {\r\n\r\n /**\r\n * locale dell'applicazione in forma standard, ad esempio \"it-IT\", \"en-US\", etc...\r\n * \r\n * Attualmente si supportano solo le lingue Italiano e Inglese\r\n */\r\n locale: string;\r\n\r\n /**\r\n * Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno\r\n */\r\n customKey: string;\r\n}","/*\r\n * Public API Surface of access-control\r\n */\r\n\r\nexport * from './lib/access-control.module';\r\nexport * from './lib/access-control.service';\r\nexport * from './lib/access-control.directive'\r\nexport * from './lib/context-aware.directive';\r\nexport * from \"./lib/models/AccessControlModuleConfig\";\r\nexport * from \"./lib/AccessControlRouteGuard\";\r\nexport * from \"./lib/tokens\";\r\nexport * from \"./lib/models/ComponentContext\";","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AAEA;;;MAGa,UAAU,GAA2B,IAAI,cAAc,CAAS,YAAY,EAAE;AAE3F;;;MAGa,aAAa,GAA2B,IAAI,cAAc,CAAS,eAAe;;ACV/F;AAGA;;;MAIa,oBAAoB;;IAwB/B;;;;QAnBO,gBAAW,GAAY,KAAK,CAAC;;;;QAK7B,sBAAiB,GAAY,KAAK,CAAC;;QAGlC,UAAK,GAAO,EAAE,CAAC;;QAGf,qBAAgB,GAAuC,EAAE,CAAC;KAQjD;;;;;;IAOV,kBAAkB,CAAC,QAAoD;QAC5E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;KACzB;;;;;;IAOM,2BAA2B,CAAC,iBAAqD;QACtF,IAAI,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;KAC/B;;;;IAKM,UAAU;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;KACxB;;;;;;;IAQO,eAAe,CAAC,UAAkB;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,OAAO,CAAC,KAAK,CAAC,uHAAuH,CAAC,CAAC;QAEzI,IAAI,CAAC,UAAU;YACb,OAAO,IAAI,CAAC;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;;QAGD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,IAAI,sBAAsB,GAAG,aAAa,CAAC;QAE3C,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO;YACV,MAAM,yCAAyC,GAAG,UAAU,GAAG,gDAAgD,CAAC;QAElH,OAAO,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBAClB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;iBACnF,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBACvB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;;gBAE5F,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;SACvH,CAAC,CAAC;QAEH,IAAI,GAAG,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;;QAEpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC;KACZ;;;;;;IAOO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACzG;;;;;;IAOO,aAAa,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACjI;;;;;;IAOO,SAAS,CAAC,KAAa,EAAE,GAAW;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC;QACjE,IAAI,CAAC,KAAK;YACR,OAAO,IAAI,CAAC;aACT,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC;;YAEb,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;KACxC;;;;IAKM,GAAG,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;KACnC;;kHAhJU,oBAAoB;sHAApB,oBAAoB;4FAApB,oBAAoB;kBADhC,UAAU;;;ACOX;;;;;;;;;;;;;;;;;MAkBa,uBAAuB;;;;IA2BhC,YAAoB,UAA2B,EAAU,EAAwB,EAAU,MAAc,EAAkC,MAAc;QAArI,eAAU,GAAV,UAAU,CAAiB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAAU,WAAM,GAAN,MAAM,CAAQ;;;;;;QAhB/F,eAAU,GAAY,OAAO,CAAC;;;;;QAM9B,uBAAkB,GAAa,EAAE,CAAC;;;;QAKlC,WAAM,GAA0C,EAAE,CAAC;QAMzD,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;KACxD;;;;IAKD,gBAAgB,CAAC,KAA6B,EAAE,CAAsB;QAClE,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;QAE9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,YAAY,GAAY,KAAK,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;;YAEvB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC5B,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACnC;SACJ;;QAED,IAAI,CAAC,YAAY,EAAE;YACf,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;YAC1D,IAAI,aAAa;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;;gBAE5C,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,GAAG,CAAC,CAAC;SACxE;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;;;;IAKO,WAAW,CAAC,OAAe,EAAE,CAAM;QACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;QAEhC,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;;;;;YAKrB,IAAI,CAAC,EAAE,CAAC,WAAW;iBAClB,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;iBAC9C,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9D;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC5B;;;YAGD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;gBACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC,CAAC;gBACvI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aACjC;iBACI;gBACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aACjE;SACJ;KACJ;;;;IAKS,oBAAoB;KAC7B;;qHA9FQ,uBAAuB,uGA2B+F,UAAU;yHA3BhI,uBAAuB;4FAAvB,uBAAuB;kBADnC,UAAU;;0BA4BqG,QAAQ;;0BAAI,MAAM;2BAAC,UAAU;;;AC1D7I;AAMA;;;;;MAQa,sBAAsB;;;;;;IAO/B,YAAoB,WAA6B,EAAU,aAA+B,EAAU,GAAyB;QAAzG,gBAAW,GAAX,WAAW,CAAkB;QAAU,kBAAa,GAAb,aAAa,CAAkB;QAAU,QAAG,GAAH,GAAG,CAAsB;KAAK;;;;;;;;IASlI,IAAa,EAAE,CAAC,UAAkB;QAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;;QAIrC,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;;YAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KACnC;;oHAvBQ,sBAAsB;wGAAtB,sBAAsB;4FAAtB,sBAAsB;kBAHlC,SAAS;mBAAC;oBACP,QAAQ,EAAE,MAAM;iBACnB;iKAiBgB,EAAE;sBAAd,KAAK;;;AC5BV;;;MAIa,gBAAgB;;8GAAhB,gBAAgB;kHAAhB,gBAAgB;4FAAhB,gBAAgB;kBAD5B,UAAU;;;ACLX;AAUA;;;;;MAQa,qBAAqB;;;;;;IAO9B,YAAY,OAAmB,EAAsB,OAAyB,EAAU,EAAwB,EAA6C,aAAqB;QAA7H,YAAO,GAAP,OAAO,CAAkB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAA6C,kBAAa,GAAb,aAAa,CAAQ;QAC9K,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC;QAErI,IAAI,CAAC,KAAK;YACN,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;KAC7D;;mHAZQ,qBAAqB,0HAOwG,aAAa;uGAP1I,qBAAqB;4FAArB,qBAAqB;kBAHjC,SAAS;mBAAC;oBACP,QAAQ,EAAE,gBAAgB;iBAC7B;;0BAQqC,QAAQ;;0BAAyE,QAAQ;;0BAAI,MAAM;2BAAC,aAAa;;;MCT1I,mBAAmB;IAC9B,OAAO,OAAO,CAAC,MAAkC;QAC/C,OAAO;YACL,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE;gBACT,oBAAoB;gBACpB,uBAAuB;gBACvB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,EAAE;gBAC5D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE;aAChE;SACF,CAAC;KACH;;iHAXU,mBAAmB;kHAAnB,mBAAmB,iBAHf,sBAAsB,EAAE,qBAAqB,aADlD,kBAAkB,aAEnB,sBAAsB,EAAE,qBAAqB;kHAE3C,mBAAmB,YAJrB,CAAC,kBAAkB,CAAC;4FAIlB,mBAAmB;kBAL/B,QAAQ;mBAAC;oBACR,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,YAAY,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;oBAC7D,OAAO,EAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;iBACxD;;;ACfD;;;MAGa,yBAAyB;;;ACHtC;;;;ACAA;;;;;;"}
|
|
1
|
+
{"version":3,"file":"esfaenza-access-control.mjs","sources":["../../../projects/access-control/src/lib/tokens.ts","../../../projects/access-control/src/lib/access-control.service.ts","../../../projects/access-control/src/lib/AccessControlRouteGuard.ts","../../../projects/access-control/src/lib/access-control.directive.ts","../../../projects/access-control/src/lib/models/ComponentContext.ts","../../../projects/access-control/src/lib/context-aware.directive.ts","../../../projects/access-control/src/lib/access-control.module.ts","../../../projects/access-control/src/lib/models/AccessControlModuleConfig.ts","../../../projects/access-control/src/public-api.ts","../../../projects/access-control/src/esfaenza-access-control.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\n/** Token che racchiude il locale scelto per l'applicazione */\r\nexport const ACC_LOCALE: InjectionToken<string> = new InjectionToken<string>('ACC_LOCALE');\r\n\r\n/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */\r\nexport const ACC_CUSTOMKEY: InjectionToken<string> = new InjectionToken<string>('ACC_CUSTOMKEY');\r\n\r\n/** Token che indica la condizione di default da aggiungere ai check utente */\r\nexport const ACC_DEF_COND: InjectionToken<string> = new InjectionToken<string>('ACC_DEF_COND');\r\n\r\n/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */\r\nexport const ACC_DEF_COND_OP: InjectionToken<string> = new InjectionToken<string>('ACC_DEF_COND_OP');","// Angular\r\nimport { Inject, Injectable, Optional } from \"@angular/core\";\r\nimport { ACC_DEF_COND, ACC_DEF_COND_OP } from \"./tokens\";\r\n\r\n/**\r\n * Entrypoint di tutte le operazioni esposte dalla libreria access-control\r\n */\r\n@Injectable()\r\nexport class AccessControlService {\r\n\r\n /**\r\n * Indica se l'Identity è stata inizializzata\r\n */\r\n public Initialized: boolean = false;\r\n\r\n /**\r\n * Indica se sono state effettuate inizializzazioni di Custom Permissions\r\n */\r\n public InitializedCustom: boolean = false;\r\n\r\n /** @ignore */\r\n private cache: {} = {};\r\n\r\n /** @ignore */\r\n private taggedItemsCache: { key: string, items: string[] }[] = [];\r\n\r\n /**\r\n * Identity associata a quest'istanza del Servizio Access Control, utile se si vuole avere accesso a Ruoli e Permessi direttamente da qui, per qualsivoglia motivo\r\n */\r\n public Identity: { Roles: string[], Permissions: string[] };\r\n\r\n /** @ignore */\r\n constructor(@Optional() @Inject(ACC_DEF_COND) private ACC_DEF_COND: string, @Optional() @Inject(ACC_DEF_COND_OP) private ACC_DEF_COND_OP: string,) { }\r\n\r\n /**\r\n * Inizializza l'Identity del servizio con il modello specificato\r\n * \r\n * @params {{ Roles: string[], Permissions: string[] }} identity Identità applicativa con ruoli e permessi\r\n */\r\n public initializeIdentity(identity: { Roles: string[], Permissions: string[] }) {\r\n this.Identity = identity;\r\n this.Initialized = true;\r\n }\r\n\r\n /**\r\n * Inizializza i permessi Custom del servizio con il modello specificato\r\n * \r\n * @param {{ key: string, items: string[] }[]} customPermissions Permessi Custom\r\n */\r\n public initializeCustomPermissions(customPermissions: { key: string, items: string[] }[]) {\r\n for (let i = 0; i < customPermissions.length; i++) {\r\n if (customPermissions[i].key.length > 1) {\r\n console.error(\"[@esfaenza/access-control] Custom permission initialized with keys longer than a single characters. Ignoring EVERYTHING.\");\r\n return;\r\n }\r\n }\r\n\r\n this.taggedItemsCache = customPermissions;\r\n this.InitializedCustom = true;\r\n }\r\n\r\n /**\r\n * Indica se nella sessione attuale esiste un utente loggato. Fa un semplice controllo di presenza sull'Identity\r\n */\r\n public isLoggedIn() {\r\n return !!this.Identity;\r\n }\r\n\r\n /**\r\n * Expression è scritta tipo --> R:Role1 && P:Permission1 || (R:Role2 && P:Permission1)\r\n * Quindi piuttosto che implementarsi un parser della madonna in stile Alessandro prendo la strada stronza e veloce con l'eval :P\r\n * \r\n * @ignore\r\n */\r\n private hasACExpression(expression: string, absolute: boolean = false): boolean {\r\n if (!this.Initialized)\r\n console.error(\"Access Control System has not been initialized. Call this.accessControl.initialize(..., ...) before using the service\");\r\n\r\n if (!expression)\r\n return true;\r\n\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n\r\n // Per le espressioni di visibilità \"dirette\" sulla X ignoro le condizioni di default perché sono condizioni fisiche piuttosto che logiche\r\n // Significa che siamo o dentro o fuori da un iframe e questo ovviamente va a soprassedere eventuali condizioni logiche del tipo \"sono Jace Admin\"\r\n if(this.ACC_DEF_COND && this.ACC_DEF_COND_OP && !absolute && expression != 'X:0' && expression != 'X:1')\r\n expression = `(${expression}) ${this.ACC_DEF_COND_OP} ${this.ACC_DEF_COND}`;\r\n \r\n // Espressione già valutata, non serve rivalutarla\r\n if (this.cache[expression])\r\n return this.cache[expression];\r\n\r\n var RolesPermissionsRegexp = /.:[^|&()]+/g;\r\n\r\n var matches = expression.match(RolesPermissionsRegexp);\r\n \r\n if (!matches)\r\n throw \"Espressione Access Control non valida: \" + expression + \". Assicurarsi che sia scritta in modo corretto\";\r\n\r\n matches.forEach(t => {\r\n var splits = t.split(':');\r\n if (splits[0] == \"R\")\r\n expression = expression.replace(t.trim(), \"this.hasRole('\" + splits[1].trim() + \"')\");\r\n else if (splits[0] == \"P\")\r\n expression = expression.replace(t.trim(), \"this.hasPermission('\" + splits[1].trim() + \"')\");\r\n else\r\n expression = expression.replace(t.trim(), \"this.hasCustom('\" + splits[1].trim() + \"', '\" + splits[0].trim() + \"')\");\r\n });\r\n\r\n var ret = <boolean>eval(expression);\r\n // Cache valore\r\n this.cache[expression] = ret;\r\n return ret;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasRole(role: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Roles && this.Identity.Roles.length > 0 && this.Identity.Roles.indexOf(role) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasPermission(permission: string): boolean {\r\n if (!this.Identity) {\r\n console.warn(\"Elemento Identity non specificato in Access Control. Gli accessi saranno tutti liberi di default\")\r\n return true;\r\n }\r\n return this.Identity.Permissions && this.Identity.Permissions.length > 0 && this.Identity.Permissions.indexOf(permission) != -1;\r\n }\r\n\r\n /**\r\n * Utilizzato da hasACExpression dentro eval\r\n * \r\n * @ignore\r\n */\r\n private hasCustom(value: string, tag: string): boolean {\r\n var items = this.taggedItemsCache.find(t => t.key == tag)?.items;\r\n if (!items)\r\n return true;\r\n else if (items.length == 0)\r\n return false;\r\n else\r\n return !!items.find(t => t == value);\r\n }\r\n\r\n /**\r\n * Entry point che controlla un'espressione identificante un permesso, ad esempio \"P:visualizzazione\" controlla che l'utente collegato abbia un permesso che si chiama \"visualizzazione\"\r\n */\r\n public has(expr: string, absolute: boolean = false) {\r\n return this.hasACExpression(expr, absolute);\r\n }\r\n}","//Angular\r\nimport { ActivatedRouteSnapshot, CanActivateChild, RouterStateSnapshot } from \"@angular/router\";\r\nimport { Injectable, Optional, Inject } from \"@angular/core\";\r\nimport { Router } from \"@angular/router\";\r\n\r\n//Libs\r\nimport { LocalizationService } from \"@esfaenza/localizations\";\r\nimport { MessageService } from \"@esfaenza/extensions\";\r\n\r\n//Models\r\nimport { ACC_LOCALE } from \"./tokens\";\r\nimport { AccessControlService } from './access-control.service';\r\n\r\n/**\r\n * Router Guard base per proteggere l'accesso alle route dell'applicazione. Per utilizzarla è sufficiente ereditarla e, nel costruttore della classe\r\n * che la ereditavalorizzare la variabile Routes con le route permesse dal modulo e il permesso per cui si vuole riservare l'accesso. Ad esempio:\r\n * \r\n * ```typescript\r\n * @Injectable()\r\n * export class HasAuthGuardComponent extends BaseRouterGuard {\r\n * constructor(acc: AccessControlService, router: Router, ms: MessageService, ts: BaseTokenService) {\r\n * super(ms, acc, router, ts);\r\n * this.Routes = [\r\n * { route: \"page_route\", permission: \"P:perm_one\" },\r\n * { route: \"*\", permission: \"R:role_one\" }\r\n * ]\r\n * }\r\n * }\r\n * ```\r\n */\r\n@Injectable()\r\nexport class AccessControlRouteGuard implements CanActivateChild {\r\n /**\r\n * @ignore\r\n */\r\n private lc: LocalizationService;\r\n\r\n /**\r\n * Route di login che serve per reindirizzare alla pagina di login in caso di fallimento del controllo sui Permessi\r\n * \r\n * @default\r\n */\r\n protected LoginRoute : string = \"login\";\r\n\r\n /**\r\n * Permette di specificare delle Route sempre consentite, anche a livello di \"Radice\". Ad esempio la Root \"test\" permetterà\r\n * l'accesso a tutte le route che anche solo iniziano per \"test\"\r\n */\r\n protected AlwaysAllowedRoots: string[] = [];\r\n \r\n /**\r\n * Lista di Route con la loro espressione di controllo per valutare i permessi\r\n */\r\n protected Routes: { route: any; permission: string; }[] = [];\r\n\r\n /**\r\n * @ignore\r\n */\r\n constructor(private msgService : MessageService, private ac: AccessControlService, private router: Router, @Optional() @Inject(ACC_LOCALE) LOCALE: string) {\r\n this.lc = new LocalizationService(LOCALE ?? 'it-IT');\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n canActivateChild(route: ActivatedRouteSnapshot, _: RouterStateSnapshot): Promise<boolean> {\r\n var url = route.url.join('/');\r\n //Se l'applicazione non è pronta e non sto navigando nelle pagine consentite\r\n if (!this.ac.Initialized && !this.AlwaysAllowedRoots.find(r => url.indexOf(r) != -1))\r\n return Promise.resolve(false);\r\n \r\n var routeMatched: boolean = false;\r\n for (let i = 0; i < this.Routes.length; i++) {\r\n let r = this.Routes[i];\r\n //Se faccio match con la route significa che ho navigato in una delle route conosciute, altrimenti avverto ma lascio andare\r\n if (url.indexOf(r.route) != -1) {\r\n routeMatched = true;\r\n return this.handleMatch(url, r);\r\n }\r\n }\r\n //Se non faccio nessun match ma ho una route wildcard (*) prendo quella e controllo su quella\r\n if (!routeMatched) {\r\n var wildcardRoute = this.Routes.find(r => r.route == \"*\");\r\n if (wildcardRoute)\r\n return this.handleMatch(url, wildcardRoute);\r\n else\r\n console.log(\"Navigaizone avvenuta su route sconosciuta: \" + url);\r\n }\r\n return Promise.resolve(true);\r\n }\r\n\r\n /**\r\n * @ignore\r\n */\r\n private handleMatch(fromurl: string, r: any) {\r\n let identity = this.ac.Identity;\r\n\r\n if (this.ac.has(r.permission) ||\r\n (\r\n // Considero anche la possibilità di avere l'access control inizializzato ma che l'account scope non sia ancora presente\r\n // in questo caso suppongo sia un hard refresh e mi fido del fatto che l'utente possa entrarci\r\n // TODO: Fixare meglio concatenando una promise che va a prendere l'account scope se serve\r\n this.ac.Initialized &&\r\n (!identity.Roles || identity.Roles.length == 0) &&\r\n (!identity.Permissions || identity.Permissions.length == 0)\r\n ))\r\n return Promise.resolve(true);\r\n else {\r\n //Se sono nel sito originale (non ho aperto un newtab) blocco la navigazione\r\n //Se ho aperto una nuova tab invece rispedisco al login\r\n if (window.history.length > 2 && this.ac.isLoggedIn()) {\r\n this.msgService.simpleError(this.lc.loc(\"You don't have the required permissions to view this page. The navigation has been blocked\"));\r\n return Promise.resolve(false);\r\n }\r\n else {\r\n this.onRedirectInProgress();\r\n this.router.navigate([this.LoginRoute, { fromUrl: fromurl }]);\r\n }\r\n }\r\n }\r\n\r\n /**\r\n * Callback che viene eseguito prima che la Guard reindirizzi al login\r\n */\r\n protected onRedirectInProgress() {\r\n }\r\n}","// Angular\r\nimport { Directive, Input, TemplateRef, ViewContainerRef } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\n\r\n/**\r\n * Direttiva che permette di gestire il controllo accessi su componenti HTML. \r\n * \r\n * Per gli esempi di utilizzo fare riferimento al README.\r\n */\r\n@Directive({\r\n selector: '[ac]',\r\n})\r\nexport class AccessControlDirective {\r\n \r\n /** \r\n * Espressione da processare scritta come {Chiave}:{Valore}\r\n * \r\n * Le {Chiave} disponibili sono di default \"R\" per i ruoli e \"P\" per i permessi. È possibile espanderle con le Custom Permissions.\r\n * \r\n * Nelle ultime versioni del template è anche presente di default la custom permission \"X\" che indica se l'applicaizone è Esterna o no\r\n */\r\n @Input() ac : string = null;\r\n\r\n /** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */\r\n @Input() acAbsolute: boolean = false;\r\n\r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(private templateRef: TemplateRef<any>, private viewContainer: ViewContainerRef, private _ac: AccessControlService) { }\r\n\r\n\r\n ngOnInit(){\r\n var allow = this._ac.has(this.ac, this.acAbsolute);\r\n\r\n //Se ho i permessi, proseguo creando la vista nel DOM, altrimenti rimuovo il template\r\n\r\n if (allow) this.viewContainer.createEmbeddedView(this.templateRef);\r\n else this.viewContainer.clear();\r\n }\r\n\r\n}","import { Injectable } from '@angular/core';\r\n\r\n/**\r\n * Token da iniettare per ogni singolo componente per cui si vuole disattivare/attivare massivamente degli input in maniera contestuale\r\n */\r\n@Injectable()\r\nexport class ComponentContext{\r\n /**\r\n * Nome del Contesto assegnato al Componente\r\n */\r\n name : string;\r\n}","// Angular\r\nimport { Directive, ElementRef, Optional, Inject } from \"@angular/core\";\r\n\r\n// Configurazioni\r\nimport { AccessControlService } from \"./access-control.service\";\r\nimport { ACC_CUSTOMKEY } from \"./tokens\"\r\n\r\n// Classi\r\nimport { ComponentContext } from \"./models/ComponentContext\";\r\n\r\n/**\r\n * Direttiva che permette di capire se l'elemento HTML su cui è utilizzata dev'essere disabilitato o no.\r\n * \r\n * Non ha effetto sugli elementi dichiarati in componenti che non dichiarano alcun ComponentContext\r\n */\r\n@Directive({\r\n selector: '[contextAware]',\r\n})\r\nexport class ContextAwareDirective {\r\n \r\n /**\r\n * Costruttore \r\n * \r\n * @ignore\r\n */\r\n constructor(element: ElementRef, @Optional() private context: ComponentContext, private ac: AccessControlService, @Optional() @Inject(ACC_CUSTOMKEY) private ACC_CUSTOMKEY: string) {\r\n var allow = !this.context || !this.context.name || !this.ACC_CUSTOMKEY || this.ac.has(this.ACC_CUSTOMKEY + \":\" + this.context.name,);\r\n\r\n if (!allow)\r\n element.nativeElement.setAttribute(\"enabled\", \"true\");\r\n }\r\n}","import { LocalizationModule } from '@esfaenza/localizations';\r\nimport { NgModule, ModuleWithProviders } from '@angular/core';\r\n\r\nimport { ACC_LOCALE, ACC_CUSTOMKEY, ACC_DEF_COND, ACC_DEF_COND_OP } from './tokens';\r\n\r\nimport { AccessControlModuleConfig } from './models/AccessControlModuleConfig';\r\nimport { AccessControlService } from './access-control.service';\r\nimport { AccessControlRouteGuard } from './AccessControlRouteGuard';\r\nimport { AccessControlDirective } from './access-control.directive';\r\nimport { ContextAwareDirective } from './context-aware.directive';\r\n\r\n@NgModule({\r\n imports: [LocalizationModule],\r\n declarations: [AccessControlDirective, ContextAwareDirective],\r\n exports:[AccessControlDirective, ContextAwareDirective]\r\n})\r\nexport class AccessControlModule {\r\n static forRoot(config?: AccessControlModuleConfig): ModuleWithProviders<AccessControlModule> {\r\n return {\r\n ngModule: AccessControlModule,\r\n providers: [\r\n AccessControlService,\r\n AccessControlRouteGuard,\r\n { provide: ACC_LOCALE, useValue: config?.locale || 'it-IT' },\r\n { provide: ACC_CUSTOMKEY, useValue: config?.customKey || null },\r\n { provide: ACC_DEF_COND, useValue: config?.defaultCondition || null },\r\n { provide: ACC_DEF_COND_OP, useValue: config?.defaultConditionLogicalOperator || '||' }\r\n ]\r\n };\r\n }\r\n}","/**\r\n * Configurazione Modulo AccessControl. Se non fornita verrà generata automaticamente con locale 'it-IT'\r\n */\r\nexport class AccessControlModuleConfig {\r\n\r\n /**\r\n * locale dell'applicazione in forma standard, ad esempio \"it-IT\", \"en-US\", etc...\r\n * \r\n * Attualmente si supportano solo le lingue Italiano e Inglese\r\n */\r\n locale: string;\r\n\r\n /** Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno */\r\n customKey: string;\r\n\r\n /** Condizione di default da aggiungere a ogni condizione utente. Es: 'R:Jace Admin' */\r\n defaultCondition?: string;\r\n\r\n /** Relazione logica fra la condizione di default e la condizione utente. Es: '||'. Di default viene utilizzato l'OR logico */\r\n defaultConditionLogicalOperator?: string;\r\n}","/*\r\n * Public API Surface of access-control\r\n */\r\n\r\nexport * from './lib/access-control.module';\r\nexport * from './lib/access-control.service';\r\nexport * from './lib/access-control.directive'\r\nexport * from './lib/context-aware.directive';\r\nexport * from \"./lib/models/AccessControlModuleConfig\";\r\nexport * from \"./lib/AccessControlRouteGuard\";\r\nexport * from \"./lib/tokens\";\r\nexport * from \"./lib/models/ComponentContext\";","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AAEA;MACa,UAAU,GAA2B,IAAI,cAAc,CAAS,YAAY,EAAE;AAE3F;MACa,aAAa,GAA2B,IAAI,cAAc,CAAS,eAAe,EAAE;AAEjG;MACa,YAAY,GAA2B,IAAI,cAAc,CAAS,cAAc,EAAE;AAE/F;MACa,eAAe,GAA2B,IAAI,cAAc,CAAS,iBAAiB;;ACZnG;AAIA;;;MAIa,oBAAoB;;IAwB/B,YAAsD,YAAoB,EAA+C,eAAuB;QAA1F,iBAAY,GAAZ,YAAY,CAAQ;QAA+C,oBAAe,GAAf,eAAe,CAAQ;;;;QAnBzI,gBAAW,GAAY,KAAK,CAAC;;;;QAK7B,sBAAiB,GAAY,KAAK,CAAC;;QAGlC,UAAK,GAAO,EAAE,CAAC;;QAGf,qBAAgB,GAAuC,EAAE,CAAC;KAQoF;;;;;;IAO/I,kBAAkB,CAAC,QAAoD;QAC5E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;KACzB;;;;;;IAOM,2BAA2B,CAAC,iBAAqD;QACtF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACjD,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;gBACvC,OAAO,CAAC,KAAK,CAAC,0HAA0H,CAAC,CAAC;gBAC1I,OAAO;aACR;SACF;QAED,IAAI,CAAC,gBAAgB,GAAG,iBAAiB,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;KAC/B;;;;IAKM,UAAU;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;KACxB;;;;;;;IAQO,eAAe,CAAC,UAAkB,EAAE,WAAoB,KAAK;QACnE,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,OAAO,CAAC,KAAK,CAAC,uHAAuH,CAAC,CAAC;QAEzI,IAAI,CAAC,UAAU;YACb,OAAO,IAAI,CAAC;QAEd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;;;QAID,IAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK;YACrG,UAAU,GAAG,IAAI,UAAU,KAAK,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;;QAG9E,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,IAAI,sBAAsB,GAAG,aAAa,CAAC;QAE3C,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO;YACV,MAAM,yCAAyC,GAAG,UAAU,GAAG,gDAAgD,CAAC;QAElH,OAAO,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBAClB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;iBACnF,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;gBACvB,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;;gBAE5F,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;SACvH,CAAC,CAAC;QAEH,IAAI,GAAG,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;;QAEpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAC7B,OAAO,GAAG,CAAC;KACZ;;;;;;IAOO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACzG;;;;;;IAOO,aAAa,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAClB,OAAO,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC;SACb;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACjI;;;;;;IAOO,SAAS,CAAC,KAAa,EAAE,GAAW;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC;QACjE,IAAI,CAAC,KAAK;YACR,OAAO,IAAI,CAAC;aACT,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC;;YAEb,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;KACxC;;;;IAKM,GAAG,CAAC,IAAY,EAAE,WAAoB,KAAK;QAChD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;KAC7C;;kHA5JU,oBAAoB,kBAwBC,YAAY,6BAAoD,eAAe;sHAxBpG,oBAAoB;4FAApB,oBAAoB;kBADhC,UAAU;;0BAyBI,QAAQ;;0BAAI,MAAM;2BAAC,YAAY;;0BAAiC,QAAQ;;0BAAI,MAAM;2BAAC,eAAe;;;ACnBjH;;;;;;;;;;;;;;;;;MAkBa,uBAAuB;;;;IA2BhC,YAAoB,UAA2B,EAAU,EAAwB,EAAU,MAAc,EAAkC,MAAc;QAArI,eAAU,GAAV,UAAU,CAAiB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAAU,WAAM,GAAN,MAAM,CAAQ;;;;;;QAhB/F,eAAU,GAAY,OAAO,CAAC;;;;;QAM9B,uBAAkB,GAAa,EAAE,CAAC;;;;QAKlC,WAAM,GAA0C,EAAE,CAAC;QAMzD,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;KACxD;;;;IAKD,gBAAgB,CAAC,KAA6B,EAAE,CAAsB;QAClE,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;QAE9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,YAAY,GAAY,KAAK,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;;YAEvB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC5B,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACnC;SACJ;;QAED,IAAI,CAAC,YAAY,EAAE;YACf,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;YAC1D,IAAI,aAAa;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;;gBAE5C,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,GAAG,CAAC,CAAC;SACxE;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;;;;IAKO,WAAW,CAAC,OAAe,EAAE,CAAM;QACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;QAEhC,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;;;;;YAKrB,IAAI,CAAC,EAAE,CAAC,WAAW;iBAClB,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;iBAC9C,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9D;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC5B;;;YAGD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;gBACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC,CAAC;gBACvI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aACjC;iBACI;gBACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aACjE;SACJ;KACJ;;;;IAKS,oBAAoB;KAC7B;;qHA9FQ,uBAAuB,uGA2B+F,UAAU;yHA3BhI,uBAAuB;4FAAvB,uBAAuB;kBADnC,UAAU;;0BA4BqG,QAAQ;;0BAAI,MAAM;2BAAC,UAAU;;;AC1D7I;AAMA;;;;;MAQa,sBAAsB;;;;;;IAmB/B,YAAoB,WAA6B,EAAU,aAA+B,EAAU,GAAyB;QAAzG,gBAAW,GAAX,WAAW,CAAkB;QAAU,kBAAa,GAAb,aAAa,CAAkB;QAAU,QAAG,GAAH,GAAG,CAAsB;;;;;;;;QAVpH,OAAE,GAAY,IAAI,CAAC;;QAGnB,eAAU,GAAY,KAAK,CAAC;KAO6F;IAGlI,QAAQ;QACJ,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;;QAInD,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;;YAC9D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KACnC;;oHA7BQ,sBAAsB;wGAAtB,sBAAsB;4FAAtB,sBAAsB;kBAHlC,SAAS;mBAAC;oBACP,QAAQ,EAAE,MAAM;iBACnB;iKAUY,EAAE;sBAAV,KAAK;gBAGG,UAAU;sBAAlB,KAAK;;;ACxBV;;;MAIa,gBAAgB;;8GAAhB,gBAAgB;kHAAhB,gBAAgB;4FAAhB,gBAAgB;kBAD5B,UAAU;;;ACLX;AAUA;;;;;MAQa,qBAAqB;;;;;;IAO9B,YAAY,OAAmB,EAAsB,OAAyB,EAAU,EAAwB,EAA6C,aAAqB;QAA7H,YAAO,GAAP,OAAO,CAAkB;QAAU,OAAE,GAAF,EAAE,CAAsB;QAA6C,kBAAa,GAAb,aAAa,CAAQ;QAC9K,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC;QAErI,IAAI,CAAC,KAAK;YACN,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;KAC7D;;mHAZQ,qBAAqB,0HAOwG,aAAa;uGAP1I,qBAAqB;4FAArB,qBAAqB;kBAHjC,SAAS;mBAAC;oBACP,QAAQ,EAAE,gBAAgB;iBAC7B;;0BAQqC,QAAQ;;0BAAyE,QAAQ;;0BAAI,MAAM;2BAAC,aAAa;;;MCT1I,mBAAmB;IAC9B,OAAO,OAAO,CAAC,MAAkC;QAC/C,OAAO;YACL,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE;gBACT,oBAAoB;gBACpB,uBAAuB;gBACvB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,EAAE;gBAC5D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE;gBAC/D,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,IAAI,IAAI,EAAE;gBACrE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,IAAI,IAAI,EAAE;aACxF;SACF,CAAC;KACH;;iHAbU,mBAAmB;kHAAnB,mBAAmB,iBAHf,sBAAsB,EAAE,qBAAqB,aADlD,kBAAkB,aAEnB,sBAAsB,EAAE,qBAAqB;kHAE3C,mBAAmB,YAJrB,CAAC,kBAAkB,CAAC;4FAIlB,mBAAmB;kBAL/B,QAAQ;mBAAC;oBACR,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,YAAY,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;oBAC7D,OAAO,EAAC,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;iBACxD;;;ACfD;;;MAGa,yBAAyB;;;ACHtC;;;;ACAA;;;;;;"}
|
|
@@ -11,19 +11,22 @@ export declare class AccessControlDirective {
|
|
|
11
11
|
private viewContainer;
|
|
12
12
|
private _ac;
|
|
13
13
|
/**
|
|
14
|
-
*
|
|
14
|
+
* Espressione da processare scritta come {Chiave}:{Valore}
|
|
15
15
|
*
|
|
16
|
-
*
|
|
16
|
+
* Le {Chiave} disponibili sono di default "R" per i ruoli e "P" per i permessi. È possibile espanderle con le Custom Permissions.
|
|
17
|
+
*
|
|
18
|
+
* Nelle ultime versioni del template è anche presente di default la custom permission "X" che indica se l'applicaizone è Esterna o no
|
|
17
19
|
*/
|
|
18
|
-
|
|
20
|
+
ac: string;
|
|
21
|
+
/** Indica che l'esporessione **ac** è assoluta, cioè che non può essere modificata internamente ad esempio per aggiungere condizioni di default */
|
|
22
|
+
acAbsolute: boolean;
|
|
19
23
|
/**
|
|
20
|
-
*
|
|
21
|
-
*
|
|
22
|
-
* @param {string} expression espressione da processare scritta come {Chiave}:{Valore}
|
|
24
|
+
* Costruttore
|
|
23
25
|
*
|
|
24
|
-
*
|
|
26
|
+
* @ignore
|
|
25
27
|
*/
|
|
26
|
-
|
|
28
|
+
constructor(templateRef: TemplateRef<any>, viewContainer: ViewContainerRef, _ac: AccessControlService);
|
|
29
|
+
ngOnInit(): void;
|
|
27
30
|
static ɵfac: i0.ɵɵFactoryDeclaration<AccessControlDirective, never>;
|
|
28
|
-
static ɵdir: i0.ɵɵDirectiveDeclaration<AccessControlDirective, "[ac]", never, { "ac": "ac"; }, {}, never>;
|
|
31
|
+
static ɵdir: i0.ɵɵDirectiveDeclaration<AccessControlDirective, "[ac]", never, { "ac": "ac"; "acAbsolute": "acAbsolute"; }, {}, never>;
|
|
29
32
|
}
|
|
@@ -3,6 +3,8 @@ import * as i0 from "@angular/core";
|
|
|
3
3
|
* Entrypoint di tutte le operazioni esposte dalla libreria access-control
|
|
4
4
|
*/
|
|
5
5
|
export declare class AccessControlService {
|
|
6
|
+
private ACC_DEF_COND;
|
|
7
|
+
private ACC_DEF_COND_OP;
|
|
6
8
|
/**
|
|
7
9
|
* Indica se l'Identity è stata inizializzata
|
|
8
10
|
*/
|
|
@@ -23,7 +25,7 @@ export declare class AccessControlService {
|
|
|
23
25
|
Permissions: string[];
|
|
24
26
|
};
|
|
25
27
|
/** @ignore */
|
|
26
|
-
constructor();
|
|
28
|
+
constructor(ACC_DEF_COND: string, ACC_DEF_COND_OP: string);
|
|
27
29
|
/**
|
|
28
30
|
* Inizializza l'Identity del servizio con il modello specificato
|
|
29
31
|
*
|
|
@@ -54,19 +56,19 @@ export declare class AccessControlService {
|
|
|
54
56
|
*/
|
|
55
57
|
private hasACExpression;
|
|
56
58
|
/**
|
|
57
|
-
* Utilizzato da hasACExpression
|
|
59
|
+
* Utilizzato da hasACExpression dentro eval
|
|
58
60
|
*
|
|
59
61
|
* @ignore
|
|
60
62
|
*/
|
|
61
63
|
private hasRole;
|
|
62
64
|
/**
|
|
63
|
-
* Utilizzato da hasACExpression
|
|
65
|
+
* Utilizzato da hasACExpression dentro eval
|
|
64
66
|
*
|
|
65
67
|
* @ignore
|
|
66
68
|
*/
|
|
67
69
|
private hasPermission;
|
|
68
70
|
/**
|
|
69
|
-
* Utilizzato da hasACExpression
|
|
71
|
+
* Utilizzato da hasACExpression dentro eval
|
|
70
72
|
*
|
|
71
73
|
* @ignore
|
|
72
74
|
*/
|
|
@@ -74,7 +76,7 @@ export declare class AccessControlService {
|
|
|
74
76
|
/**
|
|
75
77
|
* Entry point che controlla un'espressione identificante un permesso, ad esempio "P:visualizzazione" controlla che l'utente collegato abbia un permesso che si chiama "visualizzazione"
|
|
76
78
|
*/
|
|
77
|
-
has(expr: string): boolean;
|
|
78
|
-
static ɵfac: i0.ɵɵFactoryDeclaration<AccessControlService,
|
|
79
|
+
has(expr: string, absolute?: boolean): boolean;
|
|
80
|
+
static ɵfac: i0.ɵɵFactoryDeclaration<AccessControlService, [{ optional: true; }, { optional: true; }]>;
|
|
79
81
|
static ɵprov: i0.ɵɵInjectableDeclaration<AccessControlService>;
|
|
80
82
|
}
|
|
@@ -8,8 +8,10 @@ export declare class AccessControlModuleConfig {
|
|
|
8
8
|
* Attualmente si supportano solo le lingue Italiano e Inglese
|
|
9
9
|
*/
|
|
10
10
|
locale: string;
|
|
11
|
-
/**
|
|
12
|
-
* Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno
|
|
13
|
-
*/
|
|
11
|
+
/** Chiave custom su cui la **contextAwareDirective** si basa per controllare se l'elemento è abilitato o meno */
|
|
14
12
|
customKey: string;
|
|
13
|
+
/** Condizione di default da aggiungere a ogni condizione utente. Es: 'R:Jace Admin' */
|
|
14
|
+
defaultCondition?: string;
|
|
15
|
+
/** Relazione logica fra la condizione di default e la condizione utente. Es: '||'. Di default viene utilizzato l'OR logico */
|
|
16
|
+
defaultConditionLogicalOperator?: string;
|
|
15
17
|
}
|
package/lib/tokens.d.ts
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
import { InjectionToken } from '@angular/core';
|
|
2
|
-
/**
|
|
3
|
-
* Token che racchiude il locale scelto per l'applicazione
|
|
4
|
-
*/
|
|
2
|
+
/** Token che racchiude il locale scelto per l'applicazione */
|
|
5
3
|
export declare const ACC_LOCALE: InjectionToken<string>;
|
|
6
|
-
/**
|
|
7
|
-
* Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext
|
|
8
|
-
*/
|
|
4
|
+
/** Token che racchiude la chiave custom da controllare quando si effettuano controlli sul ComponentContext */
|
|
9
5
|
export declare const ACC_CUSTOMKEY: InjectionToken<string>;
|
|
6
|
+
/** Token che indica la condizione di default da aggiungere ai check utente */
|
|
7
|
+
export declare const ACC_DEF_COND: InjectionToken<string>;
|
|
8
|
+
/** Token che indica l'operatore della condizione di default da aggiungere ai check utente */
|
|
9
|
+
export declare const ACC_DEF_COND_OP: InjectionToken<string>;
|