@esri/hub-common 11.23.3 → 12.0.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/esm/ArcGISContext.js +38 -1
- package/dist/esm/ArcGISContext.js.map +1 -1
- package/dist/esm/ArcGISContextManager.js +48 -0
- package/dist/esm/ArcGISContextManager.js.map +1 -1
- package/dist/esm/content/_internal.js +8 -18
- package/dist/esm/content/_internal.js.map +1 -1
- package/dist/esm/content/compose.js +12 -0
- package/dist/esm/content/compose.js.map +1 -1
- package/dist/esm/core/HubItemEntity.js +39 -57
- package/dist/esm/core/HubItemEntity.js.map +1 -1
- package/dist/esm/core/_internal/PropertyMapper.js +10 -2
- package/dist/esm/core/_internal/PropertyMapper.js.map +1 -1
- package/dist/esm/core/_internal/getBasePropertyMap.js +1 -0
- package/dist/esm/core/_internal/getBasePropertyMap.js.map +1 -1
- package/dist/esm/core/behaviors/IWithPermissionBehavior.js +0 -68
- package/dist/esm/core/behaviors/IWithPermissionBehavior.js.map +1 -1
- package/dist/esm/core/fetchHubEntity.js +28 -0
- package/dist/esm/core/fetchHubEntity.js.map +1 -0
- package/dist/esm/core/getTypeFromEntity.js +26 -0
- package/dist/esm/core/getTypeFromEntity.js.map +1 -0
- package/dist/esm/core/index.js +2 -1
- package/dist/esm/core/index.js.map +1 -1
- package/dist/esm/core/types/HubEntity.js +1 -0
- package/dist/esm/core/types/HubEntity.js.map +1 -0
- package/dist/esm/core/types/HubEntityType.js +1 -0
- package/dist/esm/core/types/HubEntityType.js.map +1 -0
- package/dist/esm/core/types/ISystemStatus.js +21 -0
- package/dist/esm/core/types/ISystemStatus.js.map +1 -0
- package/dist/esm/core/types/index.js +3 -2
- package/dist/esm/core/types/index.js.map +1 -1
- package/dist/esm/index.js +1 -0
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/initiatives/HubInitiative.js +0 -13
- package/dist/esm/initiatives/HubInitiative.js.map +1 -1
- package/dist/esm/permissions/HubPermissionPolicies.js +71 -0
- package/dist/esm/permissions/HubPermissionPolicies.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAlphaGating.js +27 -0
- package/dist/esm/permissions/_internal/checkAlphaGating.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAssertion.js +190 -0
- package/dist/esm/permissions/_internal/checkAssertion.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAssertions.js +20 -0
- package/dist/esm/permissions/_internal/checkAssertions.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAuthentication.js +28 -0
- package/dist/esm/permissions/_internal/checkAuthentication.js.map +1 -0
- package/dist/esm/permissions/_internal/checkEdit.js +38 -0
- package/dist/esm/permissions/_internal/checkEdit.js.map +1 -0
- package/dist/esm/permissions/_internal/checkEntityPolicy.js +68 -0
- package/dist/esm/permissions/_internal/checkEntityPolicy.js.map +1 -0
- package/dist/esm/permissions/_internal/checkLicense.js +33 -0
- package/dist/esm/permissions/_internal/checkLicense.js.map +1 -0
- package/dist/esm/permissions/_internal/checkOwner.js +36 -0
- package/dist/esm/permissions/_internal/checkOwner.js.map +1 -0
- package/dist/esm/permissions/_internal/checkPrivileges.js +31 -0
- package/dist/esm/permissions/_internal/checkPrivileges.js.map +1 -0
- package/dist/esm/permissions/_internal/getPolicyResponseCode.js +47 -0
- package/dist/esm/permissions/_internal/getPolicyResponseCode.js.map +1 -0
- package/dist/esm/permissions/checkPermission.js +89 -0
- package/dist/esm/permissions/checkPermission.js.map +1 -0
- package/dist/esm/permissions/index.js +5 -0
- package/dist/esm/permissions/index.js.map +1 -0
- package/dist/esm/permissions/types/HubLicense.js +1 -0
- package/dist/esm/permissions/types/HubLicense.js.map +1 -0
- package/dist/esm/permissions/types/IAccessResponse.js +1 -0
- package/dist/esm/permissions/types/IAccessResponse.js.map +1 -0
- package/dist/esm/permissions/types/IEntityPermissionPolicy.js +1 -0
- package/dist/esm/permissions/types/IEntityPermissionPolicy.js.map +1 -0
- package/dist/esm/permissions/types/IPermissionPolicy.js +1 -0
- package/dist/esm/permissions/types/IPermissionPolicy.js.map +1 -0
- package/dist/esm/permissions/types/IPolicyCheck.js +1 -0
- package/dist/esm/permissions/types/IPolicyCheck.js.map +1 -0
- package/dist/esm/permissions/types/Permission.js +17 -0
- package/dist/esm/permissions/types/Permission.js.map +1 -0
- package/dist/esm/permissions/types/PlatformPrivilege.js +5 -0
- package/dist/esm/permissions/types/PlatformPrivilege.js.map +1 -0
- package/dist/esm/permissions/types/PolicyResponse.js +4 -0
- package/dist/esm/permissions/types/PolicyResponse.js.map +1 -0
- package/dist/esm/permissions/types/index.js +9 -0
- package/dist/esm/permissions/types/index.js.map +1 -0
- package/dist/esm/permissions/utils.js +26 -0
- package/dist/esm/permissions/utils.js.map +1 -0
- package/dist/esm/projects/HubProject.js +0 -13
- package/dist/esm/projects/HubProject.js.map +1 -1
- package/dist/esm/projects/_internal/ProjectPermissionPolicies.js +41 -0
- package/dist/esm/projects/_internal/ProjectPermissionPolicies.js.map +1 -0
- package/dist/esm/projects/defaults.js +1 -0
- package/dist/esm/projects/defaults.js.map +1 -1
- package/dist/esm/search/Catalog.js.map +1 -1
- package/dist/esm/sites/HubSite.js +0 -13
- package/dist/esm/sites/HubSite.js.map +1 -1
- package/dist/esm/sites/HubSites.js +10 -12
- package/dist/esm/sites/HubSites.js.map +1 -1
- package/dist/esm/sites/_internal/SitesPermissionPolicies.js +44 -0
- package/dist/esm/sites/_internal/SitesPermissionPolicies.js.map +1 -0
- package/dist/esm/sites/_internal/applyPermissionMigration.js +52 -0
- package/dist/esm/sites/_internal/applyPermissionMigration.js.map +1 -0
- package/dist/node/ArcGISContext.js +42 -5
- package/dist/node/ArcGISContext.js.map +1 -1
- package/dist/node/ArcGISContextManager.js +48 -0
- package/dist/node/ArcGISContextManager.js.map +1 -1
- package/dist/node/content/_internal.js +8 -18
- package/dist/node/content/_internal.js.map +1 -1
- package/dist/node/content/compose.js +12 -0
- package/dist/node/content/compose.js.map +1 -1
- package/dist/node/core/HubItemEntity.js +38 -56
- package/dist/node/core/HubItemEntity.js.map +1 -1
- package/dist/node/core/_internal/PropertyMapper.js +9 -1
- package/dist/node/core/_internal/PropertyMapper.js.map +1 -1
- package/dist/node/core/_internal/getBasePropertyMap.js +1 -0
- package/dist/node/core/_internal/getBasePropertyMap.js.map +1 -1
- package/dist/node/core/behaviors/IWithPermissionBehavior.js +0 -73
- package/dist/node/core/behaviors/IWithPermissionBehavior.js.map +1 -1
- package/dist/node/core/fetchHubEntity.js +32 -0
- package/dist/node/core/fetchHubEntity.js.map +1 -0
- package/dist/node/core/getTypeFromEntity.js +30 -0
- package/dist/node/core/getTypeFromEntity.js.map +1 -0
- package/dist/node/core/index.js +2 -1
- package/dist/node/core/index.js.map +1 -1
- package/dist/node/core/types/{IHubPermission.js → HubEntity.js} +1 -1
- package/dist/node/core/types/HubEntity.js.map +1 -0
- package/dist/node/core/types/HubEntityType.js +3 -0
- package/dist/node/core/types/HubEntityType.js.map +1 -0
- package/dist/node/core/types/ISystemStatus.js +25 -0
- package/dist/node/core/types/ISystemStatus.js.map +1 -0
- package/dist/node/core/types/index.js +3 -2
- package/dist/node/core/types/index.js.map +1 -1
- package/dist/node/index.js +1 -0
- package/dist/node/index.js.map +1 -1
- package/dist/node/initiatives/HubInitiative.js +0 -13
- package/dist/node/initiatives/HubInitiative.js.map +1 -1
- package/dist/node/permissions/HubPermissionPolicies.js +75 -0
- package/dist/node/permissions/HubPermissionPolicies.js.map +1 -0
- package/dist/node/permissions/_internal/checkAlphaGating.js +31 -0
- package/dist/node/permissions/_internal/checkAlphaGating.js.map +1 -0
- package/dist/node/permissions/_internal/checkAssertion.js +194 -0
- package/dist/node/permissions/_internal/checkAssertion.js.map +1 -0
- package/dist/node/permissions/_internal/checkAssertions.js +24 -0
- package/dist/node/permissions/_internal/checkAssertions.js.map +1 -0
- package/dist/node/permissions/_internal/checkAuthentication.js +32 -0
- package/dist/node/permissions/_internal/checkAuthentication.js.map +1 -0
- package/dist/node/permissions/_internal/checkEdit.js +42 -0
- package/dist/node/permissions/_internal/checkEdit.js.map +1 -0
- package/dist/node/permissions/_internal/checkEntityPolicy.js +72 -0
- package/dist/node/permissions/_internal/checkEntityPolicy.js.map +1 -0
- package/dist/node/permissions/_internal/checkLicense.js +37 -0
- package/dist/node/permissions/_internal/checkLicense.js.map +1 -0
- package/dist/node/permissions/_internal/checkOwner.js +40 -0
- package/dist/node/permissions/_internal/checkOwner.js.map +1 -0
- package/dist/node/permissions/_internal/checkPrivileges.js +35 -0
- package/dist/node/permissions/_internal/checkPrivileges.js.map +1 -0
- package/dist/node/permissions/_internal/getPolicyResponseCode.js +51 -0
- package/dist/node/permissions/_internal/getPolicyResponseCode.js.map +1 -0
- package/dist/node/permissions/checkPermission.js +93 -0
- package/dist/node/permissions/checkPermission.js.map +1 -0
- package/dist/node/permissions/index.js +8 -0
- package/dist/node/permissions/index.js.map +1 -0
- package/dist/node/permissions/types/HubLicense.js +3 -0
- package/dist/node/permissions/types/HubLicense.js.map +1 -0
- package/dist/node/permissions/types/IAccessResponse.js +3 -0
- package/dist/node/permissions/types/IAccessResponse.js.map +1 -0
- package/dist/node/permissions/types/IEntityPermissionPolicy.js +3 -0
- package/dist/node/permissions/types/IEntityPermissionPolicy.js.map +1 -0
- package/dist/node/permissions/types/IPermissionPolicy.js +3 -0
- package/dist/node/permissions/types/IPermissionPolicy.js.map +1 -0
- package/dist/node/permissions/types/IPolicyCheck.js +3 -0
- package/dist/node/permissions/types/IPolicyCheck.js.map +1 -0
- package/dist/node/permissions/types/Permission.js +21 -0
- package/dist/node/permissions/types/Permission.js.map +1 -0
- package/dist/node/permissions/types/PlatformPrivilege.js +7 -0
- package/dist/node/permissions/types/PlatformPrivilege.js.map +1 -0
- package/dist/node/permissions/types/PolicyResponse.js +6 -0
- package/dist/node/permissions/types/PolicyResponse.js.map +1 -0
- package/dist/node/permissions/types/index.js +12 -0
- package/dist/node/permissions/types/index.js.map +1 -0
- package/dist/node/permissions/utils.js +31 -0
- package/dist/node/permissions/utils.js.map +1 -0
- package/dist/node/projects/HubProject.js +0 -13
- package/dist/node/projects/HubProject.js.map +1 -1
- package/dist/node/projects/_internal/ProjectPermissionPolicies.js +44 -0
- package/dist/node/projects/_internal/ProjectPermissionPolicies.js.map +1 -0
- package/dist/node/projects/defaults.js +1 -0
- package/dist/node/projects/defaults.js.map +1 -1
- package/dist/node/search/Catalog.js.map +1 -1
- package/dist/node/sites/HubSite.js +0 -13
- package/dist/node/sites/HubSite.js.map +1 -1
- package/dist/node/sites/HubSites.js +10 -12
- package/dist/node/sites/HubSites.js.map +1 -1
- package/dist/node/sites/_internal/SitesPermissionPolicies.js +47 -0
- package/dist/node/sites/_internal/SitesPermissionPolicies.js.map +1 -0
- package/dist/node/sites/_internal/applyPermissionMigration.js +56 -0
- package/dist/node/sites/_internal/applyPermissionMigration.js.map +1 -0
- package/dist/types/ArcGISContext.d.ts +33 -1
- package/dist/types/ArcGISContextManager.d.ts +6 -1
- package/dist/types/content/_internal.d.ts +15 -5
- package/dist/types/core/HubItemEntity.d.ts +29 -4
- package/dist/types/core/behaviors/IWithPermissionBehavior.d.ts +23 -35
- package/dist/types/core/behaviors/IWithStoreBehavior.d.ts +10 -10
- package/dist/types/core/fetchHubEntity.d.ts +11 -0
- package/dist/types/core/getTypeFromEntity.d.ts +8 -0
- package/dist/types/core/index.d.ts +2 -1
- package/dist/types/core/traits/IWithPermissions.d.ts +3 -3
- package/dist/types/core/types/HubEntity.d.ts +5 -0
- package/dist/types/core/types/HubEntityType.d.ts +1 -0
- package/dist/types/core/types/IHubContent.d.ts +2 -1
- package/dist/types/core/types/IHubItemEntity.d.ts +19 -2
- package/dist/types/core/types/ISystemStatus.d.ts +22 -0
- package/dist/types/core/types/index.d.ts +3 -2
- package/dist/types/index.d.ts +1 -0
- package/dist/types/initiatives/HubInitiative.d.ts +1 -7
- package/dist/types/permissions/HubPermissionPolicies.d.ts +11 -0
- package/dist/types/permissions/_internal/checkAlphaGating.d.ts +10 -0
- package/dist/types/permissions/_internal/checkAssertion.d.ts +11 -0
- package/dist/types/permissions/_internal/checkAssertions.d.ts +10 -0
- package/dist/types/permissions/_internal/checkAuthentication.d.ts +10 -0
- package/dist/types/permissions/_internal/checkEdit.d.ts +10 -0
- package/dist/types/permissions/_internal/checkEntityPolicy.d.ts +9 -0
- package/dist/types/permissions/_internal/checkLicense.d.ts +10 -0
- package/dist/types/permissions/_internal/checkOwner.d.ts +10 -0
- package/dist/types/permissions/_internal/checkPrivileges.d.ts +10 -0
- package/dist/types/permissions/_internal/getPolicyResponseCode.d.ts +7 -0
- package/dist/types/permissions/checkPermission.d.ts +10 -0
- package/dist/types/permissions/index.d.ts +4 -0
- package/dist/types/permissions/types/HubLicense.d.ts +4 -0
- package/dist/types/permissions/types/IAccessResponse.d.ts +34 -0
- package/dist/types/permissions/types/IEntityPermissionPolicy.d.ts +22 -0
- package/dist/types/permissions/types/IPermissionPolicy.d.ts +57 -0
- package/dist/types/permissions/types/IPolicyCheck.d.ts +25 -0
- package/dist/types/permissions/types/Permission.d.ts +17 -0
- package/dist/types/permissions/types/PlatformPrivilege.d.ts +5 -0
- package/dist/types/permissions/types/PolicyResponse.d.ts +4 -0
- package/dist/types/permissions/types/index.d.ts +8 -0
- package/dist/types/permissions/utils.d.ts +18 -0
- package/dist/types/projects/HubProject.d.ts +1 -7
- package/dist/types/projects/_internal/ProjectPermissionPolicies.d.ts +8 -0
- package/dist/types/sites/HubSite.d.ts +1 -7
- package/dist/types/sites/HubSites.d.ts +1 -1
- package/dist/types/sites/_internal/SitesPermissionPolicies.d.ts +11 -0
- package/dist/types/sites/_internal/applyPermissionMigration.d.ts +7 -0
- package/package.json +1 -1
- package/dist/esm/core/PermissionManager.js +0 -60
- package/dist/esm/core/PermissionManager.js.map +0 -1
- package/dist/esm/core/types/IHubPermission.js +0 -1
- package/dist/esm/core/types/IHubPermission.js.map +0 -1
- package/dist/node/core/PermissionManager.js +0 -64
- package/dist/node/core/PermissionManager.js.map +0 -1
- package/dist/node/core/types/IHubPermission.js.map +0 -1
- package/dist/types/core/PermissionManager.d.ts +0 -43
- package/dist/types/core/types/IHubPermission.d.ts +0 -23
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
2
|
+
/**
|
|
3
|
+
* Validate authentication policy
|
|
4
|
+
* @param policy
|
|
5
|
+
* @param context
|
|
6
|
+
* @param entity
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function checkAuthentication(policy, context, entity) {
|
|
10
|
+
const checks = [];
|
|
11
|
+
// Only return a check if the policy is defined
|
|
12
|
+
if (policy.hasOwnProperty("authenticated")) {
|
|
13
|
+
let response = "granted";
|
|
14
|
+
if (policy.authenticated && !context.isAuthenticated) {
|
|
15
|
+
response = "not-authenticated";
|
|
16
|
+
}
|
|
17
|
+
// create the check
|
|
18
|
+
const check = {
|
|
19
|
+
name: "authentication",
|
|
20
|
+
value: `required: ${policy.authenticated}`,
|
|
21
|
+
code: getPolicyResponseCode(response),
|
|
22
|
+
response,
|
|
23
|
+
};
|
|
24
|
+
checks.push(check);
|
|
25
|
+
}
|
|
26
|
+
return checks;
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=checkAuthentication.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkAuthentication.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAuthentication.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE;QAC1C,IAAI,QAAQ,GAAmB,SAAS,CAAC;QAEzC,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;YACpD,QAAQ,GAAG,mBAAmB,CAAC;SAChC;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,aAAa,MAAM,CAAC,aAAa,EAAE;YAC1C,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
import { getWithDefault } from "../../objects";
|
|
2
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
3
|
+
/**
|
|
4
|
+
* Validate entityEdit policy
|
|
5
|
+
* @param policy
|
|
6
|
+
* @param context
|
|
7
|
+
* @param entity
|
|
8
|
+
* @returns
|
|
9
|
+
*/
|
|
10
|
+
export function checkEdit(policy, context, entity) {
|
|
11
|
+
const checks = [];
|
|
12
|
+
// Only return a check if the policy is defined
|
|
13
|
+
if (policy.hasOwnProperty("entityEdit")) {
|
|
14
|
+
let response = "granted";
|
|
15
|
+
if (!entity) {
|
|
16
|
+
// fail b/c no entity
|
|
17
|
+
response = "entity-required";
|
|
18
|
+
}
|
|
19
|
+
else {
|
|
20
|
+
if (policy.entityEdit && !entity.canEdit) {
|
|
21
|
+
response = "no-edit-access";
|
|
22
|
+
}
|
|
23
|
+
else if (!policy.entityEdit && entity.canEdit) {
|
|
24
|
+
response = "edit-access";
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
// create the check
|
|
28
|
+
const check = {
|
|
29
|
+
name: "entity edit required",
|
|
30
|
+
value: `entity.canEdit: ${getWithDefault(entity, "canEdit", false)}`,
|
|
31
|
+
code: getPolicyResponseCode(response),
|
|
32
|
+
response,
|
|
33
|
+
};
|
|
34
|
+
checks.push(check);
|
|
35
|
+
}
|
|
36
|
+
return checks;
|
|
37
|
+
}
|
|
38
|
+
//# sourceMappingURL=checkEdit.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkEdit.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEdit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE;QACvC,IAAI,QAAQ,GAAmB,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE;YACX,qBAAqB;YACrB,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;aAAM;YACL,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACxC,QAAQ,GAAG,gBAAgB,CAAC;aAC7B;iBAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE;gBAC/C,QAAQ,GAAG,aAAa,CAAC;aAC1B;SACF;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,mBAAmB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;YACpE,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
import { getProp } from "../../objects";
|
|
2
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
3
|
+
/**
|
|
4
|
+
* Validate user meets entity policy
|
|
5
|
+
* @param policy
|
|
6
|
+
* @param context
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function checkEntityPolicy(policy, context) {
|
|
10
|
+
const user = context.currentUser || { groups: [] };
|
|
11
|
+
const userGroups = user.groups || [];
|
|
12
|
+
let response = "not-granted";
|
|
13
|
+
const type = policy.collaborationType;
|
|
14
|
+
const id = policy.collaborationId;
|
|
15
|
+
if (type === "user") {
|
|
16
|
+
if (id === user.username) {
|
|
17
|
+
response = "granted";
|
|
18
|
+
}
|
|
19
|
+
else {
|
|
20
|
+
response = "not-granted";
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
if (type === "org") {
|
|
24
|
+
if (id === user.orgId) {
|
|
25
|
+
response = "granted";
|
|
26
|
+
}
|
|
27
|
+
else {
|
|
28
|
+
response = "not-org-member";
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
if (type === "group") {
|
|
32
|
+
if (userGroups.find((g) => g.id === id)) {
|
|
33
|
+
response = "granted";
|
|
34
|
+
}
|
|
35
|
+
else {
|
|
36
|
+
response = "not-group-member";
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
if (type === "group-admin") {
|
|
40
|
+
const group = userGroups.find((g) => g.id === id);
|
|
41
|
+
const memberType = getProp(group, "userMembership.memberType");
|
|
42
|
+
if (["admin", "owner"].includes(memberType)) {
|
|
43
|
+
response = "granted";
|
|
44
|
+
}
|
|
45
|
+
else {
|
|
46
|
+
response = "not-group-admin";
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
if (type === "authenticated") {
|
|
50
|
+
if (context.isAuthenticated) {
|
|
51
|
+
response = "granted";
|
|
52
|
+
}
|
|
53
|
+
else {
|
|
54
|
+
response = "not-authenticated";
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
if (type === "anonymous") {
|
|
58
|
+
response = "granted";
|
|
59
|
+
}
|
|
60
|
+
const check = {
|
|
61
|
+
name: "entity:policy",
|
|
62
|
+
value: `${policy.collaborationType}:${policy.collaborationId}`,
|
|
63
|
+
response,
|
|
64
|
+
code: getPolicyResponseCode(response),
|
|
65
|
+
};
|
|
66
|
+
return check;
|
|
67
|
+
}
|
|
68
|
+
//# sourceMappingURL=checkEntityPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkEntityPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEntityPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAMxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGhE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAK,EAAE,MAAM,EAAE,EAAE,EAAY,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAK,EAAe,CAAC;IACnD,IAAI,QAAQ,GAAmB,aAAa,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;IAElC,IAAI,IAAI,KAAK,MAAM,EAAE;QACnB,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE;YACxB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,aAAa,CAAC;SAC1B;KACF;IAED,IAAI,IAAI,KAAK,KAAK,EAAE;QAClB,IAAI,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE;YACrB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,gBAAgB,CAAC;SAC7B;KACF;IAED,IAAI,IAAI,KAAK,OAAO,EAAE;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC/C,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,kBAAkB,CAAC;SAC/B;KACF;IAED,IAAI,IAAI,KAAK,aAAa,EAAE;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;YAC3C,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;KACF;IAED,IAAI,IAAI,KAAK,eAAe,EAAE;QAC5B,IAAI,OAAO,CAAC,eAAe,EAAE;YAC3B,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,mBAAmB,CAAC;SAChC;KACF;IAED,IAAI,IAAI,KAAK,WAAW,EAAE;QACxB,QAAQ,GAAG,SAAS,CAAC;KACtB;IAED,MAAM,KAAK,GAAiB;QAC1B,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,eAAe,EAAE;QAC9D,QAAQ;QACR,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;KACtC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
2
|
+
/**
|
|
3
|
+
* Validate license policy
|
|
4
|
+
* @param policy
|
|
5
|
+
* @param response
|
|
6
|
+
* @param context
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function checkLicense(policy, context, entity) {
|
|
10
|
+
var _a;
|
|
11
|
+
const checks = [];
|
|
12
|
+
// Only return a check if the policy is defined
|
|
13
|
+
if ((_a = policy.licenses) === null || _a === void 0 ? void 0 : _a.length) {
|
|
14
|
+
let result = "granted";
|
|
15
|
+
if (!policy.licenses.includes(context.hubLicense)) {
|
|
16
|
+
result = "not-available";
|
|
17
|
+
// can we show an upgrade ux?
|
|
18
|
+
if (policy.licenses[0] === "hub-premium" &&
|
|
19
|
+
context.hubLicense === "hub-basic") {
|
|
20
|
+
result = "not-licensed"; // implies it could be licensed
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
const check = {
|
|
24
|
+
name: `license in ${policy.licenses.join(", ")}`,
|
|
25
|
+
value: context.hubLicense,
|
|
26
|
+
code: getPolicyResponseCode(result),
|
|
27
|
+
response: result,
|
|
28
|
+
};
|
|
29
|
+
checks.push(check);
|
|
30
|
+
}
|
|
31
|
+
return checks;
|
|
32
|
+
}
|
|
33
|
+
//# sourceMappingURL=checkLicense.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkLicense.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkLicense.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,QAAQ,0CAAE,MAAM,EAAE;QAC3B,IAAI,MAAM,GAAmB,SAAS,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACjD,MAAM,GAAG,eAAe,CAAC;YACzB,6BAA6B;YAC7B,IACE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;gBACpC,OAAO,CAAC,UAAU,KAAK,WAAW,EAClC;gBACA,MAAM,GAAG,cAAc,CAAC,CAAC,+BAA+B;aACzD;SACF;QAED,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
2
|
+
/**
|
|
3
|
+
* Validate entityOwner policy
|
|
4
|
+
* @param policy
|
|
5
|
+
* @param context
|
|
6
|
+
* @param entity
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function checkOwner(policy, context, entity) {
|
|
10
|
+
const checks = [];
|
|
11
|
+
// Only return a check if the policy is defined
|
|
12
|
+
if (policy.entityOwner) {
|
|
13
|
+
let response = "granted";
|
|
14
|
+
let name = "entity owner required";
|
|
15
|
+
if (!entity) {
|
|
16
|
+
// fail b/c no entity
|
|
17
|
+
response = "entity-required";
|
|
18
|
+
}
|
|
19
|
+
else {
|
|
20
|
+
name = `entity owner required: ${entity.owner}`;
|
|
21
|
+
if (entity.owner !== context.currentUser.username) {
|
|
22
|
+
response = "not-owner";
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
// create the check
|
|
26
|
+
const check = {
|
|
27
|
+
name,
|
|
28
|
+
value: `current user: ${context.currentUser.username}`,
|
|
29
|
+
code: getPolicyResponseCode(response),
|
|
30
|
+
response,
|
|
31
|
+
};
|
|
32
|
+
checks.push(check);
|
|
33
|
+
}
|
|
34
|
+
return checks;
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=checkOwner.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkOwner.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkOwner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,WAAW,EAAE;QACtB,IAAI,QAAQ,GAAmB,SAAS,CAAC;QACzC,IAAI,IAAI,GAAG,uBAAuB,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE;YACX,qBAAqB;YACrB,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;aAAM;YACL,IAAI,GAAG,0BAA0B,MAAM,CAAC,KAAK,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;gBACjD,QAAQ,GAAG,WAAW,CAAC;aACxB;SACF;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI;YACJ,KAAK,EAAE,iBAAiB,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;YACtD,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import { getPolicyResponseCode } from "./getPolicyResponseCode";
|
|
2
|
+
/**
|
|
3
|
+
* Validate privilege policy
|
|
4
|
+
* @param policy
|
|
5
|
+
* @param context
|
|
6
|
+
* @param entity
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function checkPrivileges(policy, context, entity) {
|
|
10
|
+
var _a;
|
|
11
|
+
let checks = [];
|
|
12
|
+
// Only return a check if the policy is defined
|
|
13
|
+
if ((_a = policy.privileges) === null || _a === void 0 ? void 0 : _a.length) {
|
|
14
|
+
checks = policy.privileges.map((privilege) => {
|
|
15
|
+
let response = "granted";
|
|
16
|
+
let value = "privilege present";
|
|
17
|
+
if (!context.currentUser.privileges.includes(privilege)) {
|
|
18
|
+
response = "privilege-required";
|
|
19
|
+
value = "privilege missing";
|
|
20
|
+
}
|
|
21
|
+
return {
|
|
22
|
+
name: `privilege required: ${privilege}`,
|
|
23
|
+
value,
|
|
24
|
+
response,
|
|
25
|
+
code: getPolicyResponseCode(response),
|
|
26
|
+
};
|
|
27
|
+
});
|
|
28
|
+
}
|
|
29
|
+
return checks;
|
|
30
|
+
}
|
|
31
|
+
//# sourceMappingURL=checkPrivileges.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkPrivileges.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkPrivileges.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;;IAE5B,IAAI,MAAM,GAAG,EAAoB,CAAC;IAClC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,UAAU,0CAAE,MAAM,EAAE;QAC7B,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YAC3C,IAAI,QAAQ,GAAmB,SAAS,CAAC;YACzC,IAAI,KAAK,GAAG,mBAAmB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACvD,QAAQ,GAAG,oBAAoB,CAAC;gBAChC,KAAK,GAAG,mBAAmB,CAAC;aAC7B;YACD,OAAO;gBACL,IAAI,EAAE,uBAAuB,SAAS,EAAE;gBACxC,KAAK;gBACL,QAAQ;gBACR,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;aACtB,CAAC;QACpB,CAAC,CAAC,CAAC;KACJ;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
// TODO: Determine how to keep this in sycn with the PolicyResponse type
|
|
2
|
+
// Crappy tool https://jsbin.com/gojelov/edit?js,console,output
|
|
3
|
+
const policyResponseCodes = [
|
|
4
|
+
{ response: "granted", code: "PC100" },
|
|
5
|
+
{ response: "org-member", code: "PC101" },
|
|
6
|
+
{ response: "not-org-member", code: "PC102" },
|
|
7
|
+
{ response: "group-member", code: "PC103" },
|
|
8
|
+
{ response: "not-group-member", code: "PC104" },
|
|
9
|
+
{ response: "not-group-admin", code: "PC105" },
|
|
10
|
+
{ response: "is-user", code: "PC106" },
|
|
11
|
+
{ response: "not-owner", code: "PC107" },
|
|
12
|
+
{ response: "not-licensed", code: "PC108" },
|
|
13
|
+
{ response: "not-licensed-available", code: "PC109" },
|
|
14
|
+
{ response: "not-available", code: "PC110" },
|
|
15
|
+
{ response: "not-granted", code: "PC111" },
|
|
16
|
+
{ response: "no-edit-access", code: "PC112" },
|
|
17
|
+
{ response: "edit-access", code: "PC113" },
|
|
18
|
+
{ response: "invalid-permission", code: "PC114" },
|
|
19
|
+
{ response: "privilege-required", code: "PC115" },
|
|
20
|
+
{ response: "system-offline", code: "PC116" },
|
|
21
|
+
{ response: "system-maintenance", code: "PC117" },
|
|
22
|
+
{ response: "entity-required", code: "PC118" },
|
|
23
|
+
{ response: "not-authenticated", code: "PC119" },
|
|
24
|
+
{ response: "not-alpha-org", code: "PC120" },
|
|
25
|
+
{ response: "property-missing", code: "PC121" },
|
|
26
|
+
{ response: "property-not-array", code: "PC122" },
|
|
27
|
+
{ response: "array-contains-invalid-value", code: "PC123" },
|
|
28
|
+
{ response: "array-missing-required-value", code: "PC124" },
|
|
29
|
+
{ response: "property-mismatch", code: "PC125" },
|
|
30
|
+
{ response: "user-not-group-member", code: "PC126" },
|
|
31
|
+
{ response: "user-not-group-manager", code: "PC127" },
|
|
32
|
+
{ response: "user-not-group-owner", code: "PC128" },
|
|
33
|
+
{ response: "assertion-property-not-found", code: "PC129" },
|
|
34
|
+
{ response: "assertion-failed", code: "PC130" },
|
|
35
|
+
{ response: "assertion-requires-numeric-values", code: "PC131" },
|
|
36
|
+
{ response: "property-match", code: "PC132" },
|
|
37
|
+
];
|
|
38
|
+
/**
|
|
39
|
+
* Get a code that can be used for i18n or other purposes, based on the PolicyResponse
|
|
40
|
+
* @param response
|
|
41
|
+
* @returns
|
|
42
|
+
*/
|
|
43
|
+
export function getPolicyResponseCode(response) {
|
|
44
|
+
const entry = policyResponseCodes.find((x) => x.response === response);
|
|
45
|
+
return (entry === null || entry === void 0 ? void 0 : entry.code) || "PC000";
|
|
46
|
+
}
|
|
47
|
+
//# sourceMappingURL=getPolicyResponseCode.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"getPolicyResponseCode.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/getPolicyResponseCode.ts"],"names":[],"mappings":"AAOA,wEAAwE;AACxE,+DAA+D;AAC/D,MAAM,mBAAmB,GAAoB;IAC3C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE;IACpD,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE;IACnD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;CAC9C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACvE,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,KAAI,OAAO,CAAC;AAChC,CAAC"}
|
|
@@ -0,0 +1,89 @@
|
|
|
1
|
+
import { getWithDefault } from "../objects";
|
|
2
|
+
import { checkLicense } from "./_internal/checkLicense";
|
|
3
|
+
import { getPermissionPolicy } from "./HubPermissionPolicies";
|
|
4
|
+
import { isPermission, } from "./types";
|
|
5
|
+
import { getPolicyResponseCode } from "./_internal/getPolicyResponseCode";
|
|
6
|
+
import { checkAuthentication } from "./_internal/checkAuthentication";
|
|
7
|
+
import { checkOwner } from "./_internal/checkOwner";
|
|
8
|
+
import { checkEdit } from "./_internal/checkEdit";
|
|
9
|
+
import { checkPrivileges } from "./_internal/checkPrivileges";
|
|
10
|
+
import { checkEntityPolicy } from "./_internal/checkEntityPolicy";
|
|
11
|
+
import { checkAssertions } from "./_internal/checkAssertions";
|
|
12
|
+
/**
|
|
13
|
+
* Check a permission against the system policies, and possibly an entity policy
|
|
14
|
+
* @param permission
|
|
15
|
+
* @param context
|
|
16
|
+
* @param entity
|
|
17
|
+
* @returns
|
|
18
|
+
*/
|
|
19
|
+
export function checkPermission(permission, context, entity) {
|
|
20
|
+
// Early Exit: Is this even a valid permission?
|
|
21
|
+
if (!isPermission(permission)) {
|
|
22
|
+
return {
|
|
23
|
+
permission,
|
|
24
|
+
access: false,
|
|
25
|
+
response: "invalid-permission",
|
|
26
|
+
code: getPolicyResponseCode("invalid-permission"),
|
|
27
|
+
checks: [],
|
|
28
|
+
};
|
|
29
|
+
}
|
|
30
|
+
// Get the system policy for this permission
|
|
31
|
+
const systemPolicy = getPermissionPolicy(permission);
|
|
32
|
+
// Default to granted
|
|
33
|
+
const response = {
|
|
34
|
+
permission,
|
|
35
|
+
access: true,
|
|
36
|
+
response: "granted",
|
|
37
|
+
code: getPolicyResponseCode("granted"),
|
|
38
|
+
checks: [],
|
|
39
|
+
};
|
|
40
|
+
const checks = [
|
|
41
|
+
checkAuthentication,
|
|
42
|
+
checkLicense,
|
|
43
|
+
checkPrivileges,
|
|
44
|
+
checkOwner,
|
|
45
|
+
checkEdit,
|
|
46
|
+
checkAssertions,
|
|
47
|
+
].reduce((acc, fn) => {
|
|
48
|
+
acc = [...acc, ...fn(systemPolicy, context, entity)];
|
|
49
|
+
return acc;
|
|
50
|
+
}, []);
|
|
51
|
+
// For system policies, all conditions must be met, so we can
|
|
52
|
+
// iterate through the checks and set the response to the first failure
|
|
53
|
+
// while still returning all the checks for observability
|
|
54
|
+
checks.forEach((check) => {
|
|
55
|
+
if (check.response !== "granted" && response.response === "granted") {
|
|
56
|
+
response.response = check.response;
|
|
57
|
+
response.code = check.code;
|
|
58
|
+
response.access = false;
|
|
59
|
+
}
|
|
60
|
+
});
|
|
61
|
+
response.checks = checks;
|
|
62
|
+
// Entity policies are treated as "grants" so we only need to pass one
|
|
63
|
+
if (entity) {
|
|
64
|
+
const entityPolicies = getWithDefault(entity, "permissions", []);
|
|
65
|
+
const entityPermissionPolicies = entityPolicies.filter((e) => e.permission === permission);
|
|
66
|
+
// Entity Policies are "grants" in that only one needs to pass
|
|
67
|
+
// but we still want each check returned so we can see why they
|
|
68
|
+
// got access or got denied
|
|
69
|
+
const entityChecks = entityPermissionPolicies.map((policy) => {
|
|
70
|
+
return checkEntityPolicy(policy, context);
|
|
71
|
+
});
|
|
72
|
+
// Process them to see if any grant access
|
|
73
|
+
const grantedCheck = entityChecks.find((e) => e.response === "granted");
|
|
74
|
+
// If we did not find a check that grants access, AND we've passed
|
|
75
|
+
// all the system checks, then we set the response to "not-granted"
|
|
76
|
+
// and set the access to false
|
|
77
|
+
if (entityChecks.length &&
|
|
78
|
+
!grantedCheck &&
|
|
79
|
+
response.response === "granted") {
|
|
80
|
+
response.access = false;
|
|
81
|
+
response.response = "not-granted";
|
|
82
|
+
}
|
|
83
|
+
// Merge in the entity checks...
|
|
84
|
+
response.checks = [...response.checks, ...entityChecks];
|
|
85
|
+
}
|
|
86
|
+
// return the response
|
|
87
|
+
return response;
|
|
88
|
+
}
|
|
89
|
+
//# sourceMappingURL=checkPermission.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkPermission.js","sourceRoot":"","sources":["../../../src/permissions/checkPermission.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAGL,YAAY,GAGb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAsB,EACtB,OAAuB,EACvB,MAA4B;IAE5B,+CAA+C;IAC/C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE;QAC7B,OAAO;YACL,UAAU;YACV,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,oBAAoB;YAC9B,IAAI,EAAE,qBAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,EAAE,EAAE;SACQ,CAAC;KACtB;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,qBAAqB;IACrB,MAAM,QAAQ,GAAoB;QAChC,UAAU;QACV,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC;QACtC,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,mBAAmB;QACnB,YAAY;QACZ,eAAe;QACf,UAAU;QACV,SAAS;QACT,eAAe;KAChB,CAAC,MAAM,CAAC,CAAC,GAAmB,EAAE,EAAE,EAAE,EAAE;QACnC,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6DAA6D;IAC7D,uEAAuE;IACvE,yDAAyD;IACzD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE;YACnE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YACnC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IAEzB,sEAAsE;IACtE,IAAI,MAAM,EAAE;QACV,MAAM,cAAc,GAA8B,cAAc,CAC9D,MAAM,EACN,aAAa,EACb,EAAE,CACH,CAAC;QACF,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,8DAA8D;QAC9D,+DAA+D;QAC/D,2BAA2B;QAC3B,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3D,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,0CAA0C;QAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QACxE,kEAAkE;QAClE,mEAAmE;QACnE,8BAA8B;QAC9B,IACE,YAAY,CAAC,MAAM;YACnB,CAAC,YAAY;YACb,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAC/B;YACA,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC;SACnC;QACD,gCAAgC;QAChC,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;KACzD;IACD,sBAAsB;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/permissions/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
//# sourceMappingURL=HubLicense.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"HubLicense.js","sourceRoot":"","sources":["../../../../src/permissions/types/HubLicense.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
//# sourceMappingURL=IAccessResponse.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"IAccessResponse.js","sourceRoot":"","sources":["../../../../src/permissions/types/IAccessResponse.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
//# sourceMappingURL=IEntityPermissionPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"IEntityPermissionPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/types/IEntityPermissionPolicy.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
//# sourceMappingURL=IPermissionPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"IPermissionPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/types/IPermissionPolicy.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
//# sourceMappingURL=IPolicyCheck.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"IPolicyCheck.js","sourceRoot":"","sources":["../../../../src/permissions/types/IPolicyCheck.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import { ProjectPermissions } from "../../projects/_internal/ProjectPermissionPolicies";
|
|
2
|
+
import { SitePermissions } from "../../sites/_internal/SitesPermissionPolicies";
|
|
3
|
+
/**
|
|
4
|
+
* Defines the values for Permissions
|
|
5
|
+
* It's critical that the arrays defined in the modules use `as const`
|
|
6
|
+
* otherwise Permission devolves into just a string type
|
|
7
|
+
*/
|
|
8
|
+
const validPermissions = [...SitePermissions, ...ProjectPermissions];
|
|
9
|
+
/**
|
|
10
|
+
* Validate a Permission
|
|
11
|
+
* @param permission
|
|
12
|
+
* @returns
|
|
13
|
+
*/
|
|
14
|
+
export function isPermission(maybePermission) {
|
|
15
|
+
return validPermissions.includes(maybePermission);
|
|
16
|
+
}
|
|
17
|
+
//# sourceMappingURL=Permission.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"Permission.js","sourceRoot":"","sources":["../../../../src/permissions/types/Permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAEhF;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,kBAAkB,CAAU,CAAC;AAO9E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,eAAuB;IAClD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,eAA6B,CAAC,CAAC;AAClE,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"PlatformPrivilege.js","sourceRoot":"","sources":["../../../../src/permissions/types/PlatformPrivilege.ts"],"names":[],"mappings":"AAAA;;;GAGG"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"PolicyResponse.js","sourceRoot":"","sources":["../../../../src/permissions/types/PolicyResponse.ts"],"names":[],"mappings":"AAAA;;GAEG"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
export * from "./HubLicense";
|
|
2
|
+
export * from "./IAccessResponse";
|
|
3
|
+
export * from "./IEntityPermissionPolicy";
|
|
4
|
+
export * from "./IPermissionPolicy";
|
|
5
|
+
export * from "./IPolicyCheck";
|
|
6
|
+
export * from "./Permission";
|
|
7
|
+
export * from "./PlatformPrivilege";
|
|
8
|
+
export * from "./PolicyResponse";
|
|
9
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/permissions/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC"}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import { cloneObject } from "../util";
|
|
2
|
+
/**
|
|
3
|
+
* Add a policy to an array of entity policies
|
|
4
|
+
* Returns a new array
|
|
5
|
+
* @param permissions
|
|
6
|
+
* @param policy
|
|
7
|
+
* @returns
|
|
8
|
+
*/
|
|
9
|
+
export function addPermissionPolicy(permissions = [], policy) {
|
|
10
|
+
const clone = removePermissionPolicy(permissions, policy.permission, policy.collaborationId);
|
|
11
|
+
clone.push(policy);
|
|
12
|
+
return clone;
|
|
13
|
+
}
|
|
14
|
+
/**
|
|
15
|
+
* Remove a policy from an array of entity policies
|
|
16
|
+
* Returns a new array
|
|
17
|
+
* @param permissions
|
|
18
|
+
* @param permission
|
|
19
|
+
* @param id
|
|
20
|
+
* @returns
|
|
21
|
+
*/
|
|
22
|
+
export function removePermissionPolicy(permissions = [], permission, id) {
|
|
23
|
+
const clone = cloneObject(permissions);
|
|
24
|
+
return clone.filter((p) => p.permission !== permission || p.collaborationId !== id);
|
|
25
|
+
}
|
|
26
|
+
//# sourceMappingURL=utils.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/permissions/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,cAAyC,EAAE,EAC3C,MAA+B;IAE/B,MAAM,KAAK,GAAG,sBAAsB,CAClC,WAAW,EACX,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,CACvB,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,cAAyC,EAAE,EAC3C,UAAsB,EACtB,EAAU;IAEV,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAEvC,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,KAAK,EAAE,CAC/D,CAAC;AACJ,CAAC"}
|
|
@@ -1,5 +1,4 @@
|
|
|
1
1
|
import { DEFAULT_PROJECT } from "./defaults";
|
|
2
|
-
import { PermissionManager, } from "../core";
|
|
3
2
|
import { Catalog } from "../search/Catalog";
|
|
4
3
|
import { HubItemEntity } from "../core/HubItemEntity";
|
|
5
4
|
// NOTE: this could be lazy-loaded just like the CUD functions
|
|
@@ -16,7 +15,6 @@ export class HubProject extends HubItemEntity {
|
|
|
16
15
|
constructor(project, context) {
|
|
17
16
|
super(project, context);
|
|
18
17
|
this._catalog = Catalog.fromJson(project.catalog, this.context);
|
|
19
|
-
this._permissionManager = PermissionManager.fromJson(project.permissions, this.context);
|
|
20
18
|
}
|
|
21
19
|
/**
|
|
22
20
|
* Catalog instance for this project. Note: Do not hold direct references to this object; always access it from the project.
|
|
@@ -25,13 +23,6 @@ export class HubProject extends HubItemEntity {
|
|
|
25
23
|
get catalog() {
|
|
26
24
|
return this._catalog;
|
|
27
25
|
}
|
|
28
|
-
/**
|
|
29
|
-
* PermissionManager instance for this project. Note: Do not hold direct references to this object; always access it from the project.
|
|
30
|
-
* @returns
|
|
31
|
-
*/
|
|
32
|
-
get permissions() {
|
|
33
|
-
return this._permissionManager;
|
|
34
|
-
}
|
|
35
26
|
/**
|
|
36
27
|
* Create an instance from an IHubProject object
|
|
37
28
|
* @param json - JSON object to create a HubProject from
|
|
@@ -119,9 +110,6 @@ export class HubProject extends HubItemEntity {
|
|
|
119
110
|
if (changes.catalog) {
|
|
120
111
|
this._catalog = Catalog.fromJson(this.entity.catalog, this.context);
|
|
121
112
|
}
|
|
122
|
-
if (changes.permissions) {
|
|
123
|
-
this._permissionManager = PermissionManager.fromJson(this.entity.permissions, this.context);
|
|
124
|
-
}
|
|
125
113
|
}
|
|
126
114
|
/**
|
|
127
115
|
* Save the HubProject to the backing store. Currently Projects are stored as Items in Portal
|
|
@@ -133,7 +121,6 @@ export class HubProject extends HubItemEntity {
|
|
|
133
121
|
}
|
|
134
122
|
// get the catalog, and permission configs
|
|
135
123
|
this.entity.catalog = this._catalog.toJson();
|
|
136
|
-
this.entity.permissions = this._permissionManager.toJson();
|
|
137
124
|
const { createProject, updateProject } = await import("./edit");
|
|
138
125
|
if (this.entity.id) {
|
|
139
126
|
// update it
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"HubProject.js","sourceRoot":"","sources":["../../../src/projects/HubProject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"HubProject.js","sourceRoot":"","sources":["../../../src/projects/HubProject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAW7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAMtD,8DAA8D;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;GAEG;AACH,MAAM,OAAO,UACX,SAAQ,aAA0B;IASlC;;;;OAIG;IACH,YAAoB,OAAoB,EAAE,OAAuB;QAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CACb,IAA0B,EAC1B,OAAuB;QAEvB,6CAA6C;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,cAAoC,EACpC,OAAuB,EACvB,OAAgB,KAAK;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,EAAE;YACR,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;SACvB;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,UAAkB,EAClB,OAAuB;QAEvB,kCAAkC;QAClC,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACvE,oDAAoD;YACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC9C;QAAC,OAAO,EAAE,EAAE;YACX,IACG,EAAY,CAAC,OAAO;gBACrB,oDAAoD,EACpD;gBACA,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;aACvC;iBAAM;gBACL,MAAM,EAAE,CAAC;aACV;SACF;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,SAAiB,EACjB,IAAsB,EACtB,UAAoC,EAAE;QAEtC,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7D,wBAAwB;QACxB,OAAO,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,cAAoC,EACpC,OAAuB;QAEvB,+BAA+B;QAC/B,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE;YAC7B,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAClD;QACD,uCAAuC;QACvC,MAAM,IAAI,GAAG,gCAAK,eAAe,GAAK,cAAc,CAAiB,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAA6B;QAClC,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,qCAAqC;QACrC,IAAI,CAAC,MAAM,mCAAQ,IAAI,CAAC,MAAM,GAAK,OAAO,CAAE,CAAC;QAE7C,4BAA4B;QAC5B,IAAI,OAAO,CAAC,OAAO,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACrE;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAE7C,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;YAClB,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;aAAM;YACL,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;QACD,yCAAyC;QACzC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAExB,OAAO;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,wBAAwB;QACxB,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,CAAC;CACF"}
|