@esri/hub-common 11.23.3 → 12.0.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/esm/ArcGISContext.js +38 -1
- package/dist/esm/ArcGISContext.js.map +1 -1
- package/dist/esm/ArcGISContextManager.js +48 -0
- package/dist/esm/ArcGISContextManager.js.map +1 -1
- package/dist/esm/content/_internal.js +8 -18
- package/dist/esm/content/_internal.js.map +1 -1
- package/dist/esm/content/compose.js +12 -0
- package/dist/esm/content/compose.js.map +1 -1
- package/dist/esm/core/HubItemEntity.js +39 -57
- package/dist/esm/core/HubItemEntity.js.map +1 -1
- package/dist/esm/core/_internal/PropertyMapper.js +10 -2
- package/dist/esm/core/_internal/PropertyMapper.js.map +1 -1
- package/dist/esm/core/_internal/getBasePropertyMap.js +1 -0
- package/dist/esm/core/_internal/getBasePropertyMap.js.map +1 -1
- package/dist/esm/core/behaviors/IWithPermissionBehavior.js +0 -68
- package/dist/esm/core/behaviors/IWithPermissionBehavior.js.map +1 -1
- package/dist/esm/core/fetchHubEntity.js +28 -0
- package/dist/esm/core/fetchHubEntity.js.map +1 -0
- package/dist/esm/core/getTypeFromEntity.js +26 -0
- package/dist/esm/core/getTypeFromEntity.js.map +1 -0
- package/dist/esm/core/index.js +2 -1
- package/dist/esm/core/index.js.map +1 -1
- package/dist/esm/core/types/HubEntity.js +1 -0
- package/dist/esm/core/types/HubEntity.js.map +1 -0
- package/dist/esm/core/types/HubEntityType.js +1 -0
- package/dist/esm/core/types/HubEntityType.js.map +1 -0
- package/dist/esm/core/types/ISystemStatus.js +21 -0
- package/dist/esm/core/types/ISystemStatus.js.map +1 -0
- package/dist/esm/core/types/index.js +3 -2
- package/dist/esm/core/types/index.js.map +1 -1
- package/dist/esm/index.js +1 -0
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/initiatives/HubInitiative.js +0 -13
- package/dist/esm/initiatives/HubInitiative.js.map +1 -1
- package/dist/esm/permissions/HubPermissionPolicies.js +71 -0
- package/dist/esm/permissions/HubPermissionPolicies.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAlphaGating.js +27 -0
- package/dist/esm/permissions/_internal/checkAlphaGating.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAssertion.js +190 -0
- package/dist/esm/permissions/_internal/checkAssertion.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAssertions.js +20 -0
- package/dist/esm/permissions/_internal/checkAssertions.js.map +1 -0
- package/dist/esm/permissions/_internal/checkAuthentication.js +28 -0
- package/dist/esm/permissions/_internal/checkAuthentication.js.map +1 -0
- package/dist/esm/permissions/_internal/checkEdit.js +38 -0
- package/dist/esm/permissions/_internal/checkEdit.js.map +1 -0
- package/dist/esm/permissions/_internal/checkEntityPolicy.js +68 -0
- package/dist/esm/permissions/_internal/checkEntityPolicy.js.map +1 -0
- package/dist/esm/permissions/_internal/checkLicense.js +33 -0
- package/dist/esm/permissions/_internal/checkLicense.js.map +1 -0
- package/dist/esm/permissions/_internal/checkOwner.js +36 -0
- package/dist/esm/permissions/_internal/checkOwner.js.map +1 -0
- package/dist/esm/permissions/_internal/checkPrivileges.js +31 -0
- package/dist/esm/permissions/_internal/checkPrivileges.js.map +1 -0
- package/dist/esm/permissions/_internal/getPolicyResponseCode.js +47 -0
- package/dist/esm/permissions/_internal/getPolicyResponseCode.js.map +1 -0
- package/dist/esm/permissions/checkPermission.js +89 -0
- package/dist/esm/permissions/checkPermission.js.map +1 -0
- package/dist/esm/permissions/index.js +5 -0
- package/dist/esm/permissions/index.js.map +1 -0
- package/dist/esm/permissions/types/HubLicense.js +1 -0
- package/dist/esm/permissions/types/HubLicense.js.map +1 -0
- package/dist/esm/permissions/types/IAccessResponse.js +1 -0
- package/dist/esm/permissions/types/IAccessResponse.js.map +1 -0
- package/dist/esm/permissions/types/IEntityPermissionPolicy.js +1 -0
- package/dist/esm/permissions/types/IEntityPermissionPolicy.js.map +1 -0
- package/dist/esm/permissions/types/IPermissionPolicy.js +1 -0
- package/dist/esm/permissions/types/IPermissionPolicy.js.map +1 -0
- package/dist/esm/permissions/types/IPolicyCheck.js +1 -0
- package/dist/esm/permissions/types/IPolicyCheck.js.map +1 -0
- package/dist/esm/permissions/types/Permission.js +17 -0
- package/dist/esm/permissions/types/Permission.js.map +1 -0
- package/dist/esm/permissions/types/PlatformPrivilege.js +5 -0
- package/dist/esm/permissions/types/PlatformPrivilege.js.map +1 -0
- package/dist/esm/permissions/types/PolicyResponse.js +4 -0
- package/dist/esm/permissions/types/PolicyResponse.js.map +1 -0
- package/dist/esm/permissions/types/index.js +9 -0
- package/dist/esm/permissions/types/index.js.map +1 -0
- package/dist/esm/permissions/utils.js +26 -0
- package/dist/esm/permissions/utils.js.map +1 -0
- package/dist/esm/projects/HubProject.js +0 -13
- package/dist/esm/projects/HubProject.js.map +1 -1
- package/dist/esm/projects/_internal/ProjectPermissionPolicies.js +41 -0
- package/dist/esm/projects/_internal/ProjectPermissionPolicies.js.map +1 -0
- package/dist/esm/projects/defaults.js +1 -0
- package/dist/esm/projects/defaults.js.map +1 -1
- package/dist/esm/search/Catalog.js.map +1 -1
- package/dist/esm/sites/HubSite.js +0 -13
- package/dist/esm/sites/HubSite.js.map +1 -1
- package/dist/esm/sites/HubSites.js +10 -12
- package/dist/esm/sites/HubSites.js.map +1 -1
- package/dist/esm/sites/_internal/SitesPermissionPolicies.js +44 -0
- package/dist/esm/sites/_internal/SitesPermissionPolicies.js.map +1 -0
- package/dist/esm/sites/_internal/applyPermissionMigration.js +52 -0
- package/dist/esm/sites/_internal/applyPermissionMigration.js.map +1 -0
- package/dist/node/ArcGISContext.js +42 -5
- package/dist/node/ArcGISContext.js.map +1 -1
- package/dist/node/ArcGISContextManager.js +48 -0
- package/dist/node/ArcGISContextManager.js.map +1 -1
- package/dist/node/content/_internal.js +8 -18
- package/dist/node/content/_internal.js.map +1 -1
- package/dist/node/content/compose.js +12 -0
- package/dist/node/content/compose.js.map +1 -1
- package/dist/node/core/HubItemEntity.js +38 -56
- package/dist/node/core/HubItemEntity.js.map +1 -1
- package/dist/node/core/_internal/PropertyMapper.js +9 -1
- package/dist/node/core/_internal/PropertyMapper.js.map +1 -1
- package/dist/node/core/_internal/getBasePropertyMap.js +1 -0
- package/dist/node/core/_internal/getBasePropertyMap.js.map +1 -1
- package/dist/node/core/behaviors/IWithPermissionBehavior.js +0 -73
- package/dist/node/core/behaviors/IWithPermissionBehavior.js.map +1 -1
- package/dist/node/core/fetchHubEntity.js +32 -0
- package/dist/node/core/fetchHubEntity.js.map +1 -0
- package/dist/node/core/getTypeFromEntity.js +30 -0
- package/dist/node/core/getTypeFromEntity.js.map +1 -0
- package/dist/node/core/index.js +2 -1
- package/dist/node/core/index.js.map +1 -1
- package/dist/node/core/types/{IHubPermission.js → HubEntity.js} +1 -1
- package/dist/node/core/types/HubEntity.js.map +1 -0
- package/dist/node/core/types/HubEntityType.js +3 -0
- package/dist/node/core/types/HubEntityType.js.map +1 -0
- package/dist/node/core/types/ISystemStatus.js +25 -0
- package/dist/node/core/types/ISystemStatus.js.map +1 -0
- package/dist/node/core/types/index.js +3 -2
- package/dist/node/core/types/index.js.map +1 -1
- package/dist/node/index.js +1 -0
- package/dist/node/index.js.map +1 -1
- package/dist/node/initiatives/HubInitiative.js +0 -13
- package/dist/node/initiatives/HubInitiative.js.map +1 -1
- package/dist/node/permissions/HubPermissionPolicies.js +75 -0
- package/dist/node/permissions/HubPermissionPolicies.js.map +1 -0
- package/dist/node/permissions/_internal/checkAlphaGating.js +31 -0
- package/dist/node/permissions/_internal/checkAlphaGating.js.map +1 -0
- package/dist/node/permissions/_internal/checkAssertion.js +194 -0
- package/dist/node/permissions/_internal/checkAssertion.js.map +1 -0
- package/dist/node/permissions/_internal/checkAssertions.js +24 -0
- package/dist/node/permissions/_internal/checkAssertions.js.map +1 -0
- package/dist/node/permissions/_internal/checkAuthentication.js +32 -0
- package/dist/node/permissions/_internal/checkAuthentication.js.map +1 -0
- package/dist/node/permissions/_internal/checkEdit.js +42 -0
- package/dist/node/permissions/_internal/checkEdit.js.map +1 -0
- package/dist/node/permissions/_internal/checkEntityPolicy.js +72 -0
- package/dist/node/permissions/_internal/checkEntityPolicy.js.map +1 -0
- package/dist/node/permissions/_internal/checkLicense.js +37 -0
- package/dist/node/permissions/_internal/checkLicense.js.map +1 -0
- package/dist/node/permissions/_internal/checkOwner.js +40 -0
- package/dist/node/permissions/_internal/checkOwner.js.map +1 -0
- package/dist/node/permissions/_internal/checkPrivileges.js +35 -0
- package/dist/node/permissions/_internal/checkPrivileges.js.map +1 -0
- package/dist/node/permissions/_internal/getPolicyResponseCode.js +51 -0
- package/dist/node/permissions/_internal/getPolicyResponseCode.js.map +1 -0
- package/dist/node/permissions/checkPermission.js +93 -0
- package/dist/node/permissions/checkPermission.js.map +1 -0
- package/dist/node/permissions/index.js +8 -0
- package/dist/node/permissions/index.js.map +1 -0
- package/dist/node/permissions/types/HubLicense.js +3 -0
- package/dist/node/permissions/types/HubLicense.js.map +1 -0
- package/dist/node/permissions/types/IAccessResponse.js +3 -0
- package/dist/node/permissions/types/IAccessResponse.js.map +1 -0
- package/dist/node/permissions/types/IEntityPermissionPolicy.js +3 -0
- package/dist/node/permissions/types/IEntityPermissionPolicy.js.map +1 -0
- package/dist/node/permissions/types/IPermissionPolicy.js +3 -0
- package/dist/node/permissions/types/IPermissionPolicy.js.map +1 -0
- package/dist/node/permissions/types/IPolicyCheck.js +3 -0
- package/dist/node/permissions/types/IPolicyCheck.js.map +1 -0
- package/dist/node/permissions/types/Permission.js +21 -0
- package/dist/node/permissions/types/Permission.js.map +1 -0
- package/dist/node/permissions/types/PlatformPrivilege.js +7 -0
- package/dist/node/permissions/types/PlatformPrivilege.js.map +1 -0
- package/dist/node/permissions/types/PolicyResponse.js +6 -0
- package/dist/node/permissions/types/PolicyResponse.js.map +1 -0
- package/dist/node/permissions/types/index.js +12 -0
- package/dist/node/permissions/types/index.js.map +1 -0
- package/dist/node/permissions/utils.js +31 -0
- package/dist/node/permissions/utils.js.map +1 -0
- package/dist/node/projects/HubProject.js +0 -13
- package/dist/node/projects/HubProject.js.map +1 -1
- package/dist/node/projects/_internal/ProjectPermissionPolicies.js +44 -0
- package/dist/node/projects/_internal/ProjectPermissionPolicies.js.map +1 -0
- package/dist/node/projects/defaults.js +1 -0
- package/dist/node/projects/defaults.js.map +1 -1
- package/dist/node/search/Catalog.js.map +1 -1
- package/dist/node/sites/HubSite.js +0 -13
- package/dist/node/sites/HubSite.js.map +1 -1
- package/dist/node/sites/HubSites.js +10 -12
- package/dist/node/sites/HubSites.js.map +1 -1
- package/dist/node/sites/_internal/SitesPermissionPolicies.js +47 -0
- package/dist/node/sites/_internal/SitesPermissionPolicies.js.map +1 -0
- package/dist/node/sites/_internal/applyPermissionMigration.js +56 -0
- package/dist/node/sites/_internal/applyPermissionMigration.js.map +1 -0
- package/dist/types/ArcGISContext.d.ts +33 -1
- package/dist/types/ArcGISContextManager.d.ts +6 -1
- package/dist/types/content/_internal.d.ts +15 -5
- package/dist/types/core/HubItemEntity.d.ts +29 -4
- package/dist/types/core/behaviors/IWithPermissionBehavior.d.ts +23 -35
- package/dist/types/core/behaviors/IWithStoreBehavior.d.ts +10 -10
- package/dist/types/core/fetchHubEntity.d.ts +11 -0
- package/dist/types/core/getTypeFromEntity.d.ts +8 -0
- package/dist/types/core/index.d.ts +2 -1
- package/dist/types/core/traits/IWithPermissions.d.ts +3 -3
- package/dist/types/core/types/HubEntity.d.ts +5 -0
- package/dist/types/core/types/HubEntityType.d.ts +1 -0
- package/dist/types/core/types/IHubContent.d.ts +2 -1
- package/dist/types/core/types/IHubItemEntity.d.ts +19 -2
- package/dist/types/core/types/ISystemStatus.d.ts +22 -0
- package/dist/types/core/types/index.d.ts +3 -2
- package/dist/types/index.d.ts +1 -0
- package/dist/types/initiatives/HubInitiative.d.ts +1 -7
- package/dist/types/permissions/HubPermissionPolicies.d.ts +11 -0
- package/dist/types/permissions/_internal/checkAlphaGating.d.ts +10 -0
- package/dist/types/permissions/_internal/checkAssertion.d.ts +11 -0
- package/dist/types/permissions/_internal/checkAssertions.d.ts +10 -0
- package/dist/types/permissions/_internal/checkAuthentication.d.ts +10 -0
- package/dist/types/permissions/_internal/checkEdit.d.ts +10 -0
- package/dist/types/permissions/_internal/checkEntityPolicy.d.ts +9 -0
- package/dist/types/permissions/_internal/checkLicense.d.ts +10 -0
- package/dist/types/permissions/_internal/checkOwner.d.ts +10 -0
- package/dist/types/permissions/_internal/checkPrivileges.d.ts +10 -0
- package/dist/types/permissions/_internal/getPolicyResponseCode.d.ts +7 -0
- package/dist/types/permissions/checkPermission.d.ts +10 -0
- package/dist/types/permissions/index.d.ts +4 -0
- package/dist/types/permissions/types/HubLicense.d.ts +4 -0
- package/dist/types/permissions/types/IAccessResponse.d.ts +34 -0
- package/dist/types/permissions/types/IEntityPermissionPolicy.d.ts +22 -0
- package/dist/types/permissions/types/IPermissionPolicy.d.ts +57 -0
- package/dist/types/permissions/types/IPolicyCheck.d.ts +25 -0
- package/dist/types/permissions/types/Permission.d.ts +17 -0
- package/dist/types/permissions/types/PlatformPrivilege.d.ts +5 -0
- package/dist/types/permissions/types/PolicyResponse.d.ts +4 -0
- package/dist/types/permissions/types/index.d.ts +8 -0
- package/dist/types/permissions/utils.d.ts +18 -0
- package/dist/types/projects/HubProject.d.ts +1 -7
- package/dist/types/projects/_internal/ProjectPermissionPolicies.d.ts +8 -0
- package/dist/types/sites/HubSite.d.ts +1 -7
- package/dist/types/sites/HubSites.d.ts +1 -1
- package/dist/types/sites/_internal/SitesPermissionPolicies.d.ts +11 -0
- package/dist/types/sites/_internal/applyPermissionMigration.d.ts +7 -0
- package/package.json +1 -1
- package/dist/esm/core/PermissionManager.js +0 -60
- package/dist/esm/core/PermissionManager.js.map +0 -1
- package/dist/esm/core/types/IHubPermission.js +0 -1
- package/dist/esm/core/types/IHubPermission.js.map +0 -1
- package/dist/node/core/PermissionManager.js +0 -64
- package/dist/node/core/PermissionManager.js.map +0 -1
- package/dist/node/core/types/IHubPermission.js.map +0 -1
- package/dist/types/core/PermissionManager.d.ts +0 -43
- package/dist/types/core/types/IHubPermission.d.ts +0 -23
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
const tslib_1 = require("tslib");
|
|
4
|
+
tslib_1.__exportStar(require("./HubEntity"), exports);
|
|
5
|
+
tslib_1.__exportStar(require("./HubEntityType"), exports);
|
|
4
6
|
tslib_1.__exportStar(require("./IHubContent"), exports);
|
|
5
7
|
tslib_1.__exportStar(require("./IHubContentEnrichments"), exports);
|
|
6
8
|
tslib_1.__exportStar(require("./IHubEntityBase"), exports);
|
|
@@ -16,7 +18,6 @@ tslib_1.__exportStar(require("./IHubSiteTheme"), exports);
|
|
|
16
18
|
tslib_1.__exportStar(require("./IHubTimeline"), exports);
|
|
17
19
|
tslib_1.__exportStar(require("./IItemEnrichments"), exports);
|
|
18
20
|
tslib_1.__exportStar(require("./IServerEnrichments"), exports);
|
|
21
|
+
tslib_1.__exportStar(require("./ISystemStatus"), exports);
|
|
19
22
|
tslib_1.__exportStar(require("./types"), exports);
|
|
20
|
-
tslib_1.__exportStar(require("./IHubPermission"), exports);
|
|
21
|
-
tslib_1.__exportStar(require("../traits/IWithViewSettings"), exports);
|
|
22
23
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/types/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B;AAC9B,mEAAyC;AACzC,2DAAiC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/types/index.ts"],"names":[],"mappings":";;;AAAA,sDAA4B;AAC5B,0DAAgC;AAChC,wDAA8B;AAC9B,mEAAyC;AACzC,2DAAiC;AACjC,sDAA4B;AAC5B,sDAA4B;AAC5B,2DAAiC;AACjC,2DAAiC;AACjC,uDAA6B;AAC7B,qDAA2B;AAC3B,wDAA8B;AAC9B,qDAA2B;AAC3B,0DAAgC;AAChC,yDAA+B;AAC/B,6DAAmC;AACnC,+DAAqC;AACrC,0DAAgC;AAChC,kDAAwB"}
|
package/dist/node/index.js
CHANGED
|
@@ -23,6 +23,7 @@ tslib_1.__exportStar(require("./models"), exports);
|
|
|
23
23
|
tslib_1.__exportStar(require("./objects"), exports);
|
|
24
24
|
tslib_1.__exportStar(require("./org"), exports);
|
|
25
25
|
tslib_1.__exportStar(require("./pages"), exports);
|
|
26
|
+
tslib_1.__exportStar(require("./permissions"), exports);
|
|
26
27
|
tslib_1.__exportStar(require("./projects"), exports);
|
|
27
28
|
tslib_1.__exportStar(require("./request"), exports);
|
|
28
29
|
tslib_1.__exportStar(require("./resources"), exports);
|
package/dist/node/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;gBACgB;AAChB,0BAA0B;;;;AAE1B,mDAAyB;AACzB,gDAAsB;AACtB,0DAAgC;AAChC,iEAAuC;AACvC,iDAAuB;AACvB,uDAA6B;AAC7B,oDAA0B;AAC1B,iDAAuB;AACvB,sDAA4B;AAC5B,mDAAyB;AACzB,mDAAyB;AACzB,iDAAuB;AACvB,wDAA8B;AAC9B,kDAAwB;AACxB,mDAAyB;AACzB,oDAA0B;AAC1B,gDAAsB;AACtB,kDAAwB;AACxB,qDAA2B;AAC3B,oDAA0B;AAC1B,sDAA4B;AAC5B,mDAAyB;AACzB,kDAAwB;AACxB,oDAA0B;AAC1B,kDAAwB;AACxB,iDAAuB;AACvB,kDAAwB;AACxB,iDAAuB;AACvB,kDAAwB;AAExB,qDAA8C;AAKrC,yBALF,wBAAc,CAKE;AAJvB,qDAA8C;AAIrB,yBAJlB,wBAAc,CAIkB;AAHvC,yCAAkC;AAGO,mBAHlC,kBAAQ,CAGkC;AACjD,6BAAkC;AAAzB,4FAAA,IAAI,OAAA;AAAE,4FAAA,IAAI,OAAA"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;gBACgB;AAChB,0BAA0B;;;;AAE1B,mDAAyB;AACzB,gDAAsB;AACtB,0DAAgC;AAChC,iEAAuC;AACvC,iDAAuB;AACvB,uDAA6B;AAC7B,oDAA0B;AAC1B,iDAAuB;AACvB,sDAA4B;AAC5B,mDAAyB;AACzB,mDAAyB;AACzB,iDAAuB;AACvB,wDAA8B;AAC9B,kDAAwB;AACxB,mDAAyB;AACzB,oDAA0B;AAC1B,gDAAsB;AACtB,kDAAwB;AACxB,wDAA8B;AAC9B,qDAA2B;AAC3B,oDAA0B;AAC1B,sDAA4B;AAC5B,mDAAyB;AACzB,kDAAwB;AACxB,oDAA0B;AAC1B,kDAAwB;AACxB,iDAAuB;AACvB,kDAAwB;AACxB,iDAAuB;AACvB,kDAAwB;AAExB,qDAA8C;AAKrC,yBALF,wBAAc,CAKE;AAJvB,qDAA8C;AAIrB,yBAJlB,wBAAc,CAIkB;AAHvC,yCAAkC;AAGO,mBAHlC,kBAAQ,CAGkC;AACjD,6BAAkC;AAAzB,4FAAA,IAAI,OAAA;AAAE,4FAAA,IAAI,OAAA"}
|
|
@@ -2,7 +2,6 @@
|
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.HubInitiative = void 0;
|
|
4
4
|
const defaults_1 = require("./defaults");
|
|
5
|
-
const core_1 = require("../core");
|
|
6
5
|
const HubInitiatives_1 = require("./HubInitiatives");
|
|
7
6
|
const Catalog_1 = require("../search/Catalog");
|
|
8
7
|
const HubItemEntity_1 = require("../core/HubItemEntity");
|
|
@@ -18,7 +17,6 @@ class HubInitiative extends HubItemEntity_1.HubItemEntity {
|
|
|
18
17
|
constructor(entity, context) {
|
|
19
18
|
super(entity, context);
|
|
20
19
|
this._catalog = Catalog_1.Catalog.fromJson(entity.catalog, this.context);
|
|
21
|
-
this._permissionManager = core_1.PermissionManager.fromJson(entity.permissions, this.context);
|
|
22
20
|
}
|
|
23
21
|
/**
|
|
24
22
|
* Catalog instance for this Initiative. Note: Do not hold direct references to this object; always access it from the Initiative.
|
|
@@ -27,13 +25,6 @@ class HubInitiative extends HubItemEntity_1.HubItemEntity {
|
|
|
27
25
|
get catalog() {
|
|
28
26
|
return this._catalog;
|
|
29
27
|
}
|
|
30
|
-
/**
|
|
31
|
-
* PermissionManager instance for this Initiative. Note: Do not hold direct references to this object; always access it from the Initiative.
|
|
32
|
-
* @returns PermissionManager
|
|
33
|
-
*/
|
|
34
|
-
get permissions() {
|
|
35
|
-
return this._permissionManager;
|
|
36
|
-
}
|
|
37
28
|
/**
|
|
38
29
|
* Create an instance from an IHubInitiative object
|
|
39
30
|
* @param json - JSON object to create a HubInitiative from
|
|
@@ -121,9 +112,6 @@ class HubInitiative extends HubItemEntity_1.HubItemEntity {
|
|
|
121
112
|
if (changes.catalog) {
|
|
122
113
|
this._catalog = Catalog_1.Catalog.fromJson(this.entity.catalog, this.context);
|
|
123
114
|
}
|
|
124
|
-
if (changes.permissions) {
|
|
125
|
-
this._permissionManager = core_1.PermissionManager.fromJson(this.entity.permissions, this.context);
|
|
126
|
-
}
|
|
127
115
|
}
|
|
128
116
|
/**
|
|
129
117
|
* Save the HubInitiative to the backing store.
|
|
@@ -136,7 +124,6 @@ class HubInitiative extends HubItemEntity_1.HubItemEntity {
|
|
|
136
124
|
}
|
|
137
125
|
// get the catalog, and permission configs
|
|
138
126
|
this.entity.catalog = this._catalog.toJson();
|
|
139
|
-
this.entity.permissions = this._permissionManager.toJson();
|
|
140
127
|
if (this.entity.id) {
|
|
141
128
|
// update it
|
|
142
129
|
this.entity = await HubInitiatives_1.updateInitiative(this.entity, this.context.userRequestOptions);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"HubInitiative.js","sourceRoot":"","sources":["../../../src/initiatives/HubInitiative.ts"],"names":[],"mappings":";;;AAAA,yCAAgD;
|
|
1
|
+
{"version":3,"file":"HubInitiative.js","sourceRoot":"","sources":["../../../src/initiatives/HubInitiative.ts"],"names":[],"mappings":";;;AAAA,yCAAgD;AAahD,qDAK0B;AAE1B,+CAA4C;AAE5C,yDAAsD;AAEtD;;GAEG;AACH,MAAa,aACX,SAAQ,6BAA6B;IASrC;;;;OAIG;IACH,YAAoB,MAAsB,EAAE,OAAuB;QACjE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CACb,IAA6B,EAC7B,OAAuB;QAEvB,6CAA6C;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,iBAA0C,EAC1C,OAAuB,EACvB,OAAgB,KAAK;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC5D,sCAAsC;QACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,IAAI,EAAE;YACR,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;SACvB;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,UAAkB,EAClB,OAAuB;QAEvB,sBAAsB;QACtB,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,gCAAe,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACzE,sDAAsD;YACtD,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAChD;QAAC,OAAO,EAAE,EAAE;YACX,IACG,EAAY,CAAC,OAAO;gBACrB,oDAAoD,EACpD;gBACA,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;aAC1C;iBAAM;gBACL,MAAM,EAAE,CAAC;aACV;SACF;IACH,CAAC;IAED;;;;;OAKG;IACH,gCAAgC;IAChC,uBAAuB;IACvB,4BAA4B;IAC5B,2CAA2C;IAC3C,8BAA8B;IAC9B,6BAA6B;IAC7B,wEAAwE;IACxE,IAAI;IAEI,MAAM,CAAC,aAAa,CAC1B,iBAA0C,EAC1C,OAAuB;QAEvB,+BAA+B;QAC/B,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE;YAChC,iBAAiB,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SACrD;QACD,uCAAuC;QACvC,MAAM,IAAI,GAAG,gCACR,6BAAkB,GAClB,iBAAiB,CACH,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAgC;QACrC,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;SACxD;QACD,qCAAqC;QACrC,IAAI,CAAC,MAAM,mCAAQ,IAAI,CAAC,MAAM,GAAK,OAAO,CAAE,CAAC;QAE7C,4BAA4B;QAC5B,IAAI,OAAO,CAAC,OAAO,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACrE;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;SACxD;QACD,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAE7C,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;YAClB,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,iCAAgB,CAClC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;aAAM;YACL,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,iCAAgB,CAClC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;QAED,yCAAyC;QACzC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAExB,OAAO;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;SACxD;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,wBAAwB;QACxB,MAAM,iCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,CAAC;CACF;AAxLD,sCAwLC"}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.getPermissionPolicy = exports.HubPermissionsPolicies = void 0;
|
|
4
|
+
const ProjectPermissionPolicies_1 = require("../projects/_internal/ProjectPermissionPolicies");
|
|
5
|
+
const SitesPermissionPolicies_1 = require("../sites/_internal/SitesPermissionPolicies");
|
|
6
|
+
// Examples of possible Permission Policies
|
|
7
|
+
// const DiscussionPermissionPolicies: IPermissionPolicy[] = [
|
|
8
|
+
// {
|
|
9
|
+
// permission: "discussions:channel:create",
|
|
10
|
+
// authenticated: true,
|
|
11
|
+
// subsystems: ["discussions"],
|
|
12
|
+
// licenses: ["hub-basic", "hub-premium"],
|
|
13
|
+
// },
|
|
14
|
+
// {
|
|
15
|
+
// permission: "discussions:channel:createprivate",
|
|
16
|
+
// subsystems: ["discussions"],
|
|
17
|
+
// authenticated: true,
|
|
18
|
+
// licenses: ["hub-basic", "hub-premium"],
|
|
19
|
+
// assertions: [
|
|
20
|
+
// {
|
|
21
|
+
// property: "entity:group.typekeywords",
|
|
22
|
+
// assertion: "without",
|
|
23
|
+
// value: "cannotDiscuss",
|
|
24
|
+
// },
|
|
25
|
+
// {
|
|
26
|
+
// property: "context:currentUser",
|
|
27
|
+
// assertion: "is-group-admin",
|
|
28
|
+
// value: "entity:group.id",
|
|
29
|
+
// },
|
|
30
|
+
// ],
|
|
31
|
+
// },
|
|
32
|
+
// {
|
|
33
|
+
// permission: "discussions:channel:create",
|
|
34
|
+
// subsystems: ["discussions"],
|
|
35
|
+
// authenticated: true,
|
|
36
|
+
// licenses: ["hub-basic", "hub-premium"],
|
|
37
|
+
// assertions: [
|
|
38
|
+
// {
|
|
39
|
+
// property: "entity:typeKeywords",
|
|
40
|
+
// assertion: "without",
|
|
41
|
+
// value: "cannotDiscuss",
|
|
42
|
+
// },
|
|
43
|
+
// ],
|
|
44
|
+
// },
|
|
45
|
+
// {
|
|
46
|
+
// permission: "discussions:post:create",
|
|
47
|
+
// subsystems: ["discussions"],
|
|
48
|
+
// authenticated: true,
|
|
49
|
+
// licenses: ["hub-basic", "hub-premium"],
|
|
50
|
+
// assertions: [
|
|
51
|
+
// {
|
|
52
|
+
// property: "entity:typeKeywords",
|
|
53
|
+
// assertion: "without",
|
|
54
|
+
// value: "cannotDiscuss",
|
|
55
|
+
// },
|
|
56
|
+
// ],
|
|
57
|
+
// },
|
|
58
|
+
// ];
|
|
59
|
+
/**
|
|
60
|
+
* All the permission policies for the Hub
|
|
61
|
+
*/
|
|
62
|
+
exports.HubPermissionsPolicies = [
|
|
63
|
+
...SitesPermissionPolicies_1.SitesPermissionPolicies,
|
|
64
|
+
...ProjectPermissionPolicies_1.ProjectPermissionPolicies,
|
|
65
|
+
];
|
|
66
|
+
/**
|
|
67
|
+
* Get the policies defined for a specific permission
|
|
68
|
+
* @param permission
|
|
69
|
+
* @returns
|
|
70
|
+
*/
|
|
71
|
+
function getPermissionPolicy(permission) {
|
|
72
|
+
return exports.HubPermissionsPolicies.find((p) => p.permission === permission);
|
|
73
|
+
}
|
|
74
|
+
exports.getPermissionPolicy = getPermissionPolicy;
|
|
75
|
+
//# sourceMappingURL=HubPermissionPolicies.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"HubPermissionPolicies.js","sourceRoot":"","sources":["../../../src/permissions/HubPermissionPolicies.ts"],"names":[],"mappings":";;;AAAA,+FAA4F;AAC5F,wFAAqF;AAIrF,2CAA2C;AAC3C,8DAA8D;AAC9D,MAAM;AACN,gDAAgD;AAChD,2BAA2B;AAC3B,mCAAmC;AACnC,8CAA8C;AAC9C,OAAO;AACP,MAAM;AACN,uDAAuD;AACvD,mCAAmC;AACnC,2BAA2B;AAC3B,8CAA8C;AAC9C,oBAAoB;AACpB,UAAU;AACV,iDAAiD;AACjD,gCAAgC;AAChC,kCAAkC;AAClC,WAAW;AACX,UAAU;AACV,2CAA2C;AAC3C,uCAAuC;AACvC,oCAAoC;AACpC,WAAW;AACX,SAAS;AACT,OAAO;AACP,MAAM;AACN,gDAAgD;AAChD,mCAAmC;AACnC,2BAA2B;AAC3B,8CAA8C;AAC9C,oBAAoB;AACpB,UAAU;AACV,2CAA2C;AAC3C,gCAAgC;AAChC,kCAAkC;AAClC,WAAW;AACX,SAAS;AACT,OAAO;AACP,MAAM;AACN,6CAA6C;AAC7C,mCAAmC;AACnC,2BAA2B;AAC3B,8CAA8C;AAC9C,oBAAoB;AACpB,UAAU;AACV,2CAA2C;AAC3C,gCAAgC;AAChC,kCAAkC;AAClC,WAAW;AACX,SAAS;AACT,OAAO;AACP,KAAK;AAEL;;GAEG;AACU,QAAA,sBAAsB,GAAwB;IACzD,GAAG,iDAAuB;IAC1B,GAAG,qDAAyB;CAC7B,CAAC;AAEF;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,UAAsB;IACxD,OAAO,8BAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;AACzE,CAAC;AAFD,kDAEC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkAlphaGating = void 0;
|
|
4
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
5
|
+
/**
|
|
6
|
+
* Validate entityOwner policy
|
|
7
|
+
* @param policy
|
|
8
|
+
* @param context
|
|
9
|
+
* @param entity
|
|
10
|
+
* @returns
|
|
11
|
+
*/
|
|
12
|
+
function checkAlphaGating(policy, context, entity) {
|
|
13
|
+
const checks = [];
|
|
14
|
+
// Only return a check if the policy is defined
|
|
15
|
+
if (policy.alpha) {
|
|
16
|
+
const result = context.isAlphaOrg
|
|
17
|
+
? "granted"
|
|
18
|
+
: "not-alpha-org";
|
|
19
|
+
// create the check
|
|
20
|
+
const check = {
|
|
21
|
+
name: `user in alpha org`,
|
|
22
|
+
value: context.hubLicense,
|
|
23
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(result),
|
|
24
|
+
response: result,
|
|
25
|
+
};
|
|
26
|
+
checks.push(check);
|
|
27
|
+
}
|
|
28
|
+
return checks;
|
|
29
|
+
}
|
|
30
|
+
exports.checkAlphaGating = checkAlphaGating;
|
|
31
|
+
//# sourceMappingURL=checkAlphaGating.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkAlphaGating.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAlphaGating.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,KAAK,EAAE;QAChB,MAAM,MAAM,GAAmB,OAAO,CAAC,UAAU;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,eAAe,CAAC;QAEpB,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAvBD,4CAuBC"}
|
|
@@ -0,0 +1,194 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkAssertion = void 0;
|
|
4
|
+
const objects_1 = require("../../objects");
|
|
5
|
+
const utils_1 = require("../../utils");
|
|
6
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
7
|
+
/**
|
|
8
|
+
* Check a specific EntityAssertion
|
|
9
|
+
* Exported purely for testing. Not exported from the package.
|
|
10
|
+
* @param assertion
|
|
11
|
+
* @param entity
|
|
12
|
+
* @param context
|
|
13
|
+
* @returns
|
|
14
|
+
*/
|
|
15
|
+
function checkAssertion(assertion, entity, context) {
|
|
16
|
+
let response = "granted";
|
|
17
|
+
// construct a hash to look up properties in
|
|
18
|
+
const lookupHash = { entity, context };
|
|
19
|
+
// get the property value
|
|
20
|
+
const propertyLookup = parseProperty(assertion.property);
|
|
21
|
+
const propValue = objects_1.getProp(lookupHash, propertyLookup.path);
|
|
22
|
+
// If prop is undefined, then the assertion fails
|
|
23
|
+
if (propValue === undefined) {
|
|
24
|
+
response = "assertion-property-not-found";
|
|
25
|
+
}
|
|
26
|
+
let val = assertion.value;
|
|
27
|
+
if (typeof val === "string" && val.indexOf(":") > -1) {
|
|
28
|
+
const valueLookup = parseProperty(assertion.value);
|
|
29
|
+
val = objects_1.getProp(lookupHash, valueLookup.path);
|
|
30
|
+
if (val === undefined) {
|
|
31
|
+
response = "assertion-property-not-found";
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
// if we have the two values, we can make the assertion
|
|
35
|
+
if (propValue !== undefined && val !== undefined) {
|
|
36
|
+
// TODO: Should these fns return IPolicyCheck? or just the response?
|
|
37
|
+
// TODO: Should these fns inspect the type internally? or switch case here?
|
|
38
|
+
switch (assertion.type) {
|
|
39
|
+
case "eq":
|
|
40
|
+
case "neq":
|
|
41
|
+
response = equalityAssertions(assertion, propValue, val);
|
|
42
|
+
break;
|
|
43
|
+
case "contains":
|
|
44
|
+
case "without":
|
|
45
|
+
response = arrayAssertions(assertion, propValue, val);
|
|
46
|
+
break;
|
|
47
|
+
case "included-in":
|
|
48
|
+
response = includeAssertions(assertion, propValue, val);
|
|
49
|
+
break;
|
|
50
|
+
case "gt":
|
|
51
|
+
case "lt":
|
|
52
|
+
response = rangeAssertions(assertion, propValue, val);
|
|
53
|
+
break;
|
|
54
|
+
case "is-group-admin":
|
|
55
|
+
case "is-group-member":
|
|
56
|
+
case "is-group-owner":
|
|
57
|
+
response = groupAssertions(assertion, propValue, val, context);
|
|
58
|
+
break;
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
const result = {
|
|
62
|
+
name: `assertion: ${assertion.property} ${assertion.type} ${assertion.value}`,
|
|
63
|
+
value: propValue,
|
|
64
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(response),
|
|
65
|
+
response,
|
|
66
|
+
};
|
|
67
|
+
return result;
|
|
68
|
+
}
|
|
69
|
+
exports.checkAssertion = checkAssertion;
|
|
70
|
+
function groupAssertions(assertion, propValue, val, context) {
|
|
71
|
+
let response = "granted";
|
|
72
|
+
const userGroups = context.currentUser.groups || [];
|
|
73
|
+
// Default the groups to all groups the user is a member of
|
|
74
|
+
let groups = utils_1.mapBy("id", userGroups);
|
|
75
|
+
let failResponse = "user-not-group-member";
|
|
76
|
+
if (assertion.type === "is-group-member") {
|
|
77
|
+
failResponse = "user-not-group-member";
|
|
78
|
+
// no need to filter - this is anyone who's a member
|
|
79
|
+
groups = filterByMembershipType(userGroups, ["admin", "owner", "member"]);
|
|
80
|
+
}
|
|
81
|
+
if (assertion.type === "is-group-admin") {
|
|
82
|
+
failResponse = "user-not-group-manager";
|
|
83
|
+
groups = filterByMembershipType(userGroups, ["admin", "owner"]);
|
|
84
|
+
}
|
|
85
|
+
if (assertion.type === "is-group-owner") {
|
|
86
|
+
failResponse = "user-not-group-owner";
|
|
87
|
+
groups = filterByMembershipType(userGroups, ["owner"]);
|
|
88
|
+
}
|
|
89
|
+
// now, see if the val is in the groups array
|
|
90
|
+
if (!groups.includes(val)) {
|
|
91
|
+
// send a specific response
|
|
92
|
+
response = failResponse;
|
|
93
|
+
}
|
|
94
|
+
return response;
|
|
95
|
+
}
|
|
96
|
+
function filterByMembershipType(groups, types) {
|
|
97
|
+
return groups.reduce((acc, grp) => {
|
|
98
|
+
if (types.includes(grp.userMembership.memberType)) {
|
|
99
|
+
acc.push(grp.id);
|
|
100
|
+
}
|
|
101
|
+
return acc;
|
|
102
|
+
}, []);
|
|
103
|
+
}
|
|
104
|
+
/**
|
|
105
|
+
* Is the propValue included in the val array?
|
|
106
|
+
* @param assertion
|
|
107
|
+
* @param propValue
|
|
108
|
+
* @param val
|
|
109
|
+
* @returns
|
|
110
|
+
*/
|
|
111
|
+
function includeAssertions(assertion, propValue, val) {
|
|
112
|
+
let response = "granted";
|
|
113
|
+
if (!Array.isArray(val)) {
|
|
114
|
+
response = "property-not-array";
|
|
115
|
+
}
|
|
116
|
+
else {
|
|
117
|
+
const arrayVal = val;
|
|
118
|
+
if (!arrayVal.includes(propValue)) {
|
|
119
|
+
response = "array-missing-required-value";
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
return response;
|
|
123
|
+
}
|
|
124
|
+
/**
|
|
125
|
+
* Is the propValue "eq" or "neq" to the val?
|
|
126
|
+
* @param assertion
|
|
127
|
+
* @param propValue
|
|
128
|
+
* @param val
|
|
129
|
+
* @returns
|
|
130
|
+
*/
|
|
131
|
+
function equalityAssertions(assertion, propValue, val) {
|
|
132
|
+
let response = "granted";
|
|
133
|
+
if (assertion.type === "eq" && propValue !== val) {
|
|
134
|
+
response = "assertion-failed";
|
|
135
|
+
}
|
|
136
|
+
else if (assertion.type === "neq" && propValue === val) {
|
|
137
|
+
response = "assertion-failed";
|
|
138
|
+
}
|
|
139
|
+
return response;
|
|
140
|
+
}
|
|
141
|
+
/**
|
|
142
|
+
* Is the propValue "gt" or "lt" to the val?
|
|
143
|
+
* @param assertion
|
|
144
|
+
* @param propValue
|
|
145
|
+
* @param val
|
|
146
|
+
* @returns
|
|
147
|
+
*/
|
|
148
|
+
function rangeAssertions(assertion, propValue, val) {
|
|
149
|
+
let response = "granted";
|
|
150
|
+
if (typeof propValue !== "number" || typeof val !== "number") {
|
|
151
|
+
response = "assertion-requires-numeric-values";
|
|
152
|
+
}
|
|
153
|
+
if (assertion.type === "gt" && propValue < val) {
|
|
154
|
+
response = "assertion-failed";
|
|
155
|
+
}
|
|
156
|
+
else if (assertion.type === "lt" && propValue > val) {
|
|
157
|
+
response = "assertion-failed";
|
|
158
|
+
}
|
|
159
|
+
return response;
|
|
160
|
+
}
|
|
161
|
+
/**
|
|
162
|
+
* Does the propValue array "contain" or "without" the val?
|
|
163
|
+
* @param assertion
|
|
164
|
+
* @param propValue
|
|
165
|
+
* @param val
|
|
166
|
+
* @returns
|
|
167
|
+
*/
|
|
168
|
+
function arrayAssertions(assertion, propValue, val) {
|
|
169
|
+
let response = "granted";
|
|
170
|
+
if (!Array.isArray(propValue)) {
|
|
171
|
+
response = "property-not-array";
|
|
172
|
+
}
|
|
173
|
+
else {
|
|
174
|
+
const arrayProp = propValue;
|
|
175
|
+
const arrayContainsValue = arrayProp.includes(val);
|
|
176
|
+
if (assertion.type === "contains" && !arrayContainsValue) {
|
|
177
|
+
response = "array-missing-required-value";
|
|
178
|
+
}
|
|
179
|
+
if (assertion.type === "without" && arrayContainsValue) {
|
|
180
|
+
response = "array-contains-invalid-value";
|
|
181
|
+
}
|
|
182
|
+
}
|
|
183
|
+
return response;
|
|
184
|
+
}
|
|
185
|
+
function parseProperty(property) {
|
|
186
|
+
let root = "entity";
|
|
187
|
+
let path = `entity.${property}`;
|
|
188
|
+
if (property.indexOf(":") > -1) {
|
|
189
|
+
root = property.split(":")[0];
|
|
190
|
+
path = `${root}.${property.split(":")[1]}`;
|
|
191
|
+
}
|
|
192
|
+
return { root, path };
|
|
193
|
+
}
|
|
194
|
+
//# sourceMappingURL=checkAssertion.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkAssertion.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAssertion.ts"],"names":[],"mappings":";;;AAEA,2CAAwC;AACxC,uCAAoC;AAEpC,mEAAgE;AAEhE;;;;;;;GAOG;AACH,SAAgB,cAAc,CAC5B,SAA2B,EAC3B,MAA2B,EAC3B,OAAuB;IAEvB,IAAI,QAAQ,GAAmB,SAAS,CAAC;IACzC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvC,yBAAyB;IACzB,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,iBAAO,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAE3D,iDAAiD;IACjD,IAAI,SAAS,KAAK,SAAS,EAAE;QAC3B,QAAQ,GAAG,8BAA8B,CAAC;KAC3C;IAED,IAAI,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE;QACpD,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,GAAG,GAAG,iBAAO,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE;YACrB,QAAQ,GAAG,8BAA8B,CAAC;SAC3C;KACF;IAED,uDAAuD;IACvD,IAAI,SAAS,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE;QAChD,oEAAoE;QACpE,2EAA2E;QAC3E,QAAQ,SAAS,CAAC,IAAI,EAAE;YACtB,KAAK,IAAI,CAAC;YACV,KAAK,KAAK;gBACR,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBACzD,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,SAAS;gBACZ,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,aAAa;gBAChB,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,IAAI;gBACP,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBACtD,MAAM;YACR,KAAK,gBAAgB,CAAC;YACtB,KAAK,iBAAiB,CAAC;YACvB,KAAK,gBAAgB;gBACnB,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM;SACT;KACF;IAED,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,cAAc,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE;QAC7E,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;QACrC,QAAQ;KACT,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AA9DD,wCA8DC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,SAAc,EACd,GAAQ,EACR,OAAuB;IAEvB,IAAI,QAAQ,GAAmB,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpD,2DAA2D;IAC3D,IAAI,MAAM,GAAG,aAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,IAAI,YAAY,GAAmB,uBAAuB,CAAC;IAE3D,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB,EAAE;QACxC,YAAY,GAAG,uBAAuB,CAAC;QACvC,oDAAoD;QACpD,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;KAC3E;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE;QACvC,YAAY,GAAG,wBAAwB,CAAC;QACxC,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;KACjE;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE;QACvC,YAAY,GAAG,sBAAsB,CAAC;QACtC,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;KACxD;IAED,6CAA6C;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACzB,2BAA2B;QAC3B,QAAQ,GAAG,YAAY,CAAC;KACzB;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAgB,EAAE,KAAe;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE;YACjD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAClB;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,SAA2B,EAC3B,SAAc,EACd,GAAQ;IAER,IAAI,QAAQ,GAAmB,SAAS,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACvB,QAAQ,GAAG,oBAAoB,CAAC;KACjC;SAAM;QACL,MAAM,QAAQ,GAAG,GAAY,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YACjC,QAAQ,GAAG,8BAA8B,CAAC;SAC3C;KACF;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,SAA2B,EAC3B,SAAc,EACd,GAAQ;IAER,IAAI,QAAQ,GAAmB,SAAS,CAAC;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,KAAK,GAAG,EAAE;QAChD,QAAQ,GAAG,kBAAkB,CAAC;KAC/B;SAAM,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,KAAK,GAAG,EAAE;QACxD,QAAQ,GAAG,kBAAkB,CAAC;KAC/B;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,SAA2B,EAC3B,SAAc,EACd,GAAQ;IAER,IAAI,QAAQ,GAAmB,SAAS,CAAC;IAEzC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;QAC5D,QAAQ,GAAG,mCAAmC,CAAC;KAChD;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,GAAG,GAAG,EAAE;QAC9C,QAAQ,GAAG,kBAAkB,CAAC;KAC/B;SAAM,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,GAAG,GAAG,EAAE;QACrD,QAAQ,GAAG,kBAAkB,CAAC;KAC/B;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,SAA2B,EAC3B,SAAc,EACd,GAAQ;IAER,IAAI,QAAQ,GAAmB,SAAS,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;QAC7B,QAAQ,GAAG,oBAAoB,CAAC;KACjC;SAAM;QACL,MAAM,SAAS,GAAG,SAAkB,CAAC;QACrC,MAAM,kBAAkB,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,kBAAkB,EAAE;YACxD,QAAQ,GAAG,8BAA8B,CAAC;SAC3C;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,EAAE;YACtD,QAAQ,GAAG,8BAA8B,CAAC;SAC3C;KACF;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,IAAI,IAAI,GAAG,UAAU,QAAQ,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE;QAC9B,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkAssertions = void 0;
|
|
4
|
+
const checkAssertion_1 = require("./checkAssertion");
|
|
5
|
+
/**
|
|
6
|
+
* Validate entityOwner policy
|
|
7
|
+
* @param policy
|
|
8
|
+
* @param context
|
|
9
|
+
* @param entity
|
|
10
|
+
* @returns
|
|
11
|
+
*/
|
|
12
|
+
function checkAssertions(policy, context, entity) {
|
|
13
|
+
let checks = [];
|
|
14
|
+
// Only return a check if the policy is defined
|
|
15
|
+
if (policy.assertions) {
|
|
16
|
+
// iterate over the assertions, creating a check for each entry
|
|
17
|
+
checks = policy.assertions.map((assertion) => {
|
|
18
|
+
return checkAssertion_1.checkAssertion(assertion, entity, context);
|
|
19
|
+
});
|
|
20
|
+
}
|
|
21
|
+
return checks;
|
|
22
|
+
}
|
|
23
|
+
exports.checkAssertions = checkAssertions;
|
|
24
|
+
//# sourceMappingURL=checkAssertions.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkAssertions.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAssertions.ts"],"names":[],"mappings":";;;AAEA,qDAAkD;AAElD;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,IAAI,MAAM,GAAG,EAAoB,CAAC;IAClC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,UAAU,EAAE;QACrB,+DAA+D;QAC/D,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAA2B,EAAE,EAAE;YAC7D,OAAO,+BAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;KACJ;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAfD,0CAeC"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkAuthentication = void 0;
|
|
4
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
5
|
+
/**
|
|
6
|
+
* Validate authentication policy
|
|
7
|
+
* @param policy
|
|
8
|
+
* @param context
|
|
9
|
+
* @param entity
|
|
10
|
+
* @returns
|
|
11
|
+
*/
|
|
12
|
+
function checkAuthentication(policy, context, entity) {
|
|
13
|
+
const checks = [];
|
|
14
|
+
// Only return a check if the policy is defined
|
|
15
|
+
if (policy.hasOwnProperty("authenticated")) {
|
|
16
|
+
let response = "granted";
|
|
17
|
+
if (policy.authenticated && !context.isAuthenticated) {
|
|
18
|
+
response = "not-authenticated";
|
|
19
|
+
}
|
|
20
|
+
// create the check
|
|
21
|
+
const check = {
|
|
22
|
+
name: "authentication",
|
|
23
|
+
value: `required: ${policy.authenticated}`,
|
|
24
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(response),
|
|
25
|
+
response,
|
|
26
|
+
};
|
|
27
|
+
checks.push(check);
|
|
28
|
+
}
|
|
29
|
+
return checks;
|
|
30
|
+
}
|
|
31
|
+
exports.checkAuthentication = checkAuthentication;
|
|
32
|
+
//# sourceMappingURL=checkAuthentication.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkAuthentication.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAuthentication.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE;QAC1C,IAAI,QAAQ,GAAmB,SAAS,CAAC;QAEzC,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;YACpD,QAAQ,GAAG,mBAAmB,CAAC;SAChC;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,aAAa,MAAM,CAAC,aAAa,EAAE;YAC1C,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAzBD,kDAyBC"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkEdit = void 0;
|
|
4
|
+
const objects_1 = require("../../objects");
|
|
5
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
6
|
+
/**
|
|
7
|
+
* Validate entityEdit policy
|
|
8
|
+
* @param policy
|
|
9
|
+
* @param context
|
|
10
|
+
* @param entity
|
|
11
|
+
* @returns
|
|
12
|
+
*/
|
|
13
|
+
function checkEdit(policy, context, entity) {
|
|
14
|
+
const checks = [];
|
|
15
|
+
// Only return a check if the policy is defined
|
|
16
|
+
if (policy.hasOwnProperty("entityEdit")) {
|
|
17
|
+
let response = "granted";
|
|
18
|
+
if (!entity) {
|
|
19
|
+
// fail b/c no entity
|
|
20
|
+
response = "entity-required";
|
|
21
|
+
}
|
|
22
|
+
else {
|
|
23
|
+
if (policy.entityEdit && !entity.canEdit) {
|
|
24
|
+
response = "no-edit-access";
|
|
25
|
+
}
|
|
26
|
+
else if (!policy.entityEdit && entity.canEdit) {
|
|
27
|
+
response = "edit-access";
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
// create the check
|
|
31
|
+
const check = {
|
|
32
|
+
name: "entity edit required",
|
|
33
|
+
value: `entity.canEdit: ${objects_1.getWithDefault(entity, "canEdit", false)}`,
|
|
34
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(response),
|
|
35
|
+
response,
|
|
36
|
+
};
|
|
37
|
+
checks.push(check);
|
|
38
|
+
}
|
|
39
|
+
return checks;
|
|
40
|
+
}
|
|
41
|
+
exports.checkEdit = checkEdit;
|
|
42
|
+
//# sourceMappingURL=checkEdit.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkEdit.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEdit.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAE/C,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,SAAS,CACvB,MAAyB,EACzB,OAAuB,EACvB,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE;QACvC,IAAI,QAAQ,GAAmB,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE;YACX,qBAAqB;YACrB,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;aAAM;YACL,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBACxC,QAAQ,GAAG,gBAAgB,CAAC;aAC7B;iBAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE;gBAC/C,QAAQ,GAAG,aAAa,CAAC;aAC1B;SACF;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,mBAAmB,wBAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;YACpE,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAhCD,8BAgCC"}
|
|
@@ -0,0 +1,72 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkEntityPolicy = void 0;
|
|
4
|
+
const objects_1 = require("../../objects");
|
|
5
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
6
|
+
/**
|
|
7
|
+
* Validate user meets entity policy
|
|
8
|
+
* @param policy
|
|
9
|
+
* @param context
|
|
10
|
+
* @returns
|
|
11
|
+
*/
|
|
12
|
+
function checkEntityPolicy(policy, context) {
|
|
13
|
+
const user = context.currentUser || { groups: [] };
|
|
14
|
+
const userGroups = user.groups || [];
|
|
15
|
+
let response = "not-granted";
|
|
16
|
+
const type = policy.collaborationType;
|
|
17
|
+
const id = policy.collaborationId;
|
|
18
|
+
if (type === "user") {
|
|
19
|
+
if (id === user.username) {
|
|
20
|
+
response = "granted";
|
|
21
|
+
}
|
|
22
|
+
else {
|
|
23
|
+
response = "not-granted";
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
if (type === "org") {
|
|
27
|
+
if (id === user.orgId) {
|
|
28
|
+
response = "granted";
|
|
29
|
+
}
|
|
30
|
+
else {
|
|
31
|
+
response = "not-org-member";
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
if (type === "group") {
|
|
35
|
+
if (userGroups.find((g) => g.id === id)) {
|
|
36
|
+
response = "granted";
|
|
37
|
+
}
|
|
38
|
+
else {
|
|
39
|
+
response = "not-group-member";
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
if (type === "group-admin") {
|
|
43
|
+
const group = userGroups.find((g) => g.id === id);
|
|
44
|
+
const memberType = objects_1.getProp(group, "userMembership.memberType");
|
|
45
|
+
if (["admin", "owner"].includes(memberType)) {
|
|
46
|
+
response = "granted";
|
|
47
|
+
}
|
|
48
|
+
else {
|
|
49
|
+
response = "not-group-admin";
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
if (type === "authenticated") {
|
|
53
|
+
if (context.isAuthenticated) {
|
|
54
|
+
response = "granted";
|
|
55
|
+
}
|
|
56
|
+
else {
|
|
57
|
+
response = "not-authenticated";
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
if (type === "anonymous") {
|
|
61
|
+
response = "granted";
|
|
62
|
+
}
|
|
63
|
+
const check = {
|
|
64
|
+
name: "entity:policy",
|
|
65
|
+
value: `${policy.collaborationType}:${policy.collaborationId}`,
|
|
66
|
+
response,
|
|
67
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(response),
|
|
68
|
+
};
|
|
69
|
+
return check;
|
|
70
|
+
}
|
|
71
|
+
exports.checkEntityPolicy = checkEntityPolicy;
|
|
72
|
+
//# sourceMappingURL=checkEntityPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkEntityPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEntityPolicy.ts"],"names":[],"mappings":";;;AACA,2CAAwC;AAMxC,mEAAgE;AAGhE;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,MAA+B,EAC/B,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAK,EAAE,MAAM,EAAE,EAAE,EAAY,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAK,EAAe,CAAC;IACnD,IAAI,QAAQ,GAAmB,aAAa,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;IAElC,IAAI,IAAI,KAAK,MAAM,EAAE;QACnB,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE;YACxB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,aAAa,CAAC;SAC1B;KACF;IAED,IAAI,IAAI,KAAK,KAAK,EAAE;QAClB,IAAI,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE;YACrB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,gBAAgB,CAAC;SAC7B;KACF;IAED,IAAI,IAAI,KAAK,OAAO,EAAE;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC/C,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,kBAAkB,CAAC;SAC/B;KACF;IAED,IAAI,IAAI,KAAK,aAAa,EAAE;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,iBAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;YAC3C,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;KACF;IAED,IAAI,IAAI,KAAK,eAAe,EAAE;QAC5B,IAAI,OAAO,CAAC,eAAe,EAAE;YAC3B,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,mBAAmB,CAAC;SAChC;KACF;IAED,IAAI,IAAI,KAAK,WAAW,EAAE;QACxB,QAAQ,GAAG,SAAS,CAAC;KACtB;IAED,MAAM,KAAK,GAAiB;QAC1B,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,eAAe,EAAE;QAC9D,QAAQ;QACR,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;KACtC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AA/DD,8CA+DC"}
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.checkLicense = void 0;
|
|
4
|
+
const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
|
|
5
|
+
/**
|
|
6
|
+
* Validate license policy
|
|
7
|
+
* @param policy
|
|
8
|
+
* @param response
|
|
9
|
+
* @param context
|
|
10
|
+
* @returns
|
|
11
|
+
*/
|
|
12
|
+
function checkLicense(policy, context, entity) {
|
|
13
|
+
var _a;
|
|
14
|
+
const checks = [];
|
|
15
|
+
// Only return a check if the policy is defined
|
|
16
|
+
if ((_a = policy.licenses) === null || _a === void 0 ? void 0 : _a.length) {
|
|
17
|
+
let result = "granted";
|
|
18
|
+
if (!policy.licenses.includes(context.hubLicense)) {
|
|
19
|
+
result = "not-available";
|
|
20
|
+
// can we show an upgrade ux?
|
|
21
|
+
if (policy.licenses[0] === "hub-premium" &&
|
|
22
|
+
context.hubLicense === "hub-basic") {
|
|
23
|
+
result = "not-licensed"; // implies it could be licensed
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
const check = {
|
|
27
|
+
name: `license in ${policy.licenses.join(", ")}`,
|
|
28
|
+
value: context.hubLicense,
|
|
29
|
+
code: getPolicyResponseCode_1.getPolicyResponseCode(result),
|
|
30
|
+
response: result,
|
|
31
|
+
};
|
|
32
|
+
checks.push(check);
|
|
33
|
+
}
|
|
34
|
+
return checks;
|
|
35
|
+
}
|
|
36
|
+
exports.checkLicense = checkLicense;
|
|
37
|
+
//# sourceMappingURL=checkLicense.js.map
|