@exulu/backend 1.12.0 → 1.13.0

package/CHANGELOG.md

@@ -1,9 +1,9 @@
-# [1.12.0](https://github.com/Qventu/exulu-backend/compare/v1.11.0...v1.12.0) (2025-08-15)
+# [1.13.0](https://github.com/Qventu/exulu-backend/compare/v1.12.0...v1.13.0) (2025-08-17)
 
 
 ### Features
 
-* user role based access management ([8213cd5](https://github.com/Qventu/exulu-backend/commit/8213cd55b14418ddbb27eaf54844782ecd557d81))
+* add api access rights to global access controls for roles and add created_by for jobs ([203a37a](https://github.com/Qventu/exulu-backend/commit/203a37abac9151189eefa9b418eed5df92d78a1c))
 
 # [1.1.0](https://github.com/Qventu/exulu-backend/compare/v1.0.1...v1.1.0) (2025-07-30)
 

package/dist/index.cjs

@@ -2056,33 +2056,33 @@ var handleRBACUpdate = async (db3, entityName, resourceId, rbacData, existingRba
 function createMutations(table) {
   const tableNamePlural = table.name.plural.toLowerCase();
   const validateWriteAccess = async (id, context) => {
-    const { db: db3, req, user } = context;
-    const hasRBAC = table.RBAC === true;
-    if (!hasRBAC) {
-      return true;
-    }
-    if (user.super_admin === true) {
-      return true;
-    }
-    if (!user.role || !(table.name.plural.includes("agent") && user.role.agents === "write") && !(table.name.plural.includes("workflow") && user.role.workflows === "write") && !(table.name.plural.includes("variable") && user.role.variables === "write") && !(table.name.plural.includes("user") && user.role.users === "write")) {
-      console.error("Access control error: no role found for current user or no access to entity type.");
-      throw new Error("Access control error: no role found for current user or no access to entity type.");
-    }
     try {
-      const authResult = await requestValidators.authenticate(req);
-      if (authResult.error || !authResult.user) {
-        throw new Error("Authentication required");
-      }
-      const user2 = authResult.user;
+      const { db: db3, req, user } = context;
       const record = await db3.from(tableNamePlural).select(["rights_mode", "created_by"]).where({ id }).first();
       if (!record) {
         throw new Error("Record not found");
       }
+      if (tableNamePlural === "jobs") {
+        if (!user.super_admin && record.created_by !== user.id) {
+          throw new Error("You are not authorized to edit this record");
+        }
+      }
+      const hasRBAC = table.RBAC === true;
+      if (!hasRBAC) {
+        return true;
+      }
+      if (user.super_admin === true) {
+        return true;
+      }
+      if (!user.role || !(table.name.plural === "agents" && user.role.agents === "write") && !(table.name.plural === "workflow_templates" && user.role.workflows === "write") && !(table.name.plural === "variables" && user.role.variables === "write") && !(table.name.plural === "users" && user.role.users === "write")) {
+        console.error("Access control error: no role found for current user or no access to entity type.");
+        throw new Error("Access control error: no role found for current user or no access to entity type.");
+      }
       if (record.rights_mode === "public") {
         return true;
       }
       if (record.rights_mode === "private") {
-        if (record.created_by === user2.id) {
+        if (record.created_by === user.id) {
           return true;
         }
         throw new Error("Only the creator can edit this private record");
@@ -2092,7 +2092,7 @@ function createMutations(table) {
           entity: table.name.singular,
           target_resource_id: id,
           access_type: "User",
-          user_id: user2.id,
+          user_id: user.id,
           rights: "write"
         }).first();
         if (rbacRecord) {
@@ -2100,12 +2100,12 @@ function createMutations(table) {
         }
         throw new Error("Insufficient user permissions to edit this record");
       }
-      if (record.rights_mode === "roles" && user2.role) {
+      if (record.rights_mode === "roles" && user.role) {
         const rbacRecord = await db3.from("rbac").where({
           entity: table.name.singular,
           target_resource_id: id,
           access_type: "Role",
-          role_id: user2.role,
+          role_id: user.role,
           rights: "write"
         }).first();
         if (rbacRecord) {
@@ -2265,7 +2265,11 @@ var applyAccessControl = (table, user, query) => {
   if (user.super_admin === true) {
     return query;
   }
-  if (!user.role || !(table.name.plural.includes("agent") && (user.role.agents === "read" || user.role.agents === "write")) && !(table.name.plural.includes("workflow") && (user.role.workflows === "read" || user.role.workflows === "write")) && !(table.name.plural.includes("variable") && (user.role.variables === "read" || user.role.variables === "write")) && !(table.name.plural.includes("user") && (user.role.users === "read" || user.role.users === "write"))) {
+  if (table.name.plural === "jobs") {
+    query = query.where("created_by", user.id);
+    return query;
+  }
+  if (!user.role || !(table.name.plural === "agents" && (user.role.agents === "read" || user.role.agents === "write")) && !(table.name.plural === "workflow_templates" && (user.role.workflows === "read" || user.role.workflows === "write")) && !(table.name.plural === "variables" && (user.role.variables === "read" || user.role.variables === "write")) && !(table.name.plural === "users" && (user.role.users === "read" || user.role.users === "write"))) {
     console.error("Access control error: no role found or no access to entity type.");
     return query.where("1", "=", "0");
   }
@@ -2980,6 +2984,10 @@ var jobsSchema = {
       name: "session",
       type: "text"
     },
+    {
+      name: "created_by",
+      type: "number"
+    },
     {
       name: "status",
       type: "text"

package/dist/index.js

@@ -2014,33 +2014,33 @@ var handleRBACUpdate = async (db3, entityName, resourceId, rbacData, existingRba
 function createMutations(table) {
   const tableNamePlural = table.name.plural.toLowerCase();
   const validateWriteAccess = async (id, context) => {
-    const { db: db3, req, user } = context;
-    const hasRBAC = table.RBAC === true;
-    if (!hasRBAC) {
-      return true;
-    }
-    if (user.super_admin === true) {
-      return true;
-    }
-    if (!user.role || !(table.name.plural.includes("agent") && user.role.agents === "write") && !(table.name.plural.includes("workflow") && user.role.workflows === "write") && !(table.name.plural.includes("variable") && user.role.variables === "write") && !(table.name.plural.includes("user") && user.role.users === "write")) {
-      console.error("Access control error: no role found for current user or no access to entity type.");
-      throw new Error("Access control error: no role found for current user or no access to entity type.");
-    }
     try {
-      const authResult = await requestValidators.authenticate(req);
-      if (authResult.error || !authResult.user) {
-        throw new Error("Authentication required");
-      }
-      const user2 = authResult.user;
+      const { db: db3, req, user } = context;
       const record = await db3.from(tableNamePlural).select(["rights_mode", "created_by"]).where({ id }).first();
       if (!record) {
         throw new Error("Record not found");
       }
+      if (tableNamePlural === "jobs") {
+        if (!user.super_admin && record.created_by !== user.id) {
+          throw new Error("You are not authorized to edit this record");
+        }
+      }
+      const hasRBAC = table.RBAC === true;
+      if (!hasRBAC) {
+        return true;
+      }
+      if (user.super_admin === true) {
+        return true;
+      }
+      if (!user.role || !(table.name.plural === "agents" && user.role.agents === "write") && !(table.name.plural === "workflow_templates" && user.role.workflows === "write") && !(table.name.plural === "variables" && user.role.variables === "write") && !(table.name.plural === "users" && user.role.users === "write")) {
+        console.error("Access control error: no role found for current user or no access to entity type.");
+        throw new Error("Access control error: no role found for current user or no access to entity type.");
+      }
       if (record.rights_mode === "public") {
         return true;
       }
       if (record.rights_mode === "private") {
-        if (record.created_by === user2.id) {
+        if (record.created_by === user.id) {
           return true;
         }
         throw new Error("Only the creator can edit this private record");
@@ -2050,7 +2050,7 @@ function createMutations(table) {
           entity: table.name.singular,
           target_resource_id: id,
           access_type: "User",
-          user_id: user2.id,
+          user_id: user.id,
           rights: "write"
         }).first();
         if (rbacRecord) {
@@ -2058,12 +2058,12 @@ function createMutations(table) {
         }
         throw new Error("Insufficient user permissions to edit this record");
       }
-      if (record.rights_mode === "roles" && user2.role) {
+      if (record.rights_mode === "roles" && user.role) {
         const rbacRecord = await db3.from("rbac").where({
           entity: table.name.singular,
           target_resource_id: id,
           access_type: "Role",
-          role_id: user2.role,
+          role_id: user.role,
           rights: "write"
         }).first();
         if (rbacRecord) {
@@ -2223,7 +2223,11 @@ var applyAccessControl = (table, user, query) => {
   if (user.super_admin === true) {
     return query;
   }
-  if (!user.role || !(table.name.plural.includes("agent") && (user.role.agents === "read" || user.role.agents === "write")) && !(table.name.plural.includes("workflow") && (user.role.workflows === "read" || user.role.workflows === "write")) && !(table.name.plural.includes("variable") && (user.role.variables === "read" || user.role.variables === "write")) && !(table.name.plural.includes("user") && (user.role.users === "read" || user.role.users === "write"))) {
+  if (table.name.plural === "jobs") {
+    query = query.where("created_by", user.id);
+    return query;
+  }
+  if (!user.role || !(table.name.plural === "agents" && (user.role.agents === "read" || user.role.agents === "write")) && !(table.name.plural === "workflow_templates" && (user.role.workflows === "read" || user.role.workflows === "write")) && !(table.name.plural === "variables" && (user.role.variables === "read" || user.role.variables === "write")) && !(table.name.plural === "users" && (user.role.users === "read" || user.role.users === "write"))) {
     console.error("Access control error: no role found or no access to entity type.");
     return query.where("1", "=", "0");
   }
@@ -2938,6 +2942,10 @@ var jobsSchema = {
       name: "session",
       type: "text"
     },
+    {
+      name: "created_by",
+      type: "number"
+    },
     {
       name: "status",
       type: "text"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@exulu/backend",
   "author": "Qventu Bv.",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "main": "./dist/index.js",
   "private": false,
   "publishConfig": {

package/types/models/user-role.ts

@@ -1,8 +1,11 @@
 export type UserRole = {
-  id: string;
-  name: string;
+  id?: string;
+  name?: string;
   agents?: "read" | "write" | null;
   workflows?: "read" | "write" | null;
   variables?: "read" | "write" | null;
   users?: "read" | "write" | null;
+  api?: "read" | "write" | null;
+  createdAt?: string;
+  updatedAt?: string;
 };