@finema/finework-layer 1.0.65 → 1.0.67

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [1.0.67](https://gitlab.finema.co/finema/finework/finework-frontend-layer/compare/1.0.66...1.0.67) (2026-05-26)
+
+### Features
+
+* refactor permission check logic to use 'some' instead of spreading all permissions ([bdcaeee](https://gitlab.finema.co/finema/finework/finework-frontend-layer/commit/bdcaeeecb685b8556544ab6ca46f575061b44675))
+
+## [1.0.66](https://gitlab.finema.co/finema/finework/finework-frontend-layer/compare/1.0.65...1.0.66) (2026-05-26)
+
+### Features
+
+* enhance permission system to support custom string-based permissions ([94cb037](https://gitlab.finema.co/finema/finework/finework-frontend-layer/commit/94cb0376f33c9e9f76b4cc63ee84c3fe44b41880))
+
 ## [1.0.65](https://gitlab.finema.co/finema/finework/finework-frontend-layer/compare/1.0.64...1.0.65) (2026-05-26)
 
 ## [1.0.64](https://gitlab.finema.co/finema/finework/finework-frontend-layer/compare/1.0.63...1.0.64) (2026-05-25)

package/app/components/Layout/Admin/Sidebar.vue

@@ -188,7 +188,7 @@
 import type { NavigationMenuItem } from '@nuxt/ui'
 import { computed } from 'vue'
 import { useRoute } from 'vue-router'
-import type { Permission, UserModule } from '#imports'
+import type { UserModule } from '#imports'
 import Navbar from '../Apps.vue'
 
 defineEmits<{
@@ -306,21 +306,15 @@ const filterItems = (items: NavigationMenuItem[]): NavigationMenuItem[] => {
         // permissions: ['pmo:USER', 'pmo:ADMIN', 'pmo:SUPER'] => module: 'pmo', permissions: ['USER', 'ADMIN', 'SUPER']
         const permissionStrings = item.permissions as string[]
 
-        // Extract module from first permission (all should have same module)
-        const firstPermission = permissionStrings[0]
+        return permissionStrings
+          .map((p) => p.split(':'))
+          .some(([moduleStr, permission]) => {
+            if (!moduleStr || !permission) {
+              return false
+            }
 
-        if (!firstPermission) {
-          return true
-        }
-
-        const [moduleStr] = firstPermission.split(':')
-
-        // Extract all permission levels
-        const permissionLevels = permissionStrings.map(
-          (p) => p.split(':')[1],
-        ) as Permission[]
-
-        return auth.hasPermission(moduleStr as UserModule, ...permissionLevels)
+            return auth.hasPermission(moduleStr as UserModule, permission)
+          })
       }
 
       // Recursively filter children

package/app/composables/useAuth.ts

@@ -5,6 +5,8 @@ export enum Permission {
   NONE = 'NONE',
 }
 
+export type AccessPermission = Permission | string
+
 export const PERMISSION_LABEL = {
   [Permission.ADMIN]: 'Admin',
   [Permission.USER]: 'User',
@@ -85,6 +87,7 @@ export interface IUserProfile {
 export enum UserModule {
   CHECKIN = 'clockin',
   PMO = 'pmo',
+  PMO_TAB = 'pmo_tab',
   TIMESHEET = 'timesheet',
   SETTING = 'setting',
   QUOTATION = 'quotation',
@@ -105,6 +108,7 @@ export enum UserModule {
 export interface IUserAccessLevel {
   used_id: string
   pmo: Permission.USER | Permission.ADMIN | Permission.SUPER
+  pmo_tab?: string[]
   clockin: Permission.USER | Permission.ADMIN
   timesheet: Permission.USER | Permission.ADMIN | Permission.SUPER
   setting: Permission.USER | Permission.SUPER
@@ -225,7 +229,7 @@ export const useAuth = () => {
     me.set(null)
   })
 
-  const hasPermission = (module: UserModule, ...permissions: Permission[]) => {
+  const hasPermission = (module: UserModule, ...permissions: AccessPermission[]) => {
     const accessLevel = me.value?.access_level
 
     if (!accessLevel) {

package/app/middleware/permissions.ts

@@ -1,7 +1,7 @@
 import { defineNuxtRouteMiddleware, useAuth, navigateTo, abortNavigation } from '#imports'
 
 export interface AccessGuardOptions {
-  permissions?: `${UserModule}:${Permission}`[]
+  permissions?: `${UserModule}:${string}`[]
   redirectTo?: string
 }
 
@@ -11,7 +11,7 @@ export default defineNuxtRouteMiddleware(async (to, from) => {
 
   if (
     options.permissions?.some((perm) => {
-      const [module, permission] = perm.split(':') as [UserModule, Permission]
+      const [module, permission] = perm.split(':') as [UserModule, string]
 
       return auth.hasPermission(module, permission)
     })

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@finema/finework-layer",
   "type": "module",
-  "version": "1.0.65",
+  "version": "1.0.67",
   "main": "./nuxt.config.ts",
   "scripts": {
     "dev": "nuxi dev .playground -o",