@flowselections/admin-installatietechniek 1.0.4 → 1.0.5

package/dist-lib/lib/admin.functions.js

@@ -200,7 +200,7 @@ export const getRoles = createServerFn({ method: "GET" })
     const [{ data: roles, error: rolesError }, { data: perms, error: permsError }, { data: registry, error: registryError }, { data: featureRows, error: featuresError },] = await Promise.all([
         context.supabase.from("roles").select("id, key, name, is_protected").order("name", { ascending: true }),
         context.supabase.from("role_permissions").select("role_id, module_id, feature_id, can_view, can_edit"),
-        context.supabase.from("module_registry").select("module_id, name, is_active").order("name", { ascending: true }),
+        context.supabase.from("module_registry").select("module_id, name, is_active, enforce").order("name", { ascending: true }),
         context.supabase.from("module_features").select("module_id, feature_id, name, is_active").order("name", { ascending: true }),
     ]);
     if (rolesError)
@@ -227,6 +227,7 @@ export const getRoles = createServerFn({ method: "GET" })
             .map((m) => ({
             id: m.module_id,
             name: m.name,
+            enforce: Boolean(m.enforce),
             features: safeFeatures
                 .filter((f) => f.is_active && f.module_id === m.module_id)
                 .map((f) => ({ id: f.feature_id, name: f.name })),
@@ -416,6 +417,23 @@ export const syncModuleRegistry = createServerFn({ method: "POST" })
     }
     return { ok: true, count: modules.length };
 });
+const setModuleEnforceInput = z.object({
+    moduleId: z.string().trim().min(1).max(100),
+    enforce: z.boolean(),
+});
+export const setModuleEnforce = createServerFn({ method: "POST" })
+    .middleware([requireSupabaseAuth])
+    .inputValidator((data) => setModuleEnforceInput.parse(data))
+    .handler(async ({ context, data }) => {
+    await requireAdmin(context);
+    const { error } = await context.supabase
+        .from("module_registry")
+        .update({ enforce: data.enforce })
+        .eq("module_id", data.moduleId);
+    if (error)
+        throw error;
+    return { ok: true };
+});
 export const getUserModulePermissions = createServerFn({ method: "POST" })
     .middleware([requireSupabaseAuth])
     .inputValidator((data) => userPermissionsInput.parse(data))

package/dist-lib/lib/permissions.server.d.ts

@@ -0,0 +1,14 @@
+import type { ModulePermission } from "../hooks/useModulePermission";
+interface PermissionContext {
+    supabase: any;
+    userId: string;
+}
+/**
+ * Server-side controle voor moduletoegang. Moet in elke server function van
+ * een beveiligde module aangeroepen worden die gevoelige data leest of wijzigt.
+ * Deze functie draait dezelfde SQL-check als de frontendguard, dus de database
+ * is de enige bron van waarheid.
+ */
+export declare function requireModulePermission(context: PermissionContext, moduleId: string, featureId?: string, level?: "view" | "edit"): Promise<ModulePermission>;
+export {};
+//# sourceMappingURL=permissions.server.d.ts.map

package/dist-lib/lib/permissions.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.server.d.ts","sourceRoot":"","sources":["../../src/lib/permissions.server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,UAAU,iBAAiB;IACzB,QAAQ,EAAE,GAAG,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAK,EACd,KAAK,GAAE,MAAM,GAAG,MAAe,6BA0BhC"}

package/dist-lib/lib/permissions.server.js

@@ -0,0 +1,26 @@
+/**
+ * Server-side controle voor moduletoegang. Moet in elke server function van
+ * een beveiligde module aangeroepen worden die gevoelige data leest of wijzigt.
+ * Deze functie draait dezelfde SQL-check als de frontendguard, dus de database
+ * is de enige bron van waarheid.
+ */
+export async function requireModulePermission(context, moduleId, featureId = "", level = "view") {
+    const { supabase, userId } = context;
+    const { data, error } = await supabase.rpc("effective_module_permission", {
+        _user_id: userId,
+        _module_id: moduleId,
+        _feature_id: featureId,
+    });
+    if (error) {
+        console.error("[requireModulePermission] RPC error", error);
+        throw new Error("Kan moduletoegang niet controleren");
+    }
+    const permission = (data ?? "edit");
+    if (level === "edit" && permission !== "edit") {
+        throw new Error("Geen schrijfrechten voor deze module");
+    }
+    if (level === "view" && permission !== "view" && permission !== "edit") {
+        throw new Error("Geen leesrechten voor deze module");
+    }
+    return permission;
+}

package/package.json

@@ -1,87 +1,87 @@
-{
-  "name": "@flowselections/admin-installatietechniek",
-  "version": "1.0.4",
-  "flowselections": {
-    "moduleId": "admin-installatietechniek",
-    "pages": [
-      {
-        "export": "AdminForInstallatieTechniek",
-        "route": "admin-installatietechniek",
-        "title": "Rollen & machtigingen"
-      }
-    ]
-  },
-  "private": false,
-  "sideEffects": false,
-  "type": "module",
-  "main": "./dist-lib/index.js",
-  "types": "./dist-lib/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist-lib/index.d.ts",
-      "default": "./dist-lib/index.js"
-    },
-    "./styles": "./dist-lib/styles.css"
-  },
-  "files": [
-    "dist-lib",
-    "public"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "scripts": {
-    "dev": "vite dev",
-    "build": "vite build",
-    "build:lib": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && node -e \"require('fs').writeFileSync('dist-lib/styles.css', '@source \\\"./\\\";\\n')\"",
-    "build:lib:watch": "tsc -p tsconfig.build.json --watch",
-    "build:dev": "vite build --mode development",
-    "preview": "vite preview",
-    "lint": "eslint ."
-  },
-  "peerDependencies": {
-    "@flowselections/core": "*",
-    "@tanstack/react-query": "^5.0.0",
-    "@tanstack/react-router": "^1.0.0",
-    "@tanstack/react-start": "^1.0.0",
-    "lucide-react": "^0.400.0",
-    "react": "^18 || ^19",
-    "react-dom": "^18 || ^19",
-    "sonner": "^2.0.0"
-  },
-  "dependencies": {
-    "@supabase/supabase-js": "^2.110.7"
-  },
-  "devDependencies": {
-    "@cloudflare/vite-plugin": "^1.25.5",
-    "@eslint/js": "^9.32.0",
-    "@flowselections/core": "1.0.16",
-    "@lovable.dev/vite-tanstack-config": "2.13.1",
-    "@rsbuild/core": "^1.0.0",
-    "@tailwindcss/vite": "^4.2.1",
-    "@tanstack/react-query": "^5.83.0",
-    "@tanstack/react-router": "^1.168.0",
-    "@tanstack/react-start": "^1.167.14",
-    "@tanstack/router-plugin": "^1.167.10",
-    "@types/node": "^22.16.5",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^5.0.4",
-    "eslint": "^9.32.0",
-    "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-react-refresh": "^0.4.20",
-    "globals": "^15.15.0",
-    "lucide-react": "^0.575.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "sonner": "^2.0.7",
-    "tailwindcss": "^4.2.1",
-    "tw-animate-css": "^1.3.4",
-    "typescript": "^5.8.3",
-    "tsc-alias": "^1.8.10",
-    "typescript-eslint": "^8.56.1",
-    "vite": "^7.3.1",
-    "vite-tsconfig-paths": "^6.0.2",
-    "nitro": "3.0.260603-beta"
-  }
-}
+{
+  "name": "@flowselections/admin-installatietechniek",
+  "version": "1.0.5",
+  "flowselections": {
+    "moduleId": "admin-installatietechniek",
+    "pages": [
+      {
+        "export": "AdminForInstallatieTechniek",
+        "route": "admin-installatietechniek",
+        "title": "Rollen & machtigingen"
+      }
+    ]
+  },
+  "private": false,
+  "sideEffects": false,
+  "type": "module",
+  "main": "./dist-lib/index.js",
+  "types": "./dist-lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist-lib/index.d.ts",
+      "default": "./dist-lib/index.js"
+    },
+    "./styles": "./dist-lib/styles.css"
+  },
+  "files": [
+    "dist-lib",
+    "public"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "vite dev",
+    "build": "vite build",
+    "build:lib": "tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json && node -e \"require('fs').writeFileSync('dist-lib/styles.css', '@source \\\"./\\\";\\n')\"",
+    "build:lib:watch": "tsc -p tsconfig.build.json --watch",
+    "build:dev": "vite build --mode development",
+    "preview": "vite preview",
+    "lint": "eslint ."
+  },
+  "peerDependencies": {
+    "@flowselections/core": "*",
+    "@tanstack/react-query": "^5.0.0",
+    "@tanstack/react-router": "^1.0.0",
+    "@tanstack/react-start": "^1.0.0",
+    "lucide-react": "^0.400.0",
+    "react": "^18 || ^19",
+    "react-dom": "^18 || ^19",
+    "sonner": "^2.0.0"
+  },
+  "dependencies": {
+    "@supabase/supabase-js": "^2.110.7"
+  },
+  "devDependencies": {
+    "@cloudflare/vite-plugin": "^1.25.5",
+    "@eslint/js": "^9.32.0",
+    "@flowselections/core": "1.0.16",
+    "@lovable.dev/vite-tanstack-config": "2.13.1",
+    "@rsbuild/core": "^1.0.0",
+    "@tailwindcss/vite": "^4.2.1",
+    "@tanstack/react-query": "^5.83.0",
+    "@tanstack/react-router": "^1.168.0",
+    "@tanstack/react-start": "^1.167.14",
+    "@tanstack/router-plugin": "^1.167.10",
+    "@types/node": "^22.16.5",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "@vitejs/plugin-react": "^5.0.4",
+    "eslint": "^9.32.0",
+    "eslint-plugin-react-hooks": "^5.2.0",
+    "eslint-plugin-react-refresh": "^0.4.20",
+    "globals": "^15.15.0",
+    "lucide-react": "^0.575.0",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "sonner": "^2.0.7",
+    "tailwindcss": "^4.2.1",
+    "tw-animate-css": "^1.3.4",
+    "typescript": "^5.8.3",
+    "tsc-alias": "^1.8.10",
+    "typescript-eslint": "^8.56.1",
+    "vite": "^7.3.1",
+    "vite-tsconfig-paths": "^6.0.2",
+    "nitro": "3.0.260603-beta"
+  }
+}