@flusys/nestjs-auth 9.1.0 → 9.1.2

package/fesm/services/index.js

@@ -1,18 +1,211 @@
 export const __rspack_esm_id = 995;
 export const __rspack_esm_ids = [995];
 export const __webpack_modules__ = {
-8811(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _authentication_service_js__rspack_import_0 = __webpack_require__(4722);
-/* import */ var _auth_email_service_js__rspack_import_1 = __webpack_require__(3221);
-/* import */ var _company_selection_session_service_js__rspack_import_2 = __webpack_require__(5811);
-/* import */ var _social_auth_service_js__rspack_import_3 = __webpack_require__(2786);
-/* import */ var _social_auth_config_service_js__rspack_import_4 = __webpack_require__(8275);
-/* import */ var _user_service_js__rspack_import_5 = __webpack_require__(7229);
-/* import */ var _company_service_js__rspack_import_6 = __webpack_require__(9201);
-/* import */ var _branch_service_js__rspack_import_7 = __webpack_require__(5402);
-/* import */ var _user_permission_service_js__rspack_import_8 = __webpack_require__(5291);
-/* import */ var _auth_config_service_js__rspack_import_9 = __webpack_require__(6514);
-/* import */ var _auth_datasource_provider_js__rspack_import_10 = __webpack_require__(2732);
+8230(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  WE: () => (/* reexport */ auth_config_service/* .AuthConfigService */.W),
+  vS: () => (/* reexport */ auth_datasource_provider/* .AuthDataSourceProvider */.v),
+  Gw: () => (/* reexport */ auth_email_service/* .AuthEmailService */.G),
+  kX: () => (/* reexport */ authentication_service/* .AuthenticationService */.k),
+  XR: () => (/* reexport */ BranchHierarchyResolverAdapter),
+  O_: () => (/* reexport */ branch_service/* .BranchService */.O),
+  ht: () => (/* reexport */ CompanyAccessResolverAdapter),
+  vB: () => (/* reexport */ company_selection_session_service/* .CompanySelectionSessionService */.v),
+  Bl: () => (/* reexport */ company_service/* .CompanyService */.B),
+  t_: () => (/* reexport */ social_auth_config_service/* .SocialAuthConfigService */.t),
+  Jn: () => (/* reexport */ social_auth_service/* .SocialAuthService */.J),
+  OE: () => (/* reexport */ user_permission_service/* .UserPermissionService */.O),
+  DL: () => (/* reexport */ user_service/* .UserService */.D)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company-selection-session.service.ts
+var company_selection_session_service = __webpack_require__(5811);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/interfaces"
+var interfaces_ = __webpack_require__(5103);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/core"
+var core_ = __webpack_require__(3075);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/branch-hierarchy-resolver.adapter.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+class BranchHierarchyResolverAdapter {
+    moduleRef;
+    companyAccess;
+    constructor(moduleRef, companyAccess){
+        this.moduleRef = moduleRef;
+        this.companyAccess = companyAccess;
+    }
+    async getDescendantIds(branchIds, options) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).getDescendantIds(branchIds, options);
+    }
+    async getAncestorIds(branchId, options) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).getAncestorIds(branchId, options);
+    }
+    async isWithinBranch(branchId, ancestorId) {
+        return (await this.resolve(branch_service/* .BranchService */.O)).isWithinBranch(branchId, ancestorId);
+    }
+    async getGrantedBranchIds(userId, companyId) {
+        if (!userId) return [];
+        const { branches } = await this.companyAccess.getUserAccess(userId);
+        return branches.filter((branch)=>!companyId || branch.companyId === companyId).map((branch)=>branch.id);
+    }
+    async getGrantedDescendantIds(userId, branchIds, options) {
+        const granted = new Set(await this.getGrantedBranchIds(userId));
+        if (!granted.size) return [];
+        return (await this.getDescendantIds(branchIds, options)).filter((id)=>granted.has(id));
+    }
+    async hasBranchAccess(userId, branchId) {
+        if (!branchId) return false;
+        return (await this.getGrantedBranchIds(userId)).includes(branchId);
+    }
+    resolve(type) {
+        return this.moduleRef.resolve(type, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+    }
+}
+BranchHierarchyResolverAdapter = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    _ts_param(1, (0,common_.Inject)(interfaces_.COMPANY_ACCESS_RESOLVER)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef,
+        typeof ICompanyAccessResolver === "undefined" ? Object : ICompanyAccessResolver
+    ])
+], BranchHierarchyResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/company-access-resolver.adapter.ts
+function company_access_resolver_adapter_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function company_access_resolver_adapter_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function company_access_resolver_adapter_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+const byName = (a, b)=>a.name.localeCompare(b.name);
+/** Users of grants that still count: the grant is active and its user is active and not deleted. */ const activeUserIds = (grants)=>grants.filter((grant)=>grant.isActive && grant.user?.isActive && !grant.user.deletedAt).map((grant)=>grant.userId);
+class CompanyAccessResolverAdapter {
+    moduleRef;
+    constructor(moduleRef){
+        this.moduleRef = moduleRef;
+    }
+    async getUserAccess(userId) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const [companyGrants, branchGrants] = await Promise.all([
+            permissions.findUserCompanies(userId),
+            permissions.findUserBranches(userId)
+        ]);
+        const companies = companyGrants.filter((grant)=>grant.isActive).map((grant)=>grant.company).filter((company)=>!!company?.isActive).toSorted(byName);
+        const companyIds = new Set(companies.map((company)=>company.id));
+        const branches = branchGrants.map((grant)=>grant.branch).filter((branch)=>!!branch?.isActive && companyIds.has(branch.companyId)).toSorted((a, b)=>(a.serial ?? 0) - (b.serial ?? 0) || byName(a, b));
+        return {
+            companies: companies.map(({ id, name })=>({
+                    id,
+                    name
+                })),
+            branches: branches.map(({ id, companyId, parentId, name })=>({
+                    id,
+                    companyId,
+                    parentId: parentId ?? null,
+                    name
+                }))
+        };
+    }
+    async getCompanyMembers(companyId, branchIds = []) {
+        const permissions = await this.moduleRef.resolve(user_permission_service/* .UserPermissionService */.O, core_.ContextIdFactory.create(), {
+            strict: false
+        });
+        const members = activeUserIds(await permissions.findUsersForCompany(companyId));
+        if (!branchIds.length) return [
+            ...new Set(members)
+        ];
+        const inBranches = new Set(activeUserIds((await Promise.all(branchIds.map((branchId)=>permissions.findUsersForBranch(branchId)))).flat()));
+        return [
+            ...new Set(members.filter((userId)=>inBranches.has(userId)))
+        ];
+    }
+}
+CompanyAccessResolverAdapter = company_access_resolver_adapter_ts_decorate([
+    (0,common_.Injectable)(),
+    company_access_resolver_adapter_ts_param(0, (0,common_.Inject)(core_.ModuleRef)),
+    company_access_resolver_adapter_ts_metadata("design:type", Function),
+    company_access_resolver_adapter_ts_metadata("design:paramtypes", [
+        typeof core_.ModuleRef === "undefined" ? Object : core_.ModuleRef
+    ])
+], CompanyAccessResolverAdapter);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/services/index.ts
+
 
 
 
@@ -25,19 +218,6 @@ export const __webpack_modules__ = {
 
 
 
-__webpack_require__.d(__webpack_exports__, {
-  Bl: () => (/* reexport safe */ _company_service_js__rspack_import_6.B),
-  DL: () => (/* reexport safe */ _user_service_js__rspack_import_5.D),
-  Gw: () => (/* reexport safe */ _auth_email_service_js__rspack_import_1.G),
-  Jn: () => (/* reexport safe */ _social_auth_service_js__rspack_import_3.J),
-  OE: () => (/* reexport safe */ _user_permission_service_js__rspack_import_8.O),
-  O_: () => (/* reexport safe */ _branch_service_js__rspack_import_7.O),
-  WE: () => (/* reexport safe */ _auth_config_service_js__rspack_import_9.W),
-  kX: () => (/* reexport safe */ _authentication_service_js__rspack_import_0.k),
-  t_: () => (/* reexport safe */ _social_auth_config_service_js__rspack_import_4.t),
-  vB: () => (/* reexport safe */ _company_selection_session_service_js__rspack_import_2.v),
-  vS: () => (/* reexport safe */ _auth_datasource_provider_js__rspack_import_10.v)
-});
 
 
 },
@@ -53,15 +233,17 @@ import * as __rspack_chunk_3 from '../24.js';
 __webpack_require__.C(__rspack_chunk_3);
 import * as __rspack_chunk_4 from './index.js';
 __webpack_require__.C(__rspack_chunk_4);
-var __webpack_exports__ = __webpack_exec__(8811);var __webpack_exports__AuthConfigService = __webpack_exports__.WE;
+var __webpack_exports__ = __webpack_exec__(8230);var __webpack_exports__AuthConfigService = __webpack_exports__.WE;
 var __webpack_exports__AuthDataSourceProvider = __webpack_exports__.vS;
 var __webpack_exports__AuthEmailService = __webpack_exports__.Gw;
 var __webpack_exports__AuthenticationService = __webpack_exports__.kX;
+var __webpack_exports__BranchHierarchyResolverAdapter = __webpack_exports__.XR;
 var __webpack_exports__BranchService = __webpack_exports__.O_;
+var __webpack_exports__CompanyAccessResolverAdapter = __webpack_exports__.ht;
 var __webpack_exports__CompanySelectionSessionService = __webpack_exports__.vB;
 var __webpack_exports__CompanyService = __webpack_exports__.Bl;
 var __webpack_exports__SocialAuthConfigService = __webpack_exports__.t_;
 var __webpack_exports__SocialAuthService = __webpack_exports__.Jn;
 var __webpack_exports__UserPermissionService = __webpack_exports__.OE;
 var __webpack_exports__UserService = __webpack_exports__.DL;
-export { __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BranchService as BranchService, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserService as UserService };
+export { __webpack_exports__AuthConfigService as AuthConfigService, __webpack_exports__AuthDataSourceProvider as AuthDataSourceProvider, __webpack_exports__AuthEmailService as AuthEmailService, __webpack_exports__AuthenticationService as AuthenticationService, __webpack_exports__BranchHierarchyResolverAdapter as BranchHierarchyResolverAdapter, __webpack_exports__BranchService as BranchService, __webpack_exports__CompanyAccessResolverAdapter as CompanyAccessResolverAdapter, __webpack_exports__CompanySelectionSessionService as CompanySelectionSessionService, __webpack_exports__CompanyService as CompanyService, __webpack_exports__SocialAuthConfigService as SocialAuthConfigService, __webpack_exports__SocialAuthService as SocialAuthService, __webpack_exports__UserPermissionService as UserPermissionService, __webpack_exports__UserService as UserService };

package/helpers/branch-ancestry.helper.d.ts

@@ -0,0 +1,4 @@
+import { type Repository } from 'typeorm';
+import { CompanyBranch } from '../entities/company-branch.entity.js';
+export declare function loadCompanyBranchNodes(repo: Repository<CompanyBranch>, branchIds: readonly string[], withDeleted?: boolean): Promise<CompanyBranch[]>;
+export declare function loadDisplayParentIds(repo: Repository<CompanyBranch>, branchIds: readonly string[]): Promise<Map<string, string | null>>;

package/helpers/index.d.ts

@@ -1,2 +1,3 @@
 export * from './auth-response.mapper.js';
+export * from './branch-ancestry.helper.js';
 export * from './token.helper.js';

package/helpers/token.helper.d.ts

@@ -1,3 +1,4 @@
+import { type HybridCache } from '@flusys/nestjs-shared/classes';
 import { JwtService } from '@nestjs/jwt';
 import { type TokenPayload, type TokenPayloadWithCompany } from '../interfaces/authentication.interface.js';
 import { AuthConfigService } from '../services/auth-config.service.js';
@@ -7,3 +8,4 @@ export declare function generateTokens(jwtService: JwtService, authConfig: AuthC
     refreshToken: string;
 };
 export declare function parseExpiryToMs(expiry: string): number;
+export declare function revokeUserSessions(cache: Pick<HybridCache, 'set'>, authConfig: Pick<AuthConfigService, 'getRefreshTokenExpiration'>, userId: string): Promise<void>;

package/interfaces/authentication.interface.d.ts

@@ -33,6 +33,9 @@ export interface BranchForSelection {
     name: string;
     slug: string;
     logoId?: string | null;
+    parentId?: string | null;
+    serial?: number | null;
+    displayParentId?: string | null;
 }
 export interface CompanyWithBranches {
     id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flusys/nestjs-auth",
-  "version": "9.1.0",
+  "version": "9.1.2",
   "description": "Authentication and authorization infrastructure for NestJS applications",
   "type": "module",
   "main": "./fesm/index.js",
@@ -83,16 +83,16 @@
     "bcrypt": "^6.0.0",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.0",
-    "nodemailer": "^9.0.0",
+    "nodemailer": "^10.0.13",
     "passport": "^0.7.0",
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0",
-    "typeorm": "^0.3.0",
+    "typeorm": "^0.3.31",
     "express": "^5.0.0",
     "rxjs": "^7.8.0"
   },
   "dependencies": {
-    "@flusys/nestjs-core": "9.1.0",
-    "@flusys/nestjs-shared": "9.1.0"
+    "@flusys/nestjs-core": "9.1.2",
+    "@flusys/nestjs-shared": "9.1.2"
   }
 }

package/services/authentication.service.d.ts

@@ -52,7 +52,9 @@ export declare class AuthenticationService {
     logout(userId: string): Promise<void>;
     isTokenRevoked(userId: string, tokenIssuedAt?: number): Promise<boolean>;
     getUserCompanies(userId: string): Promise<Company[]>;
-    getUserBranches(userId: string, companyId: string): Promise<CompanyBranch[]>;
+    getUserBranches(userId: string, companyId: string): Promise<Array<CompanyBranch & {
+        displayParentId: string | null;
+    }>>;
     getCompanyById(companyId: string): Promise<Company | null>;
     getBranchById(branchId: string): Promise<CompanyBranch | null>;
     getUserInfo(userId: string, companyId?: string, branchId?: string): Promise<MeResponse>;

package/services/branch-hierarchy-resolver.adapter.d.ts

@@ -0,0 +1,15 @@
+import { type IBranchHierarchyResolver, type ICompanyAccessResolver } from '@flusys/nestjs-shared/interfaces';
+import { type IBranchHierarchyOptions } from '@flusys/nestjs-shared/utils';
+import { ModuleRef } from '@nestjs/core';
+export declare class BranchHierarchyResolverAdapter implements IBranchHierarchyResolver {
+    private readonly moduleRef;
+    private readonly companyAccess;
+    constructor(moduleRef: ModuleRef, companyAccess: ICompanyAccessResolver);
+    getDescendantIds(branchIds: string | string[], options?: IBranchHierarchyOptions): Promise<string[]>;
+    getAncestorIds(branchId: string, options?: IBranchHierarchyOptions): Promise<string[]>;
+    isWithinBranch(branchId: string, ancestorId: string): Promise<boolean>;
+    getGrantedBranchIds(userId: string, companyId?: string): Promise<string[]>;
+    getGrantedDescendantIds(userId: string, branchIds: string | string[], options?: IBranchHierarchyOptions): Promise<string[]>;
+    hasBranchAccess(userId: string, branchId: string): Promise<boolean>;
+    private resolve;
+}

package/services/branch.service.d.ts

@@ -2,6 +2,7 @@ import { ApiService, HybridCache } from '@flusys/nestjs-shared/classes';
 import { DeleteDto, FilterAndPaginationDto } from '@flusys/nestjs-shared/dtos';
 import { type ILoggedUserInfo, type IPermissionSyncAdapter } from '@flusys/nestjs-shared/interfaces';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
+import { type IBranchHierarchyOptions } from '@flusys/nestjs-shared/utils';
 import { type QueryRunner, SelectQueryBuilder } from 'typeorm';
 import { CreateCompanyBranchDto, UpdateCompanyBranchDto } from '../dtos/company-branch.dto.js';
 import { CompanyBranch } from '../entities/company-branch.entity.js';
@@ -14,7 +15,13 @@ export declare class BranchService extends ApiService<CreateCompanyBranchDto, Up
     private readonly authConfig;
     private readonly permissionSyncAdapter?;
     constructor(cacheManager: HybridCache, utilsService: UtilsService, dataSourceProvider: AuthDataSourceProvider, authConfig: AuthConfigService, permissionSyncAdapter?: IPermissionSyncAdapter | undefined);
+    protected beforeInsertOperation(dto: CreateCompanyBranchDto | CreateCompanyBranchDto[], _user: ILoggedUserInfo | null, queryRunner: QueryRunner): Promise<void>;
+    protected beforeUpdateOperation(dto: UpdateCompanyBranchDto | UpdateCompanyBranchDto[], _user: ILoggedUserInfo | null, queryRunner: QueryRunner): Promise<void>;
+    private validateParent;
     protected beforeDeleteOperation(dto: DeleteDto, user: ILoggedUserInfo | null, queryRunner: QueryRunner): Promise<void>;
+    getDescendantIds(branchIds: string | string[], options?: IBranchHierarchyOptions): Promise<string[]>;
+    getAncestorIds(branchId: string, options?: IBranchHierarchyOptions): Promise<string[]>;
+    isWithinBranch(branchId: string, ancestorId: string): Promise<boolean>;
     getSelectQuery(query: SelectQueryBuilder<CompanyBranch>, _user: ILoggedUserInfo | null, select?: string[]): Promise<{
         query: SelectQueryBuilder<CompanyBranch>;
         isRaw: boolean;

package/services/company-access-resolver.adapter.d.ts

@@ -0,0 +1,8 @@
+import { type ICompanyAccessResolver, type IUserCompanyAccess } from '@flusys/nestjs-shared/interfaces';
+import { ModuleRef } from '@nestjs/core';
+export declare class CompanyAccessResolverAdapter implements ICompanyAccessResolver {
+    private readonly moduleRef;
+    constructor(moduleRef: ModuleRef);
+    getUserAccess(userId: string): Promise<IUserCompanyAccess>;
+    getCompanyMembers(companyId: string, branchIds?: string[]): Promise<string[]>;
+}

package/services/index.d.ts

@@ -9,3 +9,5 @@ export * from './branch.service.js';
 export * from './user-permission.service.js';
 export * from './auth-config.service.js';
 export * from './auth-datasource.provider.js';
+export * from './branch-hierarchy-resolver.adapter.js';
+export * from './company-access-resolver.adapter.js';

package/services/user-permission.service.d.ts

@@ -16,6 +16,7 @@ export declare class UserPermissionService {
     private revokeBranchPermissionsForCompany;
     findUserCompanies: (userId: string) => Promise<UserCompanyPermission[]>;
     findUserBranches(userId: string, companyId?: string): Promise<UserCompanyPermission[]>;
+    findDisplayParentIds(branchIds: string[]): Promise<Map<string, string | null>>;
     findUsersForCompany(companyId: string): Promise<UserCompanyPermission[]>;
     findUsersForBranch(branchId: string): Promise<UserCompanyPermission[]>;
 }