@flusys/nestjs-iam 1.0.0-beta → 1.0.0

package/cjs/controllers/company-action-permission.controller.js

@@ -41,18 +41,17 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let CompanyActionPermissionController = class CompanyActionPermissionController {
-    async assignCompanyActions(dto) {
+    async assignCompanyActions(dto, user) {
         return this.permissionService.assignCompanyActions(dto);
     }
-    async getCompanyActions(companyId, query) {
-        const actions = await this.permissionService.getCompanyActions(companyId);
+    async getCompanyActions(dto, user) {
+        const actions = await this.permissionService.getCompanyActions(dto.companyId);
         return {
             success: true,
             message: 'Company actions retrieved successfully',
             data: actions
         };
     }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
     constructor(permissionService){
         _define_property(this, "permissionService", void 0);
         this.permissionService = permissionService;
@@ -60,6 +59,7 @@ let CompanyActionPermissionController = class CompanyActionPermissionController
 };
 _ts_decorate([
     (0, _common.Post)('company-actions/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.COMPANY_ACTION_PERMISSIONS.ASSIGN),
     (0, _swagger.ApiOperation)({
         summary: 'Whitelist actions for company',
         description: 'Controls which actions are available to company users/roles.'
@@ -72,14 +72,17 @@ _ts_decorate([
         type: _permissiondto.AssignCompanyActionsDto
     }),
     _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignCompanyActionsDto === "undefined" ? Object : _permissiondto.AssignCompanyActionsDto
+        typeof _permissiondto.AssignCompanyActionsDto === "undefined" ? Object : _permissiondto.AssignCompanyActionsDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], CompanyActionPermissionController.prototype, "assignCompanyActions", null);
 _ts_decorate([
-    (0, _common.Get)('company-actions/:companyId'),
+    (0, _common.Post)('get-company-actions'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.COMPANY_ACTION_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get company whitelisted actions',
         description: 'Returns actions available to company.'
@@ -88,12 +91,15 @@ _ts_decorate([
         status: 200,
         type: _nestjsshared.SingleResponseDto
     }),
-    _ts_param(0, (0, _common.Param)('companyId')),
-    _ts_param(1, (0, _common.Query)()),
+    (0, _swagger.ApiBody)({
+        type: _permissiondto.GetCompanyActionsDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        String,
-        typeof _permissiondto.GetCompanyActionsDto === "undefined" ? Object : _permissiondto.GetCompanyActionsDto
+        typeof _permissiondto.GetCompanyActionsDto === "undefined" ? Object : _permissiondto.GetCompanyActionsDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], CompanyActionPermissionController.prototype, "getCompanyActions", null);

package/cjs/controllers/my-permission.controller.js

@@ -9,7 +9,6 @@ Object.defineProperty(exports, "MyPermissionController", {
     }
 });
 const _nestjsshared = require("@flusys/nestjs-shared");
-const _guards = require("@flusys/nestjs-shared/guards");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _permissiondto = require("../dtos/permission.dto");
@@ -43,7 +42,12 @@ function _ts_param(paramIndex, decorator) {
 }
 let MyPermissionController = class MyPermissionController {
     async getMyPermissions(query, user) {
-        return this.permissionService.getMyPermissions(user.id, user.branchId ?? null, user.companyId ?? null, query.parentCodes);
+        const data = await this.permissionService.getMyPermissions(user.id, user.branchId ?? null, user.companyId ?? null, query.parentCodes);
+        return {
+            success: true,
+            message: 'Permissions loaded successfully',
+            data
+        };
     }
     // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
     constructor(permissionService){
@@ -80,7 +84,7 @@ _ts_decorate([
 MyPermissionController = _ts_decorate([
     (0, _swagger.ApiTags)('IAM - My Permissions'),
     (0, _common.Controller)('iam/permissions'),
-    (0, _common.UseGuards)(_guards.JwtAuthGuard),
+    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
     _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
     _ts_metadata("design:type", Function),

package/cjs/controllers/role-permission.controller.js

@@ -12,7 +12,9 @@ const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _permissiondto = require("../dtos/permission.dto");
+const _helpers = require("../helpers");
 const _permissionservice = require("../services/permission.service");
+const _iamconfigservice = require("../services/iam-config.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -44,19 +46,21 @@ let RolePermissionController = class RolePermissionController {
     async assignRoleActions(dto) {
         return this.permissionService.assignRoleActions(dto);
     }
-    async getRoleActions(roleId, query) {
-        const actions = await this.permissionService.getRoleActions(roleId);
+    async getRoleActions(dto) {
+        const actions = await this.permissionService.getRoleActions(dto.roleId);
         return {
             success: true,
             message: 'Role actions retrieved successfully',
             data: actions
         };
     }
-    async assignUserRoles(dto) {
+    async assignUserRoles(dto, user) {
+        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
         return this.permissionService.assignUserRoles(dto);
     }
-    async getUserRoles(userId, query) {
-        const roles = await this.permissionService.getUserRoles(userId, query.branchId, query.companyId);
+    async getUserRoles(dto, user) {
+        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        const roles = await this.permissionService.getUserRoles(dto.userId, dto.branchId, dto.companyId);
         return {
             success: true,
             message: 'User roles retrieved successfully',
@@ -64,13 +68,16 @@ let RolePermissionController = class RolePermissionController {
         };
     }
     // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(permissionService){
+    constructor(permissionService, config){
         _define_property(this, "permissionService", void 0);
+        _define_property(this, "config", void 0);
         this.permissionService = permissionService;
+        this.config = config;
     }
 };
 _ts_decorate([
     (0, _common.Post)('role-actions/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.ROLE_ACTION_PERMISSIONS.ASSIGN),
     (0, _swagger.ApiOperation)({
         summary: 'Assign/remove actions to/from role',
         description: 'RBAC mode. No branch scoping.'
@@ -90,7 +97,8 @@ _ts_decorate([
     _ts_metadata("design:returntype", Promise)
 ], RolePermissionController.prototype, "assignRoleActions", null);
 _ts_decorate([
-    (0, _common.Get)('role-actions/:roleId'),
+    (0, _common.Post)('get-role-actions'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.ROLE_ACTION_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get role actions',
         description: 'Returns actions assigned to role.'
@@ -99,17 +107,19 @@ _ts_decorate([
         status: 200,
         type: _nestjsshared.SingleResponseDto
     }),
-    _ts_param(0, (0, _common.Param)('roleId')),
-    _ts_param(1, (0, _common.Query)()),
+    (0, _swagger.ApiBody)({
+        type: _permissiondto.GetRoleActionsDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        String,
         typeof _permissiondto.GetRoleActionsDto === "undefined" ? Object : _permissiondto.GetRoleActionsDto
     ]),
     _ts_metadata("design:returntype", Promise)
 ], RolePermissionController.prototype, "getRoleActions", null);
 _ts_decorate([
     (0, _common.Post)('user-roles/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ROLE_PERMISSIONS.ASSIGN),
     (0, _swagger.ApiOperation)({
         summary: 'Assign/remove roles to/from user',
         description: 'RBAC mode. If company feature enabled, branchId is required.'
@@ -122,14 +132,17 @@ _ts_decorate([
         type: _permissiondto.AssignUserRolesDto
     }),
     _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignUserRolesDto === "undefined" ? Object : _permissiondto.AssignUserRolesDto
+        typeof _permissiondto.AssignUserRolesDto === "undefined" ? Object : _permissiondto.AssignUserRolesDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], RolePermissionController.prototype, "assignUserRoles", null);
 _ts_decorate([
-    (0, _common.Get)('user-roles/:userId'),
+    (0, _common.Post)('get-user-roles'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ROLE_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get user roles',
         description: 'Returns roles assigned to user. Filter by companyId and branchId.'
@@ -138,12 +151,15 @@ _ts_decorate([
         status: 200,
         type: _nestjsshared.SingleResponseDto
     }),
-    _ts_param(0, (0, _common.Param)('userId')),
-    _ts_param(1, (0, _common.Query)()),
+    (0, _swagger.ApiBody)({
+        type: _permissiondto.GetUserRolesDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        String,
-        typeof _permissiondto.GetUserRolesDto === "undefined" ? Object : _permissiondto.GetUserRolesDto
+        typeof _permissiondto.GetUserRolesDto === "undefined" ? Object : _permissiondto.GetUserRolesDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], RolePermissionController.prototype, "getUserRoles", null);
@@ -153,8 +169,10 @@ RolePermissionController = _ts_decorate([
     (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
     _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
+    _ts_param(1, (0, _common.Inject)(_iamconfigservice.IAMConfigService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService
+        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService,
+        typeof _iamconfigservice.IAMConfigService === "undefined" ? Object : _iamconfigservice.IAMConfigService
     ])
 ], RolePermissionController);

package/cjs/controllers/role.controller.js

@@ -8,7 +8,7 @@ Object.defineProperty(exports, "RoleController", {
         return RoleController;
     }
 });
-const _classes = require("@flusys/nestjs-shared/classes");
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _roledto = require("../dtos/role.dto");
@@ -40,8 +40,51 @@ function _ts_param(paramIndex, decorator) {
         decorator(target, key, paramIndex);
     };
 }
-let RoleController = class RoleController extends (0, _classes.createApiController)(_roledto.CreateRoleDto, _roledto.UpdateRoleDto, _roledto.RoleResponseDto, {
-    security: 'jwt'
+let RoleController = class RoleController extends (0, _nestjsshared.createApiController)(_roledto.CreateRoleDto, _roledto.UpdateRoleDto, _roledto.RoleResponseDto, {
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                _nestjsshared.ROLE_PERMISSIONS.DELETE
+            ]
+        }
+    }
 }) {
     constructor(roleService){
         super(roleService), _define_property(this, "roleService", void 0), this.roleService = roleService;

package/cjs/controllers/user-action-permission.controller.js

@@ -12,7 +12,9 @@ const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const _permissiondto = require("../dtos/permission.dto");
+const _helpers = require("../helpers");
 const _permissionservice = require("../services/permission.service");
+const _iamconfigservice = require("../services/iam-config.service");
 function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
@@ -41,11 +43,13 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 let UserActionPermissionController = class UserActionPermissionController {
-    async assignUserActions(dto) {
+    async assignUserActions(dto, user) {
+        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
         return this.permissionService.assignUserActions(dto);
     }
-    async getUserActions(userId, query) {
-        const actions = await this.permissionService.getUserActions(userId, query.branchId, query.companyId);
+    async getUserActions(dto, user) {
+        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        const actions = await this.permissionService.getUserActions(dto.userId, dto.branchId, dto.companyId);
         return {
             success: true,
             message: 'User actions retrieved successfully',
@@ -53,13 +57,16 @@ let UserActionPermissionController = class UserActionPermissionController {
         };
     }
     // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(permissionService){
+    constructor(permissionService, config){
         _define_property(this, "permissionService", void 0);
+        _define_property(this, "config", void 0);
         this.permissionService = permissionService;
+        this.config = config;
     }
 };
 _ts_decorate([
     (0, _common.Post)('user-actions/assign'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ACTION_PERMISSIONS.ASSIGN),
     (0, _swagger.ApiOperation)({
         summary: 'Assign/remove actions to/from user',
         description: 'Direct permissions. If company feature enabled, branchId is required.'
@@ -72,14 +79,17 @@ _ts_decorate([
         type: _permissiondto.AssignUserActionsDto
     }),
     _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignUserActionsDto === "undefined" ? Object : _permissiondto.AssignUserActionsDto
+        typeof _permissiondto.AssignUserActionsDto === "undefined" ? Object : _permissiondto.AssignUserActionsDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], UserActionPermissionController.prototype, "assignUserActions", null);
 _ts_decorate([
-    (0, _common.Get)('user-actions/:userId'),
+    (0, _common.Post)('get-user-actions'),
+    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ACTION_PERMISSIONS.READ),
     (0, _swagger.ApiOperation)({
         summary: 'Get user direct actions',
         description: 'Returns direct action permissions for user. Filter by companyId and branchId.'
@@ -88,12 +98,15 @@ _ts_decorate([
         status: 200,
         type: _nestjsshared.SingleResponseDto
     }),
-    _ts_param(0, (0, _common.Param)('userId')),
-    _ts_param(1, (0, _common.Query)()),
+    (0, _swagger.ApiBody)({
+        type: _permissiondto.GetUserActionsDto
+    }),
+    _ts_param(0, (0, _common.Body)()),
+    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        String,
-        typeof _permissiondto.GetUserActionsDto === "undefined" ? Object : _permissiondto.GetUserActionsDto
+        typeof _permissiondto.GetUserActionsDto === "undefined" ? Object : _permissiondto.GetUserActionsDto,
+        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
     ]),
     _ts_metadata("design:returntype", Promise)
 ], UserActionPermissionController.prototype, "getUserActions", null);
@@ -103,8 +116,10 @@ UserActionPermissionController = _ts_decorate([
     (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
     (0, _swagger.ApiBearerAuth)(),
     _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
+    _ts_param(1, (0, _common.Inject)(_iamconfigservice.IAMConfigService)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
-        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService
+        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService,
+        typeof _iamconfigservice.IAMConfigService === "undefined" ? Object : _iamconfigservice.IAMConfigService
     ])
 ], UserActionPermissionController);

package/cjs/dtos/action.dto.js

@@ -9,9 +9,6 @@ function _export(target, all) {
     });
 }
 _export(exports, {
-    get ActionQueryDto () {
-        return ActionQueryDto;
-    },
     get ActionResponseDto () {
         return ActionResponseDto;
     },
@@ -284,30 +281,6 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", Array)
 ], ActionTreeDto.prototype, "children", void 0);
-let ActionQueryDto = class ActionQueryDto {
-    constructor(){
-        _define_property(this, "isActive", void 0);
-        _define_property(this, "parentId", void 0);
-    }
-};
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        description: 'Filter by active status',
-        required: false
-    }),
-    (0, _classvalidator.IsBoolean)(),
-    (0, _classvalidator.IsOptional)(),
-    _ts_metadata("design:type", Boolean)
-], ActionQueryDto.prototype, "isActive", void 0);
-_ts_decorate([
-    (0, _swagger.ApiProperty)({
-        description: 'Filter by parent ID',
-        required: false
-    }),
-    (0, _classvalidator.IsUUID)(),
-    (0, _classvalidator.IsOptional)(),
-    _ts_metadata("design:type", String)
-], ActionQueryDto.prototype, "parentId", void 0);
 let ActionTreeQueryDto = class ActionTreeQueryDto {
     constructor(){
         _define_property(this, "search", void 0);