@flusys/nestjs-iam 3.0.0 → 4.0.0-rc

package/cjs/services/permission.service.js

@@ -8,6 +8,8 @@ Object.defineProperty(exports, "PermissionService", {
         return PermissionService;
     }
 });
+const _config = require("../config");
+const _nestjsshared = require("@flusys/nestjs-shared");
 const _common = require("@nestjs/common");
 const _typeorm = require("typeorm");
 const _permissiondto = require("../dtos/permission.dto");
@@ -66,7 +68,10 @@ let PermissionService = class PermissionService {
     // User-Action Permissions
     async assignUserActions(dto) {
         if (!this.iamConfigService.isDirectPermissionEnabled()) {
-            throw new _common.BadRequestException('Direct permission assignment not available in RBAC-only mode. Use role-based permissions instead.');
+            throw new _common.BadRequestException({
+                message: 'Direct permission assignment not available in RBAC-only mode. Use role-based permissions instead.',
+                messageKey: _config.IAM_MODE_MESSAGES.DIRECT_MODE_UNAVAILABLE
+            });
         }
         const permissionRepo = await this.getPermissionRepository();
         const enableCompanyFeature = this.iamConfigService.isCompanyFeatureEnabled();
@@ -111,7 +116,10 @@ let PermissionService = class PermissionService {
                     added = newPermissions.length;
                 } catch (error) {
                     if (error?.code === 'ER_DUP_ENTRY' || error?.message?.includes('Duplicate entry')) {
-                        throw new _common.ConflictException('Some permissions already exist for this user. Please refresh and try again.');
+                        throw new _common.ConflictException({
+                            message: 'Some permissions already exist for this user. Please refresh and try again.',
+                            messageKey: _config.PERMISSION_OPERATION_MESSAGES.ALREADY_EXISTS
+                        });
                     }
                     throw error;
                 }
@@ -182,7 +190,10 @@ let PermissionService = class PermissionService {
     // Role-Action Permissions
     async assignRoleActions(dto) {
         if (!this.iamConfigService.isRbacEnabled()) {
-            throw new _common.BadRequestException('Role-based permission assignment not available in DIRECT-only mode. Use direct user permissions instead.');
+            throw new _common.BadRequestException({
+                message: 'Role-based permission assignment not available in DIRECT-only mode. Use direct user permissions instead.',
+                messageKey: _config.IAM_MODE_MESSAGES.RBAC_MODE_UNAVAILABLE
+            });
         }
         const permissionRepo = await this.getPermissionRepository();
         const enableCompanyFeature = this.iamConfigService.isCompanyFeatureEnabled();
@@ -234,7 +245,10 @@ let PermissionService = class PermissionService {
                     added = newPermissions.length;
                 } catch (error) {
                     if (error?.code === 'ER_DUP_ENTRY' || error?.message?.includes('Duplicate entry')) {
-                        throw new _common.ConflictException('Some role-action permissions already exist. Please refresh and try again.');
+                        throw new _common.ConflictException({
+                            message: 'Some role-action permissions already exist. Please refresh and try again.',
+                            messageKey: _config.PERMISSION_OPERATION_MESSAGES.ALREADY_EXISTS
+                        });
                     }
                     throw error;
                 }
@@ -388,9 +402,6 @@ let PermissionService = class PermissionService {
             });
             removedUserActions = userResult.affected || 0;
         }
-        if (removedRoleActions > 0 || removedUserActions > 0) {
-            this.logger.log(`Cascade deleted for company ${companyId}: ${removedRoleActions} role actions, ${removedUserActions} user actions`);
-        }
         return {
             removedCompanyActions: companyResult.affected || 0,
             removedRoleActions,
@@ -449,7 +460,10 @@ let PermissionService = class PermissionService {
     // User-Role Permissions
     /** Assign user to roles (branch-scoped when company feature is enabled) */ async assignUserRoles(dto) {
         if (!this.iamConfigService.isRbacEnabled()) {
-            throw new _common.BadRequestException('Role assignment not available in DIRECT-only mode. Use direct user permissions instead.');
+            throw new _common.BadRequestException({
+                message: 'Role assignment not available in DIRECT-only mode. Use direct user permissions instead.',
+                messageKey: _config.IAM_MODE_MESSAGES.ROLE_ASSIGNMENT_UNAVAILABLE
+            });
         }
         const permissionRepo = await this.getPermissionRepository();
         const enableCompanyFeature = this.iamConfigService.isCompanyFeatureEnabled();
@@ -494,7 +508,10 @@ let PermissionService = class PermissionService {
                     added = newPermissions.length;
                 } catch (error) {
                     if (error?.code === 'ER_DUP_ENTRY' || error?.message?.includes('Duplicate entry')) {
-                        throw new _common.ConflictException('Some user-role permissions already exist. Please refresh and try again.');
+                        throw new _common.ConflictException({
+                            message: 'Some user-role permissions already exist. Please refresh and try again.',
+                            messageKey: _config.PERMISSION_OPERATION_MESSAGES.ALREADY_EXISTS
+                        });
                     }
                     throw error;
                 }
@@ -720,7 +737,8 @@ let PermissionService = class PermissionService {
             success: true,
             added,
             removed,
-            message: `Successfully processed ${totalItems} items: ${added} added, ${removed} removed${additionalMessage}`
+            message: `Successfully processed ${totalItems} items: ${added} added, ${removed} removed${additionalMessage}`,
+            messageKey: _config.PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS
         };
     }
     /** Get role IDs assigned to a user (merges company-wide + branch-specific roles) */ async getUserRoleIds(userId, branchId, companyId) {
@@ -897,13 +915,55 @@ let PermissionService = class PermissionService {
         _define_property(this, "permissionCacheService", void 0);
         _define_property(this, "iamConfigService", void 0);
         _define_property(this, "dataSourceProvider", void 0);
-        _define_property(this, "logger", void 0);
         this.permissionCacheService = permissionCacheService;
         this.iamConfigService = iamConfigService;
         this.dataSourceProvider = dataSourceProvider;
-        this.logger = new _common.Logger(PermissionService.name);
     }
 };
+_ts_decorate([
+    (0, _nestjsshared.LogAction)({
+        action: 'iam.assignUserActions',
+        module: 'iam'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _permissiondto.AssignUserActionsDto === "undefined" ? Object : _permissiondto.AssignUserActionsDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], PermissionService.prototype, "assignUserActions", null);
+_ts_decorate([
+    (0, _nestjsshared.LogAction)({
+        action: 'iam.assignRoleActions',
+        module: 'iam'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _permissiondto.AssignRoleActionsDto === "undefined" ? Object : _permissiondto.AssignRoleActionsDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], PermissionService.prototype, "assignRoleActions", null);
+_ts_decorate([
+    (0, _nestjsshared.LogAction)({
+        action: 'iam.assignCompanyActions',
+        module: 'iam'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _permissiondto.AssignCompanyActionsDto === "undefined" ? Object : _permissiondto.AssignCompanyActionsDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], PermissionService.prototype, "assignCompanyActions", null);
+_ts_decorate([
+    (0, _nestjsshared.LogAction)({
+        action: 'iam.assignUserRoles',
+        module: 'iam'
+    }),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _permissiondto.AssignUserRolesDto === "undefined" ? Object : _permissiondto.AssignUserRolesDto
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], PermissionService.prototype, "assignUserRoles", null);
 PermissionService = _ts_decorate([
     (0, _common.Injectable)({
         scope: _common.Scope.REQUEST

package/cjs/services/role.service.js

@@ -122,7 +122,7 @@ let RoleService = class RoleService extends _classes.RequestScopedApiService {
         };
     }
     constructor(cacheManager, utilsService, iamConfigService, dataSourceProvider){
-        super('role', null, cacheManager, utilsService, RoleService.name, true), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "iamConfigService", void 0), _define_property(this, "dataSourceProvider", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.iamConfigService = iamConfigService, this.dataSourceProvider = dataSourceProvider;
+        super('role', null, cacheManager, utilsService, RoleService.name, true, 'iam'), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "iamConfigService", void 0), _define_property(this, "dataSourceProvider", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.iamConfigService = iamConfigService, this.dataSourceProvider = dataSourceProvider;
     }
 };
 RoleService = _ts_decorate([

package/config/index.d.ts

@@ -1 +1,2 @@
 export * from './iam.constants';
+export * from './message-keys';

package/config/message-keys.d.ts

@@ -0,0 +1,106 @@
+export declare const ACTION_MESSAGES: {
+    readonly CREATE_SUCCESS: "action.create.success";
+    readonly CREATE_MANY_SUCCESS: "action.create.many.success";
+    readonly GET_SUCCESS: "action.get.success";
+    readonly GET_ALL_SUCCESS: "action.get.all.success";
+    readonly UPDATE_SUCCESS: "action.update.success";
+    readonly UPDATE_MANY_SUCCESS: "action.update.many.success";
+    readonly DELETE_SUCCESS: "action.delete.success";
+    readonly RESTORE_SUCCESS: "action.restore.success";
+    readonly NOT_FOUND: "action.not.found";
+};
+export declare const ROLE_MESSAGES: {
+    readonly CREATE_SUCCESS: "role.create.success";
+    readonly CREATE_MANY_SUCCESS: "role.create.many.success";
+    readonly GET_SUCCESS: "role.get.success";
+    readonly GET_ALL_SUCCESS: "role.get.all.success";
+    readonly UPDATE_SUCCESS: "role.update.success";
+    readonly UPDATE_MANY_SUCCESS: "role.update.many.success";
+    readonly DELETE_SUCCESS: "role.delete.success";
+    readonly RESTORE_SUCCESS: "role.restore.success";
+    readonly NOT_FOUND: "role.not.found";
+};
+export declare const ROLE_PERMISSION_MESSAGES: {
+    readonly GET_SUCCESS: "role.permission.get.success";
+    readonly ASSIGN_SUCCESS: "role.permission.assign.success";
+    readonly ACTIONS_SUCCESS: "role.permission.actions.success";
+    readonly USERS_SUCCESS: "role.permission.users.success";
+    readonly USER_ROLES_SUCCESS: "role.permission.user.roles.success";
+};
+export declare const USER_ACTION_PERMISSION_MESSAGES: {
+    readonly GET_SUCCESS: "user.action.permission.get.success";
+    readonly ASSIGN_SUCCESS: "user.action.permission.assign.success";
+    readonly REVOKE_SUCCESS: "user.action.permission.revoke.success";
+};
+export declare const COMPANY_ACTION_PERMISSION_MESSAGES: {
+    readonly GET_SUCCESS: "company.action.permission.get.success";
+    readonly ASSIGN_SUCCESS: "company.action.permission.assign.success";
+    readonly REVOKE_SUCCESS: "company.action.permission.revoke.success";
+};
+export declare const MY_PERMISSION_MESSAGES: {
+    readonly GET_SUCCESS: "my.permission.get.success";
+};
+export declare const IAM_MODE_MESSAGES: {
+    readonly DIRECT_MODE_UNAVAILABLE: "iam.direct.mode.unavailable";
+    readonly RBAC_MODE_UNAVAILABLE: "iam.rbac.mode.unavailable";
+    readonly ROLE_ASSIGNMENT_UNAVAILABLE: "iam.role.assignment.unavailable";
+};
+export declare const PERMISSION_OPERATION_MESSAGES: {
+    readonly PROCESS_SUCCESS: "permission.process.success";
+    readonly ALREADY_EXISTS: "permission.already.exists";
+    readonly USER_REQUIRED: "permission.user.required";
+};
+export declare const IAM_MODULE_MESSAGES: {
+    readonly ACTION: {
+        readonly CREATE_SUCCESS: "action.create.success";
+        readonly CREATE_MANY_SUCCESS: "action.create.many.success";
+        readonly GET_SUCCESS: "action.get.success";
+        readonly GET_ALL_SUCCESS: "action.get.all.success";
+        readonly UPDATE_SUCCESS: "action.update.success";
+        readonly UPDATE_MANY_SUCCESS: "action.update.many.success";
+        readonly DELETE_SUCCESS: "action.delete.success";
+        readonly RESTORE_SUCCESS: "action.restore.success";
+        readonly NOT_FOUND: "action.not.found";
+    };
+    readonly ROLE: {
+        readonly CREATE_SUCCESS: "role.create.success";
+        readonly CREATE_MANY_SUCCESS: "role.create.many.success";
+        readonly GET_SUCCESS: "role.get.success";
+        readonly GET_ALL_SUCCESS: "role.get.all.success";
+        readonly UPDATE_SUCCESS: "role.update.success";
+        readonly UPDATE_MANY_SUCCESS: "role.update.many.success";
+        readonly DELETE_SUCCESS: "role.delete.success";
+        readonly RESTORE_SUCCESS: "role.restore.success";
+        readonly NOT_FOUND: "role.not.found";
+    };
+    readonly ROLE_PERMISSION: {
+        readonly GET_SUCCESS: "role.permission.get.success";
+        readonly ASSIGN_SUCCESS: "role.permission.assign.success";
+        readonly ACTIONS_SUCCESS: "role.permission.actions.success";
+        readonly USERS_SUCCESS: "role.permission.users.success";
+        readonly USER_ROLES_SUCCESS: "role.permission.user.roles.success";
+    };
+    readonly USER_ACTION_PERMISSION: {
+        readonly GET_SUCCESS: "user.action.permission.get.success";
+        readonly ASSIGN_SUCCESS: "user.action.permission.assign.success";
+        readonly REVOKE_SUCCESS: "user.action.permission.revoke.success";
+    };
+    readonly COMPANY_ACTION_PERMISSION: {
+        readonly GET_SUCCESS: "company.action.permission.get.success";
+        readonly ASSIGN_SUCCESS: "company.action.permission.assign.success";
+        readonly REVOKE_SUCCESS: "company.action.permission.revoke.success";
+    };
+    readonly MY_PERMISSION: {
+        readonly GET_SUCCESS: "my.permission.get.success";
+    };
+    readonly IAM_MODE: {
+        readonly DIRECT_MODE_UNAVAILABLE: "iam.direct.mode.unavailable";
+        readonly RBAC_MODE_UNAVAILABLE: "iam.rbac.mode.unavailable";
+        readonly ROLE_ASSIGNMENT_UNAVAILABLE: "iam.role.assignment.unavailable";
+    };
+    readonly PERMISSION_OPERATION: {
+        readonly PROCESS_SUCCESS: "permission.process.success";
+        readonly ALREADY_EXISTS: "permission.already.exists";
+        readonly USER_REQUIRED: "permission.user.required";
+    };
+};

package/dtos/permission.dto.d.ts

@@ -93,4 +93,5 @@ export declare class PermissionOperationResultDto {
     added: number;
     removed: number;
     message: string;
+    messageKey?: string;
 }

package/fesm/config/index.js

@@ -1 +1,2 @@
 export * from './iam.constants';
+export * from './message-keys';

package/fesm/config/message-keys.js

@@ -0,0 +1,64 @@
+// ==================== IAM MODULE MESSAGE KEYS ====================
+export const ACTION_MESSAGES = {
+    CREATE_SUCCESS: 'action.create.success',
+    CREATE_MANY_SUCCESS: 'action.create.many.success',
+    GET_SUCCESS: 'action.get.success',
+    GET_ALL_SUCCESS: 'action.get.all.success',
+    UPDATE_SUCCESS: 'action.update.success',
+    UPDATE_MANY_SUCCESS: 'action.update.many.success',
+    DELETE_SUCCESS: 'action.delete.success',
+    RESTORE_SUCCESS: 'action.restore.success',
+    NOT_FOUND: 'action.not.found'
+};
+export const ROLE_MESSAGES = {
+    CREATE_SUCCESS: 'role.create.success',
+    CREATE_MANY_SUCCESS: 'role.create.many.success',
+    GET_SUCCESS: 'role.get.success',
+    GET_ALL_SUCCESS: 'role.get.all.success',
+    UPDATE_SUCCESS: 'role.update.success',
+    UPDATE_MANY_SUCCESS: 'role.update.many.success',
+    DELETE_SUCCESS: 'role.delete.success',
+    RESTORE_SUCCESS: 'role.restore.success',
+    NOT_FOUND: 'role.not.found'
+};
+export const ROLE_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'role.permission.get.success',
+    ASSIGN_SUCCESS: 'role.permission.assign.success',
+    ACTIONS_SUCCESS: 'role.permission.actions.success',
+    USERS_SUCCESS: 'role.permission.users.success',
+    USER_ROLES_SUCCESS: 'role.permission.user.roles.success'
+};
+export const USER_ACTION_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'user.action.permission.get.success',
+    ASSIGN_SUCCESS: 'user.action.permission.assign.success',
+    REVOKE_SUCCESS: 'user.action.permission.revoke.success'
+};
+export const COMPANY_ACTION_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'company.action.permission.get.success',
+    ASSIGN_SUCCESS: 'company.action.permission.assign.success',
+    REVOKE_SUCCESS: 'company.action.permission.revoke.success'
+};
+export const MY_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'my.permission.get.success'
+};
+export const IAM_MODE_MESSAGES = {
+    DIRECT_MODE_UNAVAILABLE: 'iam.direct.mode.unavailable',
+    RBAC_MODE_UNAVAILABLE: 'iam.rbac.mode.unavailable',
+    ROLE_ASSIGNMENT_UNAVAILABLE: 'iam.role.assignment.unavailable'
+};
+export const PERMISSION_OPERATION_MESSAGES = {
+    PROCESS_SUCCESS: 'permission.process.success',
+    ALREADY_EXISTS: 'permission.already.exists',
+    USER_REQUIRED: 'permission.user.required'
+};
+// Aggregated export for backward compatibility
+export const IAM_MODULE_MESSAGES = {
+    ACTION: ACTION_MESSAGES,
+    ROLE: ROLE_MESSAGES,
+    ROLE_PERMISSION: ROLE_PERMISSION_MESSAGES,
+    USER_ACTION_PERMISSION: USER_ACTION_PERMISSION_MESSAGES,
+    COMPANY_ACTION_PERMISSION: COMPANY_ACTION_PERMISSION_MESSAGES,
+    MY_PERMISSION: MY_PERMISSION_MESSAGES,
+    IAM_MODE: IAM_MODE_MESSAGES,
+    PERMISSION_OPERATION: PERMISSION_OPERATION_MESSAGES
+};

package/fesm/controllers/action.controller.js

@@ -27,11 +27,13 @@ function _ts_param(paramIndex, decorator) {
 }
 import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
 import { createApiController, CurrentUser, ILoggedUserInfo, SingleResponseDto, ACTION_PERMISSIONS } from '@flusys/nestjs-shared';
+import { ACTION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { ActionResponseDto, ActionTreeQueryDto, CreateActionDto, UpdateActionDto } from '../dtos/action.dto';
 import { ActionService } from '../services/action.service';
 export class ActionController extends createApiController(CreateActionDto, UpdateActionDto, ActionResponseDto, {
+    entityName: 'action',
     security: {
         insert: {
             level: 'permission',
@@ -82,6 +84,7 @@ export class ActionController extends createApiController(CreateActionDto, Updat
         return {
             success: true,
             message: 'Actions retrieved successfully',
+            messageKey: ACTION_MESSAGES.GET_ALL_SUCCESS,
             data: actions
         };
     }
@@ -90,6 +93,7 @@ export class ActionController extends createApiController(CreateActionDto, Updat
         return {
             success: true,
             message: 'Action tree retrieved successfully',
+            messageKey: ACTION_MESSAGES.GET_ALL_SUCCESS,
             data: tree
         };
     }

package/fesm/controllers/company-action-permission.controller.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { COMPANY_ACTION_PERMISSIONS, CurrentUser, ILoggedUserInfo, JwtAuthGuard, RequirePermission, SingleResponseDto } from '@flusys/nestjs-shared';
+import { COMPANY_ACTION_PERMISSION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { AssignCompanyActionsDto, GetCompanyActionsDto, PermissionOperationResultDto } from '../dtos/permission.dto';
@@ -39,6 +40,7 @@ export class CompanyActionPermissionController {
         return {
             success: true,
             message: 'Company actions retrieved successfully',
+            messageKey: COMPANY_ACTION_PERMISSION_MESSAGES.GET_SUCCESS,
             data: actions
         };
     }

package/fesm/controllers/my-permission.controller.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { CurrentUser, ILoggedUserInfo, JwtAuthGuard } from '@flusys/nestjs-shared';
+import { MY_PERMISSION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { MyPermissionsQueryDto, MyPermissionsResponseDto } from '../dtos/permission.dto';
@@ -36,6 +37,7 @@ export class MyPermissionController {
         return {
             success: true,
             message: 'Permissions loaded successfully',
+            messageKey: MY_PERMISSION_MESSAGES.GET_SUCCESS,
             data
         };
     }

package/fesm/controllers/role-permission.controller.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { JwtAuthGuard, SingleResponseDto, RequirePermission, ROLE_ACTION_PERMISSIONS, USER_ROLE_PERMISSIONS, CurrentUser, ILoggedUserInfo } from '@flusys/nestjs-shared';
+import { ROLE_PERMISSION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { AssignRoleActionsDto, AssignUserRolesDto, GetRoleActionsDto, GetUserRolesDto, PermissionOperationResultDto } from '../dtos/permission.dto';
@@ -41,19 +42,21 @@ export class RolePermissionController {
         return {
             success: true,
             message: 'Role actions retrieved successfully',
+            messageKey: ROLE_PERMISSION_MESSAGES.ACTIONS_SUCCESS,
             data: actions
         };
     }
     async assignUserRoles(dto, user) {
-        validateCompanyAccess(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        validateCompanyAccess(this.config, dto.companyId, user);
         return this.permissionService.assignUserRoles(dto);
     }
     async getUserRoles(dto, user) {
-        validateCompanyAccess(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        validateCompanyAccess(this.config, dto.companyId, user);
         const roles = await this.permissionService.getUserRoles(dto.userId, dto.branchId, dto.companyId);
         return {
             success: true,
             message: 'User roles retrieved successfully',
+            messageKey: ROLE_PERMISSION_MESSAGES.USER_ROLES_SUCCESS,
             data: roles
         };
     }

package/fesm/controllers/role.controller.js

@@ -31,6 +31,7 @@ import { ApiTags } from '@nestjs/swagger';
 import { CreateRoleDto, RoleResponseDto, UpdateRoleDto } from '../dtos/role.dto';
 import { RoleService } from '../services/role.service';
 export class RoleController extends createApiController(CreateRoleDto, UpdateRoleDto, RoleResponseDto, {
+    entityName: 'role',
     security: {
         insert: {
             level: 'permission',

package/fesm/controllers/user-action-permission.controller.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { JwtAuthGuard, SingleResponseDto, RequirePermission, USER_ACTION_PERMISSIONS, CurrentUser, ILoggedUserInfo } from '@flusys/nestjs-shared';
+import { USER_ACTION_PERMISSION_MESSAGES } from '../config';
 import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
 import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
 import { AssignUserActionsDto, GetUserActionsDto, PermissionOperationResultDto } from '../dtos/permission.dto';
@@ -34,15 +35,16 @@ import { PermissionService } from '../services/permission.service';
 import { IAMConfigService } from '../services/iam-config.service';
 export class UserActionPermissionController {
     async assignUserActions(dto, user) {
-        validateCompanyAccess(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        validateCompanyAccess(this.config, dto.companyId, user);
         return this.permissionService.assignUserActions(dto);
     }
     async getUserActions(dto, user) {
-        validateCompanyAccess(this.config, dto.companyId, user, 'Cannot manage permissions for users in another company');
+        validateCompanyAccess(this.config, dto.companyId, user);
         const actions = await this.permissionService.getUserActions(dto.userId, dto.branchId, dto.companyId);
         return {
             success: true,
             message: 'User actions retrieved successfully',
+            messageKey: USER_ACTION_PERMISSION_MESSAGES.GET_SUCCESS,
             data: actions
         };
     }

package/fesm/dtos/permission.dto.js

@@ -550,6 +550,7 @@ export class PermissionOperationResultDto {
         _define_property(this, "added", void 0);
         _define_property(this, "removed", void 0);
         _define_property(this, "message", void 0);
+        _define_property(this, "messageKey", void 0);
     }
 }
 _ts_decorate([
@@ -576,3 +577,10 @@ _ts_decorate([
     }),
     _ts_metadata("design:type", String)
 ], PermissionOperationResultDto.prototype, "message", void 0);
+_ts_decorate([
+    ApiPropertyOptional({
+        description: 'Translation key for localization',
+        example: 'permission.process.success'
+    }),
+    _ts_metadata("design:type", String)
+], PermissionOperationResultDto.prototype, "messageKey", void 0);

package/fesm/helpers/company-access.helper.js

@@ -1,14 +1,18 @@
 import { ForbiddenException } from '@nestjs/common';
+import { AUTH_MESSAGES } from '@flusys/nestjs-shared/constants';
 /**
  * Validates that user has access to the specified company.
  * Used for user-action and role-permission operations when company feature is enabled.
  *
  * @throws ForbiddenException if user doesn't have access to the company
- */ export function validateCompanyAccess(config, companyId, user, errorMessage = 'You do not have access to this company') {
+ */ export function validateCompanyAccess(config, companyId, user, errorMessage = 'You do not have access to this company', messageKey = AUTH_MESSAGES.COMPANY_NO_ACCESS) {
     if (!config.isCompanyFeatureEnabled() || !companyId) {
         return;
     }
     if (user.companyId !== companyId) {
-        throw new ForbiddenException(errorMessage);
+        throw new ForbiddenException({
+            message: errorMessage,
+            messageKey
+        });
     }
 }

package/fesm/services/action.service.js

@@ -26,6 +26,7 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { HybridCache, RequestScopedApiService } from '@flusys/nestjs-shared/classes';
+import { PERMISSION_OPERATION_MESSAGES } from '../config';
 import { UtilsService } from '@flusys/nestjs-shared/modules';
 import { BadRequestException, Inject, Injectable, Scope } from '@nestjs/common';
 import { In } from 'typeorm';
@@ -95,7 +96,13 @@ export class ActionService extends RequestScopedApiService {
     }
     requireUser(user, methodName) {
         if (!user) {
-            throw new BadRequestException(`User is required for ${methodName}`);
+            throw new BadRequestException({
+                message: `User is required for ${methodName}`,
+                messageKey: PERMISSION_OPERATION_MESSAGES.USER_REQUIRED,
+                messageParams: {
+                    method: methodName
+                }
+            });
         }
     }
     /** Get actions available for permission assignment (filtered by company whitelist) */ async getActionsForPermission(user) {
@@ -167,7 +174,7 @@ export class ActionService extends RequestScopedApiService {
         return rootNodes;
     }
     constructor(cacheManager, utilsService, iamConfigService, dataSourceProvider, permissionService){
-        super('action', null, cacheManager, utilsService, ActionService.name, true), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "iamConfigService", void 0), _define_property(this, "dataSourceProvider", void 0), _define_property(this, "permissionService", void 0), // Custom Methods
+        super('action', null, cacheManager, utilsService, ActionService.name, true, 'iam'), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "iamConfigService", void 0), _define_property(this, "dataSourceProvider", void 0), _define_property(this, "permissionService", void 0), // Custom Methods
         _define_property(this, "actionSelectFields", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.iamConfigService = iamConfigService, this.dataSourceProvider = dataSourceProvider, this.permissionService = permissionService, this.actionSelectFields = [
             'id',
             'code',

package/fesm/services/iam-datasource.service.js

@@ -26,7 +26,8 @@ function _ts_param(paramIndex, decorator) {
     };
 }
 import { MultiTenantDataSourceService } from '@flusys/nestjs-shared/modules';
-import { Inject, Injectable, Logger, Optional, Scope } from '@nestjs/common';
+import { SYSTEM_MESSAGES } from '@flusys/nestjs-shared/constants';
+import { Inject, Injectable, InternalServerErrorException, Optional, Scope } from '@nestjs/common';
 import { REQUEST } from '@nestjs/core';
 import { Request } from 'express';
 import { PermissionModeHelper } from '../helpers';
@@ -58,7 +59,7 @@ export class IAMDataSourceService extends MultiTenantDataSourceService {
     // Overrides
     async createDataSourceFromConfig(config) {
         const entities = await this.getIAMEntities();
-        return super.createDataSourceFromConfig(config, entities);
+        return await super.createDataSourceFromConfig(config, entities);
     }
     async getSingleDataSource() {
         if (!IAMDataSourceService.singleDataSource) {
@@ -68,7 +69,10 @@ export class IAMDataSourceService extends MultiTenantDataSourceService {
             const lockPromise = (async ()=>{
                 const config = this.getDefaultDatabaseConfig();
                 if (!config) {
-                    throw new Error('Default database config is not available');
+                    throw new InternalServerErrorException({
+                        message: 'Default database config is not available',
+                        messageKey: SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE
+                    });
                 }
                 const ds = await this.createDataSourceFromConfig(config);
                 IAMDataSourceService.singleDataSource = ds;
@@ -108,7 +112,7 @@ export class IAMDataSourceService extends MultiTenantDataSourceService {
         }
     }
     constructor(configService, request){
-        super(IAMDataSourceService.buildParentOptions(configService.getOptions()), request), _define_property(this, "configService", void 0), _define_property(this, "logger", void 0), this.configService = configService, this.logger = new Logger(IAMDataSourceService.name);
+        super(IAMDataSourceService.buildParentOptions(configService.getOptions()), request), _define_property(this, "configService", void 0), this.configService = configService;
     }
 }
 // Override parent's static properties to have IAM-specific cache