@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/cjs/controllers/company-action-permission.controller.js

@@ -1,119 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "CompanyActionPermissionController", {
-    enumerable: true,
-    get: function() {
-        return CompanyActionPermissionController;
-    }
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _common = require("@nestjs/common");
-const _swagger = require("@nestjs/swagger");
-const _config = require("../config");
-const _permissiondto = require("../dtos/permission.dto");
-const _permissionservice = require("../services/permission.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let CompanyActionPermissionController = class CompanyActionPermissionController {
-    async assignCompanyActions(dto) {
-        const result = await this.permissionService.assignCompanyActions(dto);
-        return {
-            success: true,
-            message: 'Company actions updated successfully',
-            messageKey: _config.PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS,
-            messageVariables: {
-                added: result.added,
-                removed: result.removed,
-                total: result.total
-            },
-            data: result
-        };
-    }
-    async getCompanyActions(dto) {
-        const actions = await this.permissionService.getCompanyActions(dto.companyId, false);
-        return {
-            success: true,
-            message: 'Company actions retrieved successfully',
-            messageKey: _config.COMPANY_ACTION_PERMISSION_MESSAGES.GET_SUCCESS,
-            data: actions
-        };
-    }
-    constructor(permissionService){
-        _define_property(this, "permissionService", void 0);
-        this.permissionService = permissionService;
-    }
-};
-_ts_decorate([
-    (0, _common.Post)('company-actions/assign'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.COMPANY_ACTION_PERMISSIONS.ASSIGN),
-    (0, _swagger.ApiOperation)({
-        summary: 'Whitelist actions for company',
-        description: 'Controls which actions are available to company users/roles.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.PermissionOperationResultDto),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.AssignCompanyActionsDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignCompanyActionsDto === "undefined" ? Object : _permissiondto.AssignCompanyActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], CompanyActionPermissionController.prototype, "assignCompanyActions", null);
-_ts_decorate([
-    (0, _common.Post)('get-company-actions'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.COMPANY_ACTION_PERMISSIONS.READ),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get company whitelisted actions',
-        description: 'Returns actions available to company.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.CompanyActionResponseDto, true, 'single'),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.GetCompanyActionsDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.GetCompanyActionsDto === "undefined" ? Object : _permissiondto.GetCompanyActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], CompanyActionPermissionController.prototype, "getCompanyActions", null);
-CompanyActionPermissionController = _ts_decorate([
-    (0, _swagger.ApiTags)('IAM - Company Action Permissions'),
-    (0, _common.Controller)('iam/permissions'),
-    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard, _nestjsshared.PermissionGuard),
-    (0, _swagger.ApiBearerAuth)(),
-    _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService
-    ])
-], CompanyActionPermissionController);

package/cjs/controllers/company-action-permission.controller.spec.js

@@ -1,65 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _companyactionpermissioncontroller = require("./company-action-permission.controller");
-describe('CompanyActionPermissionController', ()=>{
-    let controller;
-    let mockPermissionService;
-    beforeEach(()=>{
-        mockPermissionService = {
-            assignCompanyActions: jest.fn(),
-            getCompanyActions: jest.fn()
-        };
-        controller = new _companyactionpermissioncontroller.CompanyActionPermissionController(mockPermissionService);
-    });
-    describe('assignCompanyActions', ()=>{
-        it('whitelists actions for a company', async ()=>{
-            mockPermissionService.assignCompanyActions.mockResolvedValue({
-                added: 3,
-                removed: 0,
-                total: 3
-            });
-            const result = await controller.assignCompanyActions({
-                companyId: 'company-1',
-                actionIds: [
-                    'action-1',
-                    'action-2',
-                    'action-3'
-                ]
-            });
-            expect(mockPermissionService.assignCompanyActions).toHaveBeenCalledWith({
-                companyId: 'company-1',
-                actionIds: [
-                    'action-1',
-                    'action-2',
-                    'action-3'
-                ]
-            });
-            expect(result.success).toBe(true);
-            expect(result.data).toEqual({
-                added: 3,
-                removed: 0,
-                total: 3
-            });
-        });
-    });
-    describe('getCompanyActions', ()=>{
-        it('returns the whitelisted actions for a company', async ()=>{
-            mockPermissionService.getCompanyActions.mockResolvedValue([
-                {
-                    actionId: 'action-1'
-                }
-            ]);
-            const result = await controller.getCompanyActions({
-                companyId: 'company-1'
-            });
-            expect(mockPermissionService.getCompanyActions).toHaveBeenCalledWith('company-1', false);
-            expect(result.data).toEqual([
-                {
-                    actionId: 'action-1'
-                }
-            ]);
-        });
-    });
-});

package/cjs/controllers/index.js

@@ -1,23 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./action.controller"), exports);
-_export_star(require("./role.controller"), exports);
-_export_star(require("./company-action-permission.controller"), exports);
-_export_star(require("./my-permission.controller"), exports);
-_export_star(require("./role-permission.controller"), exports);
-_export_star(require("./user-action-permission.controller"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/controllers/my-permission.controller.js

@@ -1,147 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "MyPermissionController", {
-    enumerable: true,
-    get: function() {
-        return MyPermissionController;
-    }
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _config = require("../config");
-const _common = require("@nestjs/common");
-const _swagger = require("@nestjs/swagger");
-const _permissiondto = require("../dtos/permission.dto");
-const _permissionservice = require("../services/permission.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let MyPermissionController = class MyPermissionController {
-    async getMyPermissions(query, user) {
-        const data = await this.permissionService.getMyPermissions(user.id, user.branchId ?? null, user.companyId ?? null, query.parentCodes);
-        return {
-            success: true,
-            message: 'Permissions loaded successfully',
-            messageKey: _config.MY_PERMISSION_MESSAGES.GET_SUCCESS,
-            data
-        };
-    }
-    async getMyRoles(user) {
-        const data = await this.permissionService.getUserEffectiveRoles(user.id, user.companyId ?? null, user.branchId ?? null);
-        return {
-            success: true,
-            message: 'Roles loaded successfully',
-            messageKey: _config.MY_PERMISSION_MESSAGES.MY_ROLES_SUCCESS,
-            data
-        };
-    }
-    async getMyActions(user) {
-        const data = await this.permissionService.getUserEffectiveActions(user.id, user.companyId ?? null, user.branchId ?? null);
-        return {
-            success: true,
-            message: 'Actions loaded successfully',
-            messageKey: _config.MY_PERMISSION_MESSAGES.MY_ACTIONS_SUCCESS,
-            data
-        };
-    }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(permissionService){
-        _define_property(this, "permissionService", void 0);
-        this.permissionService = permissionService;
-    }
-};
-_ts_decorate([
-    (0, _common.Post)('my-permissions'),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get current user permissions',
-        description: 'Returns complete permissions for authenticated user. Includes menus, frontend actions, and caches endpoint permissions. Optionally filter by parent codes.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.MyPermissionsResponseDto),
-    (0, _swagger.ApiResponse)({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.MyPermissionsQueryDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.MyPermissionsQueryDto === "undefined" ? Object : _permissiondto.MyPermissionsQueryDto,
-        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyPermissions", null);
-_ts_decorate([
-    (0, _common.Post)('my-roles'),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get current user roles',
-        description: 'Returns effective roles for the authenticated user, merging company-wide (branch-independent) and login-branch-specific role assignments.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.UserRoleResponseDto, true, 'single'),
-    (0, _swagger.ApiResponse)({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    _ts_param(0, (0, _nestjsshared.CurrentUser)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyRoles", null);
-_ts_decorate([
-    (0, _common.Post)('my-actions'),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get current user direct actions',
-        description: 'Returns effective direct action assignments for the authenticated user, merging company-wide (branch-independent) and login-branch-specific assignments.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.UserActionResponseDto, true, 'single'),
-    (0, _swagger.ApiResponse)({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    _ts_param(0, (0, _nestjsshared.CurrentUser)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyActions", null);
-MyPermissionController = _ts_decorate([
-    (0, _swagger.ApiTags)('IAM - My Permissions'),
-    (0, _common.Controller)('iam/permissions'),
-    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard),
-    (0, _swagger.ApiBearerAuth)(),
-    _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService
-    ])
-], MyPermissionController);

package/cjs/controllers/my-permission.controller.spec.js

@@ -1,128 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _loggedusermock = require("@test-utils/mocks/logged-user.mock");
-const _mypermissioncontroller = require("./my-permission.controller");
-describe('MyPermissionController', ()=>{
-    let controller;
-    let mockPermissionService;
-    beforeEach(()=>{
-        mockPermissionService = {
-            getMyPermissions: jest.fn(),
-            getUserEffectiveRoles: jest.fn(),
-            getUserEffectiveActions: jest.fn()
-        };
-        controller = new _mypermissioncontroller.MyPermissionController(mockPermissionService);
-    });
-    describe('getMyPermissions', ()=>{
-        it('resolves permissions for the current user, branch, and company', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const permissions = {
-                menus: [],
-                actions: [
-                    'user.create'
-                ]
-            };
-            mockPermissionService.getMyPermissions.mockResolvedValue(permissions);
-            const result = await controller.getMyPermissions({
-                parentCodes: [
-                    'user'
-                ]
-            }, user);
-            expect(mockPermissionService.getMyPermissions).toHaveBeenCalledWith('user-1', 'branch-1', 'company-1', [
-                'user'
-            ]);
-            expect(result).toEqual({
-                success: true,
-                message: 'Permissions loaded successfully',
-                messageKey: expect.any(String),
-                data: permissions
-            });
-        });
-        it('passes null for missing branch and company context', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getMyPermissions.mockResolvedValue({});
-            await controller.getMyPermissions({}, user);
-            expect(mockPermissionService.getMyPermissions).toHaveBeenCalledWith('user-1', null, null, undefined);
-        });
-    });
-    describe('getMyRoles', ()=>{
-        it('resolves effective roles for the current user, company, and branch', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const roles = [
-                {
-                    id: 'perm-1',
-                    roleId: 'role-1',
-                    roleName: 'Manager'
-                }
-            ];
-            mockPermissionService.getUserEffectiveRoles.mockResolvedValue(roles);
-            const result = await controller.getMyRoles(user);
-            expect(mockPermissionService.getUserEffectiveRoles).toHaveBeenCalledWith('user-1', 'company-1', 'branch-1');
-            expect(result).toEqual({
-                success: true,
-                message: 'Roles loaded successfully',
-                messageKey: expect.any(String),
-                data: roles
-            });
-        });
-        it('passes null for missing company and branch context', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getUserEffectiveRoles.mockResolvedValue([]);
-            await controller.getMyRoles(user);
-            expect(mockPermissionService.getUserEffectiveRoles).toHaveBeenCalledWith('user-1', null, null);
-        });
-    });
-    describe('getMyActions', ()=>{
-        it('resolves effective actions for the current user, company, and branch', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const actions = [
-                {
-                    id: 'perm-1',
-                    actionId: 'action-1',
-                    actionCode: 'user.view'
-                }
-            ];
-            mockPermissionService.getUserEffectiveActions.mockResolvedValue(actions);
-            const result = await controller.getMyActions(user);
-            expect(mockPermissionService.getUserEffectiveActions).toHaveBeenCalledWith('user-1', 'company-1', 'branch-1');
-            expect(result).toEqual({
-                success: true,
-                message: 'Actions loaded successfully',
-                messageKey: expect.any(String),
-                data: actions
-            });
-        });
-        it('passes null for missing company and branch context', async ()=>{
-            const user = (0, _loggedusermock.buildMockUser)({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getUserEffectiveActions.mockResolvedValue([]);
-            await controller.getMyActions(user);
-            expect(mockPermissionService.getUserEffectiveActions).toHaveBeenCalledWith('user-1', null, null);
-        });
-    });
-});

package/cjs/controllers/role-permission.controller.js

@@ -1,191 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RolePermissionController", {
-    enumerable: true,
-    get: function() {
-        return RolePermissionController;
-    }
-});
-const _nestjsshared = require("@flusys/nestjs-shared");
-const _common = require("@nestjs/common");
-const _swagger = require("@nestjs/swagger");
-const _config = require("../config");
-const _permissiondto = require("../dtos/permission.dto");
-const _helpers = require("../helpers");
-const _iamconfigservice = require("../services/iam-config.service");
-const _permissionservice = require("../services/permission.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let RolePermissionController = class RolePermissionController {
-    async assignRoleActions(dto) {
-        const result = await this.permissionService.assignRoleActions(dto);
-        return {
-            success: true,
-            message: 'Role actions updated successfully',
-            messageKey: _config.PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS,
-            messageVariables: {
-                added: result.added,
-                removed: result.removed,
-                total: result.total
-            },
-            data: result
-        };
-    }
-    async getRoleActions(dto) {
-        const actions = await this.permissionService.getRoleActions(dto.roleId);
-        return {
-            success: true,
-            message: 'Role actions retrieved successfully',
-            messageKey: _config.ROLE_PERMISSION_MESSAGES.ACTIONS_SUCCESS,
-            data: actions
-        };
-    }
-    async assignUserRoles(dto, user) {
-        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user);
-        const result = await this.permissionService.assignUserRoles(dto);
-        return {
-            success: true,
-            message: 'User roles updated successfully',
-            messageKey: _config.PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS,
-            messageVariables: {
-                added: result.added,
-                removed: result.removed,
-                total: result.total
-            },
-            data: result
-        };
-    }
-    async getUserRoles(dto, user) {
-        (0, _helpers.validateCompanyAccess)(this.config, dto.companyId, user);
-        const roles = await this.permissionService.getUserRoles(dto.userId, dto.branchId, dto.companyId);
-        return {
-            success: true,
-            message: 'User roles retrieved successfully',
-            messageKey: _config.ROLE_PERMISSION_MESSAGES.USER_ROLES_SUCCESS,
-            data: roles
-        };
-    }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(permissionService, config){
-        _define_property(this, "permissionService", void 0);
-        _define_property(this, "config", void 0);
-        this.permissionService = permissionService;
-        this.config = config;
-    }
-};
-_ts_decorate([
-    (0, _common.Post)('role-actions/assign'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.ROLE_ACTION_PERMISSIONS.ASSIGN),
-    (0, _swagger.ApiOperation)({
-        summary: 'Assign/remove actions to/from role',
-        description: 'RBAC mode. No branch scoping.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.PermissionOperationResultDto),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.AssignRoleActionsDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignRoleActionsDto === "undefined" ? Object : _permissiondto.AssignRoleActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], RolePermissionController.prototype, "assignRoleActions", null);
-_ts_decorate([
-    (0, _common.Post)('get-role-actions'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.ROLE_ACTION_PERMISSIONS.READ),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get role actions',
-        description: 'Returns actions assigned to role.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.RoleActionResponseDto, true, 'single'),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.GetRoleActionsDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.GetRoleActionsDto === "undefined" ? Object : _permissiondto.GetRoleActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], RolePermissionController.prototype, "getRoleActions", null);
-_ts_decorate([
-    (0, _common.Post)('user-roles/assign'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ROLE_PERMISSIONS.ASSIGN),
-    (0, _swagger.ApiOperation)({
-        summary: 'Assign/remove roles to/from user',
-        description: 'RBAC mode. If company feature enabled, branchId is required.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.PermissionOperationResultDto),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.AssignUserRolesDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.AssignUserRolesDto === "undefined" ? Object : _permissiondto.AssignUserRolesDto,
-        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], RolePermissionController.prototype, "assignUserRoles", null);
-_ts_decorate([
-    (0, _common.Post)('get-user-roles'),
-    (0, _nestjsshared.RequirePermission)(_nestjsshared.USER_ROLE_PERMISSIONS.READ),
-    (0, _swagger.ApiOperation)({
-        summary: 'Get user roles',
-        description: 'Returns roles assigned to user. Filter by companyId and branchId.'
-    }),
-    (0, _nestjsshared.ApiResponseDto)(_permissiondto.UserRoleResponseDto, true, 'single'),
-    (0, _swagger.ApiBody)({
-        type: _permissiondto.GetUserRolesDto
-    }),
-    _ts_param(0, (0, _common.Body)()),
-    _ts_param(1, (0, _nestjsshared.CurrentUser)()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissiondto.GetUserRolesDto === "undefined" ? Object : _permissiondto.GetUserRolesDto,
-        typeof _nestjsshared.ILoggedUserInfo === "undefined" ? Object : _nestjsshared.ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], RolePermissionController.prototype, "getUserRoles", null);
-RolePermissionController = _ts_decorate([
-    (0, _swagger.ApiTags)('IAM - Role Permissions'),
-    (0, _common.Controller)('iam/permissions'),
-    (0, _common.UseGuards)(_nestjsshared.JwtAuthGuard, _nestjsshared.PermissionGuard),
-    (0, _swagger.ApiBearerAuth)(),
-    _ts_param(0, (0, _common.Inject)(_permissionservice.PermissionService)),
-    _ts_param(1, (0, _common.Inject)(_iamconfigservice.IAMConfigService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _permissionservice.PermissionService === "undefined" ? Object : _permissionservice.PermissionService,
-        typeof _iamconfigservice.IAMConfigService === "undefined" ? Object : _iamconfigservice.IAMConfigService
-    ])
-], RolePermissionController);