@forestadmin/agent 1.66.1 → 1.66.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/package.json +3 -2
  2. package/dist/agent/services/chart.d.ts +0 -102
  3. package/dist/agent/services/chart.js +0 -114
  4. package/dist/routes/access/api-chart.d.ts +0 -16
  5. package/dist/routes/access/api-chart.js +0 -47
  6. package/dist/routes/modification/action.d.ts +0 -16
  7. package/dist/routes/modification/action.js +0 -121
  8. package/dist/services/authorization/internal/action-permission.d.ts +0 -20
  9. package/dist/services/authorization/internal/action-permission.js +0 -98
  10. package/dist/services/authorization/internal/generate-action-identifier.d.ts +0 -12
  11. package/dist/services/authorization/internal/generate-action-identifier.js +0 -15
  12. package/dist/services/authorization/internal/generate-actions-from-permissions.d.ts +0 -12
  13. package/dist/services/authorization/internal/generate-actions-from-permissions.js +0 -139
  14. package/dist/services/authorization/internal/generate-user-scope.d.ts +0 -10
  15. package/dist/services/authorization/internal/generate-user-scope.js +0 -45
  16. package/dist/services/authorization/internal/hash-chart.d.ts +0 -5
  17. package/dist/services/authorization/internal/hash-chart.js +0 -58
  18. package/dist/services/authorization/internal/rendering-permission.d.ts +0 -39
  19. package/dist/services/authorization/internal/rendering-permission.js +0 -121
  20. package/dist/services/authorization/internal/types.d.ts +0 -255
  21. package/dist/services/authorization/internal/types.js +0 -54
  22. package/dist/services/authorization/internal/user-permission.d.ts +0 -16
  23. package/dist/services/authorization/internal/user-permission.js +0 -46
  24. package/dist/services/permissions.d.ts +0 -19
  25. package/dist/services/permissions.js +0 -85
  26. package/dist/utils/forest-http-api.d.ts +0 -37
  27. package/dist/utils/forest-http-api.js +0 -100
  28. package/dist/utils/forest-schema/column-schema-validation.d.ts +0 -5
  29. package/dist/utils/forest-schema/column-schema-validation.js +0 -14
  30. package/dist/utils/forest-schema/emitter.d.ts +0 -17
  31. package/dist/utils/forest-schema/emitter.js +0 -38
  32. package/dist/utils/forest-schema/schema-generator.d.ts +0 -6
  33. package/dist/utils/forest-schema/schema-generator.js +0 -13
  34. package/dist/utils/forest-schema/schema-serializer.d.ts +0 -12
  35. package/dist/utils/forest-schema/schema-serializer.js +0 -35
  36. package/dist/utils/forest-schema/types.d.ts +0 -85
  37. package/dist/utils/forest-schema/types.js +0 -16
@@ -1,139 +0,0 @@
1
- Object.defineProperty(exports, '__esModule', { value: true });
2
- const generate_action_identifier_1 = require('./generate-action-identifier');
3
- const types_1 = require('./types');
4
-
5
- function generateCollectionPermissions(permissions) {
6
- return Object.entries(permissions).reduce((acc, [collectionId, collectionPermissions]) => {
7
- const { collection } = collectionPermissions;
8
-
9
- return {
10
- ...acc,
11
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
12
- types_1.CollectionActionEvent.Browse,
13
- collectionId,
14
- )]: collection.browseEnabled,
15
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
16
- types_1.CollectionActionEvent.Read,
17
- collectionId,
18
- )]: collection.readEnabled,
19
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
20
- types_1.CollectionActionEvent.Edit,
21
- collectionId,
22
- )]: collection.editEnabled,
23
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
24
- types_1.CollectionActionEvent.Add,
25
- collectionId,
26
- )]: collection.addEnabled,
27
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
28
- types_1.CollectionActionEvent.Delete,
29
- collectionId,
30
- )]: collection.deleteEnabled,
31
- [(0, generate_action_identifier_1.generateCollectionActionIdentifier)(
32
- types_1.CollectionActionEvent.Export,
33
- collectionId,
34
- )]: collection.exportEnabled,
35
- };
36
- }, {});
37
- }
38
-
39
- function generateCollectionActionPermission(collectionId, actions) {
40
- return Object.entries(actions).reduce((acc, [actionName, actionPermissions]) => {
41
- return {
42
- ...acc,
43
- ...{
44
- [(0, generate_action_identifier_1.generateCustomActionIdentifier)(
45
- types_1.CustomActionEvent.Approve,
46
- actionName,
47
- collectionId,
48
- )]: actionPermissions.userApprovalEnabled,
49
- [(0, generate_action_identifier_1.generateCustomActionIdentifier)(
50
- types_1.CustomActionEvent.SelfApprove,
51
- actionName,
52
- collectionId,
53
- )]: actionPermissions.selfApprovalEnabled,
54
- [(0, generate_action_identifier_1.generateCustomActionIdentifier)(
55
- types_1.CustomActionEvent.Trigger,
56
- actionName,
57
- collectionId,
58
- )]: actionPermissions.triggerEnabled,
59
- [(0, generate_action_identifier_1.generateCustomActionIdentifier)(
60
- types_1.CustomActionEvent.RequireApproval,
61
- actionName,
62
- collectionId,
63
- )]: actionPermissions.approvalRequired,
64
- },
65
- };
66
- }, {});
67
- }
68
-
69
- function generateActionPermissions(permissions) {
70
- return Object.entries(permissions).reduce((acc, [collectionId, collectionPermissions]) => {
71
- const { actions } = collectionPermissions;
72
-
73
- return {
74
- ...acc,
75
- ...generateCollectionActionPermission(collectionId, actions),
76
- };
77
- }, {});
78
- }
79
-
80
- function generateActionsGloballyAllowed(permissions) {
81
- return new Set(
82
- Object.entries(permissions)
83
- .filter(([, permission]) => permission === true)
84
- .map(([action]) => action),
85
- );
86
- }
87
-
88
- function getUsersForRoles(roles, userIdsByRole) {
89
- return new Set(
90
- roles.reduce((acc, roleId) => {
91
- const userIds = (userIdsByRole.get(roleId) || []).map(userId => `${userId}`);
92
-
93
- if (userIds) {
94
- return [...acc, ...userIds];
95
- }
96
-
97
- return acc;
98
- }, []),
99
- );
100
- }
101
-
102
- function generateActionsAllowedByUser(permissions, users) {
103
- const userIdsByRole = users.reduce((acc, { id, roleId }) => {
104
- acc.set(roleId, [...(acc.get(roleId) || []), id]);
105
-
106
- return acc;
107
- }, new Map());
108
-
109
- return new Map(
110
- Object.entries(permissions)
111
- .filter(([, permission]) => typeof permission !== 'boolean')
112
- .map(([name, permission]) => [name, getUsersForRoles(permission.roles, userIdsByRole)]),
113
- );
114
- }
115
-
116
- function generateActionsFromPermissions(environmentPermissions, users) {
117
- if (environmentPermissions === true) {
118
- return {
119
- everythingAllowed: true,
120
- actionsGloballyAllowed: new Set(),
121
- actionsAllowedByUser: new Map(),
122
- };
123
- }
124
-
125
- const remotePermissions = environmentPermissions;
126
- const allPermissions = {
127
- ...generateCollectionPermissions(remotePermissions.collections),
128
- ...generateActionPermissions(remotePermissions.collections),
129
- };
130
-
131
- return {
132
- everythingAllowed: false,
133
- actionsGloballyAllowed: generateActionsGloballyAllowed(allPermissions),
134
- actionsAllowedByUser: generateActionsAllowedByUser(allPermissions, users),
135
- };
136
- }
137
-
138
- exports.default = generateActionsFromPermissions;
139
- // # sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ2VuZXJhdGUtYWN0aW9ucy1mcm9tLXBlcm1pc3Npb25zLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3NlcnZpY2VzL2F1dGhvcml6YXRpb24vaW50ZXJuYWwvZ2VuZXJhdGUtYWN0aW9ucy1mcm9tLXBlcm1pc3Npb25zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsbUNBVWlCO0FBQ2pCLDZFQUdzQztBQVl0QyxTQUFTLDZCQUE2QixDQUNwQyxXQUFnRDtJQUVoRCxPQUFPLE1BQU0sQ0FBQyxPQUFPLENBQUMsV0FBVyxDQUFDLENBQUMsTUFBTSxDQUFDLENBQUMsR0FBRyxFQUFFLENBQUMsWUFBWSxFQUFFLHFCQUFxQixDQUFDLEVBQUUsRUFBRTtRQUN2RixNQUFNLEVBQUUsVUFBVSxFQUFFLEdBQUcscUJBQXFCLENBQUM7UUFFN0MsT0FBTztZQUNMLEdBQUcsR0FBRztZQUNOLENBQUMsSUFBQSwrREFBa0MsRUFBQyw2QkFBcUIsQ0FBQyxNQUFNLEVBQUUsWUFBWSxDQUFDLENBQUMsRUFDOUUsVUFBVSxDQUFDLGFBQWE7WUFDMUIsQ0FBQyxJQUFBLCtEQUFrQyxFQUFDLDZCQUFxQixDQUFDLElBQUksRUFBRSxZQUFZLENBQUMsQ0FBQyxFQUM1RSxVQUFVLENBQUMsV0FBVztZQUN4QixDQUFDLElBQUEsK0RBQWtDLEVBQUMsNkJBQXFCLENBQUMsSUFBSSxFQUFFLFlBQVksQ0FBQyxDQUFDLEVBQzVFLFVBQVUsQ0FBQyxXQUFXO1lBQ3hCLENBQUMsSUFBQSwrREFBa0MsRUFBQyw2QkFBcUIsQ0FBQyxHQUFHLEVBQUUsWUFBWSxDQUFDLENBQUMsRUFDM0UsVUFBVSxDQUFDLFVBQVU7WUFDdkIsQ0FBQyxJQUFBLCtEQUFrQyxFQUFDLDZCQUFxQixDQUFDLE1BQU0sRUFBRSxZQUFZLENBQUMsQ0FBQyxFQUM5RSxVQUFVLENBQUMsYUFBYTtZQUMxQixDQUFDLElBQUEsK0RBQWtDLEVBQUMsNkJBQXFCLENBQUMsTUFBTSxFQUFFLFlBQVksQ0FBQyxDQUFDLEVBQzlFLFVBQVUsQ0FBQyxhQUFhO1NBQzNCLENBQUM7SUFDSixDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7QUFDVCxDQUFDO0FBRUQsU0FBUyxrQ0FBa0MsQ0FDekMsWUFBb0IsRUFDcEIsT0FBaUQ7SUFFakQsT0FBTyxNQUFNLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDLE1BQU0sQ0FBQyxDQUFDLEdBQUcsRUFBRSxDQUFDLFVBQVUsRUFBRSxpQkFBaUIsQ0FBQyxFQUFFLEVBQUU7UUFDN0UsT0FBTztZQUNMLEdBQUcsR0FBRztZQUNOLEdBQUc7Z0JBQ0QsQ0FBQyxJQUFBLDJEQUE4QixFQUFDLHlCQUFpQixDQUFDLE9BQU8sRUFBRSxVQUFVLEVBQUUsWUFBWSxDQUFDLENBQUMsRUFDbkYsaUJBQWlCLENBQUMsbUJBQW1CO2dCQUN2QyxDQUFDLElBQUEsMkRBQThCLEVBQUMseUJBQWlCLENBQUMsV0FBVyxFQUFFLFVBQVUsRUFBRSxZQUFZLENBQUMsQ0FBQyxFQUN2RixpQkFBaUIsQ0FBQyxtQkFBbUI7Z0JBQ3ZDLENBQUMsSUFBQSwyREFBOEIsRUFBQyx5QkFBaUIsQ0FBQyxPQUFPLEVBQUUsVUFBVSxFQUFFLFlBQVksQ0FBQyxDQUFDLEVBQ25GLGlCQUFpQixDQUFDLGNBQWM7Z0JBQ2xDLENBQUMsSUFBQSwyREFBOEIsRUFDN0IseUJBQWlCLENBQUMsZUFBZSxFQUNqQyxVQUFVLEVBQ1YsWUFBWSxDQUNiLENBQUMsRUFBRSxpQkFBaUIsQ0FBQyxnQkFBZ0I7YUFDdkM7U0FDRixDQUFDO0lBQ0osQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDO0FBQ1QsQ0FBQztBQUVELFNBQVMseUJBQXlCLENBQ2hDLFdBQWdEO0lBRWhELE9BQU8sTUFBTSxDQUFDLE9BQU8sQ0FBQyxXQUFXLENBQUMsQ0FBQyxNQUFNLENBQUMsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxZQUFZLEVBQUUscUJBQXFCLENBQUMsRUFBRSxFQUFFO1FBQ3ZGLE1BQU0sRUFBRSxPQUFPLEVBQUUsR0FBRyxxQkFBcUIsQ0FBQztRQUUxQyxPQUFPO1lBQ0wsR0FBRyxHQUFHO1lBQ04sR0FBRyxrQ0FBa0MsQ0FBQyxZQUFZLEVBQUUsT0FBTyxDQUFDO1NBQzdELENBQUM7SUFDSixDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7QUFDVCxDQUFDO0FBRUQsU0FBUyw4QkFBOEIsQ0FBQyxXQUFtQztJQUN6RSxPQUFPLElBQUksR0FBRyxDQUNaLE1BQU0sQ0FBQyxPQUFPLENBQUMsV0FBVyxDQUFDO1NBQ3hCLE1BQU0sQ0FBQyxDQUFDLENBQUMsRUFBRSxVQUFVLENBQUMsRUFBRSxFQUFFLENBQUMsVUFBVSxLQUFLLElBQUksQ0FBQztTQUMvQyxHQUFHLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FDN0IsQ0FBQztBQUNKLENBQUM7QUFFRCxTQUFTLGdCQUFnQixDQUFDLEtBQWUsRUFBRSxhQUFvQztJQUM3RSxPQUFPLElBQUksR0FBRyxDQUNaLEtBQUssQ0FBQyxNQUFNLENBQUMsQ0FBQyxHQUFHLEVBQUUsTUFBTSxFQUFFLEVBQUU7UUFDM0IsTUFBTSxPQUFPLEdBQUcsQ0FBQyxhQUFhLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLEdBQUcsTUFBTSxFQUFFLENBQUMsQ0FBQztRQUU3RSxJQUFJLE9BQU8sRUFBRTtZQUNYLE9BQU8sQ0FBQyxHQUFHLEdBQUcsRUFBRSxHQUFHLE9BQU8sQ0FBQyxDQUFDO1NBQzdCO1FBRUQsT0FBTyxHQUFHLENBQUM7SUFDYixDQUFDLEVBQUUsRUFBRSxDQUFDLENBQ1AsQ0FBQztBQUNKLENBQUM7QUFFRCxTQUFTLDRCQUE0QixDQUNuQyxXQUFtQyxFQUNuQyxLQUF5QjtJQUV6QixNQUFNLGFBQWEsR0FBRyxLQUFLLENBQUMsTUFBTSxDQUFDLENBQUMsR0FBRyxFQUFFLEVBQUUsRUFBRSxFQUFFLE1BQU0sRUFBRSxFQUFFLEVBQUU7UUFDekQsR0FBRyxDQUFDLEdBQUcsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsSUFBSSxFQUFFLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBRWxELE9BQU8sR0FBRyxDQUFDO0lBQ2IsQ0FBQyxFQUFFLElBQUksR0FBRyxFQUFvQixDQUFDLENBQUM7SUFFaEMsT0FBTyxJQUFJLEdBQUcsQ0FDWixNQUFNLENBQUMsT0FBTyxDQUFDLFdBQVcsQ0FBQztTQUN4QixNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsVUFBVSxDQUFDLEVBQUUsRUFBRSxDQUFDLE9BQU8sVUFBVSxLQUFLLFNBQVMsQ0FBQztTQUMzRCxHQUFHLENBQUMsQ0FBQyxDQUFDLElBQUksRUFBRSxVQUFVLENBQUMsRUFBRSxFQUFFLENBQUM7UUFDM0IsSUFBSTtRQUNKLGdCQUFnQixDQUFFLFVBQTBDLENBQUMsS0FBSyxFQUFFLGFBQWEsQ0FBQztLQUNuRixDQUFDLENBQ0wsQ0FBQztBQUNKLENBQUM7QUFFRCxTQUF3Qiw4QkFBOEIsQ0FDcEQsc0JBQWdELEVBQ2hELEtBQXlCO0lBRXpCLElBQUksc0JBQXNCLEtBQUssSUFBSSxFQUFFO1FBQ25DLE9BQU87WUFDTCxpQkFBaUIsRUFBRSxJQUFJO1lBQ3ZCLHNCQUFzQixFQUFFLElBQUksR0FBRyxFQUFFO1lBQ2pDLG9CQUFvQixFQUFFLElBQUksR0FBRyxFQUFFO1NBQ2hDLENBQUM7S0FDSDtJQUVELE1BQU0saUJBQWlCLEdBQW1DLHNCQUFzQixDQUFDO0lBRWpGLE1BQU0sY0FBYyxHQUFHO1FBQ3JCLEdBQUcsNkJBQTZCLENBQUMsaUJBQWlCLENBQUMsV0FBVyxDQUFDO1FBQy9ELEdBQUcseUJBQXlCLENBQUMsaUJBQWlCLENBQUMsV0FBVyxDQUFDO0tBQzVELENBQUM7SUFFRixPQUFPO1FBQ0wsaUJBQWlCLEVBQUUsS0FBSztRQUN4QixzQkFBc0IsRUFBRSw4QkFBOEIsQ0FBQyxjQUFjLENBQUM7UUFDdEUsb0JBQW9CLEVBQUUsNEJBQTRCLENBQUMsY0FBYyxFQUFFLEtBQUssQ0FBQztLQUMxRSxDQUFDO0FBQ0osQ0FBQztBQXhCRCxpREF3QkMifQ==
@@ -1,10 +0,0 @@
1
- import { GenericTree } from '@forestadmin/datasource-toolkit';
2
-
3
- import { Team, UserPermissionV4 } from './types';
4
-
5
- export default function generateUserScope(
6
- filter: GenericTree | null,
7
- team: Team,
8
- user: UserPermissionV4,
9
- ): GenericTree;
10
- // # sourceMappingURL=generate-user-scope.d.ts.map
@@ -1,45 +0,0 @@
1
- Object.defineProperty(exports, '__esModule', { value: true });
2
- const USER_VALUE_PREFIX = '$currentUser.';
3
- const USER_VALUE_TAG_PREFIX = '$currentUser.tags.';
4
- const USER_VALUE_TEAM_PREFIX = '$currentUser.team.';
5
-
6
- function generateUserValue(value, team, user) {
7
- if (typeof value !== 'string' || !value.startsWith(USER_VALUE_PREFIX)) {
8
- return value;
9
- }
10
-
11
- if (value.startsWith(USER_VALUE_TEAM_PREFIX)) {
12
- return team[value.slice(USER_VALUE_TEAM_PREFIX.length)];
13
- }
14
-
15
- if (value.startsWith(USER_VALUE_TAG_PREFIX)) {
16
- return user?.tags?.[value.substring(USER_VALUE_TAG_PREFIX.length)];
17
- }
18
-
19
- return user?.[value.substring(USER_VALUE_PREFIX.length)];
20
- }
21
-
22
- function generateUserScope(filter, team, user) {
23
- if (!filter) {
24
- return null;
25
- }
26
-
27
- const branch = filter;
28
-
29
- if (branch.aggregator) {
30
- return {
31
- ...filter,
32
- conditions: branch.conditions.map(condition => generateUserScope(condition, team, user)),
33
- };
34
- }
35
-
36
- const leaf = filter;
37
-
38
- return {
39
- ...filter,
40
- value: generateUserValue(leaf.value, team, user),
41
- };
42
- }
43
-
44
- exports.default = generateUserScope;
45
- // # sourceMappingURL=data:application/json;base64,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
@@ -1,5 +0,0 @@
1
- import { RenderingChartDefinitions } from './types';
2
-
3
- export declare function hashServerCharts(chartsByType: RenderingChartDefinitions): Set<string>;
4
- export declare function hashChartRequest(chart: any): string;
5
- // # sourceMappingURL=hash-chart.d.ts.map
@@ -1,58 +0,0 @@
1
- const __importDefault =
2
- (this && this.__importDefault) ||
3
- function (mod) {
4
- return mod && mod.__esModule ? mod : { default: mod };
5
- };
6
-
7
- Object.defineProperty(exports, '__esModule', { value: true });
8
- exports.hashChartRequest = exports.hashServerCharts = void 0;
9
- const object_hash_1 = __importDefault(require('object-hash'));
10
-
11
- function hashServerCharts(chartsByType) {
12
- const serverCharts = Object.entries(chartsByType)
13
- .filter(([key]) => key !== 'queries')
14
- .map(([, value]) => value)
15
- .flat();
16
- const frontendCharts = serverCharts.map(chart => ({
17
- type: chart.type,
18
- filters: chart.filter,
19
- aggregate: chart.aggregator,
20
- aggregate_field: chart.aggregateFieldName,
21
- collection: chart.sourceCollectionId,
22
- time_range: chart.timeRange,
23
- group_by_date_field: (chart.type === 'Line' && chart.groupByFieldName) || null,
24
- group_by_field: (chart.type !== 'Line' && chart.groupByFieldName) || null,
25
- limit: chart.limit,
26
- label_field: chart.labelFieldName,
27
- relationship_field: chart.relationshipFieldName,
28
- }));
29
- const hashes = frontendCharts.map(chart =>
30
- (0, object_hash_1.default)(chart, {
31
- respectType: false,
32
- excludeKeys: key => chart[key] === null || chart[key] === undefined,
33
- }),
34
- );
35
-
36
- return new Set(hashes);
37
- }
38
-
39
- exports.hashServerCharts = hashServerCharts;
40
-
41
- function hashChartRequest(chart) {
42
- const hashed = {
43
- ...chart,
44
- // When the server sends the data of the allowed charts, the target column is not specified
45
- // for relations => allow them all.
46
- ...(chart?.group_by_field?.includes(':')
47
- ? { group_by_field: chart.group_by_field.substring(0, chart.group_by_field.indexOf(':')) }
48
- : {}),
49
- };
50
-
51
- return (0, object_hash_1.default)(hashed, {
52
- respectType: false,
53
- excludeKeys: key => chart[key] === null,
54
- });
55
- }
56
-
57
- exports.hashChartRequest = hashChartRequest;
58
- // # sourceMappingURL=data:application/json;base64,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
@@ -1,39 +0,0 @@
1
- import { GenericTree } from '@forestadmin/datasource-toolkit';
2
-
3
- import { AgentOptionsWithDefaults } from '../../../types';
4
- import { User } from './types';
5
- import UserPermissionService from './user-permission';
6
-
7
- export declare type RenderingPermissionOptions = Pick<
8
- AgentOptionsWithDefaults,
9
- 'forestServerUrl' | 'envSecret' | 'isProduction' | 'permissionsCacheDurationInSeconds' | 'logger'
10
- >;
11
- export default class RenderingPermissionService {
12
- private readonly options;
13
- private readonly userPermissions;
14
- private readonly permissionsByRendering;
15
- constructor(options: RenderingPermissionOptions, userPermissions: UserPermissionService);
16
- getScope({
17
- renderingId,
18
- collectionName,
19
- user,
20
- }: {
21
- renderingId: string;
22
- collectionName: string;
23
- user: User;
24
- }): Promise<GenericTree>;
25
- private getScopeOrRetry;
26
- private loadPermissions;
27
- canRetrieveChart({
28
- renderingId,
29
- chartRequest,
30
- userId,
31
- }: {
32
- renderingId: number;
33
- chartRequest: any;
34
- userId: number;
35
- }): Promise<boolean>;
36
- private canRetrieveChartHashOrRetry;
37
- invalidateCache(renderingId: any): void;
38
- }
39
- // # sourceMappingURL=rendering-permission.d.ts.map
@@ -1,121 +0,0 @@
1
- const __importDefault =
2
- (this && this.__importDefault) ||
3
- function (mod) {
4
- return mod && mod.__esModule ? mod : { default: mod };
5
- };
6
-
7
- Object.defineProperty(exports, '__esModule', { value: true });
8
- const lru_cache_1 = __importDefault(require('lru-cache'));
9
- const hash_chart_1 = require('./hash-chart');
10
- const types_1 = require('./types');
11
- const forest_http_api_1 = __importDefault(require('../../../utils/forest-http-api'));
12
- const generate_user_scope_1 = __importDefault(require('./generate-user-scope'));
13
-
14
- class RenderingPermissionService {
15
- constructor(options, userPermissions) {
16
- this.options = options;
17
- this.userPermissions = userPermissions;
18
- this.permissionsByRendering = new lru_cache_1.default({
19
- max: 256,
20
- ttl: this.options.permissionsCacheDurationInSeconds * 1000,
21
- fetchMethod: renderingId => this.loadPermissions(renderingId),
22
- });
23
- }
24
-
25
- async getScope({ renderingId, collectionName, user }) {
26
- return this.getScopeOrRetry({ renderingId, collectionName, user, allowRetry: true });
27
- }
28
-
29
- async getScopeOrRetry({ renderingId, collectionName, user, allowRetry }) {
30
- const [permissions, userInfo] = await Promise.all([
31
- this.permissionsByRendering.fetch(renderingId),
32
- this.userPermissions.getUserInfo(user.id),
33
- ]);
34
- const collectionPermissions = permissions?.collections?.[collectionName];
35
-
36
- if (!collectionPermissions) {
37
- if (allowRetry) {
38
- this.invalidateCache(renderingId);
39
-
40
- return this.getScopeOrRetry({ renderingId, collectionName, user, allowRetry: false });
41
- }
42
-
43
- return null;
44
- }
45
-
46
- return (0, generate_user_scope_1.default)(
47
- collectionPermissions.scope,
48
- permissions.team,
49
- userInfo,
50
- );
51
- }
52
-
53
- async loadPermissions(renderingId) {
54
- this.options.logger('Debug', `Loading rendering permissions for rendering ${renderingId}`);
55
- const rawPermissions = await forest_http_api_1.default.getRenderingPermissions(
56
- renderingId,
57
- this.options,
58
- );
59
-
60
- return {
61
- team: rawPermissions.team,
62
- collections: rawPermissions.collections,
63
- charts: (0, hash_chart_1.hashServerCharts)(rawPermissions.stats),
64
- };
65
- }
66
-
67
- async canRetrieveChart({ renderingId, chartRequest, userId }) {
68
- const chartHash = (0, hash_chart_1.hashChartRequest)(chartRequest);
69
-
70
- return this.canRetrieveChartHashOrRetry({ renderingId, chartHash, userId, allowRetry: true });
71
- }
72
-
73
- async canRetrieveChartHashOrRetry({ renderingId, userId, chartHash, allowRetry }) {
74
- const [userInfo, permissions] = await Promise.all([
75
- this.userPermissions.getUserInfo(userId),
76
- this.permissionsByRendering.fetch(renderingId),
77
- ]);
78
-
79
- if (
80
- [
81
- types_1.PermissionLevel.Admin,
82
- types_1.PermissionLevel.Developer,
83
- types_1.PermissionLevel.Editor,
84
- ].includes(userInfo?.permissionLevel) ||
85
- permissions.charts.has(chartHash)
86
- ) {
87
- this.options.logger('Debug', `User ${userId} can retrieve chart on rendering ${renderingId}`);
88
-
89
- return true;
90
- }
91
-
92
- if (allowRetry) {
93
- this.invalidateCache(renderingId);
94
- this.userPermissions.clearCache();
95
-
96
- return this.canRetrieveChartHashOrRetry({
97
- renderingId,
98
- userId,
99
- chartHash,
100
- allowRetry: false,
101
- });
102
- }
103
-
104
- this.options.logger(
105
- 'Debug',
106
- `User ${userId} cannot retrieve chart on rendering ${renderingId}`,
107
- );
108
-
109
- return false;
110
- }
111
-
112
- invalidateCache(renderingId) {
113
- this.options.logger(
114
- 'Debug',
115
- `Invalidating rendering permissions cache for rendering ${renderingId}`,
116
- );
117
- this.permissionsByRendering.del(renderingId);
118
- }
119
- }
120
- exports.default = RenderingPermissionService;
121
- // # sourceMappingURL=data:application/json;base64,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