@forestadmin/forestadmin-client 1.0.0-alpha.1 → 1.0.0-alpha.2

package/dist/charts/types.d.ts

@@ -0,0 +1,66 @@
+export declare type KeysOfUnion<T> = T extends T ? keyof T : never;
+export interface BaseChart {
+    type: ChartType;
+}
+export interface SmartRouteChart extends BaseChart {
+    type: Exclude<ChartType, ChartType.Smart>;
+    smartRoute: string;
+}
+export interface ApiRouteChart extends BaseChart {
+    type: Exclude<ChartType, ChartType.Smart>;
+    apiRoute: string;
+}
+export interface QueryChart extends BaseChart {
+    type: Exclude<ChartType, ChartType.Smart>;
+    query: string;
+}
+export interface FilterableChart extends BaseChart {
+    filter?: string | null;
+}
+export interface AggregatedChart extends BaseChart {
+    aggregator: 'Sum' | 'Count';
+    aggregateFieldName: string | null;
+}
+export interface CollectionChart extends BaseChart {
+    sourceCollectionName: string | number;
+}
+export interface GroupedByChart extends BaseChart {
+    groupByFieldName: string | null;
+}
+export interface LeaderboardChart extends BaseChart, AggregatedChart, CollectionChart {
+    type: ChartType.Leaderboard;
+    labelFieldName: string;
+    relationshipFieldName: string;
+    limit: number;
+}
+export interface LineChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart, GroupedByChart {
+    type: ChartType.Line;
+    timeRange: 'Day' | 'Week' | 'Month' | 'Year';
+}
+export interface ObjectiveChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart {
+    type: ChartType.Objective;
+    objective: number;
+}
+export interface PercentageChart extends BaseChart {
+    type: ChartType.Percentage;
+    numeratorChartId: string;
+    denominatorChartId: string;
+}
+export declare enum ChartType {
+    Pie = "Pie",
+    Value = "Value",
+    Leaderboard = "Leaderboard",
+    Line = "Line",
+    Objective = "Objective",
+    Percentage = "Percentage",
+    Smart = "Smart"
+}
+export interface PieChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart, GroupedByChart {
+    type: ChartType.Pie;
+}
+export interface ValueChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart {
+    type: ChartType.Value;
+}
+export declare type Chart = ApiRouteChart | QueryChart | SmartRouteChart | LeaderboardChart | LineChart | ObjectiveChart | PercentageChart | PieChart | ValueChart;
+export declare type ChartKeys = KeysOfUnion<Chart>;
+//# sourceMappingURL=types.d.ts.map

package/dist/charts/types.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChartType = void 0;
+var ChartType;
+(function (ChartType) {
+    ChartType["Pie"] = "Pie";
+    ChartType["Value"] = "Value";
+    ChartType["Leaderboard"] = "Leaderboard";
+    ChartType["Line"] = "Line";
+    ChartType["Objective"] = "Objective";
+    ChartType["Percentage"] = "Percentage";
+    ChartType["Smart"] = "Smart";
+})(ChartType = exports.ChartType || (exports.ChartType = {}));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhcnRzL3R5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQXNFQSxJQUFZLFNBUVg7QUFSRCxXQUFZLFNBQVM7SUFDbkIsd0JBQVcsQ0FBQTtJQUNYLDRCQUFlLENBQUE7SUFDZix3Q0FBMkIsQ0FBQTtJQUMzQiwwQkFBYSxDQUFBO0lBQ2Isb0NBQXVCLENBQUE7SUFDdkIsc0NBQXlCLENBQUE7SUFDekIsNEJBQWUsQ0FBQTtBQUNqQixDQUFDLEVBUlcsU0FBUyxHQUFULGlCQUFTLEtBQVQsaUJBQVMsUUFRcEIifQ==

package/dist/index.d.ts

@@ -1,8 +1,12 @@
 import { ForestAdminClientOptions } from './types';
 import ForestAdminClient from './forest-admin-client-with-cache';
-export { ForestAdminClientOptions, Logger, LoggerLevel, ForestAdminClient } from './types';
-export { CollectionActionEvent } from './permissions/types';
 export { default as JTWTokenExpiredError } from './permissions/errors/jwt-token-expired-error';
 export { default as JTWUnableToVerifyError } from './permissions/errors/jwt-unable-to-verify-error';
+export { default as ChainedSQLQueryError } from './permissions/errors/chained-sql-query-error';
+export { default as EmptySQLQueryError } from './permissions/errors/empty-sql-query-error';
+export { default as NonSelectSQLQueryError } from './permissions/errors/non-select-sql-query-error';
+export { ForestAdminClientOptions, Logger, LoggerLevel, ForestAdminClient } from './types';
+export { CollectionActionEvent } from './permissions/types';
 export default function createForestAdminClient(options: ForestAdminClientOptions): ForestAdminClient;
+export * from './charts/types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,20 +1,40 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JTWUnableToVerifyError = exports.JTWTokenExpiredError = exports.CollectionActionEvent = void 0;
+exports.CollectionActionEvent = exports.NonSelectSQLQueryError = exports.EmptySQLQueryError = exports.ChainedSQLQueryError = exports.JTWUnableToVerifyError = exports.JTWTokenExpiredError = void 0;
 const action_permission_1 = __importDefault(require("./permissions/action-permission"));
 const forest_admin_client_with_cache_1 = __importDefault(require("./forest-admin-client-with-cache"));
 const permission_with_cache_1 = __importDefault(require("./permissions/permission-with-cache"));
 const rendering_permission_1 = __importDefault(require("./permissions/rendering-permission"));
 const user_permission_1 = __importDefault(require("./permissions/user-permission"));
-var types_1 = require("./permissions/types");
-Object.defineProperty(exports, "CollectionActionEvent", { enumerable: true, get: function () { return types_1.CollectionActionEvent; } });
 var jwt_token_expired_error_1 = require("./permissions/errors/jwt-token-expired-error");
 Object.defineProperty(exports, "JTWTokenExpiredError", { enumerable: true, get: function () { return __importDefault(jwt_token_expired_error_1).default; } });
 var jwt_unable_to_verify_error_1 = require("./permissions/errors/jwt-unable-to-verify-error");
 Object.defineProperty(exports, "JTWUnableToVerifyError", { enumerable: true, get: function () { return __importDefault(jwt_unable_to_verify_error_1).default; } });
+var chained_sql_query_error_1 = require("./permissions/errors/chained-sql-query-error");
+Object.defineProperty(exports, "ChainedSQLQueryError", { enumerable: true, get: function () { return __importDefault(chained_sql_query_error_1).default; } });
+var empty_sql_query_error_1 = require("./permissions/errors/empty-sql-query-error");
+Object.defineProperty(exports, "EmptySQLQueryError", { enumerable: true, get: function () { return __importDefault(empty_sql_query_error_1).default; } });
+var non_select_sql_query_error_1 = require("./permissions/errors/non-select-sql-query-error");
+Object.defineProperty(exports, "NonSelectSQLQueryError", { enumerable: true, get: function () { return __importDefault(non_select_sql_query_error_1).default; } });
+var types_1 = require("./permissions/types");
+Object.defineProperty(exports, "CollectionActionEvent", { enumerable: true, get: function () { return types_1.CollectionActionEvent; } });
 function createForestAdminClient(options) {
     const optionsWithDefaults = {
         forestServerUrl: 'https://api.forestadmin.com',
@@ -30,4 +50,5 @@ function createForestAdminClient(options) {
     return new forest_admin_client_with_cache_1.default(optionsWithDefaults, permissionService, renderingPermission);
 }
 exports.default = createForestAdminClient;
-//# sourceMappingURL=data:application/json;base64,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
+__exportStar(require("./charts/types"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/permissions/errors/chained-sql-query-error.d.ts

@@ -0,0 +1,4 @@
+export default class ChainedSQLQueryError extends Error {
+    constructor();
+}
+//# sourceMappingURL=chained-sql-query-error.d.ts.map

package/dist/permissions/errors/chained-sql-query-error.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class ChainedSQLQueryError extends Error {
+    constructor() {
+        super('You cannot chain SQL queries.');
+    }
+}
+exports.default = ChainedSQLQueryError;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhaW5lZC1zcWwtcXVlcnktZXJyb3IuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZXJyb3JzL2NoYWluZWQtc3FsLXF1ZXJ5LWVycm9yLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsTUFBcUIsb0JBQXFCLFNBQVEsS0FBSztJQUNyRDtRQUNFLEtBQUssQ0FBQywrQkFBK0IsQ0FBQyxDQUFDO0lBQ3pDLENBQUM7Q0FDRjtBQUpELHVDQUlDIn0=

package/dist/permissions/errors/empty-sql-query-error.d.ts

@@ -0,0 +1,4 @@
+export default class EmptySQLQueryError extends Error {
+    constructor();
+}
+//# sourceMappingURL=empty-sql-query-error.d.ts.map

package/dist/permissions/errors/empty-sql-query-error.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class EmptySQLQueryError extends Error {
+    constructor() {
+        super('You cannot execute an empty SQL query.');
+    }
+}
+exports.default = EmptySQLQueryError;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW1wdHktc3FsLXF1ZXJ5LWVycm9yLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL3Blcm1pc3Npb25zL2Vycm9ycy9lbXB0eS1zcWwtcXVlcnktZXJyb3IudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQSxNQUFxQixrQkFBbUIsU0FBUSxLQUFLO0lBQ25EO1FBQ0UsS0FBSyxDQUFDLHdDQUF3QyxDQUFDLENBQUM7SUFDbEQsQ0FBQztDQUNGO0FBSkQscUNBSUMifQ==

package/dist/permissions/errors/non-select-sql-query-error.d.ts

@@ -0,0 +1,4 @@
+export default class NonSelectSQLQueryError extends Error {
+    constructor();
+}
+//# sourceMappingURL=non-select-sql-query-error.d.ts.map

package/dist/permissions/errors/non-select-sql-query-error.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class NonSelectSQLQueryError extends Error {
+    constructor() {
+        super('Only SELECT queries are allowed.');
+    }
+}
+exports.default = NonSelectSQLQueryError;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibm9uLXNlbGVjdC1zcWwtcXVlcnktZXJyb3IuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcGVybWlzc2lvbnMvZXJyb3JzL25vbi1zZWxlY3Qtc3FsLXF1ZXJ5LWVycm9yLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsTUFBcUIsc0JBQXVCLFNBQVEsS0FBSztJQUN2RDtRQUNFLEtBQUssQ0FBQyxrQ0FBa0MsQ0FBQyxDQUFDO0lBQzVDLENBQUM7Q0FDRjtBQUpELHlDQUlDIn0=

package/dist/permissions/hash-chart.d.ts

@@ -1,4 +1,7 @@
-import { Chart } from './types';
+import { Chart } from '../charts/types';
 export declare function hashServerCharts(charts: Chart[]): Set<string>;
-export declare function hashChartRequest(chart: Record<string, any>): string;
+export declare function isGroupedByChart(chart: Chart): chart is Chart & {
+    groupByFieldName?: string;
+};
+export declare function hashChartRequest(chart: Chart): string;
 //# sourceMappingURL=hash-chart.d.ts.map

package/dist/permissions/hash-chart.js

@@ -3,46 +3,44 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hashChartRequest = exports.hashServerCharts = void 0;
+exports.hashChartRequest = exports.isGroupedByChart = exports.hashServerCharts = void 0;
 const object_hash_1 = __importDefault(require("object-hash"));
-const types_1 = require("./types");
 function hashChart(chart) {
+    const knownChartKeys = [
+        'type',
+        'apiRoute',
+        'smartRoute',
+        'query',
+        'labelFieldName',
+        'filter',
+        'sourceCollectionName',
+        'aggregator',
+        'aggregateFieldName',
+        'groupByFieldName',
+        'relationshipFieldName',
+        'limit',
+        'timeRange',
+        'objective',
+        'numeratorChartId',
+        'denominatorChartId',
+    ];
     const hash = (0, object_hash_1.default)(chart, {
         respectType: false,
-        excludeKeys: key => chart[key] === null || chart[key] === undefined,
+        excludeKeys: key => chart[key] === null || chart[key] === undefined || !knownChartKeys.includes(key),
     });
     return hash;
 }
 function hashServerCharts(charts) {
-    const frontendCharts = charts.map(chart => ({
-        type: chart.type,
-        filters: chart.filter,
-        aggregate: chart.aggregator,
-        aggregate_field: chart.aggregateFieldName,
-        collection: chart.sourceCollectionId,
-        time_range: chart.timeRange,
-        group_by_date_field: (chart.type === types_1.ChartType.Line && chart.groupByFieldName) || null,
-        group_by_field: (chart.type !== types_1.ChartType.Line && chart.groupByFieldName) || null,
-        limit: chart.limit,
-        label_field: chart.labelFieldName,
-        relationship_field: chart.relationshipFieldName,
-        query: chart.query,
-    }));
-    const hashes = frontendCharts.map(hashChart);
+    const hashes = charts.map(hashChart);
     return new Set(hashes);
 }
 exports.hashServerCharts = hashServerCharts;
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function isGroupedByChart(chart) {
+    return 'groupByFieldName' in chart;
+}
+exports.isGroupedByChart = isGroupedByChart;
 function hashChartRequest(chart) {
-    const hashed = {
-        ...chart,
-        // When the server sends the data of the allowed charts, the target column is not specified
-        // for relations => allow them all.
-        ...(chart?.group_by_field?.includes(':')
-            ? { group_by_field: chart.group_by_field.substring(0, chart.group_by_field.indexOf(':')) }
-            : {}),
-    };
-    return hashChart(hashed);
+    return hashChart(chart);
 }
 exports.hashChartRequest = hashChartRequest;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/permissions/permission-with-cache.d.ts

@@ -1,3 +1,4 @@
+import { Chart } from '../charts/types';
 import { CollectionActionEvent } from './types';
 import { PermissionService } from '../types';
 import ActionPermission from './action-permission';
@@ -33,10 +34,10 @@ export default class PermissionServiceWithCache implements PermissionService {
         collectionName: string;
         customActionName: string;
     }): Promise<boolean>;
-    canRetrieveChart({ renderingId, userId, chartRequest, }: {
+    canExecuteChart({ renderingId, userId, chartRequest, }: {
         renderingId: number;
         userId: number;
-        chartRequest: unknown;
+        chartRequest: Chart;
     }): Promise<boolean>;
 }
 //# sourceMappingURL=permission-with-cache.d.ts.map

package/dist/permissions/permission-with-cache.js

@@ -28,8 +28,8 @@ class PermissionServiceWithCache {
             (0, generate_action_identifier_1.generateCustomActionIdentifier)(types_1.CustomActionEvent.RequireApproval, customActionName, collectionName),
         ]);
     }
-    async canRetrieveChart({ renderingId, userId, chartRequest, }) {
-        return this.renderingPermissionService.canRetrieveChart({
+    async canExecuteChart({ renderingId, userId, chartRequest, }) {
+        return this.renderingPermissionService.canExecuteChart({
             renderingId,
             userId,
             chartRequest,
@@ -37,4 +37,4 @@ class PermissionServiceWithCache {
     }
 }
 exports.default = PermissionServiceWithCache;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGVybWlzc2lvbi13aXRoLWNhY2hlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3Blcm1pc3Npb25zL3Blcm1pc3Npb24td2l0aC1jYWNoZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUNBLG1DQUFtRTtBQUVuRSw2RUFHc0M7QUFJdEMsTUFBcUIsMEJBQTBCO0lBQzdDLFlBQ21CLHVCQUF5QyxFQUN6QywwQkFBc0Q7UUFEdEQsNEJBQXVCLEdBQXZCLHVCQUF1QixDQUFrQjtRQUN6QywrQkFBMEIsR0FBMUIsMEJBQTBCLENBQTRCO0lBQ3RFLENBQUM7SUFFRyxLQUFLLENBQUMsZUFBZSxDQUFDLEVBQzNCLE1BQU0sRUFDTixjQUFjLEVBQ2QsS0FBSyxHQUtOO1FBQ0MsT0FBTyxJQUFJLENBQUMsdUJBQXVCLENBQUMsR0FBRyxDQUNyQyxHQUFHLE1BQU0sRUFBRSxFQUNYLElBQUEsK0RBQWtDLEVBQUMsS0FBSyxFQUFFLGNBQWMsQ0FBQyxDQUMxRCxDQUFDO0lBQ0osQ0FBQztJQUVNLEtBQUssQ0FBQyxzQkFBc0IsQ0FBQyxNQUtuQztRQUNDLE9BQU8sSUFBSSxDQUFDLDBCQUEwQixDQUFDLHNCQUFzQixDQUFDLE1BQU0sQ0FBQyxDQUFDO0lBQ3hFLENBQUM7SUFFTSxzQkFBc0IsQ0FBQyxFQUM1QixNQUFNLEVBQ04sY0FBYyxFQUNkLGdCQUFnQixHQUtqQjtRQUNDLE9BQU8sSUFBSSxDQUFDLHVCQUF1QixDQUFDLEdBQUcsQ0FDckMsR0FBRyxNQUFNLEVBQUUsRUFDWCxJQUFBLDJEQUE4QixFQUFDLHlCQUFpQixDQUFDLE9BQU8sRUFBRSxnQkFBZ0IsRUFBRSxjQUFjLENBQUMsQ0FDNUYsQ0FBQztJQUNKLENBQUM7SUFFTSxzQkFBc0IsQ0FBQyxFQUM1QixNQUFNLEVBQ04sY0FBYyxFQUNkLGdCQUFnQixFQUNoQixXQUFXLEdBTVo7UUFDQyxNQUFNLGdCQUFnQixHQUNwQixXQUFXLEtBQUssTUFBTTtZQUNwQixDQUFDLENBQUMsSUFBQSwyREFBOEIsRUFDNUIseUJBQWlCLENBQUMsV0FBVyxFQUM3QixnQkFBZ0IsRUFDaEIsY0FBYyxDQUNmO1lBQ0gsQ0FBQyxDQUFDLElBQUEsMkRBQThCLEVBQzVCLHlCQUFpQixDQUFDLE9BQU8sRUFDekIsZ0JBQWdCLEVBQ2hCLGNBQWMsQ0FDZixDQUFDO1FBRVIsT0FBTyxJQUFJLENBQUMsdUJBQXVCLENBQUMsR0FBRyxDQUFDLEdBQUcsTUFBTSxFQUFFLEVBQUUsZ0JBQWdCLENBQUMsQ0FBQztJQUN6RSxDQUFDO0lBRU0sS0FBSyxDQUFDLGdDQUFnQyxDQUFDLEVBQzVDLE1BQU0sRUFDTixjQUFjLEVBQ2QsZ0JBQWdCLEdBS2pCO1FBQ0MsT0FBTyxJQUFJLENBQUMsdUJBQXVCLENBQUMsUUFBUSxDQUFDLEdBQUcsTUFBTSxFQUFFLEVBQUU7WUFDeEQsSUFBQSwyREFBOEIsRUFBQyx5QkFBaUIsQ0FBQyxPQUFPLEVBQUUsZ0JBQWdCLEVBQUUsY0FBYyxDQUFDO1lBQzNGLElBQUEsMkRBQThCLEVBQzVCLHlCQUFpQixDQUFDLGVBQWUsRUFDakMsZ0JBQWdCLEVBQ2hCLGNBQWMsQ0FDZjtTQUNGLENBQUMsQ0FBQztJQUNMLENBQUM7SUFFTSxLQUFLLENBQUMsZUFBZSxDQUFDLEVBQzNCLFdBQVcsRUFDWCxNQUFNLEVBQ04sWUFBWSxHQUtiO1FBQ0MsT0FBTyxJQUFJLENBQUMsMEJBQTBCLENBQUMsZUFBZSxDQUFDO1lBQ3JELFdBQVc7WUFDWCxNQUFNO1lBQ04sWUFBWTtTQUNiLENBQUMsQ0FBQztJQUNMLENBQUM7Q0FDRjtBQTFHRCw2Q0EwR0MifQ==

package/dist/permissions/rendering-permission.d.ts

@@ -1,4 +1,5 @@
 import type { GenericTree } from '@forestadmin/datasource-toolkit';
+import { Chart } from '../charts/types';
 import { CollectionRenderingPermissionV4, Team } from './types';
 import { ForestAdminClientOptionsWithDefaults } from '../types';
 import UserPermissionService from './user-permission';
@@ -25,9 +26,10 @@ export default class RenderingPermissionService {
     }): Promise<boolean>;
     private canExecuteSegmentQueryOrRetry;
     private loadPermissions;
-    canRetrieveChart({ renderingId, chartRequest, userId, }: {
+    private isQueryChart;
+    canExecuteChart({ renderingId, chartRequest, userId, }: {
         renderingId: number | string;
-        chartRequest: unknown;
+        chartRequest: Chart;
         userId: number | string;
     }): Promise<boolean>;
     private canRetrieveChartHashOrRetry;

package/dist/permissions/rendering-permission.js

@@ -9,6 +9,7 @@ const hash_chart_1 = require("./hash-chart");
 const forest_http_api_1 = __importDefault(require("./forest-http-api"));
 const generate_user_scope_1 = __importDefault(require("./generate-user-scope"));
 const is_segment_query_authorized_1 = __importDefault(require("./is-segment-query-authorized"));
+const verify_sql_query_1 = __importDefault(require("./verify-sql-query"));
 class RenderingPermissionService {
     constructor(options, userPermissions) {
         this.options = options;
@@ -38,12 +39,12 @@ class RenderingPermissionService {
         return (0, generate_user_scope_1.default)(collectionPermissions.scope, permissions.team, userInfo);
     }
     async canExecuteSegmentQuery({ renderingId, collectionName, segmentQuery, }) {
-        return this.canExecuteSegmentQueryOrRetry({
+        return ((await this.canExecuteSegmentQueryOrRetry({
             renderingId,
             collectionName,
             segmentQuery,
             allowRetry: true,
-        });
+        })) && (0, verify_sql_query_1.default)(segmentQuery));
     }
     async canExecuteSegmentQueryOrRetry({ renderingId, collectionName, segmentQuery, allowRetry, }) {
         const permissions = await this.permissionsByRendering.fetch(`${renderingId}`);
@@ -68,15 +69,25 @@ class RenderingPermissionService {
     async loadPermissions(renderingId) {
         this.options.logger('Debug', `Loading rendering permissions for rendering ${renderingId}`);
         const rawPermissions = await forest_http_api_1.default.getRenderingPermissions(renderingId, this.options);
+        const charts = (0, hash_chart_1.hashServerCharts)(rawPermissions.stats);
         return {
             team: rawPermissions.team,
             collections: rawPermissions.collections,
-            charts: (0, hash_chart_1.hashServerCharts)(rawPermissions.stats),
+            charts,
         };
     }
-    async canRetrieveChart({ renderingId, chartRequest, userId, }) {
+    isQueryChart(chartRequest) {
+        return 'query' in chartRequest;
+    }
+    async canExecuteChart({ renderingId, chartRequest, userId, }) {
         const chartHash = (0, hash_chart_1.hashChartRequest)(chartRequest);
-        return this.canRetrieveChartHashOrRetry({ renderingId, chartHash, userId, allowRetry: true });
+        return ((await this.canRetrieveChartHashOrRetry({
+            renderingId,
+            chartHash,
+            userId,
+            allowRetry: true,
+        })) &&
+            (!this.isQueryChart(chartRequest) || (0, verify_sql_query_1.default)(chartRequest.query)));
     }
     async canRetrieveChartHashOrRetry({ renderingId, userId, chartHash, allowRetry, }) {
         const [userInfo, permissions] = await Promise.all([
@@ -107,4 +118,4 @@ class RenderingPermissionService {
     }
 }
 exports.default = RenderingPermissionService;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/permissions/types.d.ts

@@ -1,4 +1,5 @@
 import type { GenericTree } from '@forestadmin/datasource-toolkit';
+import type { Chart } from '../charts/types';
 export declare type EnvironmentPermissionsV4 = EnvironmentPermissionsV4Remote | true;
 export declare type RightDescriptionWithRolesV4 = {
     roles: number[];
@@ -60,75 +61,12 @@ export declare enum CustomActionEvent {
     SelfApprove = "self-approve",
     RequireApproval = "require-approval"
 }
-export declare enum ChartType {
-    Pie = "Pie",
-    Value = "Value",
-    Leaderboard = "Leaderboard",
-    Line = "Line",
-    Objective = "Objective",
-    Percentage = "Percentage",
-    Smart = "Smart"
-}
 export interface DisplaySettings {
     x: number;
     y: number;
     width: number;
     height: number;
 }
-export interface BaseChart {
-    type: ChartType;
-}
-export interface SmartRouteChart extends BaseChart {
-    type: Exclude<ChartType, ChartType.Smart>;
-    smartRoute: string;
-}
-export interface ApiRouteChart extends BaseChart {
-    type: Exclude<ChartType, ChartType.Smart>;
-    apiRoute: string;
-}
-export interface QueryChart extends BaseChart {
-    type: Exclude<ChartType, ChartType.Smart>;
-    query: string;
-}
-export interface FilterableChart extends BaseChart {
-    filter?: string;
-}
-export interface AggregatedChart extends BaseChart {
-    aggregator: 'Sum' | 'Count';
-    aggregateFieldName: string | null;
-}
-export interface CollectionChart extends BaseChart {
-    sourceCollectionId: string | number;
-}
-export interface GroupedByChart extends BaseChart {
-    groupByFieldName: string | null;
-}
-export interface LeaderboardChart extends BaseChart, AggregatedChart, CollectionChart {
-    type: ChartType.Leaderboard;
-    labelFieldName: string;
-    relationshipFieldName: string;
-    limit: number;
-}
-export interface LineChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart, GroupedByChart {
-    type: ChartType.Line;
-    timeRange: 'Day' | 'Week' | 'Month' | 'Year';
-}
-export interface ObjectiveChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart {
-    type: ChartType.Objective;
-    objective: number;
-}
-export interface PercentageChart extends BaseChart {
-    type: ChartType.Percentage;
-    numeratorChartId: string;
-    denominatorChartId: string;
-}
-export interface PieChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart, GroupedByChart {
-    type: ChartType.Pie;
-}
-export interface ValueChart extends BaseChart, FilterableChart, AggregatedChart, CollectionChart {
-    type: ChartType.Value;
-}
-export declare type Chart = ApiRouteChart | QueryChart | SmartRouteChart | LeaderboardChart | LineChart | ObjectiveChart | PercentageChart | PieChart | ValueChart;
 export interface CollectionColumn {
     id: string | number;
     fieldName: string;

package/dist/permissions/types.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChartType = exports.CustomActionEvent = exports.CollectionActionEvent = exports.PermissionLevel = void 0;
+exports.CustomActionEvent = exports.CollectionActionEvent = exports.PermissionLevel = void 0;
 var PermissionLevel;
 (function (PermissionLevel) {
     PermissionLevel["Admin"] = "admin";
@@ -24,14 +24,4 @@ var CustomActionEvent;
     CustomActionEvent["SelfApprove"] = "self-approve";
     CustomActionEvent["RequireApproval"] = "require-approval";
 })(CustomActionEvent = exports.CustomActionEvent || (exports.CustomActionEvent = {}));
-var ChartType;
-(function (ChartType) {
-    ChartType["Pie"] = "Pie";
-    ChartType["Value"] = "Value";
-    ChartType["Leaderboard"] = "Leaderboard";
-    ChartType["Line"] = "Line";
-    ChartType["Objective"] = "Objective";
-    ChartType["Percentage"] = "Percentage";
-    ChartType["Smart"] = "Smart";
-})(ChartType = exports.ChartType || (exports.ChartType = {}));
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvcGVybWlzc2lvbnMvdHlwZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBMENBLElBQVksZUFLWDtBQUxELFdBQVksZUFBZTtJQUN6QixrQ0FBZSxDQUFBO0lBQ2YsMENBQXVCLENBQUE7SUFDdkIsb0NBQWlCLENBQUE7SUFDakIsZ0NBQWEsQ0FBQTtBQUNmLENBQUMsRUFMVyxlQUFlLEdBQWYsdUJBQWUsS0FBZix1QkFBZSxRQUsxQjtBQVlELElBQVkscUJBT1g7QUFQRCxXQUFZLHFCQUFxQjtJQUMvQiwwQ0FBaUIsQ0FBQTtJQUNqQiwwQ0FBaUIsQ0FBQTtJQUNqQixzQ0FBYSxDQUFBO0lBQ2Isc0NBQWEsQ0FBQTtJQUNiLDBDQUFpQixDQUFBO0lBQ2pCLG9DQUFXLENBQUE7QUFDYixDQUFDLEVBUFcscUJBQXFCLEdBQXJCLDZCQUFxQixLQUFyQiw2QkFBcUIsUUFPaEM7QUFFRCxJQUFZLGlCQUtYO0FBTEQsV0FBWSxpQkFBaUI7SUFDM0Isd0NBQW1CLENBQUE7SUFDbkIsd0NBQW1CLENBQUE7SUFDbkIsaURBQTRCLENBQUE7SUFDNUIseURBQW9DLENBQUE7QUFDdEMsQ0FBQyxFQUxXLGlCQUFpQixHQUFqQix5QkFBaUIsS0FBakIseUJBQWlCLFFBSzVCIn0=

package/dist/permissions/verify-sql-query.d.ts

@@ -0,0 +1,2 @@
+export default function verifySQLQuery(inputQuery: string | null): boolean;
+//# sourceMappingURL=verify-sql-query.d.ts.map

package/dist/permissions/verify-sql-query.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const chained_sql_query_error_1 = __importDefault(require("./errors/chained-sql-query-error"));
+const empty_sql_query_error_1 = __importDefault(require("./errors/empty-sql-query-error"));
+const non_select_sql_query_error_1 = __importDefault(require("./errors/non-select-sql-query-error"));
+const QUERY_SELECT = /^SELECT\s[^]*FROM\s[^]*$/i;
+function verifySQLQuery(inputQuery) {
+    if (!inputQuery?.trim()) {
+        throw new empty_sql_query_error_1.default();
+    }
+    if (inputQuery.includes(';') && inputQuery.indexOf(';') < inputQuery.length - 1) {
+        throw new chained_sql_query_error_1.default();
+    }
+    if (!QUERY_SELECT.test(inputQuery)) {
+        throw new non_select_sql_query_error_1.default();
+    }
+    return true;
+}
+exports.default = verifySQLQuery;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types.d.ts

@@ -1,5 +1,6 @@
 import type { GenericTree } from '@forestadmin/datasource-toolkit';
-import { CollectionActionEvent } from './permissions/types';
+import type { Chart } from './charts/types';
+import type { CollectionActionEvent } from './permissions/types';
 export declare type LoggerLevel = 'Debug' | 'Info' | 'Warn' | 'Error';
 export declare type Logger = (level: LoggerLevel, message: unknown) => void;
 export declare type ForestAdminClientOptions = {
@@ -41,10 +42,10 @@ export interface PermissionService {
         collectionName: string;
         customActionName: string;
     }): Promise<boolean>;
-    canRetrieveChart(params: {
+    canExecuteChart(params: {
         renderingId: number | string;
         userId: number | string;
-        chartRequest: unknown;
+        chartRequest: Chart;
     }): Promise<boolean>;
     canExecuteSegmentQuery(params: {
         userId: number | string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forestadmin/forestadmin-client",
-  "version": "1.0.0-alpha.1",
+  "version": "1.0.0-alpha.2",
   "main": "dist/index.js",
   "license": "GPL-3.0",
   "publishConfig": {
@@ -29,10 +29,10 @@
     "test": "jest"
   },
   "devDependencies": {
+    "@forestadmin/datasource-toolkit": "1.0.1-alpha.1",
     "@types/jsonwebtoken": "^8.5.8",
     "@types/lru-cache": "^7.6.1",
     "@types/superagent": "^4.1.15",
-    "fishery": "^2.1.0",
-    "@forestadmin/datasource-toolkit": "1.0.1-alpha.1"
+    "fishery": "^2.1.0"
   }
 }