@getcommunity/gc-validators 0.0.195 → 0.0.197

package/dist/chunk-YT4F4B55.cjs

@@ -0,0 +1,646 @@
+'use strict';
+
+// src/permissions/permission.abac.ts
+var ROLE_PERMISSIONS = {
+  authenticated: {
+    "user-account": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    comment: {
+      list: true,
+      create: true,
+      update: (u, p, d) => u.id === Number(d?.author?.id),
+      delete: (u, p, d) => u.id === Number(d?.author?.id),
+      report: true
+    },
+    client: {
+      access: false,
+      billing: false,
+      owner: false,
+      manager: false,
+      admin: false,
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-user": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-content-pillar": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-media-platform": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-media-platform-content-type": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-project": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false,
+      assign: false
+    },
+    "client-report": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-styleguide": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "content-pillar": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "media-platform": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "media-content-type": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "utm-tracking-link": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    gcflytour: {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "gcflytour-snap": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    }
+  },
+  public: {
+    "user-account": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    comment: {
+      list: true,
+      create: false,
+      update: false,
+      delete: false,
+      report: false
+    },
+    client: {
+      access: false,
+      billing: false,
+      owner: false,
+      manager: false,
+      admin: false,
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-user": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-content-pillar": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-media-platform": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-media-platform-content-type": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-project": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false,
+      assign: false
+    },
+    "client-report": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "client-styleguide": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "content-pillar": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "media-platform": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "media-content-type": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    "utm-tracking-link": {
+      list: false,
+      create: false,
+      read: false,
+      update: false,
+      delete: false
+    },
+    gcflytour: {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "gcflytour-snap": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    }
+  },
+  employee: {
+    "user-account": {
+      list: true,
+      create: false,
+      read: true,
+      update: (u, p, d) => u.account.documentId === d?.documentId,
+      delete: false
+    },
+    comment: {
+      list: true,
+      create: true,
+      update: (u, p, d) => u.id === Number(d?.author?.id),
+      delete: (u, p, d) => u.id === Number(d?.author?.id),
+      report: true
+    },
+    client: {
+      access: (u, p, d) => p.scopes.includes("client:access"),
+      billing: (u, p, d) => p.scopes.includes("client:billing"),
+      owner: (u, p, d) => p.scopes.includes("client:owner"),
+      manager: (u, p, d) => p.scopes.includes("client:manager"),
+      admin: (u, p, d) => p.scopes.includes("client:admin"),
+      list: (u, p, d) => p.scopes.includes("client:access"),
+      create: false,
+      read: (u, p, d) => p.scopes.includes("client:access"),
+      update: (u, p, d) => p.scopes.includes("client:manager"),
+      delete: false
+    },
+    "client-user": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false,
+      verify: true
+    },
+    "client-content-pillar": {
+      list: (u, p, d) => p.scopes.includes("client-content-pillar:list"),
+      create: (u, p) => p.scopes.includes("client-content-pillar:create"),
+      read: (u, p, d) => p.scopes.includes("client-content-pillar:read"),
+      update: (u, p, d) => p.scopes.includes("client-content-pillar:update"),
+      delete: false
+    },
+    "client-media-platform": {
+      list: (u, p, d) => p.scopes.includes("client-media-platform:list"),
+      create: (u, p) => p.scopes.includes("client-media-platform:create"),
+      read: (u, p, d) => p.scopes.includes("client-media-platform:read"),
+      update: (u, p, d) => p.scopes.includes("client-media-platform:update"),
+      delete: false
+    },
+    "client-media-platform-content-type": {
+      list: (u, p, d) => p.scopes.includes("client-media-platform-content-type:list"),
+      create: (u, p) => p.scopes.includes("client-media-platform-content-type:create"),
+      read: (u, p, d) => p.scopes.includes("client-media-platform-content-type:read"),
+      update: (u, p, d) => p.scopes.includes("client-media-platform-content-type:update"),
+      delete: false
+    },
+    "client-project": {
+      list: (u, p, d) => p.scopes.includes("client-project:list"),
+      create: (u, p) => p.scopes.includes("client-project:create"),
+      read: (u, p, d) => p.scopes.includes("client-project:read"),
+      update: (u, p, d) => p.scopes.includes("client-project:update"),
+      delete: false,
+      assign: (u, p, d) => p.scopes.includes("client-project:assign")
+    },
+    "client-report": {
+      list: (u, p, d) => p.scopes.includes("client-report:list"),
+      create: (u, p) => p.scopes.includes("client-report:create"),
+      read: (u, p, d) => p.scopes.includes("client-report:read"),
+      update: (u, p, d) => p.scopes.includes("client-report:update"),
+      delete: false
+    },
+    "client-styleguide": {
+      list: (u, p, d) => p.scopes.includes("client-styleguide:list"),
+      create: false,
+      read: (u, p, d) => p.scopes.includes("client-styleguide:read"),
+      update: false,
+      delete: false
+    },
+    "content-pillar": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "media-platform": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "media-content-type": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "utm-tracking-link": {
+      list: (u, p, d) => p.scopes.includes("utm-tracking-link:list"),
+      create: (u, p) => p.scopes.includes("utm-tracking-link:create"),
+      read: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:read"),
+      update: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:update"),
+      delete: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:delete")
+    },
+    gcflytour: {
+      list: true,
+      create: (u, p) => p.scopes.includes("gcflytour:create"),
+      read: true,
+      update: (u, p, d) => p.scopes.includes("gcflytour:update"),
+      delete: (u, p, d) => p.scopes.includes("gcflytour:delete")
+    },
+    "gcflytour-snap": {
+      list: true,
+      create: (u, p) => p.scopes.includes("gcflytour-snap:create"),
+      read: true,
+      update: (u, p, d) => p.scopes.includes("gcflytour-snap:update"),
+      delete: (u, p, d) => p.scopes.includes("gcflytour-snap:delete")
+    }
+  },
+  manager: {
+    "user-account": {
+      list: true,
+      create: false,
+      read: true,
+      update: (u, p, d) => u.account.documentId === d?.documentId,
+      delete: false
+    },
+    comment: {
+      list: true,
+      create: true,
+      update: (u, p, d) => u.id === Number(d?.author?.id),
+      delete: (u, p, d) => u.id === Number(d?.author?.id),
+      report: true
+    },
+    client: {
+      access: true,
+      billing: true,
+      owner: true,
+      manager: true,
+      admin: true,
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: false
+    },
+    "client-user": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true,
+      verify: true
+    },
+    "client-content-pillar": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "client-media-platform": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "client-media-platform-content-type": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "client-project": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true,
+      assign: true
+    },
+    "client-report": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "client-styleguide": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "content-pillar": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "media-platform": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "media-content-type": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "utm-tracking-link": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    gcflytour: {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    },
+    "gcflytour-snap": {
+      list: true,
+      create: true,
+      read: true,
+      update: true,
+      delete: true
+    }
+  },
+  client: {
+    "user-account": {
+      list: true,
+      create: false,
+      read: true,
+      update: (u, p, d) => u.account.documentId === d?.documentId,
+      delete: false
+    },
+    comment: {
+      list: true,
+      create: true,
+      update: (u, p, d) => u.id === Number(d?.author?.id),
+      delete: (u, p, d) => u.id === Number(d?.author?.id),
+      report: true
+    },
+    client: {
+      access: (u, p, d) => p.scopes.includes("client:access"),
+      billing: (u, p, d) => p.scopes.includes("client:billing"),
+      owner: (u, p, d) => p.scopes.includes("client:owner"),
+      manager: (u, p, d) => p.scopes.includes("client:manager"),
+      admin: (u, p, d) => p.scopes.includes("client:admin"),
+      list: (u, p, d) => p.scopes.includes("client:access"),
+      create: false,
+      read: (u, p, d) => p.scopes.includes("client:access"),
+      update: (u, p, d) => p.scopes.includes("client:manager"),
+      delete: false
+    },
+    "client-user": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false,
+      verify: true
+    },
+    "client-content-pillar": {
+      list: (u, p, d) => p.scopes.includes("client-content-pillar:list"),
+      create: (u, p) => p.scopes.includes("client-content-pillar:create"),
+      read: (u, p, d) => p.scopes.includes("client-content-pillar:read"),
+      update: (u, p, d) => p.scopes.includes("client-content-pillar:update"),
+      delete: false
+    },
+    "client-media-platform": {
+      list: (u, p, d) => p.scopes.includes("client-media-platform:list"),
+      create: (u, p) => p.scopes.includes("client-media-platform:create"),
+      read: (u, p, d) => p.scopes.includes("client-media-platform:read"),
+      update: (u, p, d) => p.scopes.includes("client-media-platform:update"),
+      delete: false
+    },
+    "client-media-platform-content-type": {
+      list: (u, p, d) => p.scopes.includes("client-media-platform-content-type:list"),
+      create: (u, p) => p.scopes.includes("client-media-platform-content-type:create"),
+      read: (u, p, d) => p.scopes.includes("client-media-platform-content-type:read"),
+      update: (u, p, d) => p.scopes.includes("client-media-platform-content-type:update"),
+      delete: false
+    },
+    "client-project": {
+      list: (u, p, d) => p.scopes.includes("client-project:list"),
+      create: (u, p) => p.scopes.includes("client-project:create"),
+      read: (u, p, d) => p.scopes.includes("client-project:read"),
+      update: (u, p, d) => p.scopes.includes("client-project:update"),
+      delete: false,
+      assign: (u, p, d) => p.scopes.includes("client-project:assign")
+    },
+    "client-report": {
+      list: (u, p, d) => p.scopes.includes("client-report:list"),
+      create: (u, p) => p.scopes.includes("client-report:create"),
+      read: (u, p, d) => p.scopes.includes("client-report:read"),
+      update: (u, p, d) => p.scopes.includes("client-report:update"),
+      delete: false
+    },
+    "client-styleguide": {
+      list: (u, p, d) => p.scopes.includes("client-styleguide:list"),
+      create: false,
+      read: (u, p, d) => p.scopes.includes("client-styleguide:read"),
+      update: false,
+      delete: false
+    },
+    "content-pillar": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "media-platform": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "media-content-type": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "utm-tracking-link": {
+      list: (u, p, d) => p.scopes.includes("utm-tracking-link:list"),
+      create: (u, p) => p.scopes.includes("utm-tracking-link:create"),
+      read: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:read"),
+      update: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:update"),
+      delete: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:delete")
+    },
+    gcflytour: {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    },
+    "gcflytour-snap": {
+      list: true,
+      create: false,
+      read: true,
+      update: false,
+      delete: false
+    }
+  }
+};
+
+// src/permissions/permission.constants.ts
+var CLIENT_ENTITY_PERMISSIONS = {
+  client: ["admin", "owner", "manager", "billing", "access"],
+  "client-project": ["list", "create", "read", "update", "delete", "assign"],
+  "client-media-platform": ["list", "create", "read", "update", "delete"],
+  "client-media-platform-content-type": ["list", "create", "read", "update", "delete"],
+  "client-content-pillar": ["list", "create", "read", "update", "delete"],
+  "client-report": ["list", "create", "read", "update", "delete"],
+  "client-styleguide": ["list", "create", "read", "update", "delete"],
+  "utm-tracking-link": ["list", "create", "read", "update", "delete"],
+  gcflytour: ["list", "create", "read", "update", "delete"],
+  "gcflytour-snap": ["list", "create", "read", "update", "delete"]
+};
+var CLIENT_ENTITY_KEYS = Object.keys(
+  CLIENT_ENTITY_PERMISSIONS
+);
+var CLIENT_ENTITY_SCOPES = Object.entries(
+  CLIENT_ENTITY_PERMISSIONS
+).flatMap(
+  ([entity, actions]) => actions.map((action) => `${entity}:${action}`)
+);
+
+// src/permissions/permission.utilities.ts
+function hasPermission(user, permissions, resource, action, data) {
+  const permission = ROLE_PERMISSIONS[user.role.type][resource]?.[action];
+  if (permission == null) return false;
+  if (typeof permission === "boolean") return permission;
+  return permission(user, permissions, data);
+}
+
+exports.CLIENT_ENTITY_KEYS = CLIENT_ENTITY_KEYS;
+exports.CLIENT_ENTITY_PERMISSIONS = CLIENT_ENTITY_PERMISSIONS;
+exports.CLIENT_ENTITY_SCOPES = CLIENT_ENTITY_SCOPES;
+exports.ROLE_PERMISSIONS = ROLE_PERMISSIONS;
+exports.hasPermission = hasPermission;
+//# sourceMappingURL=chunk-YT4F4B55.cjs.map
+//# sourceMappingURL=chunk-YT4F4B55.cjs.map