@getcommunity/gc-validators 0.0.216 → 0.0.218

package/dist/permissions.cjs

@@ -1,32 +1,759 @@
-'use strict';
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/permissions/permission.abac.ts
+const ROLE_PERMISSIONS = {
+	authenticated: {
+		"user-account": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		comment: {
+			list: true,
+			create: true,
+			update: (u, p, d) => u.id === Number(d?.author?.id),
+			delete: (u, p, d) => u.id === Number(d?.author?.id),
+			report: true
+		},
+		client: {
+			access: false,
+			billing: false,
+			owner: false,
+			manager: false,
+			admin: false,
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-user": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-content-pillar": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-media-platform": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-media-platform-content-type": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-project": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false,
+			assign: false
+		},
+		"client-report": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-styleguide": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"content-pillar": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"media-platform": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"media-content-type": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"monday-workspace": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"utm-tracking-link": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		gcflytour: {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"gcflytour-snap": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		}
+	},
+	public: {
+		"user-account": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		comment: {
+			list: true,
+			create: false,
+			update: false,
+			delete: false,
+			report: false
+		},
+		client: {
+			access: false,
+			billing: false,
+			owner: false,
+			manager: false,
+			admin: false,
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-user": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-content-pillar": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-media-platform": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-media-platform-content-type": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-project": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false,
+			assign: false
+		},
+		"client-report": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"client-styleguide": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"content-pillar": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"media-platform": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"media-content-type": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"monday-workspace": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		"utm-tracking-link": {
+			list: false,
+			create: false,
+			read: false,
+			update: false,
+			delete: false
+		},
+		gcflytour: {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"gcflytour-snap": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		}
+	},
+	employee: {
+		"user-account": {
+			list: true,
+			create: false,
+			read: true,
+			update: (u, p, d) => u.account.documentId === d?.documentId,
+			delete: false
+		},
+		comment: {
+			list: true,
+			create: true,
+			update: (u, p, d) => u.id === Number(d?.author?.id),
+			delete: (u, p, d) => u.id === Number(d?.author?.id),
+			report: true
+		},
+		client: {
+			access: (u, p, d) => p.scopes.includes("client:access"),
+			billing: (u, p, d) => p.scopes.includes("client:billing"),
+			owner: (u, p, d) => p.scopes.includes("client:owner"),
+			manager: (u, p, d) => p.scopes.includes("client:manager"),
+			admin: (u, p, d) => p.scopes.includes("client:admin"),
+			list: (u, p, d) => p.scopes.includes("client:access"),
+			create: false,
+			read: (u, p, d) => p.scopes.includes("client:access"),
+			update: (u, p, d) => p.scopes.includes("client:manager"),
+			delete: false
+		},
+		"client-user": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false,
+			verify: true
+		},
+		"client-content-pillar": {
+			list: (u, p, d) => p.scopes.includes("client-content-pillar:list"),
+			create: (u, p) => p.scopes.includes("client-content-pillar:create"),
+			read: (u, p, d) => p.scopes.includes("client-content-pillar:read"),
+			update: (u, p, d) => p.scopes.includes("client-content-pillar:update"),
+			delete: false
+		},
+		"client-media-platform": {
+			list: (u, p, d) => p.scopes.includes("client-media-platform:list"),
+			create: (u, p) => p.scopes.includes("client-media-platform:create"),
+			read: (u, p, d) => p.scopes.includes("client-media-platform:read"),
+			update: (u, p, d) => p.scopes.includes("client-media-platform:update"),
+			delete: false
+		},
+		"client-media-platform-content-type": {
+			list: (u, p, d) => p.scopes.includes("client-media-platform-content-type:list"),
+			create: (u, p) => p.scopes.includes("client-media-platform-content-type:create"),
+			read: (u, p, d) => p.scopes.includes("client-media-platform-content-type:read"),
+			update: (u, p, d) => p.scopes.includes("client-media-platform-content-type:update"),
+			delete: false
+		},
+		"client-project": {
+			list: (u, p, d) => p.scopes.includes("client-project:list"),
+			create: (u, p) => p.scopes.includes("client-project:create"),
+			read: (u, p, d) => p.scopes.includes("client-project:read"),
+			update: (u, p, d) => p.scopes.includes("client-project:update"),
+			delete: false,
+			assign: (u, p, d) => p.scopes.includes("client-project:assign")
+		},
+		"client-report": {
+			list: (u, p, d) => p.scopes.includes("client-report:list"),
+			create: (u, p) => p.scopes.includes("client-report:create"),
+			read: (u, p, d) => p.scopes.includes("client-report:read"),
+			update: (u, p, d) => p.scopes.includes("client-report:update"),
+			delete: false
+		},
+		"client-styleguide": {
+			list: (u, p, d) => p.scopes.includes("client-styleguide:list"),
+			create: false,
+			read: (u, p, d) => p.scopes.includes("client-styleguide:read"),
+			update: false,
+			delete: false
+		},
+		"content-pillar": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"media-platform": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"media-content-type": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"monday-workspace": {
+			list: (u, p, d) => p.scopes.includes("monday-workspace:list"),
+			create: (u, p) => p.scopes.includes("monday-workspace:create"),
+			read: (u, p, d) => p.scopes.includes("monday-workspace:read"),
+			update: (u, p, d) => p.scopes.includes("monday-workspace:update"),
+			delete: (u, p, d) => p.scopes.includes("monday-workspace:delete")
+		},
+		"utm-tracking-link": {
+			list: (u, p, d) => p.scopes.includes("utm-tracking-link:list"),
+			create: (u, p) => p.scopes.includes("utm-tracking-link:create"),
+			read: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:read"),
+			update: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:update"),
+			delete: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:delete")
+		},
+		gcflytour: {
+			list: true,
+			create: (u, p) => p.scopes.includes("gcflytour:create"),
+			read: true,
+			update: (u, p, d) => p.scopes.includes("gcflytour:update"),
+			delete: (u, p, d) => p.scopes.includes("gcflytour:delete")
+		},
+		"gcflytour-snap": {
+			list: true,
+			create: (u, p) => p.scopes.includes("gcflytour-snap:create"),
+			read: true,
+			update: (u, p, d) => p.scopes.includes("gcflytour-snap:update"),
+			delete: (u, p, d) => p.scopes.includes("gcflytour-snap:delete")
+		}
+	},
+	manager: {
+		"user-account": {
+			list: true,
+			create: false,
+			read: true,
+			update: (u, p, d) => u.account.documentId === d?.documentId,
+			delete: false
+		},
+		comment: {
+			list: true,
+			create: true,
+			update: (u, p, d) => u.id === Number(d?.author?.id),
+			delete: (u, p, d) => u.id === Number(d?.author?.id),
+			report: true
+		},
+		client: {
+			access: true,
+			billing: true,
+			owner: true,
+			manager: true,
+			admin: true,
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: false
+		},
+		"client-user": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true,
+			verify: true
+		},
+		"client-content-pillar": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"client-media-platform": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"client-media-platform-content-type": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"client-project": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true,
+			assign: true
+		},
+		"client-report": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"client-styleguide": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"content-pillar": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"media-platform": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"media-content-type": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"monday-workspace": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"utm-tracking-link": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		gcflytour: {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		},
+		"gcflytour-snap": {
+			list: true,
+			create: true,
+			read: true,
+			update: true,
+			delete: true
+		}
+	},
+	client: {
+		"user-account": {
+			list: true,
+			create: false,
+			read: true,
+			update: (u, p, d) => u.account.documentId === d?.documentId,
+			delete: false
+		},
+		comment: {
+			list: true,
+			create: true,
+			update: (u, p, d) => u.id === Number(d?.author?.id),
+			delete: (u, p, d) => u.id === Number(d?.author?.id),
+			report: true
+		},
+		client: {
+			access: (u, p, d) => p.scopes.includes("client:access"),
+			billing: (u, p, d) => p.scopes.includes("client:billing"),
+			owner: (u, p, d) => p.scopes.includes("client:owner"),
+			manager: (u, p, d) => p.scopes.includes("client:manager"),
+			admin: (u, p, d) => p.scopes.includes("client:admin"),
+			list: (u, p, d) => p.scopes.includes("client:access"),
+			create: false,
+			read: (u, p, d) => p.scopes.includes("client:access"),
+			update: (u, p, d) => p.scopes.includes("client:manager"),
+			delete: false
+		},
+		"client-user": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false,
+			verify: true
+		},
+		"client-content-pillar": {
+			list: (u, p, d) => p.scopes.includes("client-content-pillar:list"),
+			create: (u, p) => p.scopes.includes("client-content-pillar:create"),
+			read: (u, p, d) => p.scopes.includes("client-content-pillar:read"),
+			update: (u, p, d) => p.scopes.includes("client-content-pillar:update"),
+			delete: false
+		},
+		"client-media-platform": {
+			list: (u, p, d) => p.scopes.includes("client-media-platform:list"),
+			create: (u, p) => p.scopes.includes("client-media-platform:create"),
+			read: (u, p, d) => p.scopes.includes("client-media-platform:read"),
+			update: (u, p, d) => p.scopes.includes("client-media-platform:update"),
+			delete: false
+		},
+		"client-media-platform-content-type": {
+			list: (u, p, d) => p.scopes.includes("client-media-platform-content-type:list"),
+			create: (u, p) => p.scopes.includes("client-media-platform-content-type:create"),
+			read: (u, p, d) => p.scopes.includes("client-media-platform-content-type:read"),
+			update: (u, p, d) => p.scopes.includes("client-media-platform-content-type:update"),
+			delete: false
+		},
+		"client-project": {
+			list: (u, p, d) => p.scopes.includes("client-project:list"),
+			create: (u, p) => p.scopes.includes("client-project:create"),
+			read: (u, p, d) => p.scopes.includes("client-project:read"),
+			update: (u, p, d) => p.scopes.includes("client-project:update"),
+			delete: false,
+			assign: (u, p, d) => p.scopes.includes("client-project:assign")
+		},
+		"client-report": {
+			list: (u, p, d) => p.scopes.includes("client-report:list"),
+			create: (u, p) => p.scopes.includes("client-report:create"),
+			read: (u, p, d) => p.scopes.includes("client-report:read"),
+			update: (u, p, d) => p.scopes.includes("client-report:update"),
+			delete: false
+		},
+		"client-styleguide": {
+			list: (u, p, d) => p.scopes.includes("client-styleguide:list"),
+			create: false,
+			read: (u, p, d) => p.scopes.includes("client-styleguide:read"),
+			update: false,
+			delete: false
+		},
+		"content-pillar": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"media-platform": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"media-content-type": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"monday-workspace": {
+			list: (u, p, d) => p.scopes.includes("monday-workspace:list"),
+			create: false,
+			read: (u, p, d) => p.scopes.includes("monday-workspace:read"),
+			update: false,
+			delete: false
+		},
+		"utm-tracking-link": {
+			list: (u, p, d) => p.scopes.includes("utm-tracking-link:list"),
+			create: (u, p) => p.scopes.includes("utm-tracking-link:create"),
+			read: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:read"),
+			update: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:update"),
+			delete: (u, p, d) => d?.creator?.documentId === u.documentId || p.scopes.includes("utm-tracking-link:delete")
+		},
+		gcflytour: {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		},
+		"gcflytour-snap": {
+			list: true,
+			create: false,
+			read: true,
+			update: false,
+			delete: false
+		}
+	}
+};
+//#endregion
+//#region src/permissions/permission.constants.ts
+/**
+* Example usage of ClientEntityScope type
+* @reference https://youtube.com/shorts/zOseJFD447U?si=xX8DYEHdl9YtN7S4
+*
+* > const validScope: ClientEntityScope = "utm-tracking-link:list"; // ✅
+* > const invalidScope: ClientEntityScope = "blog-post:import"; // ❌ Type error!
+*/
+const CLIENT_ENTITY_PERMISSIONS = {
+	client: [
+		"admin",
+		"owner",
+		"manager",
+		"billing",
+		"access"
+	],
+	"client-project": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete",
+		"assign"
+	],
+	"client-media-platform": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"client-media-platform-content-type": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"client-content-pillar": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"client-report": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"client-styleguide": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"monday-workspace": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"utm-tracking-link": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	gcflytour: [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	],
+	"gcflytour-snap": [
+		"list",
+		"create",
+		"read",
+		"update",
+		"delete"
+	]
+};
+const CLIENT_ENTITY_KEYS = Object.keys(CLIENT_ENTITY_PERMISSIONS);
+const CLIENT_ENTITY_SCOPES = Object.entries(CLIENT_ENTITY_PERMISSIONS).flatMap(([entity, actions]) => actions.map((action) => `${entity}:${action}`));
+//#endregion
+//#region src/permissions/permission.utilities.ts
+function hasPermission(user, permissions, resource, action, data) {
+	if (!user) return false;
+	const permission = ROLE_PERMISSIONS[user.role.type][resource]?.[action];
+	if (permission == null) return false;
+	if (typeof permission === "boolean") return permission;
+	return permission(user, permissions, data);
+}
+function canAssignPermission(user, resource, action) {
+	if (!user) return false;
+	const permission = ROLE_PERMISSIONS[user.role.type][resource]?.[action];
+	if (permission == null) return false;
+	if (typeof permission === "boolean") return permission;
+	if (typeof permission === "function") return true;
+	return false;
+}
+//#endregion
+exports.CLIENT_ENTITY_KEYS = CLIENT_ENTITY_KEYS;
+exports.CLIENT_ENTITY_PERMISSIONS = CLIENT_ENTITY_PERMISSIONS;
+exports.CLIENT_ENTITY_SCOPES = CLIENT_ENTITY_SCOPES;
+exports.ROLE_PERMISSIONS = ROLE_PERMISSIONS;
+exports.canAssignPermission = canAssignPermission;
+exports.hasPermission = hasPermission;
 
-var chunkNMDMJZPF_cjs = require('./chunk-NMDMJZPF.cjs');
-
-
-
-Object.defineProperty(exports, "CLIENT_ENTITY_KEYS", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.CLIENT_ENTITY_KEYS; }
-});
-Object.defineProperty(exports, "CLIENT_ENTITY_PERMISSIONS", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.CLIENT_ENTITY_PERMISSIONS; }
-});
-Object.defineProperty(exports, "CLIENT_ENTITY_SCOPES", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.CLIENT_ENTITY_SCOPES; }
-});
-Object.defineProperty(exports, "ROLE_PERMISSIONS", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.ROLE_PERMISSIONS; }
-});
-Object.defineProperty(exports, "canAssignPermission", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.canAssignPermission; }
-});
-Object.defineProperty(exports, "hasPermission", {
-  enumerable: true,
-  get: function () { return chunkNMDMJZPF_cjs.hasPermission; }
-});
-//# sourceMappingURL=permissions.cjs.map
 //# sourceMappingURL=permissions.cjs.map