@intuitionrobotics/permissions 0.47.59 → 1.0.1

package/dist/app-backend/modules/permissions-assert.js

@@ -0,0 +1,226 @@
+/*
+ * ts-common is the basic building blocks of our typescript projects
+ *
+ * Copyright (C) 2020 Intuition Robotics
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { _keys, BadImplementationException, batchActionParallel, filterDuplicates, Module } from "@intuitionrobotics/ts-common";
+import { ApiException, ApiResponse } from "@intuitionrobotics/thunderstorm/backend";
+import {} from "../../index.js";
+import { AccessLevelPermissionsDB, ApiPermissionsDB } from "./db-types/managment.js";
+import { GroupPermissionsDB, UserPermissionsDB } from "./db-types/assign.js";
+import { HttpMethod } from "@intuitionrobotics/thunderstorm";
+import { AccountModule } from "@intuitionrobotics/user-account/backend";
+import { PermissionsModule } from "./PermissionsModule.js";
+export class PermissionsAssert_Class extends Module {
+    constructor() {
+        super("PermissionsAssert");
+    }
+    Middleware = (keys) => async (req, data, response, scopes) => {
+        let account;
+        await this.CustomMiddleware(keys, async (projectId, customFields) => {
+            account = await AccountModule.validateSession(req, scopes, response);
+            await this.assertUserPermissions(projectId, data.url, account._id, customFields);
+        })(req, data, response, scopes);
+        return { account };
+    };
+    CustomMiddleware = (keys, action) => async (req, data, _response) => {
+        const customFields = {};
+        let object;
+        switch (data.method) {
+            case HttpMethod.POST:
+            case HttpMethod.PATCH:
+            case HttpMethod.PUT:
+                object = data.body;
+                break;
+            case HttpMethod.GET:
+            case HttpMethod.DELETE:
+                object = data.query;
+                break;
+            default:
+                throw new BadImplementationException(`Generic custom fields cannot be extracted on api with method: ${data.method}`);
+        }
+        _keys(object).filter(key => keys.includes(key)).forEach(key => {
+            const oElement = object[key];
+            if (oElement === undefined || oElement === null)
+                return;
+            if (typeof oElement !== "string")
+                return;
+            customFields[key] = oElement;
+        });
+        const projectId = PermissionsModule.getProjectIdentity()._id;
+        await action(projectId, customFields);
+    };
+    async assertUserPermissions(projectId, path, userId, requestCustomField) {
+        const [apiDetails, userDetails] = await Promise.all([
+            this.getApiDetails(path, projectId),
+            this.getUserDetails(userId)
+        ]);
+        this._assertUserPermissionsImpl(apiDetails, projectId, userDetails, requestCustomField);
+    }
+    _assertUserPermissionsImpl(apiDetails, projectId, userDetails, requestCustomField) {
+        if (!apiDetails.apiDb.accessLevelIds) {
+            if (!this.config.strictMode)
+                return;
+            throw new ApiException(403, `No permissions configuration specified for api: ${projectId}--${apiDetails.apiDb.path}`);
+        }
+        this.assertUserPermissionsImpl(userDetails.userGroups, apiDetails.requestPermissions, [requestCustomField]);
+    }
+    async assertUserSharingGroup(granterUserId, userGroup) {
+        const [granterUser, groupToShare] = await Promise.all([this.getUserDetails(granterUserId), GroupPermissionsDB.queryUnique({ _id: userGroup.groupId })]);
+        groupToShare.customFields = this.getCombineUserGroupCF(userGroup, groupToShare);
+        const requestPermissions = await this.getAccessLevels(groupToShare.accessLevelIds || []);
+        const requestCustomFields = groupToShare.customFields;
+        this.assertUserPermissionsImpl(granterUser.userGroups, requestPermissions, requestCustomFields);
+    }
+    assertUserPermissionsImpl(userGroups, requestPermissions, requestCustomFields) {
+        if (!requestPermissions.length)
+            return;
+        const requestPairWithLevelsObj = { accessLevels: requestPermissions, customFields: requestCustomFields };
+        let groupMatch = false;
+        const groupsMatchArray = userGroups.map(group => {
+            const groupPairWithLevelsObj = { accessLevels: group.__accessLevels || [], customFields: group.customFields || [] };
+            return this.isMatchWithLevelsObj(groupPairWithLevelsObj, requestPairWithLevelsObj);
+        });
+        for (const match of groupsMatchArray) {
+            if (match)
+                groupMatch = true;
+        }
+        if (!groupMatch) {
+            throw new ApiException(403, "Action Forbidden");
+        }
+    }
+    async getUserDetails(uuid) {
+        const user = await UserPermissionsDB.queryUnique({ accountId: uuid });
+        const userGroups = filterDuplicates(user.groups || []);
+        const groups = await batchActionParallel(userGroups.map(userGroup => userGroup.groupId), 10, subGroupIds => GroupPermissionsDB.query({ where: { _id: { $in: subGroupIds } } }));
+        return {
+            user,
+            userGroups: this.getCombineUserGroups(userGroups, groups)
+        };
+    }
+    getCombineUserGroupCF(userGroup, group) {
+        const cfArray = [];
+        if (group.customFields) {
+            cfArray.push(...group.customFields);
+        }
+        if (userGroup.customField) {
+            cfArray.push(userGroup.customField);
+        }
+        return cfArray;
+    }
+    getCombineUserGroups(userGroups, groups) {
+        const combinedGroups = [];
+        groups.forEach(group => {
+            const existUserGroupItem = userGroups.find(groupItem => groupItem.groupId === group._id);
+            if (!existUserGroupItem)
+                throw new BadImplementationException("You are missing group in your code implementation");
+            userGroups.forEach((userGroup) => {
+                if (userGroup.groupId === group._id) {
+                    combinedGroups.push({ ...group, customFields: this.getCombineUserGroupCF(userGroup, group) });
+                }
+            });
+        });
+        return combinedGroups;
+    }
+    async getApiDetails(_path, projectId) {
+        const path = _path.substring(0, (_path + '?').indexOf('?'));
+        const apiDb = await ApiPermissionsDB.queryUnique({ path, projectId });
+        const requestPermissions = await this.getAccessLevels(apiDb.accessLevelIds || []);
+        return {
+            apiDb,
+            requestPermissions
+        };
+    }
+    async getApisDetails(urls, projectId) {
+        const paths = urls.map(_path => _path.substring(0, (_path + '?').indexOf('?')));
+        const apiDbs = await batchActionParallel(paths, 10, elements => ApiPermissionsDB.query({ where: { projectId, path: { $in: elements } } }));
+        return Promise.all(paths.map(async (path) => {
+            const apiDb = apiDbs.find(_apiDb => _apiDb.path === path);
+            if (!apiDb)
+                return;
+            try {
+                const requestPermissions = await this.getAccessLevels(apiDb.accessLevelIds);
+                return ({
+                    apiDb,
+                    requestPermissions
+                });
+            }
+            catch (_e) {
+                return;
+            }
+        }));
+    }
+    async getAccessLevels(_accessLevelIds) {
+        const accessLevelIds = filterDuplicates(_accessLevelIds || []);
+        const requestPermissions = await batchActionParallel(accessLevelIds, 10, elements => AccessLevelPermissionsDB.query({ where: { _id: { $in: elements } } }));
+        const idNotFound = accessLevelIds.find(lId => !requestPermissions.find(r => r._id === lId));
+        if (idNotFound)
+            throw new ApiException(404, `Could not find api level with _id: ${idNotFound}`);
+        return requestPermissions;
+    }
+    isMatchWithLevelsObj(groupPair, requestPair) {
+        let match = true;
+        requestPair.customFields.forEach(requestCF => {
+            if (!this.doesCustomFieldsSatisfies(groupPair.customFields, requestCF))
+                match = false;
+        });
+        if (!match)
+            return false;
+        const groupDomainLevelMap = this.getDomainLevelMap(groupPair.accessLevels);
+        requestPair.accessLevels.forEach((requiredLevel, _index) => {
+            const userAccessLevel = groupDomainLevelMap[requiredLevel.domainId];
+            if (userAccessLevel === undefined || userAccessLevel < requiredLevel.value)
+                match = false;
+        });
+        return match;
+    }
+    getDomainLevelMap(accessLevels) {
+        return accessLevels.reduce((toRet, accessLevel) => {
+            const levelForDomain = toRet[accessLevel.domainId];
+            if (!levelForDomain || levelForDomain < accessLevel.value)
+                toRet[accessLevel.domainId] = accessLevel.value;
+            return toRet;
+        }, {});
+    }
+    doesCustomFieldsSatisfies(groupCustomFields = [], requestCustomField) {
+        if (!Object.keys(requestCustomField).length)
+            return true;
+        for (const customField of groupCustomFields) {
+            if (this.doesCustomFieldSatisfies(customField, requestCustomField))
+                return true;
+        }
+        return false;
+    }
+    doesCustomFieldSatisfies(groupCustomField, requestCustomField) {
+        return Object.keys(requestCustomField).reduce((doesSatisfies, requestCustomFieldKey) => {
+            const customFieldRegEx = this.getRegEx(groupCustomField[requestCustomFieldKey]);
+            return doesSatisfies && customFieldRegEx.test(requestCustomField[requestCustomFieldKey]);
+        }, true);
+    }
+    getRegEx(value) {
+        if (!value)
+            return new RegExp(`^${value}$`, "g");
+        let regExValue = value;
+        const startRegEx = '^';
+        const endRegEx = '$';
+        if (value[0] !== startRegEx)
+            regExValue = startRegEx + regExValue;
+        if (value[value.length - 1] !== endRegEx)
+            regExValue = regExValue + endRegEx;
+        return new RegExp(regExValue, "g");
+    }
+}
+export const PermissionsAssert = new PermissionsAssert_Class();
+//# sourceMappingURL=permissions-assert.js.map

package/dist/app-backend/modules/permissions-assert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-assert.js","sourceRoot":"","sources":["../../../src/main/app-backend/modules/permissions-assert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACN,KAAK,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,MAAM,EAEN,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,YAAY,EACZ,WAAW,EAIX,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAON,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAC,wBAAwB,EAAE,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAC,kBAAkB,EAAE,iBAAiB,EAAC,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAC,UAAU,EAAC,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAC,aAAa,EAAC,MAAM,yCAAyC,CAAC;AACtE,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AAUzD,MAAM,OAAO,uBACZ,SAAQ,MAAc;IAEtB;QACC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC5B,CAAC;IAEQ,UAAU,GAAG,CAAC,IAAc,EAAwB,EAAE,CAAC,KAAK,EAAE,GAAmB,EAAE,IAAqB,EAAE,QAAqB,EAAE,MAAgB,EAAE,EAAE;QAC7J,IAAI,OAAO,CAAC;QACZ,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAiB,EAAE,YAAuB,EAAE,EAAE;YAEtF,OAAO,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,EAAC,OAAO,EAAC,CAAC;IAClB,CAAC,CAAC;IAEO,gBAAgB,GAAG,CAAC,IAAc,EAAE,MAAqE,EAAwB,EAAE,CAAC,KAAK,EAAE,GAAmB,EAAE,IAAqB,EAAE,SAAsB,EAAE,EAAE;QACzN,MAAM,YAAY,GAAc,EAAE,CAAC;QACnC,IAAI,MAA4B,CAAC;QACjC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,UAAU,CAAC,IAAI,CAAC;YACrB,KAAK,UAAU,CAAC,KAAK,CAAC;YACtB,KAAK,UAAU,CAAC,GAAG;gBAClB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;gBACnB,MAAM;YAEP,KAAK,UAAU,CAAC,GAAG,CAAC;YACpB,KAAK,UAAU,CAAC,MAAM;gBACrB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;gBACpB,MAAM;YAEP;gBACC,MAAM,IAAI,0BAA0B,CAAC,iEAAiE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;gBAC9C,OAAO;YAER,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAC/B,OAAO;YAER,YAAY,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,iBAAiB,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC;QAC7D,MAAM,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,KAAK,CAAC,qBAAqB,CAAC,SAAiB,EAAE,IAAY,EAAE,MAAc,EAAE,kBAA6B;QACzG,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAClD;YACC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC;YACnC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;SAC3B,CAAC,CAAC;QAEJ,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACzF,CAAC;IAED,0BAA0B,CAAC,UAAuF,EAAE,SAAiB,EAAE,WAA4E,EAAE,kBAA6B;QACjP,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;gBAC1B,OAAO;YAER,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mDAAmD,SAAS,KAAK,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvH,CAAC;QAED,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,aAAqB,EAAE,SAAqB;QACxE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAAC,GAAG,EAAE,SAAS,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC,CAAC;QACtJ,YAAY,CAAC,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACzF,MAAM,mBAAmB,GAAG,YAAY,CAAC,YAAY,CAAC;QACtD,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;IACjG,CAAC;IAED,yBAAyB,CAAC,UAAiC,EAAE,kBAA8C,EAAE,mBAAgC;QAC5I,IAAI,CAAC,kBAAkB,CAAC,MAAM;YAC7B,OAAO;QAER,MAAM,wBAAwB,GAA6B,EAAC,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EAAC,CAAC;QAEjI,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC/C,MAAM,sBAAsB,GAA+B,EAAC,YAAY,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,EAAC,CAAC;YAE9I,OAAO,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,KAAK;gBACR,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAChC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAA0B,MAAM,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAC,KAAK,EAAE,EAAC,GAAG,EAAE,EAAC,GAAG,EAAE,WAAW,EAAC,EAAC,EAAC,CAAC,CAAC,CAAC;QAEjM,OAAO;YACN,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC;SACzD,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,SAAqB,EAAE,KAA0B;QAC9E,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,oBAAoB,CAAC,UAAwB,EAAE,MAA6B;QACnF,MAAM,cAAc,GAA0B,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACtB,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,CAAC,kBAAkB;gBACtB,MAAM,IAAI,0BAA0B,CAAC,mDAAmD,CAAC,CAAC;YAE3F,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBAChC,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;oBACrC,cAAc,CAAC,IAAI,CAAC,EAAC,GAAG,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAC,CAAC,CAAC;gBAC7F,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,SAAiB;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,EAAC,IAAI,EAAE,SAAS,EAAC,CAAC,CAAC;QACpE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAElF,OAAO;YACN,KAAK;YACL,kBAAkB;SAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAc,EAAE,SAAiB;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAC,KAAK,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,EAAC,GAAG,EAAE,QAAQ,EAAC,EAAC,EAAC,CAAC,CAAC,CAAC;QACrI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK;gBACT,OAAO;YAER,IAAI,CAAC;gBACJ,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5E,OAAO,CAAC;oBACP,KAAK;oBACL,kBAAkB;iBAClB,CAAC,CAAC;YACJ,CAAC;YAAA,OAAO,EAAE,EAAE,CAAC;gBACZ,OAAM;YACP,CAAC;QACF,CAAC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,eAA0B;QACvD,MAAM,cAAc,GAAG,gBAAgB,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,kBAAkB,GAAG,MAAM,mBAAmB,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAC,KAAK,EAAE,EAAC,GAAG,EAAE,EAAC,GAAG,EAAE,QAAQ,EAAC,EAAC,EAAC,CAAC,CAAC,CAAC;QACtJ,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5F,IAAI,UAAU;YACb,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,sCAAsC,UAAU,EAAE,CAAC,CAAC;QAEjF,OAAO,kBAAkB,CAAC;IAC3B,CAAC;IAED,oBAAoB,CAAC,SAAqC,EAAE,WAAqC;QAChG,IAAI,KAAK,GAAG,IAAI,CAAC;QAEjB,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC5C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC;gBACrE,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK;YACT,OAAO,KAAK,CAAC;QAEd,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3E,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;YAC1D,MAAM,eAAe,GAAG,mBAAmB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpE,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,GAAG,aAAa,CAAC,KAAK;gBACzE,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,YAAiC;QAC1D,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACjD,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,cAAc,IAAI,cAAc,GAAG,WAAW,CAAC,KAAK;gBACxD,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC;YAEjD,OAAO,KAAK,CAAC;QACd,CAAC,EAAE,EAA+B,CAAC,CAAC;IACrC,CAAC;IAED,yBAAyB,CAAC,oBAAiC,EAAE,EAAE,kBAA6B;QAC3F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM;YAC1C,OAAO,IAAI,CAAC;QAEb,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,kBAAkB,CAAC;gBACjE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,wBAAwB,CAAC,gBAA2B,EAAE,kBAA6B;QAC1F,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,qBAAqB,EAAE,EAAE;YACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAChF,OAAO,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1F,CAAC,EAAE,IAAe,CAAC,CAAC;IACrB,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK;YACT,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG,CAAC;QACrB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU;YAC1B,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;QAEtC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,QAAQ;YACvC,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;QAEpC,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;CACD;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,uBAAuB,EAAE,CAAC"}

package/{app-backend → dist/app-backend}/modules/permissions-share.d.ts

@@ -1,7 +1,8 @@
 import { Module } from "@intuitionrobotics/ts-common";
-import { User_Group } from "../..";
+import { type User_Group } from "../../index.js";
 export declare class PermissionsShare_Class extends Module {
     constructor();
     verifyPermissionGrantingAllowed(granterUserId: string, shareGroup: User_Group): Promise<void>;
 }
 export declare const PermissionsShare: PermissionsShare_Class;
+//# sourceMappingURL=permissions-share.d.ts.map

package/dist/app-backend/modules/permissions-share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-share.d.ts","sourceRoot":"","sources":["../../../src/main/app-backend/modules/permissions-share.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,MAAM,EAAC,MAAM,8BAA8B,CAAC;AACpD,OAAO,EACN,KAAK,UAAU,EACf,MAAM,gBAAgB,CAAC;AAMxB,qBAAa,sBACZ,SAAQ,MAAM;;IAMR,+BAA+B,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;CAInF;AAED,eAAO,MAAM,gBAAgB,wBAA+B,CAAC"}

package/dist/app-backend/modules/permissions-share.js

@@ -0,0 +1,13 @@
+import { Module } from "@intuitionrobotics/ts-common";
+import {} from "../../index.js";
+import { PermissionsAssert } from "./permissions-assert.js";
+export class PermissionsShare_Class extends Module {
+    constructor() {
+        super("PermissionsShare");
+    }
+    async verifyPermissionGrantingAllowed(granterUserId, shareGroup) {
+        await PermissionsAssert.assertUserSharingGroup(granterUserId, shareGroup);
+    }
+}
+export const PermissionsShare = new PermissionsShare_Class();
+//# sourceMappingURL=permissions-share.js.map

package/dist/app-backend/modules/permissions-share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-share.js","sourceRoot":"","sources":["../../../src/main/app-backend/modules/permissions-share.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,MAAM,EAAC,MAAM,8BAA8B,CAAC;AACpD,OAAO,EAEN,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,OAAO,sBACZ,SAAQ,MAAM;IAEd;QACC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,+BAA+B,CAAC,aAAqB,EAAE,UAAsB;QAClF,MAAM,iBAAiB,CAAC,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3E,CAAC;CAED;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC"}

package/dist/app-frontend/core/module-pack.d.ts

@@ -0,0 +1,9 @@
+export declare const Frontend_ModulePack_Permissions: (import("../modules/assign/ApiCaller_PermissionsUser.js").PermissionsUserModule_Class | import("../modules/assign/ApiCaller_PermissionsGroup.js").PermissionsGroupModule_Class | import("../modules/manage/ApiCaller_PermissionsProject.js").PermissionsProjectModule_Class | import("../modules/manage/ApiCaller_PermissionsDomain.js").PermissionsDomainModule_Class | import("../modules/manage/ApiCaller_PermissionsLevel.js").PermissionsAccessLevelModule_Class | import("../modules/manage/ApiCaller_PermissionsApi.js").PermissionsApiModule_Class | import("../modules/tags/ApiCaller_PermissionsTags.js").PermissionsTagsModule_Class)[];
+export * from "../modules/assign/ApiCaller_PermissionsUser.js";
+export * from "../modules/assign/ApiCaller_PermissionsGroup.js";
+export * from "../modules/manage/ApiCaller_PermissionsProject.js";
+export * from "../modules/manage/ApiCaller_PermissionsDomain.js";
+export * from "../modules/manage/ApiCaller_PermissionsLevel.js";
+export * from "../modules/manage/ApiCaller_PermissionsApi.js";
+export * from "../modules/tags/ApiCaller_PermissionsTags.js";
+//# sourceMappingURL=module-pack.d.ts.map

package/dist/app-frontend/core/module-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-pack.d.ts","sourceRoot":"","sources":["../../../src/main/app-frontend/core/module-pack.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,+BAA+B,onBAQ3C,CAAC;AAEF,cAAc,gDAAgD,CAAA;AAC9D,cAAc,iDAAiD,CAAA;AAC/D,cAAc,mDAAmD,CAAA;AACjE,cAAc,kDAAkD,CAAA;AAChE,cAAc,iDAAiD,CAAA;AAC/D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,8CAA8C,CAAA"}

package/dist/app-frontend/core/module-pack.js

@@ -0,0 +1,41 @@
+/*
+ * ts-common is the basic building blocks of our typescript projects
+ *
+ * Copyright (C) 2020 Intuition Robotics
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { ApiCaller_PermissionsUser } from "../modules/assign/ApiCaller_PermissionsUser.js";
+import { ApiCaller_PermissionsGroup } from "../modules/assign/ApiCaller_PermissionsGroup.js";
+import { ApiCaller_PermissionsProject } from "../modules/manage/ApiCaller_PermissionsProject.js";
+import { ApiCaller_PermissionsDomain } from "../modules/manage/ApiCaller_PermissionsDomain.js";
+import { ApiCaller_PermissionsAccessLevel } from "../modules/manage/ApiCaller_PermissionsLevel.js";
+import { ApiCaller_PermissionsApi } from "../modules/manage/ApiCaller_PermissionsApi.js";
+import { ApiCaller_PermissionsTags } from "../modules/tags/ApiCaller_PermissionsTags.js";
+export const Frontend_ModulePack_Permissions = [
+    ApiCaller_PermissionsUser,
+    ApiCaller_PermissionsGroup,
+    ApiCaller_PermissionsProject,
+    ApiCaller_PermissionsDomain,
+    ApiCaller_PermissionsAccessLevel,
+    ApiCaller_PermissionsApi,
+    ApiCaller_PermissionsTags
+];
+export * from "../modules/assign/ApiCaller_PermissionsUser.js";
+export * from "../modules/assign/ApiCaller_PermissionsGroup.js";
+export * from "../modules/manage/ApiCaller_PermissionsProject.js";
+export * from "../modules/manage/ApiCaller_PermissionsDomain.js";
+export * from "../modules/manage/ApiCaller_PermissionsLevel.js";
+export * from "../modules/manage/ApiCaller_PermissionsApi.js";
+export * from "../modules/tags/ApiCaller_PermissionsTags.js";
+//# sourceMappingURL=module-pack.js.map

package/dist/app-frontend/core/module-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-pack.js","sourceRoot":"","sources":["../../../src/main/app-frontend/core/module-pack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,yBAAyB,EAAC,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAC,0BAA0B,EAAC,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAC,4BAA4B,EAAC,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAC,2BAA2B,EAAC,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAC,gCAAgC,EAAC,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAC,wBAAwB,EAAC,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAC,yBAAyB,EAAC,MAAM,8CAA8C,CAAC;AAEvF,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC9C,yBAAyB;IACzB,0BAA0B;IAC1B,4BAA4B;IAC5B,2BAA2B;IAC3B,gCAAgC;IAChC,wBAAwB;IACxB,yBAAyB;CACzB,CAAC;AAEF,cAAc,gDAAgD,CAAA;AAC9D,cAAc,iDAAiD,CAAA;AAC/D,cAAc,mDAAmD,CAAA;AACjE,cAAc,kDAAkD,CAAA;AAChE,cAAc,iDAAiD,CAAA;AAC/D,cAAc,+CAA+C,CAAA;AAC7D,cAAc,8CAA8C,CAAA"}

package/{app-frontend → dist/app-frontend}/modules/PermissionsComponent.d.ts

@@ -1,6 +1,6 @@
 import * as React from "react";
 import { BaseComponent } from "@intuitionrobotics/thunderstorm/frontend";
-import { OnPermissionsChanged } from "./PermissionsModuleFE";
+import { type OnPermissionsChanged } from "./PermissionsModuleFE.js";
 type Props = {
     url: string;
     loadingComponent?: React.ComponentType;
@@ -12,3 +12,4 @@ export declare class PermissionsComponent extends BaseComponent<Props> implement
     render(): string | number | boolean | Iterable<React.ReactNode> | React.JSX.Element | null | undefined;
 }
 export {};
+//# sourceMappingURL=PermissionsComponent.d.ts.map

package/dist/app-frontend/modules/PermissionsComponent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsComponent.d.ts","sourceRoot":"","sources":["../../../src/main/app-frontend/modules/PermissionsComponent.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAC,aAAa,EAAC,MAAM,0CAA0C,CAAC;AACvE,OAAO,EACN,KAAK,oBAAoB,EAEzB,MAAM,0BAA0B,CAAC;AAElC,KAAK,KAAK,GAAG;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB,CAAC,EAAE,KAAK,CAAC,aAAa,CAAA;IACtC,QAAQ,CAAC,EAAE,KAAK,CAAC,aAAa,CAAA;IAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CACzB,CAAA;AAED,qBAAa,oBACZ,SAAQ,aAAa,CAAC,KAAK,CAC3B,YAAW,oBAAoB;IAE/B,sBAAsB;IAItB,MAAM;CAaN"}

package/dist/app-frontend/modules/PermissionsComponent.js

@@ -0,0 +1,19 @@
+import * as React from "react";
+import { BaseComponent } from "@intuitionrobotics/thunderstorm/frontend";
+import { PermissionsFE } from "./PermissionsModuleFE.js";
+export class PermissionsComponent extends BaseComponent {
+    __onPermissionsChanged() {
+        this.forceUpdate();
+    }
+    render() {
+        const permitted = PermissionsFE.doesUserHavePermissions(this.props.url);
+        if (permitted === undefined)
+            return this.props.loadingComponent ? React.createElement(this.props.loadingComponent, null) : null;
+        if (permitted)
+            return this.props.children;
+        if (this.props.fallback)
+            return React.createElement(this.props.fallback, null);
+        return null;
+    }
+}
+//# sourceMappingURL=PermissionsComponent.js.map

package/dist/app-frontend/modules/PermissionsComponent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsComponent.js","sourceRoot":"","sources":["../../../src/main/app-frontend/modules/PermissionsComponent.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAC,aAAa,EAAC,MAAM,0CAA0C,CAAC;AACvE,OAAO,EAEN,aAAa,EACb,MAAM,0BAA0B,CAAC;AASlC,MAAM,OAAO,oBACZ,SAAQ,aAAoB;IAG5B,sBAAsB;QACrB,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAED,MAAM;QACL,MAAM,SAAS,GAAG,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,SAAS;YAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,OAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAE5E,IAAI,SAAS;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAE5B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ;YACtB,OAAO,oBAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,OAAE,CAAC;QAE/B,OAAO,IAAI,CAAC;IACb,CAAC;CACD"}

package/{app-frontend → dist/app-frontend}/modules/PermissionsModuleFE.d.ts

@@ -22,3 +22,4 @@ export declare class PermissionsModuleFE_Class extends Module<PermissionsModuleF
     private setPermissions;
 }
 export declare const PermissionsFE: PermissionsModuleFE_Class;
+//# sourceMappingURL=PermissionsModuleFE.d.ts.map

package/dist/app-frontend/modules/PermissionsModuleFE.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsModuleFE.d.ts","sourceRoot":"","sources":["../../../src/main/app-frontend/modules/PermissionsModuleFE.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,MAAM,EAGN,MAAM,8BAA8B,CAAC;AAStC,MAAM,MAAM,yBAAyB,GAAG;IACvC,SAAS,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,WAAW,oBAAoB;IACpC,sBAAsB,EAAE,MAAM,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IACnC,qBAAqB,EAAE,MAAM,IAAI,CAAC;CAClC;AAKD,qBAAa,yBACZ,SAAQ,MAAM,CAAC,yBAAyB,CAAC;IACzC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,mBAAmB,CAA2B;IACtD,OAAO,CAAC,kBAAkB,CAAiB;IAC3C,OAAO,CAAC,YAAY,CAAO;IAC3B,OAAO,CAAC,YAAY,CAAK;;IAMzB,eAAe,CAAC,IAAI,EAAE,MAAM;IAI5B,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAKzC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE;IAWvB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAazD,OAAO,CAAC,cAAc,CAoCpB;CAEF;AAED,eAAO,MAAM,aAAa,2BAAkC,CAAC"}

package/dist/app-frontend/modules/PermissionsModuleFE.js

@@ -0,0 +1,80 @@
+import { _setTimeout, ImplementationMissingException, Module, Second } from "@intuitionrobotics/ts-common";
+import { ThunderDispatcher } from "@intuitionrobotics/thunderstorm/app-frontend/core/thunder-dispatcher";
+import { XhrHttpModule } from "@intuitionrobotics/thunderstorm/frontend";
+import { HttpMethod } from "@intuitionrobotics/thunderstorm";
+import {} from "../../index.js";
+const dispatch_onPermissionsChanged = new ThunderDispatcher("__onPermissionsChanged");
+const dispatch_onPermissionsFailed = new ThunderDispatcher("__onPermissionsFailed");
+export class PermissionsModuleFE_Class extends Module {
+    loadingUrls = new Set();
+    userUrlsPermissions = {};
+    requestCustomField = {};
+    debounceTime = 100;
+    retryCounter = 0;
+    constructor() {
+        super("PermissionsModuleFE");
+    }
+    setDebounceTime(time) {
+        this.debounceTime = time;
+    }
+    setCustomField(key, value) {
+        this.requestCustomField[key] = value;
+        this.setPermissions();
+    }
+    loadUrls(urls) {
+        urls.forEach(url => {
+            if (this.loadingUrls.has(url) || this.userUrlsPermissions[url] !== undefined)
+                return;
+            this.loadingUrls.add(url);
+        });
+        this.setPermissions();
+    }
+    doesUserHavePermissions(url) {
+        if (this.loadingUrls.has(url))
+            return undefined;
+        const permitted = this.userUrlsPermissions[url];
+        if (permitted !== undefined)
+            return permitted;
+        this.loadingUrls.add(url);
+        this.setPermissions();
+        return undefined;
+    }
+    setPermissions = () => {
+        if (!this.config || !this.config.projectId)
+            throw new ImplementationMissingException("need to set up a project id config");
+        this.debounce(() => {
+            const urls = {};
+            this.loadingUrls.forEach(url => {
+                urls[url] = false;
+            });
+            XhrHttpModule
+                .createRequest(HttpMethod.POST, "user-urls-permissions")
+                .setRelativeUrl(`/v1/permissions/user-urls-permissions`)
+                // .setOnError(`Failed to get user urls permissions`)
+                .setLabel(`Getting user urls permissions`)
+                .setJsonBody({
+                projectId: this.config.projectId,
+                urls: urls,
+                requestCustomField: this.requestCustomField
+            })
+                .setOnError(() => {
+                this.logWarning(`Failed to get user urls permissions`);
+                if (this.retryCounter < 5) {
+                    this.retryCounter++;
+                    return _setTimeout(this.setPermissions, 5 * Second);
+                }
+                dispatch_onPermissionsFailed.dispatchModule();
+            })
+                .execute(async (userUrlsPermissions) => {
+                this.retryCounter = 0;
+                Object.keys(userUrlsPermissions).forEach(url => {
+                    this.loadingUrls.delete(url);
+                    this.userUrlsPermissions[url] = userUrlsPermissions[url];
+                });
+                dispatch_onPermissionsChanged.dispatchUI();
+            });
+        }, "get-permissions", this.debounceTime);
+    };
+}
+export const PermissionsFE = new PermissionsModuleFE_Class();
+//# sourceMappingURL=PermissionsModuleFE.js.map

package/dist/app-frontend/modules/PermissionsModuleFE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsModuleFE.js","sourceRoot":"","sources":["../../../src/main/app-frontend/modules/PermissionsModuleFE.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,WAAW,EACX,8BAA8B,EAC9B,MAAM,EACN,MAAM,EAEN,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAC,iBAAiB,EAAC,MAAM,sEAAsE,CAAC;AACvG,OAAO,EAAC,aAAa,EAAC,MAAM,0CAA0C,CAAC;AACvE,OAAO,EAAC,UAAU,EAAC,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAGN,MAAM,gBAAgB,CAAC;AAcxB,MAAM,6BAA6B,GAAG,IAAI,iBAAiB,CAAiD,wBAAwB,CAAC,CAAC;AACtI,MAAM,4BAA4B,GAAG,IAAI,iBAAiB,CAA+C,uBAAuB,CAAC,CAAC;AAElI,MAAM,OAAO,yBACZ,SAAQ,MAAiC;IACjC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,mBAAmB,GAAwB,EAAE,CAAC;IAC9C,kBAAkB,GAAc,EAAE,CAAC;IACnC,YAAY,GAAG,GAAG,CAAC;IACnB,YAAY,GAAG,CAAC,CAAC;IAEzB;QACC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,IAAY;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,cAAc,CAAC,GAAW,EAAE,KAAa;QACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrC,IAAI,CAAC,cAAc,EAAE,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAc;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YAClB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,SAAS;gBAC3E,OAAO;YAER,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;IACvB,CAAC;IAED,uBAAuB,CAAC,GAAW;QAClC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAC5B,OAAO,SAAS,CAAC;QAElB,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS;YAC1B,OAAO,SAAS,CAAC;QAElB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,cAAc,GAAG,GAAG,EAAE;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YACzC,MAAM,IAAI,8BAA8B,CAAC,oCAAoC,CAAC,CAAC;QAEhF,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YAClB,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,CAAC,CAAC,CAAC;YACH,aAAa;iBACX,aAAa,CAAqC,UAAU,CAAC,IAAI,EAAE,uBAAuB,CAAC;iBAC3F,cAAc,CAAC,uCAAuC,CAAC;gBACxD,qDAAqD;iBACpD,QAAQ,CAAC,+BAA+B,CAAC;iBACzC,WAAW,CAAC;gBACC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,IAAI,EAAE,IAAI;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC3C,CAAC;iBACd,UAAU,CAAC,GAAG,EAAE;gBAChB,IAAI,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC;gBACvD,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpB,OAAO,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;gBACrD,CAAC;gBACD,4BAA4B,CAAC,cAAc,EAAE,CAAC;YAC/C,CAAC,CAAC;iBACD,OAAO,CAAC,KAAK,EAAE,mBAAwC,EAAE,EAAE;gBAC3D,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAC1D,CAAC,CAAC,CAAC;gBACH,6BAA6B,CAAC,UAAU,EAAE,CAAC;YAC5C,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC;CAEF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC"}

package/{app-frontend → dist/app-frontend}/modules/assign/ApiCaller_PermissionsGroup.d.ts

@@ -1,4 +1,4 @@
-import { DB_PermissionsGroup } from "../../../index";
+import { type DB_PermissionsGroup } from "../../../index.js";
 import { BaseDB_ApiGeneratorCaller } from "@intuitionrobotics/db-api-generator/frontend";
 export interface OnPermissionsGroupsLoaded {
     __onPermissionsGroupsLoaded: () => void;
@@ -7,11 +7,12 @@ export declare class PermissionsGroupModule_Class extends BaseDB_ApiGeneratorCal
     private groups;
     constructor();
     protected init(): void;
-    protected onEntryCreated(response: DB_PermissionsGroup): Promise<void>;
-    protected onEntryDeleted(response: DB_PermissionsGroup): Promise<void>;
-    protected onEntryUpdated(response: DB_PermissionsGroup): Promise<void>;
-    protected onGotUnique(response: DB_PermissionsGroup): Promise<void>;
+    protected onEntryCreated(_response: DB_PermissionsGroup): Promise<void>;
+    protected onEntryDeleted(_response: DB_PermissionsGroup): Promise<void>;
+    protected onEntryUpdated(_response: DB_PermissionsGroup): Promise<void>;
+    protected onGotUnique(_response: DB_PermissionsGroup): Promise<void>;
     protected onQueryReturned(response: DB_PermissionsGroup[]): Promise<void>;
     getGroups(): DB_PermissionsGroup[];
 }
 export declare const ApiCaller_PermissionsGroup: PermissionsGroupModule_Class;
+//# sourceMappingURL=ApiCaller_PermissionsGroup.d.ts.map

package/dist/app-frontend/modules/assign/ApiCaller_PermissionsGroup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiCaller_PermissionsGroup.d.ts","sourceRoot":"","sources":["../../../../src/main/app-frontend/modules/assign/ApiCaller_PermissionsGroup.ts"],"names":[],"mappings":"AAiBA,OAAO,EACN,KAAK,mBAAmB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,yBAAyB,EAAC,MAAM,8CAA8C,CAAC;AAMvF,MAAM,WAAW,yBAAyB;IACzC,2BAA2B,EAAE,MAAM,IAAI,CAAC;CACxC;AAID,qBAAa,4BACZ,SAAQ,yBAAyB,CAAC,mBAAmB,CAAC;IACtD,OAAO,CAAC,MAAM,CAA6B;;IAM3C,SAAS,CAAC,IAAI,IAAI,IAAI;cAIN,cAAc,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;cAI7D,cAAc,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;cAI7D,cAAc,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;cAI7D,WAAW,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;cAG1D,eAAe,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/E,SAAS;CAIT;AAED,eAAO,MAAM,0BAA0B,8BAAqC,CAAC"}

package/dist/app-frontend/modules/assign/ApiCaller_PermissionsGroup.js

@@ -0,0 +1,50 @@
+/*
+ * ts-common is the basic building blocks of our typescript projects
+ *
+ * Copyright (C) 2020 Intuition Robotics
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import {} from "../../../index.js";
+import { BaseDB_ApiGeneratorCaller } from "@intuitionrobotics/db-api-generator/frontend";
+import { ThunderDispatcher } from "@intuitionrobotics/thunderstorm/frontend";
+const dispatch_onPermissionsGroupsLoaded = new ThunderDispatcher("__onPermissionsGroupsLoaded");
+export class PermissionsGroupModule_Class extends BaseDB_ApiGeneratorCaller {
+    groups = [];
+    constructor() {
+        super({ key: "group", relativeUrl: "/v1/permissions/assign/group" }, "PermissionsGroupModule");
+    }
+    init() {
+        super.init();
+    }
+    async onEntryCreated(_response) {
+        this.query();
+    }
+    async onEntryDeleted(_response) {
+        this.query();
+    }
+    async onEntryUpdated(_response) {
+        this.query();
+    }
+    async onGotUnique(_response) {
+    }
+    async onQueryReturned(response) {
+        this.groups = response;
+        dispatch_onPermissionsGroupsLoaded.dispatchUI();
+    }
+    getGroups() {
+        return this.groups;
+    }
+}
+export const ApiCaller_PermissionsGroup = new PermissionsGroupModule_Class();
+//# sourceMappingURL=ApiCaller_PermissionsGroup.js.map

package/dist/app-frontend/modules/assign/ApiCaller_PermissionsGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiCaller_PermissionsGroup.js","sourceRoot":"","sources":["../../../../src/main/app-frontend/modules/assign/ApiCaller_PermissionsGroup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAEN,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,yBAAyB,EAAC,MAAM,8CAA8C,CAAC;AACvF,OAAO,EACN,iBAAiB,EACjB,MAAM,0CAA0C,CAAC;AAOlD,MAAM,kCAAkC,GAAG,IAAI,iBAAiB,CAA2D,6BAA6B,CAAC,CAAC;AAE1J,MAAM,OAAO,4BACZ,SAAQ,yBAA8C;IAC9C,MAAM,GAA0B,EAAE,CAAC;IAE3C;QACC,KAAK,CAAC,EAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,8BAA8B,EAAC,EAAE,wBAAwB,CAAC,CAAC;IAC9F,CAAC;IAES,IAAI;QACb,KAAK,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,SAA8B;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,SAA8B;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,SAA8B;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;IAES,KAAK,CAAC,WAAW,CAAC,SAA8B;IAC1D,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,QAA+B;QAC9D,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,kCAAkC,CAAC,UAAU,EAAE,CAAC;IACjD,CAAC;IAED,SAAS;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;CAED;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,4BAA4B,EAAE,CAAC"}

package/{app-frontend → dist/app-frontend}/modules/assign/ApiCaller_PermissionsUser.d.ts

@@ -1,5 +1,5 @@
 import { BaseDB_ApiGeneratorCaller } from "@intuitionrobotics/db-api-generator/frontend";
-import { DB_PermissionsUser } from "../../../index";
+import { type DB_PermissionsUser } from "../../../index.js";
 export interface OnPermissionsUsersLoaded {
     __onPermissionsUsersLoaded: () => void;
 }
@@ -7,12 +7,13 @@ export declare class PermissionsUserModule_Class extends BaseDB_ApiGeneratorCall
     private users;
     constructor();
     protected init(): void;
-    protected onEntryCreated(response: DB_PermissionsUser): Promise<void>;
-    protected onEntryDeleted(response: DB_PermissionsUser): Promise<void>;
-    protected onEntryUpdated(response: DB_PermissionsUser): Promise<void>;
-    protected onGotUnique(response: DB_PermissionsUser): Promise<void>;
+    protected onEntryCreated(_response: DB_PermissionsUser): Promise<void>;
+    protected onEntryDeleted(_response: DB_PermissionsUser): Promise<void>;
+    protected onEntryUpdated(_response: DB_PermissionsUser): Promise<void>;
+    protected onGotUnique(_response: DB_PermissionsUser): Promise<void>;
     protected onQueryReturned(response: DB_PermissionsUser[]): Promise<void>;
     getUserByAccountId(accountId: string): DB_PermissionsUser | undefined;
     getUsers(): DB_PermissionsUser[];
 }
 export declare const ApiCaller_PermissionsUser: PermissionsUserModule_Class;
+//# sourceMappingURL=ApiCaller_PermissionsUser.d.ts.map

package/dist/app-frontend/modules/assign/ApiCaller_PermissionsUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiCaller_PermissionsUser.d.ts","sourceRoot":"","sources":["../../../../src/main/app-frontend/modules/assign/ApiCaller_PermissionsUser.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAC,yBAAyB,EAAC,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAC,KAAK,kBAAkB,EAAC,MAAM,mBAAmB,CAAC;AAG1D,MAAM,WAAW,wBAAwB;IACxC,0BAA0B,EAAE,MAAM,IAAI,CAAC;CACvC;AAID,qBAAa,2BACZ,SAAQ,yBAAyB,CAAC,kBAAkB,CAAC;IACrD,OAAO,CAAC,KAAK,CAA4B;;IAMzC,SAAS,CAAC,IAAI,IAAI,IAAI;cAGN,cAAc,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;cAG5D,cAAc,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;cAG5D,cAAc,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;cAI5D,WAAW,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;cAGzD,eAAe,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9E,kBAAkB,CAAC,SAAS,EAAE,MAAM;IAIpC,QAAQ;CAGR;AAED,eAAO,MAAM,yBAAyB,6BAAoC,CAAC"}