@jusbid/common-auth 1.0.0

package/index.js

@@ -0,0 +1,137 @@
+const redis = require('@jusbid/redis');
+const { logger } = require('@jusbid/logger');
+const { permissions } = require("./scripts/permission");
+const { UnauthorizedError } = require("@jusbid/error-handler")
+const { questions } = require("./scripts/questionsSlug")
+const { encryptToken } = require("@jusbid/utils");
+const { propertyOnBoard } = require('./scripts/propertySlug');
+
+
+async function getPermissions(roleName) {
+    /*     const db = getConnection();
+        const RolePermission = db.model('roles', RoleSchema)
+    
+        return await RolePermission.findOne({ name: roleName }); */
+    const token = encryptToken(process.env.MASTER_ENCRYPTION_KEY, process.env.MASTER_ENCRYPTION_IV, process.env.INTERNAL_TOKEN)
+    const permit = await fetch(`${process.env.AUTH_SERVICE_URL}/api/v1/auth/services/${roleName}`, {
+        headers: {
+            "Authenticate-Internal": `Bearer ${token}`
+        }
+    });
+    const permitData = await permit.json();
+    return permitData.success ? permitData.data : [];
+}
+
+
+
+/**
+ * Permission-check middleware.
+ *
+ * Expects roleDoc.permissions to look like:
+ *   [{ module: "regions", fullAccess: false, features: { "location.region.view": true, ... } }]
+ *
+ * `features` keys are the FULL dotted action string (e.g. "location.region.view"),
+ * not just the tail ("view") — do not prefix them with `permission.module`.
+ */
+
+// eslint-disable-next-line no-unused-vars
+const canAccess = ({ module, action }) => {
+    return async (req, res, next) => {
+        try {
+            const roleName = req.headers["x-user-role"];
+
+            if (!roleName) {
+                throw new UnauthorizedError("Unauthorized")
+            }
+
+            const cacheKey = `role:permission:v2:${roleName}`;
+
+            // `action` is expected to already be the fully-qualified feature key
+            // stored under permission.features, e.g. "location.region.view".
+            // If callers pass it split (module: "location", action: "region.view"),
+            // reconstruct it the same way.
+            const field = action;
+
+            // 1. Check Redis first
+            let hasPermission = await redis.hGet(cacheKey, field);
+
+            // 2. Cache miss -> rebuild from Mongo if the key isn't cached at all
+            if (hasPermission === null) {
+
+                const exists = await redis.exists(cacheKey);
+
+                if (!exists) {
+
+                    const roleDoc = await getPermissions(roleName);
+                    const permissions = roleDoc?.permissions || [];
+
+                    const hash = {};
+
+                    for (const permission of permissions) {
+
+                        // Normalize `features` to a plain object regardless of
+                        // how the doc was fetched (Mongoose Map, lean plain
+                        // object, or a subdocument with toObject()).
+                        let featuresObj = permission.features;
+
+                        if (featuresObj instanceof Map) {
+                            featuresObj = Object.fromEntries(featuresObj);
+                        } else if (featuresObj && typeof featuresObj.toObject === "function") {
+                            featuresObj = featuresObj.toObject();
+                        } else if (featuresObj && typeof featuresObj === "object") {
+                            featuresObj = { ...featuresObj };
+                        } else {
+                            featuresObj = {};
+                        }
+
+                        for (const [featureKey, value] of Object.entries(featuresObj)) {
+                            if (typeof featureKey !== "string") continue;
+                            hash[featureKey] = value ? "1" : "0";
+                        }
+
+                        // fullAccess grants every feature under that module,
+                        // regardless of the individual booleans.
+                        if (permission.fullAccess) {
+                            for (const featureKey of Object.keys(featuresObj)) {
+                                hash[featureKey] = "1";
+                            }
+                        }
+                    }
+
+                    if (Object.keys(hash).length) {
+                        await redis.hSet(cacheKey, hash);
+                        // await redis.expire(cacheKey, 3600);
+                    }
+
+                    hasPermission = hash[field] ?? "0";
+                } else {
+                    // Key exists but this particular field wasn't in it
+                    // (i.e. an action not present in the role's feature set).
+                    hasPermission = "0";
+                }
+            }
+
+            if (Number(hasPermission) !== 1) {
+                throw new UnauthorizedError("Permission Denied")
+            }
+
+            next();
+
+        } catch (error) {
+            logger.error(error);
+            next(error)
+        }
+    };
+};
+
+
+const getPermissionString = permissions;
+const getQuestionSlug = questions;
+const getPropertyMasterSlug = propertyOnBoard
+
+module.exports = {
+    canAccess,
+    getPermissionString,
+    getQuestionSlug,
+    getPropertyMasterSlug
+};

package/model/Role.js

@@ -0,0 +1,37 @@
+const mongoose = require('mongoose');
+
+const RoleSchema = new mongoose.Schema(
+  {
+    name: {
+      type: String,
+      required: true,
+      unique: true,
+      trim: true,
+      index: true,
+    },
+    permissions: {
+      type: [
+        {
+          features: {
+            type: Map,
+            of: Boolean,
+            required: true
+          },
+          fullAccess: { type: Boolean, required: true },
+          module: { type: String, required: true }
+        }
+      ],
+      default: [],
+    },
+    description: {
+      type: String,
+      trim: true,
+    },
+  },
+  {
+    timestamps: true,
+    collection: 'roles',
+  }
+);
+
+module.exports = RoleSchema;

package/package.json

@@ -0,0 +1,16 @@
+{
+    "name": "@jusbid/common-auth",
+    "version": "1.0.0",
+    "main": "index.js",
+    "private": false,
+    "dependencies": {
+        "redis": "^4.6.13",
+        "mongoose": "^8.2.0",
+        "@jusbid/redis": "1.0.0",
+        "@jusbid/error-handler": "1.0.0",
+        "@jusbid/utils": "1.0.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    }
+}

package/scripts/permission.js

@@ -0,0 +1,164 @@
+/**
+ * Auto-generated flat permission-constants map from the original
+ * `permissions` catalogue.
+ *
+ * Naming rule: each key drops the leading namespace segment of the
+ * `action` string (e.g. "location.region.view" -> REGION_VIEW), except
+ * where the action only has two segments, in which case both are kept
+ * (e.g. "property.view" -> PROPERTY_VIEW) so the name stays meaningful.
+ * `module` is the original entry's groupId (matches your example, where
+ * "locations" was used rather than the "regions" id).
+ *
+ * Usage:
+ *   const { permissions } = require('./permissions.constants');
+ *   permissions.REGION_VIEW.action // "location.region.view"
+ *   permissions.REGION_VIEW.module // "locations"
+ */
+
+const permissions = {
+    REGION_VIEW: { action: "location.region.view", module: "locations" },
+    REGION_ADD: { action: "location.region.add", module: "locations" },
+    REGION_UPDATE: { action: "location.region.update", module: "locations" },
+    REGION_DELETE: { action: "location.region.delete", module: "locations" },
+
+    CITY_VIEW: { action: "location.city.view", module: "locations" },
+    CITY_ADD: { action: "location.city.add", module: "locations" },
+    CITY_UPDATE: { action: "location.city.update", module: "locations" },
+    CITY_DELETE: { action: "location.city.delete", module: "locations" },
+
+    STATE_VIEW: { action: "location.state.view", module: "locations" },
+    STATE_ADD: { action: "location.state.add", module: "locations" },
+    STATE_UPDATE: { action: "location.state.update", module: "locations" },
+    STATE_DELETE: { action: "location.state.delete", module: "locations" },
+
+    COUNTRY_VIEW: { action: "location.country.view", module: "locations" },
+    COUNTRY_ADD: { action: "location.country.add", module: "locations" },
+    COUNTRY_UPDATE: { action: "location.country.update", module: "locations" },
+    COUNTRY_DELETE: { action: "location.country.delete", module: "locations" },
+
+    PINCODES_VIEW: { action: "location.pincodes.view", module: "locations" },
+    PINCODES_ADD: { action: "location.pincodes.add", module: "locations" },
+    PINCODES_UPDATE: { action: "location.pincodes.update", module: "locations" },
+    PINCODES_DELETE: { action: "location.pincodes.delete", module: "locations" },
+
+    PROPERTY_CATEGORY_VIEW: { action: "property.property-category.view", module: "property-master" },
+    PROPERTY_CATEGORY_ADD: { action: "property.property-category.add", module: "property-master" },
+    PROPERTY_CATEGORY_UPDATE: { action: "property.property-category.update", module: "property-master" },
+    PROPERTY_CATEGORY_DELETE: { action: "property.property-category.delete", module: "property-master" },
+
+    PROPERTY_VIEWS_VIEW: { action: "property.location.property-views.view", module: "property-master" },
+    PROPERTY_VIEWS_ADD: { action: "property.location.property-views.add", module: "property-master" },
+    PROPERTY_VIEWS_UPDATE: { action: "property.location.property-views.update", module: "property-master" },
+    PROPERTY_VIEWS_DELETE: { action: "property.location.property-views.delete", module: "property-master" },
+
+    PROPERTY_AMENITIES_CATALOGUE_VIEW: { action: "property.amenities-catalogue.view", module: "property-master" },
+    PROPERTY_AMENITIES_CATALOGUE_ADD: { action: "property.amenities-catalogue.add", module: "property-master" },
+    PROPERTY_AMENITIES_CATALOGUE_UPDATE: { action: "property.amenities-catalogue.update", module: "property-master" },
+    PROPERTY_AMENITIES_CATALOGUE_DELETE: { action: "property.amenities-catalogue.delete", module: "property-master" },
+
+    PROPERTY_VIEW: { action: "property.view", module: "property-management" },
+    PROPERTY_ADD: { action: "property.add", module: "property-management" },
+    PROPERTY_UPDATE: { action: "property.update", module: "property-management" },
+    PROPERTY_DELETE: { action: "property.delete", module: "property-management" },
+    PROPERTY_ONBOARD: { action: "property.onboard", module: "property-management" },
+
+    MASTERS_VIEW: { action: "masters.view", module: "masters" },
+
+    BUYOUT_REASONS_VIEW: { action: "masters.buyout-reasons.view", module: "masters" },
+    BUYOUT_REASONS_ADD: { action: "masters.buyout-reasons.add", module: "masters" },
+    BUYOUT_REASONS_UPDATE: { action: "masters.buyout-reasons.update", module: "masters" },
+    BUYOUT_REASONS_DELETE: { action: "masters.buyout-reasons.delete", module: "masters" },
+
+    TENANT_VIEW: { action: "user.tenant.view", module: "user-management" },
+    TENANT_ADD: { action: "user.tenant.add", module: "user-management" },
+    TENANT_UPDATE: { action: "user.tenant.update", module: "user-management" },
+    TENANT_DELETE: { action: "user.tenant.delete", module: "user-management" },
+
+    CUSTOMER_VIEW: { action: "user.customer.view", module: "user-management" },
+    CUSTOMER_ADD: { action: "user.customer.add", module: "user-management" },
+    CUSTOMER_UPDATE: { action: "user.customer.update", module: "user-management" },
+    CUSTOMER_DELETE: { action: "user.customer.delete", module: "user-management" },
+
+    BDM_ASSIGN: { action: "user.bdm.assign", module: "user-heirarchy" },
+
+    USER_VIEW: { action: "user.view", module: "user-management" },
+    USER_ADD: { action: "user.add", module: "user-management" },
+    USER_UPDATE: { action: "user.update", module: "user-management" },
+    USER_DELETE: { action: "user.delete", module: "user-management" },
+
+    ROLE_CONFIGURATION_VIEW: { action: "role-configuration.view", module: "role-management" },
+    ROLE_CONFIGURATION_ADD: { action: "role-configuration.add", module: "role-management" },
+    ROLE_CONFIGURATION_UPDATE: { action: "role-configuration.update", module: "role-management" },
+    ROLE_CONFIGURATION_DELETE: { action: "role-configuration.delete", module: "role-management" },
+
+    ROOM_AMENITIES_CATALOGUE_VIEW: { action: "property.room.room-amenities-catalogue.view", module: "room-master" },
+    ROOM_AMENITIES_CATALOGUE_ADD: { action: "property.room.room-amenities-catalogue.add", module: "room-master" },
+    ROOM_AMENITIES_CATALOGUE_UPDATE: { action: "property.room.room-amenities-catalogue.update", module: "room-master" },
+    ROOM_AMENITIES_CATALOGUE_DELETE: { action: "property.room.room-amenities-catalogue.delete", module: "room-master" },
+
+    ROOM_BOOKING_VIEW: { action: "property.room-booking.view", module: "property" },
+    ROOM_BOOKING_ADD: { action: "property.room-booking.add", module: "property" },
+    ROOM_BOOKING_UPDATE: { action: "property.room-booking.update", module: "property" },
+    ROOM_BOOKING_DELETE: { action: "property.room-booking.delete", module: "property" },
+
+    ROOM_STATS_VIEW: { action: "property.room.stats.view", module: "property" },
+
+    ROOM_VIEW: { action: "property.room.view", module: "property" },
+    ROOM_ADD: { action: "property.room.add", module: "property" },
+    ROOM_UPDATE: { action: "property.room.update", module: "property" },
+    ROOM_DELETE: { action: "property.room.delete", module: "property" },
+
+    ADDITIONAL_SPACE_VIEW: { action: "property.additional-space.view", module: "property" },
+    ADDITIONAL_SPACE_ADD: { action: "property.additional-space.add", module: "property" },
+    ADDITIONAL_SPACE_UPDATE: { action: "property.additional-space.update", module: "property" },
+    ADDITIONAL_SPACE_DELETE: { action: "property.additional-space.delete", module: "property" },
+
+    AMENITY_CATEGORY_VIEW: { action: "property.amenity-category.view", module: "property" },
+    AMENITY_CATEGORY_ADD: { action: "property.amenity-category.add", module: "property" },
+    AMENITY_CATEGORY_UPDATE: { action: "property.amenity-category.update", module: "property" },
+    AMENITY_CATEGORY_DELETE: { action: "property.amenity-category.delete", module: "property" },
+
+    BATHROOM_TYPE_VIEW: { action: "property.bathroom-type.view", module: "property" },
+    BATHROOM_TYPE_ADD: { action: "property.bathroom-type.add", module: "property" },
+    BATHROOM_TYPE_UPDATE: { action: "property.bathroom-type.update", module: "property" },
+    BATHROOM_TYPE_DELETE: { action: "property.bathroom-type.delete", module: "property" },
+
+    BED_OPTIONS_VIEW: { action: "property.bed-options.view", module: "property" },
+    BED_OPTIONS_ADD: { action: "property.bed-options.add", module: "property" },
+    BED_OPTIONS_UPDATE: { action: "property.bed-options.update", module: "property" },
+    BED_OPTIONS_DELETE: { action: "property.bed-options.delete", module: "property" },
+
+    HOUSE_RULE_VIEW: { action: "property.house-rule.view", module: "property" },
+    HOUSE_RULE_ADD: { action: "property.house-rule.add", module: "property" },
+    HOUSE_RULE_UPDATE: { action: "property.house-rule.update", module: "property" },
+    HOUSE_RULE_DELETE: { action: "property.house-rule.delete", module: "property" },
+
+    LANGUAGE_VIEW: { action: "common.language.view", module: "common" },
+    LANGUAGE_ADD: { action: "common.language.add", module: "common" },
+    LANGUAGE_UPDATE: { action: "common.language.update", module: "common" },
+    LANGUAGE_DELETE: { action: "common.language.delete", module: "common" },
+
+
+    // Additional Room Config
+    ADDITIONAL_ROOM_CONFIG_VIEW: { action: "property.additional-room-config.view", module: "property" },
+    ADDITIONAL_ROOM_CONFIG_ADD: { action: "property.additional-room-config.add", module: "property" },
+    ADDITIONAL_ROOM_CONFIG_UPDATE: { action: "property.additional-room-config.update", module: "property" },
+    ADDITIONAL_ROOM_CONFIG_DELETE: { action: "property.additional-room-config.delete", module: "property" },
+
+    CONFIG_MASTER_VIEW: { action: "master.config-master.view", module: "master" },
+    CONFIG_MASTER_ADD: { action: "master.config-master.add", module: "master" },
+    CONFIG_MASTER_UPDATE: { action: "master.config-master.update", module: "master" },
+    CONFIG_MASTER_DELETE: { action: "master.config-master.delete", module: "master" },
+
+    CONFIG_MASTER_DATA_VIEW: { action: "master.config-master-data.view", module: "master" },
+    CONFIG_MASTER_DATA_ADD: { action: "master.config-master-data.add", module: "master" },
+    CONFIG_MASTER_DATA_UPDATE: { action: "master.config-master-data.update", module: "master" },
+    CONFIG_MASTER_DATA_DELETE: { action: "master.config-master-data.delete", module: "master" },
+
+    STORAGE_PROVIDER_VIEW: { action: "storage.storage-provider.view", module: "storage" },
+    STORAGE_PROVIDER_ADD: { action: "storage.storage-provider.add", module: "storage" },
+    STORAGE_PROVIDER_UPDATE: { action: "storage.storage-provider.update", module: "storage" },
+    STORAGE_PROVIDER_DELETE: { action: "storage.storage-provider.delete", module: "storage" },
+}
+
+module.exports = { permissions }

package/scripts/propertySlug.js

@@ -0,0 +1,34 @@
+
+
+/* 
+    Here slugs are being used in common master / config master to identify the property master 
+    we can create a mapping between the slug and the property onboard
+
+*/
+
+
+const propertyOnBoard = {
+    PropertyType: "property-type",
+    BedOption: "bed-option",
+    BathroomType: "bathroom-type",
+    ViewType: "view-type",
+    PropertyAmenityType: "property-amenity-type",
+    RoomAmenityType: "room-amenity-type",
+    PropertyImageTag: "property-image-tag",
+    RoomType: "room-type",
+    RoomView: "room-view",
+    CheckInTime: "check-in-time",
+    CheckOutTime: "check-out-time",
+    BusinessOwnerType: "business-owner-type",
+    OwnedPropertyAddressProof: "owned-property-address-proof",
+    LeasedPropertyAddressProof: "leased-property-address-proof",
+    ManagedPropertyAddressProof: "managed-property-address-proof",
+    AddressProof: "address-proof",
+    PropertyDocument: "property-document",
+    ManagedPropertyDocument: "managed-property-document",
+    OwnedPropertyDocument: "owned-property-document"
+}
+
+module.exports = {
+    propertyOnBoard
+}

package/scripts/questionsSlug.js

@@ -0,0 +1,32 @@
+/* 
+    Slug for questions:
+    Additional Room Config
+*/
+const questions = {
+    KITCHEN_ACCESS_DETAIL: 'kitchen-access-restrictions',
+    ROOM_BATHROOM_DETAIL: 'room-bathroom-access-detail',
+    ADDITIONAL_SPACE_DETAIL: 'additional-space-detail',
+    BEDROOM_DETAIL: 'bedroom_detail',
+    ADDITIONAL_SPACE_BEDROOM: 'additional-space-bedroom',
+    ADDITIONAL_SPACE_KITCHEN: 'additional-space-kitchen',
+    ADDITIONAL_SPACE_BATHROOM: 'additional-space-bathroom',
+    ADDITIONAL_SPACE_LIVING_ROOM: 'additional-space-living-room',
+
+    PROPERTY_RULES: 'property-rules',
+    KITCHEN_ACCESS_RESTRICTION: 'kitchen-access-restrictions',
+    BEDROOM_FACILITY: 'bedroom_facilities',
+    BEDROOM_ADDITIONAL_DETAIL: 'bedroom_additional_details',
+    BATHRROM_ADDITIONAL_DETAIL: 'bathroom_additional_details',
+    ADDITIONAL_SPACES_LIVING_ROOM: 'additional_spaces_living_room',
+    ADDITIONAL_SPACES_LOBBY_LOUNGE: 'additional_spaces_lobby_lounge',
+    ADDITIONAL_SPACES_HELPERS_ROOM: 'additional_spaces_helpers_room',
+    ADDITIONAL_SPACES_SWIMMING_POOL: 'additional_spaces_swimming_pool',
+    ADDITIONAL_SPACES_PARKING: 'additional_spaces_parking',
+    ADDITIONAL_SPACES_DRIVERS_ROOM: 'additional_spaces_drivers_room',
+    ADDITIONAL_SPACES_TERRACE: 'additional_spaces_terrace',
+    ADDITIONAL_SPACES_GARDEN: 'additional_spaces_garden',
+    ADDITIONAL_SPACES_DINING_AREA: 'additional_spaces_dining_area',
+
+}
+
+module.exports = { questions }

package/scripts/sample-permit-response.js

@@ -0,0 +1,203 @@
+/**
+ * Auto-generated from the original `permissions` catalogue.
+ * Shape matches RoleSchema.permissions:
+ *   [{ module: String, fullAccess: Boolean, features: Map<String, Boolean> }]
+ *
+ * Usage:
+ *   const { permissions } = require('./role-permissions.seed');
+ *   await Role.create({ name: 'admin', permissions, description: '...' });
+ *
+ * Note: two source entries both had id "group" (User Management /
+ * Role Management). They were renamed to "user-management" and
+ * "role-management" here so `module` stays unique.
+ */
+
+const permissions = [
+    {
+        "module": "regions",
+        "fullAccess": false,
+        "features": {
+            "location.region.view": false,
+            "location.region.add": false,
+            "location.region.update": false,
+            "location.region.delete": false
+        }
+    },
+    {
+        "module": "City",
+        "fullAccess": false,
+        "features": {
+            "location.city.view": false,
+            "location.city.add": false,
+            "location.city.update": false,
+            "location.city.delete": false
+        }
+    },
+    {
+        "module": "State",
+        "fullAccess": false,
+        "features": {
+            "location.state.view": false,
+            "location.state.add": false,
+            "location.state.update": false,
+            "location.state.delete": false
+        }
+    },
+    {
+        "module": "Country",
+        "fullAccess": false,
+        "features": {
+            "location.country.view": false,
+            "location.country.add": false,
+            "location.country.update": false,
+            "location.country.delete": false
+        }
+    },
+    {
+        "module": "Pincodes",
+        "fullAccess": false,
+        "features": {
+            "location.pincodes.view": false,
+            "location.pincodes.add": false,
+            "location.pincodes.update": false,
+            "location.pincodes.delete": false
+        }
+    },
+    {
+        "module": "property-category",
+        "fullAccess": false,
+        "features": {
+            "property.property-category.view": false,
+            "property.property-category.add": false,
+            "property.property-category.update": false,
+            "property.property-category.delete": false
+        }
+    },
+    {
+        "module": "Property-Views",
+        "fullAccess": false,
+        "features": {
+            "property.location.property-views.view": false,
+            "property.location.property-views.add": false,
+            "property.location.property-views.update": false,
+            "property.location.property-views.delete": false
+        }
+    },
+    {
+        "module": "amenities-Catalogue",
+        "fullAccess": false,
+        "features": {
+            "property.amenities-catalogue.view": false,
+            "property.amenities-catalogue.add": false,
+            "property.amenities-catalogue.update": false,
+            "property.amenities-catalogue.delete": false
+        }
+    },
+    {
+        "module": "Property-Management",
+        "fullAccess": false,
+        "features": {
+            "property.view": false,
+            "property.add": false,
+            "property.update": false,
+            "property.delete": false
+        }
+    },
+    {
+        "module": "masters",
+        "fullAccess": false,
+        "features": {
+            "masters.view": false,
+            "masters.buyout-reasons.view": false,
+            "masters.buyout-reasons.add": false,
+            "masters.buyout-reasons.update": false,
+            "masters.buyout-reasons.delete": false
+        }
+    },
+    {
+        "module": "tenant",
+        "fullAccess": false,
+        "features": {
+            "user.tenant.view": false,
+            "user.tenant.add": false,
+            "user.tenant.update": false,
+            "user.tenant.delete": false
+        }
+    },
+    {
+        "module": "customer",
+        "fullAccess": false,
+        "features": {
+            "user.customer.view": false,
+            "user.customer.add": false,
+            "user.customer.update": false,
+            "user.customer.delete": false
+        }
+    },
+    {
+        "module": "user-heirarchy",
+        "fullAccess": false,
+        "features": {
+            "user.bdm.assign": false
+        }
+    },
+    {
+        "module": "user-management",
+        "fullAccess": false,
+        "features": {
+            "user.view": false,
+            "user.add": false,
+            "user.update": false,
+            "user.delete": false
+        }
+    },
+    {
+        "module": "role-management",
+        "fullAccess": false,
+        "features": {
+            "role-configuration.view": false,
+            "role-configuration.add": false,
+            "role-configuration.update": false,
+            "role-configuration.delete": false
+        }
+    },
+    {
+        "module": "property-room-amenities-catalogue",
+        "fullAccess": false,
+        "features": {
+            "property.room.room-amenities-catalogue.view": false,
+            "property.room.room-amenities-catalogue.add": false,
+            "property.room.room-amenities-catalogue.update": false,
+            "property.room.room-amenities-catalogue.delete": false
+        }
+    },
+    {
+        "module": "property-booking",
+        "fullAccess": false,
+        "features": {
+            "property.room-booking.view": false,
+            "property.room-booking.add": false,
+            "property.room-booking.update": false,
+            "property.room-booking.delete": false
+        }
+    },
+    {
+        "module": "property-stats",
+        "fullAccess": false,
+        "features": {
+            "property.room.stats.view": false
+        }
+    },
+    {
+        "module": "property-room",
+        "fullAccess": false,
+        "features": {
+            "property.room.view": false,
+            "property.room.add": false,
+            "property.room.update": false,
+            "property.room.delete": false
+        }
+    }
+];
+
+module.exports = { permissions };