@kalisio/kdk 2.6.4 → 2.6.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/core/api/hooks/hooks.model.js +1 -1
- package/package.json +1 -1
- package/test/api/core/test-log-2025-07-31.log +15 -0
- package/test/api/core/{test-log-2024-04-23.log → test-log-2025-10-03.log} +4 -9
- package/test/api/core/test-log-2025-11-12.log +117 -0
- package/test/api/core/test-log-2025-11-27.log +0 -0
- package/test/api/core/test-log-2025-11-28.log +17 -0
- package/test/api/core/test-log-2025-12-09.log +148 -0
- package/test/api/core/test-log-2025-12-17.log +58 -0
- package/test/api/core/test-log-2026-01-29.log +17 -0
- package/test/api/core/test-log-2026-03-26.log +0 -0
- package/test/api/map/test-log-2025-07-23.log +1 -0
- package/test/api/map/test-log-2025-11-28.log +33 -0
- package/test/api/map/test-log-2025-12-10.log +2 -0
- package/test/api/map/test-log-2026-01-06.log +26 -0
- package/.vscode/settings.json +0 -5
- package/coverage/base.css +0 -224
- package/coverage/block-navigation.js +0 -87
- package/coverage/core/api/application.js.html +0 -1870
- package/coverage/core/api/authentication.js.html +0 -742
- package/coverage/core/api/db.js.html +0 -778
- package/coverage/core/api/hooks/hooks.authentication.js.html +0 -313
- package/coverage/core/api/hooks/hooks.authorisations.js.html +0 -1243
- package/coverage/core/api/hooks/hooks.groups.js.html +0 -229
- package/coverage/core/api/hooks/hooks.logger.js.html +0 -163
- package/coverage/core/api/hooks/hooks.model.js.html +0 -955
- package/coverage/core/api/hooks/hooks.organisations.js.html +0 -541
- package/coverage/core/api/hooks/hooks.push.js.html +0 -253
- package/coverage/core/api/hooks/hooks.query.js.html +0 -862
- package/coverage/core/api/hooks/hooks.schemas.js.html +0 -298
- package/coverage/core/api/hooks/hooks.service.js.html +0 -319
- package/coverage/core/api/hooks/hooks.storage.js.html +0 -193
- package/coverage/core/api/hooks/hooks.users.js.html +0 -868
- package/coverage/core/api/hooks/index.html +0 -296
- package/coverage/core/api/hooks/index.js.html +0 -121
- package/coverage/core/api/index.html +0 -191
- package/coverage/core/api/index.js.html +0 -148
- package/coverage/core/api/marshall.js.html +0 -448
- package/coverage/core/api/models/groups.model.mongodb.js.html +0 -109
- package/coverage/core/api/models/index.html +0 -176
- package/coverage/core/api/models/messages.model.mongodb.js.html +0 -109
- package/coverage/core/api/models/organisations.model.mongodb.js.html +0 -94
- package/coverage/core/api/models/tags.model.mongodb.js.html +0 -115
- package/coverage/core/api/models/users.model.mongodb.js.html +0 -115
- package/coverage/core/api/services/account/account.hooks.js.html +0 -208
- package/coverage/core/api/services/account/account.service.js.html +0 -436
- package/coverage/core/api/services/account/index.html +0 -131
- package/coverage/core/api/services/authorisations/authorisations.hooks.js.html +0 -184
- package/coverage/core/api/services/authorisations/authorisations.service.js.html +0 -529
- package/coverage/core/api/services/authorisations/index.html +0 -131
- package/coverage/core/api/services/databases/databases.hooks.js.html +0 -193
- package/coverage/core/api/services/databases/databases.service.js.html +0 -100
- package/coverage/core/api/services/databases/index.html +0 -131
- package/coverage/core/api/services/groups/groups.hooks.js.html +0 -178
- package/coverage/core/api/services/groups/index.html +0 -116
- package/coverage/core/api/services/import-export/import-export.hooks.js.html +0 -184
- package/coverage/core/api/services/import-export/import-export.service.js.html +0 -118
- package/coverage/core/api/services/import-export/index.html +0 -131
- package/coverage/core/api/services/index.html +0 -116
- package/coverage/core/api/services/index.js.html +0 -556
- package/coverage/core/api/services/mailer/index.html +0 -131
- package/coverage/core/api/services/mailer/mailer.hooks.js.html +0 -190
- package/coverage/core/api/services/mailer/mailer.service.js.html +0 -118
- package/coverage/core/api/services/messages/index.html +0 -116
- package/coverage/core/api/services/messages/messages.hooks.js.html +0 -184
- package/coverage/core/api/services/organisations/index.html +0 -131
- package/coverage/core/api/services/organisations/organisations.hooks.js.html +0 -178
- package/coverage/core/api/services/organisations/organisations.service.js.html +0 -343
- package/coverage/core/api/services/push/index.html +0 -131
- package/coverage/core/api/services/push/push.hooks.js.html +0 -190
- package/coverage/core/api/services/push/push.service.js.html +0 -121
- package/coverage/core/api/services/storage/index.html +0 -131
- package/coverage/core/api/services/storage/storage.hooks.js.html +0 -190
- package/coverage/core/api/services/storage/storage.service.js.html +0 -172
- package/coverage/core/api/services/tags/index.html +0 -116
- package/coverage/core/api/services/tags/tags.hooks.js.html +0 -178
- package/coverage/core/api/services/users/index.html +0 -116
- package/coverage/core/api/services/users/users.hooks.js.html +0 -307
- package/coverage/core/api/utils.js.html +0 -118
- package/coverage/core/common/errors.js.html +0 -88
- package/coverage/core/common/index.html +0 -176
- package/coverage/core/common/index.js.html +0 -115
- package/coverage/core/common/permissions.js.html +0 -1048
- package/coverage/core/common/schema.js.html +0 -190
- package/coverage/core/common/utils.js.html +0 -220
- package/coverage/favicon.png +0 -0
- package/coverage/index.html +0 -506
- package/coverage/lcov-report/base.css +0 -224
- package/coverage/lcov-report/block-navigation.js +0 -87
- package/coverage/lcov-report/core/api/application.js.html +0 -1870
- package/coverage/lcov-report/core/api/authentication.js.html +0 -742
- package/coverage/lcov-report/core/api/db.js.html +0 -778
- package/coverage/lcov-report/core/api/hooks/hooks.authentication.js.html +0 -313
- package/coverage/lcov-report/core/api/hooks/hooks.authorisations.js.html +0 -1243
- package/coverage/lcov-report/core/api/hooks/hooks.groups.js.html +0 -229
- package/coverage/lcov-report/core/api/hooks/hooks.logger.js.html +0 -163
- package/coverage/lcov-report/core/api/hooks/hooks.model.js.html +0 -955
- package/coverage/lcov-report/core/api/hooks/hooks.organisations.js.html +0 -541
- package/coverage/lcov-report/core/api/hooks/hooks.push.js.html +0 -253
- package/coverage/lcov-report/core/api/hooks/hooks.query.js.html +0 -862
- package/coverage/lcov-report/core/api/hooks/hooks.schemas.js.html +0 -298
- package/coverage/lcov-report/core/api/hooks/hooks.service.js.html +0 -319
- package/coverage/lcov-report/core/api/hooks/hooks.storage.js.html +0 -193
- package/coverage/lcov-report/core/api/hooks/hooks.users.js.html +0 -868
- package/coverage/lcov-report/core/api/hooks/index.html +0 -296
- package/coverage/lcov-report/core/api/hooks/index.js.html +0 -121
- package/coverage/lcov-report/core/api/index.html +0 -191
- package/coverage/lcov-report/core/api/index.js.html +0 -148
- package/coverage/lcov-report/core/api/marshall.js.html +0 -448
- package/coverage/lcov-report/core/api/models/groups.model.mongodb.js.html +0 -109
- package/coverage/lcov-report/core/api/models/index.html +0 -176
- package/coverage/lcov-report/core/api/models/messages.model.mongodb.js.html +0 -109
- package/coverage/lcov-report/core/api/models/organisations.model.mongodb.js.html +0 -94
- package/coverage/lcov-report/core/api/models/tags.model.mongodb.js.html +0 -115
- package/coverage/lcov-report/core/api/models/users.model.mongodb.js.html +0 -115
- package/coverage/lcov-report/core/api/services/account/account.hooks.js.html +0 -208
- package/coverage/lcov-report/core/api/services/account/account.service.js.html +0 -436
- package/coverage/lcov-report/core/api/services/account/index.html +0 -131
- package/coverage/lcov-report/core/api/services/authorisations/authorisations.hooks.js.html +0 -184
- package/coverage/lcov-report/core/api/services/authorisations/authorisations.service.js.html +0 -529
- package/coverage/lcov-report/core/api/services/authorisations/index.html +0 -131
- package/coverage/lcov-report/core/api/services/databases/databases.hooks.js.html +0 -193
- package/coverage/lcov-report/core/api/services/databases/databases.service.js.html +0 -100
- package/coverage/lcov-report/core/api/services/databases/index.html +0 -131
- package/coverage/lcov-report/core/api/services/groups/groups.hooks.js.html +0 -178
- package/coverage/lcov-report/core/api/services/groups/index.html +0 -116
- package/coverage/lcov-report/core/api/services/import-export/import-export.hooks.js.html +0 -184
- package/coverage/lcov-report/core/api/services/import-export/import-export.service.js.html +0 -118
- package/coverage/lcov-report/core/api/services/import-export/index.html +0 -131
- package/coverage/lcov-report/core/api/services/index.html +0 -116
- package/coverage/lcov-report/core/api/services/index.js.html +0 -556
- package/coverage/lcov-report/core/api/services/mailer/index.html +0 -131
- package/coverage/lcov-report/core/api/services/mailer/mailer.hooks.js.html +0 -190
- package/coverage/lcov-report/core/api/services/mailer/mailer.service.js.html +0 -118
- package/coverage/lcov-report/core/api/services/messages/index.html +0 -116
- package/coverage/lcov-report/core/api/services/messages/messages.hooks.js.html +0 -184
- package/coverage/lcov-report/core/api/services/organisations/index.html +0 -131
- package/coverage/lcov-report/core/api/services/organisations/organisations.hooks.js.html +0 -178
- package/coverage/lcov-report/core/api/services/organisations/organisations.service.js.html +0 -343
- package/coverage/lcov-report/core/api/services/push/index.html +0 -131
- package/coverage/lcov-report/core/api/services/push/push.hooks.js.html +0 -190
- package/coverage/lcov-report/core/api/services/push/push.service.js.html +0 -121
- package/coverage/lcov-report/core/api/services/storage/index.html +0 -131
- package/coverage/lcov-report/core/api/services/storage/storage.hooks.js.html +0 -190
- package/coverage/lcov-report/core/api/services/storage/storage.service.js.html +0 -172
- package/coverage/lcov-report/core/api/services/tags/index.html +0 -116
- package/coverage/lcov-report/core/api/services/tags/tags.hooks.js.html +0 -178
- package/coverage/lcov-report/core/api/services/users/index.html +0 -116
- package/coverage/lcov-report/core/api/services/users/users.hooks.js.html +0 -307
- package/coverage/lcov-report/core/api/utils.js.html +0 -118
- package/coverage/lcov-report/core/common/errors.js.html +0 -88
- package/coverage/lcov-report/core/common/index.html +0 -176
- package/coverage/lcov-report/core/common/index.js.html +0 -115
- package/coverage/lcov-report/core/common/permissions.js.html +0 -1048
- package/coverage/lcov-report/core/common/schema.js.html +0 -190
- package/coverage/lcov-report/core/common/utils.js.html +0 -220
- package/coverage/lcov-report/favicon.png +0 -0
- package/coverage/lcov-report/index.html +0 -506
- package/coverage/lcov-report/map/api/hooks/hooks.catalog.js.html +0 -457
- package/coverage/lcov-report/map/api/hooks/hooks.features.js.html +0 -397
- package/coverage/lcov-report/map/api/hooks/hooks.query.js.html +0 -1309
- package/coverage/lcov-report/map/api/hooks/index.html +0 -161
- package/coverage/lcov-report/map/api/hooks/index.js.html +0 -94
- package/coverage/lcov-report/map/api/index.html +0 -131
- package/coverage/lcov-report/map/api/index.js.html +0 -139
- package/coverage/lcov-report/map/api/marshall.js.html +0 -178
- package/coverage/lcov-report/map/api/models/alerts.model.mongodb.js.html +0 -106
- package/coverage/lcov-report/map/api/models/catalog.model.mongodb.js.html +0 -127
- package/coverage/lcov-report/map/api/models/features.model.mongodb.js.html +0 -196
- package/coverage/lcov-report/map/api/models/index.html +0 -161
- package/coverage/lcov-report/map/api/models/projects.model.mongodb.js.html +0 -109
- package/coverage/lcov-report/map/api/services/alerts/alerts.hooks.js.html +0 -274
- package/coverage/lcov-report/map/api/services/alerts/alerts.service.js.html +0 -610
- package/coverage/lcov-report/map/api/services/alerts/index.html +0 -131
- package/coverage/lcov-report/map/api/services/catalog/catalog.hooks.js.html +0 -310
- package/coverage/lcov-report/map/api/services/catalog/index.html +0 -116
- package/coverage/lcov-report/map/api/services/daptiles/daptiles.service.js.html +0 -1510
- package/coverage/lcov-report/map/api/services/daptiles/index.html +0 -116
- package/coverage/lcov-report/map/api/services/features/features.hooks.js.html +0 -241
- package/coverage/lcov-report/map/api/services/features/features.service.js.html +0 -241
- package/coverage/lcov-report/map/api/services/features/index.html +0 -131
- package/coverage/lcov-report/map/api/services/index.html +0 -116
- package/coverage/lcov-report/map/api/services/index.js.html +0 -817
- package/coverage/lcov-report/map/api/services/projects/index.html +0 -116
- package/coverage/lcov-report/map/api/services/projects/projects.hooks.js.html +0 -439
- package/coverage/lcov-report/map/common/dynamic-grid-source.js.html +0 -466
- package/coverage/lcov-report/map/common/errors.js.html +0 -94
- package/coverage/lcov-report/map/common/geotiff-grid-source.js.html +0 -541
- package/coverage/lcov-report/map/common/grid.js.html +0 -1612
- package/coverage/lcov-report/map/common/index.html +0 -371
- package/coverage/lcov-report/map/common/index.js.html +0 -172
- package/coverage/lcov-report/map/common/meteo-model-grid-source.js.html +0 -556
- package/coverage/lcov-report/map/common/moment-utils.js.html +0 -157
- package/coverage/lcov-report/map/common/opendap-grid-source.js.html +0 -868
- package/coverage/lcov-report/map/common/opendap-utils.js.html +0 -826
- package/coverage/lcov-report/map/common/permissions.js.html +0 -124
- package/coverage/lcov-report/map/common/time-based-grid-source.js.html +0 -418
- package/coverage/lcov-report/map/common/tms-utils.js.html +0 -274
- package/coverage/lcov-report/map/common/wcs-grid-source.js.html +0 -364
- package/coverage/lcov-report/map/common/wcs-utils.js.html +0 -586
- package/coverage/lcov-report/map/common/weacast-grid-source.js.html +0 -1033
- package/coverage/lcov-report/map/common/wfs-utils.js.html +0 -574
- package/coverage/lcov-report/map/common/wms-utils.js.html +0 -451
- package/coverage/lcov-report/map/common/wmts-utils.js.html +0 -547
- package/coverage/lcov-report/prettify.css +0 -1
- package/coverage/lcov-report/prettify.js +0 -2
- package/coverage/lcov-report/sort-arrow-sprite.png +0 -0
- package/coverage/lcov-report/sorter.js +0 -196
- package/coverage/lcov.info +0 -10749
- package/coverage/map/api/hooks/hooks.catalog.js.html +0 -457
- package/coverage/map/api/hooks/hooks.features.js.html +0 -397
- package/coverage/map/api/hooks/hooks.query.js.html +0 -1309
- package/coverage/map/api/hooks/index.html +0 -161
- package/coverage/map/api/hooks/index.js.html +0 -94
- package/coverage/map/api/index.html +0 -131
- package/coverage/map/api/index.js.html +0 -139
- package/coverage/map/api/marshall.js.html +0 -178
- package/coverage/map/api/models/alerts.model.mongodb.js.html +0 -106
- package/coverage/map/api/models/catalog.model.mongodb.js.html +0 -127
- package/coverage/map/api/models/features.model.mongodb.js.html +0 -196
- package/coverage/map/api/models/index.html +0 -161
- package/coverage/map/api/models/projects.model.mongodb.js.html +0 -109
- package/coverage/map/api/services/alerts/alerts.hooks.js.html +0 -274
- package/coverage/map/api/services/alerts/alerts.service.js.html +0 -610
- package/coverage/map/api/services/alerts/index.html +0 -131
- package/coverage/map/api/services/catalog/catalog.hooks.js.html +0 -310
- package/coverage/map/api/services/catalog/index.html +0 -116
- package/coverage/map/api/services/daptiles/daptiles.service.js.html +0 -1510
- package/coverage/map/api/services/daptiles/index.html +0 -116
- package/coverage/map/api/services/features/features.hooks.js.html +0 -241
- package/coverage/map/api/services/features/features.service.js.html +0 -241
- package/coverage/map/api/services/features/index.html +0 -131
- package/coverage/map/api/services/index.html +0 -116
- package/coverage/map/api/services/index.js.html +0 -817
- package/coverage/map/api/services/projects/index.html +0 -116
- package/coverage/map/api/services/projects/projects.hooks.js.html +0 -439
- package/coverage/map/common/dynamic-grid-source.js.html +0 -466
- package/coverage/map/common/errors.js.html +0 -94
- package/coverage/map/common/geotiff-grid-source.js.html +0 -541
- package/coverage/map/common/grid.js.html +0 -1612
- package/coverage/map/common/index.html +0 -371
- package/coverage/map/common/index.js.html +0 -172
- package/coverage/map/common/meteo-model-grid-source.js.html +0 -556
- package/coverage/map/common/moment-utils.js.html +0 -157
- package/coverage/map/common/opendap-grid-source.js.html +0 -868
- package/coverage/map/common/opendap-utils.js.html +0 -826
- package/coverage/map/common/permissions.js.html +0 -124
- package/coverage/map/common/time-based-grid-source.js.html +0 -418
- package/coverage/map/common/tms-utils.js.html +0 -274
- package/coverage/map/common/wcs-grid-source.js.html +0 -364
- package/coverage/map/common/wcs-utils.js.html +0 -586
- package/coverage/map/common/weacast-grid-source.js.html +0 -1033
- package/coverage/map/common/wfs-utils.js.html +0 -574
- package/coverage/map/common/wms-utils.js.html +0 -451
- package/coverage/map/common/wmts-utils.js.html +0 -547
- package/coverage/prettify.css +0 -1
- package/coverage/prettify.js +0 -2
- package/coverage/sort-arrow-sprite.png +0 -0
- package/coverage/sorter.js +0 -196
- package/coverage/tmp/coverage-151166-1723543324307-0.json +0 -1
- package/coverage/tmp/coverage-151178-1723543324283-0.json +0 -1
- package/coverage/tmp/coverage-151189-1723543324271-0.json +0 -1
- package/coverage/tmp/coverage-151201-1723543324248-0.json +0 -1
- package/coverage/tmp/coverage-151208-1723543324227-0.json +0 -1
- package/test/api/core/test-log-2024-04-22.log +0 -84
- package/test/api/core/test-log-2024-08-13.log +0 -3
- /package/test/api/{map/test-log-2025-03-08.log → core/test-log-2025-11-10.log} +0 -0
|
@@ -1,1243 +0,0 @@
|
|
|
1
|
-
|
|
2
|
-
<!doctype html>
|
|
3
|
-
<html lang="en">
|
|
4
|
-
|
|
5
|
-
<head>
|
|
6
|
-
<title>Code coverage report for core/api/hooks/hooks.authorisations.js</title>
|
|
7
|
-
<meta charset="utf-8" />
|
|
8
|
-
<link rel="stylesheet" href="../../../prettify.css" />
|
|
9
|
-
<link rel="stylesheet" href="../../../base.css" />
|
|
10
|
-
<link rel="shortcut icon" type="image/x-icon" href="../../../favicon.png" />
|
|
11
|
-
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
12
|
-
<style type='text/css'>
|
|
13
|
-
.coverage-summary .sorter {
|
|
14
|
-
background-image: url(../../../sort-arrow-sprite.png);
|
|
15
|
-
}
|
|
16
|
-
</style>
|
|
17
|
-
</head>
|
|
18
|
-
|
|
19
|
-
<body>
|
|
20
|
-
<div class='wrapper'>
|
|
21
|
-
<div class='pad1'>
|
|
22
|
-
<h1><a href="../../../index.html">All files</a> / <a href="index.html">core/api/hooks</a> hooks.authorisations.js</h1>
|
|
23
|
-
<div class='clearfix'>
|
|
24
|
-
|
|
25
|
-
<div class='fl pad1y space-right2'>
|
|
26
|
-
<span class="strong">15.28% </span>
|
|
27
|
-
<span class="quiet">Statements</span>
|
|
28
|
-
<span class='fraction'>59/386</span>
|
|
29
|
-
</div>
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
<div class='fl pad1y space-right2'>
|
|
33
|
-
<span class="strong">78.57% </span>
|
|
34
|
-
<span class="quiet">Branches</span>
|
|
35
|
-
<span class='fraction'>11/14</span>
|
|
36
|
-
</div>
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
<div class='fl pad1y space-right2'>
|
|
40
|
-
<span class="strong">18.18% </span>
|
|
41
|
-
<span class="quiet">Functions</span>
|
|
42
|
-
<span class='fraction'>2/11</span>
|
|
43
|
-
</div>
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
<div class='fl pad1y space-right2'>
|
|
47
|
-
<span class="strong">15.28% </span>
|
|
48
|
-
<span class="quiet">Lines</span>
|
|
49
|
-
<span class='fraction'>59/386</span>
|
|
50
|
-
</div>
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
</div>
|
|
54
|
-
<p class="quiet">
|
|
55
|
-
Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
|
|
56
|
-
</p>
|
|
57
|
-
<template id="filterTemplate">
|
|
58
|
-
<div class="quiet">
|
|
59
|
-
Filter:
|
|
60
|
-
<input oninput="onInput()" type="search" id="fileSearch">
|
|
61
|
-
</div>
|
|
62
|
-
</template>
|
|
63
|
-
</div>
|
|
64
|
-
<div class='status-line low'></div>
|
|
65
|
-
<pre><table class="coverage">
|
|
66
|
-
<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
|
|
67
|
-
<a name='L2'></a><a href='#L2'>2</a>
|
|
68
|
-
<a name='L3'></a><a href='#L3'>3</a>
|
|
69
|
-
<a name='L4'></a><a href='#L4'>4</a>
|
|
70
|
-
<a name='L5'></a><a href='#L5'>5</a>
|
|
71
|
-
<a name='L6'></a><a href='#L6'>6</a>
|
|
72
|
-
<a name='L7'></a><a href='#L7'>7</a>
|
|
73
|
-
<a name='L8'></a><a href='#L8'>8</a>
|
|
74
|
-
<a name='L9'></a><a href='#L9'>9</a>
|
|
75
|
-
<a name='L10'></a><a href='#L10'>10</a>
|
|
76
|
-
<a name='L11'></a><a href='#L11'>11</a>
|
|
77
|
-
<a name='L12'></a><a href='#L12'>12</a>
|
|
78
|
-
<a name='L13'></a><a href='#L13'>13</a>
|
|
79
|
-
<a name='L14'></a><a href='#L14'>14</a>
|
|
80
|
-
<a name='L15'></a><a href='#L15'>15</a>
|
|
81
|
-
<a name='L16'></a><a href='#L16'>16</a>
|
|
82
|
-
<a name='L17'></a><a href='#L17'>17</a>
|
|
83
|
-
<a name='L18'></a><a href='#L18'>18</a>
|
|
84
|
-
<a name='L19'></a><a href='#L19'>19</a>
|
|
85
|
-
<a name='L20'></a><a href='#L20'>20</a>
|
|
86
|
-
<a name='L21'></a><a href='#L21'>21</a>
|
|
87
|
-
<a name='L22'></a><a href='#L22'>22</a>
|
|
88
|
-
<a name='L23'></a><a href='#L23'>23</a>
|
|
89
|
-
<a name='L24'></a><a href='#L24'>24</a>
|
|
90
|
-
<a name='L25'></a><a href='#L25'>25</a>
|
|
91
|
-
<a name='L26'></a><a href='#L26'>26</a>
|
|
92
|
-
<a name='L27'></a><a href='#L27'>27</a>
|
|
93
|
-
<a name='L28'></a><a href='#L28'>28</a>
|
|
94
|
-
<a name='L29'></a><a href='#L29'>29</a>
|
|
95
|
-
<a name='L30'></a><a href='#L30'>30</a>
|
|
96
|
-
<a name='L31'></a><a href='#L31'>31</a>
|
|
97
|
-
<a name='L32'></a><a href='#L32'>32</a>
|
|
98
|
-
<a name='L33'></a><a href='#L33'>33</a>
|
|
99
|
-
<a name='L34'></a><a href='#L34'>34</a>
|
|
100
|
-
<a name='L35'></a><a href='#L35'>35</a>
|
|
101
|
-
<a name='L36'></a><a href='#L36'>36</a>
|
|
102
|
-
<a name='L37'></a><a href='#L37'>37</a>
|
|
103
|
-
<a name='L38'></a><a href='#L38'>38</a>
|
|
104
|
-
<a name='L39'></a><a href='#L39'>39</a>
|
|
105
|
-
<a name='L40'></a><a href='#L40'>40</a>
|
|
106
|
-
<a name='L41'></a><a href='#L41'>41</a>
|
|
107
|
-
<a name='L42'></a><a href='#L42'>42</a>
|
|
108
|
-
<a name='L43'></a><a href='#L43'>43</a>
|
|
109
|
-
<a name='L44'></a><a href='#L44'>44</a>
|
|
110
|
-
<a name='L45'></a><a href='#L45'>45</a>
|
|
111
|
-
<a name='L46'></a><a href='#L46'>46</a>
|
|
112
|
-
<a name='L47'></a><a href='#L47'>47</a>
|
|
113
|
-
<a name='L48'></a><a href='#L48'>48</a>
|
|
114
|
-
<a name='L49'></a><a href='#L49'>49</a>
|
|
115
|
-
<a name='L50'></a><a href='#L50'>50</a>
|
|
116
|
-
<a name='L51'></a><a href='#L51'>51</a>
|
|
117
|
-
<a name='L52'></a><a href='#L52'>52</a>
|
|
118
|
-
<a name='L53'></a><a href='#L53'>53</a>
|
|
119
|
-
<a name='L54'></a><a href='#L54'>54</a>
|
|
120
|
-
<a name='L55'></a><a href='#L55'>55</a>
|
|
121
|
-
<a name='L56'></a><a href='#L56'>56</a>
|
|
122
|
-
<a name='L57'></a><a href='#L57'>57</a>
|
|
123
|
-
<a name='L58'></a><a href='#L58'>58</a>
|
|
124
|
-
<a name='L59'></a><a href='#L59'>59</a>
|
|
125
|
-
<a name='L60'></a><a href='#L60'>60</a>
|
|
126
|
-
<a name='L61'></a><a href='#L61'>61</a>
|
|
127
|
-
<a name='L62'></a><a href='#L62'>62</a>
|
|
128
|
-
<a name='L63'></a><a href='#L63'>63</a>
|
|
129
|
-
<a name='L64'></a><a href='#L64'>64</a>
|
|
130
|
-
<a name='L65'></a><a href='#L65'>65</a>
|
|
131
|
-
<a name='L66'></a><a href='#L66'>66</a>
|
|
132
|
-
<a name='L67'></a><a href='#L67'>67</a>
|
|
133
|
-
<a name='L68'></a><a href='#L68'>68</a>
|
|
134
|
-
<a name='L69'></a><a href='#L69'>69</a>
|
|
135
|
-
<a name='L70'></a><a href='#L70'>70</a>
|
|
136
|
-
<a name='L71'></a><a href='#L71'>71</a>
|
|
137
|
-
<a name='L72'></a><a href='#L72'>72</a>
|
|
138
|
-
<a name='L73'></a><a href='#L73'>73</a>
|
|
139
|
-
<a name='L74'></a><a href='#L74'>74</a>
|
|
140
|
-
<a name='L75'></a><a href='#L75'>75</a>
|
|
141
|
-
<a name='L76'></a><a href='#L76'>76</a>
|
|
142
|
-
<a name='L77'></a><a href='#L77'>77</a>
|
|
143
|
-
<a name='L78'></a><a href='#L78'>78</a>
|
|
144
|
-
<a name='L79'></a><a href='#L79'>79</a>
|
|
145
|
-
<a name='L80'></a><a href='#L80'>80</a>
|
|
146
|
-
<a name='L81'></a><a href='#L81'>81</a>
|
|
147
|
-
<a name='L82'></a><a href='#L82'>82</a>
|
|
148
|
-
<a name='L83'></a><a href='#L83'>83</a>
|
|
149
|
-
<a name='L84'></a><a href='#L84'>84</a>
|
|
150
|
-
<a name='L85'></a><a href='#L85'>85</a>
|
|
151
|
-
<a name='L86'></a><a href='#L86'>86</a>
|
|
152
|
-
<a name='L87'></a><a href='#L87'>87</a>
|
|
153
|
-
<a name='L88'></a><a href='#L88'>88</a>
|
|
154
|
-
<a name='L89'></a><a href='#L89'>89</a>
|
|
155
|
-
<a name='L90'></a><a href='#L90'>90</a>
|
|
156
|
-
<a name='L91'></a><a href='#L91'>91</a>
|
|
157
|
-
<a name='L92'></a><a href='#L92'>92</a>
|
|
158
|
-
<a name='L93'></a><a href='#L93'>93</a>
|
|
159
|
-
<a name='L94'></a><a href='#L94'>94</a>
|
|
160
|
-
<a name='L95'></a><a href='#L95'>95</a>
|
|
161
|
-
<a name='L96'></a><a href='#L96'>96</a>
|
|
162
|
-
<a name='L97'></a><a href='#L97'>97</a>
|
|
163
|
-
<a name='L98'></a><a href='#L98'>98</a>
|
|
164
|
-
<a name='L99'></a><a href='#L99'>99</a>
|
|
165
|
-
<a name='L100'></a><a href='#L100'>100</a>
|
|
166
|
-
<a name='L101'></a><a href='#L101'>101</a>
|
|
167
|
-
<a name='L102'></a><a href='#L102'>102</a>
|
|
168
|
-
<a name='L103'></a><a href='#L103'>103</a>
|
|
169
|
-
<a name='L104'></a><a href='#L104'>104</a>
|
|
170
|
-
<a name='L105'></a><a href='#L105'>105</a>
|
|
171
|
-
<a name='L106'></a><a href='#L106'>106</a>
|
|
172
|
-
<a name='L107'></a><a href='#L107'>107</a>
|
|
173
|
-
<a name='L108'></a><a href='#L108'>108</a>
|
|
174
|
-
<a name='L109'></a><a href='#L109'>109</a>
|
|
175
|
-
<a name='L110'></a><a href='#L110'>110</a>
|
|
176
|
-
<a name='L111'></a><a href='#L111'>111</a>
|
|
177
|
-
<a name='L112'></a><a href='#L112'>112</a>
|
|
178
|
-
<a name='L113'></a><a href='#L113'>113</a>
|
|
179
|
-
<a name='L114'></a><a href='#L114'>114</a>
|
|
180
|
-
<a name='L115'></a><a href='#L115'>115</a>
|
|
181
|
-
<a name='L116'></a><a href='#L116'>116</a>
|
|
182
|
-
<a name='L117'></a><a href='#L117'>117</a>
|
|
183
|
-
<a name='L118'></a><a href='#L118'>118</a>
|
|
184
|
-
<a name='L119'></a><a href='#L119'>119</a>
|
|
185
|
-
<a name='L120'></a><a href='#L120'>120</a>
|
|
186
|
-
<a name='L121'></a><a href='#L121'>121</a>
|
|
187
|
-
<a name='L122'></a><a href='#L122'>122</a>
|
|
188
|
-
<a name='L123'></a><a href='#L123'>123</a>
|
|
189
|
-
<a name='L124'></a><a href='#L124'>124</a>
|
|
190
|
-
<a name='L125'></a><a href='#L125'>125</a>
|
|
191
|
-
<a name='L126'></a><a href='#L126'>126</a>
|
|
192
|
-
<a name='L127'></a><a href='#L127'>127</a>
|
|
193
|
-
<a name='L128'></a><a href='#L128'>128</a>
|
|
194
|
-
<a name='L129'></a><a href='#L129'>129</a>
|
|
195
|
-
<a name='L130'></a><a href='#L130'>130</a>
|
|
196
|
-
<a name='L131'></a><a href='#L131'>131</a>
|
|
197
|
-
<a name='L132'></a><a href='#L132'>132</a>
|
|
198
|
-
<a name='L133'></a><a href='#L133'>133</a>
|
|
199
|
-
<a name='L134'></a><a href='#L134'>134</a>
|
|
200
|
-
<a name='L135'></a><a href='#L135'>135</a>
|
|
201
|
-
<a name='L136'></a><a href='#L136'>136</a>
|
|
202
|
-
<a name='L137'></a><a href='#L137'>137</a>
|
|
203
|
-
<a name='L138'></a><a href='#L138'>138</a>
|
|
204
|
-
<a name='L139'></a><a href='#L139'>139</a>
|
|
205
|
-
<a name='L140'></a><a href='#L140'>140</a>
|
|
206
|
-
<a name='L141'></a><a href='#L141'>141</a>
|
|
207
|
-
<a name='L142'></a><a href='#L142'>142</a>
|
|
208
|
-
<a name='L143'></a><a href='#L143'>143</a>
|
|
209
|
-
<a name='L144'></a><a href='#L144'>144</a>
|
|
210
|
-
<a name='L145'></a><a href='#L145'>145</a>
|
|
211
|
-
<a name='L146'></a><a href='#L146'>146</a>
|
|
212
|
-
<a name='L147'></a><a href='#L147'>147</a>
|
|
213
|
-
<a name='L148'></a><a href='#L148'>148</a>
|
|
214
|
-
<a name='L149'></a><a href='#L149'>149</a>
|
|
215
|
-
<a name='L150'></a><a href='#L150'>150</a>
|
|
216
|
-
<a name='L151'></a><a href='#L151'>151</a>
|
|
217
|
-
<a name='L152'></a><a href='#L152'>152</a>
|
|
218
|
-
<a name='L153'></a><a href='#L153'>153</a>
|
|
219
|
-
<a name='L154'></a><a href='#L154'>154</a>
|
|
220
|
-
<a name='L155'></a><a href='#L155'>155</a>
|
|
221
|
-
<a name='L156'></a><a href='#L156'>156</a>
|
|
222
|
-
<a name='L157'></a><a href='#L157'>157</a>
|
|
223
|
-
<a name='L158'></a><a href='#L158'>158</a>
|
|
224
|
-
<a name='L159'></a><a href='#L159'>159</a>
|
|
225
|
-
<a name='L160'></a><a href='#L160'>160</a>
|
|
226
|
-
<a name='L161'></a><a href='#L161'>161</a>
|
|
227
|
-
<a name='L162'></a><a href='#L162'>162</a>
|
|
228
|
-
<a name='L163'></a><a href='#L163'>163</a>
|
|
229
|
-
<a name='L164'></a><a href='#L164'>164</a>
|
|
230
|
-
<a name='L165'></a><a href='#L165'>165</a>
|
|
231
|
-
<a name='L166'></a><a href='#L166'>166</a>
|
|
232
|
-
<a name='L167'></a><a href='#L167'>167</a>
|
|
233
|
-
<a name='L168'></a><a href='#L168'>168</a>
|
|
234
|
-
<a name='L169'></a><a href='#L169'>169</a>
|
|
235
|
-
<a name='L170'></a><a href='#L170'>170</a>
|
|
236
|
-
<a name='L171'></a><a href='#L171'>171</a>
|
|
237
|
-
<a name='L172'></a><a href='#L172'>172</a>
|
|
238
|
-
<a name='L173'></a><a href='#L173'>173</a>
|
|
239
|
-
<a name='L174'></a><a href='#L174'>174</a>
|
|
240
|
-
<a name='L175'></a><a href='#L175'>175</a>
|
|
241
|
-
<a name='L176'></a><a href='#L176'>176</a>
|
|
242
|
-
<a name='L177'></a><a href='#L177'>177</a>
|
|
243
|
-
<a name='L178'></a><a href='#L178'>178</a>
|
|
244
|
-
<a name='L179'></a><a href='#L179'>179</a>
|
|
245
|
-
<a name='L180'></a><a href='#L180'>180</a>
|
|
246
|
-
<a name='L181'></a><a href='#L181'>181</a>
|
|
247
|
-
<a name='L182'></a><a href='#L182'>182</a>
|
|
248
|
-
<a name='L183'></a><a href='#L183'>183</a>
|
|
249
|
-
<a name='L184'></a><a href='#L184'>184</a>
|
|
250
|
-
<a name='L185'></a><a href='#L185'>185</a>
|
|
251
|
-
<a name='L186'></a><a href='#L186'>186</a>
|
|
252
|
-
<a name='L187'></a><a href='#L187'>187</a>
|
|
253
|
-
<a name='L188'></a><a href='#L188'>188</a>
|
|
254
|
-
<a name='L189'></a><a href='#L189'>189</a>
|
|
255
|
-
<a name='L190'></a><a href='#L190'>190</a>
|
|
256
|
-
<a name='L191'></a><a href='#L191'>191</a>
|
|
257
|
-
<a name='L192'></a><a href='#L192'>192</a>
|
|
258
|
-
<a name='L193'></a><a href='#L193'>193</a>
|
|
259
|
-
<a name='L194'></a><a href='#L194'>194</a>
|
|
260
|
-
<a name='L195'></a><a href='#L195'>195</a>
|
|
261
|
-
<a name='L196'></a><a href='#L196'>196</a>
|
|
262
|
-
<a name='L197'></a><a href='#L197'>197</a>
|
|
263
|
-
<a name='L198'></a><a href='#L198'>198</a>
|
|
264
|
-
<a name='L199'></a><a href='#L199'>199</a>
|
|
265
|
-
<a name='L200'></a><a href='#L200'>200</a>
|
|
266
|
-
<a name='L201'></a><a href='#L201'>201</a>
|
|
267
|
-
<a name='L202'></a><a href='#L202'>202</a>
|
|
268
|
-
<a name='L203'></a><a href='#L203'>203</a>
|
|
269
|
-
<a name='L204'></a><a href='#L204'>204</a>
|
|
270
|
-
<a name='L205'></a><a href='#L205'>205</a>
|
|
271
|
-
<a name='L206'></a><a href='#L206'>206</a>
|
|
272
|
-
<a name='L207'></a><a href='#L207'>207</a>
|
|
273
|
-
<a name='L208'></a><a href='#L208'>208</a>
|
|
274
|
-
<a name='L209'></a><a href='#L209'>209</a>
|
|
275
|
-
<a name='L210'></a><a href='#L210'>210</a>
|
|
276
|
-
<a name='L211'></a><a href='#L211'>211</a>
|
|
277
|
-
<a name='L212'></a><a href='#L212'>212</a>
|
|
278
|
-
<a name='L213'></a><a href='#L213'>213</a>
|
|
279
|
-
<a name='L214'></a><a href='#L214'>214</a>
|
|
280
|
-
<a name='L215'></a><a href='#L215'>215</a>
|
|
281
|
-
<a name='L216'></a><a href='#L216'>216</a>
|
|
282
|
-
<a name='L217'></a><a href='#L217'>217</a>
|
|
283
|
-
<a name='L218'></a><a href='#L218'>218</a>
|
|
284
|
-
<a name='L219'></a><a href='#L219'>219</a>
|
|
285
|
-
<a name='L220'></a><a href='#L220'>220</a>
|
|
286
|
-
<a name='L221'></a><a href='#L221'>221</a>
|
|
287
|
-
<a name='L222'></a><a href='#L222'>222</a>
|
|
288
|
-
<a name='L223'></a><a href='#L223'>223</a>
|
|
289
|
-
<a name='L224'></a><a href='#L224'>224</a>
|
|
290
|
-
<a name='L225'></a><a href='#L225'>225</a>
|
|
291
|
-
<a name='L226'></a><a href='#L226'>226</a>
|
|
292
|
-
<a name='L227'></a><a href='#L227'>227</a>
|
|
293
|
-
<a name='L228'></a><a href='#L228'>228</a>
|
|
294
|
-
<a name='L229'></a><a href='#L229'>229</a>
|
|
295
|
-
<a name='L230'></a><a href='#L230'>230</a>
|
|
296
|
-
<a name='L231'></a><a href='#L231'>231</a>
|
|
297
|
-
<a name='L232'></a><a href='#L232'>232</a>
|
|
298
|
-
<a name='L233'></a><a href='#L233'>233</a>
|
|
299
|
-
<a name='L234'></a><a href='#L234'>234</a>
|
|
300
|
-
<a name='L235'></a><a href='#L235'>235</a>
|
|
301
|
-
<a name='L236'></a><a href='#L236'>236</a>
|
|
302
|
-
<a name='L237'></a><a href='#L237'>237</a>
|
|
303
|
-
<a name='L238'></a><a href='#L238'>238</a>
|
|
304
|
-
<a name='L239'></a><a href='#L239'>239</a>
|
|
305
|
-
<a name='L240'></a><a href='#L240'>240</a>
|
|
306
|
-
<a name='L241'></a><a href='#L241'>241</a>
|
|
307
|
-
<a name='L242'></a><a href='#L242'>242</a>
|
|
308
|
-
<a name='L243'></a><a href='#L243'>243</a>
|
|
309
|
-
<a name='L244'></a><a href='#L244'>244</a>
|
|
310
|
-
<a name='L245'></a><a href='#L245'>245</a>
|
|
311
|
-
<a name='L246'></a><a href='#L246'>246</a>
|
|
312
|
-
<a name='L247'></a><a href='#L247'>247</a>
|
|
313
|
-
<a name='L248'></a><a href='#L248'>248</a>
|
|
314
|
-
<a name='L249'></a><a href='#L249'>249</a>
|
|
315
|
-
<a name='L250'></a><a href='#L250'>250</a>
|
|
316
|
-
<a name='L251'></a><a href='#L251'>251</a>
|
|
317
|
-
<a name='L252'></a><a href='#L252'>252</a>
|
|
318
|
-
<a name='L253'></a><a href='#L253'>253</a>
|
|
319
|
-
<a name='L254'></a><a href='#L254'>254</a>
|
|
320
|
-
<a name='L255'></a><a href='#L255'>255</a>
|
|
321
|
-
<a name='L256'></a><a href='#L256'>256</a>
|
|
322
|
-
<a name='L257'></a><a href='#L257'>257</a>
|
|
323
|
-
<a name='L258'></a><a href='#L258'>258</a>
|
|
324
|
-
<a name='L259'></a><a href='#L259'>259</a>
|
|
325
|
-
<a name='L260'></a><a href='#L260'>260</a>
|
|
326
|
-
<a name='L261'></a><a href='#L261'>261</a>
|
|
327
|
-
<a name='L262'></a><a href='#L262'>262</a>
|
|
328
|
-
<a name='L263'></a><a href='#L263'>263</a>
|
|
329
|
-
<a name='L264'></a><a href='#L264'>264</a>
|
|
330
|
-
<a name='L265'></a><a href='#L265'>265</a>
|
|
331
|
-
<a name='L266'></a><a href='#L266'>266</a>
|
|
332
|
-
<a name='L267'></a><a href='#L267'>267</a>
|
|
333
|
-
<a name='L268'></a><a href='#L268'>268</a>
|
|
334
|
-
<a name='L269'></a><a href='#L269'>269</a>
|
|
335
|
-
<a name='L270'></a><a href='#L270'>270</a>
|
|
336
|
-
<a name='L271'></a><a href='#L271'>271</a>
|
|
337
|
-
<a name='L272'></a><a href='#L272'>272</a>
|
|
338
|
-
<a name='L273'></a><a href='#L273'>273</a>
|
|
339
|
-
<a name='L274'></a><a href='#L274'>274</a>
|
|
340
|
-
<a name='L275'></a><a href='#L275'>275</a>
|
|
341
|
-
<a name='L276'></a><a href='#L276'>276</a>
|
|
342
|
-
<a name='L277'></a><a href='#L277'>277</a>
|
|
343
|
-
<a name='L278'></a><a href='#L278'>278</a>
|
|
344
|
-
<a name='L279'></a><a href='#L279'>279</a>
|
|
345
|
-
<a name='L280'></a><a href='#L280'>280</a>
|
|
346
|
-
<a name='L281'></a><a href='#L281'>281</a>
|
|
347
|
-
<a name='L282'></a><a href='#L282'>282</a>
|
|
348
|
-
<a name='L283'></a><a href='#L283'>283</a>
|
|
349
|
-
<a name='L284'></a><a href='#L284'>284</a>
|
|
350
|
-
<a name='L285'></a><a href='#L285'>285</a>
|
|
351
|
-
<a name='L286'></a><a href='#L286'>286</a>
|
|
352
|
-
<a name='L287'></a><a href='#L287'>287</a>
|
|
353
|
-
<a name='L288'></a><a href='#L288'>288</a>
|
|
354
|
-
<a name='L289'></a><a href='#L289'>289</a>
|
|
355
|
-
<a name='L290'></a><a href='#L290'>290</a>
|
|
356
|
-
<a name='L291'></a><a href='#L291'>291</a>
|
|
357
|
-
<a name='L292'></a><a href='#L292'>292</a>
|
|
358
|
-
<a name='L293'></a><a href='#L293'>293</a>
|
|
359
|
-
<a name='L294'></a><a href='#L294'>294</a>
|
|
360
|
-
<a name='L295'></a><a href='#L295'>295</a>
|
|
361
|
-
<a name='L296'></a><a href='#L296'>296</a>
|
|
362
|
-
<a name='L297'></a><a href='#L297'>297</a>
|
|
363
|
-
<a name='L298'></a><a href='#L298'>298</a>
|
|
364
|
-
<a name='L299'></a><a href='#L299'>299</a>
|
|
365
|
-
<a name='L300'></a><a href='#L300'>300</a>
|
|
366
|
-
<a name='L301'></a><a href='#L301'>301</a>
|
|
367
|
-
<a name='L302'></a><a href='#L302'>302</a>
|
|
368
|
-
<a name='L303'></a><a href='#L303'>303</a>
|
|
369
|
-
<a name='L304'></a><a href='#L304'>304</a>
|
|
370
|
-
<a name='L305'></a><a href='#L305'>305</a>
|
|
371
|
-
<a name='L306'></a><a href='#L306'>306</a>
|
|
372
|
-
<a name='L307'></a><a href='#L307'>307</a>
|
|
373
|
-
<a name='L308'></a><a href='#L308'>308</a>
|
|
374
|
-
<a name='L309'></a><a href='#L309'>309</a>
|
|
375
|
-
<a name='L310'></a><a href='#L310'>310</a>
|
|
376
|
-
<a name='L311'></a><a href='#L311'>311</a>
|
|
377
|
-
<a name='L312'></a><a href='#L312'>312</a>
|
|
378
|
-
<a name='L313'></a><a href='#L313'>313</a>
|
|
379
|
-
<a name='L314'></a><a href='#L314'>314</a>
|
|
380
|
-
<a name='L315'></a><a href='#L315'>315</a>
|
|
381
|
-
<a name='L316'></a><a href='#L316'>316</a>
|
|
382
|
-
<a name='L317'></a><a href='#L317'>317</a>
|
|
383
|
-
<a name='L318'></a><a href='#L318'>318</a>
|
|
384
|
-
<a name='L319'></a><a href='#L319'>319</a>
|
|
385
|
-
<a name='L320'></a><a href='#L320'>320</a>
|
|
386
|
-
<a name='L321'></a><a href='#L321'>321</a>
|
|
387
|
-
<a name='L322'></a><a href='#L322'>322</a>
|
|
388
|
-
<a name='L323'></a><a href='#L323'>323</a>
|
|
389
|
-
<a name='L324'></a><a href='#L324'>324</a>
|
|
390
|
-
<a name='L325'></a><a href='#L325'>325</a>
|
|
391
|
-
<a name='L326'></a><a href='#L326'>326</a>
|
|
392
|
-
<a name='L327'></a><a href='#L327'>327</a>
|
|
393
|
-
<a name='L328'></a><a href='#L328'>328</a>
|
|
394
|
-
<a name='L329'></a><a href='#L329'>329</a>
|
|
395
|
-
<a name='L330'></a><a href='#L330'>330</a>
|
|
396
|
-
<a name='L331'></a><a href='#L331'>331</a>
|
|
397
|
-
<a name='L332'></a><a href='#L332'>332</a>
|
|
398
|
-
<a name='L333'></a><a href='#L333'>333</a>
|
|
399
|
-
<a name='L334'></a><a href='#L334'>334</a>
|
|
400
|
-
<a name='L335'></a><a href='#L335'>335</a>
|
|
401
|
-
<a name='L336'></a><a href='#L336'>336</a>
|
|
402
|
-
<a name='L337'></a><a href='#L337'>337</a>
|
|
403
|
-
<a name='L338'></a><a href='#L338'>338</a>
|
|
404
|
-
<a name='L339'></a><a href='#L339'>339</a>
|
|
405
|
-
<a name='L340'></a><a href='#L340'>340</a>
|
|
406
|
-
<a name='L341'></a><a href='#L341'>341</a>
|
|
407
|
-
<a name='L342'></a><a href='#L342'>342</a>
|
|
408
|
-
<a name='L343'></a><a href='#L343'>343</a>
|
|
409
|
-
<a name='L344'></a><a href='#L344'>344</a>
|
|
410
|
-
<a name='L345'></a><a href='#L345'>345</a>
|
|
411
|
-
<a name='L346'></a><a href='#L346'>346</a>
|
|
412
|
-
<a name='L347'></a><a href='#L347'>347</a>
|
|
413
|
-
<a name='L348'></a><a href='#L348'>348</a>
|
|
414
|
-
<a name='L349'></a><a href='#L349'>349</a>
|
|
415
|
-
<a name='L350'></a><a href='#L350'>350</a>
|
|
416
|
-
<a name='L351'></a><a href='#L351'>351</a>
|
|
417
|
-
<a name='L352'></a><a href='#L352'>352</a>
|
|
418
|
-
<a name='L353'></a><a href='#L353'>353</a>
|
|
419
|
-
<a name='L354'></a><a href='#L354'>354</a>
|
|
420
|
-
<a name='L355'></a><a href='#L355'>355</a>
|
|
421
|
-
<a name='L356'></a><a href='#L356'>356</a>
|
|
422
|
-
<a name='L357'></a><a href='#L357'>357</a>
|
|
423
|
-
<a name='L358'></a><a href='#L358'>358</a>
|
|
424
|
-
<a name='L359'></a><a href='#L359'>359</a>
|
|
425
|
-
<a name='L360'></a><a href='#L360'>360</a>
|
|
426
|
-
<a name='L361'></a><a href='#L361'>361</a>
|
|
427
|
-
<a name='L362'></a><a href='#L362'>362</a>
|
|
428
|
-
<a name='L363'></a><a href='#L363'>363</a>
|
|
429
|
-
<a name='L364'></a><a href='#L364'>364</a>
|
|
430
|
-
<a name='L365'></a><a href='#L365'>365</a>
|
|
431
|
-
<a name='L366'></a><a href='#L366'>366</a>
|
|
432
|
-
<a name='L367'></a><a href='#L367'>367</a>
|
|
433
|
-
<a name='L368'></a><a href='#L368'>368</a>
|
|
434
|
-
<a name='L369'></a><a href='#L369'>369</a>
|
|
435
|
-
<a name='L370'></a><a href='#L370'>370</a>
|
|
436
|
-
<a name='L371'></a><a href='#L371'>371</a>
|
|
437
|
-
<a name='L372'></a><a href='#L372'>372</a>
|
|
438
|
-
<a name='L373'></a><a href='#L373'>373</a>
|
|
439
|
-
<a name='L374'></a><a href='#L374'>374</a>
|
|
440
|
-
<a name='L375'></a><a href='#L375'>375</a>
|
|
441
|
-
<a name='L376'></a><a href='#L376'>376</a>
|
|
442
|
-
<a name='L377'></a><a href='#L377'>377</a>
|
|
443
|
-
<a name='L378'></a><a href='#L378'>378</a>
|
|
444
|
-
<a name='L379'></a><a href='#L379'>379</a>
|
|
445
|
-
<a name='L380'></a><a href='#L380'>380</a>
|
|
446
|
-
<a name='L381'></a><a href='#L381'>381</a>
|
|
447
|
-
<a name='L382'></a><a href='#L382'>382</a>
|
|
448
|
-
<a name='L383'></a><a href='#L383'>383</a>
|
|
449
|
-
<a name='L384'></a><a href='#L384'>384</a>
|
|
450
|
-
<a name='L385'></a><a href='#L385'>385</a>
|
|
451
|
-
<a name='L386'></a><a href='#L386'>386</a>
|
|
452
|
-
<a name='L387'></a><a href='#L387'>387</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
|
|
453
|
-
<span class="cline-any cline-yes">1x</span>
|
|
454
|
-
<span class="cline-any cline-yes">1x</span>
|
|
455
|
-
<span class="cline-any cline-yes">1x</span>
|
|
456
|
-
<span class="cline-any cline-yes">1x</span>
|
|
457
|
-
<span class="cline-any cline-yes">1x</span>
|
|
458
|
-
<span class="cline-any cline-yes">1x</span>
|
|
459
|
-
<span class="cline-any cline-yes">1x</span>
|
|
460
|
-
<span class="cline-any cline-yes">1x</span>
|
|
461
|
-
<span class="cline-any cline-yes">1x</span>
|
|
462
|
-
<span class="cline-any cline-yes">1x</span>
|
|
463
|
-
<span class="cline-any cline-yes">1x</span>
|
|
464
|
-
<span class="cline-any cline-yes">1x</span>
|
|
465
|
-
<span class="cline-any cline-yes">1x</span>
|
|
466
|
-
<span class="cline-any cline-yes">1x</span>
|
|
467
|
-
<span class="cline-any cline-yes">1x</span>
|
|
468
|
-
<span class="cline-any cline-yes">1x</span>
|
|
469
|
-
<span class="cline-any cline-yes">2x</span>
|
|
470
|
-
<span class="cline-any cline-yes">2x</span>
|
|
471
|
-
<span class="cline-any cline-yes">2x</span>
|
|
472
|
-
<span class="cline-any cline-yes">2x</span>
|
|
473
|
-
<span class="cline-any cline-yes">2x</span>
|
|
474
|
-
<span class="cline-any cline-yes">2x</span>
|
|
475
|
-
<span class="cline-any cline-yes">2x</span>
|
|
476
|
-
<span class="cline-any cline-yes">2x</span>
|
|
477
|
-
<span class="cline-any cline-yes">2x</span>
|
|
478
|
-
<span class="cline-any cline-yes">2x</span>
|
|
479
|
-
<span class="cline-any cline-yes">2x</span>
|
|
480
|
-
<span class="cline-any cline-yes">2x</span>
|
|
481
|
-
<span class="cline-any cline-yes">2x</span>
|
|
482
|
-
<span class="cline-any cline-yes">2x</span>
|
|
483
|
-
<span class="cline-any cline-yes">2x</span>
|
|
484
|
-
<span class="cline-any cline-yes">2x</span>
|
|
485
|
-
<span class="cline-any cline-yes">2x</span>
|
|
486
|
-
<span class="cline-any cline-yes">2x</span>
|
|
487
|
-
<span class="cline-any cline-yes">2x</span>
|
|
488
|
-
<span class="cline-any cline-yes">2x</span>
|
|
489
|
-
<span class="cline-any cline-yes">1x</span>
|
|
490
|
-
<span class="cline-any cline-yes">1x</span>
|
|
491
|
-
<span class="cline-any cline-no"> </span>
|
|
492
|
-
<span class="cline-any cline-no"> </span>
|
|
493
|
-
<span class="cline-any cline-no"> </span>
|
|
494
|
-
<span class="cline-any cline-no"> </span>
|
|
495
|
-
<span class="cline-any cline-no"> </span>
|
|
496
|
-
<span class="cline-any cline-no"> </span>
|
|
497
|
-
<span class="cline-any cline-yes">1x</span>
|
|
498
|
-
<span class="cline-any cline-yes">1x</span>
|
|
499
|
-
<span class="cline-any cline-no"> </span>
|
|
500
|
-
<span class="cline-any cline-no"> </span>
|
|
501
|
-
<span class="cline-any cline-no"> </span>
|
|
502
|
-
<span class="cline-any cline-no"> </span>
|
|
503
|
-
<span class="cline-any cline-no"> </span>
|
|
504
|
-
<span class="cline-any cline-no"> </span>
|
|
505
|
-
<span class="cline-any cline-yes">1x</span>
|
|
506
|
-
<span class="cline-any cline-yes">1x</span>
|
|
507
|
-
<span class="cline-any cline-no"> </span>
|
|
508
|
-
<span class="cline-any cline-no"> </span>
|
|
509
|
-
<span class="cline-any cline-no"> </span>
|
|
510
|
-
<span class="cline-any cline-no"> </span>
|
|
511
|
-
<span class="cline-any cline-no"> </span>
|
|
512
|
-
<span class="cline-any cline-no"> </span>
|
|
513
|
-
<span class="cline-any cline-yes">1x</span>
|
|
514
|
-
<span class="cline-any cline-yes">1x</span>
|
|
515
|
-
<span class="cline-any cline-no"> </span>
|
|
516
|
-
<span class="cline-any cline-no"> </span>
|
|
517
|
-
<span class="cline-any cline-no"> </span>
|
|
518
|
-
<span class="cline-any cline-no"> </span>
|
|
519
|
-
<span class="cline-any cline-no"> </span>
|
|
520
|
-
<span class="cline-any cline-no"> </span>
|
|
521
|
-
<span class="cline-any cline-yes">1x</span>
|
|
522
|
-
<span class="cline-any cline-yes">1x</span>
|
|
523
|
-
<span class="cline-any cline-no"> </span>
|
|
524
|
-
<span class="cline-any cline-no"> </span>
|
|
525
|
-
<span class="cline-any cline-no"> </span>
|
|
526
|
-
<span class="cline-any cline-no"> </span>
|
|
527
|
-
<span class="cline-any cline-no"> </span>
|
|
528
|
-
<span class="cline-any cline-no"> </span>
|
|
529
|
-
<span class="cline-any cline-no"> </span>
|
|
530
|
-
<span class="cline-any cline-no"> </span>
|
|
531
|
-
<span class="cline-any cline-no"> </span>
|
|
532
|
-
<span class="cline-any cline-no"> </span>
|
|
533
|
-
<span class="cline-any cline-no"> </span>
|
|
534
|
-
<span class="cline-any cline-no"> </span>
|
|
535
|
-
<span class="cline-any cline-no"> </span>
|
|
536
|
-
<span class="cline-any cline-no"> </span>
|
|
537
|
-
<span class="cline-any cline-no"> </span>
|
|
538
|
-
<span class="cline-any cline-no"> </span>
|
|
539
|
-
<span class="cline-any cline-no"> </span>
|
|
540
|
-
<span class="cline-any cline-no"> </span>
|
|
541
|
-
<span class="cline-any cline-no"> </span>
|
|
542
|
-
<span class="cline-any cline-no"> </span>
|
|
543
|
-
<span class="cline-any cline-no"> </span>
|
|
544
|
-
<span class="cline-any cline-no"> </span>
|
|
545
|
-
<span class="cline-any cline-no"> </span>
|
|
546
|
-
<span class="cline-any cline-no"> </span>
|
|
547
|
-
<span class="cline-any cline-no"> </span>
|
|
548
|
-
<span class="cline-any cline-no"> </span>
|
|
549
|
-
<span class="cline-any cline-no"> </span>
|
|
550
|
-
<span class="cline-any cline-no"> </span>
|
|
551
|
-
<span class="cline-any cline-no"> </span>
|
|
552
|
-
<span class="cline-any cline-no"> </span>
|
|
553
|
-
<span class="cline-any cline-no"> </span>
|
|
554
|
-
<span class="cline-any cline-no"> </span>
|
|
555
|
-
<span class="cline-any cline-no"> </span>
|
|
556
|
-
<span class="cline-any cline-no"> </span>
|
|
557
|
-
<span class="cline-any cline-no"> </span>
|
|
558
|
-
<span class="cline-any cline-no"> </span>
|
|
559
|
-
<span class="cline-any cline-no"> </span>
|
|
560
|
-
<span class="cline-any cline-no"> </span>
|
|
561
|
-
<span class="cline-any cline-no"> </span>
|
|
562
|
-
<span class="cline-any cline-no"> </span>
|
|
563
|
-
<span class="cline-any cline-no"> </span>
|
|
564
|
-
<span class="cline-any cline-no"> </span>
|
|
565
|
-
<span class="cline-any cline-no"> </span>
|
|
566
|
-
<span class="cline-any cline-no"> </span>
|
|
567
|
-
<span class="cline-any cline-no"> </span>
|
|
568
|
-
<span class="cline-any cline-no"> </span>
|
|
569
|
-
<span class="cline-any cline-no"> </span>
|
|
570
|
-
<span class="cline-any cline-no"> </span>
|
|
571
|
-
<span class="cline-any cline-no"> </span>
|
|
572
|
-
<span class="cline-any cline-no"> </span>
|
|
573
|
-
<span class="cline-any cline-no"> </span>
|
|
574
|
-
<span class="cline-any cline-no"> </span>
|
|
575
|
-
<span class="cline-any cline-no"> </span>
|
|
576
|
-
<span class="cline-any cline-no"> </span>
|
|
577
|
-
<span class="cline-any cline-no"> </span>
|
|
578
|
-
<span class="cline-any cline-no"> </span>
|
|
579
|
-
<span class="cline-any cline-no"> </span>
|
|
580
|
-
<span class="cline-any cline-no"> </span>
|
|
581
|
-
<span class="cline-any cline-no"> </span>
|
|
582
|
-
<span class="cline-any cline-no"> </span>
|
|
583
|
-
<span class="cline-any cline-no"> </span>
|
|
584
|
-
<span class="cline-any cline-no"> </span>
|
|
585
|
-
<span class="cline-any cline-no"> </span>
|
|
586
|
-
<span class="cline-any cline-no"> </span>
|
|
587
|
-
<span class="cline-any cline-no"> </span>
|
|
588
|
-
<span class="cline-any cline-no"> </span>
|
|
589
|
-
<span class="cline-any cline-no"> </span>
|
|
590
|
-
<span class="cline-any cline-no"> </span>
|
|
591
|
-
<span class="cline-any cline-no"> </span>
|
|
592
|
-
<span class="cline-any cline-no"> </span>
|
|
593
|
-
<span class="cline-any cline-no"> </span>
|
|
594
|
-
<span class="cline-any cline-no"> </span>
|
|
595
|
-
<span class="cline-any cline-no"> </span>
|
|
596
|
-
<span class="cline-any cline-no"> </span>
|
|
597
|
-
<span class="cline-any cline-no"> </span>
|
|
598
|
-
<span class="cline-any cline-yes">1x</span>
|
|
599
|
-
<span class="cline-any cline-yes">1x</span>
|
|
600
|
-
<span class="cline-any cline-no"> </span>
|
|
601
|
-
<span class="cline-any cline-no"> </span>
|
|
602
|
-
<span class="cline-any cline-no"> </span>
|
|
603
|
-
<span class="cline-any cline-no"> </span>
|
|
604
|
-
<span class="cline-any cline-no"> </span>
|
|
605
|
-
<span class="cline-any cline-no"> </span>
|
|
606
|
-
<span class="cline-any cline-no"> </span>
|
|
607
|
-
<span class="cline-any cline-no"> </span>
|
|
608
|
-
<span class="cline-any cline-no"> </span>
|
|
609
|
-
<span class="cline-any cline-no"> </span>
|
|
610
|
-
<span class="cline-any cline-no"> </span>
|
|
611
|
-
<span class="cline-any cline-no"> </span>
|
|
612
|
-
<span class="cline-any cline-no"> </span>
|
|
613
|
-
<span class="cline-any cline-no"> </span>
|
|
614
|
-
<span class="cline-any cline-no"> </span>
|
|
615
|
-
<span class="cline-any cline-no"> </span>
|
|
616
|
-
<span class="cline-any cline-no"> </span>
|
|
617
|
-
<span class="cline-any cline-no"> </span>
|
|
618
|
-
<span class="cline-any cline-no"> </span>
|
|
619
|
-
<span class="cline-any cline-no"> </span>
|
|
620
|
-
<span class="cline-any cline-no"> </span>
|
|
621
|
-
<span class="cline-any cline-no"> </span>
|
|
622
|
-
<span class="cline-any cline-no"> </span>
|
|
623
|
-
<span class="cline-any cline-no"> </span>
|
|
624
|
-
<span class="cline-any cline-no"> </span>
|
|
625
|
-
<span class="cline-any cline-no"> </span>
|
|
626
|
-
<span class="cline-any cline-no"> </span>
|
|
627
|
-
<span class="cline-any cline-no"> </span>
|
|
628
|
-
<span class="cline-any cline-no"> </span>
|
|
629
|
-
<span class="cline-any cline-no"> </span>
|
|
630
|
-
<span class="cline-any cline-no"> </span>
|
|
631
|
-
<span class="cline-any cline-no"> </span>
|
|
632
|
-
<span class="cline-any cline-no"> </span>
|
|
633
|
-
<span class="cline-any cline-no"> </span>
|
|
634
|
-
<span class="cline-any cline-no"> </span>
|
|
635
|
-
<span class="cline-any cline-no"> </span>
|
|
636
|
-
<span class="cline-any cline-no"> </span>
|
|
637
|
-
<span class="cline-any cline-no"> </span>
|
|
638
|
-
<span class="cline-any cline-no"> </span>
|
|
639
|
-
<span class="cline-any cline-no"> </span>
|
|
640
|
-
<span class="cline-any cline-no"> </span>
|
|
641
|
-
<span class="cline-any cline-no"> </span>
|
|
642
|
-
<span class="cline-any cline-no"> </span>
|
|
643
|
-
<span class="cline-any cline-no"> </span>
|
|
644
|
-
<span class="cline-any cline-no"> </span>
|
|
645
|
-
<span class="cline-any cline-no"> </span>
|
|
646
|
-
<span class="cline-any cline-no"> </span>
|
|
647
|
-
<span class="cline-any cline-no"> </span>
|
|
648
|
-
<span class="cline-any cline-no"> </span>
|
|
649
|
-
<span class="cline-any cline-no"> </span>
|
|
650
|
-
<span class="cline-any cline-no"> </span>
|
|
651
|
-
<span class="cline-any cline-no"> </span>
|
|
652
|
-
<span class="cline-any cline-no"> </span>
|
|
653
|
-
<span class="cline-any cline-no"> </span>
|
|
654
|
-
<span class="cline-any cline-no"> </span>
|
|
655
|
-
<span class="cline-any cline-no"> </span>
|
|
656
|
-
<span class="cline-any cline-no"> </span>
|
|
657
|
-
<span class="cline-any cline-no"> </span>
|
|
658
|
-
<span class="cline-any cline-no"> </span>
|
|
659
|
-
<span class="cline-any cline-no"> </span>
|
|
660
|
-
<span class="cline-any cline-no"> </span>
|
|
661
|
-
<span class="cline-any cline-no"> </span>
|
|
662
|
-
<span class="cline-any cline-no"> </span>
|
|
663
|
-
<span class="cline-any cline-no"> </span>
|
|
664
|
-
<span class="cline-any cline-no"> </span>
|
|
665
|
-
<span class="cline-any cline-no"> </span>
|
|
666
|
-
<span class="cline-any cline-no"> </span>
|
|
667
|
-
<span class="cline-any cline-no"> </span>
|
|
668
|
-
<span class="cline-any cline-no"> </span>
|
|
669
|
-
<span class="cline-any cline-no"> </span>
|
|
670
|
-
<span class="cline-any cline-no"> </span>
|
|
671
|
-
<span class="cline-any cline-no"> </span>
|
|
672
|
-
<span class="cline-any cline-no"> </span>
|
|
673
|
-
<span class="cline-any cline-no"> </span>
|
|
674
|
-
<span class="cline-any cline-no"> </span>
|
|
675
|
-
<span class="cline-any cline-no"> </span>
|
|
676
|
-
<span class="cline-any cline-no"> </span>
|
|
677
|
-
<span class="cline-any cline-no"> </span>
|
|
678
|
-
<span class="cline-any cline-no"> </span>
|
|
679
|
-
<span class="cline-any cline-no"> </span>
|
|
680
|
-
<span class="cline-any cline-no"> </span>
|
|
681
|
-
<span class="cline-any cline-no"> </span>
|
|
682
|
-
<span class="cline-any cline-no"> </span>
|
|
683
|
-
<span class="cline-any cline-no"> </span>
|
|
684
|
-
<span class="cline-any cline-no"> </span>
|
|
685
|
-
<span class="cline-any cline-no"> </span>
|
|
686
|
-
<span class="cline-any cline-no"> </span>
|
|
687
|
-
<span class="cline-any cline-no"> </span>
|
|
688
|
-
<span class="cline-any cline-no"> </span>
|
|
689
|
-
<span class="cline-any cline-no"> </span>
|
|
690
|
-
<span class="cline-any cline-no"> </span>
|
|
691
|
-
<span class="cline-any cline-no"> </span>
|
|
692
|
-
<span class="cline-any cline-no"> </span>
|
|
693
|
-
<span class="cline-any cline-no"> </span>
|
|
694
|
-
<span class="cline-any cline-no"> </span>
|
|
695
|
-
<span class="cline-any cline-no"> </span>
|
|
696
|
-
<span class="cline-any cline-no"> </span>
|
|
697
|
-
<span class="cline-any cline-no"> </span>
|
|
698
|
-
<span class="cline-any cline-no"> </span>
|
|
699
|
-
<span class="cline-any cline-no"> </span>
|
|
700
|
-
<span class="cline-any cline-no"> </span>
|
|
701
|
-
<span class="cline-any cline-no"> </span>
|
|
702
|
-
<span class="cline-any cline-no"> </span>
|
|
703
|
-
<span class="cline-any cline-no"> </span>
|
|
704
|
-
<span class="cline-any cline-no"> </span>
|
|
705
|
-
<span class="cline-any cline-no"> </span>
|
|
706
|
-
<span class="cline-any cline-no"> </span>
|
|
707
|
-
<span class="cline-any cline-no"> </span>
|
|
708
|
-
<span class="cline-any cline-no"> </span>
|
|
709
|
-
<span class="cline-any cline-no"> </span>
|
|
710
|
-
<span class="cline-any cline-no"> </span>
|
|
711
|
-
<span class="cline-any cline-no"> </span>
|
|
712
|
-
<span class="cline-any cline-no"> </span>
|
|
713
|
-
<span class="cline-any cline-no"> </span>
|
|
714
|
-
<span class="cline-any cline-no"> </span>
|
|
715
|
-
<span class="cline-any cline-no"> </span>
|
|
716
|
-
<span class="cline-any cline-no"> </span>
|
|
717
|
-
<span class="cline-any cline-no"> </span>
|
|
718
|
-
<span class="cline-any cline-no"> </span>
|
|
719
|
-
<span class="cline-any cline-no"> </span>
|
|
720
|
-
<span class="cline-any cline-no"> </span>
|
|
721
|
-
<span class="cline-any cline-no"> </span>
|
|
722
|
-
<span class="cline-any cline-no"> </span>
|
|
723
|
-
<span class="cline-any cline-yes">1x</span>
|
|
724
|
-
<span class="cline-any cline-yes">1x</span>
|
|
725
|
-
<span class="cline-any cline-yes">1x</span>
|
|
726
|
-
<span class="cline-any cline-no"> </span>
|
|
727
|
-
<span class="cline-any cline-no"> </span>
|
|
728
|
-
<span class="cline-any cline-no"> </span>
|
|
729
|
-
<span class="cline-any cline-no"> </span>
|
|
730
|
-
<span class="cline-any cline-no"> </span>
|
|
731
|
-
<span class="cline-any cline-no"> </span>
|
|
732
|
-
<span class="cline-any cline-no"> </span>
|
|
733
|
-
<span class="cline-any cline-no"> </span>
|
|
734
|
-
<span class="cline-any cline-no"> </span>
|
|
735
|
-
<span class="cline-any cline-no"> </span>
|
|
736
|
-
<span class="cline-any cline-no"> </span>
|
|
737
|
-
<span class="cline-any cline-no"> </span>
|
|
738
|
-
<span class="cline-any cline-no"> </span>
|
|
739
|
-
<span class="cline-any cline-no"> </span>
|
|
740
|
-
<span class="cline-any cline-no"> </span>
|
|
741
|
-
<span class="cline-any cline-yes">1x</span>
|
|
742
|
-
<span class="cline-any cline-yes">1x</span>
|
|
743
|
-
<span class="cline-any cline-yes">1x</span>
|
|
744
|
-
<span class="cline-any cline-no"> </span>
|
|
745
|
-
<span class="cline-any cline-no"> </span>
|
|
746
|
-
<span class="cline-any cline-no"> </span>
|
|
747
|
-
<span class="cline-any cline-no"> </span>
|
|
748
|
-
<span class="cline-any cline-no"> </span>
|
|
749
|
-
<span class="cline-any cline-no"> </span>
|
|
750
|
-
<span class="cline-any cline-no"> </span>
|
|
751
|
-
<span class="cline-any cline-no"> </span>
|
|
752
|
-
<span class="cline-any cline-no"> </span>
|
|
753
|
-
<span class="cline-any cline-no"> </span>
|
|
754
|
-
<span class="cline-any cline-no"> </span>
|
|
755
|
-
<span class="cline-any cline-no"> </span>
|
|
756
|
-
<span class="cline-any cline-no"> </span>
|
|
757
|
-
<span class="cline-any cline-no"> </span>
|
|
758
|
-
<span class="cline-any cline-no"> </span>
|
|
759
|
-
<span class="cline-any cline-no"> </span>
|
|
760
|
-
<span class="cline-any cline-no"> </span>
|
|
761
|
-
<span class="cline-any cline-no"> </span>
|
|
762
|
-
<span class="cline-any cline-no"> </span>
|
|
763
|
-
<span class="cline-any cline-no"> </span>
|
|
764
|
-
<span class="cline-any cline-no"> </span>
|
|
765
|
-
<span class="cline-any cline-no"> </span>
|
|
766
|
-
<span class="cline-any cline-no"> </span>
|
|
767
|
-
<span class="cline-any cline-no"> </span>
|
|
768
|
-
<span class="cline-any cline-no"> </span>
|
|
769
|
-
<span class="cline-any cline-no"> </span>
|
|
770
|
-
<span class="cline-any cline-no"> </span>
|
|
771
|
-
<span class="cline-any cline-no"> </span>
|
|
772
|
-
<span class="cline-any cline-no"> </span>
|
|
773
|
-
<span class="cline-any cline-no"> </span>
|
|
774
|
-
<span class="cline-any cline-no"> </span>
|
|
775
|
-
<span class="cline-any cline-no"> </span>
|
|
776
|
-
<span class="cline-any cline-no"> </span>
|
|
777
|
-
<span class="cline-any cline-no"> </span>
|
|
778
|
-
<span class="cline-any cline-no"> </span>
|
|
779
|
-
<span class="cline-any cline-no"> </span>
|
|
780
|
-
<span class="cline-any cline-no"> </span>
|
|
781
|
-
<span class="cline-any cline-no"> </span>
|
|
782
|
-
<span class="cline-any cline-no"> </span>
|
|
783
|
-
<span class="cline-any cline-yes">1x</span>
|
|
784
|
-
<span class="cline-any cline-yes">1x</span>
|
|
785
|
-
<span class="cline-any cline-no"> </span>
|
|
786
|
-
<span class="cline-any cline-no"> </span>
|
|
787
|
-
<span class="cline-any cline-no"> </span>
|
|
788
|
-
<span class="cline-any cline-no"> </span>
|
|
789
|
-
<span class="cline-any cline-no"> </span>
|
|
790
|
-
<span class="cline-any cline-no"> </span>
|
|
791
|
-
<span class="cline-any cline-no"> </span>
|
|
792
|
-
<span class="cline-any cline-no"> </span>
|
|
793
|
-
<span class="cline-any cline-no"> </span>
|
|
794
|
-
<span class="cline-any cline-no"> </span>
|
|
795
|
-
<span class="cline-any cline-no"> </span>
|
|
796
|
-
<span class="cline-any cline-no"> </span>
|
|
797
|
-
<span class="cline-any cline-no"> </span>
|
|
798
|
-
<span class="cline-any cline-no"> </span>
|
|
799
|
-
<span class="cline-any cline-no"> </span>
|
|
800
|
-
<span class="cline-any cline-no"> </span>
|
|
801
|
-
<span class="cline-any cline-no"> </span>
|
|
802
|
-
<span class="cline-any cline-no"> </span>
|
|
803
|
-
<span class="cline-any cline-no"> </span>
|
|
804
|
-
<span class="cline-any cline-no"> </span>
|
|
805
|
-
<span class="cline-any cline-no"> </span>
|
|
806
|
-
<span class="cline-any cline-no"> </span>
|
|
807
|
-
<span class="cline-any cline-no"> </span>
|
|
808
|
-
<span class="cline-any cline-no"> </span>
|
|
809
|
-
<span class="cline-any cline-no"> </span>
|
|
810
|
-
<span class="cline-any cline-no"> </span>
|
|
811
|
-
<span class="cline-any cline-yes">1x</span>
|
|
812
|
-
<span class="cline-any cline-yes">1x</span>
|
|
813
|
-
<span class="cline-any cline-no"> </span>
|
|
814
|
-
<span class="cline-any cline-no"> </span>
|
|
815
|
-
<span class="cline-any cline-no"> </span>
|
|
816
|
-
<span class="cline-any cline-no"> </span>
|
|
817
|
-
<span class="cline-any cline-no"> </span>
|
|
818
|
-
<span class="cline-any cline-no"> </span>
|
|
819
|
-
<span class="cline-any cline-no"> </span>
|
|
820
|
-
<span class="cline-any cline-no"> </span>
|
|
821
|
-
<span class="cline-any cline-no"> </span>
|
|
822
|
-
<span class="cline-any cline-no"> </span>
|
|
823
|
-
<span class="cline-any cline-no"> </span>
|
|
824
|
-
<span class="cline-any cline-no"> </span>
|
|
825
|
-
<span class="cline-any cline-no"> </span>
|
|
826
|
-
<span class="cline-any cline-no"> </span>
|
|
827
|
-
<span class="cline-any cline-no"> </span>
|
|
828
|
-
<span class="cline-any cline-no"> </span>
|
|
829
|
-
<span class="cline-any cline-no"> </span>
|
|
830
|
-
<span class="cline-any cline-no"> </span>
|
|
831
|
-
<span class="cline-any cline-no"> </span>
|
|
832
|
-
<span class="cline-any cline-no"> </span>
|
|
833
|
-
<span class="cline-any cline-no"> </span>
|
|
834
|
-
<span class="cline-any cline-no"> </span>
|
|
835
|
-
<span class="cline-any cline-no"> </span>
|
|
836
|
-
<span class="cline-any cline-no"> </span>
|
|
837
|
-
<span class="cline-any cline-no"> </span>
|
|
838
|
-
<span class="cline-any cline-neutral"> </span></td><td class="text"><pre class="prettyprint lang-js">import _ from 'lodash'
|
|
839
|
-
import makeDebug from 'debug'
|
|
840
|
-
import common from 'feathers-hooks-common'
|
|
841
|
-
import errors from '@feathersjs/errors'
|
|
842
|
-
import { populateObject, unpopulateObject, populateObjects, unpopulateObjects } from './hooks.query.js'
|
|
843
|
-
import { objectifyIDs } from '../db.js'
|
|
844
|
-
import {
|
|
845
|
-
hasServiceAbilities, hasResourceAbilities, getQueryForAbilities,
|
|
846
|
-
Roles, RoleNames, countSubjectsForResource
|
|
847
|
-
} from '../../common/permissions.js'
|
|
848
|
-
import { isTagEqual } from '../utils.js'
|
|
849
|
-
|
|
850
|
-
const { getItems, replaceItems } = common
|
|
851
|
-
const { Forbidden } = errors
|
|
852
|
-
const debug = makeDebug('kdk:core:authorisations:hooks')
|
|
853
|
-
|
|
854
|
-
export function createJWT (options = {}) {
|
|
855
|
-
return async function (hook) {
|
|
856
|
-
const { jwtOptions: defaults } = hook.app.get('authentication') <span class="branch-0 cbranch-no" title="branch not covered" >|| hook.app.get('auth')</span>
|
|
857
|
-
const user = _.get(hook, 'params.user')
|
|
858
|
-
let items = getItems(hook)
|
|
859
|
-
const isArray = Array.isArray(items)
|
|
860
|
-
items = (isArray <span class="branch-0 cbranch-no" title="branch not covered" >? items </span>: [items])
|
|
861
|
-
// Generate access tokens for all items
|
|
862
|
-
const accessTokens = await Promise.all(items.map(item => hook.app.getService('authentication').createAccessToken(
|
|
863
|
-
// Provided function can be used to pick or omit properties in JWT payload
|
|
864
|
-
(typeof options.payload === 'function' ? options.payload(user) : {}),
|
|
865
|
-
// Provided function can be used for custom options cdepending on the user,
|
|
866
|
-
// then we merge with default auth options for global properties like aud, iss, etc.
|
|
867
|
-
_.merge({}, defaults, (typeof options.jwt === 'function' ? options.jwt(user) : options)))
|
|
868
|
-
))
|
|
869
|
-
// Store access token on items
|
|
870
|
-
items.forEach((item, index) => _.set(item, options.name || 'accessToken', accessTokens[index]))
|
|
871
|
-
replaceItems(hook, isArray <span class="branch-0 cbranch-no" title="branch not covered" >? items </span>: items[0])
|
|
872
|
-
return hook
|
|
873
|
-
}
|
|
874
|
-
}
|
|
875
|
-
|
|
876
|
-
export <span class="fstat-no" title="function not covered" >function populateSubjects (hook) {</span>
|
|
877
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'before') {</span>
|
|
878
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'populateSubjects\' hook should only be used as a \'before\' hook.')</span>
|
|
879
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
880
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
881
|
-
<span class="cstat-no" title="statement not covered" > return populateObjects({ serviceField: 'subjectsService', idField: 'subjects', throwOnNotFound: true })(hook)</span>
|
|
882
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
883
|
-
|
|
884
|
-
export <span class="fstat-no" title="function not covered" >function unpopulateSubjects (hook) {</span>
|
|
885
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'after') {</span>
|
|
886
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'unpopulateSubjects\' hook should only be used as a \'after\' hook.')</span>
|
|
887
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
888
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
889
|
-
<span class="cstat-no" title="statement not covered" > return unpopulateObjects({ serviceField: 'subjectsService', idField: 'subjects' })(hook)</span>
|
|
890
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
891
|
-
|
|
892
|
-
export <span class="fstat-no" title="function not covered" >function populateResource (hook) {</span>
|
|
893
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'before') {</span>
|
|
894
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'populateResource\' hook should only be used as a \'before\' hook.')</span>
|
|
895
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
896
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
897
|
-
<span class="cstat-no" title="statement not covered" > return populateObject({ serviceField: 'resourcesService', idField: 'resource', throwOnNotFound: true })(hook)</span>
|
|
898
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
899
|
-
|
|
900
|
-
export <span class="fstat-no" title="function not covered" >function unpopulateResource (hook) {</span>
|
|
901
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'after') {</span>
|
|
902
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'unpopulateResource\' hook should only be used as a \'after\' hook.')</span>
|
|
903
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
904
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
905
|
-
<span class="cstat-no" title="statement not covered" > return unpopulateObject({ serviceField: 'resourcesService', idField: 'resource' })(hook)</span>
|
|
906
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
907
|
-
|
|
908
|
-
export <span class="fstat-no" title="function not covered" >function preventEscalation (hook) {</span>
|
|
909
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'before') {</span>
|
|
910
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'preventEscalation\' hook should only be used as a \'before\' hook.')</span>
|
|
911
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
912
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
913
|
-
<span class="cstat-no" title="statement not covered" > const params = hook.params</span>
|
|
914
|
-
<span class="cstat-no" title="statement not covered" > // If called internally we skip authorisation</span>
|
|
915
|
-
<span class="cstat-no" title="statement not covered" > let checkEscalation = _.has(params, 'provider')</span>
|
|
916
|
-
<span class="cstat-no" title="statement not covered" > debug('Escalation check ' + (checkEscalation ? 'enabled' : 'disabled') + ' for provider')</span>
|
|
917
|
-
<span class="cstat-no" title="statement not covered" > // If explicitely asked to perform/skip, override defaults</span>
|
|
918
|
-
<span class="cstat-no" title="statement not covered" > if (_.has(params, 'checkEscalation')) {</span>
|
|
919
|
-
<span class="cstat-no" title="statement not covered" > checkEscalation = params.checkEscalation</span>
|
|
920
|
-
<span class="cstat-no" title="statement not covered" > debug('Escalation check ' + (checkEscalation ? 'forced' : 'unforced'))</span>
|
|
921
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
922
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
923
|
-
<span class="cstat-no" title="statement not covered" > if (checkEscalation) {</span>
|
|
924
|
-
<span class="cstat-no" title="statement not covered" > const user = params.user</span>
|
|
925
|
-
<span class="cstat-no" title="statement not covered" > // Make hook usable on remove as well</span>
|
|
926
|
-
<span class="cstat-no" title="statement not covered" > const data = hook.data || {}</span>
|
|
927
|
-
<span class="cstat-no" title="statement not covered" > // Make hook usable with query params as well</span>
|
|
928
|
-
<span class="cstat-no" title="statement not covered" > const query = params.query || {}</span>
|
|
929
|
-
<span class="cstat-no" title="statement not covered" > const scopeName = data.scope || query.scope // Get scope name first</span>
|
|
930
|
-
<span class="cstat-no" title="statement not covered" > // Retrieve the right scope on the user</span>
|
|
931
|
-
<span class="cstat-no" title="statement not covered" > const scope = _.get(user, scopeName, [])</span>
|
|
932
|
-
<span class="cstat-no" title="statement not covered" > // Then the target resource</span>
|
|
933
|
-
<span class="cstat-no" title="statement not covered" > const resource = _.find(scope, resource => resource._id && (resource._id.toString() === params.resource._id.toString()))</span>
|
|
934
|
-
<span class="cstat-no" title="statement not covered" > // Then user permission level</span>
|
|
935
|
-
<span class="cstat-no" title="statement not covered" > const permissions = (resource ? resource.permissions : undefined)</span>
|
|
936
|
-
<span class="cstat-no" title="statement not covered" > const role = (permissions ? Roles[permissions] : undefined)</span>
|
|
937
|
-
<span class="cstat-no" title="statement not covered" > if (_.isUndefined(role)) {</span>
|
|
938
|
-
<span class="cstat-no" title="statement not covered" > debug('Role for authorisation not found on user for scope ' + scopeName)</span>
|
|
939
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden('You are not allowed to change authorisation on resource')</span>
|
|
940
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
941
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
942
|
-
<span class="cstat-no" title="statement not covered" > // Check if privilege escalation might occur, if so clamp to user permission level</span>
|
|
943
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
944
|
-
<span class="cstat-no" title="statement not covered" > // Input subjects need to be checked:</span>
|
|
945
|
-
<span class="cstat-no" title="statement not covered" > // - on create you should not be able to change permissions on others having higher permissions than yourself</span>
|
|
946
|
-
<span class="cstat-no" title="statement not covered" > // (e.g. cannot change a owner into a manager when you are a manager)</span>
|
|
947
|
-
<span class="cstat-no" title="statement not covered" > // - on remove you should not be able to remove permissions on others having higher permissions than yourself</span>
|
|
948
|
-
<span class="cstat-no" title="statement not covered" > // (e.g. cannot remove a owner when you are a manager)</span>
|
|
949
|
-
<span class="cstat-no" title="statement not covered" > const subjects = params.subjects.filter(subject => {</span>
|
|
950
|
-
<span class="cstat-no" title="statement not covered" > const subjectScope = _.get(subject, scopeName, [])</span>
|
|
951
|
-
<span class="cstat-no" title="statement not covered" > const subjectResource = _.find(subjectScope, resource => resource._id && (resource._id.toString() === params.resource._id.toString()))</span>
|
|
952
|
-
<span class="cstat-no" title="statement not covered" > const subjectPermissions = (subjectResource ? subjectResource.permissions : undefined)</span>
|
|
953
|
-
<span class="cstat-no" title="statement not covered" > const subjectRole = (subjectPermissions ? Roles[subjectPermissions] : undefined)</span>
|
|
954
|
-
<span class="cstat-no" title="statement not covered" > const hasRole = !_.isUndefined(subjectRole)</span>
|
|
955
|
-
<span class="cstat-no" title="statement not covered" > if (hook.method === 'create') {</span>
|
|
956
|
-
<span class="cstat-no" title="statement not covered" > return (!hasRole || (subjectRole <= role)) // The first time no authorisation can be found</span>
|
|
957
|
-
<span class="cstat-no" title="statement not covered" > } else {</span>
|
|
958
|
-
<span class="cstat-no" title="statement not covered" > return (hasRole && (subjectRole <= role)) // Authorisation must be found on remove</span>
|
|
959
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
960
|
-
<span class="cstat-no" title="statement not covered" > })</span>
|
|
961
|
-
<span class="cstat-no" title="statement not covered" > if (subjects.length < params.subjects.length) {</span>
|
|
962
|
-
<span class="cstat-no" title="statement not covered" > debug(`${(params.subjects.length - subjects.length)} subjects with higher permissions level found for scope ${scopeName}`)</span>
|
|
963
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden('You are not allowed to change authorisation on subject(s)')</span>
|
|
964
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
965
|
-
<span class="cstat-no" title="statement not covered" > // Input permissions needs to be checked since:</span>
|
|
966
|
-
<span class="cstat-no" title="statement not covered" > // - you should not be able to give higher permissions than your own ones to others</span>
|
|
967
|
-
<span class="cstat-no" title="statement not covered" > // (e.g. cannot create a owner when you are a manager)</span>
|
|
968
|
-
<span class="cstat-no" title="statement not covered" > let authorisationRole</span>
|
|
969
|
-
<span class="cstat-no" title="statement not covered" > if (data.permissions) {</span>
|
|
970
|
-
<span class="cstat-no" title="statement not covered" > authorisationRole = Roles[data.permissions]</span>
|
|
971
|
-
<span class="cstat-no" title="statement not covered" > } else if (query.permissions) {</span>
|
|
972
|
-
<span class="cstat-no" title="statement not covered" > authorisationRole = Roles[query.permissions]</span>
|
|
973
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
974
|
-
<span class="cstat-no" title="statement not covered" > if (!_.isUndefined(authorisationRole)) {</span>
|
|
975
|
-
<span class="cstat-no" title="statement not covered" > if (authorisationRole > role) {</span>
|
|
976
|
-
<span class="cstat-no" title="statement not covered" > debug('Cannot escalate with higher permissions level for scope ' + scopeName)</span>
|
|
977
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden('You are not allowed to change authorisation on resource')</span>
|
|
978
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
979
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
980
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
981
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
982
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
983
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
984
|
-
|
|
985
|
-
export <span class="fstat-no" title="function not covered" >async function authorise (hook) {</span>
|
|
986
|
-
<span class="cstat-no" title="statement not covered" > if (hook.type !== 'before') {</span>
|
|
987
|
-
<span class="cstat-no" title="statement not covered" > throw new Error('The \'authorise\' hook should only be used as a \'before\' hook.')</span>
|
|
988
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
989
|
-
<span class="cstat-no" title="statement not covered" > const operation = hook.method</span>
|
|
990
|
-
<span class="cstat-no" title="statement not covered" > const resourceType = hook.service.name</span>
|
|
991
|
-
<span class="cstat-no" title="statement not covered" > debug('Provider is', hook.params.provider)</span>
|
|
992
|
-
<span class="cstat-no" title="statement not covered" > if (hook.params.user) debug('User is', hook.params.user)</span>
|
|
993
|
-
<span class="cstat-no" title="statement not covered" > debug('Operation is', operation)</span>
|
|
994
|
-
<span class="cstat-no" title="statement not covered" > if (resourceType) debug('Resource type is', resourceType)</span>
|
|
995
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
996
|
-
<span class="cstat-no" title="statement not covered" > // If called internally we skip authorisation</span>
|
|
997
|
-
<span class="cstat-no" title="statement not covered" > let checkAuthorisation = _.has(hook.params, 'provider')</span>
|
|
998
|
-
<span class="cstat-no" title="statement not covered" > debug('Access check ' + (checkAuthorisation ? 'enabled' : 'disabled') + ' for provider')</span>
|
|
999
|
-
<span class="cstat-no" title="statement not covered" > // If already checked we skip authorisation</span>
|
|
1000
|
-
<span class="cstat-no" title="statement not covered" > if (hook.params.authorised) {</span>
|
|
1001
|
-
<span class="cstat-no" title="statement not covered" > debug('Access already granted')</span>
|
|
1002
|
-
<span class="cstat-no" title="statement not covered" > checkAuthorisation = false</span>
|
|
1003
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1004
|
-
<span class="cstat-no" title="statement not covered" > // We also skip authorisation for built-in Feathers services like authentication</span>
|
|
1005
|
-
<span class="cstat-no" title="statement not covered" > if (typeof hook.service.getPath !== 'function') {</span>
|
|
1006
|
-
<span class="cstat-no" title="statement not covered" > debug('Access disabled on built-in services')</span>
|
|
1007
|
-
<span class="cstat-no" title="statement not covered" > checkAuthorisation = false</span>
|
|
1008
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1009
|
-
<span class="cstat-no" title="statement not covered" > // And if the authentication strategy is API key</span>
|
|
1010
|
-
<span class="cstat-no" title="statement not covered" > if (_.get(hook, 'params.connection.authentication.strategy') === 'api') {</span>
|
|
1011
|
-
<span class="cstat-no" title="statement not covered" > debug('Access disabled on API keys')</span>
|
|
1012
|
-
<span class="cstat-no" title="statement not covered" > checkAuthorisation = false</span>
|
|
1013
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1014
|
-
<span class="cstat-no" title="statement not covered" > // If explicitely asked to perform/skip, override defaults</span>
|
|
1015
|
-
<span class="cstat-no" title="statement not covered" > if (_.has(hook.params, 'checkAuthorisation')) {</span>
|
|
1016
|
-
<span class="cstat-no" title="statement not covered" > checkAuthorisation = _.get(hook.params, 'checkAuthorisation')</span>
|
|
1017
|
-
<span class="cstat-no" title="statement not covered" > // Bypass authorisation for next hooks otherwise we will loop infinitely</span>
|
|
1018
|
-
<span class="cstat-no" title="statement not covered" > delete hook.params.checkAuthorisation</span>
|
|
1019
|
-
<span class="cstat-no" title="statement not covered" > debug('Access check ' + (checkAuthorisation ? 'forced' : 'unforced'))</span>
|
|
1020
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1021
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
1022
|
-
<span class="cstat-no" title="statement not covered" > const context = hook.service.context</span>
|
|
1023
|
-
<span class="cstat-no" title="statement not covered" > if (checkAuthorisation) {</span>
|
|
1024
|
-
<span class="cstat-no" title="statement not covered" > // Build ability for user</span>
|
|
1025
|
-
<span class="cstat-no" title="statement not covered" > const authorisationService = hook.app.getService('authorisations')</span>
|
|
1026
|
-
<span class="cstat-no" title="statement not covered" > // If no user we allow for a stateless token with permissions inside</span>
|
|
1027
|
-
<span class="cstat-no" title="statement not covered" > let subject = hook.params.user</span>
|
|
1028
|
-
<span class="cstat-no" title="statement not covered" > if (!subject) {</span>
|
|
1029
|
-
<span class="cstat-no" title="statement not covered" > const payload = _.get(hook.params, 'authentication.payload')</span>
|
|
1030
|
-
<span class="cstat-no" title="statement not covered" > // Token targeting API gateway (sub = keyId) or app used through iframe (appId = keyId)</span>
|
|
1031
|
-
<span class="cstat-no" title="statement not covered" > if (payload && (payload.sub || payload.appId)) {</span>
|
|
1032
|
-
<span class="cstat-no" title="statement not covered" > subject = Object.assign({ _id: (payload.sub || payload.appId) }, payload)</span>
|
|
1033
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1034
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1035
|
-
<span class="cstat-no" title="statement not covered" > const abilities = await authorisationService.getAbilities(subject)</span>
|
|
1036
|
-
<span class="cstat-no" title="statement not covered" > hook.params.abilities = abilities</span>
|
|
1037
|
-
<span class="cstat-no" title="statement not covered" > if (hook.params.user) debug('User abilities are', abilities.rules)</span>
|
|
1038
|
-
<span class="cstat-no" title="statement not covered" > else debug('Stateless abilities are', abilities.rules)</span>
|
|
1039
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
1040
|
-
<span class="cstat-no" title="statement not covered" > // Check for access to service fisrt</span>
|
|
1041
|
-
<span class="cstat-no" title="statement not covered" > if (!hasServiceAbilities(abilities, hook.service)) {</span>
|
|
1042
|
-
<span class="cstat-no" title="statement not covered" > debug('Service access not granted')</span>
|
|
1043
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden(`You are not allowed to access service ${hook.service.getPath()}`)</span>
|
|
1044
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1045
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
1046
|
-
<span class="cstat-no" title="statement not covered" > if (!hook.id) {</span>
|
|
1047
|
-
<span class="cstat-no" title="statement not covered" > // In this specific case there is no query to be run,</span>
|
|
1048
|
-
<span class="cstat-no" title="statement not covered" > // simply check against the object we'd like to create</span>
|
|
1049
|
-
<span class="cstat-no" title="statement not covered" > // Support custom methods as create operation as they have similar signature</span>
|
|
1050
|
-
<span class="cstat-no" title="statement not covered" > const DEFAULT_METHODS = ['find', 'get', 'create', 'update', 'patch', 'remove']</span>
|
|
1051
|
-
<span class="cstat-no" title="statement not covered" > if ((operation === 'create') || !DEFAULT_METHODS.includes(operation)) {</span>
|
|
1052
|
-
<span class="cstat-no" title="statement not covered" > const resource = hook.data</span>
|
|
1053
|
-
<span class="cstat-no" title="statement not covered" > debug('Target resource is ', resource)</span>
|
|
1054
|
-
<span class="cstat-no" title="statement not covered" > if (!hasResourceAbilities(abilities, operation, resourceType, context, resource)) {</span>
|
|
1055
|
-
<span class="cstat-no" title="statement not covered" > debug('Resource access not granted')</span>
|
|
1056
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden(`You are not allowed to perform ${operation} operation on ${resourceType}`)</span>
|
|
1057
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1058
|
-
<span class="cstat-no" title="statement not covered" > } else {</span>
|
|
1059
|
-
<span class="cstat-no" title="statement not covered" > // When we find/update/patch/remove multiple items this ensures that</span>
|
|
1060
|
-
<span class="cstat-no" title="statement not covered" > // only the ones authorised by constraints on the resources will be fetched</span>
|
|
1061
|
-
<span class="cstat-no" title="statement not covered" > // This avoid fetching all first then check it one by one</span>
|
|
1062
|
-
<span class="cstat-no" title="statement not covered" > const dbQuery = objectifyIDs(getQueryForAbilities(abilities, operation, resourceType))</span>
|
|
1063
|
-
<span class="cstat-no" title="statement not covered" > if (dbQuery) {</span>
|
|
1064
|
-
<span class="cstat-no" title="statement not covered" > hook.params.query = _.transform(hook.params.query, (result, value, key) => {</span>
|
|
1065
|
-
<span class="cstat-no" title="statement not covered" > if (key === '$or') result.$and = [{ $or: value }]</span>
|
|
1066
|
-
<span class="cstat-no" title="statement not covered" > else result[key] = value</span>
|
|
1067
|
-
<span class="cstat-no" title="statement not covered" > }, {})</span>
|
|
1068
|
-
<span class="cstat-no" title="statement not covered" > _.merge(hook.params.query, dbQuery)</span>
|
|
1069
|
-
<span class="cstat-no" title="statement not covered" > } else {</span>
|
|
1070
|
-
<span class="cstat-no" title="statement not covered" > if (operation === 'find') { // You don't have right to read any items but you have access to the service so the result is empty</span>
|
|
1071
|
-
<span class="cstat-no" title="statement not covered" > hook.result = (!_.get(hook, 'params.paginate', true) ? [] : { total: 0, skip: 0, data: [] })</span>
|
|
1072
|
-
<span class="cstat-no" title="statement not covered" > } else { // You don't have the right to update/patch/remove any items so any tentative should throw</span>
|
|
1073
|
-
<span class="cstat-no" title="statement not covered" > debug('Resource access not granted')</span>
|
|
1074
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden(`You are not allowed to perform ${operation} operation on ${resourceType}`)</span>
|
|
1075
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1076
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1077
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1078
|
-
<span class="cstat-no" title="statement not covered" > debug('Resource access granted')</span>
|
|
1079
|
-
<span class="cstat-no" title="statement not covered" > // Some specific services might not expose a get function, in this case we cannot check for authorisation</span>
|
|
1080
|
-
<span class="cstat-no" title="statement not covered" > // this has to be implemented by the service itself</span>
|
|
1081
|
-
<span class="cstat-no" title="statement not covered" > } else if (typeof hook.service.get === 'function') {</span>
|
|
1082
|
-
<span class="cstat-no" title="statement not covered" > // In this case (single get/update/patch/remove) we need to fetch the item first</span>
|
|
1083
|
-
<span class="cstat-no" title="statement not covered" > // Take care we might have additional query parameters to be "catched" by before hooks,</span>
|
|
1084
|
-
<span class="cstat-no" title="statement not covered" > // however at this stage these query parameters might cause get to fail</span>
|
|
1085
|
-
<span class="cstat-no" title="statement not covered" > const params = Object.assign({ checkAuthorisation: false }, hook.params)</span>
|
|
1086
|
-
<span class="cstat-no" title="statement not covered" > _.unset(params, 'query')</span>
|
|
1087
|
-
<span class="cstat-no" title="statement not covered" > const resource = await hook.service.get(hook.id, params)</span>
|
|
1088
|
-
<span class="cstat-no" title="statement not covered" > debug('Target resource is', resource)</span>
|
|
1089
|
-
<span class="cstat-no" title="statement not covered" > // Then check against the object we'd like to manage</span>
|
|
1090
|
-
<span class="cstat-no" title="statement not covered" > if (!hasResourceAbilities(abilities, operation, resourceType, context, resource)) {</span>
|
|
1091
|
-
<span class="cstat-no" title="statement not covered" > debug('Resource access not granted')</span>
|
|
1092
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden(`You are not allowed to perform ${operation} operation on ${resourceType}`)</span>
|
|
1093
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1094
|
-
<span class="cstat-no" title="statement not covered" > // Avoid fetching again the object in this case</span>
|
|
1095
|
-
<span class="cstat-no" title="statement not covered" > if (operation === 'get') {</span>
|
|
1096
|
-
<span class="cstat-no" title="statement not covered" > hook.result = resource</span>
|
|
1097
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1098
|
-
<span class="cstat-no" title="statement not covered" > hook.params.authorised = true</span>
|
|
1099
|
-
<span class="cstat-no" title="statement not covered" > debug('Resource access granted')</span>
|
|
1100
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1101
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1102
|
-
<span class="cstat-no" title="statement not covered" > } else {</span>
|
|
1103
|
-
<span class="cstat-no" title="statement not covered" > debug('Authorisation check skipped, access granted')</span>
|
|
1104
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1105
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
1106
|
-
<span class="cstat-no" title="statement not covered" > hook.params.authorised = true</span>
|
|
1107
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1108
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
1109
|
-
|
|
1110
|
-
export function updateAbilities (options = {}) {
|
|
1111
|
-
return async function (hook) {
|
|
1112
|
-
<span class="cstat-no" title="statement not covered" > const app = hook.app</span>
|
|
1113
|
-
<span class="cstat-no" title="statement not covered" > const params = hook.params</span>
|
|
1114
|
-
<span class="cstat-no" title="statement not covered" > const authorisationService = app.getService('authorisations')</span>
|
|
1115
|
-
<span class="cstat-no" title="statement not covered" > let subject = (options.subjectAsItem ? getItems(hook) : params.user)</span>
|
|
1116
|
-
<span class="cstat-no" title="statement not covered" > // Specific case of authentication result</span>
|
|
1117
|
-
<span class="cstat-no" title="statement not covered" > if (subject && subject.user) subject = subject.user</span>
|
|
1118
|
-
<span class="cstat-no" title="statement not covered" > // We might not have all information required eg on patch to compute new abilities,</span>
|
|
1119
|
-
<span class="cstat-no" title="statement not covered" > // in this case we have to fetch the whole subject</span>
|
|
1120
|
-
<span class="cstat-no" title="statement not covered" > if (options.fetchSubject) {</span>
|
|
1121
|
-
<span class="cstat-no" title="statement not covered" > subject = await app.getService('users').get(subject._id.toString())</span>
|
|
1122
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1123
|
-
<span class="cstat-no" title="statement not covered" > const abilities = await authorisationService.updateAbilities(subject)</span>
|
|
1124
|
-
<span class="cstat-no" title="statement not covered" > debug('Abilities updated on subject', subject, abilities.rules)</span>
|
|
1125
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1126
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1127
|
-
}
|
|
1128
|
-
|
|
1129
|
-
export <span class="fstat-no" title="function not covered" >function preventRemovingLastOwner (resourceScope) {</span>
|
|
1130
|
-
<span class="cstat-no" title="statement not covered" > return async function (hook) {</span>
|
|
1131
|
-
<span class="cstat-no" title="statement not covered" > // By pass check ?</span>
|
|
1132
|
-
<span class="cstat-no" title="statement not covered" > if (hook.params.force) return hook</span>
|
|
1133
|
-
<span class="cstat-no" title="statement not covered" > const params = hook.params</span>
|
|
1134
|
-
<span class="cstat-no" title="statement not covered" > const data = hook.data || {}</span>
|
|
1135
|
-
<span class="cstat-no" title="statement not covered" > const query = params.query || {}</span>
|
|
1136
|
-
<span class="cstat-no" title="statement not covered" > const scope = data.scope || query.scope</span>
|
|
1137
|
-
<span class="cstat-no" title="statement not covered" > const grantedPermissions = data.permissions || query.permissions</span>
|
|
1138
|
-
<span class="cstat-no" title="statement not covered" > const grantedRole = (grantedPermissions ? Roles[grantedPermissions] : undefined)</span>
|
|
1139
|
-
<span class="cstat-no" title="statement not covered" > const resource = hook.params.resource</span>
|
|
1140
|
-
<span class="cstat-no" title="statement not covered" > const subjects = hook.params.subjects</span>
|
|
1141
|
-
<span class="cstat-no" title="statement not covered" > const subjectService = hook.params.subjectsService</span>
|
|
1142
|
-
<span class="cstat-no" title="statement not covered" > // On create check if we try to downgrade permissions otherwise let pass through</span>
|
|
1143
|
-
<span class="cstat-no" title="statement not covered" > if (!_.isUndefined(grantedRole) && (grantedRole === Roles.owner)) return hook</span>
|
|
1144
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
1145
|
-
<span class="cstat-no" title="statement not covered" > if ((scope === resourceScope) && resource && resource._id) {</span>
|
|
1146
|
-
<span class="cstat-no" title="statement not covered" > // Count existing owners</span>
|
|
1147
|
-
<span class="cstat-no" title="statement not covered" > const owners = await countSubjectsForResource(subjectService, resourceScope, resource._id, Roles.owner)</span>
|
|
1148
|
-
<span class="cstat-no" title="statement not covered" > // Now count owners we change/remove permissions on</span>
|
|
1149
|
-
<span class="cstat-no" title="statement not covered" > const removedOwners = subjects.reduce((count, subject) => {</span>
|
|
1150
|
-
<span class="cstat-no" title="statement not covered" > const resources = _.get(subject, resourceScope, [])</span>
|
|
1151
|
-
<span class="cstat-no" title="statement not covered" > const ownedResource = _.find(resources, { _id: resource._id, permissions: RoleNames[Roles.owner] })</span>
|
|
1152
|
-
<span class="cstat-no" title="statement not covered" > return (ownedResource ? count + 1 : count)</span>
|
|
1153
|
-
<span class="cstat-no" title="statement not covered" > }, 0)</span>
|
|
1154
|
-
<span class="cstat-no" title="statement not covered" > // If none remains stop</span>
|
|
1155
|
-
<span class="cstat-no" title="statement not covered" > if (removedOwners >= owners.total) {</span>
|
|
1156
|
-
<span class="cstat-no" title="statement not covered" > debug('Cannot remove the last owner of resource ', resource)</span>
|
|
1157
|
-
<span class="cstat-no" title="statement not covered" > const resourceName = resource.name ? resource.name : resource._id.toString()</span>
|
|
1158
|
-
<span class="cstat-no" title="statement not covered" > throw new Forbidden('You are not allowed to remove the last owner of resource ' + resourceName, {</span>
|
|
1159
|
-
<span class="cstat-no" title="statement not covered" > translation: {</span>
|
|
1160
|
-
<span class="cstat-no" title="statement not covered" > key: 'CANNOT_REMOVE_LAST_OWNER',</span>
|
|
1161
|
-
<span class="cstat-no" title="statement not covered" > params: { resource: resourceName }</span>
|
|
1162
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1163
|
-
<span class="cstat-no" title="statement not covered" > })</span>
|
|
1164
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1165
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1166
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1167
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1168
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
1169
|
-
|
|
1170
|
-
export <span class="fstat-no" title="function not covered" >async function removeOrganisationGroupsAuthorisations (hook) {</span>
|
|
1171
|
-
<span class="cstat-no" title="statement not covered" > const app = hook.app</span>
|
|
1172
|
-
<span class="cstat-no" title="statement not covered" > const authorisationService = app.getService('authorisations')</span>
|
|
1173
|
-
<span class="cstat-no" title="statement not covered" > const org = hook.params.resource</span>
|
|
1174
|
-
<span class="cstat-no" title="statement not covered" > const user = hook.params.user</span>
|
|
1175
|
-
<span class="cstat-no" title="statement not covered" > // Unset membership for the all org groups</span>
|
|
1176
|
-
<span class="cstat-no" title="statement not covered" > const orgGroupService = app.getService('groups', org)</span>
|
|
1177
|
-
<span class="cstat-no" title="statement not covered" > const groups = await orgGroupService.find({ paginate: false })</span>
|
|
1178
|
-
<span class="cstat-no" title="statement not covered" > await Promise.all(groups.map(group => {</span>
|
|
1179
|
-
<span class="cstat-no" title="statement not covered" > // Unset membership on group for the all org users</span>
|
|
1180
|
-
<span class="cstat-no" title="statement not covered" > return authorisationService.remove(group._id.toString(), {</span>
|
|
1181
|
-
<span class="cstat-no" title="statement not covered" > query: {</span>
|
|
1182
|
-
<span class="cstat-no" title="statement not covered" > scope: 'groups'</span>
|
|
1183
|
-
<span class="cstat-no" title="statement not covered" > },</span>
|
|
1184
|
-
<span class="cstat-no" title="statement not covered" > user,</span>
|
|
1185
|
-
<span class="cstat-no" title="statement not covered" > force: hook.params.force,</span>
|
|
1186
|
-
<span class="cstat-no" title="statement not covered" > // Because we already have resource set it as objects to avoid populating</span>
|
|
1187
|
-
<span class="cstat-no" title="statement not covered" > // Moreover used as an after hook the resource might not already exist anymore</span>
|
|
1188
|
-
<span class="cstat-no" title="statement not covered" > subjects: hook.params.subjects,</span>
|
|
1189
|
-
<span class="cstat-no" title="statement not covered" > subjectsService: hook.params.subjectsService,</span>
|
|
1190
|
-
<span class="cstat-no" title="statement not covered" > resource: group,</span>
|
|
1191
|
-
<span class="cstat-no" title="statement not covered" > resourcesService: orgGroupService</span>
|
|
1192
|
-
<span class="cstat-no" title="statement not covered" > })</span>
|
|
1193
|
-
<span class="cstat-no" title="statement not covered" > }))</span>
|
|
1194
|
-
<span class="cstat-no" title="statement not covered" > debug('Authorisations unset on groups for organisation ' + org._id)</span>
|
|
1195
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1196
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
1197
|
-
|
|
1198
|
-
export <span class="fstat-no" title="function not covered" >async function removeOrganisationTagsAuthorisations (hook) {</span>
|
|
1199
|
-
<span class="cstat-no" title="statement not covered" > const app = hook.app</span>
|
|
1200
|
-
<span class="cstat-no" title="statement not covered" > const org = hook.params.resource</span>
|
|
1201
|
-
<span class="cstat-no" title="statement not covered" > const subjectService = hook.params.subjectsService</span>
|
|
1202
|
-
<span class="cstat-no" title="statement not covered" > const orgTagsService = app.getService('tags', org)</span>
|
|
1203
|
-
<span class="cstat-no" title="statement not covered" > const subjects = hook.params.subjects || []</span>
|
|
1204
|
-
<span class="cstat-no" title="statement not covered" > if (subjects.length === 0) return hook</span>
|
|
1205
|
-
<span class="cstat-no" title="statement not covered" > // Retrieve org tags</span>
|
|
1206
|
-
<span class="cstat-no" title="statement not covered" > const orgTags = await orgTagsService.find({ paginate: false })</span>
|
|
1207
|
-
<span class="cstat-no" title="statement not covered" > const promises = []</span>
|
|
1208
|
-
<span class="cstat-no" title="statement not covered" > subjects.forEach(subject => {</span>
|
|
1209
|
-
<span class="cstat-no" title="statement not covered" > const tags = subject.tags || []</span>
|
|
1210
|
-
<span class="cstat-no" title="statement not covered" > // Find tags from org</span>
|
|
1211
|
-
<span class="cstat-no" title="statement not covered" > const fromOrg = _.intersectionWith(tags, orgTags, isTagEqual)</span>
|
|
1212
|
-
<span class="cstat-no" title="statement not covered" > // Clear removed tags</span>
|
|
1213
|
-
<span class="cstat-no" title="statement not covered" > const notFromOrg = _.differenceWith(tags, orgTags, isTagEqual)</span>
|
|
1214
|
-
<span class="cstat-no" title="statement not covered" > // Update subject if required</span>
|
|
1215
|
-
<span class="cstat-no" title="statement not covered" > if (fromOrg.length > 0) {</span>
|
|
1216
|
-
<span class="cstat-no" title="statement not covered" > promises.push(subjectService.patch(subject._id.toString(), { tags: notFromOrg }))</span>
|
|
1217
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
1218
|
-
<span class="cstat-no" title="statement not covered" > })</span>
|
|
1219
|
-
<span class="cstat-no" title="statement not covered" > // Perform subject updates in parallel</span>
|
|
1220
|
-
<span class="cstat-no" title="statement not covered" > await Promise.all(promises)</span>
|
|
1221
|
-
<span class="cstat-no" title="statement not covered" > debug(`Tags unset on ${promises.length} subjects for organisation ` + org._id)</span>
|
|
1222
|
-
<span class="cstat-no" title="statement not covered" > return hook</span>
|
|
1223
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
1224
|
-
</pre></td></tr></table></pre>
|
|
1225
|
-
|
|
1226
|
-
<div class='push'></div><!-- for sticky footer -->
|
|
1227
|
-
</div><!-- /wrapper -->
|
|
1228
|
-
<div class='footer quiet pad2 space-top1 center small'>
|
|
1229
|
-
Code coverage generated by
|
|
1230
|
-
<a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
|
|
1231
|
-
at 2024-08-13T10:02:04.843Z
|
|
1232
|
-
</div>
|
|
1233
|
-
<script src="../../../prettify.js"></script>
|
|
1234
|
-
<script>
|
|
1235
|
-
window.onload = function () {
|
|
1236
|
-
prettyPrint();
|
|
1237
|
-
};
|
|
1238
|
-
</script>
|
|
1239
|
-
<script src="../../../sorter.js"></script>
|
|
1240
|
-
<script src="../../../block-navigation.js"></script>
|
|
1241
|
-
</body>
|
|
1242
|
-
</html>
|
|
1243
|
-
|