@lightdash/common 0.1947.0 → 0.1948.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/authorization/projectMemberAbility.d.ts.map +1 -1
- package/dist/cjs/authorization/projectMemberAbility.js +0 -4
- package/dist/cjs/authorization/projectMemberAbility.js.map +1 -1
- package/dist/cjs/authorization/roleToScopeMapping.d.ts.map +1 -1
- package/dist/cjs/authorization/roleToScopeMapping.js +11 -10
- package/dist/cjs/authorization/roleToScopeMapping.js.map +1 -1
- package/dist/cjs/authorization/roleToScopeParity.test.d.ts +2 -0
- package/dist/cjs/authorization/roleToScopeParity.test.d.ts.map +1 -0
- package/dist/cjs/authorization/roleToScopeParity.test.js +195 -0
- package/dist/cjs/authorization/roleToScopeParity.test.js.map +1 -0
- package/dist/cjs/authorization/scopeAbilityBuilder.d.ts.map +1 -1
- package/dist/cjs/authorization/scopeAbilityBuilder.js +10 -7
- package/dist/cjs/authorization/scopeAbilityBuilder.js.map +1 -1
- package/dist/cjs/authorization/scopeAbilityBuilder.test.js +312 -89
- package/dist/cjs/authorization/scopeAbilityBuilder.test.js.map +1 -1
- package/dist/cjs/authorization/scopes.d.ts.map +1 -1
- package/dist/cjs/authorization/scopes.js +102 -90
- package/dist/cjs/authorization/scopes.js.map +1 -1
- package/dist/cjs/types/scopes.d.ts +2 -2
- package/dist/cjs/types/scopes.d.ts.map +1 -1
- package/dist/esm/authorization/projectMemberAbility.d.ts.map +1 -1
- package/dist/esm/authorization/projectMemberAbility.js +0 -4
- package/dist/esm/authorization/projectMemberAbility.js.map +1 -1
- package/dist/esm/authorization/roleToScopeMapping.d.ts.map +1 -1
- package/dist/esm/authorization/roleToScopeMapping.js +11 -10
- package/dist/esm/authorization/roleToScopeMapping.js.map +1 -1
- package/dist/esm/authorization/roleToScopeParity.test.d.ts +2 -0
- package/dist/esm/authorization/roleToScopeParity.test.d.ts.map +1 -0
- package/dist/esm/authorization/roleToScopeParity.test.js +193 -0
- package/dist/esm/authorization/roleToScopeParity.test.js.map +1 -0
- package/dist/esm/authorization/scopeAbilityBuilder.d.ts.map +1 -1
- package/dist/esm/authorization/scopeAbilityBuilder.js +10 -7
- package/dist/esm/authorization/scopeAbilityBuilder.js.map +1 -1
- package/dist/esm/authorization/scopeAbilityBuilder.test.js +312 -89
- package/dist/esm/authorization/scopeAbilityBuilder.test.js.map +1 -1
- package/dist/esm/authorization/scopes.d.ts.map +1 -1
- package/dist/esm/authorization/scopes.js +102 -90
- package/dist/esm/authorization/scopes.js.map +1 -1
- package/dist/esm/types/scopes.d.ts +2 -2
- package/dist/esm/types/scopes.d.ts.map +1 -1
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/dist/types/authorization/projectMemberAbility.d.ts.map +1 -1
- package/dist/types/authorization/roleToScopeMapping.d.ts.map +1 -1
- package/dist/types/authorization/roleToScopeParity.test.d.ts +2 -0
- package/dist/types/authorization/roleToScopeParity.test.d.ts.map +1 -0
- package/dist/types/authorization/scopeAbilityBuilder.d.ts.map +1 -1
- package/dist/types/authorization/scopes.d.ts.map +1 -1
- package/dist/types/types/scopes.d.ts +2 -2
- package/dist/types/types/scopes.d.ts.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projectMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAG7C,eAAO,MAAM,sBAAsB,EAAE,MAAM,CACvC,iBAAiB,EACjB,CACI,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,aAAa,GAAG,UAAU,CAAC,EACvE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,KAClD,IAAI,
|
|
1
|
+
{"version":3,"file":"projectMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAG7C,eAAO,MAAM,sBAAsB,EAAE,MAAM,CACvC,iBAAiB,EACjB,CACI,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,aAAa,GAAG,UAAU,CAAC,EACvE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,KAClD,IAAI,CAyPZ,CAAC"}
|
|
@@ -210,10 +210,6 @@ exports.projectMemberAbilities = {
|
|
|
210
210
|
can('manage', 'AiAgent', {
|
|
211
211
|
projectUuid: member.projectUuid,
|
|
212
212
|
});
|
|
213
|
-
can('manage', 'AiAgentThread', {
|
|
214
|
-
projectUuid: member.projectUuid,
|
|
215
|
-
userUuid: member.userUuid,
|
|
216
|
-
});
|
|
217
213
|
},
|
|
218
214
|
admin(member, { can }) {
|
|
219
215
|
exports.projectMemberAbilities.developer(member, { can });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projectMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.ts"],"names":[],"mappings":";;;AAGA,gDAAgD;AAChD,0CAAiD;AAGjD,wDAAwD;AAC3C,QAAA,sBAAsB,GAM/B;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,8BAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAE/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,8BAAsB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,8BAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,IAAI,EAAE,sBAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,mBAAmB,EAAE,MAAM,CAAC,WAAW;YACvC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"projectMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.ts"],"names":[],"mappings":";;;AAGA,gDAAgD;AAChD,0CAAiD;AAGjD,wDAAwD;AAC3C,QAAA,sBAAsB,GAM/B;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,8BAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAE/B,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,8BAAsB,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,8BAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,IAAI,EAAE,sBAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,mBAAmB,EAAE,MAAM,CAAC,WAAW;YACvC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACjB,8BAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAElD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC,CAAC;IACP,CAAC;CACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"roleToScopeMapping.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;
|
|
1
|
+
{"version":3,"file":"roleToScopeMapping.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA2G/D;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAoBnE,CAAC;AAET;;GAEG;AACH,eAAO,MAAM,gBAAgB,SAAU,iBAAiB,KAAG,MAAM,EAEhE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,SAChC,iBAAiB,KACxB,MAAM,EAkBR,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,SAC9B,iBAAiB,KACxB,MAAM,EAqBR,CAAC"}
|
|
@@ -13,18 +13,18 @@ const BASE_ROLE_SCOPES = {
|
|
|
13
13
|
[projectMemberRole_1.ProjectMemberRole.VIEWER]: [
|
|
14
14
|
// Basic viewing permissions
|
|
15
15
|
'view:Dashboard',
|
|
16
|
+
'view:JobStatus@self', // For viewing job status created by user
|
|
16
17
|
'view:SavedChart',
|
|
17
18
|
'view:Space',
|
|
18
19
|
'view:Project',
|
|
19
20
|
'view:PinnedItems',
|
|
20
21
|
'view:DashboardComments',
|
|
21
22
|
'view:Tags',
|
|
22
|
-
'view:Job', // For viewing job status created by user
|
|
23
23
|
'manage:ExportCsv',
|
|
24
24
|
// Enterprise scopes (when available)
|
|
25
25
|
'view:MetricsTree',
|
|
26
26
|
'view:SpotlightTableConfig',
|
|
27
|
-
'view:AiAgentThread',
|
|
27
|
+
'view:AiAgentThread@self',
|
|
28
28
|
],
|
|
29
29
|
[projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER]: [
|
|
30
30
|
// Additional interactive viewer permissions
|
|
@@ -34,11 +34,11 @@ const BASE_ROLE_SCOPES = {
|
|
|
34
34
|
'manage:ChangeCsvResults',
|
|
35
35
|
'create:ScheduledDeliveries',
|
|
36
36
|
'create:DashboardComments',
|
|
37
|
-
'
|
|
37
|
+
'manage:GoogleSheets',
|
|
38
38
|
// Space-level content management (requires space admin/editor role)
|
|
39
|
-
'manage:Dashboard', // Via space access
|
|
40
|
-
'manage:SavedChart', // Via space access
|
|
41
|
-
'manage:Space', // Via space access (admin role)
|
|
39
|
+
'manage:Dashboard@space', // Via space access
|
|
40
|
+
'manage:SavedChart@space', // Via space access
|
|
41
|
+
'manage:Space@assigned', // Via space access (admin role)
|
|
42
42
|
// Enterprise scopes
|
|
43
43
|
'view:AiAgent',
|
|
44
44
|
'create:AiAgentThread',
|
|
@@ -46,7 +46,7 @@ const BASE_ROLE_SCOPES = {
|
|
|
46
46
|
[projectMemberRole_1.ProjectMemberRole.EDITOR]: [
|
|
47
47
|
// Editor-specific permissions
|
|
48
48
|
'create:Space',
|
|
49
|
-
'manage:Space', // For non-private spaces
|
|
49
|
+
'manage:Space@public', // For non-private spaces
|
|
50
50
|
'manage:Job',
|
|
51
51
|
'manage:PinnedItems',
|
|
52
52
|
'manage:ScheduledDeliveries',
|
|
@@ -54,7 +54,7 @@ const BASE_ROLE_SCOPES = {
|
|
|
54
54
|
'manage:Tags',
|
|
55
55
|
// Enterprise scopes
|
|
56
56
|
'manage:MetricsTree',
|
|
57
|
-
'manage:AiAgentThread', // User's own threads
|
|
57
|
+
'manage:AiAgentThread@self', // User's own threads
|
|
58
58
|
],
|
|
59
59
|
[projectMemberRole_1.ProjectMemberRole.DEVELOPER]: [
|
|
60
60
|
// Developer-specific permissions
|
|
@@ -64,20 +64,21 @@ const BASE_ROLE_SCOPES = {
|
|
|
64
64
|
'manage:Validation',
|
|
65
65
|
'manage:CompileProject',
|
|
66
66
|
'create:Project', // Preview projects
|
|
67
|
-
'delete:Project', // Preview projects created by user
|
|
67
|
+
'delete:Project@self', // Preview projects created by user
|
|
68
68
|
'update:Project',
|
|
69
69
|
'view:JobStatus', // All jobs in project
|
|
70
70
|
// Enterprise scopes
|
|
71
71
|
'manage:SpotlightTableConfig',
|
|
72
72
|
'manage:ContentAsCode',
|
|
73
73
|
'manage:AiAgent',
|
|
74
|
-
'manage:AiAgentThread', // User's own threads
|
|
74
|
+
'manage:AiAgentThread@self', // User's own threads
|
|
75
75
|
],
|
|
76
76
|
[projectMemberRole_1.ProjectMemberRole.ADMIN]: [
|
|
77
77
|
// Admin-specific permissions
|
|
78
78
|
'delete:Project', // Any project
|
|
79
79
|
'view:Analytics',
|
|
80
80
|
'manage:Dashboard', // All dashboards
|
|
81
|
+
'manage:Space', // All spaces
|
|
81
82
|
'manage:Project', // Required for managing non-private spaces
|
|
82
83
|
'manage:SavedChart', // All saved charts
|
|
83
84
|
'view:AiAgentThread', // All threads in project
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"roleToScopeMapping.js","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":";;;AAAA,kEAA+D;AAE/D;;;GAGG;AAEH;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACrB,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE;QACxB,4BAA4B;QAC5B,gBAAgB;QAChB,iBAAiB;QACjB,YAAY;QACZ,cAAc;QACd,kBAAkB;QAClB,wBAAwB;QACxB,WAAW;QACX,
|
|
1
|
+
{"version":3,"file":"roleToScopeMapping.js","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":";;;AAAA,kEAA+D;AAE/D;;;GAGG;AAEH;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACrB,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE;QACxB,4BAA4B;QAC5B,gBAAgB;QAChB,qBAAqB,EAAE,yCAAyC;QAChE,iBAAiB;QACjB,YAAY;QACZ,cAAc;QACd,kBAAkB;QAClB,wBAAwB;QACxB,WAAW;QACX,kBAAkB;QAElB,qCAAqC;QACrC,kBAAkB;QAClB,2BAA2B;QAC3B,yBAAyB;KAC5B;IAED,CAAC,qCAAiB,CAAC,kBAAkB,CAAC,EAAE;QACpC,4CAA4C;QAC5C,qBAAqB;QACrB,qBAAqB;QACrB,gBAAgB;QAChB,yBAAyB;QACzB,4BAA4B;QAC5B,0BAA0B;QAC1B,qBAAqB;QAErB,oEAAoE;QACpE,wBAAwB,EAAE,mBAAmB;QAC7C,yBAAyB,EAAE,mBAAmB;QAC9C,uBAAuB,EAAE,gCAAgC;QAEzD,oBAAoB;QACpB,cAAc;QACd,sBAAsB;KACzB;IAED,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE;QACxB,8BAA8B;QAC9B,cAAc;QACd,qBAAqB,EAAE,yBAAyB;QAChD,YAAY;QACZ,oBAAoB;QACpB,4BAA4B;QAC5B,0BAA0B;QAC1B,aAAa;QAEb,oBAAoB;QACpB,oBAAoB;QACpB,2BAA2B,EAAE,qBAAqB;KACrD;IAED,CAAC,qCAAiB,CAAC,SAAS,CAAC,EAAE;QAC3B,iCAAiC;QACjC,oBAAoB;QACpB,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,uBAAuB;QACvB,gBAAgB,EAAE,mBAAmB;QACrC,qBAAqB,EAAE,mCAAmC;QAC1D,gBAAgB;QAChB,gBAAgB,EAAE,sBAAsB;QAExC,oBAAoB;QACpB,6BAA6B;QAC7B,sBAAsB;QACtB,gBAAgB;QAChB,2BAA2B,EAAE,qBAAqB;KACrD;IAED,CAAC,qCAAiB,CAAC,KAAK,CAAC,EAAE;QACvB,6BAA6B;QAC7B,gBAAgB,EAAE,cAAc;QAChC,gBAAgB;QAChB,kBAAkB,EAAE,iBAAiB;QACrC,cAAc,EAAE,aAAa;QAC7B,gBAAgB,EAAE,2CAA2C;QAC7D,mBAAmB,EAAE,mBAAmB;QACxC,oBAAoB,EAAE,yBAAyB;QAC/C,sBAAsB,EAAE,yBAAyB;KACpD;CACK,CAAC;AAEX;;GAEG;AACH,MAAM,cAAc,GAAG;IACnB,qCAAiB,CAAC,MAAM;IACxB,qCAAiB,CAAC,kBAAkB;IACpC,qCAAiB,CAAC,MAAM;IACxB,qCAAiB,CAAC,SAAS;IAC3B,qCAAiB,CAAC,KAAK;CACjB,CAAC;AAEX;;;GAGG;AACU,QAAA,0BAA0B,GACnC,CAAC,GAAG,EAAE;IACF,MAAM,MAAM,GAAG,EAAyC,CAAC;IAEzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,wCAAwC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACtC,gBAAgB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAC7B,CAAC;QACN,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC,EAAE,CAAC;AAET;;GAEG;AACI,MAAM,gBAAgB,GAAG,CAAC,IAAuB,EAAY,EAAE,CAAC;IACnE,GAAG,kCAA0B,CAAC,IAAI,CAAC;CACtC,CAAC;AAFW,QAAA,gBAAgB,oBAE3B;AAEF;;GAEG;AACI,MAAM,6BAA6B,GAAG,CACzC,IAAuB,EACf,EAAE;IACV,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC7B,kBAAkB;QAClB,oBAAoB;QACpB,2BAA2B;QAC3B,6BAA6B;QAC7B,cAAc;QACd,oBAAoB;QACpB,sBAAsB;QACtB,gBAAgB;QAChB,sBAAsB;QACtB,sBAAsB;QACtB,4BAA4B;KAC/B,CAAC,CAAC;IAEH,OAAO,kCAA0B,CAAC,IAAI,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAC1C,CAAC;AACN,CAAC,CAAC;AApBW,QAAA,6BAA6B,iCAoBxC;AAEF;;GAEG;AACI,MAAM,2BAA2B,GAAG,CACvC,IAAuB,EACf,EAAE;IACV,MAAM,SAAS,GAAG;QACd,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,kBAAkB;QACpC,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,SAAS;QAC3B,qCAAiB,CAAC,KAAK;KAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,IAAA,wBAAgB,EAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,IAAA,wBAAgB,EAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAA,wBAAgB,EAAC,YAAY,CAAC,CAAC,CAAC;IAE/D,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CACxC,CAAC;AACN,CAAC,CAAC;AAvBW,QAAA,2BAA2B,+BAuBtC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"roleToScopeParity.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeParity.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,195 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
/* eslint-disable no-console */
|
|
4
|
+
const ability_1 = require("@casl/ability");
|
|
5
|
+
const lodash_1 = require("lodash");
|
|
6
|
+
const projectMemberRole_1 = require("../types/projectMemberRole");
|
|
7
|
+
const projectMemberAbility_1 = require("./projectMemberAbility");
|
|
8
|
+
const projectMemberAbility_mock_1 = require("./projectMemberAbility.mock");
|
|
9
|
+
const roleToScopeMapping_1 = require("./roleToScopeMapping");
|
|
10
|
+
const scopeAbilityBuilder_1 = require("./scopeAbilityBuilder");
|
|
11
|
+
/**
|
|
12
|
+
* Normalize a CASL rule for comparison by sorting object keys and handling undefined values
|
|
13
|
+
*/
|
|
14
|
+
const normalizeRule = (rule) => ({
|
|
15
|
+
action: rule.action,
|
|
16
|
+
subject: rule.subject,
|
|
17
|
+
});
|
|
18
|
+
/**
|
|
19
|
+
* Compare two sets of CASL rules for functional equivalence
|
|
20
|
+
*/
|
|
21
|
+
const compareRuleSets = (roleBasedRules, scopeBasedRules, roleName) => {
|
|
22
|
+
const normalizedRoleRules = roleBasedRules.map(normalizeRule);
|
|
23
|
+
const normalizedScopeRules = scopeBasedRules.map(normalizeRule);
|
|
24
|
+
const mismatches = [];
|
|
25
|
+
// Check if rule counts match
|
|
26
|
+
if (normalizedRoleRules.length !== normalizedScopeRules.length) {
|
|
27
|
+
mismatches.push(`Rule count mismatch: role-based has ${normalizedRoleRules.length} rules, scope-based has ${normalizedScopeRules.length} rules`);
|
|
28
|
+
}
|
|
29
|
+
// Group rules by action+subject for easier comparison
|
|
30
|
+
const roleRulesGrouped = (0, lodash_1.groupBy)(normalizedRoleRules, (rule) => `${rule.action}:${rule.subject}`);
|
|
31
|
+
const scopeRulesGrouped = (0, lodash_1.groupBy)(normalizedScopeRules, (rule) => `${rule.action}:${rule.subject}`);
|
|
32
|
+
// Check for missing or extra rule types
|
|
33
|
+
const roleKeys = new Set(Object.keys(roleRulesGrouped));
|
|
34
|
+
const scopeKeys = new Set(Object.keys(scopeRulesGrouped));
|
|
35
|
+
const missingInScope = [...roleKeys].filter((key) => !scopeKeys.has(key));
|
|
36
|
+
const extraInScope = [...scopeKeys].filter((key) => !roleKeys.has(key));
|
|
37
|
+
missingInScope.forEach((key) => {
|
|
38
|
+
mismatches.push(`Missing in scope-based: ${key}`);
|
|
39
|
+
});
|
|
40
|
+
extraInScope.forEach((key) => {
|
|
41
|
+
mismatches.push(`Extra in scope-based: ${key}`);
|
|
42
|
+
});
|
|
43
|
+
// Compare matching rule groups
|
|
44
|
+
const commonKeys = [...roleKeys].filter((key) => scopeKeys.has(key));
|
|
45
|
+
commonKeys.forEach((key) => {
|
|
46
|
+
const roleRulesForKey = roleRulesGrouped[key];
|
|
47
|
+
const scopeRulesForKey = scopeRulesGrouped[key];
|
|
48
|
+
// For rules with the same action+subject, we need to check if the conditions are equivalent
|
|
49
|
+
// This is more complex because multiple rules might combine to create the same effective permissions
|
|
50
|
+
if (roleRulesForKey.length !== scopeRulesForKey.length) {
|
|
51
|
+
// Different number of rules for same action+subject - this might be OK if conditions are equivalent
|
|
52
|
+
// For now, we'll flag this as a potential issue but continue checking
|
|
53
|
+
mismatches.push(`Different rule count for ${key}: role-based has ${roleRulesForKey.length}, scope-based has ${scopeRulesForKey.length}`);
|
|
54
|
+
}
|
|
55
|
+
// Check if rule sets contain equivalent conditions
|
|
56
|
+
const roleConditions = roleRulesForKey
|
|
57
|
+
.map((r) => r.conditions)
|
|
58
|
+
.filter(Boolean);
|
|
59
|
+
const scopeConditions = scopeRulesForKey
|
|
60
|
+
.map((r) => r.conditions)
|
|
61
|
+
.filter(Boolean);
|
|
62
|
+
if (!(0, lodash_1.isEqual)(roleConditions, scopeConditions)) {
|
|
63
|
+
mismatches.push(`Condition mismatch on ${roleName} for ${key}:\nRole-based: ${JSON.stringify(roleConditions, null, 2)}\nScope-based: ${JSON.stringify(scopeConditions, null, 2)}`);
|
|
64
|
+
}
|
|
65
|
+
});
|
|
66
|
+
return {
|
|
67
|
+
isEqual: mismatches.length === 0,
|
|
68
|
+
mismatches,
|
|
69
|
+
};
|
|
70
|
+
};
|
|
71
|
+
/**
|
|
72
|
+
* List of enterprise-only subject names that should be filtered in non-enterprise mode
|
|
73
|
+
*/
|
|
74
|
+
const ENTERPRISE_SUBJECTS = new Set([
|
|
75
|
+
'MetricsTree',
|
|
76
|
+
'SpotlightTableConfig',
|
|
77
|
+
'AiAgent',
|
|
78
|
+
'AiAgentThread',
|
|
79
|
+
'ContentAsCode',
|
|
80
|
+
]);
|
|
81
|
+
/**
|
|
82
|
+
* Filter enterprise rules from role-based abilities when testing in non-enterprise mode
|
|
83
|
+
*/
|
|
84
|
+
const filterEnterpriseRules = (rules, isEnterprise) => {
|
|
85
|
+
if (isEnterprise) {
|
|
86
|
+
return rules;
|
|
87
|
+
}
|
|
88
|
+
return rules.filter((rule) => !ENTERPRISE_SUBJECTS.has(rule.subject));
|
|
89
|
+
};
|
|
90
|
+
/**
|
|
91
|
+
* Test role-to-scope parity for a specific role
|
|
92
|
+
*/
|
|
93
|
+
const testRoleScopeParity = (role, isEnterprise = false) => {
|
|
94
|
+
// Get the appropriate mock member profile
|
|
95
|
+
const memberProfiles = {
|
|
96
|
+
[projectMemberRole_1.ProjectMemberRole.VIEWER]: projectMemberAbility_mock_1.PROJECT_VIEWER,
|
|
97
|
+
[projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER]: projectMemberAbility_mock_1.PROJECT_INTERACTIVE_VIEWER,
|
|
98
|
+
[projectMemberRole_1.ProjectMemberRole.EDITOR]: projectMemberAbility_mock_1.PROJECT_EDITOR,
|
|
99
|
+
[projectMemberRole_1.ProjectMemberRole.DEVELOPER]: projectMemberAbility_mock_1.PROJECT_DEVELOPER,
|
|
100
|
+
[projectMemberRole_1.ProjectMemberRole.ADMIN]: projectMemberAbility_mock_1.PROJECT_ADMIN,
|
|
101
|
+
};
|
|
102
|
+
const member = memberProfiles[role];
|
|
103
|
+
// Build abilities using role-based approach
|
|
104
|
+
const roleBuilder = new ability_1.AbilityBuilder(ability_1.Ability);
|
|
105
|
+
projectMemberAbility_1.projectMemberAbilities[role](member, roleBuilder);
|
|
106
|
+
const roleAbility = roleBuilder.build();
|
|
107
|
+
// Filter enterprise rules from role-based abilities if not enterprise
|
|
108
|
+
const filteredRoleRules = filterEnterpriseRules(roleAbility.rules, isEnterprise);
|
|
109
|
+
// Build abilities using scope-based approach
|
|
110
|
+
const scopeBuilder = new ability_1.AbilityBuilder(ability_1.Ability);
|
|
111
|
+
const scopes = (0, roleToScopeMapping_1.getScopesForRole)(role);
|
|
112
|
+
(0, scopeAbilityBuilder_1.buildAbilityFromScopes)({
|
|
113
|
+
userUuid: member.userUuid,
|
|
114
|
+
projectUuid: member.projectUuid,
|
|
115
|
+
scopes,
|
|
116
|
+
isEnterprise,
|
|
117
|
+
}, scopeBuilder);
|
|
118
|
+
const scopeAbility = scopeBuilder.build();
|
|
119
|
+
// Compare the filtered rule sets
|
|
120
|
+
const result = compareRuleSets(filteredRoleRules, scopeAbility.rules, role);
|
|
121
|
+
return result;
|
|
122
|
+
};
|
|
123
|
+
describe('Role to Scope Parity', () => {
|
|
124
|
+
const systemProjectRoles = [
|
|
125
|
+
projectMemberRole_1.ProjectMemberRole.VIEWER,
|
|
126
|
+
projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER,
|
|
127
|
+
projectMemberRole_1.ProjectMemberRole.EDITOR,
|
|
128
|
+
projectMemberRole_1.ProjectMemberRole.DEVELOPER,
|
|
129
|
+
projectMemberRole_1.ProjectMemberRole.ADMIN,
|
|
130
|
+
];
|
|
131
|
+
describe('Non-Enterprise Environment', () => {
|
|
132
|
+
it.each(systemProjectRoles)('should have equivalent permissions for %s role', (role) => {
|
|
133
|
+
const comparison = testRoleScopeParity(role, false);
|
|
134
|
+
if (!comparison.isEqual) {
|
|
135
|
+
console.error(`\n=== PARITY MISMATCH FOR ${role.toUpperCase()} ROLE ===`);
|
|
136
|
+
comparison.mismatches.forEach((mismatch) => {
|
|
137
|
+
console.error(`❌ ${mismatch}`);
|
|
138
|
+
});
|
|
139
|
+
console.error('=== END MISMATCH REPORT ===\n');
|
|
140
|
+
}
|
|
141
|
+
expect(comparison.isEqual).toBe(true);
|
|
142
|
+
});
|
|
143
|
+
});
|
|
144
|
+
describe('Enterprise Environment', () => {
|
|
145
|
+
it.each(systemProjectRoles)('should have equivalent permissions for %s role in enterprise', (role) => {
|
|
146
|
+
const comparison = testRoleScopeParity(role, true);
|
|
147
|
+
if (!comparison.isEqual) {
|
|
148
|
+
console.error(`\n=== ENTERPRISE PARITY MISMATCH FOR ${role.toUpperCase()} ROLE ===`);
|
|
149
|
+
comparison.mismatches.forEach((mismatch) => {
|
|
150
|
+
console.error(`❌ ${mismatch}`);
|
|
151
|
+
});
|
|
152
|
+
console.error('=== END MISMATCH REPORT ===\n');
|
|
153
|
+
}
|
|
154
|
+
expect(comparison.isEqual).toBe(true);
|
|
155
|
+
});
|
|
156
|
+
});
|
|
157
|
+
// This is helpful for debugging, but it's not a test
|
|
158
|
+
describe.skip('Rule Count Analysis', () => {
|
|
159
|
+
it('should report rule counts for documentation', () => {
|
|
160
|
+
console.log('\n=== ROLE PERMISSION RULE COUNTS ===');
|
|
161
|
+
systemProjectRoles.forEach((role) => {
|
|
162
|
+
const member = {
|
|
163
|
+
[projectMemberRole_1.ProjectMemberRole.VIEWER]: projectMemberAbility_mock_1.PROJECT_VIEWER,
|
|
164
|
+
[projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER]: projectMemberAbility_mock_1.PROJECT_INTERACTIVE_VIEWER,
|
|
165
|
+
[projectMemberRole_1.ProjectMemberRole.EDITOR]: projectMemberAbility_mock_1.PROJECT_EDITOR,
|
|
166
|
+
[projectMemberRole_1.ProjectMemberRole.DEVELOPER]: projectMemberAbility_mock_1.PROJECT_DEVELOPER,
|
|
167
|
+
[projectMemberRole_1.ProjectMemberRole.ADMIN]: projectMemberAbility_mock_1.PROJECT_ADMIN,
|
|
168
|
+
}[role];
|
|
169
|
+
// Count role-based rules
|
|
170
|
+
const roleBuilder = new ability_1.AbilityBuilder(ability_1.Ability);
|
|
171
|
+
projectMemberAbility_1.projectMemberAbilities[role](member, roleBuilder);
|
|
172
|
+
const roleRuleCount = roleBuilder.build().rules.length;
|
|
173
|
+
// Count scope-based rules
|
|
174
|
+
const scopeBuilder = new ability_1.AbilityBuilder(ability_1.Ability);
|
|
175
|
+
const scopes = (0, roleToScopeMapping_1.getScopesForRole)(role);
|
|
176
|
+
(0, scopeAbilityBuilder_1.buildAbilityFromScopes)({
|
|
177
|
+
userUuid: member.userUuid,
|
|
178
|
+
projectUuid: member.projectUuid,
|
|
179
|
+
scopes,
|
|
180
|
+
isEnterprise: false,
|
|
181
|
+
}, scopeBuilder);
|
|
182
|
+
const scopeRuleCount = scopeBuilder.build().rules.length;
|
|
183
|
+
console.log(`${role.padEnd(20)}: Role-based: ${roleRuleCount
|
|
184
|
+
.toString()
|
|
185
|
+
.padStart(3)}, Scope-based: ${scopeRuleCount
|
|
186
|
+
.toString()
|
|
187
|
+
.padStart(3)}, Scopes: ${scopes.length
|
|
188
|
+
.toString()
|
|
189
|
+
.padStart(3)}`);
|
|
190
|
+
});
|
|
191
|
+
console.log('=== END RULE COUNT ANALYSIS ===\n');
|
|
192
|
+
});
|
|
193
|
+
});
|
|
194
|
+
});
|
|
195
|
+
//# sourceMappingURL=roleToScopeParity.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"roleToScopeParity.test.js","sourceRoot":"","sources":["../../../src/authorization/roleToScopeParity.test.ts"],"names":[],"mappings":";;AAAA,+BAA+B;AAC/B,2CAAwD;AACxD,mCAA0C;AAC1C,kEAA+D;AAC/D,iEAAgE;AAChE,2EAMqC;AACrC,6DAAwD;AACxD,+DAA+D;AAW/D;;GAEG;AACH,MAAM,aAAa,GAAG,CAAC,IAAc,EAAY,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,IAAI,CAAC,MAAM;IACnB,OAAO,EAAE,IAAI,CAAC,OAAO;CACxB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,eAAe,GAAG,CACpB,cAA0B,EAC1B,eAA2B,EAC3B,QAAgB,EAC0B,EAAE;IAC5C,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,6BAA6B;IAC7B,IAAI,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CACX,uCAAuC,mBAAmB,CAAC,MAAM,2BAA2B,oBAAoB,CAAC,MAAM,QAAQ,CAClI,CAAC;IACN,CAAC;IAED,sDAAsD;IACtD,MAAM,gBAAgB,GAAG,IAAA,gBAAO,EAC5B,mBAAmB,EACnB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAC7C,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAA,gBAAO,EAC7B,oBAAoB,EACpB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAC7C,CAAC;IAEF,wCAAwC;IACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAE1D,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAExE,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,UAAU,CAAC,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,UAAU,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAErE,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEhD,4FAA4F;QAC5F,qGAAqG;QACrG,IAAI,eAAe,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACrD,oGAAoG;YACpG,sEAAsE;YACtE,UAAU,CAAC,IAAI,CACX,4BAA4B,GAAG,oBAAoB,eAAe,CAAC,MAAM,qBAAqB,gBAAgB,CAAC,MAAM,EAAE,CAC1H,CAAC;QACN,CAAC;QAED,mDAAmD;QACnD,MAAM,cAAc,GAAG,eAAe;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,eAAe,GAAG,gBAAgB;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,OAAO,CAAC,CAAC;QAErB,IAAI,CAAC,IAAA,gBAAO,EAAC,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CACX,yBAAyB,QAAQ,QAAQ,GAAG,kBAAkB,IAAI,CAAC,SAAS,CACxE,cAAc,EACd,IAAI,EACJ,CAAC,CACJ,kBAAkB,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAChE,CAAC;QACN,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACH,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC,UAAU;KACb,CAAC;AACN,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAChC,aAAa;IACb,sBAAsB;IACtB,SAAS;IACT,eAAe;IACf,eAAe;CAClB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAC1B,KAAiB,EACjB,YAAqB,EACX,EAAE;IACZ,IAAI,YAAY,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAG,CACxB,IAAuB,EACvB,eAAwB,KAAK,EACa,EAAE;IAC5C,0CAA0C;IAC1C,MAAM,cAAc,GAAG;QACnB,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE,0CAAc;QAC1C,CAAC,qCAAiB,CAAC,kBAAkB,CAAC,EAAE,sDAA0B;QAClE,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE,0CAAc;QAC1C,CAAC,qCAAiB,CAAC,SAAS,CAAC,EAAE,6CAAiB;QAChD,CAAC,qCAAiB,CAAC,KAAK,CAAC,EAAE,yCAAa;KAC3C,CAAC;IAEF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAEpC,4CAA4C;IAC5C,MAAM,WAAW,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC/D,6CAAsB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;IAExC,sEAAsE;IACtE,MAAM,iBAAiB,GAAG,qBAAqB,CAC3C,WAAW,CAAC,KAAmB,EAC/B,YAAY,CACf,CAAC;IAEF,6CAA6C;IAC7C,MAAM,YAAY,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAA,qCAAgB,EAAC,IAAI,CAAC,CAAC;IAEtC,IAAA,4CAAsB,EAClB;QACI,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM;QACN,YAAY;KACf,EACD,YAAY,CACf,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;IAE1C,iCAAiC;IACjC,MAAM,MAAM,GAAG,eAAe,CAC1B,iBAAiB,EACjB,YAAY,CAAC,KAAmB,EAChC,IAAI,CACP,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,MAAM,kBAAkB,GAAG;QACvB,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,kBAAkB;QACpC,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,SAAS;QAC3B,qCAAiB,CAAC,KAAK;KAC1B,CAAC;IAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACvB,gDAAgD,EAChD,CAAC,IAAI,EAAE,EAAE;YACL,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEpD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CACT,6BAA6B,IAAI,CAAC,WAAW,EAAE,WAAW,CAC7D,CAAC;gBACF,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;oBACvC,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACvB,8DAA8D,EAC9D,CAAC,IAAI,EAAE,EAAE;YACL,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAEnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CACT,wCAAwC,IAAI,CAAC,WAAW,EAAE,WAAW,CACxE,CAAC;gBACF,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;oBACvC,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACnD,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAErD,kBAAkB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,MAAM,GAAG;oBACX,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE,0CAAc;oBAC1C,CAAC,qCAAiB,CAAC,kBAAkB,CAAC,EAClC,sDAA0B;oBAC9B,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE,0CAAc;oBAC1C,CAAC,qCAAiB,CAAC,SAAS,CAAC,EAAE,6CAAiB;oBAChD,CAAC,qCAAiB,CAAC,KAAK,CAAC,EAAE,yCAAa;iBAC3C,CAAC,IAAI,CAAC,CAAC;gBAER,yBAAyB;gBACzB,MAAM,WAAW,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;gBAC/D,6CAAsB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;gBAEvD,0BAA0B;gBAC1B,MAAM,YAAY,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,IAAA,qCAAgB,EAAC,IAAI,CAAC,CAAC;gBACtC,IAAA,4CAAsB,EAClB;oBACI,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM;oBACN,YAAY,EAAE,KAAK;iBACtB,EACD,YAAY,CACf,CAAC;gBACF,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;gBAEzD,OAAO,CAAC,GAAG,CACP,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,aAAa;qBAC3C,QAAQ,EAAE;qBACV,QAAQ,CAAC,CAAC,CAAC,kBAAkB,cAAc;qBAC3C,QAAQ,EAAE;qBACV,QAAQ,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM;qBACrC,QAAQ,EAAE;qBACV,QAAQ,CAAC,CAAC,CAAC,EAAE,CACrB,CAAC;YACN,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scopeAbilityBuilder.d.ts","sourceRoot":"","sources":["../../../src/authorization/scopeAbilityBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"scopeAbilityBuilder.d.ts","sourceRoot":"","sources":["../../../src/authorization/scopeAbilityBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAuD7C,KAAK,iBAAiB,GAChB;IACI,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,KAAK,CAAC;CACvB,GACD;IACI,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,KAAK,CAAC;CAC5B,CAAC;AAER,KAAK,cAAc,GAAG;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE;QAChB,GAAG,EAAE;YACD,OAAO,EAAE,OAAO,CAAC;YACjB,eAAe,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC;KACL,CAAC;CACL,GAAG,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YACtB,cAAc,WACd,cAAc,CAAC,aAAa,CAAC,KACvC,IAaF,CAAC"}
|
|
@@ -26,13 +26,16 @@ const applyScopeAbilities = (context, builder) => {
|
|
|
26
26
|
if (!scope)
|
|
27
27
|
return;
|
|
28
28
|
const [action, subject] = (0, parseScopes_1.parseScope)(scopeName);
|
|
29
|
-
const conditionsList = scope.getConditions
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
29
|
+
const conditionsList = scope.getConditions(context);
|
|
30
|
+
// Apply each condition set if there are any
|
|
31
|
+
if (conditionsList.length === 0) {
|
|
32
|
+
builder.can(action, subject);
|
|
33
|
+
}
|
|
34
|
+
else {
|
|
35
|
+
conditionsList.forEach((conditions) => {
|
|
36
|
+
builder.can(action, subject, conditions);
|
|
37
|
+
});
|
|
38
|
+
}
|
|
36
39
|
});
|
|
37
40
|
handlePatConfigApplication(context, builder);
|
|
38
41
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scopeAbilityBuilder.js","sourceRoot":"","sources":["../../../src/authorization/scopeAbilityBuilder.ts"],"names":[],"mappings":";;;AAEA,+CAAwD;AACxD,qCAA0C;AAG1C,MAAM,0BAA0B,GAAG,CAC/B,OAAqB,EACrB,OAAsC,EACxC,EAAE;IACA,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CACL,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CACzE,CAAC;IAEF,IACI,CAAC,UAAU;QACX,GAAG,EAAE,OAAO;QACZ,OAAO,CAAC,gBAAgB;QACxB,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1D,CAAC;QACC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACL,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CACxB,OAAqB,EACrB,OAAsC,EAClC,EAAE;IACN,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAExE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAA,wBAAU,EAAC,SAAS,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa
|
|
1
|
+
{"version":3,"file":"scopeAbilityBuilder.js","sourceRoot":"","sources":["../../../src/authorization/scopeAbilityBuilder.ts"],"names":[],"mappings":";;;AAEA,+CAAwD;AACxD,qCAA0C;AAG1C,MAAM,0BAA0B,GAAG,CAC/B,OAAqB,EACrB,OAAsC,EACxC,EAAE;IACA,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CACL,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CACzE,CAAC;IAEF,IACI,CAAC,UAAU;QACX,GAAG,EAAE,OAAO;QACZ,OAAO,CAAC,gBAAgB;QACxB,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1D,CAAC;QACC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACL,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,CACxB,OAAqB,EACrB,OAAsC,EAClC,EAAE;IACN,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAExE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAA,wBAAU,EAAC,SAAS,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEpD,4CAA4C;QAC5C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACJ,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC,CAAC;AAyBF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CAClC,OAAuB,EACvB,OAAsC,EAClC,EAAE;IACN,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IACnD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY;KACf,CAAC,CAAC;IACH,MAAM,aAAa,GAAG;QAClB,GAAG,OAAO;QACV,MAAM;QACN,YAAY;KACf,CAAC;IAEF,mBAAmB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC,CAAC;AAhBW,QAAA,sBAAsB,0BAgBjC"}
|