@live-change/access-control-frontend 0.1.2 → 0.1.5

package/front/src/components/LimitedAccess.vue

@@ -1,10 +1,79 @@
 <template>
-
+  <slot v-if="!authorized" name="blocked" :authorized="authorized" :roles="accessRoles" :accesses="accesses">
+    <div class="flex align-items-start p-4 bg-pink-100 border-round border-1 border-pink-300 mb-4">
+      <i class="pi pi-times-circle text-pink-900 text-2xl mr-3" />
+      <div class="mr-3">
+        <div class="text-pink-900 font-medium text-xl mb-3 line-height-1">Not authorized</div>
+        <p class="m-0 p-0 text-pink-700">
+          You do not have sufficient privileges to use this feature of this object.
+        </p>
+      </div>
+    </div>
+  </slot>
+  <BlockUI :blocked="notAuthorized">
+    <slot :authorized="authorized" :roles="accessRoles" :accesses="accesses"></slot>
+  </BlockUI>
+  <div v-if="false">
+    <h4>Bans</h4>
+    <pre>{{ JSON.stringify(bansState, null, '  ') }}</pre>
+    <h4>Counters</h4>
+    <pre>{{ JSON.stringify(countersState, null, '  ') }}</pre>
+  </div>
 </template>
 
 <script setup>
+
+  import BlockUI from 'primevue/blockui'
+
+  const { objectType, object, objects, requiredRoles } = defineProps({
+    objectType: {
+      type: String,
+      default: null
+    },
+    object: {
+      type: String,
+      default: null
+    },
+    objects: {
+      type: Array,
+      default: () => []
+    },
+    requiredRoles: {
+      type: Array,
+      default: () => []
+    }
+  })
+
+  const allObjects = ((objectType && object) ? [{ objectType, object }] : []).concat(objects || [])
+
+  import { provide, computed } from 'vue'
+  import { live, path } from '@live-change/vue3-ssr'
+
+  const [ accesses ] = await Promise.all([
+    live(
+      path().accessControl.myAccessesTo({ objects: allObjects })
+    )
+  ])
+
+  const accessRoles = computed(() => {
+    const accessesList = accesses.value.slice()
+    const firstAccess = accessesList.shift()
+    let roles = firstAccess.roles
+    for(const access of accessesList) {
+      roles = roles.filter(role => access.roles.includes(role))
+    }
+  })
+
+  const authorized = computed(() => {
+    const roles = accessRoles.value
+    for(const requiredRole of requiredRoles) {
+      if(!roles.includes(requiredRole)) return false
+    }
+    return true
+  })
+
 </script>
 
 <style scoped>
 
-</style>
+</style>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@live-change/access-control-frontend",
-  "version": "0.1.2",
+  "version": "0.1.5",
   "scripts": {
     "memDev": "lcli memDev --enableSessions --initScript ./init.js --dbAccess",
     "localDevInit": "rm tmp.db; lcli localDev --enableSessions --initScript ./init.js",
@@ -20,25 +20,22 @@
     "debug": "node --inspect-brk server"
   },
   "dependencies": {
-    "@live-change/access-control-service": "0.2.37",
-    "@live-change/cli": "0.6.5",
-    "@live-change/dao": "0.4.13",
-    "@live-change/dao-vue3": "0.4.13",
-    "@live-change/dao-websocket": "0.4.13",
-    "@live-change/db-admin": "0.5.12",
-    "@live-change/framework": "0.6.5",
-    "@live-change/password-authentication-service": "0.2.39",
-    "@live-change/secret-code-service": "0.2.39",
-    "@live-change/secret-link-service": "0.2.39",
-    "@live-change/session-service": "0.2.39",
-    "@live-change/user-frontend": "^0.1.2",
-    "@live-change/user-service": "0.2.37",
-    "@live-change/vue3-components": "0.2.12",
+    "@live-change/access-control-service": "0.2.40",
+    "@live-change/cli": "0.6.8",
+    "@live-change/dao": "0.5.0",
+    "@live-change/dao-vue3": "0.5.0",
+    "@live-change/dao-websocket": "0.5.0",
+    "@live-change/db-admin": "0.5.13",
+    "@live-change/framework": "0.6.8",
+    "@live-change/password-authentication-service": "0.2.41",
+    "@live-change/secret-code-service": "0.2.41",
+    "@live-change/secret-link-service": "0.2.41",
+    "@live-change/session-service": "0.2.41",
+    "@live-change/user-frontend": "^0.1.5",
+    "@live-change/user-service": "0.2.41",
+    "@live-change/vue3-components": "0.2.14",
     "@live-change/vue3-ssr": "0.2.14",
-    "@vitejs/plugin-vue": "^2.3.1",
-    "@vitejs/plugin-vue-jsx": "^1.3.10",
-    "@vue/compiler-sfc": "^3.2.33",
-    "@vueuse/core": "^8.3.1",
+    "@vueuse/core": "^9.1.0",
     "codeceptjs-assert": "^0.0.5",
     "compression": "^1.7.4",
     "cross-env": "^7.0.3",
@@ -50,27 +47,22 @@
     "rollup-plugin-visualizer": "5.6.0",
     "serialize-javascript": "^6.0.0",
     "serve-static": "^1.15.0",
-    "v-shared-element": "3.1.0",
-    "vite": "^2.9.6",
-    "vite-plugin-compression": "0.5.1",
-    "vite-plugin-vue-images": "^0.6.1",
-    "vue": "^3.2.33",
     "vue-meta": "^3.0.0-alpha.9",
-    "vue-router": "^4.0.14",
+    "vue-router": "^4.1.3",
     "vue3-scroll-border": "0.1.2"
   },
   "devDependencies": {
-    "@live-change/codeceptjs-helper": "0.6.5",
-    "@wdio/selenium-standalone-service": "^7.19.5",
-    "codeceptjs": "^3.3.1",
+    "@live-change/codeceptjs-helper": "0.6.8",
+    "@wdio/selenium-standalone-service": "^7.20.8",
+    "codeceptjs": "^3.3.4",
     "generate-password": "1.7.0",
-    "playwright": "^1.21.1",
+    "playwright": "^1.24.2",
     "random-profile-generator": "^2.3.0",
-    "txtgen": "^3.0.1",
-    "webdriverio": "^7.19.5"
+    "txtgen": "^3.0.2",
+    "webdriverio": "^7.20.9"
   },
   "author": "",
   "license": "ISC",
   "description": "",
-  "gitHead": "2263ca7a6c9ead13175e4bafa9fa01c8182b283b"
+  "gitHead": "ca3253bac1e9c01143244f5236bd40278a86ebaa"
 }

package/server/init.js

@@ -23,7 +23,7 @@ module.exports = async function(services) {
     }
   }
 
-  const session = 'GOzz0WylRDklhLCSppS6bwRYUeIQJqzt'
+  const session = 'Q6OytlOJ54r0tF1BriDB8bEYoGEUIf+i__'
 
   //console.log("MDL", services.passwordAuthentication.models.PasswordAuthentication)
 
@@ -31,7 +31,7 @@ module.exports = async function(services) {
   const user2 = await createUser('Test User 2 with very long name!', 'test2@test.com', 'Testy123')
   const user3 = await createUser('Test User 3', 'test3@test.com', 'Testy123')
 
-  await services.user.models.AuthenticatedUser.create({ id: session, session, user: user2.id })
+  await services.user.models.AuthenticatedUser.create({ id: session, session, user: user1.id })
 
   await services.notification.models.Notification.create({
     "id": app.generateUid(),
@@ -46,12 +46,12 @@ module.exports = async function(services) {
     "readState": "new"
   })
 
-/*  await PublicAccess.create({
+  await PublicAccess.create({
     id: App.encodeIdentifier(['example_Example', 'one']),
     objectType: 'example_Example', object: 'one',
     userRoles: ['reader'],
-    sessionRoles: []
-  })*/
+    sessionRoles: ['reader']
+  })
 
   await Access.create({
     id: App.encodeIdentifier(['user_User', user1.id, 'example_Example', 'one']),