@live-change/access-control-service 0.8.124 → 0.8.126

package/model.js

@@ -55,6 +55,10 @@ const PublicAccess = definition.model({
     availableRoles: rolesArrayType,
     lastUpdate: {
       type: Date
+    },
+    autoGrantRequests: {
+      type: Number,
+      default: 0
     }
   },
   indexes: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@live-change/access-control-service",
-  "version": "0.8.124",
+  "version": "0.8.126",
   "description": "",
   "main": "index.js",
   "scripts": {
@@ -21,8 +21,8 @@
     "url": "https://www.viamage.com/"
   },
   "dependencies": {
-    "@live-change/framework": "^0.8.124"
+    "@live-change/framework": "^0.8.126"
   },
-  "gitHead": "837e7729f4cbd909d6c7ae32189c562b39cc3122",
+  "gitHead": "2aa34c0589d115aeaa573bd2cae09bb43a66d162",
   "type": "module"
 }

package/request.js

@@ -3,7 +3,7 @@ const app = App.app()
 import definition from './definition.js'
 const config = definition.config
 
-import { Access, AccessRequest, rolesArrayType } from './model.js'
+import { PublicAccess, Access, AccessRequest, rolesArrayType } from './model.js'
 import accessModule from './access.js'
 const access = accessModule(definition)
 
@@ -19,6 +19,68 @@ definition.event({
   }
 })
 
+definition.action({
+  name: 'requestAccess',
+  properties: {
+    objectType: {
+      type: String,
+      validation: ['nonEmpty']
+    },
+    object: {
+      type: String,
+      validation: ['nonEmpty']
+    },
+    roles: rolesArrayType
+  },
+  queuedBy: ['objectType', 'object'],
+  waitForEvents: true,
+  access: (params, { client, context, visibilityTest }) =>
+      visibilityTest || access.clientCanInvite(client, params),
+  async execute({ objectType, object, roles }, { client, service }, emit) {
+    const publicAccess = await PublicAccess.get(App.encodeIdentifier([objectType, object]))
+    const [sessionOrUserType, sessionOrUser] =
+      client.user ? ['user_User', client.user] : ['session_Session', client.session]
+
+    if(!publicAccess.availableRoles) throw 'notAuthorized'
+    for(const requestedRole of roles) {
+      if(!publicAccess.availableRoles.includes(requestedRole)) throw 'notAuthorized'
+    }
+
+    const request = App.encodeIdentifier([ sessionOrUserType, sessionOrUser, objectType, object ])
+    const requestData = await AccessRequest.get(request)
+    if(requestData) throw 'already_requested'
+
+    if(publicAccess.autoGrantRequests) {
+      emit({
+        type: 'accessRequestAccepted',
+        objectType, object, sessionOrUserType, sessionOrUser, roles,
+        autoAccept: true
+      })
+      emit({
+        type: 'objectOwnedPublicAccessUpdated',
+        identifiers: {
+          objectType, object
+        },
+        data: {
+          autoGrantRequests: publicAccess.autoGrantRequests - 1
+        },
+      })
+    } else {
+      emit({
+        type: 'sessionOrUserAndObjectOwnedAccessRequestSet',
+        data: {
+          roles
+        },
+        identifiers: {
+          sessionOrUserType, sessionOrUser,
+          objectType, object,
+          roles
+        }
+      })
+    }
+  }
+})
+
 definition.action({
   name: 'acceptAccessRequest',
   waitForEvents: true,