@mongoosejs/studio 0.0.70 → 0.0.72

package/backend/actions/Model/createDocument.js

@@ -11,11 +11,18 @@ const CreateDocumentParams = new Archetype({
   data: {
     $type: Archetype.Any,
     $required: true
+  },
+  roles: {
+    $type: ['string'],
   }
 }).compile('CreateDocumentParams');
 
 module.exports = ({ db }) => async function CreateDocument(params) {
-  const { model, data } = new CreateDocumentParams(params);
+  const { model, data, roles } = new CreateDocumentParams(params);
+
+  if (roles && roles.includes('readonly')) {
+    throw new Error('Not authorized');
+  }
 
   const Model = db.models[model];
   if (Model == null) {

package/backend/actions/Model/deleteDocument.js

@@ -10,13 +10,20 @@ const DeleteDocumentParams = new Archetype({
   documentId: {
     $type: 'string',
     $required: true
+  },
+  roles: {
+    $type: ['string'],
   }
 }).compile('DeleteDocumentParams');
 
 module.exports = ({ db }) => async function DeleteDocument(params) {
-  const { model, documentId } = new DeleteDocumentParams(params);
+  const { model, documentId, roles } = new DeleteDocumentParams(params);
 
   const Model = db.models[model];
+
+  if (roles && roles.includes('readonly')) {
+    throw new Error('Not authorized');
+  }
   if (Model == null) {
     throw new Error(`Model ${model} not found`);
   }

package/backend/actions/Model/exportQueryResults.js

@@ -24,7 +24,7 @@ const GetDocumentsParams = new Archetype({
   }
 }).compile('GetDocumentsParams');
 
-module.exports = ({ db }) => async function getDocuments(params, req, res) {
+module.exports = ({ db }) => async function exportQueryResults(params, req, res) {
   params = new GetDocumentsParams(params);
   let { filter } = params;
   const { model, propertiesToInclude } = params;
@@ -57,10 +57,10 @@ module.exports = ({ db }) => async function getDocuments(params, req, res) {
     }));
   }
   const csv = stringify(rows);
-  
+
   res.set({
     'Content-Type': 'text/csv',
     'Content-Disposition': `attachment; filename="${model.toLowerCase()}-export.csv"`,
   });
   return csv;
-};
+};

package/backend/actions/Model/getIndexes.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const Archetype = require('archetype');
+
+const GetDocumentsParams = new Archetype({
+  model: {
+    $type: 'string',
+    $required: true
+  },
+}).compile('GetDocumentsParams');
+
+module.exports = ({ db }) => async function getIndexes(params) {
+  params = new GetDocumentsParams(params);
+
+  const { model } = params;
+
+  const Model = db.models[model];
+  if (Model == null) {
+    throw new Error(`Model ${model} not found`);
+  }
+
+  const mongoDBIndexes = await Model.listIndexes();
+  const schemaIndexes = Model.schema.indexes().map(([fields, options]) => ({
+    key: fields,
+    name: Object.keys(fields).map(key => `${key}_${fields[key]}`).join("_")
+  }));
+  const diffIndexes = await Model.diffIndexes();
+  return {
+    mongoDBIndexes,
+    schemaIndexes,
+    diffIndexes
+  };
+};

package/backend/actions/Model/index.js

@@ -5,5 +5,6 @@ exports.deleteDocument = require('./deleteDocument');
 exports.exportQueryResults = require('./exportQueryResults');
 exports.getDocument = require('./getDocument');
 exports.getDocuments = require('./getDocuments');
+exports.getIndexes = require('./getIndexes');
 exports.listModels = require('./listModels');
 exports.updateDocument = require('./updateDocument');

package/backend/actions/Model/updateDocument.js

@@ -14,12 +14,18 @@ const UpdateDocumentsParams = new Archetype({
   update: {
     $type: Object,
     $required: true
+  },
+  roles: {
+    $type: ['string'],
   }
 }).compile('UpdateDocumentsParams');
 
 module.exports = ({ db }) => async function updateDocument(params) {
-  const { model, _id, update } = new UpdateDocumentsParams(params);
+  const { model, _id, update, roles } = new UpdateDocumentsParams(params);
 
+  if (roles && roles.includes('readonly')) {
+    throw new Error('Not authorized');
+  }
   const Model = db.models[model];
   if (Model == null) {
     throw new Error(`Model ${model} not found`);

package/express.js

@@ -63,6 +63,7 @@ module.exports = async function(apiUrl, conn, options) {
           if (!user || !roles) {
             throw new Error('Not authorized');
           }
+          req.params.roles = roles;
 
           next();
         })