@neohm/nestend 3.1.3 → 3.1.5

package/dist/admin/controllers/admin.tenant.user.controller.js

@@ -0,0 +1,132 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminTenantUserController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const user_entity_1 = require("../../auth/entities/user.entity");
+const user_type_enum_1 = require("../../auth/enums/user.type.enum");
+const common_params_dto_1 = require("../../common/dtos/common.params.dto");
+const add_bulk_users_dto_1 = require("../dtos/add.bulk.users.dto");
+const add_client_user_dto_1 = require("../dtos/add.client.user.dto");
+const client_user_list_dto_1 = require("../dtos/client.user.list.dto");
+const bulk_user_data_processor_1 = require("../libraries/bulk.user.data.processor");
+const client_user_data_processor_1 = require("../libraries/client.user.data.processor");
+const client_user_delete_processor_1 = require("../libraries/client.user.delete.processor");
+const client_user_list_processor_1 = require("../libraries/client.user.list.processor");
+const admin_access_service_1 = require("../services/admin.access.service");
+const tenant_service_1 = require("../../tenant/services/tenant.service");
+const email_notification_service_1 = require("../../notification/services/email.notification.service");
+const system_property_service_1 = require("../../common/services/system.property.service");
+const sql_service_1 = require("../../common/services/sql.service");
+let AdminTenantUserController = class AdminTenantUserController {
+    constructor(adminAccessService, tenantService, emailNotificationService, systemPropertyService, sqlService) {
+        this.adminAccessService = adminAccessService;
+        this.tenantService = tenantService;
+        this.emailNotificationService = emailNotificationService;
+        this.systemPropertyService = systemPropertyService;
+        this.sqlService = sqlService;
+    }
+    async clientUserDetail({ id }) {
+        await this.adminAccessService.validateContentReader();
+        const user = await user_entity_1.UserEntity.findOne({
+            where: { id, user_type: user_type_enum_1.UserType.TENANT_USER },
+            relations: { tenant: true },
+        });
+        if (!user)
+            throw new common_1.NotFoundException('No client user exists for this id');
+        return user;
+    }
+    async addClientUser(dto) {
+        await this.adminAccessService.validateAdmin();
+        return new client_user_data_processor_1.ClientUserDataProcessor(this.tenantService, this.emailNotificationService, this.systemPropertyService).process(dto);
+    }
+    async addClientUsersBulk(dto) {
+        await this.adminAccessService.validateAdmin();
+        return new bulk_user_data_processor_1.BulkUserDataProcessor(this.tenantService).process(dto);
+    }
+    async listClientUsers(dto) {
+        await this.adminAccessService.validateContentReader();
+        return new client_user_list_processor_1.ClientUserListProcessor(this.sqlService).process(dto);
+    }
+    async removeClientUser(id) {
+        const { user } = await this.adminAccessService.validateAdmin();
+        return new client_user_delete_processor_1.ClientUserDeleteProcessor(user).process(id);
+    }
+};
+exports.AdminTenantUserController = AdminTenantUserController;
+__decorate([
+    (0, common_1.Get)(':id'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'One client (tenant-scoped) user, in full.',
+        description: "Carries the user's tenant name alongside everything the listing leaves out. Requires the global super admin role.",
+    }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
+    __metadata("design:returntype", Promise)
+], AdminTenantUserController.prototype, "clientUserDetail", null);
+__decorate([
+    (0, common_1.Post)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Register a single client (tenant-scoped) user.',
+        description: 'Requires the global super admin role.',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [add_client_user_dto_1.AddClientUserDto]),
+    __metadata("design:returntype", Promise)
+], AdminTenantUserController.prototype, "addClientUser", null);
+__decorate([
+    (0, common_1.Post)('bulk'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Bulk-register client users under one tenant.',
+        description: 'Requires the global super admin role.',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [add_bulk_users_dto_1.AddBulkUsersDto]),
+    __metadata("design:returntype", Promise)
+], AdminTenantUserController.prototype, "addClientUsersBulk", null);
+__decorate([
+    (0, common_1.Post)('list'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List, search and filter client (tenant-scoped) users.',
+        description: 'Scoped to tenant users and joined to their tenant, so rows carry `tenant_name` alongside `tenant_id`. Requires the global super admin role.',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [client_user_list_dto_1.ClientUserListDto]),
+    __metadata("design:returntype", Promise)
+], AdminTenantUserController.prototype, "listClientUsers", null);
+__decorate([
+    (0, common_1.Post)(':id/delete'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete a client user.',
+        description: "Soft delete, with the user's sessions and refresh tokens revoked in the same transaction so tokens already issued stop working immediately. Requires the global admin role.",
+    }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], AdminTenantUserController.prototype, "removeClientUser", null);
+exports.AdminTenantUserController = AdminTenantUserController = __decorate([
+    (0, common_1.Controller)('api/admin/tenant-users'),
+    __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
+        tenant_service_1.TenantService,
+        email_notification_service_1.EmailNotificationService,
+        system_property_service_1.SystemPropertyService,
+        sql_service_1.SqlService])
+], AdminTenantUserController);
+//# sourceMappingURL=admin.tenant.user.controller.js.map

package/dist/admin/controllers/admin.tenant.user.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.tenant.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.tenant.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6CAA+C;AAC/C,iEAA6D;AAC7D,oEAA2D;AAC3D,2EAAsE;AACtE,mEAA6D;AAC7D,qEAA+D;AAC/D,uEAAiE;AACjE,oFAA8E;AAC9E,wFAAkF;AAClF,4FAAsF;AACtF,wFAAkF;AAClF,2EAAsE;AACtE,yEAAqE;AACrE,uGAAkG;AAClG,2FAAsF;AACtF,mEAA+D;AAGxD,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YACqB,kBAAsC,EACtC,aAA4B,EAC5B,wBAAkD,EAClD,qBAA4C,EAC5C,UAAsB;QAJtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;IACxC,CAAC;IAQE,AAAN,KAAK,CAAC,gBAAgB,CAAU,EAAE,EAAE,EAAmB;QACrD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QAEtD,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAQ,CAAC,WAAW,EAAE;YAC9C,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,mCAAmC,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC;IACd,CAAC;IAOK,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,oDAAuB,CAChC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,wBAAwB,EAC7B,IAAI,CAAC,qBAAqB,CAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAOK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,gDAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAAS,GAAsB;QAClD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CAA6B,EAAU;QAC3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAxEY,8DAAyB;AAe9B;IANL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,mHAAmH;KACtH,CAAC;IACsB,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;iEAUtD;AAOK;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;8DAOhD;AAOK;IALL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;mEAGpD;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,6IAA6I;KAChJ,CAAC;IACqB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;gEAGnD;AAQK;IANL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,6KAA6K;KAChL,CAAC;IACsB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;iEAGjD;oCAvEU,yBAAyB;IADrC,IAAA,mBAAU,EAAC,wBAAwB,CAAC;qCAGM,yCAAkB;QACvB,8BAAa;QACF,qDAAwB;QAC3B,+CAAqB;QAChC,wBAAU;GANhC,yBAAyB,CAwErC"}

package/dist/admin/controllers/admin.user.controller.d.ts

@@ -1,35 +1,15 @@
 import { SqlService } from '../../common/services/sql.service';
-import { TenantService } from '../../tenant/services/tenant.service';
 import { AdminAccessService } from '../services/admin.access.service';
-import { AdminDetailService } from '../services/admin.detail.service';
-import { CommonParamsDto } from '../../common/dtos/common.params.dto';
-import { AddClientUserDto } from '../dtos/add.client.user.dto';
-import { AddBulkUsersDto } from '../dtos/add.bulk.users.dto';
 import { AddAdminUserDto } from '../dtos/add.admin.user.dto';
-import { ClientUserListDto } from '../dtos/client.user.list.dto';
 import { AdminUserListDto } from '../dtos/admin.user.list.dto';
-import { EmailNotificationService } from '../../notification/services/email.notification.service';
-import { SystemPropertyService } from '../../common/services/system.property.service';
+import { AdminUserEntity } from '../../auth/entities/admin.user.entity';
+import { CommonParamsDto } from '../../common/dtos/common.params.dto';
 export declare class AdminUserController {
     private readonly adminAccessService;
-    private readonly adminDetailService;
-    private readonly tenantService;
     private readonly sqlService;
-    private readonly emailNotificationService;
-    private readonly systemPropertyService;
-    constructor(adminAccessService: AdminAccessService, adminDetailService: AdminDetailService, tenantService: TenantService, sqlService: SqlService, emailNotificationService: EmailNotificationService, systemPropertyService: SystemPropertyService);
-    addClientUser(dto: AddClientUserDto): Promise<import("../..").UserEntity>;
-    addClientUsersBulk(dto: AddBulkUsersDto): Promise<import("../types/admin.types").BulkUserResult>;
-    listClientUsers(dto: ClientUserListDto): Promise<{
-        records: import("../..").SqlRow[];
-        total: number;
-        page: number;
-        limit: number;
-        total_pages: number;
-    }>;
-    clientUserDetail({ id }: CommonParamsDto): Promise<import("../services/admin.detail.service").ClientUserDetail>;
-    removeClientUser(id: string): Promise<import("../..").DeleteResult>;
-    addAdminUser(dto: AddAdminUserDto): Promise<import("../..").AdminUserEntity>;
+    constructor(adminAccessService: AdminAccessService, sqlService: SqlService);
+    detail({ id }: CommonParamsDto): Promise<AdminUserEntity>;
+    addAdminUser(dto: AddAdminUserDto): Promise<AdminUserEntity>;
     listAdminUsers(dto: AdminUserListDto): Promise<{
         records: import("../..").SqlRow[];
         total: number;
@@ -37,6 +17,6 @@ export declare class AdminUserController {
         limit: number;
         total_pages: number;
     }>;
-    removeAdminUser(id: string): Promise<import("../..").DeleteResult>;
+    removeAdminUser(id: string): Promise<import("../types/admin.types").DeleteResult>;
 }
 //# sourceMappingURL=admin.user.controller.d.ts.map

package/dist/admin/controllers/admin.user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAQtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,qBAGa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBALrB,kBAAkB,EAAE,kBAAkB,EACtC,kBAAkB,EAAE,kBAAkB,EACtC,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,UAAU,EACtB,wBAAwB,EAAE,wBAAwB,EAClD,qBAAqB,EAAE,qBAAqB;IAQzD,aAAa,CAAS,GAAG,EAAE,gBAAgB;IAc3C,kBAAkB,CAAS,GAAG,EAAE,eAAe;IAW/C,eAAe,CAAS,GAAG,EAAE,iBAAiB;;;;;;;IAW9C,gBAAgB,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAWjD,gBAAgB,CAA6B,EAAE,EAAE,MAAM;IAUvD,YAAY,CAAS,GAAG,EAAE,eAAe;IAWzC,cAAc,CAAS,GAAG,EAAE,gBAAgB;;;;;;;IAW5C,eAAe,CAA6B,EAAE,EAAE,MAAM;CAI7D"}
+{"version":3,"file":"admin.user.controller.d.ts","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAItE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE,qBAGa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,kBAAkB,EAAE,kBAAkB,EACtC,UAAU,EAAE,UAAU;IAQnC,MAAM,CAAU,EAAE,EAAE,EAAE,EAAE,eAAe;IAUvC,YAAY,CAAS,GAAG,EAAE,eAAe;IAWzC,cAAc,CAAS,GAAG,EAAE,gBAAgB;;;;;;;IAW5C,eAAe,CAA6B,EAAE,EAAE,MAAM;CAI7D"}

package/dist/admin/controllers/admin.user.controller.js

@@ -16,127 +16,53 @@ exports.AdminUserController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
 const sql_service_1 = require("../../common/services/sql.service");
-const tenant_service_1 = require("../../tenant/services/tenant.service");
 const admin_access_service_1 = require("../services/admin.access.service");
-const admin_detail_service_1 = require("../services/admin.detail.service");
-const common_params_dto_1 = require("../../common/dtos/common.params.dto");
-const client_user_data_processor_1 = require("../libraries/client.user.data.processor");
-const client_user_delete_processor_1 = require("../libraries/client.user.delete.processor");
-const client_user_list_processor_1 = require("../libraries/client.user.list.processor");
-const bulk_user_data_processor_1 = require("../libraries/bulk.user.data.processor");
 const admin_user_data_processor_1 = require("../libraries/admin.user.data.processor");
 const admin_user_delete_processor_1 = require("../libraries/admin.user.delete.processor");
 const admin_user_list_processor_1 = require("../libraries/admin.user.list.processor");
-const add_client_user_dto_1 = require("../dtos/add.client.user.dto");
-const add_bulk_users_dto_1 = require("../dtos/add.bulk.users.dto");
 const add_admin_user_dto_1 = require("../dtos/add.admin.user.dto");
-const client_user_list_dto_1 = require("../dtos/client.user.list.dto");
 const admin_user_list_dto_1 = require("../dtos/admin.user.list.dto");
-const email_notification_service_1 = require("../../notification/services/email.notification.service");
-const system_property_service_1 = require("../../common/services/system.property.service");
+const admin_user_entity_1 = require("../../auth/entities/admin.user.entity");
+const common_params_dto_1 = require("../../common/dtos/common.params.dto");
 let AdminUserController = class AdminUserController {
-    constructor(adminAccessService, adminDetailService, tenantService, sqlService, emailNotificationService, systemPropertyService) {
+    constructor(adminAccessService, sqlService) {
         this.adminAccessService = adminAccessService;
-        this.adminDetailService = adminDetailService;
-        this.tenantService = tenantService;
         this.sqlService = sqlService;
-        this.emailNotificationService = emailNotificationService;
-        this.systemPropertyService = systemPropertyService;
-    }
-    async addClientUser(dto) {
-        await this.adminAccessService.validateSuperAdmin();
-        return new client_user_data_processor_1.ClientUserDataProcessor(this.tenantService, this.emailNotificationService, this.systemPropertyService).process(dto);
-    }
-    async addClientUsersBulk(dto) {
-        await this.adminAccessService.validateSuperAdmin();
-        return new bulk_user_data_processor_1.BulkUserDataProcessor(this.tenantService).process(dto);
-    }
-    async listClientUsers(dto) {
-        await this.adminAccessService.validateSuperAdmin();
-        return new client_user_list_processor_1.ClientUserListProcessor(this.sqlService).process(dto);
     }
-    async clientUserDetail({ id }) {
-        await this.adminAccessService.validateSuperAdmin();
-        return this.adminDetailService.clientUser(id);
-    }
-    async removeClientUser(id) {
-        const { user } = await this.adminAccessService.validateSuperAdmin();
-        return new client_user_delete_processor_1.ClientUserDeleteProcessor(user).process(id);
+    async detail({ id }) {
+        await this.adminAccessService.validateContentReader();
+        return admin_user_entity_1.AdminUserEntity.findOne({ where: { id } });
     }
     async addAdminUser(dto) {
-        const { user } = await this.adminAccessService.validateAdmin();
+        const { user } = await this.adminAccessService.validateSuperAdmin();
         return new admin_user_data_processor_1.AdminUserDataProcessor(user).process(dto);
     }
     async listAdminUsers(dto) {
-        await this.adminAccessService.validateAdmin();
+        await this.adminAccessService.validateContentReader();
         return new admin_user_list_processor_1.AdminUserListProcessor(this.sqlService).process(dto);
     }
     async removeAdminUser(id) {
-        const { user } = await this.adminAccessService.validateAdmin();
+        const { user } = await this.adminAccessService.validateSuperAdmin();
         return new admin_user_delete_processor_1.AdminUserDeleteProcessor(user).process(id);
     }
 };
 exports.AdminUserController = AdminUserController;
 __decorate([
-    (0, common_1.Post)('clients'),
-    (0, swagger_1.ApiOperation)({
-        summary: 'Register a single client (tenant-scoped) user.',
-        description: 'Requires the global super admin role.',
-    }),
-    __param(0, (0, common_1.Body)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [add_client_user_dto_1.AddClientUserDto]),
-    __metadata("design:returntype", Promise)
-], AdminUserController.prototype, "addClientUser", null);
-__decorate([
-    (0, common_1.Post)('clients/bulk'),
-    (0, swagger_1.ApiOperation)({
-        summary: 'Bulk-register client users under one tenant.',
-        description: 'Requires the global super admin role.',
-    }),
-    __param(0, (0, common_1.Body)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [add_bulk_users_dto_1.AddBulkUsersDto]),
-    __metadata("design:returntype", Promise)
-], AdminUserController.prototype, "addClientUsersBulk", null);
-__decorate([
-    (0, common_1.Post)('clients/list'),
+    (0, common_1.Get)(':id'),
     (0, swagger_1.ApiOperation)({
-        summary: 'List, search and filter client (tenant-scoped) users.',
-        description: 'Scoped to tenant users and joined to their tenant, so rows carry `tenant_name` alongside `tenant_id`. Requires the global super admin role.',
-    }),
-    __param(0, (0, common_1.Body)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [client_user_list_dto_1.ClientUserListDto]),
-    __metadata("design:returntype", Promise)
-], AdminUserController.prototype, "listClientUsers", null);
-__decorate([
-    (0, common_1.Get)('clients/:id'),
-    (0, swagger_1.ApiOperation)({
-        summary: 'One client (tenant-scoped) user, in full.',
-        description: "Carries the user's tenant name alongside everything the listing leaves out. Requires the global super admin role.",
+        summary: `Get admin user's details`,
+        description: `Requires at least global content reader role`,
     }),
     __param(0, (0, common_1.Param)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [common_params_dto_1.CommonParamsDto]),
     __metadata("design:returntype", Promise)
-], AdminUserController.prototype, "clientUserDetail", null);
-__decorate([
-    (0, common_1.Post)('clients/:id/delete'),
-    (0, swagger_1.ApiOperation)({
-        summary: 'Delete a client user.',
-        description: "Soft delete, with the user's sessions and refresh tokens revoked in the same transaction so tokens already issued stop working immediately. Requires the global super admin role.",
-    }),
-    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String]),
-    __metadata("design:returntype", Promise)
-], AdminUserController.prototype, "removeClientUser", null);
+], AdminUserController.prototype, "detail", null);
 __decorate([
-    (0, common_1.Post)('admins'),
+    (0, common_1.Post)(),
     (0, swagger_1.ApiOperation)({
-        summary: 'Create a new global admin user.',
-        description: 'Requires at least the global admin role.',
+        summary: 'Create or update global admin user.',
+        description: 'Requires at least the global super admin role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -144,10 +70,10 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], AdminUserController.prototype, "addAdminUser", null);
 __decorate([
-    (0, common_1.Post)('admins/list'),
+    (0, common_1.Post)('list'),
     (0, swagger_1.ApiOperation)({
         summary: 'List, search and filter back-office admin users.',
-        description: 'The column allowlist never includes `password`, so it cannot leak here. Requires at least the global admin role.',
+        description: 'The column allowlist never includes `password`, so it cannot leak here. Requires at least the global content reader role.',
     }),
     __param(0, (0, common_1.Body)()),
     __metadata("design:type", Function),
@@ -155,7 +81,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], AdminUserController.prototype, "listAdminUsers", null);
 __decorate([
-    (0, common_1.Post)('admins/:id/delete'),
+    (0, common_1.Post)(':id/delete'),
     (0, swagger_1.ApiOperation)({
         summary: 'Delete a back-office admin user.',
         description: 'Soft delete, with sessions and refresh tokens revoked. An admin cannot delete their own account, and the last remaining super admin cannot be deleted — either would leave the back office unreachable. Role grants are kept, so restoring the row restores the access it had. Requires at least the global admin role.',
@@ -170,10 +96,6 @@ exports.AdminUserController = AdminUserController = __decorate([
     (0, swagger_1.ApiBearerAuth)(),
     (0, common_1.Controller)('api/admin/users'),
     __metadata("design:paramtypes", [admin_access_service_1.AdminAccessService,
-        admin_detail_service_1.AdminDetailService,
-        tenant_service_1.TenantService,
-        sql_service_1.SqlService,
-        email_notification_service_1.EmailNotificationService,
-        system_property_service_1.SystemPropertyService])
+        sql_service_1.SqlService])
 ], AdminUserController);
 //# sourceMappingURL=admin.user.controller.js.map

package/dist/admin/controllers/admin.user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,6CAAuE;AACvE,mEAA+D;AAC/D,yEAAqE;AACrE,2EAAsE;AACtE,2EAAsE;AACtE,2EAAsE;AACtE,wFAAkF;AAClF,4FAAsF;AACtF,wFAAkF;AAClF,oFAA8E;AAC9E,sFAAgF;AAChF,0FAAoF;AACpF,sFAAgF;AAChF,qEAA+D;AAC/D,mEAA6D;AAC7D,mEAA6D;AAC7D,uEAAiE;AACjE,qEAA+D;AAC/D,uGAAkG;AAClG,2FAAsF;AAK/E,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,kBAAsC,EACtC,aAA4B,EAC5B,UAAsB,EACtB,wBAAkD,EAClD,qBAA4C;QAL5C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,0BAAqB,GAArB,qBAAqB,CAAuB;IAC5D,CAAC;IAOE,AAAN,KAAK,CAAC,aAAa,CAAS,GAAqB;QAC/C,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,oDAAuB,CAChC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,wBAAwB,EAC7B,IAAI,CAAC,qBAAqB,CAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAOK,AAAN,KAAK,CAAC,kBAAkB,CAAS,GAAoB;QACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,gDAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAAS,GAAsB;QAClD,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CAAU,EAAE,EAAE,EAAmB;QACrD,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAQK,AAAN,KAAK,CAAC,gBAAgB,CAA6B,EAAU;QAC3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,wDAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,cAAc,CAAS,GAAqB;QAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAA6B,EAAU;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AAlGY,kDAAmB;AAexB;IALL,IAAA,aAAI,EAAC,SAAS,CAAC;IACf,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACmB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;wDAOhD;AAOK;IALL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACwB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;6DAGpD;AAQK;IANL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACT,6IAA6I;KAChJ,CAAC;IACqB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,wCAAiB;;0DAGnD;AAQK;IANL,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2CAA2C;QACpD,WAAW,EACT,mHAAmH;KACtH,CAAC;IACsB,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;2DAGtD;AAQK;IANL,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACT,mLAAmL;KACtL,CAAC;IACsB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;2DAGjD;AAOK;IALL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;AAQK;IANL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,kHAAkH;KACrH,CAAC;IACoB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;yDAGjD;AAQK;IANL,IAAA,aAAI,EAAC,mBAAmB,CAAC;IACzB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,yTAAyT;KAC5T,CAAC;IACqB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAGhD;8BAjGU,mBAAmB;IAH/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,iBAAiB,CAAC;qCAGW,yCAAkB;QAClB,yCAAkB;QACvB,8BAAa;QAChB,wBAAU;QACI,qDAAwB;QAC3B,+CAAqB;GAPpD,mBAAmB,CAkG/B"}
+{"version":3,"file":"admin.user.controller.js","sourceRoot":"","sources":["../../../src/admin/controllers/admin.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,6CAAuE;AACvE,mEAA+D;AAC/D,2EAAsE;AACtE,sFAAgF;AAChF,0FAAoF;AACpF,sFAAgF;AAChF,mEAA6D;AAC7D,qEAA+D;AAC/D,6EAAwE;AACxE,2EAAsE;AAK/D,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAAsC,EACtC,UAAsB;QADtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,eAAU,GAAV,UAAU,CAAY;IACtC,CAAC;IAOE,AAAN,KAAK,CAAC,MAAM,CAAU,EAAE,EAAE,EAAmB;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,mCAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CAAS,GAAoB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAQK,AAAN,KAAK,CAAC,cAAc,CAAS,GAAqB;QAChD,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;QACtD,OAAO,IAAI,kDAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAQK,AAAN,KAAK,CAAC,eAAe,CAA6B,EAAU;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,sDAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AA/CY,kDAAmB;AAWxB;IALL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,8CAA8C;KAC5D,CAAC;IACY,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;iDAG5C;AAOK;IALL,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EAAE,gDAAgD;KAC9D,CAAC;IACkB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,oCAAe;;uDAG9C;AAQK;IANL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,2HAA2H;KAC9H,CAAC;IACoB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,sCAAgB;;yDAGjD;AAQK;IANL,IAAA,aAAI,EAAC,YAAY,CAAC;IAClB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,yTAAyT;KAC5T,CAAC;IACqB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;0DAGhD;8BA9CU,mBAAmB;IAH/B,IAAA,iBAAO,EAAC,eAAe,CAAC;IACxB,IAAA,uBAAa,GAAE;IACf,IAAA,mBAAU,EAAC,iBAAiB,CAAC;qCAGW,yCAAkB;QAC1B,wBAAU;GAH9B,mBAAmB,CA+C/B"}

package/dist/admin/dtos/add.admin.role.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class AddAdminRoleDto {
+    admin_role_id: string;
+}
+//# sourceMappingURL=add.admin.role.dto.d.ts.map

package/dist/admin/dtos/add.admin.role.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.admin.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.role.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,eAAe;IAG1B,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/admin/dtos/add.admin.role.dto.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddAdminRoleDto = void 0;
+const class_validator_1 = require("class-validator");
+class AddAdminRoleDto {
+}
+exports.AddAdminRoleDto = AddAdminRoleDto;
+__decorate([
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], AddAdminRoleDto.prototype, "admin_role_id", void 0);
+//# sourceMappingURL=add.admin.role.dto.js.map

package/dist/admin/dtos/add.admin.role.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.admin.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAqD;AAErD,MAAa,eAAe;CAI3B;AAJD,0CAIC;AADC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;sDACa"}

package/dist/admin/dtos/add.admin.user.dto.d.ts

@@ -3,8 +3,7 @@ export declare class AddAdminUserDto extends CommonPayloadDto {
     name: string;
     email: string;
     username: string;
-    password: string;
+    password?: string;
     role_ids: string[];
-    attributes?: Record<string, any>;
 }
 //# sourceMappingURL=add.admin.user.dto.d.ts.map

package/dist/admin/dtos/add.admin.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.admin.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAGxE,qBAAa,eAAgB,SAAQ,gBAAgB;IAInD,IAAI,EAAE,MAAM,CAAC;IAKb,KAAK,EAAE,MAAM,CAAC;IAKd,QAAQ,EAAE,MAAM,CAAC;IAMjB,QAAQ,EAAE,MAAM,CAAC;IAUjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IAKnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC"}
+{"version":3,"file":"add.admin.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAGxE,qBAAa,eAAgB,SAAQ,gBAAgB;IAInD,IAAI,EAAE,MAAM,CAAC;IAKb,KAAK,EAAE,MAAM,CAAC;IAKd,QAAQ,EAAE,MAAM,CAAC;IAOjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAUlB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/admin/dtos/add.admin.user.dto.js

@@ -36,6 +36,7 @@ __decorate([
 ], AddAdminUserDto.prototype, "username", void 0);
 __decorate([
     (0, swagger_1.ApiProperty)({ example: 'S3curePass!', minLength: 8 }),
+    (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.MinLength)(8),
     (0, class_validator_1.MaxLength)(72),
@@ -52,10 +53,4 @@ __decorate([
     (0, class_validator_1.IsUUID)('all', { each: true }),
     __metadata("design:type", Array)
 ], AddAdminUserDto.prototype, "role_ids", void 0);
-__decorate([
-    (0, swagger_1.ApiPropertyOptional)({ type: 'object', additionalProperties: true }),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsObject)(),
-    __metadata("design:type", Object)
-], AddAdminUserDto.prototype, "attributes", void 0);
 //# sourceMappingURL=add.admin.user.dto.js.map

package/dist/admin/dtos/add.admin.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.admin.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,6CAAmE;AACnE,6EAAwE;AAGxE,MAAa,eAAgB,SAAQ,qCAAgB;CAoCpD;AApCD,0CAoCC;AAhCC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACF;AAKb;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACD;AAKd;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;iDACE;AAMjB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACG;AAUjB;IARC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gDAAgD;KAC9D,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iDACX;AAKnB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;mDACsB"}
+{"version":3,"file":"add.admin.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.admin.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,6CAA8C;AAC9C,6EAAwE;AAGxE,MAAa,eAAgB,SAAQ,qCAAgB;CAgCpD;AAhCD,0CAgCC;AA5BC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACF;AAKb;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACD;AAKd;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;iDACE;AAOjB;IALC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACI;AAUlB;IARC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gDAAgD;KAC9D,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iDACX"}

package/dist/admin/dtos/add.client.user.dto.d.ts

@@ -1,5 +1,6 @@
 import { BaseUserDto } from './base.user.dto';
 export declare class AddClientUserDto extends BaseUserDto {
     tenant_id: string;
+    role_ids: string[];
 }
 //# sourceMappingURL=add.client.user.dto.d.ts.map

package/dist/admin/dtos/add.client.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,qBAAa,gBAAiB,SAAQ,WAAW;IAI/C,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"add.client.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,qBAAa,gBAAiB,SAAQ,WAAW;IAI/C,SAAS,EAAE,MAAM,CAAC;IAWlB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/admin/dtos/add.client.user.dto.js

@@ -22,4 +22,16 @@ __decorate([
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
 ], AddClientUserDto.prototype, "tenant_id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: [String],
+        format: 'uuid',
+        description: 'sys_roles uuids, roles to be granted to a client user',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.IsUUID)('all', { each: true }),
+    __metadata("design:type", Array)
+], AddClientUserDto.prototype, "role_ids", void 0);
 //# sourceMappingURL=add.client.user.dto.js.map

package/dist/admin/dtos/add.client.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.client.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAqD;AACrD,6CAA8C;AAC9C,mDAA8C;AAG9C,MAAa,gBAAiB,SAAQ,2BAAW;CAKhD;AALD,4CAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;mDACK"}
+{"version":3,"file":"add.client.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.client.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAMyB;AACzB,6CAA8C;AAC9C,mDAA8C;AAG9C,MAAa,gBAAiB,SAAQ,2BAAW;CAgBhD;AAhBD,4CAgBC;AAZC;IAHC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3E,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;mDACK;AAWlB;IATC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uDAAuD;KACrE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;kDACX"}

package/dist/admin/dtos/add.user.role.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class AddUserRoleDto {
+    role_id: string;
+}
+//# sourceMappingURL=add.user.role.dto.d.ts.map

package/dist/admin/dtos/add.user.role.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.user.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.user.role.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,cAAc;IAGzB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/admin/dtos/add.user.role.dto.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddUserRoleDto = void 0;
+const class_validator_1 = require("class-validator");
+class AddUserRoleDto {
+}
+exports.AddUserRoleDto = AddUserRoleDto;
+__decorate([
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], AddUserRoleDto.prototype, "role_id", void 0);
+//# sourceMappingURL=add.user.role.dto.js.map

package/dist/admin/dtos/add.user.role.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.user.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.user.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAqD;AAErD,MAAa,cAAc;CAI1B;AAJD,wCAIC;AADC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;+CACO"}

package/dist/admin/dtos/base.user.dto.d.ts

@@ -7,6 +7,5 @@ export declare class BaseUserDto extends CommonPayloadDto {
     contact_code?: string;
     contact?: string;
     active?: boolean;
-    attributes?: Record<string, any>;
 }
 //# sourceMappingURL=base.user.dto.d.ts.map

package/dist/admin/dtos/base.user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAQxE,qBAAa,WAAY,SAAQ,gBAAgB;IAI/C,SAAS,EAAE,MAAM,CAAC;IAKlB,KAAK,EAAE,MAAM,CAAC;IAMd,QAAQ,EAAE,MAAM,CAAC;IAMjB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAKjB,MAAM,CAAC,EAAE,OAAO,CAAC;IAKjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC"}
+{"version":3,"file":"base.user.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAQxE,qBAAa,WAAY,SAAQ,gBAAgB;IAI/C,SAAS,EAAE,MAAM,CAAC;IAKlB,KAAK,EAAE,MAAM,CAAC;IAMd,QAAQ,EAAE,MAAM,CAAC;IAMjB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,OAAO,CAAC,EAAE,MAAM,CAAC;IAKjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}

package/dist/admin/dtos/base.user.dto.js

@@ -62,10 +62,4 @@ __decorate([
     (0, class_validator_1.IsBoolean)(),
     __metadata("design:type", Boolean)
 ], BaseUserDto.prototype, "active", void 0);
-__decorate([
-    (0, swagger_1.ApiPropertyOptional)({ type: 'object', additionalProperties: true }),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsObject)(),
-    __metadata("design:type", Object)
-], BaseUserDto.prototype, "attributes", void 0);
 //# sourceMappingURL=base.user.dto.js.map

package/dist/admin/dtos/base.user.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAQyB;AACzB,6CAAmE;AACnE,6EAAwE;AAQxE,MAAa,WAAY,SAAQ,qCAAgB;CA4ChD;AA5CD,kCA4CC;AAxCC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAKlB;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACzC,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAMd;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;6CACG;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;4CACE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACQ;AAMtB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;4CACG;AAKjB;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;2CACK;AAKjB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+CACsB"}
+{"version":3,"file":"base.user.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/base.user.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAQyB;AACzB,6CAAmE;AACnE,6EAAwE;AAQxE,MAAa,WAAY,SAAQ,qCAAgB;CAuChD;AAvCD,kCAuCC;AAnCC;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACpC,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACG;AAKlB;IAHC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACzC,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;;0CACD;AAMd;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,CAAC,CAAC;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;6CACG;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;4CACE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;iDACQ;AAMtB;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC9C,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;;4CACG;AAKjB;IAHC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;2CACK"}

package/dist/admin/es6.classes.d.ts

@@ -1,9 +1,9 @@
 import { AdminRoleController } from './controllers/admin.role.controller';
 import { AdminScheduledTaskController } from './controllers/admin.scheduled.task.controller';
 import { AdminTenantController } from './controllers/admin.tenant.controller';
+import { AdminTenantUserController } from './controllers/admin.tenant.user.controller';
 import { AdminUserController } from './controllers/admin.user.controller';
 import { AdminAccessService } from './services/admin.access.service';
-import { AdminDetailService } from './services/admin.detail.service';
 import { AdminUserDataProcessor } from './libraries/admin.user.data.processor';
 import { AdminUserDeleteProcessor } from './libraries/admin.user.delete.processor';
 import { AdminUserListProcessor } from './libraries/admin.user.list.processor';
@@ -24,9 +24,9 @@ import { AddTenantDto } from './dtos/add.tenant.dto';
 import { BaseUserDto } from './dtos/base.user.dto';
 import { RoleListDto } from './dtos/role.list.dto';
 export declare const es6Classes: {
-    controllers: (typeof AdminRoleController | typeof AdminScheduledTaskController | typeof AdminTenantController | typeof AdminUserController)[];
-    services: readonly [typeof AdminAccessService, typeof AdminDetailService];
-    libraries: (typeof RoleListProcessor | typeof AdminRoleListProcessor | typeof ScheduledTaskDataProcessor | typeof ScheduledTaskDeleteProcessor | typeof ScheduledTaskListProcessor | typeof TenantDataProcessor | typeof TenantDeleteProcessor | typeof TenantListProcessor | typeof ClientUserDataProcessor | typeof ClientUserDeleteProcessor | typeof ClientUserListProcessor | typeof BulkUserDataProcessor | typeof AdminUserDataProcessor | typeof AdminUserDeleteProcessor | typeof AdminUserListProcessor)[];
+    controllers: (typeof AdminRoleController | typeof AdminScheduledTaskController | typeof AdminTenantController | typeof AdminTenantUserController | typeof AdminUserController)[];
+    services: readonly [typeof AdminAccessService];
+    libraries: (typeof RoleListProcessor | typeof AdminRoleListProcessor | typeof ScheduledTaskDataProcessor | typeof ScheduledTaskDeleteProcessor | typeof ScheduledTaskListProcessor | typeof TenantDataProcessor | typeof TenantDeleteProcessor | typeof TenantListProcessor | typeof BulkUserDataProcessor | typeof ClientUserDataProcessor | typeof ClientUserDeleteProcessor | typeof ClientUserListProcessor | typeof AdminUserDataProcessor | typeof AdminUserDeleteProcessor | typeof AdminUserListProcessor)[];
     dtos: (typeof RoleListDto | typeof ScheduleDto | typeof AddTenantDto | typeof BaseUserDto | typeof AddAdminUserDto)[];
     jobs: any[];
     subscribers: any[];