@neohm/nestend 5.0.2 → 6.1.0

package/dist/admin/dtos/add.permission.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.permission.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.permission.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAO5E,MAAa,gBAAiB,SAAQ,+BAAa;CA8BlD;AA9BD,4CA8BC;AAvBC;IANC,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACD,IAAA,wBAAM,GAAE;IACR,IAAA,4BAAU,GAAE;;kDACI;AAUjB;IARC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAC/C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,iHAAiH;KACpH,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAChD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAMb;IAJC,IAAA,6BAAmB,GAAE;IACrB,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK"}

package/dist/admin/dtos/add.system.role.dto.d.ts

@@ -3,6 +3,9 @@ export declare class AddSystemRoleDto extends CommonDataDto {
     identifier: string;
     name: string;
     description?: string;
+    scope_id?: string;
+    priority?: number;
+    permission_ids?: string[];
     is_active?: boolean;
 }
 //# sourceMappingURL=add.system.role.dto.d.ts.map

package/dist/admin/dtos/add.system.role.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAQlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAQb,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}
+{"version":3,"file":"add.system.role.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAUlE,qBAAa,gBAAiB,SAAQ,aAAa;IAajD,UAAU,EAAE,MAAM,CAAC;IAMnB,IAAI,EAAE,MAAM,CAAC;IAQb,WAAW,CAAC,EAAE,MAAM,CAAC;IAUrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAalB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAYlB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAS1B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/admin/dtos/add.system.role.dto.js

@@ -13,6 +13,8 @@ exports.AddSystemRoleDto = void 0;
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const common_data_dto_1 = require("../../common/dtos/common.data.dto");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+const role_default_enum_1 = require("../../auth/enums/role.default.enum");
 const admin_patterns_1 = require("../validators/admin.patterns");
 class AddSystemRoleDto extends common_data_dto_1.CommonDataDto {
 }
@@ -20,7 +22,7 @@ exports.AddSystemRoleDto = AddSystemRoleDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
         example: 'org.owner',
-        description: 'Machine-readable key application code checks. Fixed once created; reserved identifiers (`global.admin`) cannot be used.',
+        description: 'Machine-readable key application code checks. Unique, and fixed once created.',
     }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
@@ -46,6 +48,41 @@ __decorate([
     (0, class_validator_1.MaxLength)(1000),
     __metadata("design:type", String)
 ], AddSystemRoleDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        format: 'uuid',
+        nullable: true,
+        description: 'The scope this role ranks within (sys_scopes). Fixed once created. Omit for an unscoped role, which only `global.admin` can grant and which covers nothing but itself.',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], AddSystemRoleDto.prototype, "scope_id", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        default: role_default_enum_1.RoleDefault.PRIORITY,
+        minimum: 1,
+        maximum: role_default_enum_1.RoleDefault.MAX_PRIORITY,
+        description: "Seniority within the scope: 1 is the most senior. A role covers the roles of its scope (and of its child scopes) with an equal or larger number; the smallest number in a scope marks its scope admins, who grant that scope's roles. Changing it on an existing role, or creating a role more senior than the scope's current top, requires the global super admin role.",
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(role_default_enum_1.RoleDefault.MAX_PRIORITY),
+    __metadata("design:type", Number)
+], AddSystemRoleDto.prototype, "priority", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: [String],
+        format: 'uuid',
+        description: "sys_permissions uuids the role carries itself; replaces the current set. Each must belong to the role's scope or one of its children. Omit to keep them.",
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
+    (0, class_validator_1.IsUUID)('all', { each: true }),
+    __metadata("design:type", Array)
+], AddSystemRoleDto.prototype, "permission_ids", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         default: true,

package/dist/admin/dtos/add.system.role.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,iEAA4E;AAO5E,MAAa,gBAAiB,SAAQ,+BAAa;CAqClD;AArCD,4CAqCC;AAxBC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,yHAAyH;KAC5H,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,iHAAiH;KACpH,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK;AASrB;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}
+{"version":3,"file":"add.system.role.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/add.system.role.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAayB;AACzB,6CAAmE;AACnE,uEAAkE;AAClE,oEAAyD;AACzD,0EAAiE;AACjE,iEAA4E;AAO5E,MAAa,gBAAiB,SAAQ,+BAAa;CAwElD;AAxED,4CAwEC;AA3DC;IAZC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,+EAA+E;KAClF,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,yBAAO,EAAC,6CAA4B,EAAE;QACrC,OAAO,EACL,iHAAiH;KACpH,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAC9C,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACF;AAQb;IANC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,sDAAsD;KAChE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK;AAUrB;IARC,IAAA,6BAAmB,EAAC;QACnB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,wKAAwK;KAC3K,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,GAAE;;kDACS;AAalB;IAXC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,+BAAW,CAAC,QAAQ;QAC7B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,+BAAW,CAAC,YAAY;QACjC,WAAW,EACT,2WAA2W;KAC9W,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,+BAAW,CAAC,YAAY,CAAC;;kDACZ;AAYlB;IAVC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDACJ;AAS1B;IAPC,IAAA,6BAAmB,EAAC;QACnB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;mDACQ"}

package/dist/admin/dtos/api.key.roles.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class ApiKeyRolesDto {
+    role_ids: string[];
+}
+//# sourceMappingURL=api.key.roles.dto.d.ts.map

package/dist/admin/dtos/api.key.roles.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.roles.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/api.key.roles.dto.ts"],"names":[],"mappings":"AAKA,qBAAa,cAAc;IAUzB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/admin/dtos/api.key.roles.dto.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyRolesDto = void 0;
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+const admin_default_enum_1 = require("../enums/admin.default.enum");
+class ApiKeyRolesDto {
+}
+exports.ApiKeyRolesDto = ApiKeyRolesDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: [String],
+        format: 'uuid',
+        description: 'sys_roles uuids; replaces the current set. Each must be an active scoped role inside a scope the key holds.',
+    }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(admin_default_enum_1.AdminLimit.MAX_ID_ARRAY),
+    (0, class_validator_1.IsUUID)('all', { each: true }),
+    __metadata("design:type", Array)
+], ApiKeyRolesDto.prototype, "role_ids", void 0);
+//# sourceMappingURL=api.key.roles.dto.js.map

package/dist/admin/dtos/api.key.roles.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.roles.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/api.key.roles.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAgE;AAChE,6CAA8C;AAC9C,oEAAyD;AAGzD,MAAa,cAAc;CAW1B;AAXD,wCAWC;AADC;IATC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,MAAM;QACd,WAAW,EACT,6GAA6G;KAChH,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,+BAAU,CAAC,YAAY,CAAC;IACrC,IAAA,wBAAM,EAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;gDACX"}

package/dist/admin/dtos/permission.list.dto.d.ts

@@ -0,0 +1,4 @@
+import { CommonListFilterDto } from '../../common/dtos/common.list.filter.dto';
+export declare class PermissionListDto extends CommonListFilterDto {
+}
+//# sourceMappingURL=permission.list.dto.d.ts.map

package/dist/admin/dtos/permission.list.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.list.dto.d.ts","sourceRoot":"","sources":["../../../src/admin/dtos/permission.list.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAG/E,qBAAa,iBAAkB,SAAQ,mBAAmB;CAAG"}

package/dist/admin/dtos/permission.list.dto.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionListDto = void 0;
+const common_list_filter_dto_1 = require("../../common/dtos/common.list.filter.dto");
+class PermissionListDto extends common_list_filter_dto_1.CommonListFilterDto {
+}
+exports.PermissionListDto = PermissionListDto;
+//# sourceMappingURL=permission.list.dto.js.map

package/dist/admin/dtos/permission.list.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.list.dto.js","sourceRoot":"","sources":["../../../src/admin/dtos/permission.list.dto.ts"],"names":[],"mappings":";;;AAAA,qFAA+E;AAG/E,MAAa,iBAAkB,SAAQ,4CAAmB;CAAG;AAA7D,8CAA6D"}

package/dist/admin/es6.classes.d.ts

@@ -1,6 +1,7 @@
 import { AdminApiKeyController } from './controllers/admin.api.key.controller';
 import { AdminEmailTemplateController } from './controllers/admin.email.template.controller';
 import { AdminPdfTemplateController } from './controllers/admin.pdf.template.controller';
+import { AdminPermissionController } from './controllers/admin.permission.controller';
 import { AdminRoleController } from './controllers/admin.role.controller';
 import { AdminScheduledTaskController } from './controllers/admin.scheduled.task.controller';
 import { AdminScopeController } from './controllers/admin.scope.controller';
@@ -18,6 +19,7 @@ import { AdminRoleListProcessor } from './libraries/admin.role.list.processor';
 import { AdminUserListProcessor } from './libraries/admin.user.list.processor';
 import { ApiKeyDataProcessor } from './libraries/api.key.data.processor';
 import { ApiKeyListProcessor } from './libraries/api.key.list.processor';
+import { ApiKeyRolesDataProcessor } from './libraries/api.key.roles.data.processor';
 import { BulkUserDataProcessor } from './libraries/bulk.user.data.processor';
 import { ClientMembershipDataProcessor } from './libraries/client.membership.data.processor';
 import { ClientUserDataProcessor } from './libraries/client.user.data.processor';
@@ -27,6 +29,8 @@ import { EmailTemplateDataProcessor } from './libraries/email.template.data.proc
 import { EmailTemplateListProcessor } from './libraries/email.template.list.processor';
 import { PdfTemplateDataProcessor } from './libraries/pdf.template.data.processor';
 import { PdfTemplateListProcessor } from './libraries/pdf.template.list.processor';
+import { PermissionDataProcessor } from './libraries/permission.data.processor';
+import { PermissionListProcessor } from './libraries/permission.list.processor';
 import { RoleListProcessor } from './libraries/role.list.processor';
 import { ScheduledTaskDataProcessor } from './libraries/scheduled.task.data.processor';
 import { ScheduledTaskDeleteProcessor } from './libraries/scheduled.task.delete.processor';
@@ -39,21 +43,22 @@ import { SystemUserListProcessor } from './libraries/system.user.list.processor'
 import { TenantDataProcessor } from './libraries/tenant.data.processor';
 import { TenantDeleteProcessor } from './libraries/tenant.delete.processor';
 import { TenantListProcessor } from './libraries/tenant.list.processor';
-import { AddAdminUserDto } from './dtos/add.admin.user.dto';
 import { AddApiKeyDto } from './dtos/add.api.key.dto';
 import { AddClientMembershipDto } from './dtos/add.client.membership.dto';
 import { AddPdfTemplateDto } from './dtos/add.pdf.template.dto';
+import { AddPermissionDto } from './dtos/add.permission.dto';
 import { ScheduleDto } from './dtos/add.scheduled.task.dto';
 import { AddScopeDto } from './dtos/add.scope.dto';
 import { AddSystemRoleDto } from './dtos/add.system.role.dto';
 import { AddTenantDto } from './dtos/add.tenant.dto';
 import { ApiKeyListDto } from './dtos/api.key.list.dto';
+import { ApiKeyRolesDto } from './dtos/api.key.roles.dto';
 import { BaseUserDto } from './dtos/base.user.dto';
 export declare const es6Classes: {
-    controllers: (typeof AdminApiKeyController | typeof AdminEmailTemplateController | typeof AdminPdfTemplateController | typeof AdminRoleController | typeof AdminScheduledTaskController | typeof AdminScopeController | typeof AdminTenantController | typeof AdminSystemUserController | typeof AdminTenantUserController | typeof AdminUserController | typeof SystemRoleController)[];
+    controllers: (typeof AdminApiKeyController | typeof AdminEmailTemplateController | typeof AdminPdfTemplateController | typeof AdminPermissionController | typeof AdminRoleController | typeof AdminScheduledTaskController | typeof AdminScopeController | typeof AdminTenantController | typeof AdminSystemUserController | typeof AdminTenantUserController | typeof AdminUserController | typeof SystemRoleController)[];
     services: readonly [typeof AdminAccessService, typeof SystemUserService, typeof TemplateService];
-    libraries: (typeof ApiKeyDataProcessor | typeof ApiKeyListProcessor | typeof EmailTemplateDataProcessor | typeof EmailTemplateListProcessor | typeof PdfTemplateDataProcessor | typeof PdfTemplateListProcessor | typeof AdminRoleListProcessor | typeof RoleListProcessor | typeof ScheduledTaskDataProcessor | typeof ScheduledTaskDeleteProcessor | typeof ScheduledTaskListProcessor | typeof ScopeDataProcessor | typeof ScopeListProcessor | typeof TenantDataProcessor | typeof TenantDeleteProcessor | typeof TenantListProcessor | typeof SystemUserDataProcessor | typeof SystemUserListProcessor | typeof BulkUserDataProcessor | typeof ClientUserDataProcessor | typeof ClientUserDeleteProcessor | typeof ClientUserListProcessor | typeof ClientMembershipDataProcessor | typeof AdminUserDataProcessor | typeof AdminUserDeleteProcessor | typeof AdminUserListProcessor | typeof SystemRoleDataProcessor)[];
-    dtos: (typeof AddApiKeyDto | typeof ApiKeyListDto | typeof AddPdfTemplateDto | typeof ScheduleDto | typeof AddScopeDto | typeof AddTenantDto | typeof BaseUserDto | typeof AddClientMembershipDto | typeof AddAdminUserDto | typeof AddSystemRoleDto)[];
+    libraries: (typeof ApiKeyDataProcessor | typeof ApiKeyListProcessor | typeof ApiKeyRolesDataProcessor | typeof EmailTemplateDataProcessor | typeof EmailTemplateListProcessor | typeof PdfTemplateDataProcessor | typeof PdfTemplateListProcessor | typeof PermissionDataProcessor | typeof PermissionListProcessor | typeof AdminRoleListProcessor | typeof RoleListProcessor | typeof ScheduledTaskDataProcessor | typeof ScheduledTaskDeleteProcessor | typeof ScheduledTaskListProcessor | typeof ScopeDataProcessor | typeof ScopeListProcessor | typeof TenantDataProcessor | typeof TenantDeleteProcessor | typeof TenantListProcessor | typeof SystemUserDataProcessor | typeof SystemUserListProcessor | typeof BulkUserDataProcessor | typeof ClientUserDataProcessor | typeof ClientUserDeleteProcessor | typeof ClientUserListProcessor | typeof ClientMembershipDataProcessor | typeof AdminUserDataProcessor | typeof AdminUserDeleteProcessor | typeof AdminUserListProcessor | typeof SystemRoleDataProcessor)[];
+    dtos: (typeof AddApiKeyDto | typeof ApiKeyListDto | typeof ApiKeyRolesDto | typeof AddPdfTemplateDto | typeof AddPermissionDto | typeof ScheduleDto | typeof AddScopeDto | typeof AddTenantDto | typeof BaseUserDto | typeof AddClientMembershipDto | typeof AddSystemRoleDto)[];
     jobs: any[];
     subscribers: any[];
 };

package/dist/admin/es6.classes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"es6.classes.d.ts","sourceRoot":"","sources":["../../src/admin/es6.classes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAG1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAIxD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOnD,eAAO,MAAM,UAAU;;;;;;;CAuEtB,CAAC"}
+{"version":3,"file":"es6.classes.d.ts","sourceRoot":"","sources":["../../src/admin/es6.classes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAG1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAI1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOnD,eAAO,MAAM,UAAU;;;;;;;CA8EtB,CAAC"}

package/dist/admin/es6.classes.js

@@ -4,6 +4,7 @@ exports.es6Classes = void 0;
 const admin_api_key_controller_1 = require("./controllers/admin.api.key.controller");
 const admin_email_template_controller_1 = require("./controllers/admin.email.template.controller");
 const admin_pdf_template_controller_1 = require("./controllers/admin.pdf.template.controller");
+const admin_permission_controller_1 = require("./controllers/admin.permission.controller");
 const admin_role_controller_1 = require("./controllers/admin.role.controller");
 const admin_scheduled_task_controller_1 = require("./controllers/admin.scheduled.task.controller");
 const admin_scope_controller_1 = require("./controllers/admin.scope.controller");
@@ -21,6 +22,7 @@ const admin_role_list_processor_1 = require("./libraries/admin.role.list.process
 const admin_user_list_processor_1 = require("./libraries/admin.user.list.processor");
 const api_key_data_processor_1 = require("./libraries/api.key.data.processor");
 const api_key_list_processor_1 = require("./libraries/api.key.list.processor");
+const api_key_roles_data_processor_1 = require("./libraries/api.key.roles.data.processor");
 const bulk_user_data_processor_1 = require("./libraries/bulk.user.data.processor");
 const client_membership_data_processor_1 = require("./libraries/client.membership.data.processor");
 const client_user_data_processor_1 = require("./libraries/client.user.data.processor");
@@ -30,6 +32,8 @@ const email_template_data_processor_1 = require("./libraries/email.template.data
 const email_template_list_processor_1 = require("./libraries/email.template.list.processor");
 const pdf_template_data_processor_1 = require("./libraries/pdf.template.data.processor");
 const pdf_template_list_processor_1 = require("./libraries/pdf.template.list.processor");
+const permission_data_processor_1 = require("./libraries/permission.data.processor");
+const permission_list_processor_1 = require("./libraries/permission.list.processor");
 const role_list_processor_1 = require("./libraries/role.list.processor");
 const scheduled_task_data_processor_1 = require("./libraries/scheduled.task.data.processor");
 const scheduled_task_delete_processor_1 = require("./libraries/scheduled.task.delete.processor");
@@ -49,6 +53,8 @@ const add_client_membership_dto_1 = require("./dtos/add.client.membership.dto");
 const add_client_user_dto_1 = require("./dtos/add.client.user.dto");
 const add_email_template_dto_1 = require("./dtos/add.email.template.dto");
 const add_pdf_template_dto_1 = require("./dtos/add.pdf.template.dto");
+const add_permission_dto_1 = require("./dtos/add.permission.dto");
+const permission_list_dto_1 = require("./dtos/permission.list.dto");
 const add_scheduled_task_dto_1 = require("./dtos/add.scheduled.task.dto");
 const add_scope_dto_1 = require("./dtos/add.scope.dto");
 const add_system_role_dto_1 = require("./dtos/add.system.role.dto");
@@ -56,6 +62,7 @@ const add_system_user_dto_1 = require("./dtos/add.system.user.dto");
 const add_tenant_dto_1 = require("./dtos/add.tenant.dto");
 const admin_user_list_dto_1 = require("./dtos/admin.user.list.dto");
 const api_key_list_dto_1 = require("./dtos/api.key.list.dto");
+const api_key_roles_dto_1 = require("./dtos/api.key.roles.dto");
 const client_user_list_dto_1 = require("./dtos/client.user.list.dto");
 const email_template_list_dto_1 = require("./dtos/email.template.list.dto");
 const pdf_template_list_dto_1 = require("./dtos/pdf.template.list.dto");
@@ -70,6 +77,7 @@ exports.es6Classes = {
         admin_api_key_controller_1.AdminApiKeyController,
         admin_email_template_controller_1.AdminEmailTemplateController,
         admin_pdf_template_controller_1.AdminPdfTemplateController,
+        admin_permission_controller_1.AdminPermissionController,
         admin_role_controller_1.AdminRoleController,
         admin_scheduled_task_controller_1.AdminScheduledTaskController,
         admin_scope_controller_1.AdminScopeController,
@@ -87,6 +95,7 @@ exports.es6Classes = {
         admin_role_list_processor_1.AdminRoleListProcessor,
         api_key_data_processor_1.ApiKeyDataProcessor,
         api_key_list_processor_1.ApiKeyListProcessor,
+        api_key_roles_data_processor_1.ApiKeyRolesDataProcessor,
         bulk_user_data_processor_1.BulkUserDataProcessor,
         client_membership_data_processor_1.ClientMembershipDataProcessor,
         client_user_data_processor_1.ClientUserDataProcessor,
@@ -96,6 +105,8 @@ exports.es6Classes = {
         email_template_list_processor_1.EmailTemplateListProcessor,
         pdf_template_data_processor_1.PdfTemplateDataProcessor,
         pdf_template_list_processor_1.PdfTemplateListProcessor,
+        permission_data_processor_1.PermissionDataProcessor,
+        permission_list_processor_1.PermissionListProcessor,
         role_list_processor_1.RoleListProcessor,
         scheduled_task_data_processor_1.ScheduledTaskDataProcessor,
         scheduled_task_delete_processor_1.ScheduledTaskDeleteProcessor,
@@ -117,6 +128,8 @@ exports.es6Classes = {
         add_client_user_dto_1.AddClientUserDto,
         add_email_template_dto_1.AddEmailTemplateDto,
         add_pdf_template_dto_1.AddPdfTemplateDto,
+        add_permission_dto_1.AddPermissionDto,
+        permission_list_dto_1.PermissionListDto,
         add_scheduled_task_dto_1.ScheduleDto,
         add_scope_dto_1.AddScopeDto,
         add_system_role_dto_1.AddSystemRoleDto,
@@ -124,6 +137,7 @@ exports.es6Classes = {
         add_tenant_dto_1.AddTenantDto,
         admin_user_list_dto_1.AdminUserListDto,
         api_key_list_dto_1.ApiKeyListDto,
+        api_key_roles_dto_1.ApiKeyRolesDto,
         base_user_dto_1.BaseUserDto,
         client_user_list_dto_1.ClientUserListDto,
         email_template_list_dto_1.EmailTemplateListDto,

package/dist/admin/es6.classes.js.map

@@ -1 +1 @@
-{"version":3,"file":"es6.classes.js","sourceRoot":"","sources":["../../src/admin/es6.classes.ts"],"names":[],"mappings":";;;AAAA,qFAA+E;AAC/E,mGAA6F;AAC7F,+FAAyF;AACzF,+EAA0E;AAC1E,mGAA6F;AAC7F,iFAA4E;AAC5E,mFAA8E;AAC9E,6FAAuF;AACvF,6FAAuF;AACvF,+EAA0E;AAC1E,iFAA4E;AAC5E,0EAAqE;AACrE,wEAAmE;AACnE,kEAA8D;AAC9D,qFAA+E;AAC/E,yFAAmF;AACnF,qFAA+E;AAC/E,qFAA+E;AAC/E,+EAAyE;AACzE,+EAAyE;AACzE,mFAA6E;AAC7E,mGAA6F;AAC7F,uFAAiF;AACjF,2FAAqF;AACrF,uFAAiF;AACjF,6FAAuF;AACvF,6FAAuF;AACvF,yFAAmF;AACnF,yFAAmF;AACnF,yEAAoE;AACpE,6FAAuF;AACvF,iGAA2F;AAC3F,6FAAuF;AACvF,2EAAsE;AACtE,2EAAsE;AACtE,uFAAiF;AACjF,uFAAiF;AACjF,uFAAiF;AACjF,6EAAwE;AACxE,iFAA4E;AAC5E,6EAAwE;AACxE,kEAA4D;AAC5D,4DAAsD;AACtD,kEAA4D;AAC5D,gFAA0E;AAC1E,oEAA8D;AAC9D,0EAAoE;AACpE,sEAAgE;AAChE,0EAA4D;AAC5D,wDAAmD;AACnD,oEAA8D;AAC9D,oEAA8D;AAC9D,0DAAqD;AACrD,oEAA8D;AAC9D,8DAAwD;AACxD,sEAAgE;AAChE,4EAAsE;AACtE,wEAAkE;AAClE,wDAAmD;AACnD,wDAAmD;AACnD,4EAAsE;AACtE,0DAAqD;AACrD,sEAAgE;AAChE,4DAAuD;AAE1C,QAAA,UAAU,GAAG;IACxB,WAAW,EAAE;QACX,gDAAqB;QACrB,8DAA4B;QAC5B,0DAA0B;QAC1B,2CAAmB;QACnB,8DAA4B;QAC5B,6CAAoB;QACpB,+CAAqB;QACrB,2CAAmB;QACnB,wDAAyB;QACzB,wDAAyB;QACzB,6CAAoB;KACrB;IACD,QAAQ,EAAE,CAAC,yCAAkB,EAAE,uCAAiB,EAAE,kCAAe,CAAU;IAC3E,SAAS,EAAE;QACT,kDAAsB;QACtB,sDAAwB;QACxB,kDAAsB;QACtB,kDAAsB;QACtB,4CAAmB;QACnB,4CAAmB;QACnB,gDAAqB;QACrB,gEAA6B;QAC7B,oDAAuB;QACvB,wDAAyB;QACzB,oDAAuB;QACvB,0DAA0B;QAC1B,0DAA0B;QAC1B,sDAAwB;QACxB,sDAAwB;QACxB,uCAAiB;QACjB,0DAA0B;QAC1B,8DAA4B;QAC5B,0DAA0B;QAC1B,yCAAkB;QAClB,yCAAkB;QAClB,oDAAuB;QACvB,oDAAuB;QACvB,oDAAuB;QACvB,2CAAmB;QACnB,+CAAqB;QACrB,2CAAmB;KACpB;IACD,IAAI,EAAE;QACJ,oCAAe;QACf,8BAAY;QACZ,oCAAe;QACf,kDAAsB;QACtB,sCAAgB;QAChB,4CAAmB;QACnB,wCAAiB;QACjB,oCAAW;QACX,2BAAW;QACX,sCAAgB;QAChB,sCAAgB;QAChB,6BAAY;QACZ,sCAAgB;QAChB,gCAAa;QACb,2BAAW;QACX,wCAAiB;QACjB,8CAAoB;QACpB,0CAAkB;QAClB,2BAAW;QACX,8CAAoB;QACpB,6BAAY;QACZ,wCAAiB;QACjB,+BAAa;KACd;IACD,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;CAChB,CAAC"}
+{"version":3,"file":"es6.classes.js","sourceRoot":"","sources":["../../src/admin/es6.classes.ts"],"names":[],"mappings":";;;AAAA,qFAA+E;AAC/E,mGAA6F;AAC7F,+FAAyF;AACzF,2FAAsF;AACtF,+EAA0E;AAC1E,mGAA6F;AAC7F,iFAA4E;AAC5E,mFAA8E;AAC9E,6FAAuF;AACvF,6FAAuF;AACvF,+EAA0E;AAC1E,iFAA4E;AAC5E,0EAAqE;AACrE,wEAAmE;AACnE,kEAA8D;AAC9D,qFAA+E;AAC/E,yFAAmF;AACnF,qFAA+E;AAC/E,qFAA+E;AAC/E,+EAAyE;AACzE,+EAAyE;AACzE,2FAAoF;AACpF,mFAA6E;AAC7E,mGAA6F;AAC7F,uFAAiF;AACjF,2FAAqF;AACrF,uFAAiF;AACjF,6FAAuF;AACvF,6FAAuF;AACvF,yFAAmF;AACnF,yFAAmF;AACnF,qFAAgF;AAChF,qFAAgF;AAChF,yEAAoE;AACpE,6FAAuF;AACvF,iGAA2F;AAC3F,6FAAuF;AACvF,2EAAsE;AACtE,2EAAsE;AACtE,uFAAiF;AACjF,uFAAiF;AACjF,uFAAiF;AACjF,6EAAwE;AACxE,iFAA4E;AAC5E,6EAAwE;AACxE,kEAA4D;AAC5D,4DAAsD;AACtD,kEAA4D;AAC5D,gFAA0E;AAC1E,oEAA8D;AAC9D,0EAAoE;AACpE,sEAAgE;AAChE,kEAA6D;AAC7D,oEAA+D;AAC/D,0EAA4D;AAC5D,wDAAmD;AACnD,oEAA8D;AAC9D,oEAA8D;AAC9D,0DAAqD;AACrD,oEAA8D;AAC9D,8DAAwD;AACxD,gEAA0D;AAC1D,sEAAgE;AAChE,4EAAsE;AACtE,wEAAkE;AAClE,wDAAmD;AACnD,wDAAmD;AACnD,4EAAsE;AACtE,0DAAqD;AACrD,sEAAgE;AAChE,4DAAuD;AAE1C,QAAA,UAAU,GAAG;IACxB,WAAW,EAAE;QACX,gDAAqB;QACrB,8DAA4B;QAC5B,0DAA0B;QAC1B,uDAAyB;QACzB,2CAAmB;QACnB,8DAA4B;QAC5B,6CAAoB;QACpB,+CAAqB;QACrB,2CAAmB;QACnB,wDAAyB;QACzB,wDAAyB;QACzB,6CAAoB;KACrB;IACD,QAAQ,EAAE,CAAC,yCAAkB,EAAE,uCAAiB,EAAE,kCAAe,CAAU;IAC3E,SAAS,EAAE;QACT,kDAAsB;QACtB,sDAAwB;QACxB,kDAAsB;QACtB,kDAAsB;QACtB,4CAAmB;QACnB,4CAAmB;QACnB,uDAAwB;QACxB,gDAAqB;QACrB,gEAA6B;QAC7B,oDAAuB;QACvB,wDAAyB;QACzB,oDAAuB;QACvB,0DAA0B;QAC1B,0DAA0B;QAC1B,sDAAwB;QACxB,sDAAwB;QACxB,mDAAuB;QACvB,mDAAuB;QACvB,uCAAiB;QACjB,0DAA0B;QAC1B,8DAA4B;QAC5B,0DAA0B;QAC1B,yCAAkB;QAClB,yCAAkB;QAClB,oDAAuB;QACvB,oDAAuB;QACvB,oDAAuB;QACvB,2CAAmB;QACnB,+CAAqB;QACrB,2CAAmB;KACpB;IACD,IAAI,EAAE;QACJ,oCAAe;QACf,8BAAY;QACZ,oCAAe;QACf,kDAAsB;QACtB,sCAAgB;QAChB,4CAAmB;QACnB,wCAAiB;QACjB,qCAAgB;QAChB,uCAAiB;QACjB,oCAAW;QACX,2BAAW;QACX,sCAAgB;QAChB,sCAAgB;QAChB,6BAAY;QACZ,sCAAgB;QAChB,gCAAa;QACb,kCAAc;QACd,2BAAW;QACX,wCAAiB;QACjB,8CAAoB;QACpB,0CAAkB;QAClB,2BAAW;QACX,8CAAoB;QACpB,6BAAY;QACZ,wCAAiB;QACjB,+BAAa;KACd;IACD,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;CAChB,CAAC"}

package/dist/admin/libraries/api.key.data.processor.d.ts

@@ -14,6 +14,7 @@ export declare class ApiKeyDataProcessor extends CommonDataProcessor {
     process(payload: AddApiKeyDto): Promise<IssuedApiKey>;
     private validate;
     private validateScopes;
+    private validateRoles;
     private set;
 }
 //# sourceMappingURL=api.key.data.processor.d.ts.map

package/dist/admin/libraries/api.key.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAIjE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAQpD,qBAAa,mBAAoB,SAAQ,mBAAmB;IAKxD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/B,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAChC,OAAO,CAAC,SAAS,CAAO;gBAGL,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,YAAY;IAKvC,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YAM7C,QAAQ;YAcR,cAAc;YAwBd,GAAG;CA6BlB"}
+{"version":3,"file":"api.key.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAIjE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAWpD,qBAAa,mBAAoB,SAAQ,mBAAmB;IAKxD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/B,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAChC,OAAO,CAAC,SAAS,CAAO;gBAGL,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,YAAY;IAKvC,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YAM7C,QAAQ;YAiBR,cAAc;YAyBd,aAAa;YAwBb,GAAG;CA+BlB"}

package/dist/admin/libraries/api.key.data.processor.js

@@ -10,6 +10,8 @@ const entity_constants_1 = require("../../constants/entity.constants");
 const tenant_entity_1 = require("../../tenant/entities/tenant.entity");
 const admin_audit_1 = require("../utilities/admin.audit");
 const admin_policy_1 = require("../utilities/admin.policy");
+const api_key_role_policy_1 = require("../utilities/api.key.role.policy");
+const api_key_default_enum_1 = require("../../auth/enums/api.key.default.enum");
 class ApiKeyDataProcessor extends common_data_processor_1.CommonDataProcessor {
     constructor(actor, apiKeyService, scopeService) {
         super();
@@ -31,8 +33,10 @@ class ApiKeyDataProcessor extends common_data_processor_1.CommonDataProcessor {
             this.expiresAt = expiry.expiresAt;
         if (!(await tenant_entity_1.TenantEntity.existsBy({ id: body.tenant_id, is_active: true })))
             this.setColumnError('tenant_id', 'Tenant not found or inactive');
-        else
+        else {
             await this.validateScopes();
+            await this.validateRoles();
+        }
         this.raiseExceptionOnValidationFailure();
     }
     async validateScopes() {
@@ -51,11 +55,28 @@ class ApiKeyDataProcessor extends common_data_processor_1.CommonDataProcessor {
                 this.setColumnError('scope_ids', `Scope '${scopes.find((scope) => scope.id === scopeId)?.identifier ?? scopeId}' is not enabled for this tenant`);
         }
     }
+    async validateRoles() {
+        const roleIds = this.payload.role_ids ?? [];
+        if (!roleIds.length)
+            return;
+        const granted = await scope_entity_1.ScopeEntity.find({
+            where: { id: (0, typeorm_1.In)([...new Set(this.payload.scope_ids ?? [])]) },
+        });
+        const tenantScopeIds = await this.scopeService.tenantScopeIds(this.payload.tenant_id);
+        const reach = granted.some((scope) => scope.identifier === String(api_key_default_enum_1.ApiKeyDefault.WILDCARD_SCOPE))
+            ? tenantScopeIds
+            : new Set((await this.scopeService.effectiveScopes(granted))
+                .map((scope) => scope.id)
+                .filter((scopeId) => tenantScopeIds.has(scopeId)));
+        for (const error of await api_key_role_policy_1.ApiKeyRolePolicy.errors(roleIds, reach))
+            this.setColumnError('role_ids', error);
+    }
     async set() {
         const body = this.payload;
         const { rawKey, apiKey } = await this.apiKeyService.generateApiKey(body.name, {
             tenantId: body.tenant_id,
             scopeIds: body.scope_ids,
+            roleIds: body.role_ids,
             createdBy: this.actor.id,
             expiresAt: this.expiresAt,
         });
@@ -69,6 +90,7 @@ class ApiKeyDataProcessor extends common_data_processor_1.CommonDataProcessor {
                 key_prefix: apiKey.key_prefix,
                 tenant_id: body.tenant_id,
                 scope_ids: body.scope_ids ?? [],
+                role_ids: body.role_ids ?? [],
                 expires_at: this.expiresAt.toISOString(),
             },
         });

package/dist/admin/libraries/api.key.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAA6B;AAC7B,wFAAmF;AAEnF,uEAAkE;AAClE,mEAA+D;AAG/D,4EAAmE;AACnE,uEAAuE;AACvE,uEAAmE;AAGnE,0DAAsD;AACtD,4DAAwD;AAMxD,MAAa,mBAAoB,SAAQ,2CAAmB;IAI1D,YACmB,KAAsB,EACtB,aAA4B,EAC5B,YAA0B;QAE3C,KAAK,EAAE,CAAC;QAJS,UAAK,GAAL,KAAK,CAAiB;QACtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAc;IAG7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,MAAM,GAAG,0BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;YAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAiB,CAAC;QAE/C,IAAI,CAAC,CAAC,MAAM,4BAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;;YAC9D,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEjC,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAE7B,MAAM,MAAM,GAAG,MAAM,0BAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CACpD,IAAI,CAAC,OAAO,CAAC,SAAS,CACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,OAAO,aAAa,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,IAAI,CAAC,cAAc,CACjB,WAAW,EACX,UAAU,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,UAAU,IAAI,OAAO,kCAAkC,CAChH,CAAC;QACN,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAChE,IAAI,CAAC,IAAI,EACT;YACE,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CACF,CAAC;QAEF,MAAM,wBAAU,CAAC,MAAM,CAAC,6BAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,sCAAmB,CAAC,MAAM;YACtC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,+BAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;CACF;AArFD,kDAqFC"}
+{"version":3,"file":"api.key.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAA6B;AAC7B,wFAAmF;AAEnF,uEAAkE;AAClE,mEAA+D;AAG/D,4EAAmE;AACnE,uEAAuE;AACvE,uEAAmE;AAGnE,0DAAsD;AACtD,4DAAwD;AACxD,0EAAoE;AACpE,gFAAsE;AAOtE,MAAa,mBAAoB,SAAQ,2CAAmB;IAI1D,YACmB,KAAsB,EACtB,aAA4B,EAC5B,YAA0B;QAE3C,KAAK,EAAE,CAAC;QAJS,UAAK,GAAL,KAAK,CAAiB;QACtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAc;IAG7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,MAAM,GAAG,0BAAW,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;YAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAEvC,IAAI,CAAC,CAAC,MAAM,4BAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;aAC9D,CAAC;YACJ,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAE7B,MAAM,MAAM,GAAG,MAAM,0BAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CACpD,IAAI,CAAC,OAAO,CAAC,SAAS,CACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,OAAO,aAAa,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,IAAI,CAAC,cAAc,CACjB,WAAW,EACX,UAAU,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,UAAU,IAAI,OAAO,kCAAkC,CAChH,CAAC;QACN,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,MAAM,OAAO,GAAG,MAAM,0BAAW,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAC3D,IAAI,CAAC,OAAO,CAAC,SAAS,CACvB,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,oCAAa,CAAC,cAAc,CAAC,CACrE;YACC,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,IAAI,GAAG,CACL,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;iBAC/C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;iBACxB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CACpD,CAAC;QAEN,KAAK,MAAM,KAAK,IAAI,MAAM,sCAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;YAC/D,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,GAAG;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAE1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAChE,IAAI,CAAC,IAAI,EACT;YACE,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CACF,CAAC;QAEF,MAAM,wBAAU,CAAC,MAAM,CAAC,6BAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE;YAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,sCAAmB,CAAC,MAAM;YACtC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,+BAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;CACF;AAnHD,kDAmHC"}

package/dist/admin/libraries/api.key.list.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.list.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.list.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAWzD,qBAAa,mBAAoB,SAAQ,mBAAmB;IA6D9C,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;IA5DnE,SAAS,CAAC,MAAM,EAAE,sBAAsB,CA0DtC;gBAE6B,iBAAiB,EAAE,iBAAiB;IAI7D,OAAO,CAAC,OAAO,EAAE,aAAa;CAIrC"}
+{"version":3,"file":"api.key.list.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.list.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAWzD,qBAAa,mBAAoB,SAAQ,mBAAmB;IA8E9C,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;IA7EnE,SAAS,CAAC,MAAM,EAAE,sBAAsB,CA2EtC;gBAE6B,iBAAiB,EAAE,iBAAiB;IAI7D,OAAO,CAAC,OAAO,EAAE,aAAa;CAIrC"}

package/dist/admin/libraries/api.key.list.processor.js

@@ -22,7 +22,19 @@ class ApiKeyListProcessor extends common_list_processor_1.CommonListProcessor {
         from sys_api_scopes aks
         join sys_scopes s on s.id = aks.scope_id and s.deleted_at is null
         where aks.api_key_id = k.id and aks.deleted_at is null
-      ) sc on true`,
+      ) sc on true
+      left join lateral (
+        select coalesce(
+          json_agg(
+            json_build_object('id', r.id, 'identifier', r.identifier, 'name', r.name)
+            order by r.identifier
+          ),
+          '[]'::json
+        ) granted
+        from sys_api_key_roles akr
+        join sys_roles r on r.id = akr.role_id and r.deleted_at is null
+        where akr.api_key_id = k.id and akr.deleted_at is null
+      ) rl on true`,
             columns: [
                 { key: 'k.id', identifier: 'id', type: filter_value_type_enum_1.FilterValueTypeEnum.UUID },
                 { key: 'k.name', identifier: 'name', searchable: true },
@@ -43,6 +55,11 @@ class ApiKeyListProcessor extends common_list_processor_1.CommonListProcessor {
                     identifier: 'scopes',
                     type: filter_value_type_enum_1.FilterValueTypeEnum.JSON,
                 },
+                {
+                    key: 'rl.granted',
+                    identifier: 'roles',
+                    type: filter_value_type_enum_1.FilterValueTypeEnum.JSON,
+                },
                 {
                     key: 'k.expires_at',
                     identifier: 'expires_at',

package/dist/admin/libraries/api.key.list.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.key.list.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.list.processor.ts"],"names":[],"mappings":";;;AAAA,gFAAuE;AACvE,sFAAgF;AAChF,wFAAmF;AAcnF,MAAa,mBAAoB,SAAQ,2CAAmB;IA6D1D,YAA+B,iBAAoC;QACjE,KAAK,EAAE,CAAC;QADqB,sBAAiB,GAAjB,iBAAiB,CAAmB;QA5DzD,WAAM,GAA2B;YACzC,KAAK,EAAE;;;;;;;;;;;;;mBAaQ;YACf,OAAO,EAAE;gBACP,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,4CAAmB,CAAC,IAAI,EAAE;gBACjE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;gBACvD,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE;gBACnE;oBACE,GAAG,EAAE,aAAa;oBAClB,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,4CAAmB,CAAC,OAAO;iBAClC;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;gBAC9D;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,QAAQ;oBACpB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,gBAAgB;oBACrB,UAAU,EAAE,cAAc;oBAC1B,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;aACF;YACD,UAAU,EAAE,CAAC,sBAAsB,CAAC;YACpC,WAAW,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,mCAAa,CAAC,IAAI,EAAE;SACpE,CAAC;IAIF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAsB;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF;AArED,kDAqEC"}
+{"version":3,"file":"api.key.list.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.list.processor.ts"],"names":[],"mappings":";;;AAAA,gFAAuE;AACvE,sFAAgF;AAChF,wFAAmF;AAcnF,MAAa,mBAAoB,SAAQ,2CAAmB;IA8E1D,YAA+B,iBAAoC;QACjE,KAAK,EAAE,CAAC;QADqB,sBAAiB,GAAjB,iBAAiB,CAAmB;QA7EzD,WAAM,GAA2B;YACzC,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;mBAyBQ;YACf,OAAO,EAAE;gBACP,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,4CAAmB,CAAC,IAAI,EAAE;gBACjE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;gBACvD,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE;gBACnE;oBACE,GAAG,EAAE,aAAa;oBAClB,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,4CAAmB,CAAC,OAAO;iBAClC;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;gBAC9D;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,QAAQ;oBACpB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD;oBACE,GAAG,EAAE,YAAY;oBACjB,UAAU,EAAE,OAAO;oBACnB,IAAI,EAAE,4CAAmB,CAAC,IAAI;iBAC/B;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,gBAAgB;oBACrB,UAAU,EAAE,cAAc;oBAC1B,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;gBACD;oBACE,GAAG,EAAE,cAAc;oBACnB,UAAU,EAAE,YAAY;oBACxB,IAAI,EAAE,4CAAmB,CAAC,QAAQ;iBACnC;aACF;YACD,UAAU,EAAE,CAAC,sBAAsB,CAAC;YACpC,WAAW,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,mCAAa,CAAC,IAAI,EAAE;SACpE,CAAC;IAIF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAsB;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF;AAtFD,kDAsFC"}

package/dist/admin/libraries/api.key.roles.data.processor.d.ts

@@ -0,0 +1,15 @@
+import { AdminUserEntity } from '../../auth/entities/admin.user.entity';
+import { ApiKeyService } from '../../auth/services/api.key.service';
+import { CommonDataProcessor } from '../../common/libraries/common.data.processor';
+import { ApiKeyRolesDto } from '../dtos/api.key.roles.dto';
+export declare class ApiKeyRolesDataProcessor extends CommonDataProcessor {
+    private readonly actor;
+    private readonly apiKeyService;
+    protected payload: ApiKeyRolesDto;
+    private apiKey;
+    constructor(actor: AdminUserEntity, apiKeyService: ApiKeyService);
+    process(apiKeyId: string, payload: ApiKeyRolesDto): Promise<string[]>;
+    private validate;
+    private set;
+}
+//# sourceMappingURL=api.key.roles.data.processor.d.ts.map

package/dist/admin/libraries/api.key.roles.data.processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.roles.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.roles.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGnF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAK3D,qBAAa,wBAAyB,SAAQ,mBAAmB;IAK7D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;IAClC,OAAO,CAAC,MAAM,CAAe;gBAGV,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,aAAa;IAKzC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAM7D,QAAQ;YAcR,GAAG;CAkBlB"}

package/dist/admin/libraries/api.key.roles.data.processor.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyRolesDataProcessor = void 0;
+const api_key_entity_1 = require("../../auth/entities/api.key.entity");
+const role_catalogue_1 = require("../../auth/utilities/role.catalogue");
+const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
+const common_data_processor_1 = require("../../common/libraries/common.data.processor");
+const entity_constants_1 = require("../../constants/entity.constants");
+const not_found_exception_1 = require("../../global/exceptions/not.found.exception");
+const admin_audit_1 = require("../utilities/admin.audit");
+const api_key_role_policy_1 = require("../utilities/api.key.role.policy");
+class ApiKeyRolesDataProcessor extends common_data_processor_1.CommonDataProcessor {
+    constructor(actor, apiKeyService) {
+        super();
+        this.actor = actor;
+        this.apiKeyService = apiKeyService;
+    }
+    async process(apiKeyId, payload) {
+        this.payload = payload;
+        await this.validate(apiKeyId);
+        return this.set();
+    }
+    async validate(apiKeyId) {
+        const apiKey = await api_key_entity_1.ApiKeyEntity.findOne({ where: { id: apiKeyId } });
+        if (!apiKey)
+            throw new not_found_exception_1.NotFoundException('No API key exists for this id');
+        this.apiKey = apiKey;
+        const reach = await this.apiKeyService.scopeReach(apiKey);
+        for (const error of await api_key_role_policy_1.ApiKeyRolePolicy.errors(this.payload.role_ids, reach))
+            this.setColumnError('role_ids', error);
+        this.raiseExceptionOnValidationFailure();
+    }
+    async set() {
+        const manager = api_key_entity_1.ApiKeyEntity.getRepository().manager;
+        const before = await role_catalogue_1.RoleCatalogue.keyRoleIds(manager, this.apiKey.id);
+        const roleIds = await this.apiKeyService.setRoles(this.apiKey.id, this.payload.role_ids, this.actor.id);
+        await admin_audit_1.AdminAudit.record(manager, {
+            actor: this.actor,
+            sourceType: entity_constants_1.baseEntityConstants.apiKey,
+            sourceId: this.apiKey.id,
+            action: audit_action_enum_1.AuditAction.UPDATE,
+            oldValue: { role_ids: before.sort() },
+            newValue: { role_ids: [...roleIds].sort() },
+        });
+        return roleIds;
+    }
+}
+exports.ApiKeyRolesDataProcessor = ApiKeyRolesDataProcessor;
+//# sourceMappingURL=api.key.roles.data.processor.js.map

package/dist/admin/libraries/api.key.roles.data.processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.roles.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/api.key.roles.data.processor.ts"],"names":[],"mappings":";;;AAAA,uEAAkE;AAGlE,wEAAoE;AACpE,4EAAmE;AACnE,wFAAmF;AACnF,uEAAuE;AACvE,qFAAgF;AAEhF,0DAAsD;AACtD,0EAAoE;AAGpE,MAAa,wBAAyB,SAAQ,2CAAmB;IAI/D,YACmB,KAAsB,EACtB,aAA4B;QAE7C,KAAK,EAAE,CAAC;QAHS,UAAK,GAAL,KAAK,CAAiB;QACtB,kBAAa,GAAb,aAAa,CAAe;IAG/C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,OAAuB;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,MAAM,6BAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,uCAAiB,CAAC,+BAA+B,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,sCAAgB,CAAC,MAAM,CAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,KAAK,CACN;YACC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,GAAG;QACf,MAAM,OAAO,GAAG,6BAAY,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,8BAAa,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EACd,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,IAAI,CAAC,KAAK,CAAC,EAAE,CACd,CAAC;QACF,MAAM,wBAAU,CAAC,MAAM,CAAC,OAAO,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,sCAAmB,CAAC,MAAM;YACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YACxB,MAAM,EAAE,+BAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE;YACrC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;SAC5C,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAjDD,4DAiDC"}

package/dist/admin/libraries/client.membership.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.membership.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/client.membership.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAI1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAU3E,qBAAa,6BAA8B,SAAQ,mBAAmB;IAKlE,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAC1C,OAAO,CAAC,KAAK,CAA0B;gBAGpB,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE,aAAa;IAKzC,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAM3D,QAAQ;YA6BR,aAAa;YAiBb,MAAM;CAsBrB"}
+{"version":3,"file":"client.membership.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/client.membership.data.processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAK1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAU3E,qBAAa,6BAA8B,SAAQ,mBAAmB;IAKlE,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAC1C,OAAO,CAAC,KAAK,CAA0B;gBAGpB,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE,aAAa;IAKzC,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAM3D,QAAQ;YAiCR,aAAa;YAiBb,MAAM;CAsBrB"}

package/dist/admin/libraries/client.membership.data.processor.js

@@ -8,6 +8,7 @@ const tenant_user_entity_1 = require("../../auth/entities/tenant.user.entity");
 const user_entity_1 = require("../../auth/entities/user.entity");
 const user_type_enum_1 = require("../../auth/enums/user.type.enum");
 const tenant_access_1 = require("../../auth/utilities/tenant.access");
+const role_catalogue_1 = require("../../auth/utilities/role.catalogue");
 const audit_action_enum_1 = require("../../common/enums/audit.action.enum");
 const entity_constants_1 = require("../../constants/entity.constants");
 const admin_access_service_1 = require("../services/admin.access.service");
@@ -38,8 +39,10 @@ class ClientMembershipDataProcessor extends common_data_processor_1.CommonDataPr
             this.setColumnError('tenant_id', 'Already a member of this tenant');
         await this.validateRoles();
         this.raiseExceptionOnValidationFailure();
+        const hierarchy = await role_catalogue_1.RoleCatalogue.load(tenant_user_entity_1.TenantUserEntity.getRepository().manager);
         admin_access_service_1.AdminAccessService.assertHolds(this.access, tenant_role_policy_1.TenantRolePolicy.tenantUserSaveRole({
-            grantsPrivileged: tenant_role_policy_1.TenantRolePolicy.newPrivilegedGrants(this.roles).length > 0,
+            grantsPrivileged: tenant_role_policy_1.TenantRolePolicy.newPrivilegedGrants(this.roles, hierarchy).length >
+                0,
             emailChanged: false,
             holdsPrivileged: false,
         }), 'Granting a privileged tenant role');

package/dist/admin/libraries/client.membership.data.processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.membership.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/client.membership.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAA6B;AAC7B,wFAAmF;AACnF,+EAA0E;AAC1E,+EAA0E;AAC1E,iEAA6D;AAC7D,oEAA2D;AAC3D,sEAAkE;AAElE,4EAAmE;AACnE,uEAAuE;AAGvE,2EAAsE;AACtE,0DAAsD;AACtD,wEAAmE;AAOnE,MAAa,6BAA8B,SAAQ,2CAAmB;IAIpE,YACmB,MAAgC,EAChC,aAA4B;QAE7C,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAA0B;QAChC,kBAAa,GAAb,aAAa,CAAe;QAJvC,UAAK,GAAuB,EAAE,CAAC;IAOvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5C,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAQ,CAAC,WAAW,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YACP,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;QAEtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;aAC9D,IAAI,MAAM,qCAAgB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;QAEtE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAEzC,yCAAkB,CAAC,WAAW,CAC5B,IAAI,CAAC,MAAM,EACX,qCAAgB,CAAC,kBAAkB,CAAC;YAClC,gBAAgB,EACd,qCAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAC7D,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;SACvB,CAAC,EACF,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,IAAI,CAAC,KAAK,GAAG,MAAM,qCAAgB,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBACpB,IAAI,CAAC,cAAc,CACjB,UAAU,EACV,SAAS,MAAM,yBAAyB,CACzC,CAAC;IACR,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEtD,MAAM,qCAAgB,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvE,MAAM,4BAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,qCAAgB,EAAE;gBAC7D,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;YACH,MAAM,wBAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACvB,UAAU,EAAE,sCAAmB,CAAC,UAAU;gBAC1C,QAAQ,EAAE,UAAU,CAAC,EAAE;gBACvB,MAAM,EAAE,+BAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,qCAAgB,CAAC,aAAa,CAAC;YACpC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7B,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;CACF;AArFD,sEAqFC"}
+{"version":3,"file":"client.membership.data.processor.js","sourceRoot":"","sources":["../../../src/admin/libraries/client.membership.data.processor.ts"],"names":[],"mappings":";;;AAAA,qCAA6B;AAC7B,wFAAmF;AACnF,+EAA0E;AAC1E,+EAA0E;AAC1E,iEAA6D;AAC7D,oEAA2D;AAC3D,sEAAkE;AAClE,wEAAoE;AAEpE,4EAAmE;AACnE,uEAAuE;AAGvE,2EAAsE;AACtE,0DAAsD;AACtD,wEAAmE;AAOnE,MAAa,6BAA8B,SAAQ,2CAAmB;IAIpE,YACmB,MAAgC,EAChC,aAA4B;QAE7C,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAA0B;QAChC,kBAAa,GAAb,aAAa,CAAe;QAJvC,UAAK,GAAuB,EAAE,CAAC;IAOvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5C,MAAM,IAAI,GAAG,MAAM,wBAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAQ,CAAC,WAAW,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YACP,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;QAEtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;aAC9D,IAAI,MAAM,qCAAgB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;QAEtE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAEzC,MAAM,SAAS,GAAG,MAAM,8BAAa,CAAC,IAAI,CACxC,qCAAgB,CAAC,aAAa,EAAE,CAAC,OAAO,CACzC,CAAC;QACF,yCAAkB,CAAC,WAAW,CAC5B,IAAI,CAAC,MAAM,EACX,qCAAgB,CAAC,kBAAkB,CAAC;YAClC,gBAAgB,EACd,qCAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM;gBAClE,CAAC;YACH,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;SACvB,CAAC,EACF,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAE5B,IAAI,CAAC,KAAK,GAAG,MAAM,qCAAgB,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBACpB,IAAI,CAAC,cAAc,CACjB,UAAU,EACV,SAAS,MAAM,yBAAyB,CACzC,CAAC;IACR,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEtD,MAAM,qCAAgB,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvE,MAAM,4BAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,qCAAgB,EAAE;gBAC7D,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;YACH,MAAM,wBAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACvB,UAAU,EAAE,sCAAmB,CAAC,UAAU;gBAC1C,QAAQ,EAAE,UAAU,CAAC,EAAE;gBACvB,MAAM,EAAE,+BAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,qCAAgB,CAAC,aAAa,CAAC;YACpC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7B,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;CACF;AAzFD,sEAyFC"}

package/dist/admin/libraries/client.user.data.processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/client.user.data.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AAMpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAwBvE,qBAAa,uBAAwB,SAAQ,iBAAiB;IAQ1D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAT7C,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;IAEnE,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAA2B;gBAGxB,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE,aAAa,EAC5B,0BAA0B,EAAE,0BAA0B;IAKnE,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;YAM/C,QAAQ;YA6BR,cAAc;YAQd,kBAAkB;YAYlB,YAAY;YAmBZ,SAAS;YA6BT,IAAI;YAKJ,MAAM;YAmCN,MAAM;YAuCN,WAAW;IAQzB,OAAO,CAAC,KAAK;YAuBC,UAAU;CAiBzB"}
+{"version":3,"file":"client.user.data.processor.d.ts","sourceRoot":"","sources":["../../../src/admin/libraries/client.user.data.processor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AAOpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAwBvE,qBAAa,uBAAwB,SAAQ,iBAAiB;IAQ1D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAT7C,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;IAEnE,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAA2B;gBAGxB,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE,aAAa,EAC5B,0BAA0B,EAAE,0BAA0B;IAKnE,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;YAM/C,QAAQ;YA6BR,cAAc;YAQd,kBAAkB;YAYlB,YAAY;YAmBZ,SAAS;YAiCT,IAAI;YAKJ,MAAM;YAmCN,MAAM;YAuCN,WAAW;IAQzB,OAAO,CAAC,KAAK;YAuBC,UAAU;CAiBzB"}