@nest-boot/row-level-security 7.0.0 → 7.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/enums/row-level-security-role.enum.d.ts +7 -0
- package/dist/enums/row-level-security-role.enum.js +12 -0
- package/dist/enums/row-level-security-role.enum.js.map +1 -0
- package/dist/index.d.ts +3 -2
- package/dist/index.js +3 -2
- package/dist/index.js.map +1 -1
- package/dist/index.spec.js +6 -14
- package/dist/index.spec.js.map +1 -1
- package/dist/interfaces/index.d.ts +0 -1
- package/dist/interfaces/index.js +0 -1
- package/dist/interfaces/index.js.map +1 -1
- package/dist/interfaces/policy-options.interface.d.ts +2 -2
- package/dist/interfaces/policy-sql-options.interface.d.ts +2 -2
- package/dist/row-level-security-driver.d.ts +15 -0
- package/dist/row-level-security-driver.js +136 -0
- package/dist/row-level-security-driver.js.map +1 -0
- package/dist/row-level-security-driver.spec.js +267 -0
- package/dist/row-level-security-driver.spec.js.map +1 -0
- package/dist/row-level-security-migration-generator.d.ts +1 -0
- package/dist/row-level-security-migration-generator.js +39 -8
- package/dist/row-level-security-migration-generator.js.map +1 -1
- package/dist/row-level-security-migration-generator.spec.js +181 -10
- package/dist/row-level-security-migration-generator.spec.js.map +1 -1
- package/dist/row-level-security-migration.d.ts +2 -4
- package/dist/row-level-security-migration.js +9 -7
- package/dist/row-level-security-migration.js.map +1 -1
- package/dist/row-level-security-migration.spec.js +7 -16
- package/dist/row-level-security-migration.spec.js.map +1 -1
- package/dist/row-level-security.d.ts +29 -0
- package/dist/row-level-security.js +69 -0
- package/dist/row-level-security.js.map +1 -0
- package/dist/row-level-security.spec.js +52 -0
- package/dist/row-level-security.spec.js.map +1 -0
- package/dist/tsconfig.build.tsbuildinfo +1 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.d.ts +1 -1
- package/dist/utils/create-policy-bootstrap-sql-statements.js +1 -7
- package/dist/utils/create-policy-bootstrap-sql-statements.js.map +1 -1
- package/dist/utils/create-policy-privilege-down-sql-statements.d.ts +8 -0
- package/dist/utils/create-policy-privilege-down-sql-statements.js +93 -0
- package/dist/utils/create-policy-privilege-down-sql-statements.js.map +1 -0
- package/dist/utils/create-policy-role-sql-statements.d.ts +6 -0
- package/dist/utils/create-policy-role-sql-statements.js +48 -0
- package/dist/utils/create-policy-role-sql-statements.js.map +1 -0
- package/dist/utils/create-policy-up-sql-statements.js +8 -2
- package/dist/utils/create-policy-up-sql-statements.js.map +1 -1
- package/dist/utils/create-row-level-security-transaction-setup.d.ts +20 -0
- package/dist/utils/create-row-level-security-transaction-setup.js +53 -0
- package/dist/utils/create-row-level-security-transaction-setup.js.map +1 -0
- package/dist/utils/index.d.ts +2 -3
- package/dist/utils/index.js +2 -3
- package/dist/utils/index.js.map +1 -1
- package/dist/utils/policy-migration-sql.spec.js +125 -7
- package/dist/utils/policy-migration-sql.spec.js.map +1 -1
- package/package.json +4 -4
- package/dist/interfaces/row-level-security-options.interface.d.ts +0 -18
- package/dist/interfaces/row-level-security-options.interface.js +0 -3
- package/dist/interfaces/row-level-security-options.interface.js.map +0 -1
- package/dist/row-level-security-context.d.ts +0 -14
- package/dist/row-level-security-context.js +0 -38
- package/dist/row-level-security-context.js.map +0 -1
- package/dist/row-level-security-context.spec.js +0 -29
- package/dist/row-level-security-context.spec.js.map +0 -1
- package/dist/row-level-security-entity-manager.d.ts +0 -22
- package/dist/row-level-security-entity-manager.js +0 -135
- package/dist/row-level-security-entity-manager.js.map +0 -1
- package/dist/row-level-security-entity-manager.spec.js +0 -200
- package/dist/row-level-security-entity-manager.spec.js.map +0 -1
- package/dist/tsconfig.tsbuildinfo +0 -1
- package/dist/utils/default-row-level-security-options.d.ts +0 -3
- package/dist/utils/default-row-level-security-options.js +0 -9
- package/dist/utils/default-row-level-security-options.js.map +0 -1
- package/dist/utils/get-row-level-security-options.d.ts +0 -8
- package/dist/utils/get-row-level-security-options.js +0 -9
- package/dist/utils/get-row-level-security-options.js.map +0 -1
- package/dist/utils/policy-sql-options.d.ts +0 -12
- package/dist/utils/policy-sql-options.js +0 -3
- package/dist/utils/policy-sql-options.js.map +0 -1
- package/dist/utils/row-level-security-options-state.d.ts +0 -4
- package/dist/utils/row-level-security-options-state.js +0 -8
- package/dist/utils/row-level-security-options-state.js.map +0 -1
- package/dist/utils/set-row-level-security-options.d.ts +0 -3
- package/dist/utils/set-row-level-security-options.js +0 -13
- package/dist/utils/set-row-level-security-options.js.map +0 -1
- /package/dist/{row-level-security-context.spec.d.ts → row-level-security-driver.spec.d.ts} +0 -0
- /package/dist/{row-level-security-entity-manager.spec.d.ts → row-level-security.spec.d.ts} +0 -0
|
@@ -3,6 +3,7 @@ import type { MigrationDiff } from "./interfaces/row-level-security-migration-ge
|
|
|
3
3
|
/** MikroORM TypeScript migration generator that injects generated RLS SQL. */
|
|
4
4
|
export declare class RowLevelSecurityMigrationGenerator extends TSMigrationGenerator {
|
|
5
5
|
private existingPolicyDefinitions?;
|
|
6
|
+
private existingPolicyRoleDefinitions?;
|
|
6
7
|
private currentPolicyDefinitions?;
|
|
7
8
|
generate(diff: MigrationDiff, path?: string, name?: string): Promise<[string, string]>;
|
|
8
9
|
generateMigrationFile(className: string, diff: MigrationDiff): string;
|
|
@@ -7,28 +7,36 @@ const policy_command_enum_1 = require("./enums/policy-command.enum");
|
|
|
7
7
|
const policy_mode_enum_1 = require("./enums/policy-mode.enum");
|
|
8
8
|
const create_policy_bootstrap_sql_statements_1 = require("./utils/create-policy-bootstrap-sql-statements");
|
|
9
9
|
const create_policy_down_sql_1 = require("./utils/create-policy-down-sql");
|
|
10
|
+
const create_policy_privilege_down_sql_statements_1 = require("./utils/create-policy-privilege-down-sql-statements");
|
|
11
|
+
const create_policy_role_sql_statements_1 = require("./utils/create-policy-role-sql-statements");
|
|
10
12
|
const create_policy_up_sql_statements_1 = require("./utils/create-policy-up-sql-statements");
|
|
11
|
-
const escape_sql_literal_1 = require("./utils/escape-sql-literal");
|
|
12
13
|
/** MikroORM TypeScript migration generator that injects generated RLS SQL. */
|
|
13
14
|
class RowLevelSecurityMigrationGenerator extends migrations_1.TSMigrationGenerator {
|
|
14
15
|
async generate(diff, path, name) {
|
|
15
16
|
const entityMetadata = this.getEntityMetadata();
|
|
16
17
|
const currentPolicyDefinitions = this.getPolicyDefinitions(entityMetadata);
|
|
17
18
|
const tableReferences = getPolicyDefinitionTableReferences(currentPolicyDefinitions);
|
|
18
|
-
|
|
19
|
-
|
|
19
|
+
const existingPolicyDefinitions = await this.getExistingPolicyDefinitionsFromDatabase(tableReferences);
|
|
20
|
+
this.existingPolicyDefinitions = existingPolicyDefinitions
|
|
21
|
+
? filterPolicyDefinitionsByTableReferences(existingPolicyDefinitions, tableReferences)
|
|
22
|
+
: undefined;
|
|
23
|
+
this.existingPolicyRoleDefinitions = existingPolicyDefinitions;
|
|
20
24
|
this.currentPolicyDefinitions = currentPolicyDefinitions;
|
|
21
25
|
try {
|
|
22
26
|
return await super.generate(diff, path, name);
|
|
23
27
|
}
|
|
24
28
|
finally {
|
|
25
29
|
this.existingPolicyDefinitions = undefined;
|
|
30
|
+
this.existingPolicyRoleDefinitions = undefined;
|
|
26
31
|
this.currentPolicyDefinitions = undefined;
|
|
27
32
|
}
|
|
28
33
|
}
|
|
29
34
|
generateMigrationFile(className, diff) {
|
|
30
35
|
const currentPolicyDefinitions = this.currentPolicyDefinitions ?? this.getPolicyDefinitions();
|
|
31
36
|
const { added, removed } = this.getPolicyDefinitionChanges(diff, currentPolicyDefinitions);
|
|
37
|
+
const preservedDefinitions = this.existingPolicyDefinitions ?? [];
|
|
38
|
+
const preservedRoleDefinitions = this.existingPolicyRoleDefinitions ?? preservedDefinitions;
|
|
39
|
+
const revocableRoleNames = getRevocableDefinitionRoleNames(added, preservedRoleDefinitions);
|
|
32
40
|
if (added.length === 0 && removed.length === 0) {
|
|
33
41
|
return super.generateMigrationFile(className, diff);
|
|
34
42
|
}
|
|
@@ -37,13 +45,23 @@ class RowLevelSecurityMigrationGenerator extends migrations_1.TSMigrationGenerat
|
|
|
37
45
|
...removed.map((definition) => (0, create_policy_down_sql_1.createPolicyDownSql)(definition)),
|
|
38
46
|
...diff.up,
|
|
39
47
|
...(added.length > 0 ? (0, create_policy_bootstrap_sql_statements_1.createPolicyBootstrapSqlStatements)() : []),
|
|
48
|
+
...(added.length > 0
|
|
49
|
+
? (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(getDefinitionRoles(added))
|
|
50
|
+
: []),
|
|
40
51
|
...getDefinitionBootstrapSql(added),
|
|
41
52
|
...added.flatMap((definition) => (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)(definition)),
|
|
42
53
|
],
|
|
43
54
|
down: [
|
|
44
55
|
...added.map((definition) => (0, create_policy_down_sql_1.createPolicyDownSql)(definition)),
|
|
56
|
+
...added.flatMap((definition) => (0, create_policy_privilege_down_sql_statements_1.createPolicyPrivilegeDownSqlStatements)(definition, preservedDefinitions)),
|
|
57
|
+
...(revocableRoleNames.length > 0
|
|
58
|
+
? (0, create_policy_role_sql_statements_1.createPolicyRoleDownSqlStatements)(revocableRoleNames)
|
|
59
|
+
: []),
|
|
45
60
|
...diff.down,
|
|
46
61
|
...(removed.length > 0 ? (0, create_policy_bootstrap_sql_statements_1.createPolicyBootstrapSqlStatements)() : []),
|
|
62
|
+
...(removed.length > 0
|
|
63
|
+
? (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(getDefinitionRoles(removed))
|
|
64
|
+
: []),
|
|
47
65
|
...getDefinitionBootstrapSql(removed),
|
|
48
66
|
...removed.flatMap((definition) => (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)(definition)),
|
|
49
67
|
],
|
|
@@ -110,8 +128,7 @@ class RowLevelSecurityMigrationGenerator extends migrations_1.TSMigrationGenerat
|
|
|
110
128
|
: Object.values(allMetadata);
|
|
111
129
|
}
|
|
112
130
|
async getExistingPolicyDefinitionsFromDatabase(tableReferences) {
|
|
113
|
-
|
|
114
|
-
if (uniqueTableReferences.length === 0) {
|
|
131
|
+
if (tableReferences.length === 0) {
|
|
115
132
|
return [];
|
|
116
133
|
}
|
|
117
134
|
const driver = this
|
|
@@ -139,9 +156,6 @@ class RowLevelSecurityMigrationGenerator extends migrations_1.TSMigrationGenerat
|
|
|
139
156
|
FROM pg_policy p
|
|
140
157
|
INNER JOIN pg_class c ON c.oid = p.polrelid
|
|
141
158
|
INNER JOIN pg_namespace n ON n.oid = c.relnamespace
|
|
142
|
-
WHERE (n.nspname, c.relname) in (${uniqueTableReferences
|
|
143
|
-
.map((table) => `('${(0, escape_sql_literal_1.escapeSqlLiteral)(table.schemaName)}', '${(0, escape_sql_literal_1.escapeSqlLiteral)(table.tableName)}')`)
|
|
144
|
-
.join(", ")})
|
|
145
159
|
ORDER BY n.nspname, c.relname
|
|
146
160
|
`);
|
|
147
161
|
return sortPolicyDefinitions(rows.map(createPolicyDefinitionFromPolicyRow));
|
|
@@ -164,12 +178,29 @@ function getDefinitionBootstrapSql(definitions) {
|
|
|
164
178
|
...new Set(definitions.flatMap((definition) => definition.bootstrapSql ?? [])),
|
|
165
179
|
];
|
|
166
180
|
}
|
|
181
|
+
function getDefinitionRoles(definitions) {
|
|
182
|
+
return definitions.flatMap((definition) => definition.roles ?? []);
|
|
183
|
+
}
|
|
184
|
+
function getDefinitionRoleNames(definitions) {
|
|
185
|
+
if (definitions.length === 0) {
|
|
186
|
+
return [];
|
|
187
|
+
}
|
|
188
|
+
return (0, create_policy_role_sql_statements_1.getPolicyRoleNames)(getDefinitionRoles(definitions));
|
|
189
|
+
}
|
|
190
|
+
function getRevocableDefinitionRoleNames(addedDefinitions, preservedDefinitions) {
|
|
191
|
+
const preservedRoleNames = new Set(getDefinitionRoleNames(preservedDefinitions));
|
|
192
|
+
return getDefinitionRoleNames(addedDefinitions).filter((role) => !preservedRoleNames.has(role));
|
|
193
|
+
}
|
|
167
194
|
function getPolicyDefinitionTableReferences(definitions) {
|
|
168
195
|
return definitions.map((definition) => ({
|
|
169
196
|
schemaName: definition.schemaName,
|
|
170
197
|
tableName: definition.tableName,
|
|
171
198
|
}));
|
|
172
199
|
}
|
|
200
|
+
function filterPolicyDefinitionsByTableReferences(definitions, tableReferences) {
|
|
201
|
+
const tableKeys = new Set(dedupeTableReferences(tableReferences).map((table) => `${table.schemaName}.${table.tableName}`));
|
|
202
|
+
return definitions.filter((definition) => tableKeys.has(`${definition.schemaName}.${definition.tableName}`));
|
|
203
|
+
}
|
|
173
204
|
function dedupeTableReferences(tableReferences) {
|
|
174
205
|
return [
|
|
175
206
|
...new Map(tableReferences.map((table) => [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration-generator.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.ts"],"names":[],"mappings":";;;AAAA,sDAA6D;AAE7D,oEAAqE;AACrE,qEAA4D;AAC5D,+DAAsD;AAUtD,2GAAoG;AACpG,2EAAqE;AACrE,6FAAsF;AACtF,mEAA8D;AAE9D,8EAA8E;AAC9E,MAAa,kCAAmC,SAAQ,iCAAoB;IAIjE,KAAK,CAAC,QAAQ,CACrB,IAAmB,EACnB,IAAa,EACb,IAAa;QAEb,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,MAAM,wBAAwB,GAAG,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,kCAAkC,CACxD,wBAAwB,CACzB,CAAC;QAEF,IAAI,CAAC,yBAAyB;YAC5B,MAAM,IAAI,CAAC,wCAAwC,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QAEzD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,yBAAyB,GAAG,SAAS,CAAC;YAC3C,IAAI,CAAC,wBAAwB,GAAG,SAAS,CAAC;QAC5C,CAAC;IACH,CAAC;IAEQ,qBAAqB,CAC5B,SAAiB,EACjB,IAAmB;QAEnB,MAAM,wBAAwB,GAC5B,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,0BAA0B,CACxD,IAAI,EACJ,wBAAwB,CACzB,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,EAAE,EAAE;gBACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4CAAmB,EAAC,UAAU,CAAC,CAAC;gBAC/D,GAAG,IAAI,CAAC,EAAE;gBACV,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,2EAAkC,GAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,yBAAyB,CAAC,KAAK,CAAC;gBACnC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAA,6DAA2B,EAAC,UAAU,CAAC,CACxC;aACF;YACD,IAAI,EAAE;gBACJ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4CAAmB,EAAC,UAAU,CAAC,CAAC;gBAC7D,GAAG,IAAI,CAAC,IAAI;gBACZ,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,2EAAkC,GAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,yBAAyB,CAAC,OAAO,CAAC;gBACrC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAChC,IAAA,6DAA2B,EAAC,UAAU,CAAC,CACxC;aACF;SACF,CAAC;QAEF,MAAM,aAAa,GAAG,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzE,OAAO,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAEO,0BAA0B,CAChC,IAAmB,EACnB,wBAAsD;QAEtD,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,4BAA4B,CACtC,IAAI,EACJ,wBAAwB,CACzB;gBACD,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAEjE,OAAO;YACL,KAAK,EAAE,wBAAwB,CAAC,MAAM,CACpC,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,kCAAkC,CACjC,yBAAyB,EACzB,UAAU,CACX,IAAI,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CACzD;YACD,OAAO,EAAE,yBAAyB,CAAC,MAAM,CACvC,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,kCAAkC,CACjC,wBAAwB,EACxB,UAAU,CACX,CACJ;SACF,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAClC,IAAmB,EACnB,iBAA+C;QAE/C,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAC7C,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAClD,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE;QAEnC,OAAO,qBAAqB,CAC1B,QAAQ,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YAClC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,oBAAoB,GAAyB;gBACjD,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,UAAU,EAAE,cAAc,CAAC,UAAU;aACtC,CAAC;YAEF,OAAO,IAAA,uCAAoB,EACzB,cAAc,CAAC,KAAK,EACpB,oBAAoB,CACrB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjB,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,MAAM,MAAM,GAAG,IAAI;aAChB,MAAiE,CAAC;QACrE,MAAM,WAAW,GAAG,CAClB,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CACzD,EAAE,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,wCAAwC,CACpD,eAAiC;QAEjC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAErE,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI;aAChB,MAAiE,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;QAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAc,SAAS,CAAC;;;;;;;;;;;;;;;;;;;yCAmBxB,qBAAqB;aACrD,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,IAAA,qCAAgB,EAAC,KAAK,CAAC,UAAU,CAAC,OAAO,IAAA,qCAAgB,EAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CACtF;aACA,IAAI,CAAC,IAAI,CAAC;;KAEd,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC9E,CAAC;CACF;AAxND,gFAwNC;AAED,SAAS,yBAAyB,CAAC,aAAqB;IACtD,MAAM,eAAe,GAAG,oDAAoD,CAAC;IAC7E,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;IAE/C,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC;QACxC,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,aAAa;SACjB,OAAO,CACN,eAAe,EACf,4EAA4E,CAC7E;SACA,OAAO,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAyC;IAC1E,OAAO;QACL,GAAG,IAAI,GAAG,CACR,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CACnE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,WAAyC;IAEzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,eAAiC;IAC9D,OAAO;QACL,GAAG,IAAI,GAAG,CACR,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE;YACxC,KAAK;SACN,CAAC,CACH,CAAC,MAAM,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAsC,EACtC,KAAe;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kCAAkC,CACzC,WAAyC,EACzC,UAAsC;IAEtC,OAAO,WAAW,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,sBAAsB,CAAC,SAAS,CAAC;QAC/B,sBAAsB,CAAC,UAAU,CAAC;QACpC,8BAA8B,CAAC,SAAS,EAAE,UAAU,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,IAAgC,EAChC,KAAiC;IAEjC,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;QAClE,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;YACnC,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;YACvC,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA4B;IACvD,OAAO,IAAI,IAAI,6BAAU,CAAC,UAAU,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAkC;IAChE,OAAO,OAAO,IAAI,mCAAa,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA8B;IAC/D,OAAO,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA2B;IACvD,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;KAC5E,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAyC;IACtE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC3C,sBAAsB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAsC;IACpE,OAAO;QACL,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,UAAU;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,mCAAmC,CAC1C,GAAc;IAEd,OAAO;QACL,UAAU,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,EAAE;QAClD,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,IAAI,EACF,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,6BAAU,CAAC,WAAW,CAAC,CAAC,CAAC,6BAAU,CAAC,UAAU;QAC3E,OAAO,EAAE,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;QAClD,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;QAC5B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,oBAAoB,CACzB,KAAK;SACF,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAkC;IACtE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,OAAO,mCAAa,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAW,EACX,UAAsC;IAEtC,OAAO,IAAI,MAAM,CACf,kDAAkD,2BAA2B,CAC3E,UAAU,CACX,aAAa,EACd,GAAG,CACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAsC;IACzE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC;IAExD,IAAI,UAAU,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,mBAAmB,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,UAA8B;IACzD,OAAO,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,cAAkC;IACtD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,UAAU,CAAC;IAExE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iBAAiB,aAAa,CAAC,cAAc,CAAC,6BAA6B,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,cAAkC;IACvD,OAAO,CACL,cAAc,CAAC,KAAK,EAAE,IAAI;QAC1B,cAAc,CAAC,SAAS;QACxB,cAAc,CAAC,IAAI;QACnB,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}
|
|
1
|
+
{"version":3,"file":"row-level-security-migration-generator.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.ts"],"names":[],"mappings":";;;AAAA,sDAA6D;AAE7D,oEAAqE;AACrE,qEAA4D;AAC5D,+DAAsD;AAUtD,2GAAoG;AACpG,2EAAqE;AACrE,qHAA6G;AAC7G,iGAImD;AACnD,6FAAsF;AAEtF,8EAA8E;AAC9E,MAAa,kCAAmC,SAAQ,iCAAoB;IAKjE,KAAK,CAAC,QAAQ,CACrB,IAAmB,EACnB,IAAa,EACb,IAAa;QAEb,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,MAAM,wBAAwB,GAAG,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,kCAAkC,CACxD,wBAAwB,CACzB,CAAC;QAEF,MAAM,yBAAyB,GAC7B,MAAM,IAAI,CAAC,wCAAwC,CAAC,eAAe,CAAC,CAAC;QAEvE,IAAI,CAAC,yBAAyB,GAAG,yBAAyB;YACxD,CAAC,CAAC,wCAAwC,CACtC,yBAAyB,EACzB,eAAe,CAChB;YACH,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,6BAA6B,GAAG,yBAAyB,CAAC;QAC/D,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QAEzD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,yBAAyB,GAAG,SAAS,CAAC;YAC3C,IAAI,CAAC,6BAA6B,GAAG,SAAS,CAAC;YAC/C,IAAI,CAAC,wBAAwB,GAAG,SAAS,CAAC;QAC5C,CAAC;IACH,CAAC;IAEQ,qBAAqB,CAC5B,SAAiB,EACjB,IAAmB;QAEnB,MAAM,wBAAwB,GAC5B,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,0BAA0B,CACxD,IAAI,EACJ,wBAAwB,CACzB,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,yBAAyB,IAAI,EAAE,CAAC;QAClE,MAAM,wBAAwB,GAC5B,IAAI,CAAC,6BAA6B,IAAI,oBAAoB,CAAC;QAC7D,MAAM,kBAAkB,GAAG,+BAA+B,CACxD,KAAK,EACL,wBAAwB,CACzB,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,EAAE,EAAE;gBACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4CAAmB,EAAC,UAAU,CAAC,CAAC;gBAC/D,GAAG,IAAI,CAAC,EAAE;gBACV,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,2EAAkC,GAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;oBAClB,CAAC,CAAC,IAAA,mEAA+B,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;oBAC5D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,yBAAyB,CAAC,KAAK,CAAC;gBACnC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAA,6DAA2B,EAAC,UAAU,CAAC,CACxC;aACF;YACD,IAAI,EAAE;gBACJ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,4CAAmB,EAAC,UAAU,CAAC,CAAC;gBAC7D,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAA,oFAAsC,EACpC,UAAU,EACV,oBAAoB,CACrB,CACF;gBACD,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBAC/B,CAAC,CAAC,IAAA,qEAAiC,EAAC,kBAAkB,CAAC;oBACvD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,IAAI,CAAC,IAAI;gBACZ,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,2EAAkC,GAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACpB,CAAC,CAAC,IAAA,mEAA+B,EAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAC9D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,yBAAyB,CAAC,OAAO,CAAC;gBACrC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAChC,IAAA,6DAA2B,EAAC,UAAU,CAAC,CACxC;aACF;SACF,CAAC;QAEF,MAAM,aAAa,GAAG,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzE,OAAO,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAEO,0BAA0B,CAChC,IAAmB,EACnB,wBAAsD;QAEtD,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,4BAA4B,CACtC,IAAI,EACJ,wBAAwB,CACzB;gBACD,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAEjE,OAAO;YACL,KAAK,EAAE,wBAAwB,CAAC,MAAM,CACpC,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,kCAAkC,CACjC,yBAAyB,EACzB,UAAU,CACX,IAAI,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CACzD;YACD,OAAO,EAAE,yBAAyB,CAAC,MAAM,CACvC,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,kCAAkC,CACjC,wBAAwB,EACxB,UAAU,CACX,CACJ;SACF,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAClC,IAAmB,EACnB,iBAA+C;QAE/C,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAC7C,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAClD,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE;QAEnC,OAAO,qBAAqB,CAC1B,QAAQ,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YAClC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,oBAAoB,GAAyB;gBACjD,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,UAAU,EAAE,cAAc,CAAC,UAAU;aACtC,CAAC;YAEF,OAAO,IAAA,uCAAoB,EACzB,cAAc,CAAC,KAAK,EACpB,oBAAoB,CACrB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjB,UAAU;gBACV,UAAU;gBACV,SAAS;gBACT,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,MAAM,MAAM,GAAG,IAAI;aAChB,MAAiE,CAAC;QACrE,MAAM,WAAW,GAAG,CAClB,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CACzD,EAAE,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,wCAAwC,CACpD,eAAiC;QAEjC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI;aAChB,MAAiE,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;QAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAc,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;KAoB5D,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC9E,CAAC;CACF;AAhPD,gFAgPC;AAED,SAAS,yBAAyB,CAAC,aAAqB;IACtD,MAAM,eAAe,GAAG,oDAAoD,CAAC;IAC7E,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;IAE/C,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC;QACxC,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,aAAa;SACjB,OAAO,CACN,eAAe,EACf,4EAA4E,CAC7E;SACA,OAAO,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAyC;IAC1E,OAAO;QACL,GAAG,IAAI,GAAG,CACR,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CACnE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAyC;IACnE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAyC;IACvE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,IAAA,sDAAkB,EAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,+BAA+B,CACtC,gBAA8C,EAC9C,oBAAkD;IAElD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,sBAAsB,CAAC,oBAAoB,CAAC,CAC7C,CAAC;IAEF,OAAO,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,MAAM,CACpD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,WAAyC;IAEzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,wCAAwC,CAC/C,WAAyC,EACzC,eAAiC;IAEjC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,qBAAqB,CAAC,eAAe,CAAC,CAAC,GAAG,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,CACpD,CACF,CAAC;IAEF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,eAAiC;IAC9D,OAAO;QACL,GAAG,IAAI,GAAG,CACR,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE;YACxC,KAAK;SACN,CAAC,CACH,CAAC,MAAM,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAsC,EACtC,KAAe;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kCAAkC,CACzC,WAAyC,EACzC,UAAsC;IAEtC,OAAO,WAAW,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,sBAAsB,CAAC,SAAS,CAAC;QAC/B,sBAAsB,CAAC,UAAU,CAAC;QACpC,8BAA8B,CAAC,SAAS,EAAE,UAAU,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,IAAgC,EAChC,KAAiC;IAEjC,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;QAClE,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;YACnC,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;YACvC,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA4B;IACvD,OAAO,IAAI,IAAI,6BAAU,CAAC,UAAU,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAkC;IAChE,OAAO,OAAO,IAAI,mCAAa,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA8B;IAC/D,OAAO,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA2B;IACvD,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;KAC5E,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAyC;IACtE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC3C,sBAAsB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAsC;IACpE,OAAO;QACL,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,UAAU;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,mCAAmC,CAC1C,GAAc;IAEd,OAAO;QACL,UAAU,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,EAAE;QAClD,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,IAAI,EACF,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,6BAAU,CAAC,WAAW,CAAC,CAAC,CAAC,6BAAU,CAAC,UAAU;QAC3E,OAAO,EAAE,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;QAClD,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;QAC5B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,oBAAoB,CACzB,KAAK;SACF,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAkC;IACtE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,mCAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,OAAO,mCAAa,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAW,EACX,UAAsC;IAEtC,OAAO,IAAI,MAAM,CACf,kDAAkD,2BAA2B,CAC3E,UAAU,CACX,aAAa,EACd,GAAG,CACJ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAsC;IACzE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC;IAExD,IAAI,UAAU,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,mBAAmB,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,UAA8B;IACzD,OAAO,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,cAAkC;IACtD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,UAAU,CAAC;IAExE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iBAAiB,aAAa,CAAC,cAAc,CAAC,6BAA6B,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,cAAkC;IACvD,OAAO,CACL,cAAc,CAAC,KAAK,EAAE,IAAI;QAC1B,cAAc,CAAC,SAAS;QACxB,cAAc,CAAC,IAAI;QACnB,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}
|
|
@@ -51,6 +51,33 @@ AuditLog = __decorate([
|
|
|
51
51
|
using: "true",
|
|
52
52
|
})
|
|
53
53
|
], AuditLog);
|
|
54
|
+
let WorkspaceMemberWithCustomRole = class WorkspaceMemberWithCustomRole {
|
|
55
|
+
};
|
|
56
|
+
WorkspaceMemberWithCustomRole = __decorate([
|
|
57
|
+
(0, policy_decorator_1.Policy)({
|
|
58
|
+
name: "workspace_member_admin_select_policy",
|
|
59
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
60
|
+
using: "true",
|
|
61
|
+
roles: ["workspace_admin"],
|
|
62
|
+
})
|
|
63
|
+
], WorkspaceMemberWithCustomRole);
|
|
64
|
+
let WorkspaceMemberWithSharedRolePolicies = class WorkspaceMemberWithSharedRolePolicies {
|
|
65
|
+
};
|
|
66
|
+
WorkspaceMemberWithSharedRolePolicies = __decorate([
|
|
67
|
+
(0, policy_decorator_1.Policy)({
|
|
68
|
+
name: "workspace_member_admin_select_policy",
|
|
69
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
70
|
+
using: "true",
|
|
71
|
+
roles: ["workspace_admin"],
|
|
72
|
+
}),
|
|
73
|
+
(0, policy_decorator_1.Policy)({
|
|
74
|
+
name: "workspace_member_admin_update_policy",
|
|
75
|
+
command: policy_command_enum_1.PolicyCommand.UPDATE,
|
|
76
|
+
using: "true",
|
|
77
|
+
withCheck: "true",
|
|
78
|
+
roles: ["workspace_admin"],
|
|
79
|
+
})
|
|
80
|
+
], WorkspaceMemberWithSharedRolePolicies);
|
|
54
81
|
class UnmanagedEntity {
|
|
55
82
|
}
|
|
56
83
|
describe("RowLevelSecurityMigrationGenerator", () => {
|
|
@@ -109,6 +136,36 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
109
136
|
with_check: "true",
|
|
110
137
|
roles: ["authenticated"],
|
|
111
138
|
},
|
|
139
|
+
{
|
|
140
|
+
policy_name: "workspace_member_public_select_policy",
|
|
141
|
+
schema_name: "public",
|
|
142
|
+
table_name: "workspace_member",
|
|
143
|
+
permissive: true,
|
|
144
|
+
command: "r",
|
|
145
|
+
qual: "true",
|
|
146
|
+
with_check: null,
|
|
147
|
+
roles: null,
|
|
148
|
+
},
|
|
149
|
+
{
|
|
150
|
+
policy_name: "workspace_member_string_roles_select_policy",
|
|
151
|
+
schema_name: "public",
|
|
152
|
+
table_name: "workspace_member",
|
|
153
|
+
permissive: true,
|
|
154
|
+
command: "r",
|
|
155
|
+
qual: "true",
|
|
156
|
+
with_check: null,
|
|
157
|
+
roles: "{authenticated,anonymous}",
|
|
158
|
+
},
|
|
159
|
+
{
|
|
160
|
+
policy_name: "external_workspace_policy",
|
|
161
|
+
schema_name: "external",
|
|
162
|
+
table_name: "workspace",
|
|
163
|
+
permissive: true,
|
|
164
|
+
command: "r",
|
|
165
|
+
qual: "true",
|
|
166
|
+
with_check: null,
|
|
167
|
+
roles: ["workspace_admin"],
|
|
168
|
+
},
|
|
112
169
|
]));
|
|
113
170
|
const superGenerate = jest
|
|
114
171
|
.spyOn(migrations_1.TSMigrationGenerator.prototype, "generate")
|
|
@@ -130,6 +187,25 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
130
187
|
policyName: "workspace_member_all_policy",
|
|
131
188
|
command: "all",
|
|
132
189
|
}),
|
|
190
|
+
expect.objectContaining({
|
|
191
|
+
policyName: "workspace_member_public_select_policy",
|
|
192
|
+
roles: [],
|
|
193
|
+
}),
|
|
194
|
+
expect.objectContaining({
|
|
195
|
+
policyName: "workspace_member_string_roles_select_policy",
|
|
196
|
+
roles: ["anonymous", "authenticated"],
|
|
197
|
+
}),
|
|
198
|
+
]));
|
|
199
|
+
expect(this.existingPolicyDefinitions).not.toEqual(expect.arrayContaining([
|
|
200
|
+
expect.objectContaining({
|
|
201
|
+
policyName: "external_workspace_policy",
|
|
202
|
+
}),
|
|
203
|
+
]));
|
|
204
|
+
expect(this.existingPolicyRoleDefinitions).toEqual(expect.arrayContaining([
|
|
205
|
+
expect.objectContaining({
|
|
206
|
+
policyName: "external_workspace_policy",
|
|
207
|
+
roles: ["workspace_admin"],
|
|
208
|
+
}),
|
|
133
209
|
]));
|
|
134
210
|
expect(this.currentPolicyDefinitions).toEqual([
|
|
135
211
|
expect.objectContaining({
|
|
@@ -151,9 +227,10 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
151
227
|
});
|
|
152
228
|
await expect(generator.generate({ up: [], down: [] }, "/tmp", "Migration")).resolves.toEqual(["migration-file", "/tmp/Migration.ts"]);
|
|
153
229
|
expect(superGenerate).toHaveBeenCalledWith({ up: [], down: [] }, "/tmp", "Migration");
|
|
154
|
-
expect(execute.mock.calls[0]?.[0]).toContain("
|
|
230
|
+
expect(execute.mock.calls[0]?.[0]).toContain("FROM pg_policy");
|
|
155
231
|
expect(execute.mock.calls[0]?.[0]).toContain("unnest(p.polroles)");
|
|
156
232
|
expect(generator.existingPolicyDefinitions).toBeUndefined();
|
|
233
|
+
expect(generator.existingPolicyRoleDefinitions).toBeUndefined();
|
|
157
234
|
expect(generator.currentPolicyDefinitions).toBeUndefined();
|
|
158
235
|
});
|
|
159
236
|
it("continues generation when the driver has no database connection", async () => {
|
|
@@ -219,11 +296,30 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
219
296
|
await generator.generate({ up: [], down: [] });
|
|
220
297
|
expect(execute).not.toHaveBeenCalled();
|
|
221
298
|
});
|
|
222
|
-
it("only
|
|
223
|
-
const execute = jest.fn((_sql) => Promise.resolve([
|
|
299
|
+
it("only diffs existing database policies for tables managed by Policy metadata", async () => {
|
|
300
|
+
const execute = jest.fn((_sql) => Promise.resolve([
|
|
301
|
+
{
|
|
302
|
+
policy_name: "unmanaged_policy",
|
|
303
|
+
schema_name: "public",
|
|
304
|
+
table_name: "unmanaged_entity",
|
|
305
|
+
permissive: true,
|
|
306
|
+
command: "r",
|
|
307
|
+
qual: "true",
|
|
308
|
+
with_check: null,
|
|
309
|
+
roles: ["authenticated"],
|
|
310
|
+
},
|
|
311
|
+
]));
|
|
224
312
|
jest
|
|
225
313
|
.spyOn(migrations_1.TSMigrationGenerator.prototype, "generate")
|
|
226
|
-
.
|
|
314
|
+
.mockImplementation(function () {
|
|
315
|
+
expect(this.existingPolicyDefinitions).toEqual([]);
|
|
316
|
+
expect(this.existingPolicyRoleDefinitions).toEqual([
|
|
317
|
+
expect.objectContaining({
|
|
318
|
+
policyName: "unmanaged_policy",
|
|
319
|
+
}),
|
|
320
|
+
]);
|
|
321
|
+
return Promise.resolve(["migration-file", "/tmp/Migration.ts"]);
|
|
322
|
+
});
|
|
227
323
|
const generator = createGenerator([
|
|
228
324
|
{
|
|
229
325
|
class: WorkspaceMember,
|
|
@@ -239,8 +335,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
239
335
|
}),
|
|
240
336
|
});
|
|
241
337
|
await generator.generate({ up: [], down: [] });
|
|
242
|
-
expect(execute.mock.calls[0]?.[0]).toContain("
|
|
243
|
-
expect(execute.mock.calls[0]?.[0]).not.toContain("unmanaged_entity");
|
|
338
|
+
expect(execute.mock.calls[0]?.[0]).toContain("FROM pg_policy");
|
|
244
339
|
});
|
|
245
340
|
it("throws when MikroORM metadata is unavailable", () => {
|
|
246
341
|
const generator = new row_level_security_migration_generator_1.RowLevelSecurityMigrationGenerator({}, {}, { emit: "ts" });
|
|
@@ -304,7 +399,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
304
399
|
down: [],
|
|
305
400
|
});
|
|
306
401
|
expect(file).toContain("extends RowLevelSecurityMigration");
|
|
307
|
-
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = '
|
|
402
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'anonymous') then create role anonymous nologin; end if; end \\$\\$;`);");
|
|
308
403
|
expect(file).toContain("this.addSql(`create schema if not exists app;`);");
|
|
309
404
|
expect(file).toContain("this.addSql(`create or replace function app.get_context(context_key text, context_type anyelement) returns anyelement as \\$\\$ declare context_value text; begin context_value := current_setting('app.' || context_key, true); if context_value is null or context_value = '' then return null; end if; execute format('select \\$1::%s', pg_typeof(context_type)::text) using context_value into context_type; return context_type; end; \\$\\$ language plpgsql stable;`);");
|
|
310
405
|
expect(file).not.toContain("get_tenant_id()");
|
|
@@ -315,6 +410,82 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
315
410
|
expect(file).toContain('this.addSql(`drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";`);');
|
|
316
411
|
expect(file).toContain('this.addSql(`create policy workspace_member_user_select_policy on "public"."workspace_member" as permissive for select using ((select app.get_context(\'user_id\', null::bigint)) = "user_id");`);');
|
|
317
412
|
});
|
|
413
|
+
it("creates anonymous and custom policy roles in up and revokes generated grants in down", () => {
|
|
414
|
+
const generator = createGenerator([
|
|
415
|
+
{
|
|
416
|
+
class: WorkspaceMemberWithCustomRole,
|
|
417
|
+
tableName: "workspace_member",
|
|
418
|
+
},
|
|
419
|
+
]);
|
|
420
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
421
|
+
up: [],
|
|
422
|
+
down: [],
|
|
423
|
+
});
|
|
424
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'anonymous') then create role anonymous nologin; end if; end \\$\\$;`);");
|
|
425
|
+
expect(file).toContain("this.addSql(`do \\$\\$ begin if not exists (select 1 from pg_roles where rolname = 'workspace_admin') then create role workspace_admin nologin; end if; end \\$\\$;`);");
|
|
426
|
+
expect(file).toContain('this.addSql(`grant select on table "public"."workspace_member" to workspace_admin;`);');
|
|
427
|
+
expect(file).toContain('this.addSql(`revoke select on table "public"."workspace_member" from workspace_admin;`);');
|
|
428
|
+
expect(file).toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
429
|
+
expect(file).toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
430
|
+
expect(file).not.toContain("drop role workspace_admin");
|
|
431
|
+
});
|
|
432
|
+
it("keeps grants required by pre-existing policies when rolling back added policies", () => {
|
|
433
|
+
const generator = createGenerator([
|
|
434
|
+
{
|
|
435
|
+
class: WorkspaceMemberWithSharedRolePolicies,
|
|
436
|
+
tableName: "workspace_member",
|
|
437
|
+
},
|
|
438
|
+
]);
|
|
439
|
+
generator.existingPolicyDefinitions = [
|
|
440
|
+
{
|
|
441
|
+
entityName: "WorkspaceMemberWithSharedRolePolicies",
|
|
442
|
+
schemaName: "public",
|
|
443
|
+
tableName: "workspace_member",
|
|
444
|
+
policyName: "workspace_member_admin_select_policy",
|
|
445
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
446
|
+
using: "true",
|
|
447
|
+
roles: ["workspace_admin"],
|
|
448
|
+
},
|
|
449
|
+
];
|
|
450
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
451
|
+
up: [],
|
|
452
|
+
down: [],
|
|
453
|
+
});
|
|
454
|
+
expect(file).toContain("drop policy if exists workspace_member_admin_update_policy");
|
|
455
|
+
expect(file).toContain('this.addSql(`revoke update on table "public"."workspace_member" from workspace_admin;`);');
|
|
456
|
+
expect(file).not.toContain('this.addSql(`revoke select, update on table "public"."workspace_member" from workspace_admin;`);');
|
|
457
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from anonymous;`);");
|
|
458
|
+
expect(file).not.toContain("this.addSql(`revoke anonymous from current_user;`);");
|
|
459
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
460
|
+
expect(file).not.toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
461
|
+
});
|
|
462
|
+
it("keeps role grants required by policies outside the generated diff", () => {
|
|
463
|
+
const generator = createGenerator([
|
|
464
|
+
{
|
|
465
|
+
class: WorkspaceMemberWithCustomRole,
|
|
466
|
+
tableName: "workspace_member",
|
|
467
|
+
},
|
|
468
|
+
]);
|
|
469
|
+
generator.existingPolicyDefinitions = [];
|
|
470
|
+
generator.existingPolicyRoleDefinitions = [
|
|
471
|
+
{
|
|
472
|
+
entityName: "ExternalPolicy",
|
|
473
|
+
schemaName: "external",
|
|
474
|
+
tableName: "workspace",
|
|
475
|
+
policyName: "external_workspace_policy",
|
|
476
|
+
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
477
|
+
using: "true",
|
|
478
|
+
roles: ["workspace_admin"],
|
|
479
|
+
},
|
|
480
|
+
];
|
|
481
|
+
const file = generator.generateMigrationFile("MigrationTest", {
|
|
482
|
+
up: [],
|
|
483
|
+
down: [],
|
|
484
|
+
});
|
|
485
|
+
expect(file).toContain('this.addSql(`revoke select on table "public"."workspace_member" from workspace_admin;`);');
|
|
486
|
+
expect(file).not.toContain("this.addSql(`revoke usage on schema app from workspace_admin;`);");
|
|
487
|
+
expect(file).not.toContain("this.addSql(`revoke workspace_admin from current_user;`);");
|
|
488
|
+
});
|
|
318
489
|
it("handles removed policies when an existing database policy is no longer declared", () => {
|
|
319
490
|
const generator = createGenerator([
|
|
320
491
|
{
|
|
@@ -341,7 +512,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
341
512
|
expect(file).toContain("create policy workspace_member_user_select_policy");
|
|
342
513
|
expect(file).toContain("create policy removed_workspace_member_policy");
|
|
343
514
|
expect(file).toContain("create policy removed_workspace_member_policy on");
|
|
344
|
-
expect(file).toContain("for select to authenticated using true");
|
|
515
|
+
expect(file).toContain("for select to authenticated using (true)");
|
|
345
516
|
});
|
|
346
517
|
it("recreates policies when an existing policy changes content", () => {
|
|
347
518
|
const generator = createGenerator([
|
|
@@ -368,7 +539,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
368
539
|
expect(file).toContain("drop policy if exists workspace_member_user_select_policy");
|
|
369
540
|
expect(file).toContain("create policy workspace_member_user_select_policy on");
|
|
370
541
|
expect(file).toContain("using ((select app.get_context('user_id', null::bigint)) = \"user_id\")");
|
|
371
|
-
expect(file).toContain("for select to authenticated using false");
|
|
542
|
+
expect(file).toContain("for select to authenticated using (false)");
|
|
372
543
|
});
|
|
373
544
|
it("matches create table statements for non-public schemas and collection names", () => {
|
|
374
545
|
const generator = createGenerator([
|
|
@@ -382,7 +553,7 @@ describe("RowLevelSecurityMigrationGenerator", () => {
|
|
|
382
553
|
up: ['create table if not exists "app"."audit_log" ("id" bigint);'],
|
|
383
554
|
down: ['drop table if exists "app"."audit_log";'],
|
|
384
555
|
});
|
|
385
|
-
expect(file).toContain('this.addSql(`create policy audit_log_select_policy on "app"."audit_log" as permissive for select using true;`);');
|
|
556
|
+
expect(file).toContain('this.addSql(`create policy audit_log_select_policy on "app"."audit_log" as permissive for select using (true);`);');
|
|
386
557
|
});
|
|
387
558
|
it("generates all policies declared on an entity", () => {
|
|
388
559
|
const generator = createGenerator([
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration-generator.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,sDAA6D;AAE7D,oEAAuD;AACvD,qEAA4D;AAC5D,qGAA8F;AAO9F,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,eAAe;IALpB,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;GACI,eAAe,CAAG;AAYxB,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;CAAG,CAAA;AAAtC,mCAAmC;IAVxC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,2EAA2E;QAClF,SAAS,EAAE,2EAA2E;KACvF,CAAC;GACI,mCAAmC,CAAG;AAO5C,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;CAAG,CAAA;AAArC,kCAAkC;IALvC,IAAA,yBAAM,EAAC;QACN,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;KACnB,CAAC;GACI,kCAAkC,CAAG;AAO3C,IAAM,QAAQ,GAAd,MAAM,QAAQ;CAAG,CAAA;AAAX,QAAQ;IALb,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;KACd,CAAC;GACI,QAAQ,CAAG;AAEjB,MAAM,eAAe;CAAG;AAExB,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,qCAAqC;gBAClD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,MAAM;oBACjB,KAAK,EAAE,CAAC,eAAe,CAAC;iBACzB,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,MAAM;iBACd,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6BAA6B;oBACzC,OAAO,EAAE,KAAK;iBACf,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC;gBACrD,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,qCAAqC;oBACjD,SAAS,EAAE,kBAAkB;iBAC9B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,MAAM,CACV,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAC9D,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EACpB,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAE,SAAiB,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAE,SAAiB,CAAC,wBAAwB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;YAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtE,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,IAAI,GAAG;YACX,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,IAAI,CAAC;gBACjD,mBAAmB;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;YACD;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,2EAAkC,CACtD,EAAW,EACX,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,0DAA0D,CAAC;YAChE,IAAI,EAAE,CAAC,kDAAkD,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4EAA4E,CAC7E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAClE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACnE,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAC1E,CAAC,YAAY,CACZ,IAAI,CAAC,OAAO,CAAC,kDAAkD,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,uBAAuB,CAAC;aAC9D,eAAe,CAAC,+BAA+B,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oKAAoK,CACrK,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,gdAAgd,CACjd,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oFAAoF,CACrF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2GAA2G,CAC5G,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,iCAAiC;gBAC7C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uDAAuD,CACxD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,qCAAqC;gBACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW;aACxB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,6DAA6D,CAAC;YACnE,IAAI,EAAE,CAAC,yCAAyC,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,iHAAiH,CAClH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,mCAAmC;gBAC1C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4RAA4R,CAC7R,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,SAAS,CAAC;wBACxB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE;gCACV,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,WAAW,CAAC;YACjB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2EAAkC,CAAC,SAAS,CAAC,CAAC,cAAc,CACjE,iCAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,QAAkB,EAClB,gBAAyC,EAAE;IAE3C,OAAO,IAAI,2EAAkC,CAC3C;QACE,MAAM,EAAE;YACN,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;aACvB,CAAC;SACH;QACD,GAAG,aAAa;KACR,EACV,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"row-level-security-migration-generator.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration-generator.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,sDAA6D;AAE7D,oEAAuD;AACvD,qEAA4D;AAC5D,qGAA8F;AAO9F,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,eAAe;IALpB,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;GACI,eAAe,CAAG;AAYxB,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;CAAG,CAAA;AAAtC,mCAAmC;IAVxC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,iEAAiE;KACzE,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,2EAA2E;QAClF,SAAS,EAAE,2EAA2E;KACvF,CAAC;GACI,mCAAmC,CAAG;AAO5C,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;CAAG,CAAA;AAArC,kCAAkC;IALvC,IAAA,yBAAM,EAAC;QACN,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;KACnB,CAAC;GACI,kCAAkC,CAAG;AAO3C,IAAM,QAAQ,GAAd,MAAM,QAAQ;CAAG,CAAA;AAAX,QAAQ;IALb,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;KACd,CAAC;GACI,QAAQ,CAAG;AAQjB,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;CAAG,CAAA;AAAhC,6BAA6B;IANlC,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;GACI,6BAA6B,CAAG;AAetC,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;CAAG,CAAA;AAAxC,qCAAqC;IAb1C,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;IACD,IAAA,yBAAM,EAAC;QACN,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;QAC7B,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,CAAC,iBAAiB,CAAC;KAC3B,CAAC;GACI,qCAAqC,CAAG;AAE9C,MAAM,eAAe;CAAG;AAExB,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,qCAAqC;gBAClD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,gCAAgC;gBAC7C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;YACD;gBACE,WAAW,EAAE,uCAAuC;gBACpD,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,IAAI;aACZ;YACD;gBACE,WAAW,EAAE,6CAA6C;gBAC1D,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,2BAA2B;aACnC;YACD;gBACE,WAAW,EAAE,2BAA2B;gBACxC,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,WAAW;gBACvB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC,CACH,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CACrD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,MAAM;oBACjB,KAAK,EAAE,CAAC,eAAe,CAAC;iBACzB,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,gCAAgC;oBAC5C,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,MAAM;iBACd,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6BAA6B;oBACzC,OAAO,EAAE,KAAK;iBACf,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,uCAAuC;oBACnD,KAAK,EAAE,EAAE;iBACV,CAAC;gBACF,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,6CAA6C;oBACzD,KAAK,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;iBACtC,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,OAAO,CACzD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,2BAA2B;iBACxC,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,6BAA6B,CAAC,CAAC,OAAO,CACzD,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,2BAA2B;oBACvC,KAAK,EAAE,CAAC,iBAAiB,CAAC;iBAC3B,CAAC;aACH,CAAC,CACH,CAAC;YACF,MAAM,CAAE,IAAY,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC;gBACrD,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,qCAAqC;oBACjD,SAAS,EAAE,kBAAkB;iBAC9B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,MAAM,CACV,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAC9D,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EACpB,MAAM,EACN,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAE,SAAiB,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAE,SAAiB,CAAC,6BAA6B,CAAC,CAAC,aAAa,EAAE,CAAC;QACzE,MAAM,CAAE,SAAiB,CAAC,wBAAwB,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,aAAa,EAAE,CAAC;YAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtE,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,IAAI,GAAG;YACX,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC;QACF,MAAM,aAAa,GAAG,IAAI;aACvB,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,IAAI,CAAC;gBACjD,mBAAmB;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC;YACd;gBACE,WAAW,EAAE,kBAAkB;gBAC/B,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,kBAAkB;gBAC9B,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,UAAU,CAAC;aACjD,kBAAkB,CAAC;YAClB,MAAM,CAAE,IAAY,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAE,IAAY,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC;gBAC1D,MAAM,CAAC,gBAAgB,CAAC;oBACtB,UAAU,EAAE,kBAAkB;iBAC/B,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,eAAe,CAC/B;YACE;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;YACD;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,EACD;YACE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,OAAO;aACR,CAAC;SACH,CACF,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,2EAAkC,CACtD,EAAW,EACX,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;QAEF,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;aACvB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,GAAG;gBACX,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,0DAA0D,CAAC;YAChE,IAAI,EAAE,CAAC,kDAAkD,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4EAA4E,CAC7E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAClE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACnE,MAAM,CACJ,IAAI,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAC1E,CAAC,YAAY,CACZ,IAAI,CAAC,OAAO,CAAC,kDAAkD,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,IAAI;aACD,KAAK,CAAC,iCAAoB,CAAC,SAAS,EAAE,uBAAuB,CAAC;aAC9D,eAAe,CAAC,+BAA+B,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC/C,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CACH,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4JAA4J,CAC7J,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,gdAAgd,CACjd,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oFAAoF,CACrF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2GAA2G,CAC5G,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,6BAA6B;gBACpC,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4JAA4J,CAC7J,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,wKAAwK,CACzK,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uFAAuF,CACxF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,qCAAqC;gBAC5C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,uCAAuC;gBACnD,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,sCAAsC;gBAClD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4DAA4D,CAC7D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kGAAkG,CACnG,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,4DAA4D,CAC7D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,qDAAqD,CACtD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,2DAA2D,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,6BAA6B;gBACpC,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG,EAAE,CAAC;QACjD,SAAiB,CAAC,6BAA6B,GAAG;YACjD;gBACE,UAAU,EAAE,gBAAgB;gBAC5B,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,WAAW;gBACtB,UAAU,EAAE,2BAA2B;gBACvC,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,iBAAiB,CAAC;aAC3B;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,kEAAkE,CACnE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CACxB,2DAA2D,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,iCAAiC;gBAC7C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,uDAAuD,CACxD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QACF,SAAiB,CAAC,yBAAyB,GAAG;YAC7C;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,qCAAqC;gBACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,gEAAgE,CAAC;YACtE,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,2DAA2D,CAC5D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,sDAAsD,CACvD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW;aACxB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,6DAA6D,CAAC;YACnE,IAAI,EAAE,CAAC,yCAAyC,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,mHAAmH,CACpH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,mCAAmC;gBAC1C,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4RAA4R,CAC7R,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,kCAAkC;gBACzC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,SAAS,CAAC;wBACxB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE;gCACV,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oMAAoM,CACrM,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,SAAS,GAAG,eAAe,CAAC;YAChC;gBACE,KAAK,EAAE,eAAe;gBACtB,SAAS,EAAE,kBAAkB;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE;gBACF,qEAAqE;aACtE;YACD,IAAI,EAAE,CAAC,4DAA4D,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,CAAC,eAAe,EAAE;YAC5D,EAAE,EAAE,CAAC,WAAW,CAAC;YACjB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,oDAAoD,CACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,2EAAkC,CAAC,SAAS,CAAC,CAAC,cAAc,CACjE,iCAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,QAAkB,EAClB,gBAAyC,EAAE;IAE3C,OAAO,IAAI,2EAAkC,CAC3C;QACE,MAAM,EAAE;YACN,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;aACvB,CAAC;SACH;QACD,GAAG,aAAa;KACR,EACV,EAAW,EACX,EAAE,IAAI,EAAE,IAAI,EAAW,CACxB,CAAC;AACJ,CAAC"}
|
|
@@ -2,10 +2,8 @@ import { Migration } from "@mikro-orm/migrations";
|
|
|
2
2
|
import type { PolicySqlOptions } from "./interfaces/policy-sql-options.interface";
|
|
3
3
|
/** Base MikroORM migration with convenience helpers for row-level security SQL. */
|
|
4
4
|
export declare abstract class RowLevelSecurityMigration extends Migration {
|
|
5
|
-
/** Adds the shared RLS
|
|
6
|
-
protected addRowLevelSecurityBootstrapSql(): void;
|
|
5
|
+
/** Adds the shared RLS schema, helper function, roles, and role grants. */
|
|
6
|
+
protected addRowLevelSecurityBootstrapSql(roles?: string[]): void;
|
|
7
7
|
/** Adds SQL that enables RLS and creates the configured policy. */
|
|
8
8
|
protected addPolicySql(options: PolicySqlOptions): void;
|
|
9
|
-
/** Adds SQL that drops the configured policy and disables RLS when no policies remain. */
|
|
10
|
-
protected addDropPolicySql(options: PolicySqlOptions): void;
|
|
11
9
|
}
|
|
@@ -3,26 +3,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.RowLevelSecurityMigration = void 0;
|
|
4
4
|
const migrations_1 = require("@mikro-orm/migrations");
|
|
5
5
|
const create_policy_bootstrap_sql_statements_1 = require("./utils/create-policy-bootstrap-sql-statements");
|
|
6
|
-
const
|
|
6
|
+
const create_policy_role_sql_statements_1 = require("./utils/create-policy-role-sql-statements");
|
|
7
7
|
const create_policy_up_sql_statements_1 = require("./utils/create-policy-up-sql-statements");
|
|
8
8
|
/** Base MikroORM migration with convenience helpers for row-level security SQL. */
|
|
9
9
|
class RowLevelSecurityMigration extends migrations_1.Migration {
|
|
10
|
-
/** Adds the shared RLS
|
|
11
|
-
addRowLevelSecurityBootstrapSql() {
|
|
10
|
+
/** Adds the shared RLS schema, helper function, roles, and role grants. */
|
|
11
|
+
addRowLevelSecurityBootstrapSql(roles = []) {
|
|
12
12
|
for (const sql of (0, create_policy_bootstrap_sql_statements_1.createPolicyBootstrapSqlStatements)()) {
|
|
13
13
|
this.addSql(sql);
|
|
14
14
|
}
|
|
15
|
+
for (const sql of (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(roles)) {
|
|
16
|
+
this.addSql(sql);
|
|
17
|
+
}
|
|
15
18
|
}
|
|
16
19
|
/** Adds SQL that enables RLS and creates the configured policy. */
|
|
17
20
|
addPolicySql(options) {
|
|
21
|
+
for (const sql of (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)(options.roles)) {
|
|
22
|
+
this.addSql(sql);
|
|
23
|
+
}
|
|
18
24
|
for (const sql of (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)(options)) {
|
|
19
25
|
this.addSql(sql);
|
|
20
26
|
}
|
|
21
27
|
}
|
|
22
|
-
/** Adds SQL that drops the configured policy and disables RLS when no policies remain. */
|
|
23
|
-
addDropPolicySql(options) {
|
|
24
|
-
this.addSql((0, create_policy_down_sql_1.createPolicyDownSql)(options));
|
|
25
|
-
}
|
|
26
28
|
}
|
|
27
29
|
exports.RowLevelSecurityMigration = RowLevelSecurityMigration;
|
|
28
30
|
//# sourceMappingURL=row-level-security-migration.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration.js","sourceRoot":"","sources":["../src/row-level-security-migration.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAGlD,2GAAoG;AACpG,
|
|
1
|
+
{"version":3,"file":"row-level-security-migration.js","sourceRoot":"","sources":["../src/row-level-security-migration.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAGlD,2GAAoG;AACpG,iGAA4F;AAC5F,6FAAsF;AAEtF,mFAAmF;AACnF,MAAsB,yBAA0B,SAAQ,sBAAS;IAC/D,2EAA2E;IACjE,+BAA+B,CAAC,QAAkB,EAAE;QAC5D,KAAK,MAAM,GAAG,IAAI,IAAA,2EAAkC,GAAE,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAA,mEAA+B,EAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,mEAAmE;IACzD,YAAY,CAAC,OAAyB;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAA,mEAA+B,EAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAA,6DAA2B,EAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAtBD,8DAsBC"}
|
|
@@ -12,11 +12,6 @@ class TestRowLevelSecurityMigration extends row_level_security_migration_1.RowLe
|
|
|
12
12
|
command: policy_command_enum_1.PolicyCommand.SELECT,
|
|
13
13
|
using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
|
|
14
14
|
});
|
|
15
|
-
this.addDropPolicySql({
|
|
16
|
-
schemaName: "public",
|
|
17
|
-
tableName: "workspace_member",
|
|
18
|
-
policyName: "workspace_member_user_select_policy",
|
|
19
|
-
});
|
|
20
15
|
}
|
|
21
16
|
}
|
|
22
17
|
describe("RowLevelSecurityMigration", () => {
|
|
@@ -24,17 +19,13 @@ describe("RowLevelSecurityMigration", () => {
|
|
|
24
19
|
const migration = new TestRowLevelSecurityMigration({}, {});
|
|
25
20
|
migration.up();
|
|
26
21
|
const queries = migration.getQueries();
|
|
27
|
-
expect(
|
|
28
|
-
expect(queries
|
|
29
|
-
expect(queries
|
|
30
|
-
expect(queries
|
|
31
|
-
expect(queries
|
|
32
|
-
expect(queries
|
|
33
|
-
expect(queries
|
|
34
|
-
expect(queries[8]).toContain('alter table "public"."workspace_member" enable row level security;');
|
|
35
|
-
expect(queries[9]).toContain('drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";');
|
|
36
|
-
expect(queries[10]).toContain("create policy workspace_member_user_select_policy");
|
|
37
|
-
expect(queries[11]).toContain("drop policy if exists workspace_member_user_select_policy");
|
|
22
|
+
expect(queries).toContainEqual(expect.stringContaining("create role anonymous nologin"));
|
|
23
|
+
expect(queries).toContainEqual(expect.stringContaining("grant anonymous to current_user"));
|
|
24
|
+
expect(queries).toContainEqual(expect.stringContaining("create schema if not exists app"));
|
|
25
|
+
expect(queries).toContainEqual(expect.stringContaining("create or replace function app.get_context"));
|
|
26
|
+
expect(queries).toContainEqual('alter table "public"."workspace_member" enable row level security;');
|
|
27
|
+
expect(queries).toContainEqual('drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";');
|
|
28
|
+
expect(queries).toContainEqual(expect.stringContaining("create policy workspace_member_user_select_policy"));
|
|
38
29
|
});
|
|
39
30
|
});
|
|
40
31
|
//# sourceMappingURL=row-level-security-migration.spec.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"row-level-security-migration.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration.spec.ts"],"names":[],"mappings":";;AAAA,qEAA4D;AAC5D,iFAA2E;AAE3E,MAAM,6BAA8B,SAAQ,wDAAyB;IAC1D,EAAE;QACT,IAAI,CAAC,+BAA+B,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;YACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,iEAAiE;SACzE,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"row-level-security-migration.spec.js","sourceRoot":"","sources":["../src/row-level-security-migration.spec.ts"],"names":[],"mappings":";;AAAA,qEAA4D;AAC5D,iFAA2E;AAE3E,MAAM,6BAA8B,SAAQ,wDAAyB;IAC1D,EAAE;QACT,IAAI,CAAC,+BAA+B,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;YACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,iEAAiE;SACzE,CAAC,CAAC;IACL,CAAC;CACF;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CACjD,EAAW,EACX,EAAW,CACZ,CAAC;QAEF,SAAS,CAAC,EAAE,EAAE,CAAC;QAEf,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAc,CAAC;QAEnD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,MAAM,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,CACzD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,CAAC,CAC3D,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,MAAM,CAAC,gBAAgB,CAAC,iCAAiC,CAAC,CAC3D,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,MAAM,CAAC,gBAAgB,CAAC,4CAA4C,CAAC,CACtE,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,oEAAoE,CACrE,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,2FAA2F,CAC5F,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAC5B,MAAM,CAAC,gBAAgB,CACrB,mDAAmD,CACpD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|