@nest-util/nest-crud 1.0.8 → 1.1.0

package/dist/lib/controllers/nest-crud.controller.d.ts

@@ -3,6 +3,7 @@ import { CrudEndpoint, CrudInterface } from '../interfaces/crud.interface';
 import { PaginationDto } from '../dtos/pagination.dto';
 import { FilterDto } from '../dtos/filter.dto';
 import { ListAuditLogsDto } from '../dtos/list-audit-logs.dto';
+import type { OwnershipUser } from '../interfaces/find-mine.interface';
 export declare const AUTH_PERMISSIONS_METADATA_KEY = "auth:permissions";
 export type CrudEndpointPermissions = string | readonly string[];
 export type CrudPermissionsMap = Partial<Record<CrudEndpoint, CrudEndpointPermissions>>;
@@ -16,10 +17,10 @@ export interface IBaseController<CD, UD, RD> {
         data: RD[];
         meta?: unknown;
     } | RD[]>;
-    findOne(id: number): Promise<RD>;
+    findOne(id: number, user?: OwnershipUser): Promise<RD>;
     create(dto: CD): Promise<RD>;
-    update(id: number, dto: UD): Promise<RD>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, dto: UD, user?: OwnershipUser): Promise<RD>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs?(query: ListAuditLogsDto): Promise<unknown>;
 }
 export declare function CreateNestedCrudController<CD, UD, RD>(createDto: Type<CD>, updateDto: Type<UD>, responseDto: Type<RD>, options?: CrudControllerFactoryOptions): Type<IBaseController<CD, UD, RD>>;

package/dist/lib/controllers/nest-crud.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest-crud.controller.d.ts","sourceRoot":"","sources":["../../../src/lib/controllers/nest-crud.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,IAAI,EACL,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAC9C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAyDD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EACnD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACrC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CA8HnC"}
+{"version":3,"file":"nest-crud.controller.d.ts","sourceRoot":"","sources":["../../../src/lib/controllers/nest-crud.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,IAAI,EACL,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,eAAO,MAAM,6BAA6B,qBAAqB,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAC9C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;IACzC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,aAAa,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAyDD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EACnD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EACnB,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACrC,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAwInC"}

package/dist/lib/controllers/nest-crud.controller.js

@@ -72,13 +72,13 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
             this.ensureEndpointEnabled('create');
             return this.service.create(dto);
         }
-        update(id, dto) {
+        update(id, dto, user) {
             this.ensureEndpointEnabled('update');
-            return this.service.update(id, dto);
+            return this.service.update(id, dto, user);
         }
-        remove(id) {
+        remove(id, user) {
             this.ensureEndpointEnabled('remove');
-            return this.service.remove(id);
+            return this.service.remove(id, user);
         }
         findAuditLogs(query) {
             this.ensureEndpointEnabled('findAuditLogs');
@@ -87,9 +87,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
             }
             return this.service.findAuditLogs(query);
         }
-        findOne(id) {
+        findOne(id, user) {
             this.ensureEndpointEnabled('findOne');
-            return this.service.findOne(id);
+            return this.service.findOne(id, user);
         }
     }
     tslib_1.__decorate([
@@ -160,8 +160,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, swagger_1.ApiResponse)({ type: responseDto }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
         tslib_1.__param(1, (0, common_1.Body)()),
+        tslib_1.__param(2, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number, Object]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "update", null);
     tslib_1.__decorate([
@@ -169,8 +170,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, response_message_decorator_1.Message)('deleted'),
         (0, audit_log_decorator_1.Audit)({ action: 'DELETE' }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+        tslib_1.__param(1, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "remove", null);
     tslib_1.__decorate([
@@ -186,8 +188,9 @@ function CreateNestedCrudController(createDto, updateDto, responseDto, options)
         (0, response_message_decorator_1.Message)('fetched'),
         (0, swagger_1.ApiResponse)({ type: responseDto }),
         tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+        tslib_1.__param(1, (0, nest_auth_1.CurrentUser)()),
         tslib_1.__metadata("design:type", Function),
-        tslib_1.__metadata("design:paramtypes", [Number]),
+        tslib_1.__metadata("design:paramtypes", [Number, Object]),
         tslib_1.__metadata("design:returntype", void 0)
     ], BaseController.prototype, "findOne", null);
     applyPermissionMetadata(BaseController, options?.permissions);

package/dist/lib/interfaces/crud.interface.d.ts

@@ -1,6 +1,7 @@
 import { FilterDto } from '../dtos/filter.dto';
 import { PaginationDto } from '../dtos/pagination.dto';
 import { CursorPaginationDto } from '../dtos/cursor-pagination.dto';
+import { OwnershipUser } from './find-mine.interface';
 export type CrudEndpoint = 'findAll' | 'findOne' | 'create' | 'update' | 'remove' | 'findAuditLogs' | 'findMine';
 export interface AuditLogQuery {
     user_id?: string;
@@ -25,10 +26,10 @@ export interface CrudInterface<CreateDto, UpdateDto, ResponseDto> {
         meta?: unknown;
     }>;
     findAllWithCursor?(query: CursorPaginationDto & FilterDto): Promise<CursorPaginationResult<ResponseDto>>;
-    findOne(id: number): Promise<ResponseDto>;
+    findOne(id: number, user?: OwnershipUser): Promise<ResponseDto>;
     create(dto: CreateDto): Promise<ResponseDto>;
-    update(id: number, dto: UpdateDto): Promise<ResponseDto>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, dto: UpdateDto, user?: OwnershipUser): Promise<ResponseDto>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs?(query: AuditLogQuery): Promise<unknown>;
     findMine?(userId: string | number, query: PaginationDto & FilterDto): Promise<{
         data: ResponseDto[];

package/dist/lib/interfaces/crud.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crud.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/crud.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW;IAC9D,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAE5C,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;IAEH,iBAAiB,CAAC,CAChB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEzD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErC,aAAa,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,QAAQ,CAAC,CACP,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD"}
+{"version":3,"file":"crud.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/crud.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,eAAe,GACf,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW;IAC9D,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAE5C,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;IAEH,iBAAiB,CAAC,CAChB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEhD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEhE,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE/E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,aAAa,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,QAAQ,CAAC,CACP,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD"}

package/dist/lib/interfaces/find-mine.interface.d.ts

@@ -1,6 +1,32 @@
 import { ObjectLiteral, SelectQueryBuilder } from 'typeorm';
+/**
+ * Minimal structural view of the authenticated user passed to ownership
+ * enforcement. Compatible with `AuthUser` from `@nest-util/nest-auth`.
+ */
+export interface OwnershipUser {
+    id?: string | number;
+    permissions?: readonly string[];
+    [key: string]: unknown;
+}
 export interface FindMineConfig<TEntity extends ObjectLiteral> {
     userOwnershipField?: keyof TEntity;
     findMineQuery?: (qb: SelectQueryBuilder<TEntity>, userId: string | number) => void;
+    /**
+     * When true (and an ownership field/query is configured), the generic
+     * `findOne`, `update`, and `remove` operations are scoped to records owned
+     * by the passed-in user. Non-owned records resolve to 404; missing user
+     * resolves to 403. Defaults to false - existing behavior is preserved.
+     */
+    enforceOwnership?: boolean;
+    /**
+     * Permission strings that grant full access and bypass ownership checks.
+     * Example: ['admin.access'].
+     */
+    ownershipBypassPermissions?: readonly string[];
+    /**
+     * Custom predicate that grants full access and bypasses ownership checks.
+     * Takes precedence alongside ownershipBypassPermissions.
+     */
+    ownershipBypass?: (user: OwnershipUser) => boolean;
 }
 //# sourceMappingURL=find-mine.interface.d.ts.map

package/dist/lib/interfaces/find-mine.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"find-mine.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/find-mine.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE5D,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa;IAC3D,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;CACpF"}
+{"version":3,"file":"find-mine.interface.d.ts","sourceRoot":"","sources":["../../../src/lib/interfaces/find-mine.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa;IAC3D,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC;CACpD"}

package/dist/lib/services/nest-crud.service.d.ts

@@ -7,7 +7,7 @@ import { FilterDto } from '../dtos/filter.dto';
 import { CrudEndpoint, CrudInterface, CursorPaginationResult } from '../interfaces/crud.interface';
 import { CursorStrategy } from '../interfaces/cursor-strategy.interface';
 import { CrudHooks, TransactionConfig } from '../interfaces/hooks.interface';
-import { FindMineConfig } from '../interfaces/find-mine.interface';
+import { FindMineConfig, OwnershipUser } from '../interfaces/find-mine.interface';
 export interface CrudServiceOptions<Entity extends ObjectLiteral, ResponseDto> extends FindMineConfig<Entity> {
     repository: Repository<Entity>;
     allowedFilters?: readonly (keyof Entity)[];
@@ -45,11 +45,20 @@ export declare class NestCrudService<Entity extends ObjectLiteral, CreateDto = P
     protected readonly transactionConfig: TransactionConfig;
     protected readonly userOwnershipField?: keyof Entity;
     protected readonly findMineQuery?: (qb: SelectQueryBuilder<Entity>, userId: string | number) => void;
+    protected readonly enforceOwnership: boolean;
+    protected readonly ownershipBypassPermissions: readonly string[];
+    protected readonly ownershipBypass?: (user: OwnershipUser) => boolean;
     constructor(options: CrudServiceOptions<Entity, ResponseDto>);
     private resolveRelations;
     private executeInTransaction;
     private executeHook;
     private buildRelationsObject;
+    private applyIncludeJoins;
+    private isOwnershipConfigured;
+    private canBypassOwnership;
+    private enforceOwnershipFor;
+    private applyOwnershipCondition;
+    private findOwnedEntity;
     findAll(query: PaginationDto & FilterDto): Promise<{
         data: ResponseDto[];
         meta: {
@@ -66,10 +75,10 @@ export declare class NestCrudService<Entity extends ObjectLiteral, CreateDto = P
         meta?: unknown;
     }>;
     findAllWithCursor(query: CursorPaginationDto & FilterDto): Promise<CursorPaginationResult<ResponseDto>>;
-    findOne(id: number): Promise<ResponseDto>;
+    findOne(id: number, user?: OwnershipUser): Promise<ResponseDto>;
     create(payload: CreateDto): Promise<ResponseDto>;
-    update(id: number, payload: UpdateDto): Promise<ResponseDto>;
-    remove(id: number): Promise<boolean>;
+    update(id: number, payload: UpdateDto, user?: OwnershipUser): Promise<ResponseDto>;
+    remove(id: number, user?: OwnershipUser): Promise<boolean>;
     findAuditLogs(query: {
         user_id?: string;
         start_date?: string;

package/dist/lib/services/nest-crud.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nest-crud.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/nest-crud.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsD,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAe,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAkB,SAAS,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAQnE,MAAM,WAAW,kBAAkB,CAAC,MAAM,SAAS,aAAa,EAAE,WAAW,CAC3E,SAAQ,cAAc,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC3C,iBAAiB,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,WAAW,GAAG,WAAW,EAAE,CAAC;IAC3E,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBACa,eAAe,CAC1B,MAAM,SAAS,aAAa,EAC5B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,WAAW,GAAG,MAAM,CACpB,YAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAE3D,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC7D,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAChE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CACjC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KACtB,WAAW,GAAG,WAAW,EAAE,CAAC;IACjC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;gBAEzF,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC;YAkB9C,gBAAgB;YA+BhB,oBAAoB;YAoBpB,WAAW;IAezB,OAAO,CAAC,oBAAoB;IAoBtB,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS;;;;;;;;;;;IA0CxC,QAAQ,CACZ,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAoD7C,iBAAiB,CACrB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IA4EzC,OAAO,CAAC,EAAE,EAAE,MAAM;IAyBlB,MAAM,CAAC,OAAO,EAAE,SAAS;IAmBzB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IA0BrC,MAAM,CAAC,EAAE,EAAE,MAAM;IAmBjB,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB;;;;;;;;;CA4CF"}
+{"version":3,"file":"nest-crud.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/nest-crud.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0E,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAe,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAkB,SAAS,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAQlF,MAAM,WAAW,kBAAkB,CAAC,MAAM,SAAS,aAAa,EAAE,WAAW,CAC3E,SAAQ,cAAc,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC3C,iBAAiB,CAAC,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC9C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,WAAW,GAAG,WAAW,EAAE,CAAC;IAC3E,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,qBACa,eAAe,CAC1B,MAAM,SAAS,aAAa,EAC5B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAC3B,WAAW,GAAG,MAAM,CACpB,YAAW,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAE3D,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAC7D,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;IAChE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CACjC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,KACtB,WAAW,GAAG,WAAW,EAAE,CAAC;IACjC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;IACrG,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAC7C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC;IACjE,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC;gBAE1D,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC;YAqB9C,gBAAgB;YA+BhB,oBAAoB;YAoBpB,WAAW;IAezB,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,uBAAuB;YAWjB,eAAe;IAqBvB,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS;;;;;;;;;;;IA8BxC,QAAQ,CACZ,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,KAAK,EAAE,aAAa,GAAG,SAAS,GAC/B,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAoC7C,iBAAiB,CACrB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAgEzC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa;IA+BxC,MAAM,CAAC,OAAO,EAAE,SAAS;IAmBzB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,aAAa;IAgC3D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa;IAyBvC,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB;;;;;;;;;CA4CF"}

package/dist/lib/services/nest-crud.service.js

@@ -24,6 +24,9 @@ let NestCrudService = class NestCrudService {
         this.transactionConfig = options.transactionConfig ?? {};
         this.userOwnershipField = options.userOwnershipField;
         this.findMineQuery = options.findMineQuery;
+        this.enforceOwnership = options.enforceOwnership ?? false;
+        this.ownershipBypassPermissions = options.ownershipBypassPermissions ?? [];
+        this.ownershipBypass = options.ownershipBypass;
     }
     async resolveRelations(payload) {
         if (!this.relations.length)
@@ -92,22 +95,67 @@ let NestCrudService = class NestCrudService {
         }
         return result;
     }
+    applyIncludeJoins(qb) {
+        if (this.include.length === 0)
+            return;
+        this.include.forEach((relation) => {
+            const parts = relation.split('.');
+            if (parts.length === 1) {
+                qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
+            }
+            else {
+                const parentAlias = parts.slice(0, -1).join('_');
+                const field = parts[parts.length - 1];
+                const alias = parts.join('_');
+                qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
+            }
+        });
+    }
+    isOwnershipConfigured() {
+        return Boolean(this.userOwnershipField || this.findMineQuery);
+    }
+    canBypassOwnership(user) {
+        if (!user)
+            return false;
+        if (this.ownershipBypass && this.ownershipBypass(user)) {
+            return true;
+        }
+        if (this.ownershipBypassPermissions.length > 0) {
+            const userPermissions = Array.isArray(user.permissions)
+                ? user.permissions
+                : [];
+            return this.ownershipBypassPermissions.some((permission) => userPermissions.includes(permission));
+        }
+        return false;
+    }
+    enforceOwnershipFor(user) {
+        return Boolean(this.enforceOwnership &&
+            this.isOwnershipConfigured() &&
+            !this.canBypassOwnership(user));
+    }
+    applyOwnershipCondition(qb, userId) {
+        if (this.findMineQuery) {
+            this.findMineQuery(qb, userId);
+        }
+        else if (this.userOwnershipField) {
+            qb.where(`e.${String(this.userOwnershipField)} = :userId`, { userId });
+        }
+    }
+    async findOwnedEntity(id, user) {
+        const userId = user?.id;
+        if (userId === undefined || userId === null) {
+            throw new common_1.ForbiddenException('Authentication required to access this resource');
+        }
+        const qb = this.repo.createQueryBuilder('e');
+        this.applyOwnershipCondition(qb, userId);
+        qb.andWhere('e.id = :id', { id });
+        this.applyIncludeJoins(qb);
+        const rows = await qb.getMany();
+        return rows[0] ?? null;
+    }
     async findAll(query) {
         const qb = this.repo.createQueryBuilder('e');
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyIncludeJoins(qb);
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         const paginationMeta = (0, pagination_helper_1.applyPagination)(qb, query);
         if (query.orderBy) {
@@ -130,26 +178,8 @@ let NestCrudService = class NestCrudService {
             throw new common_1.BadRequestException('findMine not configured');
         }
         const qb = this.repo.createQueryBuilder('e');
-        if (this.findMineQuery) {
-            this.findMineQuery(qb, userId);
-        }
-        else if (this.userOwnershipField) {
-            qb.where(`e.${String(this.userOwnershipField)} = :userId`, { userId });
-        }
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyOwnershipCondition(qb, userId);
+        this.applyIncludeJoins(qb);
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         const paginationMeta = (0, pagination_helper_1.applyPagination)(qb, query);
         if (query.orderBy) {
@@ -173,20 +203,7 @@ let NestCrudService = class NestCrudService {
         const orderDirection = 'DESC';
         const qb = this.repo.createQueryBuilder('e');
         // Join relations
-        if (this.include.length > 0) {
-            this.include.forEach((relation) => {
-                const parts = relation.split('.');
-                if (parts.length === 1) {
-                    qb.leftJoinAndSelect(`e.${parts[0]}`, parts[0]);
-                }
-                else {
-                    const parentAlias = parts.slice(0, -1).join('_');
-                    const field = parts[parts.length - 1];
-                    const alias = parts.join('_');
-                    qb.leftJoinAndSelect(`${parentAlias}.${field}`, alias);
-                }
-            });
-        }
+        this.applyIncludeJoins(qb);
         // Apply filters
         (0, filter_helper_1.applyFilters)(qb, query.filter, this.allowedFilters);
         // Apply cursor filter
@@ -232,15 +249,21 @@ let NestCrudService = class NestCrudService {
             },
         };
     }
-    async findOne(id) {
+    async findOne(id, user) {
         await this.executeHook(this.hooks.beforeFindOne, { id });
-        const relationsObj = this.include.length > 0
-            ? this.buildRelationsObject(this.include)
-            : undefined;
-        const entity = await this.repo.findOne({
-            where: { id },
-            relations: relationsObj,
-        });
+        let entity;
+        if (this.enforceOwnershipFor(user)) {
+            entity = await this.findOwnedEntity(id, user);
+        }
+        else {
+            const relationsObj = this.include.length > 0
+                ? this.buildRelationsObject(this.include)
+                : undefined;
+            entity = await this.repo.findOne({
+                where: { id },
+                relations: relationsObj,
+            });
+        }
         if (!entity) {
             throw new common_1.NotFoundException('Resource not found');
         }
@@ -261,10 +284,16 @@ let NestCrudService = class NestCrudService {
         await this.executeHook(this.hooks.afterCreate, { entity, payload: payloadSnapshot });
         return result;
     }
-    async update(id, payload) {
-        const existing = await this.repo.findOneBy({
-            id,
-        });
+    async update(id, payload, user) {
+        let existing;
+        if (this.enforceOwnershipFor(user)) {
+            existing = await this.findOwnedEntity(id, user);
+        }
+        else {
+            existing = await this.repo.findOneBy({
+                id,
+            });
+        }
         if (!existing) {
             throw new common_1.NotFoundException('Resource not found');
         }
@@ -273,14 +302,20 @@ let NestCrudService = class NestCrudService {
         const resolved = await this.resolveRelations(payload);
         this.repo.merge(existing, resolved);
         await this.repo.save(existing);
-        const result = await this.findOne(id);
+        const result = await this.findOne(id, user);
         await this.executeHook(this.hooks.afterUpdate, { entity: result, payload: payloadSnapshot, id });
         return result;
     }
-    async remove(id) {
-        const existing = await this.repo.findOneBy({
-            id,
-        });
+    async remove(id, user) {
+        let existing;
+        if (this.enforceOwnershipFor(user)) {
+            existing = await this.findOwnedEntity(id, user);
+        }
+        else {
+            existing = await this.repo.findOneBy({
+                id,
+            });
+        }
         if (!existing) {
             throw new common_1.NotFoundException('Resource not found');
         }

package/dist/lib/testing/crud-controller.test-suites.js

@@ -71,7 +71,7 @@ function crudControllerTests(config) {
             const expectedResult = { id: 1, name: 'Test' };
             service.findOne.mockResolvedValue(expectedResult);
             const result = await controller.findOne(1);
-            expect(service.findOne).toHaveBeenCalledWith(1);
+            expect(service.findOne).toHaveBeenCalledWith(1, undefined);
             expect(result).toEqual(expectedResult);
         });
     });
@@ -91,7 +91,7 @@ function crudControllerTests(config) {
             const expectedResult = { id: 1 };
             service.update.mockResolvedValue(expectedResult);
             const result = await controller.update(1, dto);
-            expect(service.update).toHaveBeenCalledWith(1, dto);
+            expect(service.update).toHaveBeenCalledWith(1, dto, undefined);
             expect(result).toEqual(expectedResult);
         });
     });
@@ -99,7 +99,7 @@ function crudControllerTests(config) {
         it('should call service.remove', async () => {
             service.remove.mockResolvedValue(true);
             const result = await controller.remove(1);
-            expect(service.remove).toHaveBeenCalledWith(1);
+            expect(service.remove).toHaveBeenCalledWith(1, undefined);
             expect(result).toBe(true);
         });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nest-util/nest-crud",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",