@nextage/era-lib 1.0.189 → 1.0.190
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/constants.d.ts +13 -4
- package/build/constants.d.ts.map +1 -1
- package/build/constants.js +15 -7
- package/build/constants.js.map +1 -1
- package/build/enums.d.ts +13 -2
- package/build/enums.d.ts.map +1 -1
- package/build/enums.js +13 -2
- package/build/enums.js.map +1 -1
- package/build/utils/functs.d.ts +2 -2
- package/build/utils/functs.js +4 -4
- package/package.json +1 -1
package/build/constants.d.ts
CHANGED
|
@@ -1,12 +1,21 @@
|
|
|
1
1
|
import { BaseRoles } from './enums';
|
|
2
2
|
import { ThreatLikelihood } from './events/types/threat.enums';
|
|
3
3
|
export declare const LICENSE_DATE_FORMAT = "YYYY-MM-DD";
|
|
4
|
+
/**
|
|
5
|
+
* Gruppi di ruoli, per livello (ADR-0005).
|
|
6
|
+
*
|
|
7
|
+
* I gruppi `SYSTEM_*`/`TENANT_*` sono **cumulativi**: ogni livello include quelli superiori.
|
|
8
|
+
* `TENANT_ADMIN_ROLES` e successivi vanno usati nelle direttive `@auth`, ma **non bastano**:
|
|
9
|
+
* ogni operazione su una specifica organizzazione deve passare anche da `resolveOrgScope`.
|
|
10
|
+
*/
|
|
4
11
|
export declare const ADMIN_ROLES: BaseRoles[];
|
|
5
|
-
export declare const
|
|
6
|
-
export declare const
|
|
7
|
-
export declare const
|
|
8
|
-
export declare const
|
|
12
|
+
export declare const SYSTEM_ROLES: BaseRoles[];
|
|
13
|
+
export declare const TENANT_ADMIN_ROLES: BaseRoles[];
|
|
14
|
+
export declare const TENANT_MANAGE_ROLES: BaseRoles[];
|
|
15
|
+
export declare const TENANT_EDIT_ROLES: BaseRoles[];
|
|
16
|
+
/** Ruoli di livello organizzazione: gli unici delegabili per invito o concessione (T16). */
|
|
9
17
|
export declare const ORG_MEMBER_ROLES: BaseRoles[];
|
|
18
|
+
/** Ruoli di livello provider: trasversali ai tenant, assegnabili solo dal livello sistema. */
|
|
10
19
|
export declare const APP_ROLES: BaseRoles[];
|
|
11
20
|
/**
|
|
12
21
|
* Application response codes returned in API/GraphQL error payloads.
|
package/build/constants.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAa,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,eAAO,MAAM,WAAW,
|
|
1
|
+
{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAa,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,aAAuD,CAAC;AAChF,eAAO,MAAM,YAAY,aAA2D,CAAC;AACrF,eAAO,MAAM,kBAAkB,aAAyD,CAAC;AACzF,eAAO,MAAM,mBAAmB,aAAqD,CAAC;AACtF,eAAO,MAAM,iBAAiB,aAAsD,CAAC;AAErF,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,aAA6E,CAAC;AAE3G,8FAA8F;AAC9F,eAAO,MAAM,SAAS,aAAkE,CAAC;AAEzF;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAapB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;CAmBzB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;CAmB3B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;CAiB3B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;CAiB3B,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;CAezB,CAAC"}
|
package/build/constants.js
CHANGED
|
@@ -1,17 +1,25 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.GDPR_DEFAULTS = exports.N22301_DEFAULTS = exports.N20000_DEFAULTS = exports.N27001_DEFAULTS = exports.FNSC_DEFAULTS = exports.RES_CODE = exports.APP_ROLES = exports.ORG_MEMBER_ROLES = exports.
|
|
3
|
+
exports.GDPR_DEFAULTS = exports.N22301_DEFAULTS = exports.N20000_DEFAULTS = exports.N27001_DEFAULTS = exports.FNSC_DEFAULTS = exports.RES_CODE = exports.APP_ROLES = exports.ORG_MEMBER_ROLES = exports.TENANT_EDIT_ROLES = exports.TENANT_MANAGE_ROLES = exports.TENANT_ADMIN_ROLES = exports.SYSTEM_ROLES = exports.ADMIN_ROLES = exports.LICENSE_DATE_FORMAT = void 0;
|
|
4
4
|
const enums_1 = require("./enums");
|
|
5
5
|
const threat_enums_1 = require("./events/types/threat.enums");
|
|
6
6
|
exports.LICENSE_DATE_FORMAT = 'YYYY-MM-DD';
|
|
7
|
+
/**
|
|
8
|
+
* Gruppi di ruoli, per livello (ADR-0005).
|
|
9
|
+
*
|
|
10
|
+
* I gruppi `SYSTEM_*`/`TENANT_*` sono **cumulativi**: ogni livello include quelli superiori.
|
|
11
|
+
* `TENANT_ADMIN_ROLES` e successivi vanno usati nelle direttive `@auth`, ma **non bastano**:
|
|
12
|
+
* ogni operazione su una specifica organizzazione deve passare anche da `resolveOrgScope`.
|
|
13
|
+
*/
|
|
7
14
|
exports.ADMIN_ROLES = [enums_1.BaseRoles.SADMIN, enums_1.BaseRoles.ADMIN];
|
|
8
|
-
exports.
|
|
9
|
-
exports.
|
|
10
|
-
exports.
|
|
11
|
-
exports.
|
|
12
|
-
|
|
15
|
+
exports.SYSTEM_ROLES = [...exports.ADMIN_ROLES, enums_1.BaseRoles.APP_CONFIG];
|
|
16
|
+
exports.TENANT_ADMIN_ROLES = [...exports.SYSTEM_ROLES, enums_1.BaseRoles.APP_TENANT_MNG];
|
|
17
|
+
exports.TENANT_MANAGE_ROLES = [...exports.TENANT_ADMIN_ROLES, enums_1.BaseRoles.ORG_MANAGER];
|
|
18
|
+
exports.TENANT_EDIT_ROLES = [...exports.TENANT_MANAGE_ROLES, enums_1.BaseRoles.ORG_EDITOR];
|
|
19
|
+
/** Ruoli di livello organizzazione: gli unici delegabili per invito o concessione (T16). */
|
|
13
20
|
exports.ORG_MEMBER_ROLES = [enums_1.BaseRoles.ORG_MANAGER, enums_1.BaseRoles.ORG_EDITOR, enums_1.BaseRoles.ORG_MEMBER];
|
|
14
|
-
|
|
21
|
+
/** Ruoli di livello provider: trasversali ai tenant, assegnabili solo dal livello sistema. */
|
|
22
|
+
exports.APP_ROLES = [enums_1.BaseRoles.APP_CONFIG, enums_1.BaseRoles.APP_TENANT_MNG];
|
|
15
23
|
/**
|
|
16
24
|
* Application response codes returned in API/GraphQL error payloads.
|
|
17
25
|
*
|
package/build/constants.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAA,mCAA2C;AAC3C,8DAA+D;AAElD,QAAA,mBAAmB,GAAG,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAA,mCAA2C;AAC3C,8DAA+D;AAElD,QAAA,mBAAmB,GAAG,YAAY,CAAC;AAEhD;;;;;;GAMG;AACU,QAAA,WAAW,GAAW,CAAC,iBAAS,CAAC,MAAM,EAAW,iBAAS,CAAC,KAAK,CAAC,CAAC;AACnE,QAAA,YAAY,GAAU,CAAC,GAAG,mBAAW,EAAa,iBAAS,CAAC,UAAU,CAAC,CAAC;AACxE,QAAA,kBAAkB,GAAI,CAAC,GAAG,oBAAY,EAAY,iBAAS,CAAC,cAAc,CAAC,CAAC;AAC5E,QAAA,mBAAmB,GAAG,CAAC,GAAG,0BAAkB,EAAM,iBAAS,CAAC,WAAW,CAAC,CAAC;AACzE,QAAA,iBAAiB,GAAK,CAAC,GAAG,2BAAmB,EAAK,iBAAS,CAAC,UAAU,CAAC,CAAC;AAErF,4FAA4F;AAC/E,QAAA,gBAAgB,GAAM,CAAC,iBAAS,CAAC,WAAW,EAAM,iBAAS,CAAC,UAAU,EAAE,iBAAS,CAAC,UAAU,CAAC,CAAC;AAE3G,8FAA8F;AACjF,QAAA,SAAS,GAAa,CAAC,iBAAS,CAAC,UAAU,EAAO,iBAAS,CAAC,cAAc,CAAC,CAAC;AAEzF;;;;GAIG;AACU,QAAA,QAAQ,GAAG;IACtB,OAAO,EAAS,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAChD,YAAY,EAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;IACrD,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACvD,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACvD,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAC5D,SAAS,EAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;IAClD,SAAS,EAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;IAClD,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;IAC9D,WAAW,EAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;IAC9D,OAAO,EAAS,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACvD,aAAa,EAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAC;IAC/D,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAC;CAChE,CAAC;AAEF;;;;;GAKG;AACU,QAAA,aAAa,GAAG;IAC3B,cAAc,EAAa,EAAE;IAC7B,mBAAmB,EAAQ,EAAE;IAC7B,cAAc,EAAa,CAAC;IAC5B,cAAc,EAAa,EAAE;IAC7B,eAAe,EAAY,CAAC;IAC5B,gBAAgB,EAAW,+BAAgB,CAAC,MAAM;IAClD,oBAAoB,EAAO,CAAC;IAC5B,qBAAqB,EAAM,CAAC;IAC5B,yBAAyB,EAAE,CAAC;IAC5B,eAAe,EAAY,CAAC;IAC5B,mBAAmB,EAAQ,CAAC;IAC5B,kBAAkB,EAAS,CAAC;IAC5B,sBAAsB,EAAK,CAAC;IAC5B,kBAAkB,EAAS,CAAC;IAC5B,sBAAsB,EAAK,CAAC;IAC5B,mBAAmB,EAAQ,CAAC;IAC5B,uBAAuB,EAAI,CAAC;IAC5B,WAAW,EAAgB,CAAC;CAC7B,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,cAAc,EAAa,EAAE;IAC7B,mBAAmB,EAAQ,EAAE;IAC7B,cAAc,EAAa,CAAC;IAC5B,cAAc,EAAa,EAAE;IAC7B,eAAe,EAAY,CAAC;IAC5B,gBAAgB,EAAW,+BAAgB,CAAC,MAAM;IAClD,oBAAoB,EAAO,CAAC;IAC5B,qBAAqB,EAAM,CAAC;IAC5B,yBAAyB,EAAE,CAAC;IAC5B,eAAe,EAAY,CAAC;IAC5B,mBAAmB,EAAQ,CAAC;IAC5B,kBAAkB,EAAS,CAAC;IAC5B,sBAAsB,EAAK,CAAC;IAC5B,kBAAkB,EAAS,CAAC;IAC5B,sBAAsB,EAAK,CAAC;IAC5B,mBAAmB,EAAQ,CAAC;IAC5B,uBAAuB,EAAI,CAAC;IAC5B,WAAW,EAAgB,CAAC;CAC7B,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,cAAc,EAAa,EAAE;IAC7B,mBAAmB,EAAQ,EAAE;IAC7B,cAAc,EAAa,CAAC;IAC5B,cAAc,EAAa,EAAE;IAC7B,eAAe,EAAY,CAAC;IAC5B,gBAAgB,EAAW,+BAAgB,CAAC,MAAM;IAClD,oBAAoB,EAAO,CAAC;IAC5B,aAAa,EAAc,CAAC;IAC5B,iBAAiB,EAAU,CAAC;IAC5B,kBAAkB,EAAS,CAAC;IAC5B,sBAAsB,EAAK,CAAC;IAC5B,gBAAgB,EAAW,CAAC;IAC5B,oBAAoB,EAAO,CAAC;IAC5B,mBAAmB,EAAQ,CAAC;IAC5B,uBAAuB,EAAI,CAAC;IAC5B,WAAW,EAAgB,CAAC;CAC7B,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,cAAc,EAAW,EAAE;IAC3B,mBAAmB,EAAM,EAAE;IAC3B,cAAc,EAAW,CAAC;IAC1B,cAAc,EAAW,EAAE;IAC3B,eAAe,EAAU,CAAC;IAC1B,gBAAgB,EAAS,CAAC;IAC1B,oBAAoB,EAAK,CAAC;IAC1B,aAAa,EAAY,CAAC;IAC1B,iBAAiB,EAAQ,CAAC;IAC1B,gBAAgB,EAAS,CAAC;IAC1B,oBAAoB,EAAK,CAAC;IAC1B,gBAAgB,EAAS,CAAC;IAC1B,oBAAoB,EAAK,CAAC;IAC1B,mBAAmB,EAAM,CAAC;IAC1B,uBAAuB,EAAE,CAAC;IAC1B,WAAW,EAAc,CAAC;CAC3B,CAAC;AAEW,QAAA,aAAa,GAAG;IAC3B,cAAc,EAAmB,CAAC;IAClC,eAAe,EAAkB,CAAC;IAClC,uBAAuB,EAAU,CAAC;IAClC,2BAA2B,EAAM,CAAC;IAClC,2BAA2B,EAAM,CAAC;IAClC,+BAA+B,EAAE,CAAC;IAClC,mBAAmB,EAAc,CAAC;IAClC,uBAAuB,EAAU,CAAC;IAClC,uBAAuB,EAAU,CAAC;IAClC,2BAA2B,EAAM,CAAC;IAClC,0BAA0B,EAAO,CAAC;IAClC,8BAA8B,EAAG,CAAC;IAClC,qBAAqB,EAAY,CAAC;IAClC,yBAAyB,EAAQ,CAAC;CACnC,CAAC"}
|
package/build/enums.d.ts
CHANGED
|
@@ -30,11 +30,22 @@ export declare enum LOGIN_ERRORS {
|
|
|
30
30
|
LOGIN_FAILED = "loginFailed",
|
|
31
31
|
EXPIRED = "expired"
|
|
32
32
|
}
|
|
33
|
+
/**
|
|
34
|
+
* Ruoli di base, su tre livelli (ADR-0005):
|
|
35
|
+
*
|
|
36
|
+
* - **sistema** `SADMIN`, `ADMIN` — nessun vincolo
|
|
37
|
+
* - **provider** `APP_*` — trasversali ai tenant, assegnabili
|
|
38
|
+
* solo dal livello sistema e solo a
|
|
39
|
+
* utenti dell'organizzazione `main`
|
|
40
|
+
* - **organizzazione** `ORG_*` — ambito di una singola organizzazione
|
|
41
|
+
*
|
|
42
|
+
* Il prefisso identifica il livello: non cambiare livello a un ruolo senza cambiarne il prefisso.
|
|
43
|
+
*/
|
|
33
44
|
export declare enum BaseRoles {
|
|
34
45
|
SADMIN = "SUPERADMIN",
|
|
35
46
|
ADMIN = "ADMIN",
|
|
36
|
-
|
|
37
|
-
|
|
47
|
+
APP_CONFIG = "APP_CONFIG",
|
|
48
|
+
APP_TENANT_MNG = "APP_TENANT_MNG",
|
|
38
49
|
ORG_MANAGER = "ORG_MANAGER",
|
|
39
50
|
ORG_EDITOR = "ORG_EDITOR",
|
|
40
51
|
ORG_MEMBER = "ORG_MEMBER"
|
package/build/enums.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAY,YAAY;IACtB,eAAe,oBAAsB;IACrC,gBAAgB,qBAAsB;IACtC,eAAe,oBAAsB;IACrC,eAAe,oBAAsB;IACrC,gBAAgB,qBAAsB;IACtC,kBAAkB,uBAAsB;IACxC,YAAY,iBAAsB;IAClC,aAAa,kBAAsB;IACnC,YAAY,iBAAsB;CACnC;AAED,oBAAY,gBAAgB;IAC1B,IAAI,SAAY;IAChB,OAAO,SAAS;IAChB,KAAK,UAAY;IACjB,KAAK,UAAY;CAClB;AAED,oBAAY,UAAU;IACpB,IAAI,SAAW;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,GAAG,WAAc;CAClB;AAED,oBAAY,YAAY;IACtB,cAAc,iBAAkB;IAChC,eAAe,kBAAkB;IACjC,YAAY,gBAAmB;IAC/B,OAAO,YAAoB;CAC5B;AAED,oBAAY,SAAS;IACnB,MAAM,
|
|
1
|
+
{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAY,YAAY;IACtB,eAAe,oBAAsB;IACrC,gBAAgB,qBAAsB;IACtC,eAAe,oBAAsB;IACrC,eAAe,oBAAsB;IACrC,gBAAgB,qBAAsB;IACtC,kBAAkB,uBAAsB;IACxC,YAAY,iBAAsB;IAClC,aAAa,kBAAsB;IACnC,YAAY,iBAAsB;CACnC;AAED,oBAAY,gBAAgB;IAC1B,IAAI,SAAY;IAChB,OAAO,SAAS;IAChB,KAAK,UAAY;IACjB,KAAK,UAAY;CAClB;AAED,oBAAY,UAAU;IACpB,IAAI,SAAW;IACf,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,GAAG,WAAc;CAClB;AAED,oBAAY,YAAY;IACtB,cAAc,iBAAkB;IAChC,eAAe,kBAAkB;IACjC,YAAY,gBAAmB;IAC/B,OAAO,YAAoB;CAC5B;AAED;;;;;;;;;;GAUG;AACH,oBAAY,SAAS;IACnB,MAAM,eAAuB;IAC7B,KAAK,UAAmB;IACxB,UAAU,eAAmB;IAC7B,cAAc,mBAAmB;IACjC,WAAW,gBAAmB;IAC9B,UAAU,eAAmB;IAC7B,UAAU,eAAmB;CAC9B;AAED,oBAAY,SAAS;IACnB,GAAG,QAAQ;IACX,GAAG,QAAQ;CACZ;AAED,oBAAY,iBAAiB;IAC3B,OAAO,YAAuB;IAC9B,UAAU,eAAuB;IACjC,eAAe,oBAAuB;IACtC,kBAAkB,uBAAuB;IACzC,QAAQ,aAAuB;CAChC"}
|
package/build/enums.js
CHANGED
|
@@ -37,12 +37,23 @@ var LOGIN_ERRORS;
|
|
|
37
37
|
LOGIN_ERRORS["LOGIN_FAILED"] = "loginFailed";
|
|
38
38
|
LOGIN_ERRORS["EXPIRED"] = "expired";
|
|
39
39
|
})(LOGIN_ERRORS || (exports.LOGIN_ERRORS = LOGIN_ERRORS = {}));
|
|
40
|
+
/**
|
|
41
|
+
* Ruoli di base, su tre livelli (ADR-0005):
|
|
42
|
+
*
|
|
43
|
+
* - **sistema** `SADMIN`, `ADMIN` — nessun vincolo
|
|
44
|
+
* - **provider** `APP_*` — trasversali ai tenant, assegnabili
|
|
45
|
+
* solo dal livello sistema e solo a
|
|
46
|
+
* utenti dell'organizzazione `main`
|
|
47
|
+
* - **organizzazione** `ORG_*` — ambito di una singola organizzazione
|
|
48
|
+
*
|
|
49
|
+
* Il prefisso identifica il livello: non cambiare livello a un ruolo senza cambiarne il prefisso.
|
|
50
|
+
*/
|
|
40
51
|
var BaseRoles;
|
|
41
52
|
(function (BaseRoles) {
|
|
42
53
|
BaseRoles["SADMIN"] = "SUPERADMIN";
|
|
43
54
|
BaseRoles["ADMIN"] = "ADMIN";
|
|
44
|
-
BaseRoles["
|
|
45
|
-
BaseRoles["
|
|
55
|
+
BaseRoles["APP_CONFIG"] = "APP_CONFIG";
|
|
56
|
+
BaseRoles["APP_TENANT_MNG"] = "APP_TENANT_MNG";
|
|
46
57
|
BaseRoles["ORG_MANAGER"] = "ORG_MANAGER";
|
|
47
58
|
BaseRoles["ORG_EDITOR"] = "ORG_EDITOR";
|
|
48
59
|
BaseRoles["ORG_MEMBER"] = "ORG_MEMBER";
|
package/build/enums.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,IAAY,YAUX;AAVD,WAAY,YAAY;IACtB,mDAAqC,CAAA;IACrC,qDAAsC,CAAA;IACtC,mDAAqC,CAAA;IACrC,mDAAqC,CAAA;IACrC,qDAAsC,CAAA;IACtC,yDAAwC,CAAA;IACxC,6CAAkC,CAAA;IAClC,+CAAmC,CAAA;IACnC,6CAAkC,CAAA;AACpC,CAAC,EAVW,YAAY,4BAAZ,YAAY,QAUvB;AAED,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,iCAAgB,CAAA;IAChB,oCAAgB,CAAA;IAChB,mCAAiB,CAAA;IACjB,mCAAiB,CAAA;AACnB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAED,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,2BAAe,CAAA;IACf,+BAAiB,CAAA;IACjB,+BAAiB,CAAA;IACjB,4BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,+CAAgC,CAAA;IAChC,iDAAiC,CAAA;IACjC,4CAA+B,CAAA;IAC/B,mCAA2B,CAAA;AAC7B,CAAC,EALW,YAAY,4BAAZ,YAAY,QAKvB;AAED,IAAY,SAQX;AARD,WAAY,SAAS;IACnB,
|
|
1
|
+
{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,IAAY,YAUX;AAVD,WAAY,YAAY;IACtB,mDAAqC,CAAA;IACrC,qDAAsC,CAAA;IACtC,mDAAqC,CAAA;IACrC,mDAAqC,CAAA;IACrC,qDAAsC,CAAA;IACtC,yDAAwC,CAAA;IACxC,6CAAkC,CAAA;IAClC,+CAAmC,CAAA;IACnC,6CAAkC,CAAA;AACpC,CAAC,EAVW,YAAY,4BAAZ,YAAY,QAUvB;AAED,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,iCAAgB,CAAA;IAChB,oCAAgB,CAAA;IAChB,mCAAiB,CAAA;IACjB,mCAAiB,CAAA;AACnB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAED,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,2BAAe,CAAA;IACf,+BAAiB,CAAA;IACjB,+BAAiB,CAAA;IACjB,4BAAiB,CAAA;AACnB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AAED,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,+CAAgC,CAAA;IAChC,iDAAiC,CAAA;IACjC,4CAA+B,CAAA;IAC/B,mCAA2B,CAAA;AAC7B,CAAC,EALW,YAAY,4BAAZ,YAAY,QAKvB;AAED;;;;;;;;;;GAUG;AACH,IAAY,SAQX;AARD,WAAY,SAAS;IACnB,kCAA6B,CAAA;IAC7B,4BAAwB,CAAA;IACxB,sCAA6B,CAAA;IAC7B,8CAAiC,CAAA;IACjC,wCAA8B,CAAA;IAC9B,sCAA6B,CAAA;IAC7B,sCAA6B,CAAA;AAC/B,CAAC,EARW,SAAS,yBAAT,SAAS,QAQpB;AAED,IAAY,SAGX;AAHD,WAAY,SAAS;IACnB,wBAAW,CAAA;IACX,wBAAW,CAAA;AACb,CAAC,EAHW,SAAS,yBAAT,SAAS,QAGpB;AAED,IAAY,iBAMX;AAND,WAAY,iBAAiB;IAC3B,wCAA8B,CAAA;IAC9B,8CAAiC,CAAA;IACjC,wDAAsC,CAAA;IACtC,8DAAyC,CAAA;IACzC,0CAA+B,CAAA;AACjC,CAAC,EANW,iBAAiB,iCAAjB,iBAAiB,QAM5B"}
|
package/build/utils/functs.d.ts
CHANGED
|
@@ -122,7 +122,7 @@ export declare function setEntityI18nString(input: NxTypeObject<string> | string
|
|
|
122
122
|
/**
|
|
123
123
|
* Sets the tenantId on the given payload based on the user's role and organizations.
|
|
124
124
|
* - Normal users: tenantId is always set to their first organization
|
|
125
|
-
* -
|
|
125
|
+
* - System/provider users (SYSTEM_ROLES):
|
|
126
126
|
* - If applyDefaultForAdmin = false → can access all tenants
|
|
127
127
|
* - If applyDefaultForAdmin = true and tenantId not provided → tenantId set to first org (subset view)
|
|
128
128
|
*/
|
|
@@ -130,7 +130,7 @@ export declare function setTenant(item: NxObject, user?: BaseUser, applyDefaultF
|
|
|
130
130
|
/**
|
|
131
131
|
* Scopes a query filter to the user's tenant (multi-tenancy guard).
|
|
132
132
|
*
|
|
133
|
-
*
|
|
133
|
+
* System/provider roles (`SYSTEM_ROLES`) are left unscoped so they can query across
|
|
134
134
|
* tenants; every other user gets `tenantId` forced to their first organization.
|
|
135
135
|
* Throws when a non-admin user has no organization.
|
|
136
136
|
*
|
package/build/utils/functs.js
CHANGED
|
@@ -506,12 +506,12 @@ function setEntityI18nString(input, lang) {
|
|
|
506
506
|
/**
|
|
507
507
|
* Sets the tenantId on the given payload based on the user's role and organizations.
|
|
508
508
|
* - Normal users: tenantId is always set to their first organization
|
|
509
|
-
* -
|
|
509
|
+
* - System/provider users (SYSTEM_ROLES):
|
|
510
510
|
* - If applyDefaultForAdmin = false → can access all tenants
|
|
511
511
|
* - If applyDefaultForAdmin = true and tenantId not provided → tenantId set to first org (subset view)
|
|
512
512
|
*/
|
|
513
513
|
function setTenant(item, user, applyDefaultForAdmin = false) {
|
|
514
|
-
const isAdmin = user?.hasRole(constants_1.
|
|
514
|
+
const isAdmin = user?.hasRole(constants_1.SYSTEM_ROLES);
|
|
515
515
|
// Admins who can see all tenants or already have tenantId specified → exit
|
|
516
516
|
if (isAdmin && (!applyDefaultForAdmin || item.tenantId))
|
|
517
517
|
return;
|
|
@@ -524,7 +524,7 @@ function setTenant(item, user, applyDefaultForAdmin = false) {
|
|
|
524
524
|
/**
|
|
525
525
|
* Scopes a query filter to the user's tenant (multi-tenancy guard).
|
|
526
526
|
*
|
|
527
|
-
*
|
|
527
|
+
* System/provider roles (`SYSTEM_ROLES`) are left unscoped so they can query across
|
|
528
528
|
* tenants; every other user gets `tenantId` forced to their first organization.
|
|
529
529
|
* Throws when a non-admin user has no organization.
|
|
530
530
|
*
|
|
@@ -532,7 +532,7 @@ function setTenant(item, user, applyDefaultForAdmin = false) {
|
|
|
532
532
|
* @param user the authenticated user (roles + organizations)
|
|
533
533
|
*/
|
|
534
534
|
function setTenantFilter(item, user) {
|
|
535
|
-
if (user?.hasRole(constants_1.
|
|
535
|
+
if (user?.hasRole(constants_1.SYSTEM_ROLES))
|
|
536
536
|
return;
|
|
537
537
|
if (!user?.organizations?.length)
|
|
538
538
|
throw new Error('Cannot proceed: organization not set');
|