@nocobase/acl 0.21.0-alpha.1 → 0.21.0-alpha.10

package/lib/acl-available-strategy.d.ts

@@ -3,6 +3,9 @@ export interface AvailableStrategyOptions {
     displayName?: string;
     actions?: false | string | string[];
     allowConfigure?: boolean;
+    /**
+     * @internal
+     */
     resource?: '*';
 }
 export declare const predicate: {

package/lib/acl-role.d.ts

@@ -12,6 +12,9 @@ export interface RoleActionParams {
 export interface ResourceActionsOptions {
     [actionName: string]: RoleActionParams;
 }
+/**
+ * @internal
+ */
 export declare class ACLRole {
     acl: ACL;
     name: string;

package/lib/acl.d.ts

@@ -15,9 +15,15 @@ interface CanResult {
 }
 export interface DefineOptions {
     role: string;
+    /**
+     * @internal
+     */
     allowConfigure?: boolean;
     strategy?: string | AvailableStrategyOptions;
     actions?: ResourceActionsOptions;
+    /**
+     * @internal
+     */
     routes?: any;
     snippets?: string[];
 }
@@ -34,6 +40,7 @@ interface CanArgs {
     role: string;
     resource: string;
     action: string;
+    rawResourceName?: string;
     ctx?: any;
 }
 export declare class ACL extends EventEmitter {

package/lib/acl.js

@@ -154,13 +154,14 @@ const _ACL = class _ACL extends import_events.default {
     this.addListener("beforeGrantAction", listener);
   }
   can(options) {
-    const { role, resource, action } = options;
+    const { role, resource, action, rawResourceName } = options;
     const aclRole = this.roles.get(role);
     if (!aclRole) {
       return null;
     }
-    const snippetAllowed = aclRole.snippetAllowed(`${resource}:${action}`);
-    const fixedParams = this.fixedParamsManager.getParams(resource, action);
+    const actionPath = `${rawResourceName ? rawResourceName : resource}:${action}`;
+    const snippetAllowed = aclRole.snippetAllowed(actionPath);
+    const fixedParams = this.fixedParamsManager.getParams(rawResourceName ? rawResourceName : resource, action);
     const mergeParams = /* @__PURE__ */ __name((result) => {
       const params = result["params"] || {};
       const mergedParams = (0, import_utils.assign)(params, fixedParams);
@@ -257,15 +258,27 @@ const _ACL = class _ACL extends import_events.default {
     const acl = this;
     return /* @__PURE__ */ __name(async function ACLMiddleware(ctx, next) {
       const roleName = ctx.state.currentRole || "anonymous";
-      const { resourceName, actionName } = ctx.action;
+      const { resourceName: rawResourceName, actionName } = ctx.action;
+      let resourceName = rawResourceName;
+      if (rawResourceName.includes(".")) {
+        resourceName = rawResourceName.split(".").pop();
+      }
+      if (ctx.getCurrentRepository) {
+        const currentRepository = ctx.getCurrentRepository();
+        if (currentRepository && currentRepository.targetCollection) {
+          resourceName = ctx.getCurrentRepository().targetCollection.name;
+        }
+      }
       ctx.can = (options) => {
         const canResult = acl.can({ role: roleName, ...options });
         return canResult;
       };
       ctx.permission = {
-        can: ctx.can({ resource: resourceName, action: actionName })
+        can: ctx.can({ resource: resourceName, action: actionName, rawResourceName }),
+        resourceName,
+        actionName
       };
-      return (0, import_koa_compose.default)(acl.middlewares.nodes)(ctx, next);
+      return await (0, import_koa_compose.default)(acl.middlewares.nodes)(ctx, next);
     }, "ACLMiddleware");
   }
   /**
@@ -273,7 +286,17 @@ const _ACL = class _ACL extends import_events.default {
    */
   async getActionParams(ctx) {
     const roleName = ctx.state.currentRole || "anonymous";
-    const { resourceName, actionName } = ctx.action;
+    const { resourceName: rawResourceName, actionName } = ctx.action;
+    let resourceName = rawResourceName;
+    if (rawResourceName.includes(".")) {
+      resourceName = rawResourceName.split(".").pop();
+    }
+    if (ctx.getCurrentRepository) {
+      const currentRepository = ctx.getCurrentRepository();
+      if (currentRepository && currentRepository.targetCollection) {
+        resourceName = ctx.getCurrentRepository().targetCollection.name;
+      }
+    }
     ctx.can = (options) => {
       const can = this.can({ role: roleName, ...options });
       if (!can) {
@@ -282,7 +305,9 @@ const _ACL = class _ACL extends import_events.default {
       return import_lodash.default.cloneDeep(can);
     };
     ctx.permission = {
-      can: ctx.can({ resource: resourceName, action: actionName })
+      can: ctx.can({ resource: resourceName, action: actionName, rawResourceName }),
+      resourceName,
+      actionName
     };
     await (0, import_koa_compose.default)(this.middlewares.nodes)(ctx, async () => {
     });
@@ -312,7 +337,7 @@ const _ACL = class _ACL extends import_events.default {
       async (ctx, next) => {
         var _a, _b, _c, _d;
         const resourcerAction = ctx.action;
-        const { resourceName, actionName } = ctx.action;
+        const { resourceName, actionName } = ctx.permission;
         const permission = ctx.permission;
         ((_a = ctx.log) == null ? void 0 : _a.info) && ctx.log.info("ctx permission", permission);
         if ((!permission.can || typeof permission.can !== "object") && !permission.skip) {

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@nocobase/acl",
-  "version": "0.21.0-alpha.1",
+  "version": "0.21.0-alpha.10",
   "description": "",
   "license": "Apache-2.0",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
   "dependencies": {
-    "@nocobase/resourcer": "0.21.0-alpha.1",
-    "@nocobase/utils": "0.21.0-alpha.1",
+    "@nocobase/resourcer": "0.21.0-alpha.10",
+    "@nocobase/utils": "0.21.0-alpha.10",
     "minimatch": "^5.1.1"
   },
   "repository": {
@@ -15,5 +15,5 @@
     "url": "git+https://github.com/nocobase/nocobase.git",
     "directory": "packages/acl"
   },
-  "gitHead": "afd2f3d1341b85ea9daa7b2667dd4ace1fafb7ff"
+  "gitHead": "98adf5ec996a4f359c6ca1c4a6ac837c43b6e268"
 }