@nocobase/acl 2.0.0-alpha.8 → 2.0.0-beta.1

package/lib/acl.js

@@ -48,9 +48,9 @@ var import_acl_available_action = require("./acl-available-action");
 var import_acl_available_strategy = require("./acl-available-strategy");
 var import_acl_role = require("./acl-role");
 var import_allow_manager = require("./allow-manager");
+var import_no_permission_error = require("./errors/no-permission-error");
 var import_fixed_params_manager = __toESM(require("./fixed-params-manager"));
 var import_snippet_manager = __toESM(require("./snippet-manager"));
-var import_no_permission_error = require("./errors/no-permission-error");
 var import_utils2 = require("./utils");
 const _ACL = class _ACL extends import_events.default {
   /**
@@ -196,6 +196,13 @@ const _ACL = class _ACL extends import_events.default {
     if (!aclRole) {
       return null;
     }
+    if (role === "root") {
+      return {
+        resource,
+        action,
+        role
+      };
+    }
     const actionPath = `${rawResourceName ? rawResourceName : resource}:${action}`;
     const snippetAllowed = aclRole.snippetAllowed(actionPath);
     const fixedParams = this.fixedParamsManager.getParams(rawResourceName ? rawResourceName : resource, action);
@@ -262,6 +269,9 @@ const _ACL = class _ACL extends import_events.default {
    * @deprecated
    */
   skip(resourceName, actionNames, condition) {
+    if (!condition) {
+      condition = "public";
+    }
     if (!Array.isArray(actionNames)) {
       actionNames = [actionNames];
     }
@@ -297,6 +307,7 @@ const _ACL = class _ACL extends import_events.default {
   middleware() {
     const acl = this;
     return /* @__PURE__ */ __name(async function ACLMiddleware(ctx, next) {
+      ctx.acl = acl;
       const roleName = ctx.state.currentRole || "anonymous";
       const { resourceName: rawResourceName, actionName } = ctx.action;
       let resourceName = rawResourceName;
@@ -464,9 +475,11 @@ const _ACL = class _ACL extends import_events.default {
 __name(_ACL, "ACL");
 let ACL = _ACL;
 function getUser(ctx) {
+  const dataSource = ctx.app.dataSourceManager.dataSources.get("main");
+  const db = dataSource.collectionManager.db;
   return async ({ fields }) => {
     var _a, _b;
-    const userFields = fields.filter((f) => f && ctx.db.getFieldByPath("users." + f));
+    const userFields = fields.filter((f) => f && db.getFieldByPath("users." + f));
     (_a = ctx.logger) == null ? void 0 : _a.info("filter-parse: ", { userFields });
     if (!ctx.state.currentUser) {
       return;
@@ -474,7 +487,7 @@ function getUser(ctx) {
     if (!userFields.length) {
       return;
     }
-    const user = await ctx.db.getRepository("users").findOne({
+    const user = await db.getRepository("users").findOne({
       filterByTk: ctx.state.currentUser.id,
       fields: userFields
     });

package/lib/allow-manager.d.ts

@@ -12,10 +12,12 @@ export declare class AllowManager {
     acl: ACL;
     protected skipActions: Map<string, Map<string, string | true | ConditionFunc>>;
     protected registeredCondition: Map<string, ConditionFunc>;
+    isPublicCondition: () => boolean;
     constructor(acl: ACL);
     allow(resourceName: string, actionName: string, condition?: string | ConditionFunc): void;
     getAllowedConditions(resourceName: string, actionName: string): Array<ConditionFunc | true>;
     registerAllowCondition(name: string, condition: ConditionFunc): void;
+    isPublic(resourceName: string, actionName: string, ctx: any): Promise<boolean>;
     isAllowed(resourceName: string, actionName: string, ctx: any): Promise<boolean>;
     aclMiddleware(): (ctx: any, next: any) => Promise<void>;
 }

package/lib/allow-manager.js

@@ -36,9 +36,7 @@ const _AllowManager = class _AllowManager {
     this.registerAllowCondition("loggedIn", (ctx) => {
       return ctx.state.currentUser;
     });
-    this.registerAllowCondition("public", (ctx) => {
-      return true;
-    });
+    this.registerAllowCondition("public", this.isPublicCondition);
     this.registerAllowCondition("allowConfigure", async (ctx) => {
       var _a;
       const roleName = ctx.state.currentRole;
@@ -54,6 +52,9 @@ const _AllowManager = class _AllowManager {
   }
   skipActions = /* @__PURE__ */ new Map();
   registeredCondition = /* @__PURE__ */ new Map();
+  isPublicCondition = /* @__PURE__ */ __name(() => {
+    return true;
+  }, "isPublicCondition");
   allow(resourceName, actionName, condition) {
     const actionMap = this.skipActions.get(resourceName) || /* @__PURE__ */ new Map();
     actionMap.set(actionName, condition || true);
@@ -78,6 +79,15 @@ const _AllowManager = class _AllowManager {
   registerAllowCondition(name, condition) {
     this.registeredCondition.set(name, condition);
   }
+  async isPublic(resourceName, actionName, ctx) {
+    const skippedConditions = this.getAllowedConditions(resourceName, actionName);
+    for (const skippedCondition of skippedConditions) {
+      if (skippedCondition === this.isPublicCondition) {
+        return true;
+      }
+    }
+    return false;
+  }
   async isAllowed(resourceName, actionName, ctx) {
     const skippedConditions = this.getAllowedConditions(resourceName, actionName);
     for (const skippedCondition of skippedConditions) {

package/lib/snippet-manager.js

@@ -56,7 +56,12 @@ const _SnippetManager = class _SnippetManager {
     if (snippet.name.includes("*") || snippet.name.endsWith(".")) {
       throw new Error(`Invalid snippet name: ${snippet.name}, name should not include * or end with dot.`);
     }
-    this.snippets.set(snippet.name, snippet);
+    const existed = this.snippets.get(snippet.name);
+    if (existed) {
+      existed.actions = Array.from(/* @__PURE__ */ new Set([...existed.actions, ...snippet.actions]));
+    } else {
+      this.snippets.set(snippet.name, snippet);
+    }
   }
   allow(actionPath, snippetName) {
     const negated = snippetName.startsWith("!");

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@nocobase/acl",
-  "version": "2.0.0-alpha.8",
+  "version": "2.0.0-beta.1",
   "description": "",
   "license": "AGPL-3.0",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
   "dependencies": {
-    "@nocobase/resourcer": "2.0.0-alpha.8",
-    "@nocobase/utils": "2.0.0-alpha.8",
+    "@nocobase/resourcer": "2.0.0-beta.1",
+    "@nocobase/utils": "2.0.0-beta.1",
     "minimatch": "^5.1.1"
   },
   "repository": {
@@ -15,5 +15,5 @@
     "url": "git+https://github.com/nocobase/nocobase.git",
     "directory": "packages/acl"
   },
-  "gitHead": "ff91246a3914c72dc1f4000d85df10a16798ff78"
+  "gitHead": "b3d1f65848fc91e673372ee734dafe6b1cf80586"
 }