@nocobase/plugin-acl 0.11.1-alpha.4 → 0.12.0-alpha.1

package/dist/server/model/RoleResourceModel.js

@@ -0,0 +1,55 @@
+'use strict';
+
+var acl = require('@nocobase/acl');
+var database = require('@nocobase/database');
+
+class RoleResourceModel extends database.Model {
+  async revoke(options) {
+    const { role, resourceName, grantHelper } = options;
+    role.revokeResource(resourceName);
+    const targetActions = grantHelper.resourceTargetActionMap.get(`${role.name}.${resourceName}`) || [];
+    for (const targetAction of targetActions) {
+      const targetActionResource = (grantHelper.targetActionResourceMap.get(targetAction) || []).filter(
+        (item) => `${role.name}.${resourceName}` !== item
+      );
+      grantHelper.targetActionResourceMap.set(targetAction, targetActionResource);
+      if (targetActionResource.length == 0) {
+        role.revokeAction(targetAction);
+      }
+    }
+    grantHelper.resourceTargetActionMap.set(`${role.name}.${resourceName}`, []);
+  }
+  async writeToACL(options) {
+    const { acl: acl$1, associationFieldsActions, grantHelper } = options;
+    const resourceName = this.get("name");
+    const roleName = this.get("roleName");
+    const role = acl$1.getRole(roleName);
+    if (!role) {
+      console.log(`${roleName} role does not exist`);
+      return;
+    }
+    await this.revoke({ role, resourceName, grantHelper });
+    if (this.usingActionsConfig === false) {
+      return;
+    }
+    const resource = new acl.ACLResource({
+      role,
+      name: resourceName
+    });
+    role.resources.set(resourceName, resource);
+    const actions = await this.getActions({
+      transaction: options.transaction
+    });
+    for (const action of actions) {
+      await action.writeToACL({
+        acl: acl$1,
+        role,
+        resourceName,
+        associationFieldsActions,
+        grantHelper: options.grantHelper
+      });
+    }
+  }
+}
+
+exports.RoleResourceModel = RoleResourceModel;