@nocobase/plugin-data-visualization 2.0.0-alpha.46 → 2.0.0-alpha.48

package/dist/externalVersion.js

@@ -8,18 +8,18 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.0.0-alpha.46",
+  "@nocobase/client": "2.0.0-alpha.48",
   "@formily/react": "2.3.7",
-  "@nocobase/plugin-ai": "2.0.0-alpha.46",
-  "@nocobase/flow-engine": "2.0.0-alpha.46",
+  "@nocobase/plugin-ai": "2.0.0-alpha.48",
+  "@nocobase/flow-engine": "2.0.0-alpha.48",
   "react-i18next": "11.18.6",
   "dayjs": "1.11.13",
   "@formily/shared": "2.3.7",
   "lodash": "4.17.21",
-  "@nocobase/cache": "2.0.0-alpha.46",
-  "@nocobase/server": "2.0.0-alpha.46",
-  "@nocobase/test": "2.0.0-alpha.46",
-  "@nocobase/utils": "2.0.0-alpha.46",
+  "@nocobase/cache": "2.0.0-alpha.48",
+  "@nocobase/server": "2.0.0-alpha.48",
+  "@nocobase/test": "2.0.0-alpha.48",
+  "@nocobase/utils": "2.0.0-alpha.48",
   "react": "18.2.0",
   "@emotion/css": "11.13.0",
   "@ant-design/icons": "5.6.1",
@@ -27,8 +27,9 @@ module.exports = {
   "antd": "5.24.2",
   "@formily/antd-v5": "1.2.3",
   "@formily/core": "2.3.7",
-  "@nocobase/actions": "2.0.0-alpha.46",
-  "@nocobase/database": "2.0.0-alpha.46",
+  "@nocobase/actions": "2.0.0-alpha.48",
+  "@nocobase/database": "2.0.0-alpha.48",
+  "@nocobase/acl": "2.0.0-alpha.48",
   "sequelize": "6.35.2",
   "@formily/reactive": "2.3.7"
 };

package/dist/node_modules/koa-compose/package.json

@@ -1 +1 @@
-{"name":"koa-compose","description":"compose Koa middleware","repository":"koajs/compose","version":"4.1.0","keywords":["koa","middleware","compose"],"files":["index.js"],"dependencies":{},"devDependencies":{"codecov":"^3.0.0","jest":"^21.0.0","matcha":"^0.7.0","standard":"^10.0.3"},"scripts":{"bench":"matcha bench/bench.js","lint":"standard --fix .","test":"jest --forceExit --coverage"},"jest":{"testEnvironment":"node"},"license":"MIT","_lastModified":"2025-11-24T08:22:33.479Z"}
+{"name":"koa-compose","description":"compose Koa middleware","repository":"koajs/compose","version":"4.1.0","keywords":["koa","middleware","compose"],"files":["index.js"],"dependencies":{},"devDependencies":{"codecov":"^3.0.0","jest":"^21.0.0","matcha":"^0.7.0","standard":"^10.0.3"},"scripts":{"bench":"matcha bench/bench.js","lint":"standard --fix .","test":"jest --forceExit --coverage"},"jest":{"testEnvironment":"node"},"license":"MIT","_lastModified":"2025-11-28T01:37:16.375Z"}

package/dist/node_modules/moment-timezone/package.json

@@ -1 +1 @@
-{"name":"moment-timezone","version":"0.5.43","description":"Parse and display moments in any timezone.","homepage":"http://momentjs.com/timezone/","author":"Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/)","keywords":["moment","date","time","timezone","olson","iana","zone","tz"],"main":"./index.js","typings":"./index.d.ts","engines":{"node":"*"},"repository":{"type":"git","url":"https://github.com/moment/moment-timezone.git"},"bugs":{"url":"https://github.com/moment/moment-timezone/issues"},"license":"MIT","dependencies":{"moment":"^2.29.4"},"devDependencies":{"grunt":"^1.5.3","grunt-contrib-clean":"^2.0.1","grunt-contrib-jshint":"^3.2.0","grunt-contrib-nodeunit":"^4.0.0","grunt-contrib-uglify":"^5.2.2","grunt-exec":"^3.0.0","typescript":"^3.5.1"},"jspm":{"main":"builds/moment-timezone-with-data","shim":{"moment-timezone":{"deps":["moment"]}}},"scripts":{"test":"grunt"},"_lastModified":"2025-11-24T08:22:34.078Z"}
+{"name":"moment-timezone","version":"0.5.43","description":"Parse and display moments in any timezone.","homepage":"http://momentjs.com/timezone/","author":"Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/)","keywords":["moment","date","time","timezone","olson","iana","zone","tz"],"main":"./index.js","typings":"./index.d.ts","engines":{"node":"*"},"repository":{"type":"git","url":"https://github.com/moment/moment-timezone.git"},"bugs":{"url":"https://github.com/moment/moment-timezone/issues"},"license":"MIT","dependencies":{"moment":"^2.29.4"},"devDependencies":{"grunt":"^1.5.3","grunt-contrib-clean":"^2.0.1","grunt-contrib-jshint":"^3.2.0","grunt-contrib-nodeunit":"^4.0.0","grunt-contrib-uglify":"^5.2.2","grunt-exec":"^3.0.0","typescript":"^3.5.1"},"jspm":{"main":"builds/moment-timezone-with-data","shim":{"moment-timezone":{"deps":["moment"]}}},"scripts":{"test":"grunt"},"_lastModified":"2025-11-28T01:37:16.928Z"}

package/dist/server/actions/query.js

@@ -49,6 +49,8 @@ var import_database = require("@nocobase/database");
 var import_koa_compose = __toESM(require("koa-compose"));
 var import_server = require("@nocobase/server");
 var import_query_parser = require("../query-parser");
+var import_utils = require("@nocobase/utils");
+var import_acl = require("@nocobase/acl");
 const getDB = (ctx, dataSource) => {
   const ds = ctx.app.dataSourceManager.dataSources.get(dataSource);
   return ds == null ? void 0 : ds.collectionManager.db;
@@ -217,8 +219,8 @@ const cacheMiddleware = async (ctx, next) => {
     await cache.set(uid, ctx.body, (cacheConfig == null ? void 0 : cacheConfig.ttl) * 1e3);
   }
 };
-const checkPermission = (ctx, next) => {
-  var _a;
+const checkPermission = async (ctx, next) => {
+  var _a, _b;
   const { collection, dataSource } = ctx.action.params.values;
   const roleNames = ctx.state.currentRoles || ["anonymous"];
   const acl = ((_a = ctx.app.dataSourceManager.get(dataSource)) == null ? void 0 : _a.acl) || ctx.app.acl;
@@ -226,6 +228,22 @@ const checkPermission = (ctx, next) => {
   if (!can && !roleNames.includes("root")) {
     ctx.throw(403, "No permissions");
   }
+  if ((_b = can == null ? void 0 : can.params) == null ? void 0 : _b.filter) {
+    try {
+      acl.filterParams(ctx, collection, can.params);
+    } catch (e) {
+      if (e instanceof import_acl.NoPermissionError) {
+        ctx.throw(403, "No permissions");
+      }
+    }
+    const filter = ctx.action.params.values.filter || {};
+    ctx.action.params.values = {
+      ...ctx.action.params.values,
+      filter: (0, import_utils.assign)(filter, can == null ? void 0 : can.params.filter, {
+        filter: "andMerge"
+      })
+    };
+  }
   return next();
 };
 const query = async (ctx, next) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/plugin-data-visualization",
-  "version": "2.0.0-alpha.46",
+  "version": "2.0.0-alpha.48",
   "displayName": "Data visualization",
   "displayName.ru-RU": "Визуализация данных",
   "displayName.zh-CN": "数据可视化",
@@ -45,7 +45,7 @@
     "@nocobase/test": "2.x",
     "@nocobase/utils": "2.x"
   },
-  "gitHead": "ebf3cbeea4957a914e3157f3c6b570dba685c46f",
+  "gitHead": "456be3a6e92f984fe283590c80d3ea9423695ba6",
   "keywords": [
     "Blocks"
   ]