@nymphjs/tilmeld 1.0.0-beta.8 → 1.0.0-beta.80

package/dist/Group.js

@@ -5,12 +5,52 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const md5_1 = __importDefault(require("crypto-js/md5"));
 const lodash_1 = require("lodash");
+const enforceTilmeld_1 = require("./enforceTilmeld");
 const AbleObject_1 = __importDefault(require("./AbleObject"));
 const errors_1 = require("./errors");
+/**
+ * A user group data model.
+ *
+ * Written by Hunter Perrin for SciActive.
+ *
+ * @author Hunter Perrin <hperrin@gmail.com>
+ * @copyright SciActive Inc
+ * @see http://nymph.io/
+ */
 class Group extends AbleObject_1.default {
-    static async factory(guid) {
-        return (await super.factory(guid));
-    }
+    /**
+     * The instance of Tilmeld to use for queries.
+     */
+    static ETYPE = 'tilmeld_group';
+    static class = 'Group';
+    static DEFAULT_PRIVATE_DATA = ['email', 'phone', 'abilities', 'user'];
+    static DEFAULT_ALLOWLIST_DATA = [];
+    $tags = [];
+    $clientEnabledMethods = [
+        '$checkGroupname',
+        '$checkEmail',
+        '$getAvatar',
+        '$getChildren',
+        '$getDescendants',
+        '$getLevel',
+        '$isDescendant',
+    ];
+    static clientEnabledStaticMethods = [
+        'getPrimaryGroups',
+        'getSecondaryGroups',
+    ];
+    $privateData = [...Group.DEFAULT_PRIVATE_DATA];
+    static searchRestrictedData = [...Group.DEFAULT_PRIVATE_DATA];
+    $allowlistData = [...Group.DEFAULT_ALLOWLIST_DATA];
+    $allowlistTags = [];
+    /**
+     * This should only be used by the backend.
+     */
+    $skipAcWhenSaving = false;
+    /**
+     * This should only be used by the backend.
+     */
+    $skipAcWhenDeleting = false;
     static async factoryGroupname(groupname) {
         const entity = new this();
         if (groupname != null) {
@@ -26,63 +66,89 @@ class Group extends AbleObject_1.default {
         }
         return entity;
     }
-    static factorySync(guid) {
-        return super.factorySync(guid);
-    }
-    constructor(guid) {
-        super(guid);
-        this.$tags = [];
-        this.$clientEnabledMethods = [
-            '$checkGroupname',
-            '$checkEmail',
-            '$getAvatar',
-            '$getChildren',
-            '$getDescendants',
-            '$getLevel',
-            '$isDescendant',
-        ];
-        this.$privateData = [...Group.DEFAULT_PRIVATE_DATA];
-        this.$allowlistData = [...Group.DEFAULT_ALLOWLIST_DATA];
-        this.$allowlistTags = [];
-        this.$skipAcWhenSaving = false;
-        if (this.guid == null) {
-            this.$data.enabled = true;
-            this.$data.abilities = [];
-            this.$updateDataProtection();
-        }
-    }
+    /**
+     * Get all the groups that can be assigned as primary groups.
+     *
+     * @param options The options for an optional search query.
+     * @param selectors The selectors for an optional search query.
+     * @returns An array of the assignable primary groups.
+     */
     static async getPrimaryGroups(options, selectors) {
-        if (!this.tilmeld.gatekeeper('tilmeld/admin')) {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        if (!tilmeld.gatekeeper('tilmeld/admin')) {
             throw new Error("You don't have permission to do that.");
         }
-        return await this.getAssignableGroups(this.tilmeld.config.highestPrimary, { ...options, class: this.tilmeld.Group, return: 'entity' }, [...(selectors ?? [])]);
+        return await this.getAssignableGroups(tilmeld.config.highestPrimary, { ...options, class: tilmeld.Group, return: 'entity' }, [...(selectors ?? [])]);
     }
+    /**
+     * Get all the groups that can be assigned as secondary groups.
+     *
+     * @param options The options for an optional search query.
+     * @param selectors The selectors for an optional search query.
+     * @returns An array of the assignable secondary groups.
+     */
     static async getSecondaryGroups(options, selectors) {
-        if (!this.tilmeld.gatekeeper('tilmeld/admin')) {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        if (!tilmeld.gatekeeper('tilmeld/admin')) {
             throw new Error("You don't have permission to do that.");
         }
-        return await this.getAssignableGroups(this.tilmeld.config.highestSecondary, { ...options, class: this.tilmeld.Group, return: 'entity' }, [...(selectors ?? [])]);
+        return await this.getAssignableGroups(tilmeld.config.highestSecondary, { ...options, class: tilmeld.Group, return: 'entity' }, [...(selectors ?? [])]);
     }
     static async getAssignableGroups(highestParent, options, selectors) {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         let assignableGroups = [];
         if (highestParent === false) {
             return assignableGroups;
         }
-        assignableGroups = await this.nymph.getEntities({ ...options, class: this.tilmeld.Group }, ...selectors);
+        assignableGroups = await this.nymph.getEntities({ ...options, class: tilmeld.Group }, ...selectors);
         if (highestParent !== true) {
-            assignableGroups = assignableGroups.filter((group) => {
+            assignableGroups = (await Promise.all(assignableGroups.map(async (group) => {
                 let curGroup = group;
-                while (curGroup.parent != null && curGroup.parent.cdate != null) {
-                    if (curGroup.parent.guid === highestParent) {
-                        return true;
+                let parent = curGroup.parent;
+                await parent?.$wake();
+                while (parent != null && parent?.cdate != null) {
+                    if (parent?.guid === highestParent) {
+                        return group;
                     }
-                    curGroup = curGroup.parent;
+                    curGroup = parent;
+                    parent = curGroup.parent;
+                    await parent?.$wake();
                 }
-                return false;
-            });
+                return null;
+            }))).filter((group) => group != null);
         }
         return assignableGroups;
     }
+    constructor() {
+        super();
+        // Defaults.
+        this.$data.enabled = true;
+        this.$data.abilities = [];
+        this.$updateDataProtection();
+    }
+    $setNymph(nymph) {
+        this.$nymph = nymph;
+        if (!this.$asleep()) {
+            if (this.$data.user && this.$data.user.$nymph !== nymph) {
+                this.$data.user.$setNymph(nymph);
+            }
+            if (this.$data.parent && this.$data.parent.$nymph !== nymph) {
+                this.$data.parent.$setNymph(nymph);
+            }
+        }
+    }
+    async $getUniques() {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        const uniques = [`u:${this.$data.groupname}`];
+        if (!tilmeld.config.emailUsernames &&
+            tilmeld.config.userFields.includes('email')) {
+            uniques.push(`e:${this.$data.email}`);
+        }
+        if (this.$data.defaultPrimary) {
+            uniques.push(`o:default-primary`);
+        }
+        return uniques;
+    }
     $getAvatar() {
         if (this.$data.avatar != null && this.$data.avatar !== '') {
             return this.$data.avatar;
@@ -95,24 +161,54 @@ class Group extends AbleObject_1.default {
             '?d=identicon&s=40');
     }
     $jsonAcceptData(input, allowConflict = false) {
-        const tilmeld = this.$nymph.tilmeld;
-        this.$referenceWake();
-        if (input.data.abilities?.indexOf('system/admin') !== -1 &&
-            this.$data.abilities?.indexOf('system/admin') === -1 &&
-            tilmeld.gatekeeper('tilmeld/admin') &&
-            !tilmeld.gatekeeper('system/admin')) {
-            throw new errors_1.BadDataError("You don't have the authority to make this group a system admin.");
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        this.$check();
+        if ('abilities' in input.data &&
+            input.data.abilities?.includes('system/admin') !==
+                this.$data.abilities?.includes('system/admin') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke system/admin.");
+        }
+        if ('abilities' in input.data &&
+            input.data.abilities?.includes('tilmeld/admin') !==
+                this.$data.abilities?.includes('tilmeld/admin') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke tilmeld/admin.");
+        }
+        if ('abilities' in input.data &&
+            input.data.abilities?.includes('tilmeld/switch') !==
+                this.$data.abilities?.includes('tilmeld/switch') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke tilmeld/switch.");
         }
         super.$jsonAcceptData(input, allowConflict);
     }
     $jsonAcceptPatch(patch, allowConflict = false) {
-        const tilmeld = this.$nymph.tilmeld;
-        this.$referenceWake();
-        if (patch.set.abilities?.indexOf('system/admin') !== -1 &&
-            this.$data.abilities?.indexOf('system/admin') === -1 &&
-            tilmeld.gatekeeper('tilmeld/admin') &&
-            !tilmeld.gatekeeper('system/admin')) {
-            throw new errors_1.BadDataError("You don't have the authority to make this group a system admin.");
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        this.$check();
+        if ('abilities' in patch.set &&
+            patch.set.abilities?.includes('system/admin') !==
+                this.$data.abilities?.includes('system/admin') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke system/admin.");
+        }
+        if ('abilities' in patch.set &&
+            patch.set.abilities?.includes('tilmeld/admin') !==
+                this.$data.abilities?.includes('tilmeld/admin') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke tilmeld/admin.");
+        }
+        if ('abilities' in patch.set &&
+            patch.set.abilities?.includes('tilmeld/switch') !==
+                this.$data.abilities?.includes('tilmeld/switch') &&
+            (!tilmeld.currentUser ||
+                !tilmeld.currentUser.abilities?.includes('system/admin'))) {
+            throw new errors_1.BadDataError("You don't have the authority to grant or revoke tilmeld/switch.");
         }
         super.$jsonAcceptPatch(patch, allowConflict);
     }
@@ -120,8 +216,13 @@ class Group extends AbleObject_1.default {
         super.$putData(data, sdata);
         this.$updateDataProtection();
     }
+    /**
+     * Update the data protection arrays for a user.
+     *
+     * @param givenUser User to update protection for. If undefined, will use the currently logged in user.
+     */
     $updateDataProtection(givenUser) {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         let user = givenUser ?? tilmeld.User.current();
         this.$privateData = [...Group.DEFAULT_PRIVATE_DATA];
         this.$allowlistData = [...Group.DEFAULT_ALLOWLIST_DATA];
@@ -129,22 +230,30 @@ class Group extends AbleObject_1.default {
             this.$privateData.push('groupname');
         }
         if (user != null &&
-            ((user.abilities?.indexOf('tilmeld/admin') ?? -1) !== -1 ||
-                (user.abilities?.indexOf('system/admin') ?? -1) !== -1)) {
+            (user.abilities?.includes('tilmeld/admin') ||
+                user.abilities?.includes('system/admin'))) {
+            // Users who can edit groups can see their data.
             this.$privateData = [];
             this.$allowlistData = undefined;
         }
         else if (this.$data.user != null &&
             user != null &&
-            this.$data.user.$is(user)) {
+            this.$data.user.guid === user.guid) {
+            // Users can see their group's data.
             this.$privateData = [];
         }
     }
-    $isDescendant(givenGroup) {
-        const tilmeld = this.$nymph.tilmeld;
+    /**
+     * Check whether the group is a descendant of a group.
+     *
+     * @param group The group, or the group's GUID.
+     * @returns True or false.
+     */
+    async $isDescendant(givenGroup) {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         let group;
         if (typeof givenGroup === 'string') {
-            group = tilmeld.Group.factorySync(givenGroup);
+            group = await tilmeld.Group.factory(givenGroup);
         }
         else {
             group = givenGroup;
@@ -152,27 +261,41 @@ class Group extends AbleObject_1.default {
         if (group.guid == null) {
             return false;
         }
-        if (this.$data.parent == null) {
+        // Check to see if the group is a descendant of the given group.
+        const parent = this.$data.parent;
+        await parent?.$wake();
+        if (parent == null) {
             return false;
         }
-        if (this.$data.parent.$is(group)) {
+        if (parent.$is(group)) {
             return true;
         }
-        if (this.$data.parent.$isDescendant(group)) {
+        if (await parent.$isDescendant(group)) {
             return true;
         }
         return false;
     }
+    /**
+     * Gets an array of the group's child groups.
+     *
+     * @returns An array of groups.
+     */
     async $getChildren() {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         return await this.$nymph.getEntities({ class: tilmeld.Group }, {
             type: '&',
             equal: ['enabled', true],
             ref: ['parent', this],
         });
     }
+    /**
+     * Gets an array of the group's descendant groups.
+     *
+     * @param andSelf Include this group in the returned array.
+     * @returns An array of groups.
+     */
     async $getDescendants(andSelf = false) {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         let groups = [];
         const entities = await this.$nymph.getEntities({ class: tilmeld.Group }, {
             type: '&',
@@ -187,39 +310,41 @@ class Group extends AbleObject_1.default {
         }
         return groups;
     }
-    $getDescendantsSync(andSelf = false) {
-        const tilmeld = this.$nymph.tilmeld;
-        let groups = [];
-        let entity;
-        let offset = 0;
-        do {
-            entity = this.$nymph.driver.getEntitySync({ class: tilmeld.Group, offset }, {
-                type: '&',
-                equal: ['enabled', true],
-                ref: ['parent', this],
-            });
-            if (entity != null) {
-                groups = entity.$getDescendantsSync(true).concat(groups);
-            }
-            offset++;
-        } while (entity != null);
-        if (andSelf) {
-            groups.push(this);
-        }
-        return groups;
-    }
-    $getLevel() {
-        const tilmeld = this.$nymph.tilmeld;
-        let group = tilmeld.Group.factorySync(this.guid ?? undefined);
+    /**
+     * Get the number of parents the group has.
+     *
+     * If the group is a top level group, this will return 0. If it is a child of
+     * a top level group, this will return 1. If it is a grandchild of a top level
+     * group, this will return 2, and so on.
+     *
+     * Levels will max out at 1024 to avoid recursive loops.
+     *
+     * @returns The level of the group.
+     */
+    async $getLevel() {
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        let group = await tilmeld.Group.factory(this.guid ?? undefined);
+        let parent = group.parent;
+        await parent?.$wake();
         let level = 0;
-        while (group.parent != null && group.parent.cdate != null && level < 1024) {
+        while (parent != null && parent.cdate != null && level < 1024) {
             level++;
-            group = group.parent;
+            group = parent;
+            parent = group.parent;
+            await parent?.$wake();
         }
         return level;
     }
+    /**
+     * Gets an array of users in the group.
+     *
+     * @param descendants Include users in all descendant groups too.
+     * @param limit The limit for the query.
+     * @param offset The offset for the query.
+     * @returns An array of users.
+     */
     async $getUsers(descendants = false, limit, offset) {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         let groups = [];
         if (descendants) {
             groups = await this.$getDescendants();
@@ -247,14 +372,26 @@ class Group extends AbleObject_1.default {
             ],
         });
     }
+    /**
+     * Check that a groupname is valid.
+     *
+     * @returns An object with a boolean 'result' entry and a 'message' entry.
+     */
     async $checkGroupname() {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         if (!tilmeld.config.emailUsernames) {
             if (this.$data.groupname == null || !this.$data.groupname.length) {
                 return { result: false, message: 'Please specify a groupname.' };
             }
-            if (tilmeld.config.maxUsernameLength > 0 &&
-                this.$data.groupname.length > tilmeld.config.maxUsernameLength) {
+            if (this.$data.groupname.length < tilmeld.config.minUsernameLength) {
+                return {
+                    result: false,
+                    message: 'Groupnames must be at least ' +
+                        tilmeld.config.minUsernameLength +
+                        ' characters.',
+                };
+            }
+            if (this.$data.groupname.length > tilmeld.config.maxUsernameLength) {
                 return {
                     result: false,
                     message: 'Groupnames must not exceed ' +
@@ -298,8 +435,15 @@ class Group extends AbleObject_1.default {
             if (this.$data.groupname == null || !this.$data.groupname.length) {
                 return { result: false, message: 'Please specify an email.' };
             }
-            if (tilmeld.config.maxUsernameLength > 0 &&
-                this.$data.groupname.length > tilmeld.config.maxUsernameLength) {
+            if (this.$data.groupname.length < tilmeld.config.minUsernameLength) {
+                return {
+                    result: false,
+                    message: 'Emails must be at least ' +
+                        tilmeld.config.minUsernameLength +
+                        ' characters.',
+                };
+            }
+            if (this.$data.groupname.length > tilmeld.config.maxUsernameLength) {
                 return {
                     result: false,
                     message: 'Emails must not exceed ' +
@@ -310,8 +454,13 @@ class Group extends AbleObject_1.default {
             return await this.$checkEmail();
         }
     }
+    /**
+     * Check that an email is unique.
+     *
+     * @returns An object with a boolean 'result' entry and a 'message' entry.
+     */
     async $checkEmail() {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         if (this.$data.email === '') {
             return { result: true, message: '' };
         }
@@ -344,10 +493,11 @@ class Group extends AbleObject_1.default {
         };
     }
     async $save() {
-        const tilmeld = this.$nymph.tilmeld;
+        const tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
         if (this.$data.groupname == null || !this.$data.groupname.trim().length) {
             return false;
         }
+        // Formatting.
         this.$data.groupname = this.$data.groupname.trim();
         if (tilmeld.config.emailUsernames) {
             this.$data.email = this.$data.groupname;
@@ -356,16 +506,19 @@ class Group extends AbleObject_1.default {
         this.$data.name = (this.$data.name ?? '').trim();
         this.$data.phone = (this.$data.phone ?? '').trim();
         this.$data.enabled = !!this.$data.enabled;
-        if (this.$data.name === '') {
+        // Clear empty values.
+        if (this.$data.name === '' || !tilmeld.config.userFields.includes('name')) {
             delete this.$data.name;
         }
-        if (this.$data.email === '') {
+        if (this.$data.email === '' ||
+            !tilmeld.config.userFields.includes('email')) {
             delete this.$data.email;
         }
         if (this.$data.avatar === '') {
             delete this.$data.avatar;
         }
-        if (this.$data.phone === '') {
+        if (this.$data.phone === '' ||
+            !tilmeld.config.userFields.includes('phone')) {
             delete this.$data.phone;
         }
         if (this.$data.parent == null) {
@@ -383,39 +536,50 @@ class Group extends AbleObject_1.default {
         if (!this.$data.unverifiedSecondary) {
             delete this.$data.unverifiedSecondary;
         }
+        // Groups should never have 'system/admin', 'tilmeld/admin', or
+        // 'tilmeld/switch' abilities.
         this.$data.abilities = (0, lodash_1.difference)(this.$data.abilities ?? [], [
             'system/admin',
             'tilmeld/admin',
+            'tilmeld/switch',
             null,
             undefined,
         ]);
+        // Verification.
         const unCheck = await this.$checkGroupname();
         if (!unCheck.result) {
             throw new errors_1.BadUsernameError(unCheck.message);
         }
-        if (!tilmeld.config.emailUsernames) {
+        if (!tilmeld.config.emailUsernames &&
+            tilmeld.config.userFields.includes('email')) {
             const emCheck = await this.$checkEmail();
             if (!emCheck.result) {
                 throw new errors_1.BadEmailError(emCheck.message);
             }
         }
-        if (this.$data.parent &&
-            (this.$data.parent.cdate == null ||
-                this.$is(this.$data.parent) ||
-                this.$data.parent.$isDescendant(this))) {
+        // Validate group parent. Make sure it's not a descendant of this group.
+        const parent = this.$data.parent;
+        await parent?.$wake();
+        if (parent &&
+            (parent.cdate == null ||
+                this.$is(parent) ||
+                (await parent.$isDescendant(this)))) {
             throw new errors_1.BadDataError("Group parent can't be itself or descendant of itself.");
         }
         try {
-            tilmeld.config.validatorGroup(this);
+            tilmeld.config.validatorGroup(tilmeld, this);
         }
         catch (e) {
             throw new errors_1.BadDataError(e?.message);
         }
+        // Only one default primary group is allowed.
         if (this.$data.defaultPrimary) {
             const currentPrimary = await this.$nymph.getEntity({ class: tilmeld.Group }, { type: '&', truthy: 'defaultPrimary' });
             if (currentPrimary != null && !this.$is(currentPrimary)) {
                 currentPrimary.defaultPrimary = false;
-                if (!(await currentPrimary.$save())) {
+                if (this.$skipAcWhenSaving
+                    ? !(await currentPrimary.$saveSkipAC())
+                    : !(await currentPrimary.$save())) {
                     throw new errors_1.CouldNotChangeDefaultPrimaryGroupError('Could not change new user primary group from ' +
                         `${currentPrimary.groupname}.`);
                 }
@@ -423,6 +587,9 @@ class Group extends AbleObject_1.default {
         }
         return await super.$save();
     }
+    /*
+     * This should *never* be accessible on the client.
+     */
     async $saveSkipAC() {
         this.$skipAcWhenSaving = true;
         return await this.$save();
@@ -435,25 +602,29 @@ class Group extends AbleObject_1.default {
         return false;
     }
     async $delete() {
-        let tilmeld = this.$nymph.tilmeld;
-        if (!tilmeld.gatekeeper('tilmeld/admin')) {
+        let tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        if (!this.$skipAcWhenDeleting && !tilmeld.gatekeeper('tilmeld/admin')) {
             throw new errors_1.BadDataError("You don't have the authority to delete groups.");
         }
         const transaction = 'tilmeld-delete-' + this.guid;
         const nymph = this.$nymph;
         const tnymph = await nymph.startTransaction(transaction);
-        this.$nymph = tnymph;
-        tilmeld = this.$nymph.tilmeld;
+        this.$setNymph(tnymph);
+        tilmeld = (0, enforceTilmeld_1.enforceTilmeld)(this);
+        // Delete descendants.
         const descendants = await this.$getDescendants();
         if (descendants.length) {
             for (let curGroup of descendants) {
-                if (!(await curGroup.$delete())) {
+                if (this.$skipAcWhenDeleting
+                    ? !(await curGroup.$deleteSkipAC())
+                    : !(await curGroup.$delete())) {
                     await tnymph.rollback(transaction);
-                    this.$nymph = nymph;
+                    this.$setNymph(nymph);
                     return false;
                 }
             }
         }
+        // Remove users from this primary group.
         const primaryUsers = await tnymph.getEntities({
             class: tilmeld.User,
             skipAc: true,
@@ -463,12 +634,15 @@ class Group extends AbleObject_1.default {
         });
         for (let user of primaryUsers) {
             delete user.group;
-            if (!(await user.$save())) {
+            if (this.$skipAcWhenDeleting
+                ? !(await user.$saveSkipAC())
+                : !(await user.$save())) {
                 await tnymph.rollback(transaction);
-                this.$nymph = nymph;
+                this.$setNymph(nymph);
                 return false;
             }
         }
+        // Remove users from this secondary group.
         const secondaryUsers = await tnymph.getEntities({
             class: tilmeld.User,
             skipAc: true,
@@ -478,11 +652,14 @@ class Group extends AbleObject_1.default {
         });
         for (let user of secondaryUsers) {
             user.$delGroup(this);
-            if (!(await user.$save())) {
+            if (this.$skipAcWhenDeleting
+                ? !(await user.$saveSkipAC())
+                : !(await user.$save())) {
                 await tnymph.rollback(transaction);
                 return false;
             }
         }
+        // Delete the group.
         const success = await super.$delete();
         if (success) {
             await tnymph.commit(transaction);
@@ -490,18 +667,23 @@ class Group extends AbleObject_1.default {
         else {
             await tnymph.rollback(transaction);
         }
-        this.$nymph = nymph;
+        this.$setNymph(nymph);
         return success;
     }
+    /*
+     * This should *never* be accessible on the client.
+     */
+    async $deleteSkipAC() {
+        this.$skipAcWhenDeleting = true;
+        return await this.$delete();
+    }
+    $tilmeldDeleteSkipAC() {
+        if (this.$skipAcWhenDeleting) {
+            this.$skipAcWhenDeleting = false;
+            return true;
+        }
+        return false;
+    }
 }
 exports.default = Group;
-Group.ETYPE = 'tilmeld_group';
-Group.class = 'Group';
-Group.DEFAULT_PRIVATE_DATA = ['email', 'phone', 'abilities', 'user'];
-Group.DEFAULT_ALLOWLIST_DATA = [];
-Group.clientEnabledStaticMethods = [
-    'getPrimaryGroups',
-    'getSecondaryGroups',
-];
-Group.searchRestrictedData = [...Group.DEFAULT_PRIVATE_DATA];
 //# sourceMappingURL=Group.js.map