@oneuptime/common 12.0.8 → 12.0.9

package/build/dist/Server/Types/Database/Permissions/CreatePermission.js

@@ -11,6 +11,9 @@ var _a;
 import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
 import ColumnPermissions from "./ColumnPermission";
 import TablePermission from "./TablePermission";
+import TenantPermission from "./TenantPermission";
+import NotAuthorizedException from "../../../../Types/Exception/NotAuthorizedException";
+import ObjectID from "../../../../Types/ObjectID";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 export default class CreatePermission {
     static checkCreatePermissions(modelType, data, props) {
@@ -22,6 +25,129 @@ export default class CreatePermission {
         this.checkCreateBlockPermissions(modelType, props);
         TablePermission.checkTableLevelPermissions(modelType, props, DatabaseRequestType.Create);
         ColumnPermissions.checkDataColumnPermissions(modelType, data, props, DatabaseRequestType.Create);
+        CreatePermission.checkCreateOwnership(modelType, data, props);
+    }
+    /**
+     * Constrain the VALUE of a user-scoped model's ownership column, not merely
+     * whether the caller is allowed to write that column at all.
+     *
+     * Read, update and delete all convert Permission.CurrentUser into a row
+     * predicate: TenantPermission.addCurrentUserScopeToQuery rewrites the query to
+     * `userId = me` and rejects any operation that named somebody else. Create had
+     * no equivalent. The three checks above answer "may this caller write to this
+     * table" and "may this caller write to these COLUMNS" — neither receives the
+     * ownership value, and TablePermission.checkTableLevelPermissions is not even
+     * handed the data object. So @CurrentUserCanAccessRecordBy was effectively
+     * dead metadata on this path, and the carve-out is explicit in the sibling
+     * code: TenantPermission's misconfiguration guard reads
+     * `isAccessGrantedOnlyByCurrentUser && type !== DatabaseRequestType.Create`.
+     *
+     * The consequence was that a caller could write a row owned by somebody else
+     * on any model whose create list is CurrentUser-only — fourteen of them, all
+     * "my own X" resources: notification rules and every notification method
+     * behind them, sessions, TOTP and WebAuthn credentials. On the notification
+     * models that is not a bookkeeping error. A row's ownership column decides
+     * whose on-call pages select it, while the delivery address is read from the
+     * method relation the row points at, so a mismatched pair sends one person's
+     * pages to another person's address. Some services also seed further rows from
+     * whatever ownership value they are handed, which propagates the mistake
+     * without any further request.
+     *
+     * The check is permission-AWARE rather than a blanket stamp, and that
+     * distinction is load-bearing. Stamping `data[userColumn] = props.userId`
+     * unconditionally would make legitimate on-behalf-of creation impossible for
+     * an administrator who genuinely holds a role permission in the model's create
+     * list — so instead this mirrors exactly the condition the query-side scope
+     * uses. When CurrentUser is the ONLY thing letting the caller through, they
+     * may create rows for themselves and nobody else. When they hold a real role
+     * permission, this returns and that permission's own rules apply.
+     *
+     * props.isRoot short-circuits before this runs, so internal seeding (default
+     * notification rules, invitation acceptance, migrations) is unaffected.
+     */
+    static checkCreateOwnership(modelType, data, props) {
+        const model = new modelType();
+        const userColumn = model.getUserColumn();
+        if (!userColumn) {
+            // The model does not scope rows by user; there is no ownership to enforce.
+            return;
+        }
+        const isAccessGrantedOnlyByCurrentUser = TenantPermission.isAccessGrantedOnlyByCurrentUser(modelType, props, DatabaseRequestType.Create);
+        if (!isAccessGrantedOnlyByCurrentUser) {
+            /*
+             * The caller holds a role permission that appears in this model's create
+             * list, so they are not here purely as "some logged-in user". Whatever
+             * that permission is allowed to do is decided by the permission itself.
+             */
+            return;
+        }
+        /*
+         * CurrentUser is auto-granted to every authenticated caller, including API
+         * keys, which have no user identity. Such a grant can never be resolved to
+         * an owner, so reject it rather than writing an unowned row. This mirrors
+         * the equivalent guard on the query side.
+         */
+        if (!props.userId) {
+            throw new NotAuthorizedException(`A user session is required to create ${model.singularName}.`);
+        }
+        /*
+         * The ownership column has TWO spellings and both write the same database
+         * column.
+         *
+         * A user-scoped model declares a scalar (`userId`) and a ManyToOne relation
+         * (`user`) whose @JoinColumn names that same scalar. Both are separately
+         * decorated, both are separately creatable, and TypeORM resolves either into
+         * the one join column. Checking only the scalar would therefore close
+         * nothing: a payload sending `user: { _id: <someone else> }` and no `userId`
+         * reaches this method with the scalar absent, gets the caller's own id
+         * stamped onto it, and then hands the persistence layer two disagreeing
+         * instructions about who owns the row.
+         *
+         * So the relation is validated identically and then CLEARED. Clearing rather
+         * than merely rejecting a mismatch removes the ambiguity entirely — after
+         * this method the scalar is the single source of ownership, and no
+         * TypeORM-version-dependent precedence rule between the two spellings can
+         * change who the row belongs to.
+         *
+         * The relation's property name is the scalar minus its `Id` suffix, which
+         * holds for every user-scoped model in the schema. A model that does not
+         * follow it simply has no relation to clear, and the scalar check below
+         * still applies.
+         */
+        const relationColumn = userColumn.endsWith("Id")
+            ? userColumn.slice(0, -2)
+            : "";
+        const suppliedOwnerRelation = relationColumn
+            ? data.getColumnValue(relationColumn)
+            : undefined;
+        if (suppliedOwnerRelation !== undefined &&
+            suppliedOwnerRelation !== null &&
+            typeof suppliedOwnerRelation === "object") {
+            const relationOwnerId = suppliedOwnerRelation["_id"];
+            if (relationOwnerId !== undefined &&
+                relationOwnerId !== null &&
+                String(relationOwnerId) !== props.userId.toString()) {
+                throw new NotAuthorizedException(`You do not have permission to create another user's ${model.singularName}.`);
+            }
+            data.setColumnValue(relationColumn, undefined);
+        }
+        const suppliedOwner = data.getColumnValue(userColumn);
+        if (suppliedOwner === undefined || suppliedOwner === null) {
+            /*
+             * Omitting the column is the common case for a first-party client, which
+             * has no reason to send its own id back. Stamp it rather than leaving the
+             * row unowned — an unowned row is invisible to every scoped read, so it
+             * would be undeletable through the API that created it.
+             */
+            data.setColumnValue(userColumn, props.userId);
+            return;
+        }
+        const suppliedOwnerId = suppliedOwner instanceof ObjectID
+            ? suppliedOwner.toString()
+            : String(suppliedOwner);
+        if (suppliedOwnerId !== props.userId.toString()) {
+            throw new NotAuthorizedException(`You do not have permission to create another user's ${model.singularName}.`);
+        }
     }
     static checkCreateBlockPermissions(modelType, props) {
         // If system is making this query then let the query run!

package/build/dist/Server/Types/Database/Permissions/CreatePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/CreatePermission.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAGhD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAErB,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,yDAAyD;QACzD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,2FAA2F;QAC3F,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEnD,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;IACJ,CAAC;IAGa,AAAP,MAAM,CAAC,2BAA2B,CACvC,SAAiC,EACjC,KAAqC;QAErC,yDAAyD;QACzD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,eAAe,CAAC,+BAA+B,CAC7C,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;IACJ,CAAC;CACF;AA3Ce;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;oDAuBjB;AAGa;IADb,WAAW,EAAE;;;;yDAeb"}
+{"version":3,"file":"CreatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/CreatePermission.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAGlD,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAErB,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,yDAAyD;QACzD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,2FAA2F;QAC3F,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEnD,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,gBAAgB,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACK,MAAM,CAAC,oBAAoB,CACjC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,UAAU,GAAkB,KAAK,CAAC,aAAa,EAAE,CAAC;QAExD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,2EAA2E;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,gCAAgC,GACpC,gBAAgB,CAAC,gCAAgC,CAC/C,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEJ,IAAI,CAAC,gCAAgC,EAAE,CAAC;YACtC;;;;eAIG;YACH,OAAO;QACT,CAAC;QAED;;;;;WAKG;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,sBAAsB,CAC9B,wCAAwC,KAAK,CAAC,YAAY,GAAG,CAC9D,CAAC;QACJ,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,MAAM,cAAc,GAAW,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,qBAAqB,GAAY,cAAc;YACnD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAEd,IACE,qBAAqB,KAAK,SAAS;YACnC,qBAAqB,KAAK,IAAI;YAC9B,OAAO,qBAAqB,KAAK,QAAQ,EACzC,CAAC;YACD,MAAM,eAAe,GACnB,qBACD,CAAC,KAAK,CAAC,CAAC;YAET,IACE,eAAe,KAAK,SAAS;gBAC7B,eAAe,KAAK,IAAI;gBACxB,MAAM,CAAC,eAAe,CAAC,KAAM,KAAK,CAAC,MAAmB,CAAC,QAAQ,EAAE,EACjE,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAC9B,uDAAuD,KAAK,CAAC,YAAY,GAAG,CAC7E,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,aAAa,GAAY,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAE/D,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC1D;;;;;eAKG;YACH,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAE9C,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GACnB,aAAa,YAAY,QAAQ;YAC/B,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE;YAC1B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE5B,IAAI,eAAe,KAAM,KAAK,CAAC,MAAmB,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,sBAAsB,CAC9B,uDAAuD,KAAK,CAAC,YAAY,GAAG,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,2BAA2B,CACvC,SAAiC,EACjC,KAAqC;QAErC,yDAAyD;QACzD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,eAAe,CAAC,+BAA+B,CAC7C,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;IACJ,CAAC;CACF;AA5Me;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;oDAyBjB;AAkKa;IADb,WAAW,EAAE;;;;yDAeb"}

package/build/dist/Server/Types/Database/Permissions/OwnerOnlyColumnPermission.js

@@ -0,0 +1,254 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { getOwnerOnlyColumns, isOwnerOnlyColumn, } from "../../../../Types/Database/AccessControl/OwnerOnlyColumn";
+import TableColumnType from "../../../../Types/Database/TableColumnType";
+import NotAuthorizedException from "../../../../Types/Exception/NotAuthorizedException";
+import ObjectID from "../../../../Types/ObjectID";
+import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
+/*
+ * THE RULE, IN ONE SENTENCE.
+ *
+ * A column marked @OwnerOnlyColumn() may be read only when the query that
+ * reaches its row is pinned to the caller's own id. The owner reading their own
+ * settings passes. An administrator reading somebody else's does not - whether
+ * they come at the column directly, or sideways through a relation, or by
+ * ordering on it, or by probing it in a WHERE clause.
+ *
+ * WHY A COLUMN-PERMISSION LIST CANNOT EXPRESS THIS. Permission.CurrentUser is
+ * auto-granted to every authenticated caller, so it never means "only my own
+ * row" in a COLUMN list - row scoping comes from the TABLE list alone. This
+ * class therefore ignores permissions entirely and looks at the QUERY: not who
+ * is asking, but which rows the request is allowed to touch.
+ *
+ * THE FOUR ROUTES INTO A MARKED COLUMN. All four are closed here, because
+ * closing three of them is the same as closing none:
+ *
+ *   1. A top-level select - `select: { webhookUrl: true }` on UserWebhook.
+ *      checkSelectPermission(), called from BasePermission.
+ *
+ *   2. A select nested through a relation - `select: { userWebhook: {
+ *      webhookUrl: true } }` on UserNotificationRule. checkRelationSelect(),
+ *      called from inside QueryPermission's relation traversal. This is the
+ *      route an earlier attempt missed, and it is the one that matters most:
+ *      widening a rule table's read to administrators does not widen the method
+ *      tables' reads, so a nested select is how the credential escapes without
+ *      anything appearing to have been widened at all.
+ *
+ *   3. A sort key - `sort: { webhookUrl: "ASC" }`. DatabaseService adds sorted
+ *      columns to the select AFTER the permission layer has run, so the gate is
+ *      simply not in the path; isOwnerOnlyColumnOnModel() lets that code refuse
+ *      to add a marked column.
+ *
+ *   4. A WHERE predicate - `query: { webhookUrl: "https://..." }`. Equality on a
+ *      secret is a value oracle: enough queries and the value is read out one
+ *      guess at a time, with nothing ever selected. checkQueryPermission().
+ *
+ * FAIL CLOSED. No caller identity, no ownership column on the model, a query
+ * shape this code does not recognise, or an ownership predicate that names
+ * anything other than exactly one id - the caller's - all refuse. The cost of a
+ * false refusal is a visible error on a settings page. The cost of a false
+ * allowance is a colleague's phone number.
+ */
+export default class OwnerOnlyColumnPermission {
+    /**
+     * Route 1 - a marked column named directly in the select of the model that
+     * owns it.
+     */
+    static checkSelectPermission(modelType, query, select, props) {
+        if (OwnerOnlyColumnPermission.isPrivilegedInternalRead(props)) {
+            return;
+        }
+        const model = new modelType();
+        for (const columnName in select) {
+            if (!isOwnerOnlyColumn(model, columnName)) {
+                continue;
+            }
+            if (!OwnerOnlyColumnPermission.isQueryPinnedToCurrentUser(modelType, query, props)) {
+                throw OwnerOnlyColumnPermission.refusal(model, columnName);
+            }
+        }
+    }
+    /**
+     * Route 2 - a marked column named through a relation, where the OUTER query
+     * is the only thing that decides whether the related rows belong to the
+     * caller.
+     *
+     * The outer query is what gets checked, and it has to be. By the time the
+     * traversal reaches `userWebhook: { webhookUrl: true }` there is no separate
+     * permission pass over UserWebhook at all: the related rows are whichever
+     * rows the outer query's join drags in. So the question is not "may this
+     * caller read UserWebhook" - it is "is the outer query confined to rows this
+     * caller owns", and that is answered by the outer model's own ownership
+     * column.
+     */
+    static checkRelationSelect(data) {
+        if (OwnerOnlyColumnPermission.isPrivilegedInternalRead(data.props)) {
+            return;
+        }
+        const relatedModel = new data.relatedModelType();
+        if (!isOwnerOnlyColumn(relatedModel, data.relatedColumnName)) {
+            return;
+        }
+        if (OwnerOnlyColumnPermission.isQueryPinnedToCurrentUser(data.modelType, data.query, data.props)) {
+            return;
+        }
+        const model = new data.modelType();
+        throw new NotAuthorizedException(`You do not have permissions to read ${data.relatedColumnName} of ${relatedModel.singularName} through ${data.relationColumnName} on ${model.singularName}. This column belongs to the user it was created for, so it can only be read by a query restricted to your own records.`);
+    }
+    /**
+     * Route 4 - a marked column used as a query predicate. Reading a value and
+     * guessing it are the same disclosure given enough attempts, so a WHERE on a
+     * marked column is held to the identical standard as a select on it. Nested
+     * relation filters are walked too, because `{ userWebhook: { webhookUrl: x } }`
+     * probes exactly the same value from one level out.
+     */
+    static checkQueryPermission(modelType, query, props) {
+        if (OwnerOnlyColumnPermission.isPrivilegedInternalRead(props)) {
+            return;
+        }
+        const model = new modelType();
+        for (const columnName in query) {
+            if (isOwnerOnlyColumn(model, columnName)) {
+                if (!OwnerOnlyColumnPermission.isQueryPinnedToCurrentUser(modelType, query, props)) {
+                    throw OwnerOnlyColumnPermission.refusal(model, columnName);
+                }
+                continue;
+            }
+            const value = query[columnName];
+            if (!OwnerOnlyColumnPermission.isPlainObject(value)) {
+                continue;
+            }
+            const tableColumnMetadata = model.getTableColumnMetadata(columnName);
+            if (!tableColumnMetadata ||
+                !tableColumnMetadata.modelType ||
+                (tableColumnMetadata.type !== TableColumnType.Entity &&
+                    tableColumnMetadata.type !== TableColumnType.EntityArray)) {
+                continue;
+            }
+            const relatedModel = new tableColumnMetadata.modelType();
+            for (const relatedColumnName in value) {
+                if (!isOwnerOnlyColumn(relatedModel, relatedColumnName)) {
+                    continue;
+                }
+                if (!OwnerOnlyColumnPermission.isQueryPinnedToCurrentUser(modelType, query, props)) {
+                    throw new NotAuthorizedException(`You do not have permissions to query on ${relatedColumnName} of ${relatedModel.singularName} through ${columnName} on ${model.singularName}. This column belongs to the user it was created for, so it can only be queried by a request restricted to your own records.`);
+                }
+            }
+        }
+    }
+    /**
+     * Route 3's building block. DatabaseService injects sorted columns into the
+     * select after the permission layer has already run, and it has no query it
+     * can trust by then (the query has been serialized into Raw operators), so it
+     * asks the only question it can answer safely: is this column marked. A
+     * marked column that the caller legitimately selected is already in the
+     * select and is never re-added, so refusing here costs a legitimate reader
+     * nothing.
+     */
+    static isOwnerOnlyColumnOnModel(modelType, columnName) {
+        return isOwnerOnlyColumn(new modelType(), columnName);
+    }
+    static getOwnerOnlyColumnsOnModel(modelType) {
+        return getOwnerOnlyColumns(new modelType());
+    }
+    /**
+     * "Pinned to the caller" means the query constrains this model's
+     * @CurrentUserCanAccessRecordBy column to exactly one id, and that id is the
+     * caller's.
+     *
+     * Every part of that sentence is load bearing:
+     *
+     *   - props.userId absent - an API key or a system caller can hold the
+     *     auto-granted CurrentUser permission with no user identity at all. There
+     *     is no id to pin to, so there is no pinning.
+     *
+     *   - no ownership column - the model has no notion of an owner, so no query
+     *     against it can be owner-scoped. A marked column on such a model is a
+     *     modelling mistake; refuse rather than invent a scope.
+     *
+     *   - exactly one id - operators are the trap. NotEqual, Includes, IsNull and
+     *     friends all stringify to (or contain) the id they wrap, so comparing
+     *     string values alone would let `userId != me` pass itself off as `userId
+     *     = me` while selecting every OTHER row in the project. Compare the TYPE
+     *     first: only a bare string or ObjectID is an exact predicate. This is the
+     *     same test, and for the same reason, as TenantPermission.isExactUserScope.
+     *
+     *   - an array of queries is refused outright. That shape is produced only by
+     *     the multi-tenant fan-out in TenantPermission, which re-enters the whole
+     *     permission stack once per project and so has already applied this check
+     *     per project with a real single query. Recognising the array here would
+     *     mean reasoning about a shape whose ownership predicate has already been
+     *     rewritten into a Raw operator; refusing it is both safe and, in
+     *     practice, unreachable.
+     */
+    static isQueryPinnedToCurrentUser(modelType, query, props) {
+        if (!props.userId) {
+            return false;
+        }
+        if (!query || typeof query !== "object" || Array.isArray(query)) {
+            return false;
+        }
+        const model = new modelType();
+        const ownershipColumn = model.getUserColumn();
+        if (!ownershipColumn) {
+            return false;
+        }
+        const ownershipPredicate = query[ownershipColumn];
+        if (!OwnerOnlyColumnPermission.isExactUserScope(ownershipPredicate)) {
+            return false;
+        }
+        return ownershipPredicate.toString() === props.userId.toString();
+    }
+    /**
+     * Root and master admin short-circuit before any of this. Notification
+     * delivery reads these exact columns as root in order to actually send the
+     * page - a phone number it cannot read is a phone that never rings - and the
+     * whole on-call system stops if that path is closed.
+     */
+    static isPrivilegedInternalRead(props) {
+        return Boolean(props.isRoot) || Boolean(props.isMasterAdmin);
+    }
+    static isExactUserScope(value) {
+        return typeof value === "string" || value instanceof ObjectID;
+    }
+    /**
+     * A plain `{}` literal, as opposed to a query operator instance such as
+     * Includes or NotEqual, which are also objects but carry their own class.
+     */
+    static isPlainObject(value) {
+        if (!value || typeof value !== "object" || Array.isArray(value)) {
+            return false;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        return prototype === Object.prototype || prototype === null;
+    }
+    static refusal(model, columnName) {
+        return new NotAuthorizedException(`You do not have permissions to read ${columnName} on ${model.singularName}. This column belongs to the user it was created for, so it can only be read by a query restricted to your own records.`);
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, Object]),
+    __metadata("design:returntype", void 0)
+], OwnerOnlyColumnPermission, "checkSelectPermission", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], OwnerOnlyColumnPermission, "checkRelationSelect", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", void 0)
+], OwnerOnlyColumnPermission, "checkQueryPermission", null);
+//# sourceMappingURL=OwnerOnlyColumnPermission.js.map

package/build/dist/Server/Types/Database/Permissions/OwnerOnlyColumnPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnerOnlyColumnPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/OwnerOnlyColumnPermission.ts"],"names":[],"mappings":";;;;;;;;;AAMA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,0DAA0D,CAAC;AAElE,OAAO,eAAe,MAAM,4CAA4C,CAAC;AACzE,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,CAAC,OAAO,OAAO,yBAAyB;IAC5C;;;OAGG;IAEW,AAAP,MAAM,CAAC,qBAAqB,CACjC,SAAgC,EAChC,KAAwB,EACxB,MAA0B,EAC1B,KAAqC;QAErC,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,IACE,CAAC,yBAAyB,CAAC,0BAA0B,CACnD,SAAS,EACT,KAAK,EACL,KAAK,CACN,EACD,CAAC;gBACD,MAAM,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IAEW,AAAP,MAAM,CAAC,mBAAmB,CAAC,IAOjC;QACC,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAc,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE5D,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,IACE,yBAAyB,CAAC,0BAA0B,CAClD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,CACX,EACD,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAE9C,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,IAAI,CAAC,iBAAiB,OAAO,YAAY,CAAC,YAAY,YAAY,IAAI,CAAC,kBAAkB,OAAO,KAAK,CAAC,YAAY,yHAAyH,CACnR,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IAEW,AAAP,MAAM,CAAC,oBAAoB,CAChC,SAAgC,EAChC,KAAwB,EACxB,KAAqC;QAErC,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;YAC/B,IAAI,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;gBACzC,IACE,CAAC,yBAAyB,CAAC,0BAA0B,CACnD,SAAS,EACT,KAAK,EACL,KAAK,CACN,EACD,CAAC;oBACD,MAAM,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC7D,CAAC;gBAED,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAa,KAAiC,CAAC,UAAU,CAAC,CAAC;YAEtE,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YAED,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAE3C,IACE,CAAC,mBAAmB;gBACpB,CAAC,mBAAmB,CAAC,SAAS;gBAC9B,CAAC,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;oBAClD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,CAAC,EAC3D,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAc,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;YAEpE,KAAK,MAAM,iBAAiB,IAAI,KAAgC,EAAE,CAAC;gBACjE,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,IACE,CAAC,yBAAyB,CAAC,0BAA0B,CACnD,SAAS,EACT,KAAK,EACL,KAAK,CACN,EACD,CAAC;oBACD,MAAM,IAAI,sBAAsB,CAC9B,2CAA2C,iBAAiB,OAAO,YAAY,CAAC,YAAY,YAAY,UAAU,OAAO,KAAK,CAAC,YAAY,8HAA8H,CAC1Q,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,wBAAwB,CACpC,SAAgC,EAChC,UAAkB;QAElB,OAAO,iBAAiB,CAAC,IAAI,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAEM,MAAM,CAAC,0BAA0B,CACtC,SAAgC;QAEhC,OAAO,mBAAmB,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACI,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAwB,EACxB,KAAqC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,eAAe,GAAkB,KAAK,CAAC,aAAa,EAAE,CAAC;QAE7D,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,kBAAkB,GAAa,KAAiC,CACpE,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,wBAAwB,CACrC,KAAqC;QAErC,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAAC,KAAc;QAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,QAAQ,CAAC;IAChE,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,aAAa,CAAC,KAAc;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAExD,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,OAAO,CACpB,KAAgB,EAChB,UAAkB;QAElB,OAAO,IAAI,sBAAsB,CAC/B,uCAAuC,UAAU,OAAO,KAAK,CAAC,YAAY,yHAAyH,CACpM,CAAC;IACJ,CAAC;CACF;AAjRe;IADb,WAAW,EAAE;;;;4DA4Bb;AAgBa;IADb,WAAW,EAAE;;;;0DAkCb;AAUa;IADb,WAAW,EAAE;;;;2DAiEb"}

package/build/dist/Server/Types/Database/Permissions/QueryPermission.js

@@ -9,6 +9,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
 import ColumnPermissions from "./ColumnPermission";
+import OwnerOnlyColumnPermission from "./OwnerOnlyColumnPermission";
 import DatabaseCommonInteractionPropsUtil, { PermissionType, } from "../../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
 import MultiSearch from "../../../../Types/BaseDatabase/MultiSearch";
 import TableColumnType from "../../../../Types/Database/TableColumnType";
@@ -18,7 +19,19 @@ import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 import { PermissionHelper, } from "../../../../Types/Permission";
 import Typeof from "../../../../Types/Typeof";
 export default class QueryPermission {
-    static checkRelationQueryPermission(modelType, select, props) {
+    /**
+     * Validates every column reached through a relation in the select.
+     *
+     * Takes the OUTER query as well as the select because two of the checks below
+     * cannot be answered from the select alone. Which COLUMNS a relation may
+     * expose is a property of the related model (canReadOnRelationQuery, the
+     * column's own read permissions); which ROWS the relation will expose is a
+     * property of the outer query, and nothing else - the related rows are
+     * whichever ones the join drags in. An owner-only column needs both answers,
+     * so the outer query is threaded down here rather than left behind in
+     * BasePermission.
+     */
+    static checkRelationQueryPermission(modelType, query, select, props) {
         const model = new modelType();
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow).map((i) => {
             return i.permission;
@@ -46,6 +59,28 @@ export default class QueryPermission {
                         if (!getRelatedTableColumnMetadata) {
                             throw new BadDataException(`Column ${innerKey} not found on ${relatedModel.singularName}`);
                         }
+                        /*
+                         * Owner-only columns are checked BEFORE the canReadOnRelationQuery
+                         * short-circuit below, and that ordering is the whole point.
+                         * canReadOnRelationQuery is a modelling flag meaning "this column is
+                         * safe to surface as a label on a joined row"; it skips every
+                         * permission check that follows it. The seven notification-method
+                         * models set it on their identifier columns so that a user's own
+                         * rule table can render "Email: jane@example.com" - which is
+                         * correct, and which is also exactly how an administrator's widened
+                         * read of the RULE table reaches into the METHOD table and lifts a
+                         * phone number, an email address or a webhook URL belonging to
+                         * somebody else. Nothing downstream of the `continue` can stop it,
+                         * so the check has to happen here.
+                         */
+                        OwnerOnlyColumnPermission.checkRelationSelect({
+                            modelType: modelType,
+                            relationColumnName: key,
+                            relatedModelType: tableColumnMetadata.modelType,
+                            relatedColumnName: innerKey,
+                            query: query,
+                            props: props,
+                        });
                         if (!getRelatedTableColumnMetadata.canReadOnRelationQuery &&
                             !excludedColumnNames.includes(innerKey)) {
                             throw new BadDataException(`Column ${innerKey} on ${relatedModel.singularName} does not support read on relation query.`);
@@ -72,6 +107,16 @@ export default class QueryPermission {
     }
     static checkQueryPermission(modelType, query, props) {
         const model = new modelType();
+        /*
+         * A WHERE clause reads a value just as surely as a SELECT does, one guess
+         * at a time. The name-intersection below authorises a predicate on any
+         * column the caller may READ, and Permission.CurrentUser being auto-granted
+         * means an owner-only column passes that intersection for everybody - so
+         * `{ webhookUrl: "https://hooks.slack.com/services/T.../B.../x" }` is a
+         * confirm/deny oracle over somebody else's credential that never appears in
+         * any result set. Hold a predicate to the same standard as a select.
+         */
+        OwnerOnlyColumnPermission.checkQueryPermission(modelType, query, props);
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow);
         const canReadOnTheseColumns = ColumnPermissions.getModelColumnsByPermissions(modelType, userPermissions || [], DatabaseRequestType.Read);
         const tableColumns = model.getTableColumns().columns;
@@ -119,7 +164,7 @@ export default class QueryPermission {
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:paramtypes", [Object, Object, Object, Object]),
     __metadata("design:returntype", void 0)
 ], QueryPermission, "checkRelationQueryPermission", null);
 __decorate([

package/build/dist/Server/Types/Database/Permissions/QueryPermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"QueryPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/QueryPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAGzE,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AAKnD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,WAAW,MAAM,4CAA4C,CAAC;AAGrE,OAAO,eAAe,MAAM,4CAA4C,CAAC;AACzE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,OAAmB,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,4BAA4B,CACxC,SAAgC,EAChC,MAA0B,EAC1B,KAAqC;QAErC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;YAC1B,OAAO,CAAC,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,CAAC;QAEL,MAAM,mBAAmB,GACvB,iBAAiB,CAAC,sBAAsB,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAQ,MAAqB,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzD,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;gBAEpC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;oBACnC,MAAM,IAAI,gBAAgB,CACxB,0BAA0B;wBACxB,GAAG;wBACH,MAAM;wBACN,KAAK,CAAC,YAAY;wBAClB,8CAA8C,CACjD,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAAc,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;gBAEpE,IACE,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;oBACnD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,EACxD,CAAC;oBACD,KAAK,MAAM,QAAQ,IAAK,MAAc,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5C,yBAAyB;wBACzB,IAAI,OAAQ,MAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;4BAC5D,MAAM,IAAI,gBAAgB,CACxB,4EAA4E,CAC7E,CAAC;wBACJ,CAAC;wBAED,MAAM,6BAA6B,GACjC,YAAY,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;wBAEhD,IAAI,CAAC,6BAA6B,EAAE,CAAC;4BACnC,MAAM,IAAI,gBAAgB,CACxB,UAAU,QAAQ,iBAAiB,YAAY,CAAC,YAAY,EAAE,CAC/D,CAAC;wBACJ,CAAC;wBAED,IACE,CAAC,6BAA6B,CAAC,sBAAsB;4BACrD,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACvC,CAAC;4BACD,MAAM,IAAI,gBAAgB,CACxB,UAAU,QAAQ,OAAO,YAAY,CAAC,YAAY,2CAA2C,CAC9F,CAAC;wBACJ,CAAC;wBAED,IAAI,6BAA6B,CAAC,sBAAsB,EAAE,CAAC;4BACzD,SAAS;wBACX,CAAC;wBAED,uDAAuD;wBACvD,IAAI,eAAe,EAAE,CAAC;4BACpB,MAAM,aAAa,GAAY,YAAY,CAAC,kBAAkB,CAC5D,eAAe,EACf,QAAQ,CACT,CAAC;4BAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gCACnB,IAAI,eAAe,GAAsB,EAAE,CAAC;gCAC5C,IAAI,YAAY,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;oCACrD,eAAe;wCACb,YAAY,CAAC,yBAAyB,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;gCAC3D,CAAC;gCAED,MAAM,IAAI,sBAAsB,CAC9B,uCACE,YAAY,CAAC,YACf,OACE,KAAK,CAAC,YACR,wCAAwC,gBAAgB,CAAC,mBAAmB,CAC1E,eAAe,CAChB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,oBAAoB,CAChC,SAAgC,EAChC,KAAwB,EACxB,KAAqC;QAErC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,4BAA4B,CAC5C,SAAS,EACT,eAAe,IAAI,EAAE,EACrB,mBAAmB,CAAC,IAAI,CACzB,CAAC;QAEJ,MAAM,YAAY,GAAkB,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC;QAEpE,MAAM,mBAAmB,GACvB,iBAAiB,CAAC,sBAAsB,EAAE,CAAC;QAE7C,oCAAoC;QAEpC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED;;;;;;eAMG;YACH,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,WAAW,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAgB,KAAK,CAAC,GAAG,CAA2B,CAAC;gBAEtE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;oBACvC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAClC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,KAAK,CAAC,YAAY,MAAM,KAAK,0BAA0B,CAC7E,CAAC;oBACJ,CAAC;oBAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnD,MAAM,IAAI,sBAAsB,CAC9B,6CAA6C,KAAK,4CAA4C,gBAAgB,CAAC,mBAAmB,CAChI,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC;4BACpC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAE,CAAC,IAAI;4BAC9C,CAAC,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,KAAK,CAAC,YAAY,MAAM,GAAG,0BAA0B,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,sBAAsB,CAC9B,6CAA6C,GAAG,4CAA4C,gBAAgB,CAAC,mBAAmB,CAC9H,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC;oBAClC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAE,CAAC,IAAI;oBAC5C,CAAC,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAxLe;IADb,WAAW,EAAE;;;;yDAkGb;AAGa;IADb,WAAW,EAAE;;;;iDAoFb"}
+{"version":3,"file":"QueryPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/QueryPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAGzE,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,yBAAyB,MAAM,6BAA6B,CAAC;AAKpE,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,WAAW,MAAM,4CAA4C,CAAC;AAGrE,OAAO,eAAe,MAAM,4CAA4C,CAAC;AACzE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,OAAmB,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,eAAe;IAClC;;;;;;;;;;;OAWG;IAEW,AAAP,MAAM,CAAC,4BAA4B,CACxC,SAAgC,EAChC,KAAwB,EACxB,MAA0B,EAC1B,KAAqC;QAErC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;YAC1B,OAAO,CAAC,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,CAAC;QAEL,MAAM,mBAAmB,GACvB,iBAAiB,CAAC,sBAAsB,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAQ,MAAqB,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzD,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;gBAEpC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;oBACnC,MAAM,IAAI,gBAAgB,CACxB,0BAA0B;wBACxB,GAAG;wBACH,MAAM;wBACN,KAAK,CAAC,YAAY;wBAClB,8CAA8C,CACjD,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAAc,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;gBAEpE,IACE,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;oBACnD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,EACxD,CAAC;oBACD,KAAK,MAAM,QAAQ,IAAK,MAAc,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5C,yBAAyB;wBACzB,IAAI,OAAQ,MAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;4BAC5D,MAAM,IAAI,gBAAgB,CACxB,4EAA4E,CAC7E,CAAC;wBACJ,CAAC;wBAED,MAAM,6BAA6B,GACjC,YAAY,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;wBAEhD,IAAI,CAAC,6BAA6B,EAAE,CAAC;4BACnC,MAAM,IAAI,gBAAgB,CACxB,UAAU,QAAQ,iBAAiB,YAAY,CAAC,YAAY,EAAE,CAC/D,CAAC;wBACJ,CAAC;wBAED;;;;;;;;;;;;;2BAaG;wBACH,yBAAyB,CAAC,mBAAmB,CAAC;4BAC5C,SAAS,EAAE,SAAS;4BACpB,kBAAkB,EAAE,GAAG;4BACvB,gBAAgB,EAAE,mBAAmB,CAAC,SAAS;4BAC/C,iBAAiB,EAAE,QAAQ;4BAC3B,KAAK,EAAE,KAAyB;4BAChC,KAAK,EAAE,KAAK;yBACb,CAAC,CAAC;wBAEH,IACE,CAAC,6BAA6B,CAAC,sBAAsB;4BACrD,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACvC,CAAC;4BACD,MAAM,IAAI,gBAAgB,CACxB,UAAU,QAAQ,OAAO,YAAY,CAAC,YAAY,2CAA2C,CAC9F,CAAC;wBACJ,CAAC;wBAED,IAAI,6BAA6B,CAAC,sBAAsB,EAAE,CAAC;4BACzD,SAAS;wBACX,CAAC;wBAED,uDAAuD;wBACvD,IAAI,eAAe,EAAE,CAAC;4BACpB,MAAM,aAAa,GAAY,YAAY,CAAC,kBAAkB,CAC5D,eAAe,EACf,QAAQ,CACT,CAAC;4BAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gCACnB,IAAI,eAAe,GAAsB,EAAE,CAAC;gCAC5C,IAAI,YAAY,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;oCACrD,eAAe;wCACb,YAAY,CAAC,yBAAyB,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC;gCAC3D,CAAC;gCAED,MAAM,IAAI,sBAAsB,CAC9B,uCACE,YAAY,CAAC,YACf,OACE,KAAK,CAAC,YACR,wCAAwC,gBAAgB,CAAC,mBAAmB,CAC1E,eAAe,CAChB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,oBAAoB,CAChC,SAAgC,EAChC,KAAwB,EACxB,KAAqC;QAErC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC;;;;;;;;WAQG;QACH,yBAAyB,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAExE,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,qBAAqB,GACzB,iBAAiB,CAAC,4BAA4B,CAC5C,SAAS,EACT,eAAe,IAAI,EAAE,EACrB,mBAAmB,CAAC,IAAI,CACzB,CAAC;QAEJ,MAAM,YAAY,GAAkB,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC;QAEpE,MAAM,mBAAmB,GACvB,iBAAiB,CAAC,sBAAsB,EAAE,CAAC;QAE7C,oCAAoC;QAEpC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED;;;;;;eAMG;YACH,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,WAAW,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAgB,KAAK,CAAC,GAAG,CAA2B,CAAC;gBAEtE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;oBACvC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxC,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAClC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,KAAK,CAAC,YAAY,MAAM,KAAK,0BAA0B,CAC7E,CAAC;oBACJ,CAAC;oBAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnD,MAAM,IAAI,sBAAsB,CAC9B,6CAA6C,KAAK,4CAA4C,gBAAgB,CAAC,mBAAmB,CAChI,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC;4BACpC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAE,CAAC,IAAI;4BAC9C,CAAC,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,KAAK,CAAC,YAAY,MAAM,GAAG,0BAA0B,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,sBAAsB,CAC9B,6CAA6C,GAAG,4CAA4C,gBAAgB,CAAC,mBAAmB,CAC9H,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC;oBAClC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAE,CAAC,IAAI;oBAC5C,CAAC,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3Ne;IADb,WAAW,EAAE;;;;yDA0Hb;AAGa;IADb,WAAW,EAAE;;;;iDA+Fb"}

package/build/dist/Server/Types/Database/Permissions/TenantPermission.js

@@ -173,6 +173,13 @@ export default class TenantPermission {
      * True if the only permission letting this user through the table-level
      * check for this op is Permission.CurrentUser. In that case the query must
      * be restricted to rows the user owns (via the model's user column).
+     *
+     * Public because CreatePermission needs exactly this predicate. Create never
+     * reaches addTenantScopeToQuery (see the `type !== DatabaseRequestType.Create`
+     * carve-out above), so it enforces ownership on the DATA rather than on a
+     * query — but it must decide "is this caller here purely as some logged-in
+     * user, or do they hold a real role permission" identically, or the two paths
+     * would disagree about who may act on whose rows.
      */
     static isAccessGrantedOnlyByCurrentUser(modelType, props, type) {
         const modelPermissions = TablePermission.getTablePermission(modelType, type);

package/build/dist/Server/Types/Database/Permissions/TenantPermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"TenantPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TenantPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAGzE,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAEhD,OAAO,QAAQ,MAAM,yCAAyC,CAAC;AAE/D,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,UAAU,MAAM,8BAA8B,CAAC;AACtD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,+BAA+B,GAA8B;IACjE,UAAU,CAAC,WAAW;IACtB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,mBAAmB;CAC/B,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACvC,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;;QAEzB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,MAAM,YAAY,GAAkB,KAAK,CAAC,eAAe,EAAE,CAAC;QAE5D,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,KAAK,CAAC,YAAY,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,gCAAgC,GACpC,gBAAgB,CAAC,gCAAgC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAkB,KAAK,CAAC,aAAa,EAAE,CAAC;QAExD;;;;WAIG;QACH,IACE,gCAAgC;YAChC,IAAI,KAAK,mBAAmB,CAAC,MAAM;YACnC,CAAC,UAAU,EACX,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,4CAA4C,KAAK,CAAC,YAAY,GAAG,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,6BAA6B,GACjC,gCAAgC,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;QAE1D;;;;;WAKG;QACH,IAAI,6BAA6B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAC9B,iCAAiC,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,CAC/D,CAAC;QACJ,CAAC;QAED,uHAAuH;QACvH,IAAI,YAAY,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACjE,KAAa,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YAE9C;;;;;;eAMG;YACH,IAAI,6BAA6B,EAAE,CAAC;gBAClC,gBAAgB,CAAC,0BAA0B,CACzC,KAAK,EACL,KAAK,EACL,KAAK,CAAC,MAAkB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,0HAA0H;aACrH,IACH,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,CAAC,aAAa,EAAE;YACrB,KAAK,CAAC,MAAM,EACZ,CAAC;YACD,gBAAgB,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC;aAAM,IACL,YAAY;YACZ,KAAK,CAAC,0BAA0B;YAChC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAC/C,CAAC;YACD;;;;eAIG;YAEH,MAAM,OAAO,GAA6B,EAAE,CAAC;YAE7C,IAAI,UAAU,GAAoB,EAAE,CAAC;YAErC,IACE,KAAK,CAAC,0BAA0B;gBAChC,KAAK,CAAC,0BAA0B,CAAC,UAAU,EAC3C,CAAC;gBACD,UAAU,GAAG,MAAA,KAAK,CAAC,0BAA0B,0CAAE,UAAU,CAAC;YAC5D,CAAC;YAED;;;eAGG;YACH,MAAM,oBAAoB,GAAa,KAAa,CAAC,YAAY,CAAC,CAAC;YACnE,IAAI,oBAAoB,IAAI,oBAAoB,YAAY,QAAQ,EAAE,CAAC;gBACrE,MAAM,YAAY,GAChB,oBACD,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAA6B,EAAE,EAAE;oBAC7C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,iEAAiE;gBACjE,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAa,EAAE,EAAE;oBAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,uFAAuF;gBACvF,OAAQ,KAAa,CAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,aAAa,GAAiB,IAAI,CAAC;YACvC,MAAM,mBAAmB,qBAA2B,KAAK,CAAE,CAAC;YAE5D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,oBAAoB,GACxB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,oBACJ,mBAAmB,GACxB,MAAM,kCAED,KAAK,KACR,oBAAoB,EAAE,KAAK,EAC3B,QAAQ,EAAE,SAAS,EACnB,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,KAE9D,IAAI,CACL,CAAC;oBAEJ,OAAO,CAAC,IAAI,mBACP,oBAAoB,CAAC,KAAK,EAC7B,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,2BAA2B;oBAC3B,aAAa,GAAG,CAAU,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,sBAAsB,CAC9B,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO;oBACpB,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAC3D,CAAC;YACJ,CAAC;YAED,OAAO,OAAc,CAAC;QACxB,CAAC;QAED;;;;;WAKG;QACH,IAAI,6BAA6B,EAAE,CAAC;YAClC,MAAM,YAAY,GAAa,KAAa,CAAC,UAAoB,CAAC,CAAC;YAEnE,IACE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,YAAY,CAAC;gBAChD,YAAY,CAAC,QAAQ,EAAE,KAAM,KAAK,CAAC,MAAmB,CAAC,QAAQ,EAAE,EACjE,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAC9B,8CAA8C,KAAK,CAAC,YAAY,GAAG,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,0BAA0B,CACvC,KAAgB,EAChB,KAAwB,EACxB,MAAgB;QAEhB,MAAM,UAAU,GAAW,KAAK,CAAC,aAAa,EAAY,CAAC;QAC3D,MAAM,iBAAiB,GAAa,KAAa,CAAC,UAAU,CAAC,CAAC;QAE9D,IACE,iBAAiB,KAAK,SAAS;YAC/B,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;gBACpD,iBAAiB,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,EACrD,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,uDAAuD,KAAK,CAAC,YAAY,GAAG,CAC7E,CAAC;QACJ,CAAC;QAEA,KAAa,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,gBAAgB,CAAC,KAAc;QAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,QAAQ,CAAC;IAChE,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,gCAAgC,CAC7C,SAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC,GAAG,CAAC,CAAC,EAA8B,EAAE,EAAE;YACvC,OAAO,EAAE,CAAC,UAAU,CAAC;QACvB,CAAC,CAAC,CAAC;QAEL,MAAM,YAAY,GAAsB,eAAe,CAAC,MAAM,CAC5D,CAAC,CAAa,EAAE,EAAE;YAChB,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAsB,YAAY,CAAC,MAAM,CACvD,CAAC,CAAa,EAAE,EAAE;YAChB,OAAO,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CACF,CAAC;QAEF,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;CACF;AAvQqB;IADnB,WAAW,EAAE;;;;mDAqLb"}
+{"version":3,"file":"TenantPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TenantPermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAGzE,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAEhD,OAAO,QAAQ,MAAM,yCAAyC,CAAC;AAE/D,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,UAAU,MAAM,8BAA8B,CAAC;AACtD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,+BAA+B,GAA8B;IACjE,UAAU,CAAC,WAAW;IACtB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,mBAAmB;CAC/B,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACvC,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;;QAEzB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,MAAM,YAAY,GAAkB,KAAK,CAAC,eAAe,EAAE,CAAC;QAE5D,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,KAAK,CAAC,YAAY,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,gCAAgC,GACpC,gBAAgB,CAAC,gCAAgC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAkB,KAAK,CAAC,aAAa,EAAE,CAAC;QAExD;;;;WAIG;QACH,IACE,gCAAgC;YAChC,IAAI,KAAK,mBAAmB,CAAC,MAAM;YACnC,CAAC,UAAU,EACX,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,4CAA4C,KAAK,CAAC,YAAY,GAAG,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,6BAA6B,GACjC,gCAAgC,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;QAE1D;;;;;WAKG;QACH,IAAI,6BAA6B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,sBAAsB,CAC9B,iCAAiC,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,CAC/D,CAAC;QACJ,CAAC;QAED,uHAAuH;QACvH,IAAI,YAAY,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACjE,KAAa,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YAE9C;;;;;;eAMG;YACH,IAAI,6BAA6B,EAAE,CAAC;gBAClC,gBAAgB,CAAC,0BAA0B,CACzC,KAAK,EACL,KAAK,EACL,KAAK,CAAC,MAAkB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,0HAA0H;aACrH,IACH,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,CAAC,aAAa,EAAE;YACrB,KAAK,CAAC,MAAM,EACZ,CAAC;YACD,gBAAgB,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC;aAAM,IACL,YAAY;YACZ,KAAK,CAAC,0BAA0B;YAChC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,oBAAoB,CAAC,EAC/C,CAAC;YACD;;;;eAIG;YAEH,MAAM,OAAO,GAA6B,EAAE,CAAC;YAE7C,IAAI,UAAU,GAAoB,EAAE,CAAC;YAErC,IACE,KAAK,CAAC,0BAA0B;gBAChC,KAAK,CAAC,0BAA0B,CAAC,UAAU,EAC3C,CAAC;gBACD,UAAU,GAAG,MAAA,KAAK,CAAC,0BAA0B,0CAAE,UAAU,CAAC;YAC5D,CAAC;YAED;;;eAGG;YACH,MAAM,oBAAoB,GAAa,KAAa,CAAC,YAAY,CAAC,CAAC;YACnE,IAAI,oBAAoB,IAAI,oBAAoB,YAAY,QAAQ,EAAE,CAAC;gBACrE,MAAM,YAAY,GAChB,oBACD,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAA6B,EAAE,EAAE;oBAC7C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,iEAAiE;gBACjE,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAa,EAAE,EAAE;oBAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,uFAAuF;gBACvF,OAAQ,KAAa,CAAC,YAAY,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,aAAa,GAAiB,IAAI,CAAC;YACvC,MAAM,mBAAmB,qBAA2B,KAAK,CAAE,CAAC;YAE5D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,oBAAoB,GACxB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,oBACJ,mBAAmB,GACxB,MAAM,kCAED,KAAK,KACR,oBAAoB,EAAE,KAAK,EAC3B,QAAQ,EAAE,SAAS,EACnB,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,KAE9D,IAAI,CACL,CAAC;oBAEJ,OAAO,CAAC,IAAI,mBACP,oBAAoB,CAAC,KAAK,EAC7B,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,2BAA2B;oBAC3B,aAAa,GAAG,CAAU,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,sBAAsB,CAC9B,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,OAAO;oBACpB,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAC3D,CAAC;YACJ,CAAC;YAED,OAAO,OAAc,CAAC;QACxB,CAAC;QAED;;;;;WAKG;QACH,IAAI,6BAA6B,EAAE,CAAC;YAClC,MAAM,YAAY,GAAa,KAAa,CAAC,UAAoB,CAAC,CAAC;YAEnE,IACE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,YAAY,CAAC;gBAChD,YAAY,CAAC,QAAQ,EAAE,KAAM,KAAK,CAAC,MAAmB,CAAC,QAAQ,EAAE,EACjE,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAC9B,8CAA8C,KAAK,CAAC,YAAY,GAAG,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,0BAA0B,CACvC,KAAgB,EAChB,KAAwB,EACxB,MAAgB;QAEhB,MAAM,UAAU,GAAW,KAAK,CAAC,aAAa,EAAY,CAAC;QAC3D,MAAM,iBAAiB,GAAa,KAAa,CAAC,UAAU,CAAC,CAAC;QAE9D,IACE,iBAAiB,KAAK,SAAS;YAC/B,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;gBACpD,iBAAiB,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,EACrD,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,uDAAuD,KAAK,CAAC,YAAY,GAAG,CAC7E,CAAC;QACJ,CAAC;QAEA,KAAa,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,gBAAgB,CAAC,KAAc;QAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,QAAQ,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,gCAAgC,CAC5C,SAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC,GAAG,CAAC,CAAC,EAA8B,EAAE,EAAE;YACvC,OAAO,EAAE,CAAC,UAAU,CAAC;QACvB,CAAC,CAAC,CAAC;QAEL,MAAM,YAAY,GAAsB,eAAe,CAAC,MAAM,CAC5D,CAAC,CAAa,EAAE,EAAE;YAChB,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAsB,YAAY,CAAC,MAAM,CACvD,CAAC,CAAa,EAAE,EAAE;YAChB,OAAO,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CACF,CAAC;QAEF,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;CACF;AA9QqB;IADnB,WAAW,EAAE;;;;mDAqLb"}

package/build/dist/Server/Types/Workflow/Components/API/Delete.js

@@ -67,7 +67,7 @@ export default class ApiDelete extends ComponentCode {
             }
             return Promise.resolve({
                 returnValues: {
-                    errorMessage: err.message || "Unknown error",
+                    error: err.message || "Unknown error",
                 },
                 executePort: result.errorPort,
             });

package/build/dist/Server/Types/Workflow/Components/API/Delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"Delete.js","sourceRoot":"","sources":["../../../../../../../Server/Types/Workflow/Components/API/Delete.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAA4C,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,iBAAiB,MAAM,4CAA4C,CAAC;AAI3E,OAAO,gBAAgB,MAAM,iDAAiD,CAAC;AAK/E,OAAO,WAAW,MAAM,2CAA2C,CAAC;AACpE,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,GAAG,MAAM,0BAA0B,CAAC;AAC3C,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,aAAa;IAClD;QACE,KAAK,EAAE,CAAC;QAER,MAAM,SAAS,GAAkC,aAAa,CAAC,IAAI,CACjE,CAAC,CAAoB,EAAE,EAAE;YACvB,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,SAAS,CAAC;QACxC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAGqB,AAAN,KAAK,CAAC,GAAG,CACvB,IAAgB,EAChB,OAAmB;QAEnB,MAAM,MAAM,GACV,MAAM,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1E,IAAI,SAAS,GAAwD,IAAI,CAAC;QAE1E,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAC3B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAuB;gBACtD,OAAO,EAAE,iBAAiB,CAAC,cAAc;aAC1C,CAAC,CAAC;YAEH;;;;eAIG;YACH,IAAI,SAAS,YAAY,iBAAiB,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;gBAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC;oBACpD,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE;oBACZ,YAAY,EAAG,GAAa,CAAC,OAAO,IAAI,eAAe;iBACxD;gBACD,WAAW,EAAE,MAAM,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxDuB;IADrB,WAAW,EAAE;;;;oCAwDb"}
+{"version":3,"file":"Delete.js","sourceRoot":"","sources":["../../../../../../../Server/Types/Workflow/Components/API/Delete.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAA4C,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,iBAAiB,MAAM,4CAA4C,CAAC;AAI3E,OAAO,gBAAgB,MAAM,iDAAiD,CAAC;AAK/E,OAAO,WAAW,MAAM,2CAA2C,CAAC;AACpE,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,GAAG,MAAM,0BAA0B,CAAC;AAC3C,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,aAAa;IAClD;QACE,KAAK,EAAE,CAAC;QAER,MAAM,SAAS,GAAkC,aAAa,CAAC,IAAI,CACjE,CAAC,CAAoB,EAAE,EAAE;YACvB,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,SAAS,CAAC;QACxC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAGqB,AAAN,KAAK,CAAC,GAAG,CACvB,IAAgB,EAChB,OAAmB;QAEnB,MAAM,MAAM,GACV,MAAM,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1E,IAAI,SAAS,GAAwD,IAAI,CAAC;QAE1E,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAC3B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAuB;gBACtD,OAAO,EAAE,iBAAiB,CAAC,cAAc;aAC1C,CAAC,CAAC;YAEH;;;;eAIG;YACH,IAAI,SAAS,YAAY,iBAAiB,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;gBAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC;oBACpD,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE;oBACZ,KAAK,EAAG,GAAa,CAAC,OAAO,IAAI,eAAe;iBACjD;gBACD,WAAW,EAAE,MAAM,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxDuB;IADrB,WAAW,EAAE;;;;oCAwDb"}

package/build/dist/Server/Types/Workflow/Components/API/Get.js

@@ -67,7 +67,7 @@ export default class ApiGet extends ComponentCode {
             }
             return Promise.resolve({
                 returnValues: {
-                    errorMessage: err.message || "Unknown error",
+                    error: err.message || "Unknown error",
                 },
                 executePort: result.errorPort,
             });

package/build/dist/Server/Types/Workflow/Components/API/Get.js.map

@@ -1 +1 @@
-{"version":3,"file":"Get.js","sourceRoot":"","sources":["../../../../../../../Server/Types/Workflow/Components/API/Get.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAA4C,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,iBAAiB,MAAM,4CAA4C,CAAC;AAI3E,OAAO,gBAAgB,MAAM,iDAAiD,CAAC;AAK/E,OAAO,WAAW,MAAM,2CAA2C,CAAC;AACpE,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,GAAG,MAAM,0BAA0B,CAAC;AAC3C,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,aAAa;IAC/C;QACE,KAAK,EAAE,CAAC;QAER,MAAM,SAAS,GAAkC,aAAa,CAAC,IAAI,CACjE,CAAC,CAAoB,EAAE,EAAE;YACvB,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC;QACrC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAGqB,AAAN,KAAK,CAAC,GAAG,CACvB,IAAgB,EAChB,OAAmB;QAEnB,MAAM,MAAM,GACV,MAAM,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1E,IAAI,SAAS,GAAwD,IAAI,CAAC;QAE1E,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC;gBACxB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAuB;gBACtD,OAAO,EAAE,iBAAiB,CAAC,cAAc;aAC1C,CAAC,CAAC;YAEH;;;;eAIG;YACH,IAAI,SAAS,YAAY,iBAAiB,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;gBAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC;oBACpD,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE;oBACZ,YAAY,EAAG,GAAa,CAAC,OAAO,IAAI,eAAe;iBACxD;gBACD,WAAW,EAAE,MAAM,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxDuB;IADrB,WAAW,EAAE;;;;iCAwDb"}
+{"version":3,"file":"Get.js","sourceRoot":"","sources":["../../../../../../../Server/Types/Workflow/Components/API/Get.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAA4C,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,iBAAiB,MAAM,4CAA4C,CAAC;AAI3E,OAAO,gBAAgB,MAAM,iDAAiD,CAAC;AAK/E,OAAO,WAAW,MAAM,2CAA2C,CAAC;AACpE,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,GAAG,MAAM,0BAA0B,CAAC;AAC3C,OAAO,WAAW,MAAM,yCAAyC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,aAAa;IAC/C;QACE,KAAK,EAAE,CAAC;QAER,MAAM,SAAS,GAAkC,aAAa,CAAC,IAAI,CACjE,CAAC,CAAoB,EAAE,EAAE;YACvB,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC;QACrC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAGqB,AAAN,KAAK,CAAC,GAAG,CACvB,IAAgB,EAChB,OAAmB;QAEnB,MAAM,MAAM,GACV,MAAM,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1E,IAAI,SAAS,GAAwD,IAAI,CAAC;QAE1E,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC;gBACxB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,cAAc,CAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAuB;gBACtD,OAAO,EAAE,iBAAiB,CAAC,cAAc;aAC1C,CAAC,CAAC;YAEH;;;;eAIG;YACH,IAAI,SAAS,YAAY,iBAAiB,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;gBAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC;oBACpD,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC;oBAC1D,WAAW,EAAE,MAAM,CAAC,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE;oBACZ,KAAK,EAAG,GAAa,CAAC,OAAO,IAAI,eAAe;iBACjD;gBACD,WAAW,EAAE,MAAM,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAxDuB;IADrB,WAAW,EAAE;;;;iCAwDb"}

package/build/dist/Server/Types/Workflow/Components/API/Patch.js

@@ -67,7 +67,7 @@ export default class ApiPut extends ComponentCode {
             }
             return Promise.resolve({
                 returnValues: {
-                    errorMessage: err.message || "Unknown error",
+                    error: err.message || "Unknown error",
                 },
                 executePort: result.errorPort,
             });