@oneuptime/common 13.0.7 → 13.0.8

package/build/dist/Server/Services/TeamPermissionService.js

@@ -7,13 +7,15 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+import ModelPermission from "../Types/Database/Permissions/Index";
+import QueryHelper from "../Types/Database/QueryHelper";
 import AccessTokenService from "./AccessTokenService";
 import DatabaseService from "./DatabaseService";
 import TeamMemberService from "./TeamMemberService";
 import TeamService from "./TeamService";
 import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
 import DatabaseCommonInteractionPropsUtil, { PermissionType, } from "../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
-import LIMIT_MAX, { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
+import LIMIT_MAX from "../../Types/Database/LimitMax";
 import BadDataException from "../../Types/Exception/BadDataException";
 import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException";
 import PermissionScope from "../../Types/Database/AccessControl/PermissionScope";
@@ -74,6 +76,7 @@ export class Service extends DatabaseService {
             return;
         }
         const callerPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(data.props, PermissionType.Allow);
+        const callerBlocks = DatabaseCommonInteractionPropsUtil.getUserPermissions(data.props, PermissionType.Block);
         /*
          * ProjectOwner is the sole tenant-level delegation override. In
          * particular, ProjectAdmin is not a synonym for every project
@@ -83,8 +86,12 @@ export class Service extends DatabaseService {
          * scope comparison below, including ProjectAdmin.
          */
         if (callerPermissions.some((permission) => {
-            return permission.permission === Permission.ProjectOwner;
-        })) {
+            return (permission.permission === Permission.ProjectOwner &&
+                this.permissionCoversGrant(permission, PermissionScope.All, []));
+        }) &&
+            !callerBlocks.some((permission) => {
+                return permission.permission === Permission.ProjectOwner;
+            })) {
             return;
         }
         const targetLabelIds = data.labelIds || [];
@@ -95,7 +102,30 @@ export class Service extends DatabaseService {
             .some((permission) => {
             return this.permissionCoversGrant(permission, data.scope, targetLabelIds);
         });
-        if (!canDelegate) {
+        const matchingBlocks = callerBlocks.filter((permission) => {
+            return permission.permission === data.permission;
+        });
+        const targetHasLabelScope = targetLabelIds.length > 0 &&
+            data.scope !== PermissionScope.All &&
+            data.scope !== PermissionScope.Owned;
+        const isBlocked = matchingBlocks.some((permission) => {
+            /*
+             * An unrestricted/Owned grant may include resources blocked from the
+             * caller. Ownership also cannot be transferred between principals.
+             */
+            if (!targetHasLabelScope ||
+                permission.scope === PermissionScope.All ||
+                permission.scope === PermissionScope.Owned ||
+                permission.labelIds.length === 0) {
+                return true;
+            }
+            return permission.labelIds.some((blockedLabelId) => {
+                return targetLabelIds.some((labelId) => {
+                    return labelId.toString() === blockedLabelId.toString();
+                });
+            });
+        });
+        if (!canDelegate || isBlocked) {
             throw new NotAuthorizedException(`You cannot grant ${data.permission} because your own access does not include that permission at an equal or broader scope.`);
         }
     }
@@ -249,13 +279,26 @@ export class Service extends DatabaseService {
     }
     async onBeforeUpdate(updateBy) {
         var _a, _b;
-        const teamPermissions = await this.findBy({
+        updateBy.query = await ModelPermission.checkUpdateQueryPermissions(Model, updateBy.query, updateBy.data, updateBy.props);
+        const selectedPermissions = await this.findAllBy({
             query: updateBy.query,
+            select: { _id: true },
+            skip: updateBy.skip,
+            limit: updateBy.limit,
+            props: { isRoot: true },
+        });
+        const selectedIds = selectedPermissions.map((row) => {
+            return row.id;
+        });
+        // Read complete labels independently of any relation filters in the query.
+        const teamPermissions = await this.findAllBy({
+            query: { _id: QueryHelper.any(selectedIds) },
             select: {
                 _id: true,
                 teamId: true,
                 projectId: true,
                 permission: true,
+                isBlockPermission: true,
                 labels: {
                     _id: true,
                 },
@@ -264,8 +307,6 @@ export class Service extends DatabaseService {
                     isPermissionsEditable: true,
                 },
             },
-            skip: 0,
-            limit: LIMIT_MAX,
             props: {
                 isRoot: true,
             },
@@ -287,6 +328,15 @@ export class Service extends DatabaseService {
             const requestedScope = typeof rawUpdateData.scope === "string"
                 ? rawUpdateData.scope
                 : permission.scope;
+            // Retargeting or narrowing a deny also removes its original restriction.
+            if (permission.isBlockPermission) {
+                this.assertCanGrantPermission({
+                    permission: permission.permission,
+                    labelIds: this.getLabelIds(permission.labels),
+                    scope: permission.scope,
+                    props: updateBy.props,
+                });
+            }
             this.assertCanGrantPermission({
                 permission: requestedPermission,
                 labelIds: this.getLabelIds(requestedLabels),
@@ -295,23 +345,7 @@ export class Service extends DatabaseService {
             });
         }
         if (updateBy.data.labels && updateBy.data.labels.length > 0) {
-            const existingPermissions = await this.findBy({
-                query: updateBy.query,
-                select: {
-                    _id: true,
-                    labels: true,
-                    isBlockPermission: true,
-                    projectId: true,
-                    teamId: true,
-                    permission: true,
-                },
-                limit: LIMIT_PER_PROJECT,
-                skip: 0,
-                props: {
-                    isRoot: true,
-                },
-            });
-            for (const alreadySavedPermission of existingPermissions) {
+            for (const alreadySavedPermission of teamPermissions) {
                 // check if the
                 const isBlockPermission = alreadySavedPermission.isBlockPermission || false;
                 const existingPermission = await this.findOneBy({
@@ -341,6 +375,8 @@ export class Service extends DatabaseService {
                 }
             }
         }
+        updateBy.query = Object.assign(Object.assign({}, updateBy.query), { _id: QueryHelper.any(selectedIds) });
+        updateBy.skip = 0;
         return { updateBy, carryForward: teamPermissions };
     }
     async onUpdateSuccess(onUpdate, _updatedItemIds) {
@@ -376,27 +412,53 @@ export class Service extends DatabaseService {
     }
     async onBeforeDelete(deleteBy) {
         var _a;
-        const teamPermissions = await this.findBy({
+        // Scope the root lookup using the same delete authorization as the write.
+        deleteBy.query = await ModelPermission.checkDeleteQueryPermission(Model, deleteBy.query, deleteBy.props);
+        const selectedPermissions = await this.findAllBy({
             query: deleteBy.query,
+            select: { _id: true },
+            skip: deleteBy.skip,
+            limit: deleteBy.limit,
+            props: { isRoot: true },
+        });
+        const selectedIds = selectedPermissions.map((row) => {
+            return row.id;
+        });
+        const teamPermissions = await this.findAllBy({
+            query: { _id: QueryHelper.any(selectedIds) },
             select: {
                 _id: true,
                 teamId: true,
                 projectId: true,
+                permission: true,
+                isBlockPermission: true,
+                labels: { _id: true },
+                scope: true,
                 team: {
                     isPermissionsEditable: true,
                 },
             },
-            skip: 0,
-            limit: LIMIT_MAX,
             props: {
                 isRoot: true,
             },
         });
         for (const permission of teamPermissions) {
+            this.assertProjectMatchesTenant(permission.projectId, deleteBy.props);
             if (!((_a = permission.team) === null || _a === void 0 ? void 0 : _a.isPermissionsEditable)) {
                 throw new BadDataException("Permissions for this team is not deleteable. You can create a new team and add permissions to that team instead.");
             }
+            if (permission.isBlockPermission) {
+                this.assertCanGrantPermission({
+                    permission: permission.permission,
+                    labelIds: this.getLabelIds(permission.labels),
+                    scope: permission.scope,
+                    props: deleteBy.props,
+                });
+            }
         }
+        // Keep the write restricted to the page whose authority was checked.
+        deleteBy.query = Object.assign(Object.assign({}, deleteBy.query), { _id: QueryHelper.any(selectedIds) });
+        deleteBy.skip = 0;
         let teamMembers = [];
         for (const permission of teamPermissions) {
             const members = await TeamMemberService.findBy({

package/build/dist/Server/Services/TeamPermissionService.js.map

@@ -1 +1 @@
-{"version":3,"file":"TeamPermissionService.js","sourceRoot":"","sources":["../../../../Server/Services/TeamPermissionService.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,kBAAkB,MAAM,sBAAsB,CAAC;AACtD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,WAAW,MAAM,eAAe,CAAC;AACxC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,6DAA6D,CAAC;AACrE,OAAO,SAAS,EAAE,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,sBAAsB,MAAM,8CAA8C,CAAC;AAClF,OAAO,eAAe,MAAM,oDAAoD,CAAC;AAEjF,OAAO,UAA8B,MAAM,wBAAwB,CAAC;AAIpE,OAAO,KAAK,MAAM,4CAA4C,CAAC;AAE/D,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAEO,0BAA0B,CAChC,SAAmB,EACnB,KAAqC;QAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,sBAAsB,CAC9B,kEAAkE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAgC;QAClD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;aAClB,GAAG,CAAC,CAAC,KAAY,EAAE,EAAE;YACpB,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,OAAwB,EAAuB,EAAE;YACxD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,qBAAqB,CAC3B,gBAAgC,EAChC,WAAwC,EACxC,cAA+B;QAE/B,MAAM,cAAc,GAAoB,gBAAgB,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxE,MAAM,iBAAiB,GACrB,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,GAAG;YAC9C,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;YACxD,CAAC,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM;gBAChD,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAEjC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,mBAAmB,GACvB,cAAc,CAAC,MAAM,GAAG,CAAC;YACzB,WAAW,KAAK,eAAe,CAAC,GAAG;YACnC,WAAW,KAAK,eAAe,CAAC,KAAK,CAAC;QAExC,IACE,CAAC,mBAAmB;YACpB,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,EAChD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,oBAAoB,GAAgB,IAAI,GAAG,CAC/C,cAAc,CAAC,GAAG,CAAC,CAAC,OAAiB,EAAE,EAAE;YACvC,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,OAAiB,EAAE,EAAE;YAChD,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,wBAAwB,CAAC,IAK/B;QACC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GACrB,kCAAkC,CAAC,kBAAkB,CACnD,IAAI,CAAC,KAAK,EACV,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ;;;;;;;WAOG;QACH,IACE,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAA0B,EAAE,EAAE;YACpD,OAAO,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CAAC;QAC3D,CAAC,CAAC,EACF,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAoB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAY,iBAAiB;aAC3C,MAAM,CAAC,CAAC,UAA0B,EAAE,EAAE;YACrC,OAAO,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC;QACnD,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,UAA0B,EAAE,EAAE;YACnC,OAAO,IAAI,CAAC,qBAAqB,CAC/B,UAAU,EACV,IAAI,CAAC,KAAK,EACV,cAAc,CACf,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,CAAC,UAAU,yFAAyF,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,6BAA6B,CAAC,IAI1C;QACC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YAClD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;iBACV;gBACD,KAAK,EAAE,IAAI;aACZ;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,wBAAwB,CAAC;gBAC5B,UAAU,EAAE,UAAU,CAAC,UAAW;gBAClC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC7C,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEzE;;;WAGG;QACH,MAAM,IAAI,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;YACpD,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;aACnC;YACD,MAAM,EAAE;gBACN,qBAAqB,EAAE,IAAI;aAC5B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CACxB,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC;YAC5B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;YAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;QAEH,yFAAyF;QAEzF,MAAM,iBAAiB,GAAY,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAE5E,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC5D,KAAK,EAAE;gBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBAC5B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;gBAClC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;gBACpC,iBAAiB,EAAE,iBAAiB;aACrC;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,iBAAiB,EAAE,IAAI;aACxB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,IAAI,gBAAgB,CACxB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,eAAe;YAEf,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;gBAC5D,KAAK,EAAE;oBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;oBAC5B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;oBAClC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;oBACpC,iBAAiB,EAAE,CAAC,iBAAiB;iBACtC;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,iBAAiB,EAAE,IAAI;oBACvB,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,IAAI,kBAAkB,IAAI,CAAC,CAAA,MAAA,kBAAkB,CAAC,MAAM,0CAAE,MAAM,KAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvE,qFAAqF;gBAErF,MAAM,SAAS,GAAW,kBAAkB,CAAC,iBAAiB;oBAC5D,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO,CAAC;gBAEZ,MAAM,IAAI,gBAAgB,CACxB,qEAAqE,SAAS,6GAA6G,SAAS,aAAa,CAClN,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,WAAkB;QAElB,MAAM,QAAQ,GAAoB,QAAQ,CAAC,QAAQ,CAAC;QAEpD,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;YACpE,KAAK,EAAE;gBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAO;gBAC7B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAU;aACpC;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,IAAI;aACb;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;YACD,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,mBAAmB;YACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAO,CACf,CAAC;YACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAO,EACd,QAAQ,CAAC,IAAI,CAAC,SAAU,CACzB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,MAAM,eAAe,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACtD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;iBACV;gBACD,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE;oBACJ,qBAAqB,EAAE,IAAI;iBAC5B;aACF;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,SAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEvE,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,IAAI,0CAAE,qBAAqB,CAAA,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAgB,CACxB,kHAAkH,CACnH,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAIf,QAAQ,CAAC,IAIZ,CAAC;YACF,MAAM,mBAAmB,GACvB,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ;gBAC1C,CAAC,CAAE,aAAa,CAAC,UAAyB;gBAC1C,CAAC,CAAC,UAAU,CAAC,UAAW,CAAC;YAC7B,MAAM,eAAe,GACnB,aAAa,CAAC,MAAM,KAAK,IAAI;gBAC3B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;oBACnC,CAAC,CAAE,aAAa,CAAC,MAAuB;oBACxC,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;YAChC,MAAM,cAAc,GAClB,OAAO,aAAa,CAAC,KAAK,KAAK,QAAQ;gBACrC,CAAC,CAAE,aAAa,CAAC,KAAyB;gBAC1C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAEvB,IAAI,CAAC,wBAAwB,CAAC;gBAC5B,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC3C,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,mBAAmB,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC1D,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,IAAI;oBACZ,iBAAiB,EAAE,IAAI;oBACvB,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,IAAI;iBACjB;gBACD,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,CAAC;gBACP,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,KAAK,MAAM,sBAAsB,IAAI,mBAAmB,EAAE,CAAC;gBACzD,eAAe;gBAEf,MAAM,iBAAiB,GACrB,sBAAsB,CAAC,iBAAiB,IAAI,KAAK,CAAC;gBAEpD,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;oBAC5D,KAAK,EAAE;wBACL,MAAM,EAAE,sBAAsB,CAAC,MAAO;wBACtC,SAAS,EAAE,sBAAsB,CAAC,SAAU;wBAC5C,UAAU,EAAE,sBAAsB,CAAC,UAAW;wBAC9C,iBAAiB,EAAE,CAAC,iBAAiB;qBACtC;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,iBAAiB,EAAE,IAAI;wBACvB,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,IAAI;qBACjB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,IACE,kBAAkB;oBAClB,CAAC,CAAA,MAAA,kBAAkB,CAAC,MAAM,0CAAE,MAAM,KAAI,CAAC,CAAC,GAAG,CAAC,EAC5C,CAAC;oBACD,qFAAqF;oBAErF,MAAM,SAAS,GAAW,kBAAkB,CAAC,iBAAiB;wBAC5D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC;oBAEZ,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,kBAAkB,CAAC,UAAU,WAAW,SAAS,6GAA6G,SAAS,QAAQ,CAC9N,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,eAA2B;QAE3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;gBACpE,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,CAAC,MAAO;oBAC1B,SAAS,EAAE,UAAU,CAAC,SAAU;iBACjC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;iBAChB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACnB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;gBAChD,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;gBACnD,CAAC;gBAED,mBAAmB;gBACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAM,CACd,CAAC;gBACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,MAAM,eAAe,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACtD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE;oBACJ,qBAAqB,EAAE,IAAI;iBAC5B;aACF;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,IAAI,0CAAE,qBAAqB,CAAA,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAgB,CACxB,kHAAkH,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,WAAW,GAAsB,EAAE,CAAC;QAExC,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;gBAChE,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,CAAC,MAAO;oBAC1B,SAAS,EAAE,UAAU,CAAC,SAAU;iBACjC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;iBAChB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IACjD,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,oBAAgC;QAEhC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAe,MAAoB,CAAC;YAEpD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YACnD,CAAC;YAED,mBAAmB;YACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,UAAU,CAAC,MAAM,CAClB,CAAC;YACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,SAAS,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA9bc;IADZ,WAAW,EAAE;;;;4DAuCb;AAGwB;IADxB,WAAW,EAAE;;;;6CAgHb;AAGwB;IADxB,WAAW,EAAE;;6CAGC,KAAK;;8CA+BnB;AAGwB;IADxB,WAAW,EAAE;;;;6CA+Hb;AAGwB;IADxB,WAAW,EAAE;;;;8CA2Cb;AAGwB;IADxB,WAAW,EAAE;;;;6CAoDb;AAGwB;IADxB,WAAW,EAAE;;;;8CA2Bb;AAEH,eAAe,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"TeamPermissionService.js","sourceRoot":"","sources":["../../../../Server/Services/TeamPermissionService.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,eAAe,MAAM,qCAAqC,CAAC;AAClE,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,kBAAkB,MAAM,sBAAsB,CAAC;AACtD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,WAAW,MAAM,eAAe,CAAC;AACxC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,6DAA6D,CAAC;AACrE,OAAO,SAAS,MAAM,+BAA+B,CAAC;AACtD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,sBAAsB,MAAM,8CAA8C,CAAC;AAClF,OAAO,eAAe,MAAM,oDAAoD,CAAC;AAEjF,OAAO,UAA8B,MAAM,wBAAwB,CAAC;AAIpE,OAAO,KAAK,MAAM,4CAA4C,CAAC;AAE/D,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAEO,0BAA0B,CAChC,SAAmB,EACnB,KAAqC;QAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,sBAAsB,CAC9B,kEAAkE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAgC;QAClD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;aAClB,GAAG,CAAC,CAAC,KAAY,EAAE,EAAE;YACpB,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,OAAwB,EAAuB,EAAE;YACxD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,qBAAqB,CAC3B,gBAAgC,EAChC,WAAwC,EACxC,cAA+B;QAE/B,MAAM,cAAc,GAAoB,gBAAgB,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxE,MAAM,iBAAiB,GACrB,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,GAAG;YAC9C,CAAC,CAAC,gBAAgB,CAAC,KAAK,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;YACxD,CAAC,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM;gBAChD,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAEjC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,mBAAmB,GACvB,cAAc,CAAC,MAAM,GAAG,CAAC;YACzB,WAAW,KAAK,eAAe,CAAC,GAAG;YACnC,WAAW,KAAK,eAAe,CAAC,KAAK,CAAC;QAExC,IACE,CAAC,mBAAmB;YACpB,gBAAgB,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,EAChD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,oBAAoB,GAAgB,IAAI,GAAG,CAC/C,cAAc,CAAC,GAAG,CAAC,CAAC,OAAiB,EAAE,EAAE;YACvC,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,OAAiB,EAAE,EAAE;YAChD,OAAO,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,wBAAwB,CAAC,IAK/B;QACC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GACrB,kCAAkC,CAAC,kBAAkB,CACnD,IAAI,CAAC,KAAK,EACV,cAAc,CAAC,KAAK,CACrB,CAAC;QACJ,MAAM,YAAY,GAChB,kCAAkC,CAAC,kBAAkB,CACnD,IAAI,CAAC,KAAK,EACV,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ;;;;;;;WAOG;QACH,IACE,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAA0B,EAAE,EAAE;YACpD,OAAO,CACL,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY;gBACjD,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC;YACF,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAA0B,EAAE,EAAE;gBAChD,OAAO,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CAAC;YAC3D,CAAC,CAAC,EACF,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAoB,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAY,iBAAiB;aAC3C,MAAM,CAAC,CAAC,UAA0B,EAAE,EAAE;YACrC,OAAO,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC;QACnD,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,UAA0B,EAAE,EAAE;YACnC,OAAO,IAAI,CAAC,qBAAqB,CAC/B,UAAU,EACV,IAAI,CAAC,KAAK,EACV,cAAc,CACf,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,MAAM,cAAc,GAA0B,YAAY,CAAC,MAAM,CAC/D,CAAC,UAA0B,EAAE,EAAE;YAC7B,OAAO,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC;QACnD,CAAC,CACF,CAAC;QACF,MAAM,mBAAmB,GACvB,cAAc,CAAC,MAAM,GAAG,CAAC;YACzB,IAAI,CAAC,KAAK,KAAK,eAAe,CAAC,GAAG;YAClC,IAAI,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC;QACvC,MAAM,SAAS,GAAY,cAAc,CAAC,IAAI,CAC5C,CAAC,UAA0B,EAAE,EAAE;YAC7B;;;eAGG;YACH,IACE,CAAC,mBAAmB;gBACpB,UAAU,CAAC,KAAK,KAAK,eAAe,CAAC,GAAG;gBACxC,UAAU,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK;gBAC1C,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,cAAwB,EAAE,EAAE;gBAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAiB,EAAE,EAAE;oBAC/C,OAAO,OAAO,CAAC,QAAQ,EAAE,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC1D,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,CAAC,UAAU,yFAAyF,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,6BAA6B,CAAC,IAI1C;QACC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YAClD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;iBACV;gBACD,KAAK,EAAE,IAAI;aACZ;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,wBAAwB,CAAC;gBAC5B,UAAU,EAAE,UAAU,CAAC,UAAW;gBAClC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC7C,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEzE;;;WAGG;QACH,MAAM,IAAI,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;YACpD,KAAK,EAAE;gBACL,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;aACnC;YACD,MAAM,EAAE;gBACN,qBAAqB,EAAE,IAAI;aAC5B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CACxB,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC;YAC5B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;YAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;QAEH,yFAAyF;QAEzF,MAAM,iBAAiB,GAAY,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAE5E,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC5D,KAAK,EAAE;gBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBAC5B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;gBAClC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;gBACpC,iBAAiB,EAAE,iBAAiB;aACrC;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,iBAAiB,EAAE,IAAI;aACxB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,IAAI,gBAAgB,CACxB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,eAAe;YAEf,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;gBAC5D,KAAK,EAAE;oBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;oBAC5B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;oBAClC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;oBACpC,iBAAiB,EAAE,CAAC,iBAAiB;iBACtC;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,iBAAiB,EAAE,IAAI;oBACvB,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,IAAI,kBAAkB,IAAI,CAAC,CAAA,MAAA,kBAAkB,CAAC,MAAM,0CAAE,MAAM,KAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvE,qFAAqF;gBAErF,MAAM,SAAS,GAAW,kBAAkB,CAAC,iBAAiB;oBAC5D,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO,CAAC;gBAEZ,MAAM,IAAI,gBAAgB,CACxB,qEAAqE,SAAS,6GAA6G,SAAS,aAAa,CAClN,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,WAAkB;QAElB,MAAM,QAAQ,GAAoB,QAAQ,CAAC,QAAQ,CAAC;QAEpD,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;YACpE,KAAK,EAAE;gBACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAO;gBAC7B,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAU;aACpC;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,IAAI;aACb;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;YACD,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,mBAAmB;YACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAO,CACf,CAAC;YACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAO,EACd,QAAQ,CAAC,IAAI,CAAC,SAAU,CACzB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,QAAQ,CAAC,KAAK,GAAG,MAAM,eAAe,CAAC,2BAA2B,CAChE,KAAK,EACL,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,CACf,CAAC;QACF,MAAM,mBAAmB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC7D,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,WAAW,GAAoB,mBAAmB,CAAC,GAAG,CAC1D,CAAC,GAAU,EAAE,EAAE;YACb,OAAO,GAAG,CAAC,EAAG,CAAC;QACjB,CAAC,CACF,CAAC;QACF,2EAA2E;QAC3E,MAAM,eAAe,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YACzD,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC5C,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,iBAAiB,EAAE,IAAI;gBACvB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;iBACV;gBACD,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE;oBACJ,qBAAqB,EAAE,IAAI;iBAC5B;aACF;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,SAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEvE,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,IAAI,0CAAE,qBAAqB,CAAA,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAgB,CACxB,kHAAkH,CACnH,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAIf,QAAQ,CAAC,IAIZ,CAAC;YACF,MAAM,mBAAmB,GACvB,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ;gBAC1C,CAAC,CAAE,aAAa,CAAC,UAAyB;gBAC1C,CAAC,CAAC,UAAU,CAAC,UAAW,CAAC;YAC7B,MAAM,eAAe,GACnB,aAAa,CAAC,MAAM,KAAK,IAAI;gBAC3B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;oBACnC,CAAC,CAAE,aAAa,CAAC,MAAuB;oBACxC,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;YAChC,MAAM,cAAc,GAClB,OAAO,aAAa,CAAC,KAAK,KAAK,QAAQ;gBACrC,CAAC,CAAE,aAAa,CAAC,KAAyB;gBAC1C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAEvB,yEAAyE;YACzE,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBACjC,IAAI,CAAC,wBAAwB,CAAC;oBAC5B,UAAU,EAAE,UAAU,CAAC,UAAW;oBAClC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC7C,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC;gBAC5B,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC3C,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,KAAK,MAAM,sBAAsB,IAAI,eAAe,EAAE,CAAC;gBACrD,eAAe;gBAEf,MAAM,iBAAiB,GACrB,sBAAsB,CAAC,iBAAiB,IAAI,KAAK,CAAC;gBAEpD,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;oBAC5D,KAAK,EAAE;wBACL,MAAM,EAAE,sBAAsB,CAAC,MAAO;wBACtC,SAAS,EAAE,sBAAsB,CAAC,SAAU;wBAC5C,UAAU,EAAE,sBAAsB,CAAC,UAAW;wBAC9C,iBAAiB,EAAE,CAAC,iBAAiB;qBACtC;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,iBAAiB,EAAE,IAAI;wBACvB,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,IAAI;qBACjB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,IACE,kBAAkB;oBAClB,CAAC,CAAA,MAAA,kBAAkB,CAAC,MAAM,0CAAE,MAAM,KAAI,CAAC,CAAC,GAAG,CAAC,EAC5C,CAAC;oBACD,qFAAqF;oBAErF,MAAM,SAAS,GAAW,kBAAkB,CAAC,iBAAiB;wBAC5D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC;oBAEZ,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,kBAAkB,CAAC,UAAU,WAAW,SAAS,6GAA6G,SAAS,QAAQ,CAC9N,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,KAAK,mCAAQ,QAAQ,CAAC,KAAK,KAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,GAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,eAA2B;QAE3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;gBACpE,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,CAAC,MAAO;oBAC1B,SAAS,EAAE,UAAU,CAAC,SAAU;iBACjC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;iBAChB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACnB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;gBAChD,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;gBACnD,CAAC;gBAED,mBAAmB;gBACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAM,CACd,CAAC;gBACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;;QAEzB,0EAA0E;QAC1E,QAAQ,CAAC,KAAK,GAAG,MAAM,eAAe,CAAC,0BAA0B,CAC/D,KAAK,EACL,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,KAAK,CACf,CAAC;QACF,MAAM,mBAAmB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC7D,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,WAAW,GAAoB,mBAAmB,CAAC,GAAG,CAC1D,CAAC,GAAU,EAAE,EAAE;YACb,OAAO,GAAG,CAAC,EAAG,CAAC;QACjB,CAAC,CACF,CAAC;QACF,MAAM,eAAe,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YACzD,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC5C,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,iBAAiB,EAAE,IAAI;gBACvB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;gBACrB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE;oBACJ,qBAAqB,EAAE,IAAI;iBAC5B;aACF;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,SAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,CAAA,MAAA,UAAU,CAAC,IAAI,0CAAE,qBAAqB,CAAA,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAgB,CACxB,kHAAkH,CACnH,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBACjC,IAAI,CAAC,wBAAwB,CAAC;oBAC5B,UAAU,EAAE,UAAU,CAAC,UAAW;oBAClC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC7C,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,QAAQ,CAAC,KAAK,mCACT,QAAQ,CAAC,KAAK,KACjB,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,GAClC,CAAC;QACF,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAElB,IAAI,WAAW,GAAsB,EAAE,CAAC;QAExC,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;gBAChE,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,CAAC,MAAO;oBAC1B,SAAS,EAAE,UAAU,CAAC,SAAU;iBACjC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;iBAChB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;gBACD,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IACjD,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,oBAAgC;QAEhC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAe,MAAoB,CAAC;YAEpD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YACnD,CAAC;YAED,mBAAmB;YACnB,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,UAAU,CAAC,MAAM,CAClB,CAAC;YACF,MAAM,kBAAkB,CAAC,iCAAiC,CACxD,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,SAAS,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAhfc;IADZ,WAAW,EAAE;;;;4DAuCb;AAGwB;IADxB,WAAW,EAAE;;;;6CAgHb;AAGwB;IADxB,WAAW,EAAE;;6CAGC,KAAK;;8CA+BnB;AAGwB;IADxB,WAAW,EAAE;;;;6CA4Ib;AAGwB;IADxB,WAAW,EAAE;;;;8CA2Cb;AAGwB;IADxB,WAAW,EAAE;;;;6CAyFb;AAGwB;IADxB,WAAW,EAAE;;;;8CA2Bb;AAEH,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/ThreatIntelFeedService.js

@@ -2,7 +2,7 @@ import DatabaseService from "./DatabaseService";
 import Model from "../../Models/DatabaseModels/ThreatIntelFeed";
 import BadDataException from "../../Types/Exception/BadDataException";
 import LIMIT_MAX from "../../Types/Database/LimitMax";
-import { THREAT_INTEL_MINIMUM_CONFIDENCE_MAX, THREAT_INTEL_MINIMUM_CONFIDENCE_MIN, } from "../../Types/SecurityEvent/ThreatIntelConstants";
+import { THREAT_INTEL_MINIMUM_CONFIDENCE_MAX, THREAT_INTEL_MINIMUM_CONFIDENCE_MIN, THREAT_INTEL_POLL_INTERVAL_MAX_IN_MINUTES, THREAT_INTEL_POLL_INTERVAL_MIN_IN_MINUTES, } from "../../Types/SecurityEvent/ThreatIntelConstants";
 import TaxiiClient from "../Utils/SecurityEvent/ThreatIntel/TaxiiClient";
 export class Service extends DatabaseService {
     constructor() {
@@ -23,9 +23,10 @@ export class Service extends DatabaseService {
         }
         if (data.pollIntervalInMinutes !== undefined) {
             if (!Number.isInteger(data.pollIntervalInMinutes) ||
-                data.pollIntervalInMinutes < 1 ||
-                data.pollIntervalInMinutes > 1440) {
-                throw new BadDataException("Poll interval must be a whole number of minutes between 1 and 1440.");
+                data.pollIntervalInMinutes <
+                    THREAT_INTEL_POLL_INTERVAL_MIN_IN_MINUTES ||
+                data.pollIntervalInMinutes > THREAT_INTEL_POLL_INTERVAL_MAX_IN_MINUTES) {
+                throw new BadDataException(`Poll interval must be a whole number of minutes between ${THREAT_INTEL_POLL_INTERVAL_MIN_IN_MINUTES} and ${THREAT_INTEL_POLL_INTERVAL_MAX_IN_MINUTES}.`);
             }
         }
         if (data.minimumConfidence !== undefined) {

package/build/dist/Server/Services/ThreatIntelFeedService.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThreatIntelFeedService.js","sourceRoot":"","sources":["../../../../Server/Services/ThreatIntelFeedService.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,6CAA6C,CAAC;AAIhE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,SAAS,MAAM,+BAA+B,CAAC;AAEtD,OAAO,EACL,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,gDAAgD,CAAC;AACxD,OAAO,WAAW,MAAM,gDAAgD,CAAC;AAEzE,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,IAKpB;QACC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAC7C,IAAI,CAAC,qBAAqB,GAAG,CAAC;gBAC9B,IAAI,CAAC,qBAAqB,GAAG,IAAI,EACjC,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,qEAAqE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACzC,IAAI,CAAC,iBAAiB,GAAG,mCAAmC;gBAC5D,IAAI,CAAC,iBAAiB,GAAG,mCAAmC,EAC5D,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,mCAAmC,QAAQ,mCAAmC,GAAG,CACvI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;YACxC,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB;YAC1D,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB;SACnD,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAEkB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAgC;YAC1D,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAkC;YAC9D,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,qBAExB;YACb,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAuC;SACzE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QAEnD;;;;;;;;;;WAUG;QACH,MAAM,SAAS,GACb,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;QAE3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;IACnD,CAAC;IAEkB,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,cAA+B;;QAE/B,IACE,CAAA,MAAC,QAAQ,CAAC,YAA+C,0CAAE,SAAS;YACpE,IAAI,EACJ,CAAC;YACD,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;gBAC3C;;;mBAGG;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAyB;wBACjC,aAAa,EAAE,IAAyB;wBACxC,YAAY,EAAE,IAAuB;qBACtC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,6BAA6B,CACzC,QAAyB;QAEzB,MAAM,YAAY,GAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,oBAAoB,GAAY,OAAO,CAC3C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAChC,CAAC;QAEF,IAAI,YAAY,IAAI,oBAAoB,EAAE,CAAC;YACzC,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED;;;;WAIG;QACH,MAAM,kBAAkB,GAAY,YAAY;YAC9C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAC/C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;QAEzC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACnD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,IAAI;gBACd,iBAAiB,EAAE,IAAI;aACxB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,eAAe,GAAY,YAAY;gBAC3C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE3B,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CACxB,YAAY;oBACV,CAAC,CAAC,+KAA+K;oBACjL,CAAC,CAAC,gLAAgL,CACrL,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,eAAe,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"ThreatIntelFeedService.js","sourceRoot":"","sources":["../../../../Server/Services/ThreatIntelFeedService.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,6CAA6C,CAAC;AAIhE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,SAAS,MAAM,+BAA+B,CAAC;AAEtD,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,yCAAyC,EACzC,yCAAyC,GAC1C,MAAM,gDAAgD,CAAC;AACxD,OAAO,WAAW,MAAM,gDAAgD,CAAC;AAEzE,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,IAKpB;QACC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAC7C,IAAI,CAAC,qBAAqB;oBACxB,yCAAyC;gBAC3C,IAAI,CAAC,qBAAqB,GAAG,yCAAyC,EACtE,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,2DAA2D,yCAAyC,QAAQ,yCAAyC,GAAG,CACzJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACzC,IAAI,CAAC,iBAAiB,GAAG,mCAAmC;gBAC5D,IAAI,CAAC,iBAAiB,GAAG,mCAAmC,EAC5D,CAAC;gBACD,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,mCAAmC,QAAQ,mCAAmC,GAAG,CACvI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;YACxC,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB;YAC1D,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB;SACnD,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAEkB,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,YAAY,CAAC;YAChB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAgC;YAC1D,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAkC;YAC9D,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,qBAExB;YACb,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,iBAAuC;SACzE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QAEnD;;;;;;;;;;WAUG;QACH,MAAM,SAAS,GACb,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;QAE3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;IACnD,CAAC;IAEkB,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,cAA+B;;QAE/B,IACE,CAAA,MAAC,QAAQ,CAAC,YAA+C,0CAAE,SAAS;YACpE,IAAI,EACJ,CAAC;YACD,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;gBAC3C;;;mBAGG;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAyB;wBACjC,aAAa,EAAE,IAAyB;wBACxC,YAAY,EAAE,IAAuB;qBACtC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,6BAA6B,CACzC,QAAyB;QAEzB,MAAM,YAAY,GAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,oBAAoB,GAAY,OAAO,CAC3C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAChC,CAAC;QAEF,IAAI,YAAY,IAAI,oBAAoB,EAAE,CAAC;YACzC,MAAM,IAAI,gBAAgB,CACxB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED;;;;WAIG;QACH,MAAM,kBAAkB,GAAY,YAAY;YAC9C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAC/C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;QAEzC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACnD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,IAAI;gBACd,iBAAiB,EAAE,IAAI;aACxB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,eAAe,GAAY,YAAY;gBAC3C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACjC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE3B,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CACxB,YAAY;oBACV,CAAC,CAAC,+KAA+K;oBACjL,CAAC,CAAC,gLAAgL,CACrL,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Types/Database/Permissions/BasePermission.js

@@ -41,14 +41,17 @@ export default class BasePermission {
             query = await TenantPermission.addTenantScopeToQuery(modelType, query, select, props, type);
             // add user scope if any
             query = await UserPermissions.addUserScopeToQuery(modelType, query, props);
-            if (!props.isMultiTenantRequest) {
-                // We will check for this permission in recursive function.
+            /*
+             * Only TenantPermission's per-project recursion returns an array of
+             * queries whose permissions have already been checked. The incoming
+             * query is copied into an ordinary object above, so a caller cannot
+             * supply this array. A multi-tenant request scoped to the current user
+             * (such as pending team invitations) still needs every check below.
+             */
+            if (!Array.isArray(query)) {
                 // check model level permissions.
                 TablePermission.checkTableLevelPermissions(modelType, props, type);
-                /*
-                 * We will check for this permission in recursive function.
-                 * check query permissions.
-                 */
+                // check query permissions.
                 QueryPermission.checkQueryPermission(modelType, query, props);
                 query = await AccessControlPermission.addAccessControlIdsToQuery(modelType, query, select, props, type);
                 /*

package/build/dist/Server/Types/Database/Permissions/BasePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"BasePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/BasePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,SAAS,MAAM,cAAc,CAAC;AAErC,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAChE,OAAO,oBAAoB,MAAM,wBAAwB,CAAC;AAC1D,OAAO,yBAAyB,MAAM,6BAA6B,CAAC;AACpE,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAC/C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,kBAAkB,CAAC;AAK/C,OAAO,eAAe,MAAM,4CAA4C,CAAC;AACzE,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAM/D,MAAM,CAAC,OAAO,OAAO,cAAc;IAEb,AAAb,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAClC,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB;;;;WAIG;QACH,KAAK,qBAAQ,KAAK,CAAE,CAAC;QAErB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,KAAK,GAAG,MAAM,cAAc,CAAC,2BAA2B,CACtD,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC1C,iCAAiC;YACjC,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAE/D,oBAAoB;YACpB,KAAK,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,CAClD,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;YAEF,wBAAwB;YACxB,KAAK,GAAG,MAAM,eAAe,CAAC,mBAAmB,CAC/C,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAChC,2DAA2D;gBAE3D,iCAAiC;gBACjC,eAAe,CAAC,0BAA0B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAEnE;;;mBAGG;gBACH,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAE9D,KAAK,GAAG,MAAM,uBAAuB,CAAC,0BAA0B,CAC9D,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;gBAEF;;;;;;mBAMG;gBACH,KAAK,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CACrD,SAAS,EACT,KAAK,EACL,KAAK,EACL,IAAI,CACL,CAAC;gBAEF,kCAAkC;gBAClC,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBAE3D,IACE,mBAAmB;wBACnB,mBAAmB,CAAC,SAAS;wBAC7B,CAAC,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;4BAClD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,CAAC,EAC3D,CAAC;wBACD,MAAM,gBAAgB,GACpB,uBAAuB,CAAC,2BAA2B,CACjD,mBAAmB,CAAC,SAAS,EAC7B,EAAE,EACF;4BACE,GAAG,EAAE,IAAI;yBACV,EACD,KAAK,EACL,IAAI,CACL,CAAC;wBAEJ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAChC,MAAM,wBAAwB,GAC5B,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;4BAEtC,MAAM,kBAAkB,GAAe;gCACrC,CAAC,wBAAwB,CAAC,sBAAsB,EAAY,CAAC,EAC3D,gBAAgB;6BACnB,CAAC;4BAEF;;;;;;;+BAOG;4BACH,MAAM,sBAAsB,GAAa,KAAa,CACpD,KAAK,CAAC,oBAA8B,CACrC,CAAC;4BAEF,IACE,OAAO,sBAAsB,KAAK,QAAQ;gCAC1C,sBAAsB,YAAY,QAAQ,EAC1C,CAAC;gCACA,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC,mBAClD,GAAG,EAAE,sBAAsB,CAAC,QAAQ,EAAE,IACnC,kBAAkB,CACtB,CAAC;4BACJ,CAAC;iCAAM,IACL,sBAAsB;gCACtB,OAAO,sBAAsB,KAAK,QAAQ;gCAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC;gCACtC,sBAAsB,CAAC,WAAW,KAAK,MAAM,EAC7C,CAAC;gCACA,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC,mCAC9C,sBAAqC,GACtC,kBAAkB,CACtB,CAAC;4BACJ,CAAC;iCAAM,CAAC;gCACL,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC;oCAClD,kBAAkB,CAAC;4BACvB,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,0BAA0B;oBAC1B,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBAEjE;;;;;;;;uBAQG;oBACH,yBAAyB,CAAC,qBAAqB,CAC7C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;oBAEF,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEnD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AArLqB;IADnB,WAAW,EAAE;;;;4CAqLb"}
+{"version":3,"file":"BasePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/BasePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,SAAS,MAAM,cAAc,CAAC;AAErC,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAChE,OAAO,oBAAoB,MAAM,wBAAwB,CAAC;AAC1D,OAAO,yBAAyB,MAAM,6BAA6B,CAAC;AACpE,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAC/C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,kBAAkB,CAAC;AAK/C,OAAO,eAAe,MAAM,4CAA4C,CAAC;AACzE,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAM/D,MAAM,CAAC,OAAO,OAAO,cAAc;IAEb,AAAb,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAClC,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB;;;;WAIG;QACH,KAAK,qBAAQ,KAAK,CAAE,CAAC;QAErB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,KAAK,GAAG,MAAM,cAAc,CAAC,2BAA2B,CACtD,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC1C,iCAAiC;YACjC,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAE/D,oBAAoB;YACpB,KAAK,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,CAClD,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;YAEF,wBAAwB;YACxB,KAAK,GAAG,MAAM,eAAe,CAAC,mBAAmB,CAC/C,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;YAEF;;;;;;eAMG;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,iCAAiC;gBACjC,eAAe,CAAC,0BAA0B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAEnE,2BAA2B;gBAC3B,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAE9D,KAAK,GAAG,MAAM,uBAAuB,CAAC,0BAA0B,CAC9D,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;gBAEF;;;;;;mBAMG;gBACH,KAAK,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CACrD,SAAS,EACT,KAAK,EACL,KAAK,EACL,IAAI,CACL,CAAC;gBAEF,kCAAkC;gBAClC,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBAE3D,IACE,mBAAmB;wBACnB,mBAAmB,CAAC,SAAS;wBAC7B,CAAC,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;4BAClD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,CAAC,EAC3D,CAAC;wBACD,MAAM,gBAAgB,GACpB,uBAAuB,CAAC,2BAA2B,CACjD,mBAAmB,CAAC,SAAS,EAC7B,EAAE,EACF;4BACE,GAAG,EAAE,IAAI;yBACV,EACD,KAAK,EACL,IAAI,CACL,CAAC;wBAEJ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAChC,MAAM,wBAAwB,GAC5B,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;4BAEtC,MAAM,kBAAkB,GAAe;gCACrC,CAAC,wBAAwB,CAAC,sBAAsB,EAAY,CAAC,EAC3D,gBAAgB;6BACnB,CAAC;4BAEF;;;;;;;+BAOG;4BACH,MAAM,sBAAsB,GAAa,KAAa,CACpD,KAAK,CAAC,oBAA8B,CACrC,CAAC;4BAEF,IACE,OAAO,sBAAsB,KAAK,QAAQ;gCAC1C,sBAAsB,YAAY,QAAQ,EAC1C,CAAC;gCACA,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC,mBAClD,GAAG,EAAE,sBAAsB,CAAC,QAAQ,EAAE,IACnC,kBAAkB,CACtB,CAAC;4BACJ,CAAC;iCAAM,IACL,sBAAsB;gCACtB,OAAO,sBAAsB,KAAK,QAAQ;gCAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC;gCACtC,sBAAsB,CAAC,WAAW,KAAK,MAAM,EAC7C,CAAC;gCACA,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC,mCAC9C,sBAAqC,GACtC,kBAAkB,CACtB,CAAC;4BACJ,CAAC;iCAAM,CAAC;gCACL,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC;oCAClD,kBAAkB,CAAC;4BACvB,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,0BAA0B;oBAC1B,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBAEjE;;;;;;;;uBAQG;oBACH,yBAAyB,CAAC,qBAAqB,CAC7C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;oBAEF,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEnD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AAvLqB;IADnB,WAAW,EAAE;;;;4CAuLb"}

package/build/dist/Server/Types/Database/Permissions/Index.js

@@ -12,25 +12,79 @@ import CreatePermission from "./CreatePermission";
 import DeletePermission from "./DeletePermission";
 import ReadPermission from "./ReadPermission";
 import UpdatePermission from "./UpdatePermission";
+import DatabaseCommonInteractionPropsUtil from "../../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
+import NotAuthenticatedException from "../../../../Types/Exception/NotAuthenticatedException";
+import NotAuthorizedException from "../../../../Types/Exception/NotAuthorizedException";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 export default class ModelPermission {
+    /*
+     * A refusal of a caller with no credentials at all is a 401.
+     *
+     * The login check near the top of every permission check passes an
+     * anonymous caller straight through on models that are readable (or
+     * creatable) by Public - Probe, AIAgent, LlmProvider and friends - and the
+     * column, select and query checks that follow then refuse it with 422
+     * NotAuthorizedException. For the dashboard that caller is a signed-in user
+     * whose access-token cookie expired, and only a 401 makes the browser client
+     * refresh the session and replay the request. Callers with credentials keep
+     * the 422 they always got; the message is kept either way.
+     */
+    static toAnonymousRefusal(error, props) {
+        if (error instanceof NotAuthorizedException &&
+            !props.isRoot &&
+            !props.isMasterAdmin &&
+            DatabaseCommonInteractionPropsUtil.isAnonymous(props)) {
+            return new NotAuthenticatedException(error.message);
+        }
+        return error;
+    }
     static async checkDeletePermissionByModel(data) {
-        return DeletePermission.checkDeletePermissionByModel(data);
+        try {
+            return await DeletePermission.checkDeletePermissionByModel(data);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, data.props);
+        }
     }
     static async checkUpdatePermissionByModel(data) {
-        return UpdatePermission.checkUpdatePermissionByModel(data);
+        try {
+            return await UpdatePermission.checkUpdatePermissionByModel(data);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, data.props);
+        }
     }
     static async checkDeleteQueryPermission(modelType, query, props) {
-        return DeletePermission.checkDeletePermission(modelType, query, props);
+        try {
+            return await DeletePermission.checkDeletePermission(modelType, query, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static async checkUpdateQueryPermissions(modelType, query, data, props) {
-        return UpdatePermission.checkUpdatePermissions(modelType, query, data, props);
+        try {
+            return await UpdatePermission.checkUpdatePermissions(modelType, query, data, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static checkCreatePermissions(modelType, data, props) {
-        return CreatePermission.checkCreatePermissions(modelType, data, props);
+        try {
+            return CreatePermission.checkCreatePermissions(modelType, data, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static async checkReadQueryPermission(modelType, query, select, props) {
-        return ReadPermission.checkReadPermission(modelType, query, select, props);
+        try {
+            return await ReadPermission.checkReadPermission(modelType, query, select, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
 }
 __decorate([

package/build/dist/Server/Types/Database/Permissions/Index.js.map

@@ -1 +1 @@
-{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/Index.ts"],"names":[],"mappings":";;;;;;;;;;AAGA,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,cAA2C,MAAM,kBAAkB,CAAC;AAC3E,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAGlD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,eAAe;IAEd,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,OAAO,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,OAAO,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC5C,SAAiC,EACjC,KAAwB,EACxB,KAAqC;QAErC,OAAO,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,OAAO,gBAAgB,CAAC,sBAAsB,CAC5C,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,CACN,CAAC;IACJ,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAC1C,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC;QAErC,OAAO,cAAc,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;CACF;AA/DqB;IADnB,WAAW,EAAE;;;;yDASb;AAGmB;IADnB,WAAW,EAAE;;;;yDASb;AAGmB;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;wDAab;AAGa;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;mDAIjB;AAGmB;IADnB,WAAW,EAAE;;;;qDAQb"}
+{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/Index.ts"],"names":[],"mappings":";;;;;;;;;;AAGA,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,cAA2C,MAAM,kBAAkB,CAAC;AAC3E,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAGlD,OAAO,kCAAkC,MAAM,mEAAmE,CAAC;AACnH,OAAO,yBAAyB,MAAM,uDAAuD,CAAC;AAC9F,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,eAAe;IAClC;;;;;;;;;;;OAWG;IACK,MAAM,CAAC,kBAAkB,CAC/B,KAAc,EACd,KAAqC;QAErC,IACE,KAAK,YAAY,sBAAsB;YACvC,CAAC,KAAK,CAAC,MAAM;YACb,CAAC,KAAK,CAAC,aAAa;YACpB,kCAAkC,CAAC,WAAW,CAAC,KAAK,CAAC,EACrD,CAAC;YACD,OAAO,IAAI,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC5C,SAAiC,EACjC,KAAwB,EACxB,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,qBAAqB,CACjD,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,sBAAsB,CAClD,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAC1C,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,mBAAmB,CAC7C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AAhGqB;IADnB,WAAW,EAAE;;;;yDAab;AAGmB;IADnB,WAAW,EAAE;;;;yDAab;AAGmB;IADnB,WAAW,EAAE;;;;uDAeb;AAGmB;IADnB,WAAW,EAAE;;;;wDAiBb;AAGa;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;mDAQjB;AAGmB;IADnB,WAAW,EAAE;;;;qDAiBb"}

package/build/dist/Server/Types/Database/Permissions/TablePermission.js

@@ -97,19 +97,20 @@ export default class TablePermission {
         // 2nd CHECK: Does user have access to CRUD data on this model.
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Block);
         const modelPermissions = TablePermission.getTablePermission(modelType, type);
-        const intersectingPermissions = PermissionHelper.getIntersectingPermissions(userPermissions.map((userPermission) => {
-            return userPermission.permission;
-        }) || [], modelPermissions);
-        if (intersectingPermissions && intersectingPermissions.length > 0) {
-            for (const permission of intersectingPermissions) {
-                const userPermission = userPermissions.find((userPermission) => {
-                    return userPermission.permission === permission;
-                });
-                if (userPermission &&
-                    (!userPermission.labelIds || userPermission.labelIds.length === 0)) {
-                    throw new NotAuthorizedException(`You are not authorized to ${type} ${new modelType().singularName} because ${userPermission.permission} is in your team's permission block list.`);
-                }
-            }
+        /*
+         * The user gets one block row per TeamPermission across all of their
+         * teams, unmerged and unordered, so the same permission can be blocked
+         * both for some labels and for the whole table. A row without labels
+         * blocks the whole table and must win whichever row comes first:
+         * ReadPermission and AccessControlPermission only enforce the labelled
+         * rows, so an unlabelled row missed here is enforced nowhere.
+         */
+        const tableWideBlock = userPermissions.find((userPermission) => {
+            return (modelPermissions.includes(userPermission.permission) &&
+                (!userPermission.labelIds || userPermission.labelIds.length === 0));
+        });
+        if (tableWideBlock) {
+            throw new NotAuthorizedException(`You are not authorized to ${type} ${new modelType().singularName} because ${tableWideBlock.permission} is in your team's permission block list.`);
         }
     }
 }

package/build/dist/Server/Types/Database/Permissions/TablePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;WAGG;QACH,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,uBAAuB,GAC3B,gBAAgB,CAAC,0BAA0B,CACzC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,gBAAgB,CACjB,CAAC;QAEJ,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,uBAAuB,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAmB,eAAe,CAAC,IAAI,CACzD,CAAC,cAA8B,EAAE,EAAE;oBACjC,OAAO,cAAc,CAAC,UAAU,KAAK,UAAU,CAAC;gBAClD,CAAC,CACgB,CAAC;gBAEpB,IACE,cAAc;oBACd,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAClE,CAAC;oBACD,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AArLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDA0Db;AAgDa;IADb,WAAW,EAAE;;;;4DAiDb"}
+{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;WAGG;QACH,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD;;;;;;;WAOG;QACH,MAAM,cAAc,GAA+B,eAAe,CAAC,IAAI,CACrE,CAAC,cAA8B,EAAE,EAAE;YACjC,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CACnE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAjLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDA0Db;AAgDa;IADb,WAAW,EAAE;;;;4DA6Cb"}

package/build/dist/Server/Utils/AI/AIChatPrivacyFilter.js

@@ -1,3 +1,4 @@
+import DatabaseCommonInteractionPropsUtil from "../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
 import NotAuthorizedException from "../../../Types/Exception/NotAuthorizedException";
 /*
  * AI conversations (and their messages, runs and run events) are personal to
@@ -9,6 +10,12 @@ export function pinQueryToRequestingUser(query, props, userColumnName) {
     if (props.isRoot || props.isMasterAdmin) {
         return query;
     }
+    /*
+     * No credentials at all is an expired session, not someone else's data:
+     * 401 so the client refreshes. The countBy overrides reach this before the
+     * permission layer's own login check does.
+     */
+    DatabaseCommonInteractionPropsUtil.assertCredentialsPresent(props);
     if (!props.userId) {
         throw new NotAuthorizedException("AI conversations are personal and can only be accessed by the user who created them.");
     }

package/build/dist/Server/Utils/AI/AIChatPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AIChatPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIChatPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AAErF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,KAAqC,EACrC,cAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAEA,KAAiC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAElE,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"AIChatPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIChatPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,kCAAkC,MAAM,gEAAgE,CAAC;AAChH,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AAErF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,KAAqC,EACrC,cAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,kCAAkC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAEA,KAAiC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAElE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/AI/AIRunPrivacyFilter.js

@@ -1,3 +1,4 @@
+import DatabaseCommonInteractionPropsUtil from "../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
 import NotAuthorizedException from "../../../Types/Exception/NotAuthorizedException";
 import AIRunType from "../../../Types/AI/AIRunType";
 import Text from "../../../Types/Text";
@@ -51,6 +52,12 @@ export function getAIRunPrivacyRaw(props) {
      * /ai-run nor /code-fix-run grants today. That is a separate product
      * decision and must not ride in as a side effect of this filter.
      */
+    /*
+     * No credentials at all is an expired session, not someone else's data:
+     * 401 so the client refreshes. The countBy overrides reach this before the
+     * permission layer's own login check does.
+     */
+    DatabaseCommonInteractionPropsUtil.assertCredentialsPresent(props);
     if (!props.userId) {
         throw new NotAuthorizedException("AI runs are personal and can only be accessed by the user who created them.");
     }

package/build/dist/Server/Utils/AI/AIRunPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AIRunPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIRunPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,SAAS,MAAM,6BAA6B,CAAC;AACpD,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAqC;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,UAAU,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,IAAI,KAAK,OAAO,UAAU,2BAA2B,SAAS,GAAG,CAAC;IAC3E,CAAC,EACD;QACE,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,OAAO;QAC/B,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KACrC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,KAAqC;IAErC,MAAM,SAAS,GACb,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAuB,CAAC;IACrD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"AIRunPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIRunPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,kCAAkC,MAAM,gEAAgE,CAAC;AAEhH,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,SAAS,MAAM,6BAA6B,CAAC;AACpD,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAqC;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACH;;;;OAIG;IACH,kCAAkC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,UAAU,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,IAAI,KAAK,OAAO,UAAU,2BAA2B,SAAS,GAAG,CAAC;IAC3E,CAAC,EACD;QACE,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,OAAO;QAC/B,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KACrC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,KAAqC;IAErC,MAAM,SAAS,GACb,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAuB,CAAC;IACrD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/MasterAdminPageAccess.js

@@ -0,0 +1,39 @@
+import UserMiddleware from "../Middleware/UserAuthorization";
+import JSONWebToken from "./JsonWebToken";
+import logger from "./Logger";
+import Response from "./Response";
+import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException";
+export const NOT_A_MASTER_ADMIN_MESSAGE = "Unauthorized: Only master admins can access the admin dashboard.";
+/*
+ * Gate for the Admin Dashboard's index page (the HTML shell, not its APIs).
+ *
+ * It refuses only a caller it can positively identify as NOT a master admin.
+ * A missing access token, or one that no longer decodes, is served the shell:
+ * the access-token cookie expires with the JWT inside it, so an admin who
+ * reloads a tab left open past the token lifetime arrives here with no token
+ * at all, and answering that with a 422 JSON page meant the app never loaded
+ * and so never got to refresh the session. The shell holds nothing the public
+ * static bundle does not; once it loads, the SPA sends a signed-out visitor to
+ * the login page, and every admin API it calls refreshes an expired session
+ * (or answers 401) on its own.
+ */
+export const ensureMasterAdminPageAccess = async (data) => {
+    const accessToken = UserMiddleware.getAccessTokenFromExpressRequest(data.req);
+    if (!accessToken) {
+        return {};
+    }
+    let authData;
+    try {
+        authData = JSONWebToken.decode(accessToken);
+    }
+    catch (error) {
+        // Expired or unreadable: let the app load and refresh it.
+        logger.debug(error, { service: data.service });
+        return {};
+    }
+    if (!authData.isMasterAdmin) {
+        Response.sendErrorResponse(data.req, data.res, new NotAuthorizedException(NOT_A_MASTER_ADMIN_MESSAGE));
+    }
+    return {};
+};
+//# sourceMappingURL=MasterAdminPageAccess.js.map

package/build/dist/Server/Utils/MasterAdminPageAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MasterAdminPageAccess.js","sourceRoot":"","sources":["../../../../Server/Utils/MasterAdminPageAccess.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAE7D,OAAO,YAAY,MAAM,gBAAgB,CAAC;AAC1C,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,QAAQ,MAAM,YAAY,CAAC;AAClC,OAAO,sBAAsB,MAAM,8CAA8C,CAAC;AAIlF,MAAM,CAAC,MAAM,0BAA0B,GACrC,kEAAkE,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAIZ,KAAK,EAAE,IAIlC,EAAuB,EAAE;IACxB,MAAM,WAAW,GACf,cAAc,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,QAA0B,CAAC;IAE/B,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0DAA0D;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,CACxB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,GAAG,EACR,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC"}