@oneuptime/common 7.0.2928 → 7.0.2972

package/build/dist/Server/Types/Billing/MeteredPlan/TelemetryMeteredPlan.js

@@ -0,0 +1,91 @@
+import BillingService from "../../../Services/BillingService";
+import ProjectService from "../../../Services/ProjectService";
+import TelemetryUsageBillingService from "../../../Services/TelemetryUsageBillingService";
+import ServerMeteredPlan from "./ServerMeteredPlan";
+import OneUptimeDate from "Common/Types/Date";
+export default class TelemetryMeteredPlan extends ServerMeteredPlan {
+    get productType() {
+        return this._productType;
+    }
+    set productType(v) {
+        this._productType = v;
+    }
+    get unitCostInUSD() {
+        return this._unitCostInUSD;
+    }
+    set unitCostInUSD(v) {
+        this._unitCostInUSD = v;
+    }
+    constructor(data) {
+        super();
+        this._unitCostInUSD = 0;
+        this.productType = data.productType;
+        this.unitCostInUSD = data.unitCostInUSD;
+    }
+    getTotalCostInUSD(data) {
+        return data.dataIngestedInGB * data.retentionInDays * this.unitCostInUSD;
+    }
+    getProductType() {
+        return this.productType;
+    }
+    async reportQuantityToBillingProvider(projectId, options) {
+        // get all unreported logs
+        var _a;
+        const usageBillings = await TelemetryUsageBillingService.getUnreportedUsageBilling({
+            projectId: projectId,
+            productType: this.productType,
+        });
+        if (usageBillings.length === 0) {
+            return;
+        }
+        // calculate all the total usage count and report it to billing provider.
+        let totalCostInUSD = 0;
+        for (const usageBilling of usageBillings) {
+            if (((_a = usageBilling === null || usageBilling === void 0 ? void 0 : usageBilling.totalCostInUSD) === null || _a === void 0 ? void 0 : _a.value) &&
+                (usageBilling === null || usageBilling === void 0 ? void 0 : usageBilling.totalCostInUSD.value) > 0) {
+                totalCostInUSD += usageBilling.totalCostInUSD.value;
+            }
+        }
+        if (totalCostInUSD < 1) {
+            return; // too low to report.
+        }
+        // convert USD to cents.
+        let totalCostInCents = totalCostInUSD * 100;
+        // convert this to integer.
+        totalCostInCents = Math.ceil(totalCostInCents);
+        // update this count in project as well.
+        const project = await ProjectService.findOneById({
+            id: projectId,
+            select: {
+                paymentProviderMeteredSubscriptionId: true,
+                paymentProviderPlanId: true,
+            },
+            props: {
+                isRoot: true,
+            },
+        });
+        if (project &&
+            ((options === null || options === void 0 ? void 0 : options.meteredPlanSubscriptionId) ||
+                project.paymentProviderMeteredSubscriptionId) &&
+            project.paymentProviderPlanId) {
+            await BillingService.addOrUpdateMeteredPricingOnSubscription((options === null || options === void 0 ? void 0 : options.meteredPlanSubscriptionId) ||
+                project.paymentProviderMeteredSubscriptionId, this, totalCostInCents);
+            for (const usageBilling of usageBillings) {
+                if (usageBilling.id) {
+                    // now mark it as reported.
+                    await TelemetryUsageBillingService.updateOneById({
+                        id: usageBilling.id,
+                        data: {
+                            isReportedToBillingProvider: true,
+                            reportedToBillingProviderAt: OneUptimeDate.getCurrentDate(),
+                        },
+                        props: {
+                            isRoot: true,
+                        },
+                    });
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=TelemetryMeteredPlan.js.map

package/build/dist/Server/Types/Billing/MeteredPlan/TelemetryMeteredPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelemetryMeteredPlan.js","sourceRoot":"","sources":["../../../../../../Server/Types/Billing/MeteredPlan/TelemetryMeteredPlan.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,kCAAkC,CAAC;AAC9D,OAAO,cAAc,MAAM,kCAAkC,CAAC;AAC9D,OAAO,4BAA4B,MAAM,gDAAgD,CAAC;AAC1F,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAM9C,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,iBAAiB;IAEjE,IAAW,WAAW;QACpB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IACD,IAAW,WAAW,CAAC,CAAc;QACnC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;IACxB,CAAC;IAGD,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IACD,IAAW,aAAa,CAAC,CAAS;QAChC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,YAAmB,IAGlB;QACC,KAAK,EAAE,CAAC;QAZF,mBAAc,GAAW,CAAC,CAAC;QAajC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1C,CAAC;IAEM,iBAAiB,CAAC,IAGxB;QACC,OAAO,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC;IAC3E,CAAC;IAEe,cAAc;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEe,KAAK,CAAC,+BAA+B,CACnD,SAAmB,EACnB,OAEC;QAED,0BAA0B;;QAE1B,MAAM,aAAa,GACjB,MAAM,4BAA4B,CAAC,yBAAyB,CAAC;YAC3D,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QAEL,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,yEAAyE;QAEzE,IAAI,cAAc,GAAW,CAAC,CAAC;QAE/B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,IACE,CAAA,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,cAAc,0CAAE,KAAK;gBACnC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,cAAc,CAAC,KAAK,IAAG,CAAC,EACtC,CAAC;gBACD,cAAc,IAAI,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC;YACtD,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,qBAAqB;QAC/B,CAAC;QAED,wBAAwB;QAExB,IAAI,gBAAgB,GAAW,cAAc,GAAG,GAAG,CAAC;QAEpD,2BAA2B;QAE3B,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE/C,wCAAwC;QACxC,MAAM,OAAO,GAAmB,MAAM,cAAc,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,MAAM,EAAE;gBACN,oCAAoC,EAAE,IAAI;gBAC1C,qBAAqB,EAAE,IAAI;aAC5B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IACE,OAAO;YACP,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,yBAAyB;gBACjC,OAAO,CAAC,oCAAoC,CAAC;YAC/C,OAAO,CAAC,qBAAqB,EAC7B,CAAC;YACD,MAAM,cAAc,CAAC,uCAAuC,CAC1D,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,yBAAoC;gBAC3C,OAAO,CAAC,oCAA+C,EAC1D,IAAI,EACJ,gBAAgB,CACjB,CAAC;YAEF,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gBACzC,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;oBACpB,2BAA2B;oBAE3B,MAAM,4BAA4B,CAAC,aAAa,CAAC;wBAC/C,EAAE,EAAE,YAAY,CAAC,EAAE;wBACnB,IAAI,EAAE;4BACJ,2BAA2B,EAAE,IAAI;4BACjC,2BAA2B,EAAE,aAAa,CAAC,cAAc,EAAE;yBAC5D;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/build/dist/Server/Types/Database/CountBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CountBy.js.map

package/build/dist/Server/Types/Database/CountBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CountBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/CountBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/CreateBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CreateBy.js.map

package/build/dist/Server/Types/Database/CreateBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/CreateBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/DeleteBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeleteBy.js.map

package/build/dist/Server/Types/Database/DeleteBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/DeleteBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/DeleteById.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeleteById.js.map

package/build/dist/Server/Types/Database/DeleteById.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteById.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/DeleteById.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/DeleteOneBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeleteOneBy.js.map

package/build/dist/Server/Types/Database/DeleteOneBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteOneBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/DeleteOneBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/FindBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FindBy.js.map

package/build/dist/Server/Types/Database/FindBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FindBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/FindBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/FindOneBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FindOneBy.js.map

package/build/dist/Server/Types/Database/FindOneBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FindOneBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/FindOneBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/FindOneByID.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FindOneByID.js.map

package/build/dist/Server/Types/Database/FindOneByID.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FindOneByID.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/FindOneByID.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/GroupBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=GroupBy.js.map

package/build/dist/Server/Types/Database/GroupBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/GroupBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/HardDeleteBy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=HardDeleteBy.js.map

package/build/dist/Server/Types/Database/HardDeleteBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HardDeleteBy.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/HardDeleteBy.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/Hooks.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Hooks.js.map

package/build/dist/Server/Types/Database/Hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Hooks.js","sourceRoot":"","sources":["../../../../../Server/Types/Database/Hooks.ts"],"names":[],"mappings":""}

package/build/dist/Server/Types/Database/Permissions/AccessControlPermission.js

@@ -0,0 +1,186 @@
+import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
+import TablePermission from "./TablePermission";
+import ArrayUtil from "Common/Types/ArrayUtil";
+import DatabaseCommonInteractionPropsUtil, { PermissionType, } from "Common/Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
+import BadDataException from "Common/Types/Exception/BadDataException";
+import NotAuthorizedException from "Common/Types/Exception/NotAuthorizedException";
+import { PermissionHelper, } from "Common/Types/Permission";
+export default class AccessControlPermission {
+    static async checkAccessControlBlockPermissionByModel(data) {
+        const { modelType, props, type } = data;
+        if (props.isRoot || props.isMasterAdmin) {
+            return;
+        }
+        TablePermission.checkTableLevelBlockPermissions(modelType, props, type);
+        const blockPermissionWithLabels = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Block).filter((permission) => {
+            return permission.labelIds && permission.labelIds.length > 0;
+        });
+        if (blockPermissionWithLabels.length === 0) {
+            return;
+        }
+        const modelPermissions = TablePermission.getTablePermission(modelType, type);
+        const blockPermissionsBelongToThisModel = blockPermissionWithLabels.filter((blockPermission) => {
+            let isModelPermission = false;
+            for (const permission of modelPermissions) {
+                if (permission.toString() === blockPermission.permission.toString()) {
+                    isModelPermission = true;
+                    break;
+                }
+            }
+            return isModelPermission;
+        });
+        if (blockPermissionsBelongToThisModel.length === 0) {
+            return;
+        }
+        // now check if the user has any of these labels in the block list, for this we need to fetch the model first.
+        const fetchedModel = await data.fetchModelWithAccessControlIds();
+        if (!fetchedModel) {
+            throw new BadDataException(`${modelType.name} not found.`);
+        }
+        for (const blockPermissionBelongToThisModel of blockPermissionsBelongToThisModel) {
+            const blockPermissionLabelIds = blockPermissionBelongToThisModel.labelIds || [];
+            const blockPermissionLabelIdAsString = blockPermissionLabelIds.map((id) => {
+                return id.toString();
+            });
+            if (blockPermissionLabelIds.length === 0) {
+                continue;
+            }
+            const model = fetchedModel;
+            const modelAccessControlColumnName = model.getAccessControlColumn();
+            if (modelAccessControlColumnName) {
+                const modelAccessControl = model.getColumnValue(modelAccessControlColumnName) || [];
+                for (const accessControl of modelAccessControl) {
+                    if (!accessControl.id) {
+                        continue;
+                    }
+                    if (blockPermissionLabelIdAsString.includes(accessControl.id.toString())) {
+                        throw new NotAuthorizedException(`You are not authorized to ${type.toLowerCase()} this ${model.singularName} because ${blockPermissionBelongToThisModel.permission} is in your team's permission block list.`);
+                    }
+                }
+            }
+        }
+    }
+    static async checkAccessControlPermissionByModel(data) {
+        const { modelType, props, type } = data;
+        if (props.isRoot || props.isMasterAdmin) {
+            return;
+        }
+        // Check if the user has permission to delete or update the object in this table.
+        TablePermission.checkTableLevelPermissions(modelType, props, type);
+        // if the control is here, then the user has table level permissions.
+        const model = new modelType();
+        const modelAccessControlColumnName = model.getAccessControlColumn();
+        if (modelAccessControlColumnName) {
+            const accessControlIdsWhcihUserHasAccessTo = this.getAccessControlIdsForModel(modelType, props, type);
+            if (accessControlIdsWhcihUserHasAccessTo.length === 0) {
+                return; // The user has access to all resources, if no labels are specified.
+            }
+            const fetchedModel = await data.fetchModelWithAccessControlIds();
+            if (!fetchedModel) {
+                throw new BadDataException(`${model.singularName} not found.`);
+            }
+            const accessControlIdsWhichUserHasAccessToAsStrings = accessControlIdsWhcihUserHasAccessTo.map((id) => {
+                return id.toString();
+            }) || [];
+            // Check if the object has any of these access control ids.  if not, then throw an error.
+            const modelAccessControl = fetchedModel.getColumnValue(modelAccessControlColumnName) || [];
+            const modelAccessControlNames = [];
+            for (const accessControl of modelAccessControl) {
+                if (!accessControl.id) {
+                    continue;
+                }
+                if (accessControlIdsWhichUserHasAccessToAsStrings.includes(accessControl.id.toString())) {
+                    return;
+                }
+                const accessControlName = accessControl.getColumnValue("name");
+                if (accessControlName) {
+                    modelAccessControlNames.push(accessControlName);
+                }
+            }
+            let errorString = `You do not have permission to ${type.toLowerCase()} this ${model.singularName}.`;
+            if (modelAccessControlNames.length > 0) {
+                errorString += ` You need to have one of the following labels: ${modelAccessControlNames.join(", ")}.`;
+            }
+            else {
+                errorString = ` You do not have permission to ${type.toLowerCase()} ${model.singularName} without any labels.`;
+            }
+            throw new NotAuthorizedException(errorString);
+        }
+    }
+    static async addAccessControlIdsToQuery(modelType, query, select, props, type) {
+        const model = new modelType();
+        // if the model has access control column, then add the access control labels to the query.
+        if (model.getAccessControlColumn()) {
+            const accessControlIds = this.getAccessControlIdsForQuery(modelType, query, select, props, type);
+            if (accessControlIds.length > 0) {
+                query[model.getAccessControlColumn()] =
+                    accessControlIds;
+            }
+        }
+        return query;
+    }
+    static getAccessControlIdsForModel(modelType, props, type) {
+        let labelIds = [];
+        // check model level permissions.
+        const modelLevelPermissions = TablePermission.getTablePermission(modelType, type);
+        const modelLevelLabelIds = this.getAccessControlIdsByPermissions(modelLevelPermissions, props);
+        labelIds = [...labelIds, ...modelLevelLabelIds];
+        // get distinct labelIds
+        const distinctLabelIds = ArrayUtil.removeDuplicatesFromObjectIDArray(labelIds);
+        return distinctLabelIds;
+    }
+    static getAccessControlIdsForQuery(modelType, query, select, props, type) {
+        const model = new modelType();
+        let labelIds = [];
+        let columnsToCheckPermissionFor = Object.keys(query);
+        if (select) {
+            columnsToCheckPermissionFor = [
+                ...columnsToCheckPermissionFor,
+                ...Object.keys(select),
+            ];
+        }
+        labelIds = this.getAccessControlIdsForModel(modelType, props, type);
+        for (const column of columnsToCheckPermissionFor) {
+            const accessControl = model.getColumnAccessControlFor(column);
+            if (!accessControl) {
+                continue;
+            }
+            if (type === DatabaseRequestType.Read && accessControl.read) {
+                const columnReadLabelIds = this.getAccessControlIdsByPermissions(accessControl.read, props);
+                labelIds = [...labelIds, ...columnReadLabelIds];
+            }
+            if (type === DatabaseRequestType.Create && accessControl.create) {
+                const columnCreateLabelIds = this.getAccessControlIdsByPermissions(accessControl.create, props);
+                labelIds = [...labelIds, ...columnCreateLabelIds];
+            }
+            if (type === DatabaseRequestType.Update && accessControl.update) {
+                const columnUpdateLabelIds = this.getAccessControlIdsByPermissions(accessControl.update, props);
+                labelIds = [...labelIds, ...columnUpdateLabelIds];
+            }
+        }
+        // get distinct labelIds
+        const distinctLabelIds = ArrayUtil.removeDuplicatesFromObjectIDArray(labelIds);
+        return distinctLabelIds;
+    }
+    static getAccessControlIdsByPermissions(permissions, props) {
+        const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow);
+        const nonAccessControlPermissionPermission = PermissionHelper.getNonAccessControlPermissions(userPermissions);
+        const accessControlPermissions = PermissionHelper.getAccessControlPermissions(userPermissions);
+        let labelIds = [];
+        if (PermissionHelper.doesPermissionsIntersect(permissions, nonAccessControlPermissionPermission)) {
+            return []; // if this is intersecting, then return empty array. We dont need to check for access control.
+        }
+        for (const permission of permissions) {
+            for (const accessControlPermission of accessControlPermissions) {
+                if (accessControlPermission.permission === permission &&
+                    accessControlPermission.labelIds.length > 0) {
+                    labelIds = [...labelIds, ...accessControlPermission.labelIds];
+                }
+            }
+        }
+        // remove duplicates
+        labelIds = ArrayUtil.removeDuplicatesFromObjectIDArray(labelIds);
+        return labelIds;
+    }
+}
+//# sourceMappingURL=AccessControlPermission.js.map

package/build/dist/Server/Types/Database/Permissions/AccessControlPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessControlPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/AccessControlPermission.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAGzE,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAKhD,OAAO,SAAS,MAAM,wBAAwB,CAAC;AAG/C,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,8DAA8D,CAAC;AACtE,OAAO,gBAAgB,MAAM,yCAAyC,CAAC;AACvE,OAAO,sBAAsB,MAAM,+CAA+C,CAAC;AAEnF,OAAmB,EACjB,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,OAAO,OAAO,uBAAuB;IACnC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAE1D,IAKD;QACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAExC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,eAAe,CAAC,+BAA+B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAExE,MAAM,yBAAyB,GAC7B,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC,MAAM,CAAC,CAAC,UAA0B,EAAE,EAAE;YACtC,OAAO,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEL,IAAI,yBAAyB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,iCAAiC,GACrC,yBAAyB,CAAC,MAAM,CAAC,CAAC,eAA+B,EAAE,EAAE;YACnE,IAAI,iBAAiB,GAAY,KAAK,CAAC;YAEvC,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;gBAC1C,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACpE,iBAAiB,GAAG,IAAI,CAAC;oBACzB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,OAAO,iBAAiB,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEL,IAAI,iCAAiC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,8GAA8G;QAC9G,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;QAE9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CAAC,GAAG,SAAS,CAAC,IAAI,aAAa,CAAC,CAAC;QAC7D,CAAC;QAED,KAAK,MAAM,gCAAgC,IAAI,iCAAiC,EAAE,CAAC;YACjF,MAAM,uBAAuB,GAC3B,gCAAgC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAElD,MAAM,8BAA8B,GAClC,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAY,EAAE,EAAE;gBAC3C,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC,CAAC,CAAC;YAEL,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAe,YAAY,CAAC;YAEvC,MAAM,4BAA4B,GAChC,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAEjC,IAAI,4BAA4B,EAAE,CAAC;gBACjC,MAAM,kBAAkB,GACrB,KAAK,CAAC,cAAc,CACnB,4BAA4B,CACC,IAAI,EAAE,CAAC;gBAExC,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;oBAC/C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;wBACtB,SAAS;oBACX,CAAC;oBAED,IACE,8BAA8B,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EACpE,CAAC;wBACD,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,CAAC,WAAW,EAAE,SAC7C,KAAK,CAAC,YACR,YACE,gCAAgC,CAAC,UACnC,2CAA2C,CAC5C,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAErD,IAKD;QACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAExC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,iFAAiF;QACjF,eAAe,CAAC,0BAA0B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE,qEAAqE;QACrE,MAAM,KAAK,GAAe,IAAI,SAAS,EAAE,CAAC;QAC1C,MAAM,4BAA4B,GAChC,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAEjC,IAAI,4BAA4B,EAAE,CAAC;YACjC,MAAM,oCAAoC,GACxC,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAE3D,IAAI,oCAAoC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,oEAAoE;YAC9E,CAAC;YAED,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;YAE9C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,CAAC,YAAY,aAAa,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,6CAA6C,GACjD,oCAAoC,CAAC,GAAG,CAAC,CAAC,EAAY,EAAE,EAAE;gBACxD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC,CAAC,IAAI,EAAE,CAAC;YAEX,yFAAyF;YACzF,MAAM,kBAAkB,GACrB,YAAY,CAAC,cAAc,CAC1B,4BAA4B,CACC,IAAI,EAAE,CAAC;YAExC,MAAM,uBAAuB,GAAkB,EAAE,CAAC;YAElD,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;gBAC/C,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBAED,IACE,6CAA6C,CAAC,QAAQ,CACpD,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,CAC5B,EACD,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,MAAM,iBAAiB,GAAW,aAAa,CAAC,cAAc,CAC5D,MAAM,CACG,CAAC;gBAEZ,IAAI,iBAAiB,EAAE,CAAC;oBACtB,uBAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YAED,IAAI,WAAW,GAAW,iCAAiC,IAAI,CAAC,WAAW,EAAE,SAC3E,KAAK,CAAC,YACR,GAAG,CAAC;YAEJ,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,WAAW,IAAI,kDAAkD,uBAAuB,CAAC,IAAI,CAC3F,IAAI,CACL,GAAG,CAAC;YACP,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,kCAAkC,IAAI,CAAC,WAAW,EAAE,IAChE,KAAK,CAAC,YACR,sBAAsB,CAAC;YACzB,CAAC;YAED,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC5C,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,2FAA2F;QAC3F,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACnC,MAAM,gBAAgB,GACpB,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAE1E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAa,CAAC,KAAK,CAAC,sBAAsB,EAAY,CAAC;oBACtD,gBAAgB,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,MAAM,CAAC,2BAA2B,CACvC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,IAAI,QAAQ,GAAoB,EAAE,CAAC;QAEnC,iCAAiC;QAEjC,MAAM,qBAAqB,GACzB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,kBAAkB,GACtB,IAAI,CAAC,gCAAgC,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAEtE,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,kBAAkB,CAAC,CAAC;QAEhD,wBAAwB;QACxB,MAAM,gBAAgB,GACpB,SAAS,CAAC,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAExD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEM,MAAM,CAAC,2BAA2B,CACvC,SAAgC,EAChC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,QAAQ,GAAoB,EAAE,CAAC;QAEnC,IAAI,2BAA2B,GAAkB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpE,IAAI,MAAM,EAAE,CAAC;YACX,2BAA2B,GAAG;gBAC5B,GAAG,2BAA2B;gBAC9B,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACvB,CAAC;QACJ,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEpE,KAAK,MAAM,MAAM,IAAI,2BAA2B,EAAE,CAAC;YACjD,MAAM,aAAa,GACjB,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;YAE1C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC5D,MAAM,kBAAkB,GACtB,IAAI,CAAC,gCAAgC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAEnE,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,kBAAkB,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;gBAChE,MAAM,oBAAoB,GACxB,IAAI,CAAC,gCAAgC,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAErE,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,oBAAoB,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;gBAChE,MAAM,oBAAoB,GACxB,IAAI,CAAC,gCAAgC,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAErE,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,oBAAoB,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,gBAAgB,GACpB,SAAS,CAAC,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAC,gCAAgC,CAC7C,WAA8B,EAC9B,KAAqC;QAErC,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,oCAAoC,GACxC,gBAAgB,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAC;QAEnE,MAAM,wBAAwB,GAC5B,gBAAgB,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC;QAEhE,IAAI,QAAQ,GAAoB,EAAE,CAAC;QAEnC,IACE,gBAAgB,CAAC,wBAAwB,CACvC,WAAW,EACX,oCAAoC,CACrC,EACD,CAAC;YACD,OAAO,EAAE,CAAC,CAAC,8FAA8F;QAC3G,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;gBAC/D,IACE,uBAAuB,CAAC,UAAU,KAAK,UAAU;oBACjD,uBAAuB,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC3C,CAAC;oBACD,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,QAAQ,GAAG,SAAS,CAAC,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/build/dist/Server/Types/Database/Permissions/BasePermission.js

@@ -0,0 +1,61 @@
+import QueryUtil from "../QueryUtil";
+import AccessControlPermission from "./AccessControlPermission";
+import PermissionUtil from "./PermissionsUtil";
+import PublicPermission from "./PublicPermission";
+import QueryPermission from "./QueryPermission";
+import SelectPermission from "./SelectPermission";
+import TablePermission from "./TablePermission";
+import TenantPermission from "./TenantPermission";
+import UserPermissions from "./UserPermission";
+import TableColumnType from "Common/Types/Database/TableColumnType";
+export default class BasePermission {
+    static async checkPermissions(modelType, query, select, props, type) {
+        const model = new modelType();
+        if (props.isRoot || props.isMasterAdmin) {
+            query = await PermissionUtil.addTenantScopeToQueryAsRoot(modelType, query, props);
+        }
+        if (!props.isRoot && !props.isMasterAdmin) {
+            //check if the user is logged in.
+            PublicPermission.checkIfUserIsLoggedIn(modelType, props, type);
+            // add tenant scope.
+            query = await TenantPermission.addTenantScopeToQuery(modelType, query, select, props, type);
+            // add user scope if any
+            query = await UserPermissions.addUserScopeToQuery(modelType, query, props);
+            if (!props.isMultiTenantRequest) {
+                // We will check for this permission in recursive function.
+                // check model level permissions.
+                TablePermission.checkTableLevelPermissions(modelType, props, type);
+                // We will check for this permission in recursive function.
+                // check query permissions.
+                QueryPermission.checkQueryPermission(modelType, query, props);
+                query = await AccessControlPermission.addAccessControlIdsToQuery(modelType, query, select, props, type);
+                /// Implement Related Permissions.
+                if (model.canAccessIfCanReadOn) {
+                    const tableColumnMetadata = model.getTableColumnMetadata(model.canAccessIfCanReadOn);
+                    if (tableColumnMetadata &&
+                        tableColumnMetadata.modelType &&
+                        (tableColumnMetadata.type === TableColumnType.Entity ||
+                            tableColumnMetadata.type === TableColumnType.EntityArray)) {
+                        const accessControlIds = AccessControlPermission.getAccessControlIdsForQuery(tableColumnMetadata.modelType, {}, {
+                            _id: true,
+                        }, props, type);
+                        if (accessControlIds.length > 0) {
+                            const tableColumnMetadataModel = new tableColumnMetadata.modelType();
+                            query[model.canAccessIfCanReadOn] = {
+                                [tableColumnMetadataModel.getAccessControlColumn()]: accessControlIds,
+                            };
+                        }
+                    }
+                }
+                if (select) {
+                    // check query permission.
+                    SelectPermission.checkSelectPermission(modelType, select, props);
+                    QueryPermission.checkRelationQueryPermission(modelType, select, props);
+                }
+            }
+        }
+        query = QueryUtil.serializeQuery(modelType, query);
+        return { query };
+    }
+}
+//# sourceMappingURL=BasePermission.js.map

package/build/dist/Server/Types/Database/Permissions/BasePermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BasePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/BasePermission.ts"],"names":[],"mappings":"AAEA,OAAO,SAAS,MAAM,cAAc,CAAC;AAErC,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAChE,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAC/C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,eAAe,MAAM,kBAAkB,CAAC;AAI/C,OAAO,eAAe,MAAM,uCAAuC,CAAC;AAOpE,MAAM,CAAC,OAAO,OAAO,cAAc;IAC1B,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAClC,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC,EACrC,IAAyB;QAEzB,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,KAAK,GAAG,MAAM,cAAc,CAAC,2BAA2B,CACtD,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC1C,iCAAiC;YACjC,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAE/D,oBAAoB;YACpB,KAAK,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,CAClD,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;YAEF,wBAAwB;YACxB,KAAK,GAAG,MAAM,eAAe,CAAC,mBAAmB,CAC/C,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAChC,2DAA2D;gBAE3D,iCAAiC;gBACjC,eAAe,CAAC,0BAA0B,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBAEnE,2DAA2D;gBAC3D,2BAA2B;gBAC3B,eAAe,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAE9D,KAAK,GAAG,MAAM,uBAAuB,CAAC,0BAA0B,CAC9D,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,CACL,CAAC;gBAEF,kCAAkC;gBAClC,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBAE3D,IACE,mBAAmB;wBACnB,mBAAmB,CAAC,SAAS;wBAC7B,CAAC,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;4BAClD,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,WAAW,CAAC,EAC3D,CAAC;wBACD,MAAM,gBAAgB,GACpB,uBAAuB,CAAC,2BAA2B,CACjD,mBAAmB,CAAC,SAAS,EAC7B,EAAE,EACF;4BACE,GAAG,EAAE,IAAI;yBACV,EACD,KAAK,EACL,IAAI,CACL,CAAC;wBAEJ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAChC,MAAM,wBAAwB,GAC5B,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;4BAErC,KAAa,CAAC,KAAK,CAAC,oBAA8B,CAAC,GAAG;gCACrD,CAAC,wBAAwB,CAAC,sBAAsB,EAAY,CAAC,EAC3D,gBAAgB;6BACnB,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,0BAA0B;oBAC1B,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBACjE,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,MAAM,EACN,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEnD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF"}

package/build/dist/Server/Types/Database/Permissions/BillingPermission.js

@@ -0,0 +1,45 @@
+import { IsBillingEnabled, getAllEnvVars, } from "../../../../Server/EnvironmentConfig";
+import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
+import SubscriptionPlan from "Common/Types/Billing/SubscriptionPlan";
+import PaymentRequiredException from "Common/Types/Exception/PaymentRequiredException";
+export default class BillingPermissions {
+    static checkBillingPermissions(modelType, props, type) {
+        /// Check billing permissions.
+        if (IsBillingEnabled && props.currentPlan) {
+            const model = new modelType();
+            if (props.isSubscriptionUnpaid &&
+                !model.allowAccessIfSubscriptionIsUnpaid) {
+                throw new PaymentRequiredException("Your current subscription is in an unpaid state. Looks like your payment method failed. Please add a new payment method in Project Settings > Invoices to pay unpaid invoices.");
+            }
+            if (type === DatabaseRequestType.Create && model.createBillingPlan) {
+                if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(model.createBillingPlan, props.currentPlan, getAllEnvVars())) {
+                    throw new PaymentRequiredException("Please upgrade your plan to " +
+                        model.createBillingPlan +
+                        " to access this feature");
+                }
+            }
+            if (type === DatabaseRequestType.Update && model.updateBillingPlan) {
+                if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(model.updateBillingPlan, props.currentPlan, getAllEnvVars())) {
+                    throw new PaymentRequiredException("Please upgrade your plan to " +
+                        model.createBillingPlan +
+                        " to access this feature");
+                }
+            }
+            if (type === DatabaseRequestType.Delete && model.deleteBillingPlan) {
+                if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(model.deleteBillingPlan, props.currentPlan, getAllEnvVars())) {
+                    throw new PaymentRequiredException("Please upgrade your plan to " +
+                        model.createBillingPlan +
+                        " to access this feature");
+                }
+            }
+            if (type === DatabaseRequestType.Read && model.readBillingPlan) {
+                if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(model.readBillingPlan, props.currentPlan, getAllEnvVars())) {
+                    throw new PaymentRequiredException("Please upgrade your plan to " +
+                        model.createBillingPlan +
+                        " to access this feature");
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=BillingPermission.js.map

package/build/dist/Server/Types/Database/Permissions/BillingPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BillingPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/BillingPermission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,aAAa,GACd,MAAM,sCAAsC,CAAC;AAC9C,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAKzE,OAAO,gBAAgB,MAAM,uCAAuC,CAAC;AACrE,OAAO,wBAAwB,MAAM,iDAAiD,CAAC;AAEvF,MAAM,CAAC,OAAO,OAAO,kBAAkB;IAC9B,MAAM,CAAC,uBAAuB,CACnC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,8BAA8B;QAE9B,IAAI,gBAAgB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;YAEzC,IACE,KAAK,CAAC,oBAAoB;gBAC1B,CAAC,KAAK,CAAC,iCAAiC,EACxC,CAAC;gBACD,MAAM,IAAI,wBAAwB,CAChC,gLAAgL,CACjL,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACnE,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;oBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;wBAC5B,KAAK,CAAC,iBAAiB;wBACvB,yBAAyB,CAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACnE,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;oBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;wBAC5B,KAAK,CAAC,iBAAiB;wBACvB,yBAAyB,CAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACnE,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;oBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;wBAC5B,KAAK,CAAC,iBAAiB;wBACvB,yBAAyB,CAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC/D,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;oBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;wBAC5B,KAAK,CAAC,iBAAiB;wBACvB,yBAAyB,CAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/build/dist/Server/Types/Database/Permissions/ColumnPermission.js

@@ -0,0 +1,113 @@
+import { IsBillingEnabled, getAllEnvVars, } from "../../../../Server/EnvironmentConfig";
+import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
+import DatabaseCommonInteractionPropsUtil, { PermissionType, } from "Common/Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
+import SubscriptionPlan from "Common/Types/Billing/SubscriptionPlan";
+import Columns from "Common/Types/Database/Columns";
+import TableColumnType from "Common/Types/Database/TableColumnType";
+import BadDataException from "Common/Types/Exception/BadDataException";
+import PaymentRequiredException from "Common/Types/Exception/PaymentRequiredException";
+import { PermissionHelper, } from "Common/Types/Permission";
+export default class ColumnPermissions {
+    static getExcludedColumnNames() {
+        const returnArr = [
+            "_id",
+            "createdAt",
+            "deletedAt",
+            "updatedAt",
+            "version",
+        ];
+        return returnArr;
+    }
+    static getModelColumnsByPermissions(modelType, userPermissions, requestType) {
+        var _a, _b, _c;
+        const model = new modelType();
+        const accessControl = model.getColumnAccessControlForAllColumns();
+        const columns = [];
+        const permissions = userPermissions.map((item) => {
+            return item.permission;
+        });
+        for (const key in accessControl) {
+            let columnPermissions = [];
+            if (requestType === DatabaseRequestType.Read) {
+                columnPermissions = ((_a = accessControl[key]) === null || _a === void 0 ? void 0 : _a.read) || [];
+            }
+            if (requestType === DatabaseRequestType.Create) {
+                columnPermissions = ((_b = accessControl[key]) === null || _b === void 0 ? void 0 : _b.create) || [];
+            }
+            if (requestType === DatabaseRequestType.Update) {
+                columnPermissions = ((_c = accessControl[key]) === null || _c === void 0 ? void 0 : _c.update) || [];
+            }
+            if (requestType === DatabaseRequestType.Delete) {
+                throw new BadDataException("Invalid request type delete");
+            }
+            if (columnPermissions &&
+                PermissionHelper.doesPermissionsIntersect(permissions, columnPermissions)) {
+                columns.push(key);
+            }
+        }
+        return new Columns(columns);
+    }
+    static checkDataColumnPermissions(modelType, data, props, requestType) {
+        const model = new modelType();
+        const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow);
+        const permissionColumns = this.getModelColumnsByPermissions(modelType, userPermissions, requestType);
+        const excludedColumnNames = this.getExcludedColumnNames();
+        const tableColumns = model.getTableColumns().columns;
+        for (const key of Object.keys(data)) {
+            if (data[key] === undefined) {
+                continue;
+            }
+            if (excludedColumnNames.includes(key)) {
+                continue;
+            }
+            if (!tableColumns.includes(key)) {
+                continue;
+            }
+            const tableColumnMetadata = model.getTableColumnMetadata(key);
+            if (!tableColumnMetadata) {
+                throw new BadDataException(`No TableColumnMetadata found for ${key} column of ${model.singularName}`);
+            }
+            if (tableColumnMetadata.type === TableColumnType.Slug) {
+                continue;
+            }
+            if (!permissionColumns.columns.includes(key) &&
+                tableColumns.includes(key)) {
+                if (requestType === DatabaseRequestType.Create &&
+                    tableColumnMetadata.forceGetDefaultValueOnCreate) {
+                    continue; // this is a special case where we want to force the default value on create.
+                }
+                throw new BadDataException(`User is not allowed to ${requestType} on ${key} column of ${model.singularName}`);
+            }
+            if (IsBillingEnabled &&
+                props.currentPlan &&
+                model.getColumnBillingAccessControl(key)) {
+                const billingAccessControl = model.getColumnBillingAccessControl(key);
+                if (requestType === DatabaseRequestType.Create &&
+                    billingAccessControl.create) {
+                    if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(billingAccessControl.create, props.currentPlan, getAllEnvVars())) {
+                        throw new PaymentRequiredException("Please upgrade your plan to " +
+                            billingAccessControl.create +
+                            " to access this feature");
+                    }
+                }
+                if (requestType === DatabaseRequestType.Read &&
+                    billingAccessControl.read) {
+                    if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(billingAccessControl.read, props.currentPlan, getAllEnvVars())) {
+                        throw new PaymentRequiredException("Please upgrade your plan to " +
+                            billingAccessControl.read +
+                            " to access this feature");
+                    }
+                }
+                if (requestType === DatabaseRequestType.Update &&
+                    billingAccessControl.update) {
+                    if (!SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(billingAccessControl.update, props.currentPlan, getAllEnvVars())) {
+                        throw new PaymentRequiredException("Please upgrade your plan to " +
+                            billingAccessControl.update +
+                            " to access this feature");
+                    }
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=ColumnPermission.js.map

package/build/dist/Server/Types/Database/Permissions/ColumnPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ColumnPermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/ColumnPermission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,aAAa,GACd,MAAM,sCAAsC,CAAC;AAC9C,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAKzE,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,8DAA8D,CAAC;AACtE,OAAO,gBAAgB,MAAM,uCAAuC,CAAC;AACrE,OAAO,OAAO,MAAM,+BAA+B,CAAC;AAEpD,OAAO,eAAe,MAAM,uCAAuC,CAAC;AAEpE,OAAO,gBAAgB,MAAM,yCAAyC,CAAC;AACvE,OAAO,wBAAwB,MAAM,iDAAiD,CAAC;AACvF,OAAmB,EACjB,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,OAAO,OAAO,iBAAiB;IAC7B,MAAM,CAAC,sBAAsB;QAClC,MAAM,SAAS,GAAkB;YAC/B,KAAK;YACL,WAAW;YACX,WAAW;YACX,WAAW;YACX,SAAS;SACV,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAEM,MAAM,CAAC,4BAA4B,CACxC,SAAiC,EACjC,eAAsC,EACtC,WAAgC;;QAEhC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,aAAa,GACjB,KAAK,CAAC,mCAAmC,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,MAAM,WAAW,GAAsB,eAAe,CAAC,GAAG,CACxD,CAAC,IAAoB,EAAE,EAAE;YACvB,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC,CACF,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,iBAAiB,GAAsB,EAAE,CAAC;YAE9C,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;gBAC7C,iBAAiB,GAAG,CAAA,MAAA,aAAa,CAAC,GAAG,CAAC,0CAAE,IAAI,KAAI,EAAE,CAAC;YACrD,CAAC;YAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBAC/C,iBAAiB,GAAG,CAAA,MAAA,aAAa,CAAC,GAAG,CAAC,0CAAE,MAAM,KAAI,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBAC/C,iBAAiB,GAAG,CAAA,MAAA,aAAa,CAAC,GAAG,CAAC,0CAAE,MAAM,KAAI,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;YAC5D,CAAC;YAED,IACE,iBAAiB;gBACjB,gBAAgB,CAAC,wBAAwB,CACvC,WAAW,EACX,iBAAiB,CAClB,EACD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAEM,MAAM,CAAC,0BAA0B,CACtC,SAAiC,EACjC,IAAgB,EAChB,KAAqC,EACrC,WAAgC;QAEhC,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,iBAAiB,GAAY,IAAI,CAAC,4BAA4B,CAClE,SAAS,EACT,eAAe,EACf,WAAW,CACZ,CAAC;QAEF,MAAM,mBAAmB,GAAkB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAEzE,MAAM,YAAY,GAAkB,KAAK,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC;QAEpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAK,IAAY,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,MAAM,mBAAmB,GACvB,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAEpC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,GAAG,cAAc,KAAK,CAAC,YAAY,EAAE,CAC1E,CAAC;YACJ,CAAC;YAED,IAAI,mBAAmB,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IACE,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACxC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC1B,CAAC;gBACD,IACE,WAAW,KAAK,mBAAmB,CAAC,MAAM;oBAC1C,mBAAmB,CAAC,4BAA4B,EAChD,CAAC;oBACD,SAAS,CAAC,6EAA6E;gBACzF,CAAC;gBAED,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,WAAW,OAAO,GAAG,cAAc,KAAK,CAAC,YAAY,EAAE,CAClF,CAAC;YACJ,CAAC;YAED,IACE,gBAAgB;gBAChB,KAAK,CAAC,WAAW;gBACjB,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,EACxC,CAAC;gBACD,MAAM,oBAAoB,GACxB,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;gBAE3C,IACE,WAAW,KAAK,mBAAmB,CAAC,MAAM;oBAC1C,oBAAoB,CAAC,MAAM,EAC3B,CAAC;oBACD,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,oBAAoB,CAAC,MAAM,EAC3B,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;wBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;4BAC5B,oBAAoB,CAAC,MAAM;4BAC3B,yBAAyB,CAC5B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IACE,WAAW,KAAK,mBAAmB,CAAC,IAAI;oBACxC,oBAAoB,CAAC,IAAI,EACzB,CAAC;oBACD,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,oBAAoB,CAAC,IAAI,EACzB,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;wBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;4BAC5B,oBAAoB,CAAC,IAAI;4BACzB,yBAAyB,CAC5B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IACE,WAAW,KAAK,mBAAmB,CAAC,MAAM;oBAC1C,oBAAoB,CAAC,MAAM,EAC3B,CAAC;oBACD,IACE,CAAC,gBAAgB,CAAC,gCAAgC,CAChD,oBAAoB,CAAC,MAAM,EAC3B,KAAK,CAAC,WAAW,EACjB,aAAa,EAAE,CAChB,EACD,CAAC;wBACD,MAAM,IAAI,wBAAwB,CAChC,8BAA8B;4BAC5B,oBAAoB,CAAC,MAAM;4BAC3B,yBAAyB,CAC5B,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}