@opengis/admin 0.3.23 → 0.3.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +97 -97
- package/config.js +4 -4
- package/dist/{add-page-2cPkdIAC.js → add-page-BI4K8Lzk.js} +1 -1
- package/dist/{admin-interface-D9Dx7QqK.js → admin-interface-DDP6KpGO.js} +226 -226
- package/dist/{admin-view-C_Ecdip-.js → admin-view-C--DkpIG.js} +3 -3
- package/dist/admin.js +1 -1
- package/dist/admin.umd.cjs +48 -48
- package/dist/assets/logo.svg +41 -41
- package/dist/{card-view-MuS2Gqq6.js → card-view-CPwz8aJg.js} +1 -1
- package/dist/{edit-page-Dr397YuE.js → edit-page-BsDJ8lKP.js} +1 -1
- package/dist/{import-file-CcRnsq1s.js → import-file-B8gDejaq.js} +5459 -5452
- package/dist/{profile-page-BrKTAsqO.js → profile-page-C5UftUwo.js} +1 -1
- package/dist/style.css +1 -1
- package/module/settings/card/admin.accounts.table/index.yml +7 -7
- package/module/settings/card/admin.accounts.table/rules.hbs +18 -18
- package/module/settings/card/admin.accounts.table/users.hbs +13 -13
- package/module/settings/card/admin.roles.table/access.hbs +11 -11
- package/module/settings/card/admin.roles.table/general_info.hbs +9 -9
- package/module/settings/card/admin.roles.table/index.yml +22 -22
- package/module/settings/card/admin.roles.table/users.hbs +12 -12
- package/module/settings/card/admin.routes.table/general_info.hbs +13 -13
- package/module/settings/card/admin.routes.table/groups.hbs +11 -11
- package/module/settings/card/admin.routes.table/index.yml +15 -15
- package/module/settings/card/admin.routes.table/users.hbs +16 -16
- package/module/settings/card/admin.table_properties.table/custom_columns.hbs +22 -22
- package/module/settings/card/admin.table_properties.table/index.yml +12 -12
- package/module/settings/card/admin.table_properties.table/info.hbs +17 -17
- package/module/settings/card/admin.users.table/general_info.hbs +18 -18
- package/module/settings/card/admin.users.table/index.yml +20 -20
- package/module/settings/card/admin.users.table/last_login.hbs +17 -17
- package/module/settings/card/admin.users.table/logs.hbs +16 -16
- package/module/settings/card/admin.users.table/routes.hbs +13 -13
- package/module/settings/card/admin.users.table/user_roles.hbs +35 -35
- package/module/settings/cls/change_type.json +13 -13
- package/module/settings/cls/core.actions.json +17 -17
- package/module/settings/cls/core.column_type.json +14 -14
- package/module/settings/cls/core.scope.json +13 -13
- package/module/settings/cls/properties.site_status.json +13 -13
- package/module/settings/cls/properties.widget_status.json +13 -13
- package/module/settings/cls/users.user_type.json +13 -13
- package/module/settings/cls/yes_no.json +11 -11
- package/module/settings/form/admin.accounts.form.json +13 -13
- package/module/settings/form/admin.custom_column.form.json +55 -55
- package/module/settings/form/admin.properties.form.json +15 -15
- package/module/settings/form/admin.roles.form.json +21 -21
- package/module/settings/form/admin.routes.form.json +25 -25
- package/module/settings/form/admin.rules.form.json +30 -30
- package/module/settings/form/admin.table_properties.form.json +19 -19
- package/module/settings/form/admin.user_properties.form.json +15 -15
- package/module/settings/form/admin.user_roles.form.json +24 -24
- package/module/settings/form/admin.user_roles_card.form.json +13 -13
- package/module/settings/form/admin.users.form.json +177 -177
- package/module/settings/form/admin.users_edit.form.json +145 -145
- package/module/settings/form/context.account_grants.form.json +24 -24
- package/module/settings/form/context.account_users.form.json +12 -12
- package/module/settings/form/user.user_roles.form.json +13 -13
- package/module/settings/interface/admin.properties.json +4 -4
- package/module/settings/interface/admin.roles.json +4 -4
- package/module/settings/interface/admin.routes.json +4 -4
- package/module/settings/interface/admin.users.json +4 -4
- package/module/settings/menu.json +72 -72
- package/module/settings/select/core.routes.sql +1 -1
- package/module/settings/select/core.user_mentioned.sql +1 -1
- package/module/settings/select/core.user_uid.sql +1 -1
- package/module/settings/table/admin.accounts.table.json +49 -49
- package/module/settings/table/admin.custom_column.table.json +100 -100
- package/module/settings/table/admin.properties.table.json +39 -39
- package/module/settings/table/admin.roles.table.json +77 -77
- package/module/settings/table/admin.routes.table.json +73 -73
- package/module/settings/table/admin.rules.table.json +77 -77
- package/module/settings/table/admin.table_properties.table.json +37 -37
- package/module/settings/table/admin.user_properties.table.json +34 -34
- package/module/settings/table/admin.user_roles.table.json +74 -74
- package/module/settings/table/admin.users.table.json +135 -135
- package/module/settings/table/context.account_grants.table.json +88 -88
- package/module/settings/table/context.account_users.table.json +53 -53
- package/module/settings/table/log.table_changes.table.json +100 -100
- package/package.json +102 -102
- package/plugin.js +30 -30
- package/server/helpers/core/badge.js +16 -16
- package/server/helpers/core/buttonHelper.js +21 -21
- package/server/helpers/core/coalesce.js +7 -7
- package/server/helpers/core/select.js +48 -48
- package/server/helpers/core/token.js +18 -18
- package/server/helpers/index.js +40 -40
- package/server/helpers/list/buttonHelper.js +21 -21
- package/server/helpers/list/descriptionList.js +45 -45
- package/server/helpers/list/tableList.js +82 -82
- package/server/helpers/list/utils/button.js +5 -5
- package/server/helpers/list/utils/buttonDel.js +12 -12
- package/server/helpers/list/utils/buttonEdit.js +14 -14
- package/server/helpers/temp/contentList.js +58 -58
- package/server/helpers/temp/ifCond.js +101 -101
- package/server/helpers/utils/button.js +5 -5
- package/server/helpers/utils/buttonAdd.js +6 -6
- package/server/helpers/utils/buttonDel.js +6 -6
- package/server/helpers/utils/buttonEdit.js +5 -5
- package/server/helpers/utils/mdToHTML.js +17 -17
- package/server/helpers/utils/paddingNumber.js +3 -3
- package/server/plugins/access/funcs/getAdminAccess.js +12 -12
- package/server/plugins/access/index.mjs +6 -6
- package/server/plugins/adminHook.js +81 -81
- package/server/plugins/cron.js +10 -10
- package/server/plugins/docs.js +28 -28
- package/server/plugins/hook.js +276 -276
- package/server/plugins/vite.js +77 -77
- package/server/routes/access/controllers/access.group.js +29 -29
- package/server/routes/access/controllers/access.group.post.js +54 -54
- package/server/routes/access/controllers/access.interface.js +33 -33
- package/server/routes/access/index.mjs +11 -11
- package/server/routes/access/schema.mjs +67 -67
- package/server/routes/calendar/controllers/calendar.data.js +125 -125
- package/server/routes/calendar/index.mjs +7 -7
- package/server/routes/calendar/schema.js +21 -21
- package/server/routes/data/controllers/cardData.js +127 -127
- package/server/routes/data/controllers/cardTabData.js +49 -49
- package/server/routes/data/controllers/funcs/getFilterSQL/index.js +92 -92
- package/server/routes/data/controllers/funcs/getFilterSQL/util/formatValue.js +170 -170
- package/server/routes/data/controllers/funcs/getFilterSQL/util/getCustomQuery.js +13 -13
- package/server/routes/data/controllers/funcs/getFilterSQL/util/getFilterQuery.js +64 -64
- package/server/routes/data/controllers/funcs/getFilterSQL/util/getOptimizedQuery.js +12 -12
- package/server/routes/data/controllers/funcs/getFilterSQL/util/getTableSql.js +34 -34
- package/server/routes/data/controllers/tableData.js +31 -31
- package/server/routes/data/controllers/tableDataId.js +27 -27
- package/server/routes/data/controllers/tableFilter.js +9 -9
- package/server/routes/data/controllers/tableInfo.js +112 -112
- package/server/routes/data/controllers/tokenInfo.js +9 -9
- package/server/routes/data/controllers/utils/assignTokens.js +30 -30
- package/server/routes/data/controllers/utils/conditions.js +20 -20
- package/server/routes/data/controllers/utils/getColumns.js +8 -8
- package/server/routes/data/index.mjs +20 -20
- package/server/routes/data/schema.js +54 -54
- package/server/routes/dblist/controllers/readItems.js +20 -20
- package/server/routes/dblist/controllers/setItem.js +22 -22
- package/server/routes/dblist/index.mjs +18 -18
- package/server/routes/dblist/utils/formatData.js +7 -7
- package/server/routes/menu/controllers/getMenu.js +77 -77
- package/server/routes/menu/controllers/interfaces.js +20 -20
- package/server/routes/menu/index.mjs +7 -7
- package/server/routes/notifications/controllers/readNotifications.js +27 -27
- package/server/routes/notifications/controllers/testEmail.js +35 -35
- package/server/routes/notifications/controllers/userNotifications.js +53 -53
- package/server/routes/notifications/funcs/addNotification.js +21 -21
- package/server/routes/notifications/funcs/sendNotification.js +92 -92
- package/server/routes/notifications/hook/onWidgetSet.js +56 -56
- package/server/routes/notifications/index.mjs +26 -26
- package/server/routes/notifications/schema.js +16 -16
- package/server/routes/print/controllers/cardPrint.js +135 -135
- package/server/routes/print/controllers/printTemplate.add.js +37 -37
- package/server/routes/print/controllers/printTemplate.delete.js +29 -29
- package/server/routes/print/controllers/printTemplate.edit.js +42 -42
- package/server/routes/print/controllers/printTemplate.js +67 -67
- package/server/routes/print/controllers/printTemplateList.js +19 -19
- package/server/routes/print/controllers/printTemplatePreview.js +87 -87
- package/server/routes/print/index.mjs +19 -19
- package/server/routes/properties/controllers/admin.properties.get.js +31 -31
- package/server/routes/properties/controllers/table.properties.get.js +120 -120
- package/server/routes/properties/controllers/table.properties.post.js +115 -115
- package/server/routes/properties/controllers/user.properties.get.js +19 -19
- package/server/routes/properties/controllers/user.properties.post.js +10 -10
- package/server/routes/properties/index.mjs +21 -21
- package/server/routes/properties/schema.js +10 -10
- package/server/routes/properties/utils/dataInsert.js +26 -26
- package/server/routes/properties/utils/getColumnMetaData.js +17 -17
- package/server/routes/properties/utils/refreshData.js +128 -128
- package/server/routes/report/controllers/data.js +76 -76
- package/server/routes/report/controllers/list.js +18 -18
- package/server/routes/report/index.mjs +7 -7
- package/server/routes/report/utils/formatValue.js +179 -179
- package/server/routes/report/utils/getFilterQuery.js +67 -67
- package/server/routes/root.mjs +3 -3
- package/server/routes/templates/controllers/getTemplate.js +44 -44
- package/server/routes/templates/index.mjs +16 -16
- package/server/routes/templates/schema.js +8 -8
- package/server/routes/user/controllers/user.cls.id.js +14 -14
- package/server/routes/user/controllers/user.cls.js +72 -72
- package/server/routes/user/controllers/user.cls.post.js +54 -54
- package/server/routes/user/controllers/user.info.js +17 -17
- package/server/routes/user/schema.js +14 -14
- package/server/routes/util/controllers/code.generator.js +89 -89
- package/server/routes/util/index.mjs +5 -5
- package/server/routes/widget/controllers/widget.del.js +63 -63
- package/server/routes/widget/controllers/widget.get.js +125 -125
- package/server/routes/widget/controllers/widget.set.js +84 -84
- package/server/routes/widget/hook/onWidgetSet.js +12 -12
- package/server/routes/widget/index.mjs +16 -16
- package/server/routes/widget/schema.js +12 -12
- package/server/templates/cls/itree.recrzone_category.json +73 -73
- package/server/templates/cls/test.json +9 -9
- package/server/templates/form/admin.profile.form.json +31 -31
- package/server/templates/form/admin.user_cls.data.form.json +49 -49
- package/server/templates/form/admin.user_group_rel.form.json +21 -21
- package/server/templates/form/cp_building.form.json +32 -32
- package/server/templates/form/form-user-pass.json +10 -10
- package/server/templates/form/form-user_group.json +39 -39
- package/server/templates/form/form-users.json +156 -156
- package/server/templates/form/user_group_access.form.json +22 -22
- package/server/templates/pt/card-print.pt.hbs +245 -245
- package/server/templates/select/account_id.json +2 -2
- package/server/templates/table/gis.dataset.table.json +43 -43
- package/server/templates/table/management.user_group.table.json +112 -112
- package/server/templates/table/management.users.table.json +126 -126
- package/utils.js +26 -26
package/server/plugins/vite.js
CHANGED
@@ -1,77 +1,77 @@
|
|
1
|
-
import fs from 'fs';
|
2
|
-
import path, { dirname } from 'path';
|
3
|
-
import { fileURLToPath } from 'url';
|
4
|
-
|
5
|
-
const dir = dirname(fileURLToPath(import.meta.url));
|
6
|
-
const root = `${dir}/../..`;
|
7
|
-
import { config } from '@opengis/fastify-table/utils.js';
|
8
|
-
|
9
|
-
const isProduction = process.env.NODE_ENV === 'production' || config.production;
|
10
|
-
|
11
|
-
async function plugin(fastify) {
|
12
|
-
// vite server
|
13
|
-
if (!isProduction) {
|
14
|
-
const vite = await import('vite');
|
15
|
-
|
16
|
-
const viteServer = await vite.createServer({
|
17
|
-
server: {
|
18
|
-
middlewareMode: true,
|
19
|
-
},
|
20
|
-
});
|
21
|
-
// hot reload
|
22
|
-
viteServer.watcher.on('all', function (d, t) {
|
23
|
-
if (!t.includes('module')) return;
|
24
|
-
console.log(d, t);
|
25
|
-
viteServer.ws.send({ type: 'full-reload' });
|
26
|
-
});
|
27
|
-
|
28
|
-
// this is middleware for vite's dev servert
|
29
|
-
fastify.addHook('onRequest', async (req, reply) => {
|
30
|
-
const { user } = req.session?.passport || {};
|
31
|
-
|
32
|
-
if (!user && req.url.startsWith('/login')) {
|
33
|
-
return reply.redirect(`/login?redirect=${req.url}`);
|
34
|
-
}
|
35
|
-
|
36
|
-
const next = () => new Promise((resolve) => {
|
37
|
-
viteServer.middlewares(req.raw, reply.raw, () => resolve());
|
38
|
-
});
|
39
|
-
await next();
|
40
|
-
});
|
41
|
-
fastify.get('*', async () => { });
|
42
|
-
return;
|
43
|
-
}
|
44
|
-
|
45
|
-
// From Build
|
46
|
-
fastify.get('*', async (req, reply) => {
|
47
|
-
const { user } = req.session?.passport || {};
|
48
|
-
|
49
|
-
if (!user && req.url.startsWith('/login')) {
|
50
|
-
return reply.redirect(`/login?redirect=${req.url}`);
|
51
|
-
}
|
52
|
-
const stream = fs.createReadStream('dist/index.html');
|
53
|
-
return reply.type('text/html').send(stream);
|
54
|
-
});
|
55
|
-
|
56
|
-
const fileSize = {}
|
57
|
-
async function staticFile(req, reply) {
|
58
|
-
const assetsDir = 'dist';
|
59
|
-
const filePath = path.join(root, assetsDir, req.url);
|
60
|
-
const ext = path.extname(filePath);
|
61
|
-
|
62
|
-
if (!fs.existsSync(filePath)) return { status: 404, message: 'not found' }
|
63
|
-
fileSize[filePath] = fileSize[filePath] || fs.statSync(filePath).size;
|
64
|
-
const mime = {
|
65
|
-
'.js': 'text/javascript', '.css': 'text/css', '.woff2': 'application/font-woff', '.png': 'image/png', '.svg': 'image/svg+xml', '.jpg': 'image/jpg',
|
66
|
-
}[ext];
|
67
|
-
reply.headers({ 'Cache-control': 'max-age=3600, public', 'Content-length': fileSize[filePath], 'Content-Encoding': 'identity' });
|
68
|
-
|
69
|
-
const stream = fs.createReadStream(filePath);
|
70
|
-
return mime ? reply.type(mime).send(stream) : stream;
|
71
|
-
}
|
72
|
-
|
73
|
-
fastify.get('/assets/*', staticFile);
|
74
|
-
fastify.get('/public/*', staticFile);
|
75
|
-
}
|
76
|
-
|
77
|
-
export default plugin;
|
1
|
+
import fs from 'fs';
|
2
|
+
import path, { dirname } from 'path';
|
3
|
+
import { fileURLToPath } from 'url';
|
4
|
+
|
5
|
+
const dir = dirname(fileURLToPath(import.meta.url));
|
6
|
+
const root = `${dir}/../..`;
|
7
|
+
import { config } from '@opengis/fastify-table/utils.js';
|
8
|
+
|
9
|
+
const isProduction = process.env.NODE_ENV === 'production' || config.production;
|
10
|
+
|
11
|
+
async function plugin(fastify) {
|
12
|
+
// vite server
|
13
|
+
if (!isProduction) {
|
14
|
+
const vite = await import('vite');
|
15
|
+
|
16
|
+
const viteServer = await vite.createServer({
|
17
|
+
server: {
|
18
|
+
middlewareMode: true,
|
19
|
+
},
|
20
|
+
});
|
21
|
+
// hot reload
|
22
|
+
viteServer.watcher.on('all', function (d, t) {
|
23
|
+
if (!t.includes('module')) return;
|
24
|
+
console.log(d, t);
|
25
|
+
viteServer.ws.send({ type: 'full-reload' });
|
26
|
+
});
|
27
|
+
|
28
|
+
// this is middleware for vite's dev servert
|
29
|
+
fastify.addHook('onRequest', async (req, reply) => {
|
30
|
+
const { user } = req.session?.passport || {};
|
31
|
+
|
32
|
+
if (!user && req.url.startsWith('/login')) {
|
33
|
+
return reply.redirect(`/login?redirect=${req.url}`);
|
34
|
+
}
|
35
|
+
|
36
|
+
const next = () => new Promise((resolve) => {
|
37
|
+
viteServer.middlewares(req.raw, reply.raw, () => resolve());
|
38
|
+
});
|
39
|
+
await next();
|
40
|
+
});
|
41
|
+
fastify.get('*', async () => { });
|
42
|
+
return;
|
43
|
+
}
|
44
|
+
|
45
|
+
// From Build
|
46
|
+
fastify.get('*', async (req, reply) => {
|
47
|
+
const { user } = req.session?.passport || {};
|
48
|
+
|
49
|
+
if (!user && req.url.startsWith('/login')) {
|
50
|
+
return reply.redirect(`/login?redirect=${req.url}`);
|
51
|
+
}
|
52
|
+
const stream = fs.createReadStream('dist/index.html');
|
53
|
+
return reply.type('text/html').send(stream);
|
54
|
+
});
|
55
|
+
|
56
|
+
const fileSize = {}
|
57
|
+
async function staticFile(req, reply) {
|
58
|
+
const assetsDir = 'dist';
|
59
|
+
const filePath = path.join(root, assetsDir, req.url);
|
60
|
+
const ext = path.extname(filePath);
|
61
|
+
|
62
|
+
if (!fs.existsSync(filePath)) return { status: 404, message: 'not found' }
|
63
|
+
fileSize[filePath] = fileSize[filePath] || fs.statSync(filePath).size;
|
64
|
+
const mime = {
|
65
|
+
'.js': 'text/javascript', '.css': 'text/css', '.woff2': 'application/font-woff', '.png': 'image/png', '.svg': 'image/svg+xml', '.jpg': 'image/jpg',
|
66
|
+
}[ext];
|
67
|
+
reply.headers({ 'Cache-control': 'max-age=3600, public', 'Content-length': fileSize[filePath], 'Content-Encoding': 'identity' });
|
68
|
+
|
69
|
+
const stream = fs.createReadStream(filePath);
|
70
|
+
return mime ? reply.type(mime).send(stream) : stream;
|
71
|
+
}
|
72
|
+
|
73
|
+
fastify.get('/assets/*', staticFile);
|
74
|
+
fastify.get('/public/*', staticFile);
|
75
|
+
}
|
76
|
+
|
77
|
+
export default plugin;
|
@@ -1,30 +1,30 @@
|
|
1
|
-
import { pgClients } from '@opengis/fastify-table/utils.js';
|
2
|
-
|
3
|
-
import { getAdminAccess } from '../../../../utils.js';
|
4
|
-
|
5
|
-
export default async function accessGroup({
|
6
|
-
pg = pgClients.client, params = {}, session = {},
|
7
|
-
}) {
|
8
|
-
const { user = {} } = session?.passport || {};
|
9
|
-
|
10
|
-
if (!params?.id) {
|
11
|
-
return { message: 'not enough params: id', status: 400 };
|
12
|
-
}
|
13
|
-
|
14
|
-
// restrict access - admin only
|
15
|
-
const check = await getAdminAccess({
|
16
|
-
id: params.id, user,
|
17
|
-
});
|
18
|
-
if (check) return check;
|
19
|
-
|
20
|
-
const { rows: routes = [] } = await pg.query(`select a.route_id as path, b.actions from admin.routes a
|
21
|
-
left join admin.role_access b on a.route_id=b.route_id
|
22
|
-
where b.role_id=$1`, [params.id]);
|
23
|
-
|
24
|
-
const { rows: users = [] } = await pg.query(`select user_uid as id, user_name as name, access_granted,
|
25
|
-
b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a
|
26
|
-
left join admin.users b on a.user_uid=b.uid
|
27
|
-
where a.role_id=$1`, [params.id]);
|
28
|
-
|
29
|
-
return { routes, users };
|
1
|
+
import { pgClients } from '@opengis/fastify-table/utils.js';
|
2
|
+
|
3
|
+
import { getAdminAccess } from '../../../../utils.js';
|
4
|
+
|
5
|
+
export default async function accessGroup({
|
6
|
+
pg = pgClients.client, params = {}, session = {},
|
7
|
+
}) {
|
8
|
+
const { user = {} } = session?.passport || {};
|
9
|
+
|
10
|
+
if (!params?.id) {
|
11
|
+
return { message: 'not enough params: id', status: 400 };
|
12
|
+
}
|
13
|
+
|
14
|
+
// restrict access - admin only
|
15
|
+
const check = await getAdminAccess({
|
16
|
+
id: params.id, user,
|
17
|
+
});
|
18
|
+
if (check) return check;
|
19
|
+
|
20
|
+
const { rows: routes = [] } = await pg.query(`select a.route_id as path, b.actions from admin.routes a
|
21
|
+
left join admin.role_access b on a.route_id=b.route_id
|
22
|
+
where b.role_id=$1`, [params.id]);
|
23
|
+
|
24
|
+
const { rows: users = [] } = await pg.query(`select user_uid as id, user_name as name, access_granted,
|
25
|
+
b.cdate as user_created, b.last_activity_date as last_activity from admin.user_roles a
|
26
|
+
left join admin.users b on a.user_uid=b.uid
|
27
|
+
where a.role_id=$1`, [params.id]);
|
28
|
+
|
29
|
+
return { routes, users };
|
30
30
|
}
|
@@ -1,55 +1,55 @@
|
|
1
|
-
import { pgClients } from '@opengis/fastify-table/utils.js';
|
2
|
-
|
3
|
-
import { getAdminAccess } from '../../../../utils.js';
|
4
|
-
import accessGroup from './access.group.js';
|
5
|
-
|
6
|
-
export default async function accessGroupPost({
|
7
|
-
pg = pgClients.client, params = {}, session = {}, body = {},
|
8
|
-
}) {
|
9
|
-
const { id } = params;
|
10
|
-
const { user } = session?.passport || {};
|
11
|
-
if (!user) return { status: 403, message: 'access restricted' }
|
12
|
-
|
13
|
-
// restrict access - admin only
|
14
|
-
const check = await getAdminAccess({ id, user });
|
15
|
-
if (check) return check;
|
16
|
-
|
17
|
-
const { users = [], routes = [] } = body;
|
18
|
-
|
19
|
-
if (!routes?.length) {
|
20
|
-
// return { message: 'not enough params: users / routes', status: 400 };
|
21
|
-
await pg.query(`delete from admin.role_access where role_id=$1`, [id]);
|
22
|
-
|
23
|
-
if (!users?.length) {
|
24
|
-
return { message: { id, routes }, status: 200 };
|
25
|
-
}
|
26
|
-
}
|
27
|
-
|
28
|
-
if (routes?.length) {
|
29
|
-
const { routesDB = [] } = await pg.query('select array_agg(route_id) as "routesDB" from admin.routes where enabled')
|
30
|
-
.then((res1) => res1.rows?.[0] || {});
|
31
|
-
await pg.query(`delete from admin.role_access where role_id=$1;`, [id]);
|
32
|
-
|
33
|
-
|
34
|
-
const q = `insert into admin.role_access(role_id,route_id,actions) values ($1,$2,$3)`;
|
35
|
-
await Promise.all(routes.filter(el => routesDB.includes(el.path) && el.actions).map(el => pg.query(q, [id, el.path, el.actions])))
|
36
|
-
|
37
|
-
const { rows } = await pg.query(`select a.route_id as path, b.actions as actions from admin.routes a
|
38
|
-
left join admin.role_access b on a.route_id=b.route_id
|
39
|
-
where b.role_id=$1`, [id]);
|
40
|
-
|
41
|
-
if (!users?.length) {
|
42
|
-
return { message: { id, routes: rows }, status: 200 };
|
43
|
-
}
|
44
|
-
}
|
45
|
-
|
46
|
-
const q = `delete from admin.user_roles where role_id='${id.replace(/'/g, "''")}';
|
47
|
-
insert into admin.user_roles(role_id,user_uid,access_granted)
|
48
|
-
values ${users.filter((el) => el?.id).map((el) => `('${id.replace(/'/g, "''")}','${el.id.replace(/'/g, "''")}','${uid?.replace(/'/g, "''")}')`)}`;
|
49
|
-
|
50
|
-
await pg.query(q);
|
51
|
-
|
52
|
-
const res = await accessGroup({ pg, params, session });
|
53
|
-
|
54
|
-
return res;
|
1
|
+
import { pgClients } from '@opengis/fastify-table/utils.js';
|
2
|
+
|
3
|
+
import { getAdminAccess } from '../../../../utils.js';
|
4
|
+
import accessGroup from './access.group.js';
|
5
|
+
|
6
|
+
export default async function accessGroupPost({
|
7
|
+
pg = pgClients.client, params = {}, session = {}, body = {},
|
8
|
+
}) {
|
9
|
+
const { id } = params;
|
10
|
+
const { user } = session?.passport || {};
|
11
|
+
if (!user) return { status: 403, message: 'access restricted' }
|
12
|
+
|
13
|
+
// restrict access - admin only
|
14
|
+
const check = await getAdminAccess({ id, user });
|
15
|
+
if (check) return check;
|
16
|
+
|
17
|
+
const { users = [], routes = [] } = body;
|
18
|
+
|
19
|
+
if (!routes?.length) {
|
20
|
+
// return { message: 'not enough params: users / routes', status: 400 };
|
21
|
+
await pg.query(`delete from admin.role_access where role_id=$1`, [id]);
|
22
|
+
|
23
|
+
if (!users?.length) {
|
24
|
+
return { message: { id, routes }, status: 200 };
|
25
|
+
}
|
26
|
+
}
|
27
|
+
|
28
|
+
if (routes?.length) {
|
29
|
+
const { routesDB = [] } = await pg.query('select array_agg(route_id) as "routesDB" from admin.routes where enabled')
|
30
|
+
.then((res1) => res1.rows?.[0] || {});
|
31
|
+
await pg.query(`delete from admin.role_access where role_id=$1;`, [id]);
|
32
|
+
|
33
|
+
|
34
|
+
const q = `insert into admin.role_access(role_id,route_id,actions) values ($1,$2,$3)`;
|
35
|
+
await Promise.all(routes.filter(el => routesDB.includes(el.path) && el.actions).map(el => pg.query(q, [id, el.path, el.actions])))
|
36
|
+
|
37
|
+
const { rows } = await pg.query(`select a.route_id as path, b.actions as actions from admin.routes a
|
38
|
+
left join admin.role_access b on a.route_id=b.route_id
|
39
|
+
where b.role_id=$1`, [id]);
|
40
|
+
|
41
|
+
if (!users?.length) {
|
42
|
+
return { message: { id, routes: rows }, status: 200 };
|
43
|
+
}
|
44
|
+
}
|
45
|
+
|
46
|
+
const q = `delete from admin.user_roles where role_id='${id.replace(/'/g, "''")}';
|
47
|
+
insert into admin.user_roles(role_id,user_uid,access_granted)
|
48
|
+
values ${users.filter((el) => el?.id).map((el) => `('${id.replace(/'/g, "''")}','${el.id.replace(/'/g, "''")}','${uid?.replace(/'/g, "''")}')`)}`;
|
49
|
+
|
50
|
+
await pg.query(q);
|
51
|
+
|
52
|
+
const res = await accessGroup({ pg, params, session });
|
53
|
+
|
54
|
+
return res;
|
55
55
|
}
|
@@ -1,34 +1,34 @@
|
|
1
|
-
import { pgClients, metaFormat } from '@opengis/fastify-table/utils.js';
|
2
|
-
import { getAdminAccess } from '../../../../utils.js';
|
3
|
-
|
4
|
-
const q = `select a.route_id as id, coalesce(b.user_uid, d.user_uid) as user_uid, coalesce(d.actions, b.actions, array['view']) as actions, b.scope, c.role_id
|
5
|
-
from admin.routes a
|
6
|
-
left join admin.role_access b on
|
7
|
-
a.route_id=b.route_id
|
8
|
-
left join admin.roles c on
|
9
|
-
b.role_id=c.role_id
|
10
|
-
and c.enabled
|
11
|
-
left join admin.user_roles d on
|
12
|
-
c.role_id=d.role_id
|
13
|
-
and ( case when
|
14
|
-
d.expiration is not null
|
15
|
-
then d.expiration > CURRENT_DATE
|
16
|
-
else 1=1
|
17
|
-
end )
|
18
|
-
where $1 in (a.route_id, a.alias, a.table_name) and coalesce(b.user_uid, d.user_uid) is not null`;
|
19
|
-
|
20
|
-
export default async function accessInterface(req) {
|
21
|
-
const { pg = pgClients.client, params = {}, user = {} } = req;
|
22
|
-
|
23
|
-
// restrict access - admin only
|
24
|
-
const check = await getAdminAccess({
|
25
|
-
id: params.name, user,
|
26
|
-
});
|
27
|
-
if (check) return check;
|
28
|
-
|
29
|
-
const { rows = [] } = await pg.query(q, [params.name]);
|
30
|
-
|
31
|
-
const cls = { user_uid: 'core.user_uid', actions: 'core.actions', role_id: 'core.roles' };
|
32
|
-
await metaFormat({ rows, cls, sufix: false });
|
33
|
-
return { rows };
|
1
|
+
import { pgClients, metaFormat } from '@opengis/fastify-table/utils.js';
|
2
|
+
import { getAdminAccess } from '../../../../utils.js';
|
3
|
+
|
4
|
+
const q = `select a.route_id as id, coalesce(b.user_uid, d.user_uid) as user_uid, coalesce(d.actions, b.actions, array['view']) as actions, b.scope, c.role_id
|
5
|
+
from admin.routes a
|
6
|
+
left join admin.role_access b on
|
7
|
+
a.route_id=b.route_id
|
8
|
+
left join admin.roles c on
|
9
|
+
b.role_id=c.role_id
|
10
|
+
and c.enabled
|
11
|
+
left join admin.user_roles d on
|
12
|
+
c.role_id=d.role_id
|
13
|
+
and ( case when
|
14
|
+
d.expiration is not null
|
15
|
+
then d.expiration > CURRENT_DATE
|
16
|
+
else 1=1
|
17
|
+
end )
|
18
|
+
where $1 in (a.route_id, a.alias, a.table_name) and coalesce(b.user_uid, d.user_uid) is not null`;
|
19
|
+
|
20
|
+
export default async function accessInterface(req) {
|
21
|
+
const { pg = pgClients.client, params = {}, user = {} } = req;
|
22
|
+
|
23
|
+
// restrict access - admin only
|
24
|
+
const check = await getAdminAccess({
|
25
|
+
id: params.name, user,
|
26
|
+
});
|
27
|
+
if (check) return check;
|
28
|
+
|
29
|
+
const { rows = [] } = await pg.query(q, [params.name]);
|
30
|
+
|
31
|
+
const cls = { user_uid: 'core.user_uid', actions: 'core.actions', role_id: 'core.roles' };
|
32
|
+
await metaFormat({ rows, cls, sufix: false });
|
33
|
+
return { rows };
|
34
34
|
}
|
@@ -1,11 +1,11 @@
|
|
1
|
-
import accessGroup from "./controllers/access.group.js";
|
2
|
-
import accessGroupPost from "./controllers/access.group.post.js";
|
3
|
-
import accessInterface from "./controllers/access.interface.js";
|
4
|
-
|
5
|
-
import { accessGroupPostSchema, accessGroupSchema, accessInterfaceSchema } from "./schema.mjs";
|
6
|
-
|
7
|
-
export default async function route(fastify) {
|
8
|
-
fastify.get('/access-group/:id', { schema: accessGroupSchema }, accessGroup);
|
9
|
-
fastify.post('/access-group/:id', { schema: accessGroupPostSchema }, accessGroupPost);
|
10
|
-
fastify.get('/access-interface/:name', { schema: accessInterfaceSchema }, accessInterface);
|
11
|
-
}
|
1
|
+
import accessGroup from "./controllers/access.group.js";
|
2
|
+
import accessGroupPost from "./controllers/access.group.post.js";
|
3
|
+
import accessInterface from "./controllers/access.interface.js";
|
4
|
+
|
5
|
+
import { accessGroupPostSchema, accessGroupSchema, accessInterfaceSchema } from "./schema.mjs";
|
6
|
+
|
7
|
+
export default async function route(fastify) {
|
8
|
+
fastify.get('/access-group/:id', { schema: accessGroupSchema }, accessGroup);
|
9
|
+
fastify.post('/access-group/:id', { schema: accessGroupPostSchema }, accessGroupPost);
|
10
|
+
fastify.get('/access-interface/:name', { schema: accessInterfaceSchema }, accessInterface);
|
11
|
+
}
|
@@ -1,68 +1,68 @@
|
|
1
|
-
export default null;
|
2
|
-
export { accessGroupSchema, accessGroupPostSchema, accessInterfaceSchema }
|
3
|
-
|
4
|
-
const accessGroupSchema = {
|
5
|
-
params: {
|
6
|
-
type: 'object',
|
7
|
-
properties: {
|
8
|
-
id: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
9
|
-
},
|
10
|
-
required: ['id'],
|
11
|
-
},
|
12
|
-
};
|
13
|
-
|
14
|
-
const accessInterfaceSchema = {
|
15
|
-
params: {
|
16
|
-
type: 'object',
|
17
|
-
properties: {
|
18
|
-
name: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
19
|
-
},
|
20
|
-
required: ['name'],
|
21
|
-
},
|
22
|
-
};
|
23
|
-
|
24
|
-
const accessGroupPostSchema = {
|
25
|
-
params: {
|
26
|
-
type: 'object',
|
27
|
-
properties: {
|
28
|
-
id: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
29
|
-
},
|
30
|
-
required: ['id'],
|
31
|
-
},
|
32
|
-
body: {
|
33
|
-
type: 'object',
|
34
|
-
properties: {
|
35
|
-
users: {
|
36
|
-
type: 'array',
|
37
|
-
items: {
|
38
|
-
type: 'object',
|
39
|
-
properties: {
|
40
|
-
id: {
|
41
|
-
type: 'string',
|
42
|
-
pattern: '^([\\d\\w._-]+)$',
|
43
|
-
},
|
44
|
-
},
|
45
|
-
},
|
46
|
-
},
|
47
|
-
routes: {
|
48
|
-
type: 'array',
|
49
|
-
/*items: {
|
50
|
-
type: 'object',
|
51
|
-
properties: {
|
52
|
-
path: {
|
53
|
-
type: 'string',
|
54
|
-
pattern: '^([\\d\\w._-]+)$',
|
55
|
-
},
|
56
|
-
actions: {
|
57
|
-
type: 'array',
|
58
|
-
items: {
|
59
|
-
type: 'string',
|
60
|
-
enum: ['get', 'add', 'edit', 'del'],
|
61
|
-
},
|
62
|
-
},
|
63
|
-
},
|
64
|
-
},*/
|
65
|
-
},
|
66
|
-
},
|
67
|
-
},
|
1
|
+
export default null;
|
2
|
+
export { accessGroupSchema, accessGroupPostSchema, accessInterfaceSchema }
|
3
|
+
|
4
|
+
const accessGroupSchema = {
|
5
|
+
params: {
|
6
|
+
type: 'object',
|
7
|
+
properties: {
|
8
|
+
id: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
9
|
+
},
|
10
|
+
required: ['id'],
|
11
|
+
},
|
12
|
+
};
|
13
|
+
|
14
|
+
const accessInterfaceSchema = {
|
15
|
+
params: {
|
16
|
+
type: 'object',
|
17
|
+
properties: {
|
18
|
+
name: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
19
|
+
},
|
20
|
+
required: ['name'],
|
21
|
+
},
|
22
|
+
};
|
23
|
+
|
24
|
+
const accessGroupPostSchema = {
|
25
|
+
params: {
|
26
|
+
type: 'object',
|
27
|
+
properties: {
|
28
|
+
id: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
29
|
+
},
|
30
|
+
required: ['id'],
|
31
|
+
},
|
32
|
+
body: {
|
33
|
+
type: 'object',
|
34
|
+
properties: {
|
35
|
+
users: {
|
36
|
+
type: 'array',
|
37
|
+
items: {
|
38
|
+
type: 'object',
|
39
|
+
properties: {
|
40
|
+
id: {
|
41
|
+
type: 'string',
|
42
|
+
pattern: '^([\\d\\w._-]+)$',
|
43
|
+
},
|
44
|
+
},
|
45
|
+
},
|
46
|
+
},
|
47
|
+
routes: {
|
48
|
+
type: 'array',
|
49
|
+
/*items: {
|
50
|
+
type: 'object',
|
51
|
+
properties: {
|
52
|
+
path: {
|
53
|
+
type: 'string',
|
54
|
+
pattern: '^([\\d\\w._-]+)$',
|
55
|
+
},
|
56
|
+
actions: {
|
57
|
+
type: 'array',
|
58
|
+
items: {
|
59
|
+
type: 'string',
|
60
|
+
enum: ['get', 'add', 'edit', 'del'],
|
61
|
+
},
|
62
|
+
},
|
63
|
+
},
|
64
|
+
},*/
|
65
|
+
},
|
66
|
+
},
|
67
|
+
},
|
68
68
|
};
|