@openinc/parse-server-opendash 3.32.5 → 3.32.6

package/dist/hooks/Maintenance_Schedule.js

@@ -1,19 +1,42 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.init = init;
-const schema_1 = require("../features/schema");
 const scheduleToEvent_1 = require("../features/openservice/schedules/calendarSync/functions/scheduleToEvent");
 const CalendarManager_1 = require("../features/openservice/schedules/calendarSync/service/CalendarManager");
+const schema_1 = require("../features/schema");
 const types_1 = require("../types");
 async function init() {
     (0, schema_1.beforeSaveHook)(types_1.Maintenance_Schedule, async (request) => {
         const { object, original, user } = request;
         await (0, schema_1.defaultHandler)(request);
-        await (0, schema_1.defaultAclHandler)(request);
+        // await defaultAclHandler(request, { allowCustomACL: true });
     });
     (0, schema_1.afterSaveHook)(types_1.Maintenance_Schedule, async (request) => {
         const { object, original, user, master } = request;
         if (!original) {
+            // Set ACL for new Maintenance_Schedule
+            // If is new: User should see but not tenant users
+            let acl = object.getACL();
+            if (!acl) {
+                acl = new Parse.ACL();
+            }
+            // If this is a new object, the acl will be set to the user who saved it only.
+            if (user) {
+                const tenant = object.get("tenant") || user.get("tenant");
+                if (tenant) {
+                    acl.setRoleReadAccess("od-tenant-user-" + tenant.id, false);
+                }
+                acl.setReadAccess(user.id, true);
+                acl.setWriteAccess(user.id, true);
+            }
+            acl.setRoleReadAccess("od-admin", true);
+            acl.setRoleWriteAccess("od-admin", true);
+            acl.setPublicReadAccess(false);
+            acl.setPublicWriteAccess(false);
+            object.setACL(acl);
+            if (!master) {
+                await object.save(null, { useMasterKey: true });
+            }
             await addToTemplateSources(object);
             if (!master) {
                 await addToCalendar(object);
@@ -39,6 +62,11 @@ async function init() {
         }
     });
 }
+/**
+ * Add schedule's source to its template's sources relation
+ * @param schedule Maintenance_Schedule
+ * @returns Promise<void>
+ */
 async function addToTemplateSources(schedule) {
     const template = schedule.get("template");
     if (!template)

package/dist/hooks/Maintenance_Schedule_Template.js

@@ -6,13 +6,33 @@ const types_1 = require("../types");
 async function init() {
     (0, schema_1.beforeSaveHook)(types_1.Maintenance_Schedule_Template, async (request) => {
         const { object, original, user } = request;
+        // If this is a new object, the acl will be set to the user who saved it only.
+        if (object.isNew()) {
+            let acl = object.getACL();
+            if (!acl) {
+                acl = new Parse.ACL();
+            }
+            if (user) {
+                const tenant = object.get("tenant") || user.get("tenant");
+                if (tenant) {
+                    acl.setRoleReadAccess("od-tenant-user-" + tenant.id, false);
+                }
+                acl.setReadAccess(user.id, true);
+                acl.setWriteAccess(user.id, true);
+            }
+            acl.setRoleReadAccess("od-admin", true);
+            acl.setRoleWriteAccess("od-admin", true);
+            acl.setPublicReadAccess(false);
+            acl.setPublicWriteAccess(false);
+            object.setACL(acl);
+        }
         await (0, schema_1.defaultHandler)(request);
-        await (0, schema_1.defaultAclHandler)(request);
+        // await defaultAclHandler(request, { allowCustomACL: true });
     });
     (0, schema_1.afterSaveHook)(types_1.Maintenance_Schedule_Template, async (request) => {
         const { object, original, user } = request;
-        if (object)
-            await createSchedulesWithTemplate(object);
+        if (object && user)
+            await createSchedulesWithTemplate(object, user);
     });
     (0, schema_1.beforeDeleteHook)(types_1.Maintenance_Schedule_Template, async (request) => {
         const { object, original, user } = request;
@@ -25,7 +45,7 @@ async function init() {
  * Creates schedules based on the provided template.
  * @param template the maintenance schedule template
  */
-async function createSchedulesWithTemplate(template) {
+async function createSchedulesWithTemplate(template, user) {
     // find existing schedules based on the template
     const matchingSchedules = await new Parse.Query(types_1.Maintenance_Schedule)
         .equalTo("template", template)
@@ -49,7 +69,9 @@ async function createSchedulesWithTemplate(template) {
             enabled: true,
             tenant: template.get("tenant"),
         });
-        const savedSchedule = await newSchedule.save(null, { useMasterKey: true });
+        const savedSchedule = await newSchedule.save(null, {
+            sessionToken: user.getSessionToken(),
+        });
         // Add steps to the schedule steps relation
         const templateStepsRelation = template.relation("steps");
         const scheduleStepsRelation = savedSchedule.relation("steps");
@@ -59,6 +81,8 @@ async function createSchedulesWithTemplate(template) {
         for (const step of templateSteps) {
             scheduleStepsRelation.add(step);
         }
-        await savedSchedule.save(null, { useMasterKey: true });
+        await savedSchedule.save(null, {
+            sessionToken: user.getSessionToken(),
+        });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openinc/parse-server-opendash",
-  "version": "3.32.5",
+  "version": "3.32.6",
   "description": "Parse Server Cloud Code for open.INC Stack.",
   "packageManager": "pnpm@10.28.0",
   "keywords": [