@openinc/parse-server-opendash 3.4.2 → 3.5.0

package/dist/features/permissions/services/registerPermissions.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAllPermissions = getAllPermissions;
 exports.default = initPermissions;
 const __1 = require("..");
+const catchError_1 = require("../../../helper/catchError");
 const types_1 = require("../../../types");
 /**
  * Returns all permissions defined in types/Permissions.ts as an array of Permission objects.
@@ -47,34 +48,63 @@ function createPermission(input) {
  */
 async function registerPermissions(tenant) {
     console.log("[@openinc/parse-server-opendash] Register all permissions");
-    getAllPermissions().forEach((permission) => {
-        new Parse.Query(types_1.Permission)
+    return getAllPermissions().map(async (permission) => {
+        const [resultError, result] = await (0, catchError_1.catchError)(new Parse.Query(types_1.Permission)
             .equalTo("key", permission.key)
             .equalTo("tenant", tenant)
-            .first({ useMasterKey: true })
-            .then((result) => {
-            if (!result) {
-                console.log("[@openinc/parse-server-opendash] Create permission", permission.key);
-                const newPermission = new types_1.Permission();
-                newPermission.set("key", permission.key);
-                newPermission.set("label", permission.label);
-                newPermission.set("tenant", tenant);
-                newPermission.set("description", permission.description);
-                newPermission.save({}, { useMasterKey: true });
-            }
-            else {
-                console.log("[@openinc/parse-server-opendash] Permission already exists", permission.key);
-            }
-        });
+            .first({ useMasterKey: true }));
+        if (resultError) {
+            console.error("[@openinc/parse-server-opendash] Error while checking permission", permission.key, resultError);
+            return;
+        }
+        if (!result) {
+            console.log("[@openinc/parse-server-opendash] Create permission", permission.key);
+            const newPermission = new types_1.Permission();
+            newPermission.set("key", permission.key);
+            newPermission.set("label", permission.label);
+            newPermission.set("tenant", tenant);
+            newPermission.set("description", permission.description);
+            await newPermission.save({}, { useMasterKey: true });
+        }
+        else {
+            console.log("[@openinc/parse-server-opendash] Permission already exists", permission.key);
+        }
     });
 }
+/**
+ * Set read access for all admin roles to admin overview permission
+ */
+async function ensureDefaultAdminAccess(tenant) {
+    console.log("[@openinc/parse-server-opendash] Ensure default admin access permissions");
+    const [resultError, result] = await (0, catchError_1.catchError)(new Parse.Query(types_1.Permission)
+        .equalTo("key", __1.Permissions.OpenINCStack.adminoverview)
+        .equalTo("tenant", tenant)
+        .first({ useMasterKey: true }));
+    if (resultError) {
+        console.error("[@openinc/parse-server-opendash] Error while checking permission", __1.Permissions.OpenINCStack.adminoverview, resultError);
+        return;
+    }
+    if (result) {
+        const acl = result.getACL() || new Parse.ACL();
+        acl.setRoleReadAccess(`od-tenant-admin-${tenant.id}`, true);
+        acl.setRoleReadAccess(`od-tenant-admin`, true);
+        acl.setRoleReadAccess(`od-admin`, true);
+        acl.setRoleWriteAccess(`od-admin`, true);
+        result.setACL(acl);
+        await result.save(null, { useMasterKey: true });
+    }
+    else {
+        console.log("[@openinc/parse-server-opendash] Permission not found", __1.Permissions.OpenINCStack.adminoverview);
+    }
+}
 async function initPermissions() {
     const tenants = await new Parse.Query(types_1.Tenant)
         .descending("createdAt")
         .find({ useMasterKey: true });
     if (tenants) {
         for await (const tenant of tenants) {
-            await registerPermissions(tenant);
+            await Promise.all(await registerPermissions(tenant));
+            await ensureDefaultAdminAccess(tenant);
         }
     }
 }

package/dist/features/permissions/types/Permissions.d.ts

@@ -39,4 +39,7 @@ export declare namespace Permissions {
         monitorstate = "maintenance:can-update-monitorstate",
         kanban_view = "maintenance:can-update-kanban-view"
     }
+    enum OpenINCStack {
+        adminoverview = "opendash:can-access-admin-overview"
+    }
 }

package/dist/features/permissions/types/Permissions.js

@@ -48,6 +48,11 @@ var Permissions;
         OpenService["monitorstate"] = "maintenance:can-update-monitorstate";
         OpenService["kanban_view"] = "maintenance:can-update-kanban-view";
     })(OpenService = Permissions.OpenService || (Permissions.OpenService = {}));
+    let OpenINCStack;
+    (function (OpenINCStack) {
+        //Access
+        OpenINCStack["adminoverview"] = "opendash:can-access-admin-overview";
+    })(OpenINCStack = Permissions.OpenINCStack || (Permissions.OpenINCStack = {}));
     // can also be used for nested permissions
     // Example:
     //   export namespace TestPlugin {

package/dist/functions/openinc-openservice-save-ticket-data.d.ts

@@ -1,5 +1,5 @@
 import { SaveValues } from "../features/openservice";
-import { Maintenance_Ticket, _User } from "../types";
+import { _User, Maintenance_Ticket } from "../types";
 export declare function getUsername(user: _User | undefined): string;
 export declare function init(name: string): Promise<void>;
 export declare function saveTicketData(data: SaveValues, user?: _User): Promise<Maintenance_Ticket>;

package/dist/functions/openinc-openservice-save-ticket-data.js

@@ -3,9 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getUsername = getUsername;
 exports.init = init;
 exports.saveTicketData = saveTicketData;
+const openservice_1 = require("../features/openservice");
 const openware_1 = require("../features/openware");
 const catchError_1 = require("../helper/catchError");
-const openservice_1 = require("../features/openservice");
 const types_1 = require("../types");
 function getUsername(user) {
     if (!user)

package/dist/hooks/_Role.d.ts

@@ -0,0 +1 @@
+export declare function init(): Promise<void>;

package/dist/hooks/_Role.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const __1 = require("..");
+async function init() {
+    (0, __1.beforeSaveHook)("_Role", async (request) => {
+        const role = request.object;
+        let tenantId = null;
+        if (request.user && request.user.get("tenant")) {
+            tenantId = request.user.get("tenant").id;
+        }
+        if (!role.get("name")) {
+            role.set("name", crypto.randomUUID());
+        }
+        //Set ACL to od-tenant-admin-{id_of_tenant}
+        if (role.isNew()) {
+            role.setACL(new Parse.ACL({
+                ...(tenantId && {
+                    [`role:od-tenant-user-${tenantId}`]: { read: true },
+                    [`role:od-tenant-admin-${tenantId}`]: { read: true, write: true },
+                }),
+                public: { read: false, write: false },
+                "role:od-admin": { read: true, write: true },
+            }));
+        }
+    });
+    //   afterSaveHook("_Role", async (request) => {});
+}

package/dist/hooks/_init.js

@@ -9,6 +9,7 @@ async function init() {
     const classNames = [
         "_beforeLogin",
         "_User",
+        "_Role",
         ...fs_1.default
             .readdirSync(__dirname)
             .filter((filename) => !filename.startsWith("_"))

package/dist/types/Maintenance_Ticket_FormConfig.d.ts

@@ -1,11 +1,11 @@
-import type { _Role } from "./_Role";
+import type { Tenant } from "./Tenant";
 export interface Maintenance_Ticket_FormConfigAttributes {
     id: string;
     objectId: string;
     createdAt: Date;
     updatedAt: Date;
     config: any;
-    roles: Parse.Relation<Maintenance_Ticket_FormConfig, _Role>;
+    tenant?: Tenant;
     view: string;
 }
 export declare class Maintenance_Ticket_FormConfig extends Parse.Object<Maintenance_Ticket_FormConfigAttributes> {
@@ -13,7 +13,8 @@ export declare class Maintenance_Ticket_FormConfig extends Parse.Object<Maintena
     constructor(data?: Partial<Maintenance_Ticket_FormConfigAttributes>);
     get config(): any;
     set config(value: any);
-    get roles(): Parse.Relation<Maintenance_Ticket_FormConfig, _Role>;
+    get tenant(): Tenant | undefined;
+    set tenant(value: Tenant | undefined);
     get view(): string;
     set view(value: string);
 }

package/dist/types/Maintenance_Ticket_FormConfig.js

@@ -11,8 +11,11 @@ class Maintenance_Ticket_FormConfig extends Parse.Object {
     set config(value) {
         super.set("config", value);
     }
-    get roles() {
-        return super.relation("roles");
+    get tenant() {
+        return super.get("tenant");
+    }
+    set tenant(value) {
+        super.set("tenant", value);
     }
     get view() {
         return super.get("view");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openinc/parse-server-opendash",
-  "version": "3.4.2",
+  "version": "3.5.0",
   "description": "Parse Server Cloud Code for open.INC Stack.",
   "packageManager": "pnpm@10.8.1",
   "keywords": [

package/schema/Maintenance_Ticket_FormConfig.json

@@ -4,9 +4,9 @@
       "type": "Object",
       "required": true
     },
-    "roles": {
-      "type": "Relation",
-      "targetClass": "_Role",
+    "tenant": {
+      "type": "Pointer",
+      "targetClass": "{{PREFIX}}Tenant",
       "required": false
     },
     "view": {