@postxl/generators 1.18.0 → 1.20.0

package/dist/backend-actions/actions.generator.d.ts

@@ -26,6 +26,7 @@ export type ActionsContext = {
      */
     readonly authorization: {
         readonly service: Generator.ImportableClass;
+        readonly policy: Generator.ImportableClass;
     };
     /**
      * The class that executes the actions

package/dist/backend-actions/actions.generator.js

@@ -48,6 +48,7 @@ const types_1 = require("../types");
 const action_types_generator_1 = require("./generators/action-types.generator");
 const actions_config_class_generator_1 = require("./generators/actions-config-class.generator");
 const actions_module_generator_1 = require("./generators/actions-module.generator");
+const authorization_policy_service_generator_1 = require("./generators/authorization-policy-service.generator");
 const authorization_service_generator_1 = require("./generators/authorization-service.generator");
 const dispatcher_service_generator_1 = require("./generators/dispatcher-service.generator");
 const execution_class_generator_1 = require("./generators/execution-class.generator");
@@ -100,6 +101,10 @@ exports.generator = {
                     name: Generator.toClassName('AuthorizationService'),
                     location: Generator.toBackendModuleLocation(`@actions/authorization/authorization.service`),
                 },
+                policy: {
+                    name: Generator.toClassName('AuthorizationPolicyService'),
+                    location: Generator.toBackendModuleLocation(`@actions/authorization/authorization-policy.service`),
+                },
             },
             execution: {
                 interface: {
@@ -180,6 +185,7 @@ exports.generator = {
         const srcVfs = new Generator.VirtualFileSystem();
         srcVfs.write(Generator.toLocalFile(actions.dispatcher), (0, dispatcher_service_generator_1.generateDispatcher)(context));
         srcVfs.write(Generator.toLocalFile(actions.authorization.service), (0, authorization_service_generator_1.generateAuthorizationService)(context));
+        srcVfs.write(Generator.toLocalFile(actions.authorization.policy), (0, authorization_policy_service_generator_1.generateAuthorizationPolicyService)(context));
         srcVfs.write(Generator.toLocalFile(actions.execution.class), (0, execution_class_generator_1.generateActionExecutionClass)(context));
         srcVfs.write(Generator.toLocalFile(actions.execution.interface), (0, execution_interface_generator_1.generateActionExecutionInterface)(context));
         srcVfs.write(Generator.toLocalFile(actions.summary.action), (0, action_types_generator_1.generateActionTypes)(actions));

package/dist/backend-actions/actions.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.generator.js","sourceRoot":"","sources":["../../src/backend-actions/actions.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AACnC,8CAAmB;AAEnB,6DAA8C;AAC9C,uDAAwC;AAExC,kDAA+E;AAC/E,wEAA8E;AAC9E,kCAAmD;AACnD,oCAAsD;AAEtD,gFAAyE;AACzE,gGAAmF;AACnF,oFAA6E;AAC7E,kGAA2F;AAC3F,4FAA8E;AAC9E,sFAAqF;AACrF,8FAA6F;AA+G7F,MAAM,UAAU,GAAG,aAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;AAK7C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAAxD,QAAA,WAAW,eAA6C;AAmBxD,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;AAEjE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,wBAAgB,EAAE,6CAAmB,CAAC;IAEtF,QAAQ,EAAE,CAAsC,OAAgB,EAAwB,EAAE;QACxF,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtB,MAAM,MAAM,GAA6B;YACvC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;SACvE,CAAA;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,CAAC,+BAA+B,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAClD,QAAQ,EAAE,cAAc;aACzB;SACF,CAAA;QAED,MAAM,aAAa,GAAiB;YAClC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAC9C,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,uCAAuC,CAAC;aAC5D;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,yCAAyC,CAAC;gBACpE,kFAAkF;gBAClF,aAAa,EAAE,EAAE;gBACjB,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;aAC1B;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,MAAM,OAAO,GAAmB;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE;gBACV,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC;gBAChD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,6BAA6B,CAAC;aAC3E;YACD,aAAa,EAAE;gBACb,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;oBACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,8CAA8C,CAAC;iBAC5F;aACF;YACD,SAAS,EAAE;gBACT,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAC9C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;oBACrF,iBAAiB,EAAE;wBACjB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC;wBAC/C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;oBACD,0BAA0B,EAAE;wBAC1B,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC;oBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;iBAClF;gBACD,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACvD,SAAS,EAAE;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,KAAK,EAAE;wBACL,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,oBAAoB,CAAC;wBACrD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACxD;iBACF;gBACD,cAAc,EAAE;oBACd,eAAe,EAAE,SAAS,CAAC,cAAc,CAAC,wBAAwB,CAAC;oBACnE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,uBAAuB,CAAC;oBAChE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;iBACzD;gBACD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;aACjE;YACD,SAAS,EAAE,EAAE;YACb,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACpC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC;oBAC1C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC;oBAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;IAChC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAA,iDAAkB,EAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAA,wDAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACnG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAA,gEAAgC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC3G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,sDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACrD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAE3E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA;AACD,SAAS,aAAa,CAAoC,OAAgB;IACxE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACzE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAC3E,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;AAC3E,CAAC"}
+{"version":3,"file":"actions.generator.js","sourceRoot":"","sources":["../../src/backend-actions/actions.generator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAmC;AACnC,8CAAmB;AAEnB,6DAA8C;AAC9C,uDAAwC;AAExC,kDAA+E;AAC/E,wEAA8E;AAC9E,kCAAmD;AACnD,oCAAsD;AAEtD,gFAAyE;AACzE,gGAAmF;AACnF,oFAA6E;AAC7E,gHAAwG;AACxG,kGAA2F;AAC3F,4FAA8E;AAC9E,sFAAqF;AACrF,8FAA6F;AAgH7F,MAAM,UAAU,GAAG,aAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;AAK7C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAAxD,QAAA,WAAW,eAA6C;AAmBxD,QAAA,WAAW,GAAG,SAAS,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;AAEjE,QAAA,SAAS,GAAiC;IACrD,EAAE,EAAE,mBAAW;IACf,QAAQ,EAAE,CAAC,iCAAkB,EAAE,sBAAe,EAAE,wBAAgB,EAAE,6CAAmB,CAAC;IAEtF,QAAQ,EAAE,CAAsC,OAAgB,EAAwB,EAAE;QACxF,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtB,MAAM,MAAM,GAA6B;YACvC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,yBAAyB,CAAC;SACvE,CAAA;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,CAAC,+BAA+B,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC;YAC5C,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAClD,QAAQ,EAAE,cAAc;aACzB;SACF,CAAA;QAED,MAAM,aAAa,GAAiB;YAClC,IAAI,EAAE,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAC9C,WAAW,EAAE,MAAM;YACnB,qBAAqB,EAAE;gBACrB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,uCAAuC,CAAC;aAC5D;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,yCAAyC,CAAC;gBACpE,kFAAkF;gBAClF,aAAa,EAAE,EAAE;gBACjB,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;aAC1B;SACF,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,MAAM,OAAO,GAAmB;YAC9B,MAAM;YACN,MAAM;YACN,UAAU,EAAE;gBACV,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC;gBAChD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,6BAA6B,CAAC;aAC3E;YACD,aAAa,EAAE;gBACb,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB,CAAC;oBACnD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,8CAA8C,CAAC;iBAC5F;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,4BAA4B,CAAC;oBACzD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,qDAAqD,CAAC;iBACnG;aACF;YACD,SAAS,EAAE;gBACT,SAAS,EAAE;oBACT,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAC9C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;oBACrF,iBAAiB,EAAE;wBACjB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,mBAAmB,CAAC;wBAC/C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;oBACD,0BAA0B,EAAE;wBAC1B,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wCAAwC,CAAC;qBACtF;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC;oBACrD,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;iBAClF;gBACD,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACvD,SAAS,EAAE;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;qBACzD;oBACD,UAAU,EAAE;wBACV,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,yBAAyB,CAAC;wBAC1D,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,0BAA0B,CAAC;qBAC7D;oBACD,KAAK,EAAE;wBACL,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,oBAAoB,CAAC;wBACrD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACxD;iBACF;gBACD,cAAc,EAAE;oBACd,eAAe,EAAE,SAAS,CAAC,cAAc,CAAC,wBAAwB,CAAC;oBACnE,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC,uBAAuB,CAAC;oBAChE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBACtD,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;iBACzD;gBACD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,sBAAsB,CAAC;aACjE;YACD,SAAS,EAAE,EAAE;YACb,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACpC,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC;oBAC1C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC;oBAC5C,QAAQ,EAAE,SAAS,CAAC,uBAAuB,CAAC,wBAAwB,CAAC;iBACtE;aACF;SACF,CAAA;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;IAChC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAiC,OAAgB,EAAoB,EAAE;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QAE3B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAA,iDAAkB,EAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAA,8DAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAA,2EAAkC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC9G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAA,wDAA4B,EAAC,OAAO,CAAC,CAAC,CAAA;QACnG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,IAAA,gEAAgC,EAAC,OAAO,CAAC,CAAC,CAAA;QAC3G,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,sDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAA;QAC7C,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACrD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;QAEpE,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAA,mBAAO,EAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;QAEpE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAE3E,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAA;AACD,SAAS,aAAa,CAAoC,OAAgB;IACxE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACzE,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAC3E,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;AAC3E,CAAC"}

package/dist/backend-actions/generators/actions-module.generator.js

@@ -8,6 +8,7 @@ function generateActionsModule({ actions, database }) {
         .from(actions.module.location)
         .add(actions.execution.class)
         .add(actions.dispatcher)
+        .add(actions.authorization.policy)
         .add(actions.authorization.service)
         .add(actions.config)
         .addType(actions.config.options)
@@ -37,8 +38,8 @@ export class ${actions.module.name} {
         ${database.module.moduleClass.name},
         ${moduleImports.join(',\n')}
       ],
-      providers: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.service.name}, configProvider],
-      exports: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.service.name}],
+      providers: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.policy.name}, ${actions.authorization.service.name}, configProvider],
+      exports: [${actions.dispatcher.name}, ${actions.execution.class.name}, ${actions.authorization.policy.name}, ${actions.authorization.service.name}],
       global: true
     }
   }

package/dist/backend-actions/generators/actions-module.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions-module.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/actions-module.generator.ts"],"names":[],"mappings":";;AAIA,sDA6CC;AAjDD,iDAAmD;AAInD,SAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAiB;IACxE,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACvB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;SAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC/B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,CAAA,CAAC,UAAU;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,EACT,MAAM,EAAE,EAAE,WAAW,EAAE,GACxB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACxB,aAAa,CAAC,IAAI,CAAC,oBAAoB,WAAW,CAAC,IAAI,GAAG,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;eAEL,OAAO,CAAC,MAAM,CAAC,IAAI;mCACC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;;iBAE7C,OAAO,CAAC,MAAM,CAAC,IAAI;sBACd,OAAO,CAAC,MAAM,CAAC,IAAI;;;gBAGzB,OAAO,CAAC,MAAM,CAAC,IAAI;;UAEzB,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,IAAI;UACjC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;;oBAEf,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;kBACjG,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;EAI/G,CAAA;AACF,CAAC"}
+{"version":3,"file":"actions-module.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/actions-module.generator.ts"],"names":[],"mappings":";;AAIA,sDA8CC;AAlDD,iDAAmD;AAInD,SAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAiB;IACxE,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;SACvB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;SAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC/B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,CAAA,CAAC,UAAU;IAE/C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,EACT,MAAM,EAAE,EAAE,WAAW,EAAE,GACxB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACxB,aAAa,CAAC,IAAI,CAAC,oBAAoB,WAAW,CAAC,IAAI,GAAG,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;eAEL,OAAO,CAAC,MAAM,CAAC,IAAI;mCACC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;;iBAE7C,OAAO,CAAC,MAAM,CAAC,IAAI;sBACd,OAAO,CAAC,MAAM,CAAC,IAAI;;;gBAGzB,OAAO,CAAC,MAAM,CAAC,IAAI;;UAEzB,QAAQ,CAAC,MAAM,CAAC,WAAY,CAAC,IAAI;UACjC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;;oBAEf,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;kBACvI,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;EAIrJ,CAAA;AACF,CAAC"}

package/dist/backend-actions/generators/authorization-policy-service.generator.d.ts

@@ -0,0 +1,2 @@
+import { ContextResult } from '../actions.generator';
+export declare function generateAuthorizationPolicyService({ actions, schema, types }: ContextResult): string;

package/dist/backend-actions/generators/authorization-policy-service.generator.js

@@ -0,0 +1,334 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAuthorizationPolicyService = generateAuthorizationPolicyService;
+const generator_1 = require("@postxl/generator");
+function stringifyAuthRuleSet(input) {
+    if (!input) {
+        return '{}';
+    }
+    const typedInput = input;
+    const result = {};
+    if (typedInput.read) {
+        result.read = typedInput.read;
+    }
+    if (typedInput.write) {
+        result.write = typedInput.write;
+    }
+    if (typedInput.create) {
+        result.create = typedInput.create;
+    }
+    if (typedInput.update) {
+        result.update = typedInput.update;
+    }
+    if (typedInput.delete) {
+        result.delete = typedInput.delete;
+    }
+    if (typedInput.actions) {
+        result.actions = typedInput.actions;
+    }
+    if (typedInput.adminUi) {
+        result.adminUi = typedInput.adminUi;
+    }
+    return JSON.stringify(result);
+}
+function stringifyAuthScopeRuleSet(input) {
+    if (!input) {
+        return '{}';
+    }
+    const typedInput = input;
+    const result = {};
+    if (typedInput.actions) {
+        result.actions = typedInput.actions;
+    }
+    return JSON.stringify(result);
+}
+function generateAuthorizationPolicyService({ actions, schema, types }) {
+    const imports = generator_1.ImportGenerator.from(actions.authorization.policy.location)
+        .addType(types.modelNames)
+        .addType(types.authorizationContext)
+        .addType(types.userRoles)
+        .addType(actions.summary.action);
+    const schemaRules = [...schema.schemaAuth.entries()]
+        .map(([schemaName, ruleSet]) => `    ${JSON.stringify(schemaName)}: ${stringifyAuthRuleSet(ruleSet)},`)
+        .join('\n');
+    const modelRules = schema.modelNames
+        .map((modelName) => {
+        const model = schema.models.get(modelName);
+        return `    ${JSON.stringify(modelName)}: ${stringifyAuthRuleSet(model?.auth)},`;
+    })
+        .join('\n');
+    const modelSchemas = schema.modelNames
+        .map((modelName) => {
+        const model = schema.models.get(modelName);
+        return `    ${JSON.stringify(modelName)}: ${JSON.stringify(model?.databaseSchema ?? schema.defaultDatabaseSchema)},`;
+    })
+        .join('\n');
+    const scopeRules = Object.entries(schema.auth?.scopes ?? {})
+        .map(([scope, ruleSet]) => `    ${JSON.stringify(scope)}: ${stringifyAuthScopeRuleSet(ruleSet)},`)
+        .join('\n');
+    const knownScopes = new Set();
+    for (const provider of actions.providers) {
+        for (const scope of provider.scopes) {
+            knownScopes.add(scope);
+        }
+    }
+    const scopeToModel = schema.modelNames
+        .map((modelName) => {
+        const scope = `${modelName.charAt(0).toLowerCase()}${modelName.slice(1)}`;
+        if (!knownScopes.has(scope)) {
+            return null;
+        }
+        return `    ${JSON.stringify(scope)}: ${JSON.stringify(modelName)},`;
+    })
+        .filter(Boolean)
+        .join('\n');
+    return /* ts */ `
+import { Injectable } from '@nestjs/common'
+
+${imports.generate()}
+
+type RoleRule = { anyRole: string[] }
+
+type RuleSet = {
+  read?: RoleRule
+  write?: RoleRule
+  create?: RoleRule
+  update?: RoleRule
+  delete?: RoleRule
+  actions?: Record<string, RoleRule>
+  adminUi?: {
+    visibleFor: string[]
+  }
+}
+
+type Operation = 'read' | 'write' | 'create' | 'update' | 'delete'
+type ActionScope = Action['scope']
+type ScopeRuleSet = {
+  actions?: Record<string, RoleRule>
+}
+type PolicyRowId = string | number
+type PolicyCheckKind = Operation | 'adminUi' | 'action'
+type PolicyContext = {
+  authorization: AuthorizationContext
+  check: PolicyCheckKind
+  modelName?: ModelName
+  operation?: Operation
+  scope?: ActionScope
+  actionType?: string
+  id?: PolicyRowId
+  item?: unknown
+}
+type ModelPolicyParams = {
+  authorization: AuthorizationContext
+  modelName: ModelName
+  id?: PolicyRowId
+  item?: unknown
+}
+
+type PolicyMatrix = {
+  defaultDeny: boolean
+  schemas: Record<string, RuleSet>
+  models: Record<ModelName, RuleSet>
+  modelSchemas: Record<ModelName, string>
+  scopes: Partial<Record<ActionScope, ScopeRuleSet>>
+  scopeModels: Partial<Record<ActionScope, ModelName>>
+}
+
+@Injectable()
+export class ${actions.authorization.policy.name} {
+  private readonly matrix: PolicyMatrix = {
+    defaultDeny: ${schema.auth?.defaultDeny ?? true},
+    schemas: {
+${schemaRules}
+    },
+    models: {
+${modelRules}
+    },
+    modelSchemas: {
+${modelSchemas}
+    },
+    scopes: {
+${scopeRules}
+    },
+    scopeModels: {
+${scopeToModel}
+    },
+  }
+
+  public canRead(params: ModelPolicyParams): boolean {
+    return this.canOperate({ ...params, operation: 'read' })
+  }
+
+  public canRunAction(params: {
+    authorization: AuthorizationContext
+    scope: ActionScope
+    actionType: string
+    id?: PolicyRowId
+    item?: unknown
+  }): boolean {
+    const scopeRules = this.matrix.scopes[params.scope]
+    const scopedRule = scopeRules?.actions?.[params.actionType] ?? scopeRules?.actions?.['*']
+    if (scopedRule) {
+      const isRoleAllowed = this.matchesAnyRole(params.authorization.userRoles, scopedRule.anyRole)
+      return this.applyCustomPolicy(
+        {
+          authorization: params.authorization,
+          check: 'action',
+          scope: params.scope,
+          actionType: params.actionType,
+          id: params.id,
+          item: params.item,
+        },
+        isRoleAllowed,
+      )
+    }
+
+    const modelName = this.matrix.scopeModels[params.scope]
+    if (modelName) {
+      const rules = this.getEffectiveRules(modelName)
+      const direct = rules.actions?.[params.actionType]
+      const wildcard = rules.actions?.['*']
+      const selectedRule = direct ?? wildcard
+
+      if (selectedRule) {
+        const isRoleAllowed = this.matchesAnyRole(params.authorization.userRoles, selectedRule.anyRole)
+        return this.applyCustomPolicy(
+          {
+            authorization: params.authorization,
+            check: 'action',
+            modelName,
+            scope: params.scope,
+            actionType: params.actionType,
+            id: params.id,
+            item: params.item,
+          },
+          isRoleAllowed,
+        )
+      }
+
+      return this.canOperate({
+        authorization: params.authorization,
+        modelName,
+        operation: 'write',
+        id: params.id,
+        item: params.item,
+      })
+    }
+
+    return this.applyCustomPolicy(
+      {
+        authorization: params.authorization,
+        check: 'action',
+        scope: params.scope,
+        actionType: params.actionType,
+        id: params.id,
+        item: params.item,
+      },
+      !this.matrix.defaultDeny,
+    )
+  }
+
+  public canWriteOperation(
+    params: ModelPolicyParams & { operation: Exclude<Operation, 'read'> },
+  ): boolean {
+    return this.canOperate(params)
+  }
+
+  public canAccessAdminUi(params: ModelPolicyParams): boolean {
+    const rules = this.getEffectiveRules(params.modelName)
+    const adminRule = rules.adminUi
+    if (adminRule) {
+      const isRoleAllowed = this.matchesAnyRole(params.authorization.userRoles, adminRule.visibleFor)
+      return this.applyCustomPolicy(
+        {
+          authorization: params.authorization,
+          check: 'adminUi',
+          modelName: params.modelName,
+          id: params.id,
+          item: params.item,
+        },
+        isRoleAllowed,
+      )
+    }
+    return this.applyCustomPolicy(
+      {
+        authorization: params.authorization,
+        check: 'adminUi',
+        modelName: params.modelName,
+        id: params.id,
+        item: params.item,
+      },
+      !this.matrix.defaultDeny,
+    )
+  }
+
+  private canOperate(params: ModelPolicyParams & { operation: Operation }): boolean {
+    const rules = this.getEffectiveRules(params.modelName)
+    const selectedRule =
+      rules[params.operation] ??
+      (params.operation === 'create' || params.operation === 'update' || params.operation === 'delete'
+        ? rules.write
+        : undefined)
+
+    if (!selectedRule) {
+      return this.applyCustomPolicy(
+        {
+          authorization: params.authorization,
+          check: params.operation,
+          modelName: params.modelName,
+          operation: params.operation,
+          id: params.id,
+          item: params.item,
+        },
+        !this.matrix.defaultDeny,
+      )
+    }
+
+    const isRoleAllowed = this.matchesAnyRole(params.authorization.userRoles, selectedRule.anyRole)
+    return this.applyCustomPolicy(
+      {
+        authorization: params.authorization,
+        check: params.operation,
+        modelName: params.modelName,
+        operation: params.operation,
+        id: params.id,
+        item: params.item,
+      },
+      isRoleAllowed,
+    )
+  }
+
+  private applyCustomPolicy(params: PolicyContext, isRoleAllowed: boolean): boolean {
+    if (!isRoleAllowed) {
+      return false
+    }
+
+    const customDecision = this.evaluateCustomPolicy(params)
+    return customDecision ?? true
+  }
+
+  protected evaluateCustomPolicy(_params: PolicyContext): boolean | undefined {
+    // @custom-start:authorizationPolicyRowRules
+    return undefined
+    // @custom-end:authorizationPolicyRowRules
+  }
+
+  private getEffectiveRules(modelName: ModelName): RuleSet {
+    const modelRules = this.matrix.models[modelName] ?? {}
+    const schemaName = this.matrix.modelSchemas[modelName]
+    const schemaRules = schemaName ? (this.matrix.schemas[schemaName] ?? {}) : {}
+    return { ...schemaRules, ...modelRules }
+  }
+
+  private matchesAnyRole(userRoles: UserRoles, requiredRoles: string[]): boolean {
+    for (const role of userRoles) {
+      if (requiredRoles.includes(role)) {
+        return true
+      }
+    }
+    return false
+  }
+}
+`;
+}
+//# sourceMappingURL=authorization-policy-service.generator.js.map

package/dist/backend-actions/generators/authorization-policy-service.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-policy-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-policy-service.generator.ts"],"names":[],"mappings":";;AAwEA,gFAuSC;AA/WD,iDAAmD;AAwBnD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,UAAU,GAAG,KAAoB,CAAA;IACvC,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;IAC/B,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IACjC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACnC,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,UAAU,GAAG,KAAyB,CAAA;IAC5C,MAAM,MAAM,GAAqB,EAAE,CAAA;IAEnC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,SAAgB,kCAAkC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAiB;IAC1F,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;SACxE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;SACzB,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;SACnC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;SACxB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAElC,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC;SACtG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;SACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAA;IAClF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU;SACnC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,IAAI,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAA;IACtH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC;SACjG,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU;SACnC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAA;IACtE,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAkDL,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;;mBAE7B,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;;EAEjD,WAAW;;;EAGX,UAAU;;;EAGV,YAAY;;;EAGZ,UAAU;;;EAGV,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkLb,CAAA;AACD,CAAC"}

package/dist/backend-actions/generators/authorization-service.generator.d.ts

@@ -1,2 +1,2 @@
 import { ContextResult } from '../actions.generator';
-export declare function generateAuthorizationService({ actions, database, types }: ContextResult): string;
+export declare function generateAuthorizationService({ actions, types, schema }: ContextResult): string;

package/dist/backend-actions/generators/authorization-service.generator.js

@@ -2,31 +2,43 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateAuthorizationService = generateAuthorizationService;
 const generator_1 = require("@postxl/generator");
-function generateAuthorizationService({ actions, database, types }) {
+function generateAuthorizationService({ actions, types, schema }) {
     const imports = generator_1.ImportGenerator.from(actions.authorization.service.location)
-        .add(database.service)
+        .add(actions.authorization.policy)
         .addType(actions.summary.action)
-        .addType(types.user)
+        .addType(types.authorizationContext)
         .addType(actions.execution.interface);
     return /* ts */ `
 import { Injectable, Logger } from '@nestjs/common'
 
 ${imports.generate()}
 
-type AuthorizationContext = {
+type AuthorizeActionContext = AuthorizationContext & {
   action: Action
-  user: User
   execution: IActionExecution
 }
 
 @Injectable()
 export class ${actions.authorization.service.name} {
   private readonly _logger = new Logger(${actions.authorization.service.name}.name)
+  private static readonly SYSTEM_USER_ID = ${JSON.stringify(schema.systemUser.id ?? 'root')}
 
-  constructor(private readonly databaseService: DatabaseService) {}
+  constructor(private readonly authorizationPolicyService: ${actions.authorization.policy.name}) {}
 
-  public async authorizeAction({ action: _action, user: _user, execution: _execution }: AuthorizationContext): Promise<boolean> {
-    return Promise.resolve(true) // NOSONAR
+  public authorizeAction({ action, user, userRoles, execution: _execution }: AuthorizeActionContext): boolean {
+    if (user.id === ${actions.authorization.service.name}.SYSTEM_USER_ID) {
+      return true
+    }
+
+    const isAllowed = this.authorizationPolicyService.canRunAction({
+      authorization: { user, userRoles },
+      scope: action.scope,
+      actionType: action.type,
+    })
+    if (!isAllowed) {
+      this._logger.warn(\`Authorization denied for action scope/type "\${action.scope}.\${action.type}".\`)
+    }
+    return isAllowed
   }
 
 }

package/dist/backend-actions/generators/authorization-service.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-service.generator.ts"],"names":[],"mappings":";;AAIA,oEA8BC;AAlCD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IACtF,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;SACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACnB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAEvC,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;eASL,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;0CACP,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;;;;;;CAS3E,CAAA;AACD,CAAC"}
+{"version":3,"file":"authorization-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/authorization-service.generator.ts"],"names":[],"mappings":";;AAIA,oEA0CC;AA9CD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAiB;IACpF,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;SACjC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;SACnC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAEvC,OAAO,QAAQ,CAAC;;;EAGhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;eAQL,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;0CACP,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;6CAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,CAAC;;6DAE9B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;;;sBAGxE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;CAgBvD,CAAA;AACD,CAAC"}

package/dist/backend-actions/generators/dispatcher-service.generator.js

@@ -12,6 +12,7 @@ function generateDispatcher({ actions, database, types }) {
     imports.add(actions.summary.resultOfActionHelper);
     imports.add(actions.authorization.service);
     imports.addType(types.user);
+    imports.addType(types.userRoles);
     const injections = [];
     const executeMethods = [];
     if (actions.providers.length === 0) {
@@ -50,10 +51,16 @@ export class DispatcherService {
   public async dispatch<
     A extends Action,
     Result = ${actions.summary.resultOfActionHelper.name}<A, ${actions.summary.result.name}>
-  >({ action, user, migrationOrder }: { action: A; user: User; migrationOrder?: number }): Promise<Result> {
-    const execution = await this.actionExecutionFactory.create({ action, databaseService: this.databaseService, user, migrationOrder })
+  >({ action, user, userRoles = [], migrationOrder }: { action: A; user: User; userRoles?: UserRoles; migrationOrder?: number }): Promise<Result> {
+    const execution = await this.actionExecutionFactory.create({
+      action,
+      databaseService: this.databaseService,
+      user,
+      userRoles,
+      migrationOrder,
+    })
 
-    const isAuthorized = await this.authorizationService.authorizeAction({ action, user, execution })
+    const isAuthorized = this.authorizationService.authorizeAction({ action, user, userRoles, execution })
     if (!isAuthorized) {
       const message = \`User \${user.id} is not authorized to execute \${action.scope}.\${action.type}\`
       await execution.error(message)

package/dist/backend-actions/generators/dispatcher-service.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/dispatcher-service.generator.ts"],"names":[],"mappings":";;AAIA,gDAkGC;AAtGD,iDAAmD;AAInD,SAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IAC5E,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAE3B,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,CAAC,IAAI,CACjB;;KAED,CACA,CAAA;IACH,CAAC;IAED,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,UAAU,CAAC,IAAI,CACb,4BAA4B,OAAO,CAAC,IAAI,uBAAuB,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CACvG,CAAA;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC;gBACV,SAAS;wBACD,OAAO,CAAC,YAAY,qDAAqD,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;;;;EAIhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;MAYd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;eAKjB,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;eA0B3E,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;QAUlF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;CAOhC,CAAA;AACD,CAAC"}
+{"version":3,"file":"dispatcher-service.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/dispatcher-service.generator.ts"],"names":[],"mappings":";;AAIA,gDAyGC;AA7GD,iDAAmD;AAInD,SAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IAC5E,MAAM,OAAO,GAAG,2BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAEhC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,cAAc,CAAC,IAAI,CACjB;;KAED,CACA,CAAA;IACH,CAAC;IAED,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,UAAU,CAAC,IAAI,CACb,4BAA4B,OAAO,CAAC,IAAI,uBAAuB,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CACvG,CAAA;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC;gBACV,SAAS;wBACD,OAAO,CAAC,YAAY,qDAAqD,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;;;;EAIhB,OAAO,CAAC,QAAQ,EAAE;;;;;;;;;;;;MAYd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;eAKjB,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAgC3E,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;;;;;;;;;;QAUlF,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;CAOhC,CAAA;AACD,CAAC"}

package/dist/backend-actions/generators/execution-class.generator.js

@@ -15,7 +15,8 @@ function generateActionExecutionClass({ actions, database, types }) {
         .addType(execution.interface.actionOperationId)
         .add(execution.interface.toBrandedActionOperationId)
         .addType(types.modelNames)
-        .addType(types.user);
+        .addType(types.user)
+        .addType(types.userRoles);
     return /* ts */ `
 import { Injectable, Logger } from '@nestjs/common'
 import * as Prisma from '${database.prismaClient.location}'
@@ -42,17 +43,19 @@ export class ${execution.class.name} {
   public async create({
     action,
     user,
+    userRoles,
     databaseService,
     migrationOrder,
   }: {
     action: Action
     user: User
+    userRoles: UserRoles
     databaseService: DatabaseService
     migrationOrder?: number
   }): Promise<${execution.interface.name}> {
     const execution = new ${execution._internalName}(databaseService, this.config, _doNotInitializeFromOutside)
 
-    await execution.init({ action, user, migrationOrder })
+    await execution.init({ action, user, userRoles, migrationOrder })
     return execution
   }
 }
@@ -62,6 +65,7 @@ type InternalState =
       type: Prisma.ActionStatus
       dbAction: DbAction
       user: User
+      userRoles: UserRoles
     }
   | { type: 'NotInitialized' }
 
@@ -120,6 +124,13 @@ export class ${execution._internalName} implements ${execution.interface.name} {
     return this._state.user
   }
 
+  public get userRoles(): UserRoles {
+    if (this._state.type === 'NotInitialized') {
+      throw new Error('${execution._internalName} is not initialized yet')
+    }
+    return this._state.userRoles
+  }
+
   /**
    * Keeps track of all ActionOperations to quickly verify that any modification happens only to action operations that are in status "Started".
    */
@@ -146,7 +157,17 @@ export class ${execution._internalName} implements ${execution.interface.name} {
   /**
    * Asynchronously initializes the ${execution._internalName}.
    */
-  public async init({ action, user, migrationOrder }: { action: Action; user: User; migrationOrder?: number }) {
+  public async init({
+    action,
+    user,
+    userRoles,
+    migrationOrder,
+  }: {
+    action: Action
+    user: User
+    userRoles: UserRoles
+    migrationOrder?: number
+  }) {
     if (this._state.type !== 'NotInitialized') {
       throw new Error('${execution._internalName} can only be initialized once')
     }
@@ -165,7 +186,7 @@ export class ${execution._internalName} implements ${execution.interface.name} {
             migration_order: migrationOrder,
           },
         })
-      this._state = { type: 'Started', dbAction, user }
+      this._state = { type: 'Started', dbAction, user, userRoles }
       this.logger = new Logger(\`${execution._internalName} \${dbAction.id}\`)
     } catch (error) {
       this.logger.error(\`Error while initializing ${execution._internalName}:\`, error)

package/dist/backend-actions/generators/execution-class.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution-class.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/execution-class.generator.ts"],"names":[],"mappings":";;AAIA,oEA4iBC;AAhjBD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IACtF,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC7B,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC9B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;SACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;SAC5B,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC;SAC9C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC;SACnD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;SACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEtB,OAAO,QAAQ,CAAC;;2BAES,QAAQ,CAAC,YAAY,CAAC,QAAQ;;;;;EAKvD,OAAO,CAAC,QAAQ,EAAE;;;;;;;eAOL,SAAS,CAAC,KAAK,CAAC,IAAI;yCACM,OAAO,CAAC,MAAM,CAAC,IAAI;;;kBAG1C,SAAS,CAAC,aAAa;;kDAES,SAAS,CAAC,aAAa;;;;;;;;;;;;;gBAazD,SAAS,CAAC,SAAS,CAAC,IAAI;4BACZ,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA6C3C,SAAS,CAAC,aAAa;;uCAEQ,SAAS,CAAC,aAAa;;;eAG/C,SAAS,CAAC,aAAa,eAAe,SAAS,CAAC,SAAS,CAAC,IAAI;gCAC7C,SAAS,CAAC,aAAa;;;;;;yBAM9B,SAAS,CAAC,aAAa;;;;;;;;yBAQvB,SAAS,CAAC,aAAa;;;;;;;;;;;;;yBAavB,SAAS,CAAC,aAAa;;;;;;;+BAOjB,OAAO,CAAC,MAAM,CAAC,IAAI;;;wFAGsC,SAAS,CAAC,aAAa;;;;;;sCAMzE,SAAS,CAAC,aAAa;;;;yBAIpC,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;mCAkBb,SAAS,CAAC,aAAa;;qDAEL,SAAS,CAAC,aAAa;;;;;;iBAM3D,SAAS,CAAC,aAAa;;;;;yBAKf,SAAS,CAAC,aAAa;;;;;;;;;;;;;iBAa/B,SAAS,CAAC,aAAa;;;;;YAK5B,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;iBAiBlB,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;iBAUtB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;iBAU1B,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;;;;;iBActB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;;;iBAY1B,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;;;iBAYtB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;;;iBAY1B,SAAS,CAAC,KAAK,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0Bb,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC/B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;;;;;;;;;iBAYvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;;;;;;;;;iBAY3B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;iBAIvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;iBAI3B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;iBAIvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;iBAI3B,SAAS,CAAC,KAAK,CAAC,MAAM;;;;;;;;;;;;;;yBAcd,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4BtC,cAAc,CAAC,eAAe;;;6BAGX,cAAc,CAAC,aAAa;;;;;UAK/C,cAAc,CAAC,aAAa;;;;;;;;;2CASK,cAAc,CAAC,KAAK;;;mBAG5C,cAAc,CAAC,MAAM;;;mBAGrB,cAAc;;;;;iBAKhB,cAAc,CAAC,KAAK;;;;;;;;yBAQZ,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8B/B,cAAc,CAAC,MAAM;;;;;;;;yBAQb,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2B/B,cAAc;;yBAEN,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2B/C,CAAA;AACD,CAAC"}
+{"version":3,"file":"execution-class.generator.js","sourceRoot":"","sources":["../../../src/backend-actions/generators/execution-class.generator.ts"],"names":[],"mappings":";;AAIA,oEAikBC;AArkBD,iDAAmD;AAInD,SAAgB,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAiB;IACtF,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC7B,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,2BAAe;QAC7B,EAAE;SACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC9B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;SACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SACnB,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;SAC5B,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC;SAC9C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC;SACnD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;SACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;SACnB,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAE3B,OAAO,QAAQ,CAAC;;2BAES,QAAQ,CAAC,YAAY,CAAC,QAAQ;;;;;EAKvD,OAAO,CAAC,QAAQ,EAAE;;;;;;;eAOL,SAAS,CAAC,KAAK,CAAC,IAAI;yCACM,OAAO,CAAC,MAAM,CAAC,IAAI;;;kBAG1C,SAAS,CAAC,aAAa;;kDAES,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;gBAezD,SAAS,CAAC,SAAS,CAAC,IAAI;4BACZ,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8C3C,SAAS,CAAC,aAAa;;uCAEQ,SAAS,CAAC,aAAa;;;eAG/C,SAAS,CAAC,aAAa,eAAe,SAAS,CAAC,SAAS,CAAC,IAAI;gCAC7C,SAAS,CAAC,aAAa;;;;;;yBAM9B,SAAS,CAAC,aAAa;;;;;;;;yBAQvB,SAAS,CAAC,aAAa;;;;;;;yBAOvB,SAAS,CAAC,aAAa;;;;;;;;;;;;;yBAavB,SAAS,CAAC,aAAa;;;;;;;+BAOjB,OAAO,CAAC,MAAM,CAAC,IAAI;;;wFAGsC,SAAS,CAAC,aAAa;;;;;;sCAMzE,SAAS,CAAC,aAAa;;;;;;;;;;;;;;yBAcpC,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;mCAkBb,SAAS,CAAC,aAAa;;qDAEL,SAAS,CAAC,aAAa;;;;;;iBAM3D,SAAS,CAAC,aAAa;;;;;yBAKf,SAAS,CAAC,aAAa;;;;;;;;;;;;;iBAa/B,SAAS,CAAC,aAAa;;;;;YAK5B,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;iBAiBlB,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;iBAUtB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;iBAU1B,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;;;;;iBActB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;;;iBAY1B,SAAS,CAAC,MAAM,CAAC,KAAK;;;;;;;;;;;;iBAYtB,SAAS,CAAC,UAAU,CAAC,KAAK;;;;;;;;;;;;iBAY1B,SAAS,CAAC,KAAK,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0Bb,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC/B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;;;;;;;;;iBAYvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;;;;;;;;;iBAY3B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;iBAIvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;iBAI3B,SAAS,CAAC,MAAM,CAAC,MAAM;;;;iBAIvB,SAAS,CAAC,UAAU,CAAC,MAAM;;;;iBAI3B,SAAS,CAAC,KAAK,CAAC,MAAM;;;;;;;;;;;;;;yBAcd,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4BtC,cAAc,CAAC,eAAe;;;6BAGX,cAAc,CAAC,aAAa;;;;;UAK/C,cAAc,CAAC,aAAa;;;;;;;;;2CASK,cAAc,CAAC,KAAK;;;mBAG5C,cAAc,CAAC,MAAM;;;mBAGrB,cAAc;;;;;iBAKhB,cAAc,CAAC,KAAK;;;;;;;;yBAQZ,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8B/B,cAAc,CAAC,MAAM;;;;;;;;yBAQb,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2B/B,cAAc;;yBAEN,SAAS,CAAC,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2B/C,CAAA;AACD,CAAC"}