@rapidrest/service-core 1.0.0-beta.1

package/dist/lib/security/ACLRouteMongo.js

@@ -0,0 +1,194 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { AccessControlListMongo } from "./AccessControlListMongo.js";
+import { MongoRepository as Repo } from "../database/MongoRepository.js";
+import { ACLAction } from "./AccessControlList.js";
+import { ApiError, UserUtils } from "@rapidrest/core";
+import { DatabaseDecorators, DocDecorators, RouteDecorators } from "../decorators/index.js";
+import { ModelRoute } from "../routes/ModelRoute.js";
+import { RepoUtils } from "../models/index.js";
+import { ApiErrorMessages } from "../ApiErrors.js";
+const { MongoRepository } = DatabaseDecorators;
+const { Description, Returns, Summary, TypeInfo } = DocDecorators;
+const { Auth, Delete, Get, Head, Model, Param, Post, Put, Query, Request, Response, Route, User } = RouteDecorators;
+let ACLRouteMongo = class ACLRouteMongo extends ModelRoute {
+    constructor() {
+        super();
+        this.repoUtilsClass = RepoUtils;
+    }
+    /**
+     * The base key used to get or set data in the cache.
+     */
+    get baseCacheKey() {
+        return "db.cache.AccessControlList";
+    }
+    create(objs, req, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doCreate(objs, { user, recordEvent: true, req });
+    }
+    updateBulk(objs, req, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doBulkUpdate(objs, { user, recordEvent: true, req });
+    }
+    count(params, query, res, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doCount({ params, query, res, user });
+    }
+    findAll(params, query, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doFindAll({ params, query, user });
+    }
+    async delete(id, req, version, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        if (id.startsWith("default_")) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doDelete(id, { version, user, recordEvent: true, req });
+    }
+    async findById(id, query, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doFindById(id, { query, user });
+    }
+    async update(id, obj, req, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        if (id.startsWith("default_")) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        const acl = new AccessControlListMongo(obj);
+        return super.doUpdate(id, acl, { user, recordEvent: true, req });
+    }
+};
+__decorate([
+    MongoRepository(AccessControlListMongo),
+    __metadata("design:type", Repo)
+], ACLRouteMongo.prototype, "repo", void 0);
+__decorate([
+    Summary("Creates Access Control Lists."),
+    Description("Creates one or more access control lists."),
+    Auth(["jwt"]),
+    Post(),
+    TypeInfo([AccessControlListMongo, [Array, AccessControlListMongo]]),
+    Returns([AccessControlListMongo, [Array, AccessControlListMongo]]),
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "create", null);
+__decorate([
+    Summary("Bulk Update Access Control Lists."),
+    Description("Saves modifications for the given collection of access control lists."),
+    Auth(["jwt"]),
+    Put(),
+    TypeInfo([[Array, AccessControlListMongo]]),
+    Returns([[Array, AccessControlListMongo]]),
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Array, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "updateBulk", null);
+__decorate([
+    Summary("Count Access Control Lists."),
+    Description("Returns the total number of access control lists matching the given search criteria."),
+    Auth(["jwt"]),
+    Head(),
+    Returns([null]),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, Response),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "count", null);
+__decorate([
+    Summary("Find All Access Control Lists."),
+    Description("Returns a collection of access control lists matching the given search criteria."),
+    Auth(["jwt"]),
+    Get(),
+    Returns([[Array, AccessControlListMongo]]),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "findAll", null);
+__decorate([
+    Summary("Delete Access Control Lists by Id."),
+    Description("Deletes the access control list with the given unique identifier and optional version."),
+    Auth(["jwt"]),
+    Delete("/:id"),
+    Returns([null]),
+    __param(0, Param("id")),
+    __param(1, Request),
+    __param(2, Query("version")),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "delete", null);
+__decorate([
+    Summary("Find Access Control Lists by Id."),
+    Description("Returns the access control list with the given unique identifier."),
+    Auth(["jwt"]),
+    Get("/:id"),
+    Returns([AccessControlListMongo]),
+    __param(0, Param("id")),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "findById", null);
+__decorate([
+    Summary("Update Access Control Lists by Id."),
+    Description("Saves modifications to existing access control list with the given unique identifier."),
+    Auth(["jwt"]),
+    Put("/:id"),
+    Returns([AccessControlListMongo]),
+    __param(0, Param("id")),
+    __param(2, Request),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, AccessControlListMongo, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteMongo.prototype, "update", null);
+ACLRouteMongo = __decorate([
+    Model(AccessControlListMongo),
+    Route("/acls"),
+    __metadata("design:paramtypes", [])
+], ACLRouteMongo);
+export { ACLRouteMongo };
+//# sourceMappingURL=ACLRouteMongo.js.map

package/dist/lib/security/ACLRouteMongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ACLRouteMongo.js","sourceRoot":"","sources":["../../../src/security/ACLRouteMongo.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,IAAI,IAAI,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAW,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,MAAM,EAAE,eAAe,EAAE,GAAG,kBAAkB,CAAC;AAC/C,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;AAClE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC;AAI7G,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,UAAkC;IAMjE;QACI,KAAK,EAAE,CAAC;QAHO,mBAAc,GAAQ,SAAS,CAAC;IAInD,CAAC;IAED;;OAEG;IACH,IAAc,YAAY;QACtB,OAAO,4BAA4B,CAAC;IACxC,CAAC;IAQO,MAAM,CACV,IAAuD,EAC9C,GAAa,EAChB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAQO,UAAU,CACd,IAA8B,EACrB,GAAa,EAChB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAOO,KAAK,CACA,MAAW,EACX,KAAU,EACT,GAAc,EAClB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAOO,OAAO,CACF,MAAW,EACX,KAAU,EACb,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAOa,AAAN,KAAK,CAAC,MAAM,CACH,EAAU,EACd,GAAa,EACJ,OAAe,EAC3B,IAAc;QAEpB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;IAOa,AAAN,KAAK,CAAC,QAAQ,CACL,EAAU,EACd,KAAW,EACd,IAAU;QAEhB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAOa,AAAN,KAAK,CAAC,MAAM,CACH,EAAU,EACvB,GAA2B,EAClB,GAAa,EAChB,IAAc;QAEpB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,GAAG,GAA2B,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;CACJ,CAAA;AA7Ja;IADT,eAAe,CAAC,sBAAsB,CAAC;8BACvB,IAAI;2CAAyB;AAqBtC;IANP,OAAO,CAAC,+BAA+B,CAAC;IACxC,WAAW,CAAC,2CAA2C,CAAC;IACxD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IACN,QAAQ,CAAC,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAG9D,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;2CAMR;AAQO;IANP,OAAO,CAAC,mCAAmC,CAAC;IAC5C,WAAW,CAAC,uEAAuE,CAAC;IACpF,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,EAAE;IACL,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAGtC,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;+CAMR;AAOO;IALP,OAAO,CAAC,6BAA6B,CAAC;IACtC,WAAW,CAAC,sFAAsF,CAAC;IACnG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IACN,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAEX,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,CAAA;IACR,WAAA,IAAI,CAAA;;;;0CAOR;AAOO;IALP,OAAO,CAAC,gCAAgC,CAAC;IACzC,WAAW,CAAC,kFAAkF,CAAC;IAC/F,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,EAAE;IACL,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAEtC,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,IAAI,CAAA;;;;4CAOR;AAOa;IALb,OAAO,CAAC,oCAAoC,CAAC;IAC7C,WAAW,CAAC,wFAAwF,CAAC;IACrG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,MAAM,CAAC,MAAM,CAAC;IACd,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAEX,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,OAAO,CAAA;IACP,WAAA,KAAK,CAAC,SAAS,CAAC,CAAA;IAChB,WAAA,IAAI,CAAA;;;;2CAeR;AAOa;IALb,OAAO,CAAC,kCAAkC,CAAC;IAC3C,WAAW,CAAC,mEAAmE,CAAC;IAChF,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,CAAC,MAAM,CAAC;IACX,OAAO,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAE7B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,IAAI,CAAA;;;;6CAWR;AAOa;IALb,OAAO,CAAC,oCAAoC,CAAC;IAC7C,WAAW,CAAC,uFAAuF,CAAC;IACpG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,CAAC,MAAM,CAAC;IACX,OAAO,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAE7B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IAEX,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;6CAFA,sBAAsB;;2CAkB9B;AA9JQ,aAAa;IAFzB,KAAK,CAAC,sBAAsB,CAAC;IAC7B,KAAK,CAAC,OAAO,CAAC;;GACF,aAAa,CA+JzB"}

package/dist/lib/security/ACLRouteSQL.js

@@ -0,0 +1,193 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { AccessControlListSQL } from "./AccessControlListSQL.js";
+import { ACLAction } from "./AccessControlList.js";
+import { ApiError, UserUtils } from "@rapidrest/core";
+import { DatabaseDecorators, DocDecorators, RouteDecorators } from "../decorators/index.js";
+import { ModelRoute } from "../routes/ModelRoute.js";
+import { RepoUtils } from "../models/index.js";
+import { ApiErrorMessages } from "../ApiErrors.js";
+const { Repository } = DatabaseDecorators;
+const { Description, Returns, TypeInfo, Summary } = DocDecorators;
+const { Auth, Delete, Get, Head, Model, Param, Post, Put, Query, Request, Response, Route, User } = RouteDecorators;
+let ACLRouteSQL = class ACLRouteSQL extends ModelRoute {
+    constructor() {
+        super();
+        this.repoUtilsClass = RepoUtils;
+    }
+    /**
+     * The base key used to get or set data in the cache.
+     */
+    get baseCacheKey() {
+        return "db.cache.AccessControlList";
+    }
+    create(objs, req, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doCreate(objs, { user, recordEvent: true, req });
+    }
+    updateBulk(objs, req, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doBulkUpdate(objs, { user, recordEvent: true, req });
+    }
+    count(params, query, res, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doCount({ params, query, res, user });
+    }
+    findAll(params, query, user) {
+        if (!user || !UserUtils.hasRoles(user, this.config.get("trusted_roles"))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doFindAll({ params, query, user });
+    }
+    async delete(id, req, version, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        if (id.startsWith("default_")) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doDelete(id, { version, user, recordEvent: true, req });
+    }
+    async findById(id, query, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        return super.doFindById(id, { query, user });
+    }
+    async update(id, obj, req, user) {
+        if (!user ||
+            (!UserUtils.hasRoles(user, this.config.get("trusted_roles")) &&
+                !(await this.aclUtils?.hasPermission(user, id, ACLAction.FULL)))) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        if (id.startsWith("default_")) {
+            throw new ApiError(ApiErrorMessages.AUTH_PERMISSION_FAILURE, 403, ApiErrorMessages.AUTH_PERMISSION_FAILURE);
+        }
+        const acl = new AccessControlListSQL(obj);
+        return super.doUpdate(id, acl, { user, recordEvent: true, req });
+    }
+};
+__decorate([
+    Repository(AccessControlListSQL),
+    __metadata("design:type", Function)
+], ACLRouteSQL.prototype, "repo", void 0);
+__decorate([
+    Summary("Creates Access Control Lists."),
+    Description("Creates one or more access control lists."),
+    Auth(["jwt"]),
+    Post(),
+    TypeInfo([AccessControlListSQL, [Array, AccessControlListSQL]]),
+    Returns([AccessControlListSQL, [Array, AccessControlListSQL]]),
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "create", null);
+__decorate([
+    Summary("Bulk Update Access Control Lists."),
+    Description("Saves modifications for the given collection of access control lists."),
+    Auth(["jwt"]),
+    Put(),
+    TypeInfo([[Array, AccessControlListSQL]]),
+    Returns([[Array, AccessControlListSQL]]),
+    __param(1, Request),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Array, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "updateBulk", null);
+__decorate([
+    Summary("Count Access Control Lists."),
+    Description("Returns the total number of access control lists matching the given search criteria."),
+    Auth(["jwt"]),
+    Head(),
+    Returns([null]),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, Response),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "count", null);
+__decorate([
+    Summary("Find All Access Control Lists."),
+    Description("Returns a collection of access control lists matching the given search criteria."),
+    Auth(["jwt"]),
+    Get(),
+    Returns([Array, AccessControlListSQL]),
+    __param(0, Param()),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "findAll", null);
+__decorate([
+    Summary("Delete Access Control Lists by Id."),
+    Description("Deletes the access control list with the given unique identifier and optional version."),
+    Auth(["jwt"]),
+    Delete("/:id"),
+    Returns([null]),
+    __param(0, Param("id")),
+    __param(1, Request),
+    __param(2, Query("version")),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "delete", null);
+__decorate([
+    Summary("Find Access Control Lists by Id."),
+    Description("Returns the access control list with the given unique identifier."),
+    Auth(["jwt"]),
+    Get("/:id"),
+    Returns([AccessControlListSQL]),
+    __param(0, Param("id")),
+    __param(1, Query()),
+    __param(2, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "findById", null);
+__decorate([
+    Summary("Update Access Control Lists by Id."),
+    Description("Saves modifications to existing access control list with the given unique identifier."),
+    Auth(["jwt"]),
+    Put("/:id"),
+    Returns([AccessControlListSQL]),
+    __param(0, Param("id")),
+    __param(2, Request),
+    __param(3, User),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, AccessControlListSQL, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ACLRouteSQL.prototype, "update", null);
+ACLRouteSQL = __decorate([
+    Model(AccessControlListSQL),
+    Route("/acls"),
+    __metadata("design:paramtypes", [])
+], ACLRouteSQL);
+export { ACLRouteSQL };
+//# sourceMappingURL=ACLRouteSQL.js.map

package/dist/lib/security/ACLRouteSQL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ACLRouteSQL.js","sourceRoot":"","sources":["../../../src/security/ACLRouteSQL.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAW,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,MAAM,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;AAC1C,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;AAClE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC;AAI7G,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,UAAgC;IAM7D;QACI,KAAK,EAAE,CAAC;QAHO,mBAAc,GAAQ,SAAS,CAAC;IAInD,CAAC;IAED;;OAEG;IACH,IAAc,YAAY;QACtB,OAAO,4BAA4B,CAAC;IACxC,CAAC;IAQO,MAAM,CACV,IAAmD,EAC1C,GAAa,EAChB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAQO,UAAU,CACd,IAA4B,EACnB,GAAa,EAChB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAOO,KAAK,CACA,MAAW,EACX,KAAU,EACT,GAAc,EAClB,IAAc;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAOO,OAAO,CAAU,MAAW,EAAW,KAAU,EAAQ,IAAc;QAC3E,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAOa,AAAN,KAAK,CAAC,MAAM,CACH,EAAU,EACd,GAAa,EACJ,OAAe,EAC3B,IAAc;QAEpB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;IAOa,AAAN,KAAK,CAAC,QAAQ,CACL,EAAU,EACd,KAAW,EACd,IAAU;QAEhB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAOa,AAAN,KAAK,CAAC,MAAM,CACH,EAAU,EACvB,GAAyB,EAChB,GAAa,EAChB,IAAc;QAEpB,IACI,CAAC,IAAI;YACL,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACxD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EACtE,CAAC;YACC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,GAAG,GAAyB,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;CACJ,CAAA;AAzJa;IADT,UAAU,CAAC,oBAAoB,CAAC;;yCACW;AAqBpC;IANP,OAAO,CAAC,+BAA+B,CAAC;IACxC,WAAW,CAAC,2CAA2C,CAAC;IACxD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IACN,QAAQ,CAAC,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAG1D,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;yCAMR;AAQO;IANP,OAAO,CAAC,mCAAmC,CAAC;IAC5C,WAAW,CAAC,uEAAuE,CAAC;IACpF,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,EAAE;IACL,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAGpC,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;;;6CAMR;AAOO;IALP,OAAO,CAAC,6BAA6B,CAAC;IACtC,WAAW,CAAC,sFAAsF,CAAC;IACnG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,IAAI,EAAE;IACN,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAEX,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,CAAA;IACR,WAAA,IAAI,CAAA;;;;wCAOR;AAOO;IALP,OAAO,CAAC,gCAAgC,CAAC;IACzC,WAAW,CAAC,kFAAkF,CAAC;IAC/F,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,EAAE;IACL,OAAO,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtB,WAAA,KAAK,EAAE,CAAA;IAAe,WAAA,KAAK,EAAE,CAAA;IAAc,WAAA,IAAI,CAAA;;;;0CAM/D;AAOa;IALb,OAAO,CAAC,oCAAoC,CAAC;IAC7C,WAAW,CAAC,wFAAwF,CAAC;IACrG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,MAAM,CAAC,MAAM,CAAC;IACd,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;IAEX,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,OAAO,CAAA;IACP,WAAA,KAAK,CAAC,SAAS,CAAC,CAAA;IAChB,WAAA,IAAI,CAAA;;;;yCAeR;AAOa;IALb,OAAO,CAAC,kCAAkC,CAAC;IAC3C,WAAW,CAAC,mEAAmE,CAAC;IAChF,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,CAAC,MAAM,CAAC;IACX,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAE3B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,IAAI,CAAA;;;;2CAWR;AAOa;IALb,OAAO,CAAC,oCAAoC,CAAC;IAC7C,WAAW,CAAC,uFAAuF,CAAC;IACpG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,GAAG,CAAC,MAAM,CAAC;IACX,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAE3B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IAEX,WAAA,OAAO,CAAA;IACP,WAAA,IAAI,CAAA;;6CAFA,oBAAoB;;yCAkB5B;AA1JQ,WAAW;IAFvB,KAAK,CAAC,oBAAoB,CAAC;IAC3B,KAAK,CAAC,OAAO,CAAC;;GACF,WAAW,CA2JvB"}