@resistdesign/voltra 3.0.0-alpha.3 → 3.0.0-alpha.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +75 -0
- package/SearchTypes-DjN6YQzE.d.ts +577 -0
- package/Types-C7XjUjoF.d.ts +240 -0
- package/Validation-CFP59oIP.d.ts +226 -0
- package/api/index.d.ts +6 -0
- package/api/index.js +7968 -0
- package/app/index.d.ts +5 -0
- package/app/index.js +810 -0
- package/common/Testing/CLI.js +432 -0
- package/common/index.d.ts +4 -0
- package/common/index.js +1760 -0
- package/iac/index.d.ts +2 -0
- package/iac/index.js +1661 -0
- package/iac/packs/index.d.ts +1 -0
- package/iac/packs/index.js +1620 -0
- package/index-BkFZlfit.d.ts +112 -0
- package/index-C3-iD9Mh.d.ts +690 -0
- package/index-DZ2BB4iX.d.ts +5357 -0
- package/{src/iac/types/IaCTypes.d.ts → index-DcvJOZ_c.d.ts} +1018 -23
- package/index-IokxSNxm.d.ts +745 -0
- package/index.d.ts +13 -0
- package/index.js +10973 -0
- package/package.json +40 -41
- package/src/api/DataAccessControl.d.ts +0 -85
- package/src/api/DataAccessControl.js +0 -159
- package/src/api/ORM/DACUtils.d.ts +0 -60
- package/src/api/ORM/DACUtils.js +0 -197
- package/src/api/ORM/ListItemUtils.d.ts +0 -7
- package/src/api/ORM/ListItemUtils.js +0 -22
- package/src/api/ORM/ORMRouteMap.d.ts +0 -19
- package/src/api/ORM/ORMRouteMap.js +0 -82
- package/src/api/ORM/TypeInfoORMService.d.ts +0 -103
- package/src/api/ORM/TypeInfoORMService.js +0 -581
- package/src/api/ORM/drivers/DynamoDBDataItemDBDriver/ConfigTypes.d.ts +0 -63
- package/src/api/ORM/drivers/DynamoDBDataItemDBDriver/ConfigTypes.js +0 -2
- package/src/api/ORM/drivers/DynamoDBDataItemDBDriver.d.ts +0 -36
- package/src/api/ORM/drivers/DynamoDBDataItemDBDriver.js +0 -282
- package/src/api/ORM/drivers/S3FileItemDBDriver/ConfigTypes.d.ts +0 -90
- package/src/api/ORM/drivers/S3FileItemDBDriver/ConfigTypes.js +0 -2
- package/src/api/ORM/drivers/S3FileItemDBDriver/S3FileDriver.d.ts +0 -45
- package/src/api/ORM/drivers/S3FileItemDBDriver/S3FileDriver.js +0 -127
- package/src/api/ORM/drivers/S3FileItemDBDriver.d.ts +0 -44
- package/src/api/ORM/drivers/S3FileItemDBDriver.js +0 -182
- package/src/api/ORM/drivers/common/SupportedTypeInfoORMDBDrivers.d.ts +0 -12
- package/src/api/ORM/drivers/common/SupportedTypeInfoORMDBDrivers.js +0 -20
- package/src/api/ORM/drivers/common/Types.d.ts +0 -77
- package/src/api/ORM/drivers/common/Types.js +0 -14
- package/src/api/ORM/drivers/common/index.d.ts +0 -2
- package/src/api/ORM/drivers/common/index.js +0 -18
- package/src/api/ORM/drivers/index.d.ts +0 -3
- package/src/api/ORM/drivers/index.js +0 -19
- package/src/api/ORM/index.d.ts +0 -4
- package/src/api/ORM/index.js +0 -43
- package/src/api/Router/AWS.d.ts +0 -26
- package/src/api/Router/AWS.js +0 -76
- package/src/api/Router/Auth.d.ts +0 -2
- package/src/api/Router/Auth.js +0 -9
- package/src/api/Router/CORS.d.ts +0 -6
- package/src/api/Router/CORS.js +0 -27
- package/src/api/Router/Types.d.ts +0 -71
- package/src/api/Router/Types.js +0 -2
- package/src/api/Router/index.d.ts +0 -18
- package/src/api/Router/index.js +0 -145
- package/src/api/index.d.ts +0 -3
- package/src/api/index.js +0 -39
- package/src/app/index.d.ts +0 -1
- package/src/app/index.js +0 -37
- package/src/app/utils/ApplicationState.d.ts +0 -52
- package/src/app/utils/ApplicationState.js +0 -86
- package/src/app/utils/ApplicationStateLoader.d.ts +0 -46
- package/src/app/utils/ApplicationStateLoader.js +0 -57
- package/src/app/utils/Controller.d.ts +0 -4
- package/src/app/utils/Controller.js +0 -47
- package/src/app/utils/Debug.d.ts +0 -4
- package/src/app/utils/Debug.js +0 -30
- package/src/app/utils/EasyLayout.d.ts +0 -49
- package/src/app/utils/EasyLayout.js +0 -122
- package/src/app/utils/Route.d.ts +0 -28
- package/src/app/utils/Route.js +0 -102
- package/src/app/utils/Service.d.ts +0 -12
- package/src/app/utils/Service.js +0 -34
- package/src/app/utils/TypeInfoORMAPIUtils.d.ts +0 -20
- package/src/app/utils/TypeInfoORMAPIUtils.js +0 -62
- package/src/app/utils/TypeInfoORMClient.d.ts +0 -24
- package/src/app/utils/TypeInfoORMClient.js +0 -69
- package/src/app/utils/index.d.ts +0 -8
- package/src/app/utils/index.js +0 -24
- package/src/common/CommandLine/collectRequiredEnvironmentVariables.d.ts +0 -1
- package/src/common/CommandLine/collectRequiredEnvironmentVariables.js +0 -16
- package/src/common/HelperTypes.d.ts +0 -3
- package/src/common/HelperTypes.js +0 -2
- package/src/common/IdGeneration/getSimpleId.d.ts +0 -4
- package/src/common/IdGeneration/getSimpleId.js +0 -16
- package/src/common/IdGeneration/index.d.ts +0 -1
- package/src/common/IdGeneration/index.js +0 -17
- package/src/common/ItemRelationshipInfoTypes.d.ts +0 -46
- package/src/common/ItemRelationshipInfoTypes.js +0 -20
- package/src/common/ItemRelationships/ItemRelationshipValidation.d.ts +0 -10
- package/src/common/ItemRelationships/ItemRelationshipValidation.js +0 -43
- package/src/common/ItemRelationships/index.d.ts +0 -1
- package/src/common/ItemRelationships/index.js +0 -17
- package/src/common/Logging/Utils.d.ts +0 -10
- package/src/common/Logging/Utils.js +0 -33
- package/src/common/Logging/index.d.ts +0 -1
- package/src/common/Logging/index.js +0 -17
- package/src/common/Routing.d.ts +0 -25
- package/src/common/Routing.js +0 -102
- package/src/common/SearchTypes.d.ts +0 -98
- package/src/common/SearchTypes.js +0 -39
- package/src/common/SearchUtils.d.ts +0 -22
- package/src/common/SearchUtils.js +0 -134
- package/src/common/SearchValidation.d.ts +0 -17
- package/src/common/SearchValidation.js +0 -90
- package/src/common/Storyboarding/Types.d.ts +0 -25
- package/src/common/Storyboarding/Types.js +0 -2
- package/src/common/StringTransformers.d.ts +0 -17
- package/src/common/StringTransformers.js +0 -36
- package/src/common/Testing/CLI.d.ts +0 -2
- package/src/common/Testing/CLI.js +0 -56
- package/src/common/Testing/Types.d.ts +0 -117
- package/src/common/Testing/Types.js +0 -19
- package/src/common/Testing/Utils.d.ts +0 -48
- package/src/common/Testing/Utils.js +0 -334
- package/src/common/Testing/index.d.ts +0 -2
- package/src/common/Testing/index.js +0 -18
- package/src/common/TypeInfoDataItemUtils.d.ts +0 -10
- package/src/common/TypeInfoDataItemUtils.js +0 -55
- package/src/common/TypeInfoORM/Types.d.ts +0 -76
- package/src/common/TypeInfoORM/Types.js +0 -55
- package/src/common/TypeInfoORM/index.d.ts +0 -1
- package/src/common/TypeInfoORM/index.js +0 -17
- package/src/common/TypeParsing/Constants.d.ts +0 -1
- package/src/common/TypeParsing/Constants.js +0 -4
- package/src/common/TypeParsing/ParsingUtils/Constants.d.ts +0 -5
- package/src/common/TypeParsing/ParsingUtils/Constants.js +0 -8
- package/src/common/TypeParsing/ParsingUtils/checkType.d.ts +0 -8
- package/src/common/TypeParsing/ParsingUtils/checkType.js +0 -46
- package/src/common/TypeParsing/ParsingUtils/checkUnionType.d.ts +0 -6
- package/src/common/TypeParsing/ParsingUtils/checkUnionType.js +0 -15
- package/src/common/TypeParsing/ParsingUtils/extractCommentTags.d.ts +0 -2
- package/src/common/TypeParsing/ParsingUtils/extractCommentTags.js +0 -105
- package/src/common/TypeParsing/ParsingUtils/extractLiteralValues.d.ts +0 -6
- package/src/common/TypeParsing/ParsingUtils/extractLiteralValues.js +0 -42
- package/src/common/TypeParsing/ParsingUtils/extractTypeDetails.d.ts +0 -8
- package/src/common/TypeParsing/ParsingUtils/extractTypeDetails.js +0 -14
- package/src/common/TypeParsing/ParsingUtils/getPrimaryFieldForTypeInfo.d.ts +0 -5
- package/src/common/TypeParsing/ParsingUtils/getPrimaryFieldForTypeInfo.js +0 -27
- package/src/common/TypeParsing/ParsingUtils/getTypeInfo.d.ts +0 -3
- package/src/common/TypeParsing/ParsingUtils/getTypeInfo.js +0 -27
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoField.d.ts +0 -3
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoField.js +0 -44
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromAliasType.d.ts +0 -4
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromAliasType.js +0 -28
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromFieldFilter.d.ts +0 -4
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromFieldFilter.js +0 -105
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromTypeAlias.d.ts +0 -4
- package/src/common/TypeParsing/ParsingUtils/getTypeInfoFromTypeAlias.js +0 -20
- package/src/common/TypeParsing/ParsingUtils/getTypeKeyword.d.ts +0 -3
- package/src/common/TypeParsing/ParsingUtils/getTypeKeyword.js +0 -17
- package/src/common/TypeParsing/ParsingUtils/getUnionOrIntersectionTypeInfo.d.ts +0 -4
- package/src/common/TypeParsing/ParsingUtils/getUnionOrIntersectionTypeInfo.js +0 -49
- package/src/common/TypeParsing/ParsingUtils/getUnionOrLiteralStringValues.d.ts +0 -2
- package/src/common/TypeParsing/ParsingUtils/getUnionOrLiteralStringValues.js +0 -24
- package/src/common/TypeParsing/TypeInfo.d.ts +0 -142
- package/src/common/TypeParsing/TypeInfo.js +0 -13
- package/src/common/TypeParsing/TypeMapping.d.ts +0 -9
- package/src/common/TypeParsing/TypeMapping.js +0 -32
- package/src/common/TypeParsing/TypeParsing.d.ts +0 -5
- package/src/common/TypeParsing/TypeParsing.js +0 -39
- package/src/common/TypeParsing/Utils.d.ts +0 -21
- package/src/common/TypeParsing/Utils.js +0 -94
- package/src/common/TypeParsing/Validation.d.ts +0 -92
- package/src/common/TypeParsing/Validation.js +0 -340
- package/src/common/TypeParsing/index.d.ts +0 -5
- package/src/common/TypeParsing/index.js +0 -44
- package/src/common/index.d.ts +0 -11
- package/src/common/index.js +0 -47
- package/src/iac/SimpleCFT.d.ts +0 -48
- package/src/iac/SimpleCFT.js +0 -82
- package/src/iac/index.d.ts +0 -9
- package/src/iac/index.js +0 -48
- package/src/iac/packs/auth/user-management.d.ts +0 -14
- package/src/iac/packs/auth/user-management.js +0 -302
- package/src/iac/packs/auth.d.ts +0 -19
- package/src/iac/packs/auth.js +0 -47
- package/src/iac/packs/build/utils.d.ts +0 -100
- package/src/iac/packs/build/utils.js +0 -23
- package/src/iac/packs/build.d.ts +0 -29
- package/src/iac/packs/build.js +0 -217
- package/src/iac/packs/cdn.d.ts +0 -12
- package/src/iac/packs/cdn.js +0 -126
- package/src/iac/packs/cloud-function.d.ts +0 -17
- package/src/iac/packs/cloud-function.js +0 -69
- package/src/iac/packs/database.d.ts +0 -29
- package/src/iac/packs/database.js +0 -27
- package/src/iac/packs/dns.d.ts +0 -13
- package/src/iac/packs/dns.js +0 -26
- package/src/iac/packs/file-storage.d.ts +0 -14
- package/src/iac/packs/file-storage.js +0 -71
- package/src/iac/packs/gateway.d.ts +0 -27
- package/src/iac/packs/gateway.js +0 -342
- package/src/iac/packs/index.d.ts +0 -11
- package/src/iac/packs/index.js +0 -27
- package/src/iac/packs/repo.d.ts +0 -10
- package/src/iac/packs/repo.js +0 -34
- package/src/iac/packs/ssl-certificate.d.ts +0 -10
- package/src/iac/packs/ssl-certificate.js +0 -36
- package/src/iac/types/CloudFormationResourceSpecification.d.ts +0 -2
- package/src/iac/types/Constants.d.ts +0 -9
- package/src/iac/types/Constants.js +0 -20
- package/src/iac/types/IaCTypes.js +0 -14
- package/src/iac/types/Renderers.d.ts +0 -12
- package/src/iac/types/Renderers.js +0 -112
- package/src/iac/types/Types.d.ts +0 -37
- package/src/iac/types/Types.js +0 -2
- package/src/iac/types/Utils.d.ts +0 -2
- package/src/iac/types/Utils.js +0 -60
- package/src/iac/types/generate.d.ts +0 -1
- package/src/iac/types/generate.js +0 -31
- package/src/iac/utils/index.d.ts +0 -36
- package/src/iac/utils/index.js +0 -105
- package/src/iac/utils/patch-utils.d.ts +0 -15
- package/src/iac/utils/patch-utils.js +0 -62
- package/src/index.d.ts +0 -178
- package/src/index.js +0 -214
package/package.json
CHANGED
|
@@ -1,41 +1,61 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@resistdesign/voltra",
|
|
3
|
-
"version": "3.0.0-alpha.
|
|
3
|
+
"version": "3.0.0-alpha.4",
|
|
4
4
|
"description": "With our powers combined!",
|
|
5
5
|
"homepage": "https://voltra.app",
|
|
6
6
|
"repository": "git@github.com:resistdesign/voltra.git",
|
|
7
7
|
"author": "Resist Design",
|
|
8
8
|
"license": "MIT",
|
|
9
|
+
"type": "module",
|
|
10
|
+
"main": "./index.js",
|
|
11
|
+
"types": "./index.d.ts",
|
|
9
12
|
"bin": {
|
|
10
|
-
"vest": "
|
|
13
|
+
"vest": "common/Testing/CLI.js"
|
|
14
|
+
},
|
|
15
|
+
"exports": {
|
|
16
|
+
".": {
|
|
17
|
+
"types": "./index.d.ts",
|
|
18
|
+
"import": "./index.js"
|
|
19
|
+
},
|
|
20
|
+
"./api": {
|
|
21
|
+
"types": "./api/index.d.ts",
|
|
22
|
+
"import": "./api/index.js"
|
|
23
|
+
},
|
|
24
|
+
"./app": {
|
|
25
|
+
"types": "./app/index.d.ts",
|
|
26
|
+
"import": "./app/index.js"
|
|
27
|
+
},
|
|
28
|
+
"./common": {
|
|
29
|
+
"types": "./common/index.d.ts",
|
|
30
|
+
"import": "./common/index.js"
|
|
31
|
+
},
|
|
32
|
+
"./iac": {
|
|
33
|
+
"types": "./iac/index.d.ts",
|
|
34
|
+
"import": "./iac/index.js"
|
|
35
|
+
},
|
|
36
|
+
"./iac/packs": {
|
|
37
|
+
"types": "./iac/packs/index.d.ts",
|
|
38
|
+
"import": "./iac/packs/index.js"
|
|
39
|
+
}
|
|
11
40
|
},
|
|
12
41
|
"files": [
|
|
13
|
-
"
|
|
42
|
+
"*.d.ts",
|
|
43
|
+
"*.d.ts.map",
|
|
44
|
+
"index.js",
|
|
45
|
+
"api/**",
|
|
46
|
+
"app/**",
|
|
47
|
+
"common/**",
|
|
48
|
+
"iac/**",
|
|
14
49
|
"README.md",
|
|
15
|
-
"package.json"
|
|
16
|
-
"!src/iac/types/CloudFormationResourceSpecification.js"
|
|
50
|
+
"package.json"
|
|
17
51
|
],
|
|
18
|
-
"scripts": {
|
|
19
|
-
"build": "tsc && yarn prep-dist",
|
|
20
|
-
"test": "ts-node src/common/Testing/CLI.ts ./src/**/*.spec.json",
|
|
21
|
-
"test:gen": "ts-node src/common/Testing/CLI.ts --generate ./src/**/*.spec.json",
|
|
22
|
-
"doc": "typedoc",
|
|
23
|
-
"doc:dev": "typedoc --watch",
|
|
24
|
-
"doc-to-site": "cp -r ./docs site-dist/app/",
|
|
25
|
-
"prep-dist": "cp package.json dist/ && cp README.md dist/ && cp .npmignore dist/",
|
|
26
|
-
"site:build:app": "astro build && yarn finalize-site",
|
|
27
|
-
"site:build:api": "node ./site/build-api.mjs",
|
|
28
|
-
"site:build:iac": "ts-node ./site/iac/index.ts",
|
|
29
|
-
"start": "astro dev --host docs-local.demo.voltra.app --https",
|
|
30
|
-
"finalize-site": "yarn doc && yarn doc-to-site && cp CNAME site-dist/app/",
|
|
31
|
-
"iac:types:gen": "ts-node ./src/iac/types/generate.ts"
|
|
32
|
-
},
|
|
33
52
|
"dependencies": {
|
|
34
53
|
"@aws-sdk/client-dynamodb": "^3.490.0",
|
|
35
54
|
"@aws-sdk/client-s3": "^3.490.0",
|
|
36
55
|
"@aws-sdk/s3-request-presigner": "^3.490.0",
|
|
37
56
|
"@aws-sdk/util-dynamodb": "^3.490.0",
|
|
38
57
|
"@fontsource/montserrat-subrayada": "^5.2.5",
|
|
58
|
+
"@noble/hashes": "^2.0.1",
|
|
39
59
|
"@picocss/pico": "^2.1.1",
|
|
40
60
|
"ace-builds": "^1.32.3",
|
|
41
61
|
"fast-glob": "^3.3.3",
|
|
@@ -44,29 +64,8 @@
|
|
|
44
64
|
"react-ace": "^10.1.0",
|
|
45
65
|
"react-dom": "^18.3.1",
|
|
46
66
|
"styled-components": "^6.1.8",
|
|
47
|
-
"ts-node": "^10.9.2",
|
|
48
67
|
"typescript": "^5.3.3",
|
|
49
68
|
"uuid": "^11.0.3",
|
|
50
69
|
"yaml": "^2.3.4"
|
|
51
|
-
},
|
|
52
|
-
"devDependencies": {
|
|
53
|
-
"@astrojs/react": "^4.3.1",
|
|
54
|
-
"@types/cfn-response": "^1.0.8",
|
|
55
|
-
"@types/node": "^20.11.6",
|
|
56
|
-
"@types/react-dom": "^18.3.0",
|
|
57
|
-
"@types/styled-components": "^5.1.34",
|
|
58
|
-
"@vitejs/plugin-basic-ssl": "^2.1.0",
|
|
59
|
-
"astro": "^5.13.5",
|
|
60
|
-
"aws-lambda": "^1.0.7",
|
|
61
|
-
"aws-sdk": "^2.1545.0",
|
|
62
|
-
"buffer": "^5.5.0||^6.0.0",
|
|
63
|
-
"cfn-response": "^1.0.1",
|
|
64
|
-
"esbuild": "^0.25.9",
|
|
65
|
-
"prettier": "^3.6.2",
|
|
66
|
-
"process": "^0.11.10",
|
|
67
|
-
"svgo": "^3",
|
|
68
|
-
"ts-morph": "^24.0.0",
|
|
69
|
-
"typedoc": "^0.25.8",
|
|
70
|
-
"typedoc-material-theme": "^1.0.2"
|
|
71
70
|
}
|
|
72
71
|
}
|
|
@@ -1,85 +0,0 @@
|
|
|
1
|
-
import { LiteralValue } from "../common/TypeParsing/TypeInfo";
|
|
2
|
-
/**
|
|
3
|
-
* The possible types of a data access control (DAC) constraint.
|
|
4
|
-
* */
|
|
5
|
-
export declare enum DACConstraintType {
|
|
6
|
-
ALLOW = "ALLOW",
|
|
7
|
-
DENY = "DENY"
|
|
8
|
-
}
|
|
9
|
-
/**
|
|
10
|
-
* A data access control (DAC) constraint.
|
|
11
|
-
* */
|
|
12
|
-
export type DACConstraint = {
|
|
13
|
-
type: DACConstraintType;
|
|
14
|
-
resourcePath: LiteralValue[];
|
|
15
|
-
pathIsPrefix?: boolean;
|
|
16
|
-
};
|
|
17
|
-
/**
|
|
18
|
-
* The primary properties for a data access control (DAC) role.
|
|
19
|
-
* */
|
|
20
|
-
export type BaseDACRole = {
|
|
21
|
-
childRoleIds?: string[];
|
|
22
|
-
constraints: DACConstraint[];
|
|
23
|
-
};
|
|
24
|
-
/**
|
|
25
|
-
* A data access control (DAC) role which has been stored and can be accessed by an `id`.
|
|
26
|
-
* */
|
|
27
|
-
export type DACRole = {
|
|
28
|
-
id: string;
|
|
29
|
-
} & BaseDACRole;
|
|
30
|
-
/**
|
|
31
|
-
* The result of a data access control (DAC) check.
|
|
32
|
-
* */
|
|
33
|
-
export type DACAccessResult = {
|
|
34
|
-
allowed: boolean;
|
|
35
|
-
denied: boolean;
|
|
36
|
-
};
|
|
37
|
-
/**
|
|
38
|
-
* The result of a data access control (DAC) check for a data item.
|
|
39
|
-
* */
|
|
40
|
-
export type DACDataItemResourceAccessResultMap = DACAccessResult & {
|
|
41
|
-
fieldsResources?: Record<string, DACAccessResult>;
|
|
42
|
-
};
|
|
43
|
-
/**
|
|
44
|
-
* The result of matching a DAC path to a resource path.
|
|
45
|
-
* */
|
|
46
|
-
export type DACPathMatchResults = {
|
|
47
|
-
prefixMatch: boolean;
|
|
48
|
-
exactMatch: boolean;
|
|
49
|
-
};
|
|
50
|
-
/**
|
|
51
|
-
* The prototype of a DAC wildcard signifier.
|
|
52
|
-
* */
|
|
53
|
-
export declare const WILDCARD_SIGNIFIER_PROTOTYPE: Record<string, string>;
|
|
54
|
-
/**
|
|
55
|
-
* Check if a given DAC path part value is a DAC wildcard signifier.
|
|
56
|
-
* */
|
|
57
|
-
export declare const getValueIsWildcardSignifier: (value: any) => boolean;
|
|
58
|
-
/**
|
|
59
|
-
* Check if a given DAC path matches a given resource path.
|
|
60
|
-
*
|
|
61
|
-
* Includes checking if the DAC path is a prefix of the
|
|
62
|
-
* resource path and if the DAC path is an exact match of
|
|
63
|
-
* the resource path.
|
|
64
|
-
*
|
|
65
|
-
* The DAC path can include wildcard signifier objects at
|
|
66
|
-
* various indices in order to facilitate dynamic matches
|
|
67
|
-
* and grouping by common resource aspects.
|
|
68
|
-
* */
|
|
69
|
-
export declare const getDACPathsMatch: (dacPath: LiteralValue[], resourcePath: LiteralValue[]) => DACPathMatchResults;
|
|
70
|
-
/**
|
|
71
|
-
* Get the flattened constraints of a DAC role.
|
|
72
|
-
* */
|
|
73
|
-
export declare const getFlattenedDACConstraints: (role: DACRole, getDACRoleById: (id: string) => DACRole,
|
|
74
|
-
/**
|
|
75
|
-
* SECURITY: Don't use this if you want realtime role resolution.
|
|
76
|
-
* */
|
|
77
|
-
dacRoleCache?: Record<string, DACRole>) => DACConstraint[];
|
|
78
|
-
/**
|
|
79
|
-
* Get the access to a given resource for a given DAC role.
|
|
80
|
-
* */
|
|
81
|
-
export declare const getResourceAccessByDACRole: (fullResourcePath: LiteralValue[], role: DACRole, getDACRoleById: (id: string) => DACRole, dacRoleCache?: Record<string, DACRole>) => DACAccessResult;
|
|
82
|
-
/**
|
|
83
|
-
* Merge multiple DAC access results.
|
|
84
|
-
* */
|
|
85
|
-
export declare const mergeDACAccessResults: (...results: DACAccessResult[]) => DACAccessResult;
|
|
@@ -1,159 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.mergeDACAccessResults = exports.getResourceAccessByDACRole = exports.getFlattenedDACConstraints = exports.getDACPathsMatch = exports.getValueIsWildcardSignifier = exports.WILDCARD_SIGNIFIER_PROTOTYPE = exports.DACConstraintType = void 0;
|
|
4
|
-
/**
|
|
5
|
-
* The possible types of a data access control (DAC) constraint.
|
|
6
|
-
* */
|
|
7
|
-
var DACConstraintType;
|
|
8
|
-
(function (DACConstraintType) {
|
|
9
|
-
DACConstraintType["ALLOW"] = "ALLOW";
|
|
10
|
-
DACConstraintType["DENY"] = "DENY";
|
|
11
|
-
})(DACConstraintType || (exports.DACConstraintType = DACConstraintType = {}));
|
|
12
|
-
/**
|
|
13
|
-
* The prototype of a DAC wildcard signifier.
|
|
14
|
-
* */
|
|
15
|
-
exports.WILDCARD_SIGNIFIER_PROTOTYPE = {
|
|
16
|
-
WILD_CARD: "*",
|
|
17
|
-
};
|
|
18
|
-
/**
|
|
19
|
-
* Check if a given DAC path part value is a DAC wildcard signifier.
|
|
20
|
-
* */
|
|
21
|
-
const getValueIsWildcardSignifier = (value) => {
|
|
22
|
-
if (typeof value === "object" && value !== null) {
|
|
23
|
-
return Object.keys(exports.WILDCARD_SIGNIFIER_PROTOTYPE).every((key) => value[key] === exports.WILDCARD_SIGNIFIER_PROTOTYPE[key]);
|
|
24
|
-
}
|
|
25
|
-
return false;
|
|
26
|
-
};
|
|
27
|
-
exports.getValueIsWildcardSignifier = getValueIsWildcardSignifier;
|
|
28
|
-
/**
|
|
29
|
-
* Check if a given DAC path matches a given resource path.
|
|
30
|
-
*
|
|
31
|
-
* Includes checking if the DAC path is a prefix of the
|
|
32
|
-
* resource path and if the DAC path is an exact match of
|
|
33
|
-
* the resource path.
|
|
34
|
-
*
|
|
35
|
-
* The DAC path can include wildcard signifier objects at
|
|
36
|
-
* various indices in order to facilitate dynamic matches
|
|
37
|
-
* and grouping by common resource aspects.
|
|
38
|
-
* */
|
|
39
|
-
const getDACPathsMatch = (dacPath, resourcePath) => {
|
|
40
|
-
const results = {
|
|
41
|
-
prefixMatch: false,
|
|
42
|
-
exactMatch: false,
|
|
43
|
-
};
|
|
44
|
-
let allDACPartsMatch = true;
|
|
45
|
-
for (let i = 0; i < dacPath.length; i++) {
|
|
46
|
-
const part = dacPath[i];
|
|
47
|
-
const resourcePart = resourcePath[i];
|
|
48
|
-
if (!(0, exports.getValueIsWildcardSignifier)(part) && part !== resourcePart) {
|
|
49
|
-
allDACPartsMatch = false;
|
|
50
|
-
break;
|
|
51
|
-
}
|
|
52
|
-
}
|
|
53
|
-
if (allDACPartsMatch) {
|
|
54
|
-
results.prefixMatch = true;
|
|
55
|
-
}
|
|
56
|
-
if (dacPath.length !== resourcePath.length) {
|
|
57
|
-
const lastDACPart = dacPath[dacPath.length - 1];
|
|
58
|
-
const lastDACPartIsWildcard = (0, exports.getValueIsWildcardSignifier)(lastDACPart);
|
|
59
|
-
results.exactMatch = results.prefixMatch && lastDACPartIsWildcard;
|
|
60
|
-
}
|
|
61
|
-
else if (results.prefixMatch) {
|
|
62
|
-
results.exactMatch = true;
|
|
63
|
-
}
|
|
64
|
-
return results;
|
|
65
|
-
};
|
|
66
|
-
exports.getDACPathsMatch = getDACPathsMatch;
|
|
67
|
-
/**
|
|
68
|
-
* Get the flattened constraints of a DAC role.
|
|
69
|
-
* */
|
|
70
|
-
const getFlattenedDACConstraints = (role, getDACRoleById,
|
|
71
|
-
/**
|
|
72
|
-
* SECURITY: Don't use this if you want realtime role resolution.
|
|
73
|
-
* */
|
|
74
|
-
dacRoleCache) => {
|
|
75
|
-
const { childRoleIds = [], constraints = [] } = role;
|
|
76
|
-
let flattenedConstraints = [...constraints];
|
|
77
|
-
for (const cRI of childRoleIds) {
|
|
78
|
-
let childRole;
|
|
79
|
-
if (dacRoleCache && dacRoleCache[cRI]) {
|
|
80
|
-
childRole = dacRoleCache[cRI];
|
|
81
|
-
}
|
|
82
|
-
else {
|
|
83
|
-
childRole = getDACRoleById(cRI);
|
|
84
|
-
if (dacRoleCache) {
|
|
85
|
-
dacRoleCache[cRI] = childRole;
|
|
86
|
-
}
|
|
87
|
-
}
|
|
88
|
-
flattenedConstraints = [
|
|
89
|
-
...flattenedConstraints,
|
|
90
|
-
...(0, exports.getFlattenedDACConstraints)(childRole, getDACRoleById, dacRoleCache),
|
|
91
|
-
];
|
|
92
|
-
}
|
|
93
|
-
return flattenedConstraints;
|
|
94
|
-
};
|
|
95
|
-
exports.getFlattenedDACConstraints = getFlattenedDACConstraints;
|
|
96
|
-
/**
|
|
97
|
-
* Get the access to a given resource for a given DAC role.
|
|
98
|
-
* */
|
|
99
|
-
const getResourceAccessByDACRole = (fullResourcePath, role, getDACRoleById, dacRoleCache) => {
|
|
100
|
-
const flattenedConstraints = (0, exports.getFlattenedDACConstraints)(role, getDACRoleById, dacRoleCache);
|
|
101
|
-
let allowed = false, denied = false, lastAllowedPath = [], lastDeniedPath = [];
|
|
102
|
-
for (const constraint of flattenedConstraints) {
|
|
103
|
-
const { type, resourcePath: dacPath, pathIsPrefix } = constraint;
|
|
104
|
-
const { prefixMatch: dacPathIsPrefixOfResourcePath, exactMatch: dacPathIsExactMatch, } = (0, exports.getDACPathsMatch)(dacPath, fullResourcePath);
|
|
105
|
-
if (pathIsPrefix) {
|
|
106
|
-
if (dacPathIsPrefixOfResourcePath) {
|
|
107
|
-
if (type === DACConstraintType.ALLOW) {
|
|
108
|
-
allowed = true;
|
|
109
|
-
lastAllowedPath = dacPath;
|
|
110
|
-
// IMPORTANT: Calculate specificity.
|
|
111
|
-
if (lastAllowedPath.length > lastDeniedPath.length) {
|
|
112
|
-
denied = false;
|
|
113
|
-
}
|
|
114
|
-
}
|
|
115
|
-
else {
|
|
116
|
-
denied = true;
|
|
117
|
-
lastDeniedPath = dacPath;
|
|
118
|
-
// IMPORTANT: Calculate specificity.
|
|
119
|
-
if (lastDeniedPath.length > lastAllowedPath.length) {
|
|
120
|
-
allowed = false;
|
|
121
|
-
}
|
|
122
|
-
}
|
|
123
|
-
}
|
|
124
|
-
}
|
|
125
|
-
else {
|
|
126
|
-
if (dacPathIsExactMatch) {
|
|
127
|
-
lastAllowedPath = dacPath;
|
|
128
|
-
lastDeniedPath = dacPath;
|
|
129
|
-
if (type === DACConstraintType.ALLOW) {
|
|
130
|
-
allowed = true;
|
|
131
|
-
}
|
|
132
|
-
else {
|
|
133
|
-
denied = true;
|
|
134
|
-
}
|
|
135
|
-
}
|
|
136
|
-
}
|
|
137
|
-
}
|
|
138
|
-
return { allowed, denied };
|
|
139
|
-
};
|
|
140
|
-
exports.getResourceAccessByDACRole = getResourceAccessByDACRole;
|
|
141
|
-
/**
|
|
142
|
-
* Merge multiple DAC access results.
|
|
143
|
-
* */
|
|
144
|
-
const mergeDACAccessResults = (...results) => {
|
|
145
|
-
let newResult = {
|
|
146
|
-
allowed: false,
|
|
147
|
-
denied: false,
|
|
148
|
-
};
|
|
149
|
-
for (const r of results) {
|
|
150
|
-
const { allowed: rAllowed, denied: rDenied } = r;
|
|
151
|
-
const { allowed: nAllowed, denied: nDenied } = newResult;
|
|
152
|
-
newResult = {
|
|
153
|
-
allowed: rAllowed || nAllowed,
|
|
154
|
-
denied: rDenied || nDenied,
|
|
155
|
-
};
|
|
156
|
-
}
|
|
157
|
-
return newResult;
|
|
158
|
-
};
|
|
159
|
-
exports.mergeDACAccessResults = mergeDACAccessResults;
|
|
@@ -1,60 +0,0 @@
|
|
|
1
|
-
import { LiteralValue, TypeInfo, TypeInfoDataItem } from "../../common/TypeParsing/TypeInfo";
|
|
2
|
-
import { ORMOperation } from "../../common/TypeInfoORM";
|
|
3
|
-
import { BaseDACRole, DACConstraint, DACConstraintType, DACDataItemResourceAccessResultMap, DACRole } from "../DataAccessControl";
|
|
4
|
-
import { BaseItemRelationshipInfo, ItemRelationshipOriginInfo } from "../../common/ItemRelationshipInfoTypes";
|
|
5
|
-
/**
|
|
6
|
-
* Get the DAC Resource Path for a given operation performed using an ORM with the given DAC prefix.
|
|
7
|
-
* */
|
|
8
|
-
export declare const getORMDACResourcePath: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation) => LiteralValue[];
|
|
9
|
-
/**
|
|
10
|
-
* Get the DAC Resource Path for a given item type.
|
|
11
|
-
* */
|
|
12
|
-
export declare const getItemTypeDACResourcePath: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, typeName: string) => LiteralValue[];
|
|
13
|
-
/**
|
|
14
|
-
* Get the DAC Resource Path for a given data item.
|
|
15
|
-
* */
|
|
16
|
-
export declare const getDataItemDACResourcePath: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, typeName: string, primaryKeyValue: LiteralValue) => LiteralValue[];
|
|
17
|
-
/**
|
|
18
|
-
* Get the DAC Resource Path for a given item relationship origin.
|
|
19
|
-
* */
|
|
20
|
-
export declare const getItemRelationshipOriginDACResourcePath: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, itemRelationshipOrigin: ItemRelationshipOriginInfo) => LiteralValue[];
|
|
21
|
-
/**
|
|
22
|
-
* Get the DAC Resource Path for a given item relationship.
|
|
23
|
-
* */
|
|
24
|
-
export declare const getItemRelationshipDACResourcePath: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, itemRelationship: BaseItemRelationshipInfo) => LiteralValue[];
|
|
25
|
-
/**
|
|
26
|
-
* Get the DAC Resource Path for a given data item with a specific field value.
|
|
27
|
-
* */
|
|
28
|
-
export declare const getDataItemFieldValueDACResourcePath: (itemPath: LiteralValue[], fieldName: string, fieldValue: LiteralValue) => LiteralValue[];
|
|
29
|
-
/**
|
|
30
|
-
* Get a DAC Constraint for a given item type.
|
|
31
|
-
* */
|
|
32
|
-
export declare const getItemTypeDACConstraint: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, typeName: string, constraintType: DACConstraintType) => DACConstraint;
|
|
33
|
-
/**
|
|
34
|
-
* Get a DAC Constraint for a given item relationship origin.
|
|
35
|
-
* */
|
|
36
|
-
export declare const getItemRelationshipOriginDACConstraint: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, itemRelationshipOrigin: ItemRelationshipOriginInfo, constraintType: DACConstraintType) => DACConstraint;
|
|
37
|
-
/**
|
|
38
|
-
* Get a DAC Role for a given item type.
|
|
39
|
-
* */
|
|
40
|
-
export declare const getItemTypeDACRole: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, typeName: string, constraintType: DACConstraintType) => BaseDACRole;
|
|
41
|
-
/**
|
|
42
|
-
* Get a DAC Role for a given item type.
|
|
43
|
-
* */
|
|
44
|
-
export declare const getItemRelationshipOriginDACRole: (prefixPath: LiteralValue[] | undefined, operation: ORMOperation, itemRelationshipOrigin: ItemRelationshipOriginInfo, constraintType: DACConstraintType) => BaseDACRole;
|
|
45
|
-
/**
|
|
46
|
-
* Get a DAC Role encompassing all operations for all types and relationships for an ORM with the given DAC prefix.
|
|
47
|
-
* */
|
|
48
|
-
export declare const getFullORMDACRole: (prefixPath: LiteralValue[] | undefined, constraintType: DACConstraintType) => BaseDACRole;
|
|
49
|
-
/**
|
|
50
|
-
* Get the access to a given data item resource for a given DAC role.
|
|
51
|
-
* */
|
|
52
|
-
export declare const getDACRoleHasAccessToDataItem: (prefixPath: LiteralValue[], operation: ORMOperation, typeName: string, dataItem: Partial<TypeInfoDataItem>, typeInfo: TypeInfo, role: DACRole, getDACRoleById: (id: string) => DACRole,
|
|
53
|
-
/**
|
|
54
|
-
* SECURITY: Don't use this if you want realtime role resolution.
|
|
55
|
-
* */
|
|
56
|
-
dacRoleCache?: Record<string, DACRole>) => DACDataItemResourceAccessResultMap;
|
|
57
|
-
/**
|
|
58
|
-
* Merge multiple DAC data item resource access result maps.
|
|
59
|
-
* */
|
|
60
|
-
export declare const mergeDACDataItemResourceAccessResultMaps: (...maps: DACDataItemResourceAccessResultMap[]) => DACDataItemResourceAccessResultMap;
|
package/src/api/ORM/DACUtils.js
DELETED
|
@@ -1,197 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.mergeDACDataItemResourceAccessResultMaps = exports.getDACRoleHasAccessToDataItem = exports.getFullORMDACRole = exports.getItemRelationshipOriginDACRole = exports.getItemTypeDACRole = exports.getItemRelationshipOriginDACConstraint = exports.getItemTypeDACConstraint = exports.getDataItemFieldValueDACResourcePath = exports.getItemRelationshipDACResourcePath = exports.getItemRelationshipOriginDACResourcePath = exports.getDataItemDACResourcePath = exports.getItemTypeDACResourcePath = exports.getORMDACResourcePath = void 0;
|
|
4
|
-
const TypeInfoORM_1 = require("../../common/TypeInfoORM");
|
|
5
|
-
const DataAccessControl_1 = require("../DataAccessControl");
|
|
6
|
-
/**
|
|
7
|
-
* Get the DAC Resource Path for a given operation performed using an ORM with the given DAC prefix.
|
|
8
|
-
* */
|
|
9
|
-
const getORMDACResourcePath = (prefixPath = [], operation) => [...prefixPath, operation];
|
|
10
|
-
exports.getORMDACResourcePath = getORMDACResourcePath;
|
|
11
|
-
/**
|
|
12
|
-
* Get the DAC Resource Path for a given item type.
|
|
13
|
-
* */
|
|
14
|
-
const getItemTypeDACResourcePath = (prefixPath = [], operation, typeName) => [
|
|
15
|
-
...(0, exports.getORMDACResourcePath)(prefixPath, operation),
|
|
16
|
-
typeName,
|
|
17
|
-
];
|
|
18
|
-
exports.getItemTypeDACResourcePath = getItemTypeDACResourcePath;
|
|
19
|
-
/**
|
|
20
|
-
* Get the DAC Resource Path for a given data item.
|
|
21
|
-
* */
|
|
22
|
-
const getDataItemDACResourcePath = (prefixPath = [], operation, typeName, primaryKeyValue) => [
|
|
23
|
-
...(0, exports.getItemTypeDACResourcePath)(prefixPath, operation, typeName),
|
|
24
|
-
primaryKeyValue,
|
|
25
|
-
];
|
|
26
|
-
exports.getDataItemDACResourcePath = getDataItemDACResourcePath;
|
|
27
|
-
/**
|
|
28
|
-
* Get the DAC Resource Path for a given item relationship origin.
|
|
29
|
-
* */
|
|
30
|
-
const getItemRelationshipOriginDACResourcePath = (prefixPath = [], operation, itemRelationshipOrigin) => {
|
|
31
|
-
const { fromTypeName, fromTypeFieldName } = itemRelationshipOrigin;
|
|
32
|
-
return [
|
|
33
|
-
...(0, exports.getItemTypeDACResourcePath)(prefixPath, operation, TypeInfoORM_1.ITEM_RELATIONSHIP_DAC_RESOURCE_NAME),
|
|
34
|
-
fromTypeName,
|
|
35
|
-
fromTypeFieldName,
|
|
36
|
-
];
|
|
37
|
-
};
|
|
38
|
-
exports.getItemRelationshipOriginDACResourcePath = getItemRelationshipOriginDACResourcePath;
|
|
39
|
-
/**
|
|
40
|
-
* Get the DAC Resource Path for a given item relationship.
|
|
41
|
-
* */
|
|
42
|
-
const getItemRelationshipDACResourcePath = (prefixPath = [], operation, itemRelationship) => {
|
|
43
|
-
const { fromTypeName, fromTypeFieldName, fromTypePrimaryFieldValue, toTypePrimaryFieldValue, } = itemRelationship;
|
|
44
|
-
return [
|
|
45
|
-
...(0, exports.getItemTypeDACResourcePath)(prefixPath, operation, TypeInfoORM_1.ITEM_RELATIONSHIP_DAC_RESOURCE_NAME),
|
|
46
|
-
fromTypeName,
|
|
47
|
-
fromTypeFieldName,
|
|
48
|
-
fromTypePrimaryFieldValue,
|
|
49
|
-
toTypePrimaryFieldValue,
|
|
50
|
-
];
|
|
51
|
-
};
|
|
52
|
-
exports.getItemRelationshipDACResourcePath = getItemRelationshipDACResourcePath;
|
|
53
|
-
/**
|
|
54
|
-
* Get the DAC Resource Path for a given data item with a specific field value.
|
|
55
|
-
* */
|
|
56
|
-
const getDataItemFieldValueDACResourcePath = (itemPath, fieldName, fieldValue) => [...itemPath, fieldName, fieldValue];
|
|
57
|
-
exports.getDataItemFieldValueDACResourcePath = getDataItemFieldValueDACResourcePath;
|
|
58
|
-
/**
|
|
59
|
-
* Get a DAC Constraint for a given item type.
|
|
60
|
-
* */
|
|
61
|
-
const getItemTypeDACConstraint = (prefixPath = [], operation, typeName, constraintType) => ({
|
|
62
|
-
type: constraintType,
|
|
63
|
-
pathIsPrefix: true,
|
|
64
|
-
resourcePath: (0, exports.getItemTypeDACResourcePath)(prefixPath, operation, typeName),
|
|
65
|
-
});
|
|
66
|
-
exports.getItemTypeDACConstraint = getItemTypeDACConstraint;
|
|
67
|
-
/**
|
|
68
|
-
* Get a DAC Constraint for a given item relationship origin.
|
|
69
|
-
* */
|
|
70
|
-
const getItemRelationshipOriginDACConstraint = (prefixPath = [], operation, itemRelationshipOrigin, constraintType) => ({
|
|
71
|
-
type: constraintType,
|
|
72
|
-
pathIsPrefix: true,
|
|
73
|
-
resourcePath: (0, exports.getItemRelationshipOriginDACResourcePath)(prefixPath, operation, itemRelationshipOrigin),
|
|
74
|
-
});
|
|
75
|
-
exports.getItemRelationshipOriginDACConstraint = getItemRelationshipOriginDACConstraint;
|
|
76
|
-
/**
|
|
77
|
-
* Get a DAC Role for a given item type.
|
|
78
|
-
* */
|
|
79
|
-
const getItemTypeDACRole = (prefixPath = [], operation, typeName, constraintType) => ({
|
|
80
|
-
constraints: [
|
|
81
|
-
(0, exports.getItemTypeDACConstraint)(prefixPath, operation, typeName, constraintType),
|
|
82
|
-
],
|
|
83
|
-
});
|
|
84
|
-
exports.getItemTypeDACRole = getItemTypeDACRole;
|
|
85
|
-
/**
|
|
86
|
-
* Get a DAC Role for a given item type.
|
|
87
|
-
* */
|
|
88
|
-
const getItemRelationshipOriginDACRole = (prefixPath = [], operation, itemRelationshipOrigin, constraintType) => ({
|
|
89
|
-
constraints: [
|
|
90
|
-
(0, exports.getItemRelationshipOriginDACConstraint)(prefixPath, operation, itemRelationshipOrigin, constraintType),
|
|
91
|
-
],
|
|
92
|
-
});
|
|
93
|
-
exports.getItemRelationshipOriginDACRole = getItemRelationshipOriginDACRole;
|
|
94
|
-
/**
|
|
95
|
-
* Get a DAC Role encompassing all operations for all types and relationships for an ORM with the given DAC prefix.
|
|
96
|
-
* */
|
|
97
|
-
const getFullORMDACRole = (prefixPath = [], constraintType) => ({
|
|
98
|
-
constraints: [
|
|
99
|
-
{
|
|
100
|
-
type: constraintType,
|
|
101
|
-
pathIsPrefix: true,
|
|
102
|
-
resourcePath: (0, exports.getORMDACResourcePath)(prefixPath, TypeInfoORM_1.OperationGroup.ALL_OPERATIONS),
|
|
103
|
-
},
|
|
104
|
-
],
|
|
105
|
-
});
|
|
106
|
-
exports.getFullORMDACRole = getFullORMDACRole;
|
|
107
|
-
/**
|
|
108
|
-
* Get the access to a given data item resource for a given DAC role.
|
|
109
|
-
* */
|
|
110
|
-
const getDACRoleHasAccessToDataItem = (prefixPath, operation, typeName, dataItem, typeInfo, role, getDACRoleById,
|
|
111
|
-
/**
|
|
112
|
-
* SECURITY: Don't use this if you want realtime role resolution.
|
|
113
|
-
* */
|
|
114
|
-
dacRoleCache) => {
|
|
115
|
-
const cleanItemPathPrefix = prefixPath ? prefixPath : [];
|
|
116
|
-
const resultMap = {
|
|
117
|
-
allowed: false,
|
|
118
|
-
denied: false,
|
|
119
|
-
fieldsResources: {},
|
|
120
|
-
};
|
|
121
|
-
if (typeof dataItem === "object" &&
|
|
122
|
-
dataItem !== null &&
|
|
123
|
-
typeName &&
|
|
124
|
-
typeInfo) {
|
|
125
|
-
const { primaryField, fields = {} } = typeInfo;
|
|
126
|
-
if (primaryField) {
|
|
127
|
-
const cleanPrimaryField = primaryField;
|
|
128
|
-
const primaryFieldValue = typeof dataItem[cleanPrimaryField] === "undefined"
|
|
129
|
-
? null
|
|
130
|
-
: dataItem[cleanPrimaryField];
|
|
131
|
-
if (typeof primaryFieldValue !== "undefined" &&
|
|
132
|
-
primaryFieldValue !== null &&
|
|
133
|
-
!Array.isArray(primaryFieldValue)) {
|
|
134
|
-
const dataItemFields = Object.keys(dataItem);
|
|
135
|
-
const primaryResourcePath = (0, exports.getDataItemDACResourcePath)(cleanItemPathPrefix, operation, typeName, primaryFieldValue);
|
|
136
|
-
const { allowed: primaryResourceAllowed, denied: primaryResourceDenied, } = (0, DataAccessControl_1.getResourceAccessByDACRole)(primaryResourcePath, role, getDACRoleById, dacRoleCache);
|
|
137
|
-
resultMap.allowed = primaryResourceAllowed;
|
|
138
|
-
resultMap.denied = primaryResourceDenied;
|
|
139
|
-
for (const dIF of dataItemFields) {
|
|
140
|
-
const typeInfoField = fields[dIF];
|
|
141
|
-
if (typeInfoField) {
|
|
142
|
-
const { typeReference, array: fieldIsArray } = typeInfoField;
|
|
143
|
-
if (!typeReference && !fieldIsArray) {
|
|
144
|
-
const fieldResourcePath = (0, exports.getDataItemFieldValueDACResourcePath)(primaryResourcePath, dIF, dataItem[dIF]);
|
|
145
|
-
const { allowed: fieldResourceAllowed, denied: fieldResourceDenied, } = (0, DataAccessControl_1.getResourceAccessByDACRole)(fieldResourcePath, role, getDACRoleById, dacRoleCache);
|
|
146
|
-
resultMap.fieldsResources = {
|
|
147
|
-
...resultMap.fieldsResources,
|
|
148
|
-
[dIF]: {
|
|
149
|
-
allowed: fieldResourceAllowed,
|
|
150
|
-
denied: fieldResourceDenied,
|
|
151
|
-
},
|
|
152
|
-
};
|
|
153
|
-
}
|
|
154
|
-
}
|
|
155
|
-
}
|
|
156
|
-
}
|
|
157
|
-
}
|
|
158
|
-
}
|
|
159
|
-
return resultMap;
|
|
160
|
-
};
|
|
161
|
-
exports.getDACRoleHasAccessToDataItem = getDACRoleHasAccessToDataItem;
|
|
162
|
-
/**
|
|
163
|
-
* Merge multiple DAC data item resource access result maps.
|
|
164
|
-
* */
|
|
165
|
-
const mergeDACDataItemResourceAccessResultMaps = (...maps) => {
|
|
166
|
-
let outputMap = {
|
|
167
|
-
allowed: false,
|
|
168
|
-
denied: false,
|
|
169
|
-
fieldsResources: {},
|
|
170
|
-
};
|
|
171
|
-
for (const m of maps) {
|
|
172
|
-
const { fieldsResources: mFR = {} } = m;
|
|
173
|
-
const { fieldsResources: oFR = {} } = outputMap;
|
|
174
|
-
const fRFieldNames = [...Object.keys(mFR), ...Object.keys(oFR)];
|
|
175
|
-
let newFieldsResources = {};
|
|
176
|
-
for (const mFRField of fRFieldNames) {
|
|
177
|
-
const mFRFieldData = mFR[mFRField] || {
|
|
178
|
-
allowed: false,
|
|
179
|
-
denied: false,
|
|
180
|
-
};
|
|
181
|
-
const oFRFieldData = oFR[mFRField] || {
|
|
182
|
-
allowed: false,
|
|
183
|
-
denied: false,
|
|
184
|
-
};
|
|
185
|
-
newFieldsResources = {
|
|
186
|
-
...newFieldsResources,
|
|
187
|
-
[mFRField]: (0, DataAccessControl_1.mergeDACAccessResults)(mFRFieldData, oFRFieldData),
|
|
188
|
-
};
|
|
189
|
-
}
|
|
190
|
-
outputMap = {
|
|
191
|
-
...(0, DataAccessControl_1.mergeDACAccessResults)(m, outputMap),
|
|
192
|
-
fieldsResources: newFieldsResources,
|
|
193
|
-
};
|
|
194
|
-
}
|
|
195
|
-
return outputMap;
|
|
196
|
-
};
|
|
197
|
-
exports.mergeDACDataItemResourceAccessResultMaps = mergeDACDataItemResourceAccessResultMaps;
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
import { DataItemDBDriver } from "./drivers";
|
|
2
|
-
import { TypeInfoDataItem } from "../../common/TypeParsing/TypeInfo";
|
|
3
|
-
import { ListItemsConfig, ListItemsResults } from "../../common/SearchTypes";
|
|
4
|
-
/**
|
|
5
|
-
* Execute a list items request against a data item driver.
|
|
6
|
-
* */
|
|
7
|
-
export declare const executeDriverListItems: (driver: DataItemDBDriver<any, any>, config: ListItemsConfig, filter?: (item: Partial<TypeInfoDataItem>) => boolean, transform?: (item: Partial<TypeInfoDataItem>) => Partial<TypeInfoDataItem>, selectedFields?: (keyof TypeInfoDataItem)[]) => Promise<ListItemsResults<Partial<TypeInfoDataItem>>>;
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.executeDriverListItems = void 0;
|
|
4
|
-
/**
|
|
5
|
-
* Execute a list items request against a data item driver.
|
|
6
|
-
* */
|
|
7
|
-
const executeDriverListItems = async (driver, config, filter, transform, selectedFields) => {
|
|
8
|
-
const filteredItems = [];
|
|
9
|
-
const { items = [], cursor: newCursor } = (await driver.listItems(config, filter ? undefined : selectedFields));
|
|
10
|
-
for (const itm of items) {
|
|
11
|
-
const includeItem = filter ? filter(itm) : true;
|
|
12
|
-
if (includeItem) {
|
|
13
|
-
const transformedItem = transform ? transform(itm) : itm;
|
|
14
|
-
filteredItems.push(transformedItem);
|
|
15
|
-
}
|
|
16
|
-
}
|
|
17
|
-
return {
|
|
18
|
-
items: filteredItems,
|
|
19
|
-
cursor: newCursor,
|
|
20
|
-
};
|
|
21
|
-
};
|
|
22
|
-
exports.executeDriverListItems = executeDriverListItems;
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
import { BaseTypeInfoORMServiceConfig, TypeInfoORMDACConfig } from "./TypeInfoORMService";
|
|
2
|
-
import { AuthInfo, RouteAuthConfig, RouteMap } from "../Router/Types";
|
|
3
|
-
import { TypeInfoORMAPI } from "../../common/TypeInfoORM";
|
|
4
|
-
import { DACRole } from "../DataAccessControl";
|
|
5
|
-
/**
|
|
6
|
-
* A collection of errors that can occur when creating or using a Type Info ORM Route Map.
|
|
7
|
-
* */
|
|
8
|
-
export declare enum TYPE_INFO_ORM_ROUTE_MAP_ERRORS {
|
|
9
|
-
MISSING_ACCESSING_ROLE = "MISSING_ACCESSING_ROLE",
|
|
10
|
-
MISSING_ACCESSING_ROLE_GETTER = "MISSING_ACCESSING_ROLE_GETTER"
|
|
11
|
-
}
|
|
12
|
-
/**
|
|
13
|
-
* A map of Type Info ORM API paths to method names.
|
|
14
|
-
* */
|
|
15
|
-
export declare const TYPE_INFO_ORM_API_PATH_METHOD_NAME_MAP: Record<string, keyof TypeInfoORMAPI>;
|
|
16
|
-
/**
|
|
17
|
-
* Get a route map for a Type Info ORM service.
|
|
18
|
-
* */
|
|
19
|
-
export declare const getTypeInfoORMRouteMap: (config: BaseTypeInfoORMServiceConfig, dacConfig?: Omit<TypeInfoORMDACConfig, "accessingRole">, getAccessingRole?: (authInfo: AuthInfo) => DACRole, authConfig?: RouteAuthConfig) => RouteMap;
|