@restorecommerce/acs-client 3.0.22 → 3.1.0

package/lib/utils.d.ts

@@ -1,9 +1,9 @@
 import lodash from 'lodash';
 export declare const _: lodash.LoDashStatic;
-import { PolicySetRQ, PolicySetRQResponse, ResourceFilterMap, CustomQueryArgs, DecisionResponse, ACSResource, AuthZAction, ResolvedSubject, Obligation } from './acs/interfaces';
-import { QueryArguments, UserQueryArguments } from './acs/resolver';
-import { Subject, DeepPartial } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/auth';
-import { Attribute } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/attribute';
+import { PolicySetRQ, PolicySetRQResponse, ResourceFilterMap, CustomQueryArgs, DecisionResponse, ACSResource, AuthZAction, ResolvedSubject, Obligation } from './acs/interfaces.js';
+import { QueryArguments, UserQueryArguments } from './acs/resolver.js';
+import { Subject, DeepPartial } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/auth.js';
+import { Attribute } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/attribute.js';
 export declare const handleError: (err: string | Error | any) => any;
 export declare const buildFilterPermissions: (policySet: PolicySetRQ, subject: ResolvedSubject, reqResources: any, database: string) => Promise<QueryArguments | UserQueryArguments>;
 export declare const generateOperationStatus: (code?: number, message?: string) => {

package/lib/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,CAAC,qBAAS,CAAC;AACxB,OAAO,EACL,WAAW,EAAE,mBAAmB,EAChC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAC9E,eAAe,EAAE,UAAU,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAOpE,OAAO,EACL,OAAO,EACP,WAAW,EACZ,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,qFAAqF,CAAC;AAShH,eAAO,MAAM,WAAW,QAAS,MAAM,GAAG,KAAK,GAAG,GAAG,KAAG,GAQvD,CAAC;AAmTF,eAAO,MAAM,sBAAsB,cACtB,WAAW,WACb,eAAe,gBACV,GAAG,YACP,MAAM,KACf,OAAO,CAAC,cAAc,GAAG,kBAAkB,CAgM7C,CAAC;AAWF,eAAO,MAAM,uBAAuB,UAAW,MAAM,YAAY,MAAM;;;CAQtE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,mBAAoB,WAAW,CAAC,SAAS,CAAC,EAAE,qBAAqB,WAAW,CAAC,SAAS,CAAC,EAAE,KAAG,OAyDvH,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACvC,eAAe,EAAE,eAAe,EAAE,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,aACxB,WAAW,EAAE,qBACJ,mBAAmB,aAC3B,GAAG,UAAU,WAAW,WAC1B,WAAW,CAAC,OAAO,CAAC,aAClB,MAAM,iBACF,OAAO,eACT,MAAM,YACT,UAAU,GAAG,UAAU,KAChC,OAAO,CAAC,iBAAiB,GAAG,gBAAgB,CAgG9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kCAAkC,gBAAiB,SAAS,EAAE,KAAG,UAAU,EA0BvF,CAAC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,CAAC,qBAAS,CAAC;AACxB,OAAO,EACL,WAAW,EAAE,mBAAmB,EAChC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAC9E,eAAe,EAAE,UAAU,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAOvE,OAAO,EACL,OAAO,EACP,WAAW,EACZ,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,wFAAwF,CAAC;AASnH,eAAO,MAAM,WAAW,QAAS,MAAM,GAAG,KAAK,GAAG,GAAG,KAAG,GAQvD,CAAC;AAmTF,eAAO,MAAM,sBAAsB,cACtB,WAAW,WACb,eAAe,gBACV,GAAG,YACP,MAAM,KACf,OAAO,CAAC,cAAc,GAAG,kBAAkB,CAgM7C,CAAC;AAWF,eAAO,MAAM,uBAAuB,UAAW,MAAM,YAAY,MAAM;;;CAQtE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,mBAAoB,WAAW,CAAC,SAAS,CAAC,EAAE,qBAAqB,WAAW,CAAC,SAAS,CAAC,EAAE,KAAG,OAyDvH,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACvC,eAAe,EAAE,eAAe,EAAE,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,aACxB,WAAW,EAAE,qBACJ,mBAAmB,aAC3B,GAAG,UAAU,WAAW,WAC1B,WAAW,CAAC,OAAO,CAAC,aAClB,MAAM,iBACF,OAAO,eACT,MAAM,YACT,UAAU,GAAG,UAAU,KAChC,OAAO,CAAC,iBAAiB,GAAG,gBAAgB,CAgG9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kCAAkC,gBAAiB,SAAS,EAAE,KAAG,UAAU,EA0BvF,CAAC"}

package/lib/utils.js

@@ -1,33 +1,26 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mapResourceURNObligationProperties = exports.createResourceFilterMap = exports.attributesMatch = exports.generateOperationStatus = exports.buildFilterPermissions = exports.handleError = exports._ = void 0;
-const lodash_1 = __importDefault(require("lodash"));
+import lodash from 'lodash';
 // eslint-disable-next-line @typescript-eslint/no-require-imports
-require('deepdash')(lodash_1.default);
-exports._ = lodash_1.default;
-const config_1 = require("./config");
+require('deepdash')(lodash);
+export const _ = lodash;
+import { errors, cfg } from './config.js';
 // @ts-expect-error TS7016
-const node_eval_1 = __importDefault(require("node-eval"));
-const logger_1 = __importDefault(require("./logger"));
-const cache_1 = require("./acs/cache");
-const authz_1 = require("./acs/authz");
-const resource_base_1 = require("@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/resource_base");
-const access_control_1 = require("@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/access_control");
-const rule_1 = require("@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/rule");
-const handleError = (err) => {
+import nodeEval from 'node-eval';
+import logger from './logger.js';
+import { get } from './acs/cache.js';
+import { formatResourceType } from './acs/authz.js';
+import { Filter_Operation, FilterOp_Operator } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/resource_base.js';
+import { Response_Decision } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/access_control.js';
+import { Effect } from '@restorecommerce/rc-grpc-clients/dist/generated-server/io/restorecommerce/rule.js';
+export const handleError = (err) => {
     let error;
     if (typeof err == 'string') {
-        error = config_1.errors[err] || config_1.errors.SYSTEM_ERROR;
+        error = errors[err] || errors.SYSTEM_ERROR;
     }
     else {
-        error = config_1.errors.SYSTEM_ERROR;
+        error = errors.SYSTEM_ERROR;
     }
     return error;
 };
-exports.handleError = handleError;
 const reduceUserScope = (hrScope, reducedUserScope, hierarchicalRoleScoping) => {
     reducedUserScope.push(hrScope.id);
     if (hrScope?.children?.length > 0 && hierarchicalRoleScoping === 'true') {
@@ -40,7 +33,7 @@ const checkTargetScopeExists = (hrScopes, targetScope, reducedUserScope, hierarc
     return hrScopes.some((hrScope) => {
         if (hrScope?.id === targetScope) {
             // found the target scope object, iterate and put the orgs in reducedUserScope array
-            logger_1.default?.debug(`Target entity match found in the user's hierarchical scope`);
+            logger?.debug(`Target entity match found in the user's hierarchical scope`);
             reduceUserScope(hrScope, reducedUserScope, hierarchicalRoleScopingCheck);
             return true;
         }
@@ -62,7 +55,7 @@ const checkSubjectMatch = (user, ruleSubjectAttributes, reducedUserScope) => {
     let hierarchicalRoleScopingCheck = 'true'; // by default HR scoping check is considered
     let ruleRoleValue;
     let ruleRoleScopeEntityName;
-    const urns = config_1.cfg.get('authorization:urns');
+    const urns = cfg.get('authorization:urns');
     if (ruleSubjectAttributes?.length === 0) {
         return true;
     }
@@ -75,21 +68,21 @@ const checkSubjectMatch = (user, ruleSubjectAttributes, reducedUserScope) => {
         }
         else if (attribute.id === urns.role) { // urns.role -> urn:restorecommerce:acs:names:role
             ruleRoleValue = attribute.value;
-            logger_1.default?.debug(`Found Rule's Subject role ${ruleRoleValue}`);
+            logger?.debug(`Found Rule's Subject role ${ruleRoleValue}`);
         }
         else if (attribute?.id === urns.hierarchicalRoleScoping) {
             hierarchicalRoleScopingCheck = attribute.value;
-            logger_1.default?.debug('HR Scoping URN set on rule', { hierarchicalRoleScopingCheck });
+            logger?.debug('HR Scoping URN set on rule', { hierarchicalRoleScopingCheck });
         }
     }
     if (ruleRoleValue && ruleRoleScopeEntityName) {
         const matchingRoleScopedInstance = user?.role_associations?.flatMap(ra => ra.attributes).filter(a => a?.id === urns?.roleScopingEntity
             && a?.value === ruleRoleScopeEntityName).flatMap(a => a?.attributes).filter(aa => aa?.id === urns?.roleScopingInstance).map(aa => aa.value);
-        logger_1.default?.debug('Role scoped instances for matching entity', { id: user?.id, ruleRoleScopeEntityName, matchingRoleScopedInstance });
+        logger?.debug('Role scoped instances for matching entity', { id: user?.id, ruleRoleScopeEntityName, matchingRoleScopedInstance });
         // validate HR scope root ID contains the role scope instances
         const hrScopeExist = user?.hierarchical_scopes?.some((hrScope) => matchingRoleScopedInstance.includes(hrScope.id));
         if (!hrScopeExist) {
-            logger_1.default?.info('Hierarchial scopes for matching role does not exist', {
+            logger?.info('Hierarchial scopes for matching role does not exist', {
                 role: ruleRoleValue,
                 hrScopes: user?.hierarchical_scopes,
                 instances: matchingRoleScopedInstance
@@ -97,12 +90,12 @@ const checkSubjectMatch = (user, ruleSubjectAttributes, reducedUserScope) => {
             return false;
         }
         else if (hrScopeExist && user?.scope) {
-            logger_1.default?.debug('Target scope set and HR scopes exist, validate target scope from HR scopes', { targetScope: user?.scope });
+            logger?.debug('Target scope set and HR scopes exist, validate target scope from HR scopes', { targetScope: user?.scope });
             return checkTargetScopeExists(user?.hierarchical_scopes?.filter((hrScope) => matchingRoleScopedInstance?.includes(hrScope?.id) && hrScope?.role === ruleRoleValue), user?.scope, reducedUserScope, hierarchicalRoleScopingCheck);
         }
         else if (hrScopeExist && !user.scope) {
             // HR scope match exist but user has not provided scope so still a match is considered
-            logger_1.default?.debug('Target scope not provided using full HR tree for matched role', { role: ruleRoleValue });
+            logger?.debug('Target scope not provided using full HR tree for matched role', { role: ruleRoleValue });
             // if no scope is provided then use the complete HR tree for user scopes
             user?.hierarchical_scopes?.filter((hrScope) => matchingRoleScopedInstance?.includes(hrScope?.id)
                 && hrScope?.role === ruleRoleValue).forEach((eachHRScope) => {
@@ -117,7 +110,7 @@ const checkSubjectMatch = (user, ruleSubjectAttributes, reducedUserScope) => {
     return false;
 };
 const validateCondition = (condition, request) => {
-    const evalResponse = (0, node_eval_1.default)(condition, 'condition.js', request);
+    const evalResponse = nodeEval(condition, 'condition.js', request);
     if (typeof evalResponse === 'function') {
         return evalResponse(request);
     }
@@ -136,12 +129,12 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
         ruleCondition = true;
     }
     // if there is a condition add this to filter
-    if (condition && !exports._.isEmpty(condition)) {
+    if (condition && !_.isEmpty(condition)) {
         condition = condition.replace(/\\n/g, '\n');
         if (!reqResources) {
             reqResources = [];
         }
-        if (!exports._.isArray(reqResources)) {
+        if (!_.isArray(reqResources)) {
             reqResources = [reqResources];
         }
         const request = {
@@ -168,7 +161,7 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
                             ruleCondition = true;
                             filter.push({
                                 field: 'id',
-                                operation: resource_base_1.Filter_Operation.eq,
+                                operation: Filter_Operation.eq,
                                 value: filterId
                             });
                         }
@@ -177,7 +170,7 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
                         ruleCondition = true;
                         filter.push({
                             field: 'id',
-                            operation: resource_base_1.Filter_Operation.eq,
+                            operation: Filter_Operation.eq,
                             value: filterId
                         });
                     }
@@ -185,7 +178,7 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
             }
             else if (typeof filterId === 'object') { // prebuilt filter
                 // handle array
-                if (filterId.filters && exports._.isArray(filterId.filters)) {
+                if (filterId.filters && _.isArray(filterId.filters)) {
                     filter.push(...filterId.filters);
                     // map filter operator if its returned from condition
                     if (filterId?.operator) {
@@ -202,16 +195,16 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
             }
         }
         catch (err) {
-            logger_1.default?.error('Error caught evaluating condition:', { condition });
-            logger_1.default?.error('Error', { code: err.code, message: err.message, stack: err.stack });
+            logger?.error('Error caught evaluating condition:', { condition });
+            logger?.error('Error', { code: err.code, message: err.message, stack: err.stack });
             return;
         }
     }
     const scopingAttribute = subjects?.find((attribute) => attribute.id == urns.roleScopingEntity);
-    if (!!scopingAttribute && effect == rule_1.Effect.PERMIT && database === 'arangoDB' && !ruleCondition) { // note: there is currently no query to exclude scopes
+    if (!!scopingAttribute && effect == Effect.PERMIT && database === 'arangoDB' && !ruleCondition) { // note: there is currently no query to exclude scopes
         // userTotalScope is an array accumulated scopes for each rule
         query['scope'] = {
-            custom_query: config_1.cfg.get('authorization:custom_query_name') ?? 'filterByOwnership',
+            custom_query: cfg.get('authorization:custom_query_name') ?? 'filterByOwnership',
             custom_arguments: {
                 // value: Buffer.from(JSON.stringify({
                 entity: scopingAttribute.value,
@@ -220,9 +213,9 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
         };
         scopingUpdated = true;
     }
-    else if (database && database === 'postgres' && effect == rule_1.Effect.PERMIT) {
+    else if (database && database === 'postgres' && effect == Effect.PERMIT) {
         query['filters'] = [];
-        const filterKeyMapArray = config_1.cfg?.get('authorization:filterParamKey');
+        const filterKeyMapArray = cfg?.get('authorization:filterParamKey');
         let filterParamKey;
         if (Array.isArray(filterKeyMapArray)) {
             filterParamKey = filterKeyMapArray?.find((obj) => obj?.scopingEntity === scopingAttribute?.value)?.value;
@@ -231,7 +224,7 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
             // default filter Paramkey for PostgresDB
             filterParamKey = 'orgKey';
         }
-        logger_1.default?.debug('Filter paramter key for Postgres DB', { filterParamKey });
+        logger?.debug('Filter paramter key for Postgres DB', { filterParamKey });
         for (const eachScope of userTotalScope) {
             query['filters'].push({ field: filterParamKey, operation: 'eq', value: eachScope });
         }
@@ -246,17 +239,17 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
     if (resources?.length > 0) {
         for (const attribute of resources) {
             if (attribute.id == urns.resourceID) {
-                if (effect == rule_1.Effect.PERMIT) {
+                if (effect == Effect.PERMIT) {
                     filter.push({
                         field: 'id',
-                        operation: resource_base_1.Filter_Operation.eq,
+                        operation: Filter_Operation.eq,
                         value: attribute.value
                     });
                 }
                 else {
                     filter.push({
                         field: 'id',
-                        operation: resource_base_1.Filter_Operation.neq,
+                        operation: Filter_Operation.neq,
                         value: attribute.value
                     });
                 }
@@ -269,12 +262,12 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
                 }
                 query['fields'].push({
                     name: attribute.value.split('#')[1],
-                    include: effect == rule_1.Effect.PERMIT
+                    include: effect == Effect.PERMIT
                 });
             }
         }
     }
-    const key = effect == rule_1.Effect.PERMIT ? resource_base_1.FilterOp_Operator.or : resource_base_1.FilterOp_Operator.and;
+    const key = effect == Effect.PERMIT ? FilterOp_Operator.or : FilterOp_Operator.and;
     if (query.filters) {
         // query.filters = { filter: query['filter'] };
         // and or operator comparision
@@ -285,7 +278,7 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
         }
         delete query['filter'];
     }
-    else if (!exports._.isEmpty(filter) || key == resource_base_1.FilterOp_Operator.or) {
+    else if (!_.isEmpty(filter) || key == FilterOp_Operator.or) {
         query['filters'] = filter;
         // override the operator if its returned from rule condition
         if (filterOperator) {
@@ -295,23 +288,23 @@ const buildQueryFromTarget = (target, effect, userTotalScope, urns, scopingUpdat
     query.scopingUpdated = scopingUpdated;
     return query;
 };
-const buildFilterPermissions = async (policySet, subject, reqResources, database) => {
+export const buildFilterPermissions = async (policySet, subject, reqResources, database) => {
     if (subject?.id) {
         if (!subject.hierarchical_scopes?.length) {
-            subject.hierarchical_scopes = await (0, cache_1.get)(`cache:${subject.id}:${subject.token}:hrScopes`);
+            subject.hierarchical_scopes = await get(`cache:${subject.id}:${subject.token}:hrScopes`);
         }
         if (!subject.hierarchical_scopes?.length) {
-            subject.hierarchical_scopes = await (0, cache_1.get)(`cache:${subject.id}:hrScopes`);
+            subject.hierarchical_scopes = await get(`cache:${subject.id}:hrScopes`);
         }
         if (!subject.role_associations?.length) {
-            subject.role_associations = await (0, cache_1.get)(`cache:${subject.id}:subject`).then(subject => subject?.role_associations ?? []);
+            subject.role_associations = await get(`cache:${subject.id}:subject`).then(subject => subject?.role_associations ?? []);
         }
     }
     else {
         subject.hierarchical_scopes ??= [];
         subject.role_associations ??= [];
     }
-    const urns = config_1.cfg.get('authorization:urns');
+    const urns = cfg.get('authorization:urns');
     const query = {
         filters: []
     };
@@ -326,22 +319,22 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
                 if (policy?.target?.subjects) {
                     const userSubjectMatched = checkSubjectMatch(subject, policy.target.subjects);
                     if (!userSubjectMatched) {
-                        logger_1.default?.debug(`Skipping policy as policy subject and user subject don't match`);
+                        logger?.debug(`Skipping policy as policy subject and user subject don't match`);
                         continue;
                     }
                 }
                 let effect;
                 for (const rule of policy.rules || []) {
-                    if (algorithm == urns.permitOverrides && rule.effect == rule_1.Effect.PERMIT) {
-                        effect = rule_1.Effect.PERMIT;
+                    if (algorithm == urns.permitOverrides && rule.effect == Effect.PERMIT) {
+                        effect = Effect.PERMIT;
                         break;
                     }
-                    else if (algorithm == urns.denyOverrides && rule.effect == rule_1.Effect.DENY) {
-                        effect = rule_1.Effect.DENY;
+                    else if (algorithm == urns.denyOverrides && rule.effect == Effect.DENY) {
+                        effect = Effect.DENY;
                     }
                 }
                 if (effect === undefined) {
-                    effect = algorithm == urns.permitOverrides ? rule_1.Effect.DENY : rule_1.Effect.PERMIT;
+                    effect = algorithm == urns.permitOverrides ? Effect.DENY : Effect.PERMIT;
                 }
                 let scopingUpdated = false;
                 for (const rule of policy?.rules || []) {
@@ -349,21 +342,21 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
                     if (rule?.target?.subjects) {
                         const userSubjectMatched = checkSubjectMatch(subject, rule.target.subjects, reducedUserScope);
                         if (!userSubjectMatched) {
-                            logger_1.default?.debug(`Skipping rule as user subject and rule subject don't match`);
+                            logger?.debug(`Skipping rule as user subject and rule subject don't match`);
                             continue;
                         }
                     }
                     const filterPermissions = buildQueryFromTarget(rule.target, rule.effect, reducedUserScope, urns, scopingUpdated, reqResources, rule.condition, subject, database);
-                    if (!exports._.isEmpty(filterPermissions)) {
+                    if (!_.isEmpty(filterPermissions)) {
                         scopingUpdated = filterPermissions.scopingUpdated;
                         delete filterPermissions.scopingUpdated;
                     }
-                    if (!exports._.isEmpty(filterPermissions)) {
+                    if (!_.isEmpty(filterPermissions)) {
                         policyFiltersArr.push(filterPermissions);
                         // if reducedUserScope is empty - no filters are applied further
                         // as this is a rule without scoping and should override the filters
                         // from other Rules which have scoping entity
-                        if (exports._.isEmpty(reducedUserScope) && rule.effect === effect) {
+                        if (_.isEmpty(reducedUserScope) && rule.effect === effect) {
                             return { filters: [] };
                         }
                     }
@@ -375,17 +368,17 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
             }
         }
     }
-    if (exports._.isEmpty(policyEffects)) {
+    if (_.isEmpty(policyEffects)) {
         return null;
     }
     let applicable;
     if (pSetAlgorithm == urns.permitOverrides) {
-        applicable = exports._.includes(policyEffects, rule_1.Effect.PERMIT) ? rule_1.Effect.PERMIT : rule_1.Effect.DENY;
+        applicable = _.includes(policyEffects, Effect.PERMIT) ? Effect.PERMIT : Effect.DENY;
     }
     else {
-        applicable = exports._.includes(policyEffects, rule_1.Effect.DENY) ? rule_1.Effect.DENY : rule_1.Effect.PERMIT;
+        applicable = _.includes(policyEffects, Effect.DENY) ? Effect.DENY : Effect.PERMIT;
     }
-    const key = applicable == rule_1.Effect.PERMIT ? 'or' : 'and';
+    const key = applicable == Effect.PERMIT ? 'or' : 'and';
     if (policyFiltersArr.length === 0) {
         return undefined;
     }
@@ -394,7 +387,7 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
         let filterList = [];
         // fix to override the AQL query filters with ACS policy filters if they exist for ArangoDB
         // TODO remove this once the AQL filterByOwnership is removed and ACS policy filters are returned
-        if (policy?.scope && applicable == rule_1.Effect.PERMIT && !query['custom_query']) {
+        if (policy?.scope && applicable == Effect.PERMIT && !query['custom_query']) {
             if (!query['custom_queries']) {
                 query['custom_queries'] = [];
             }
@@ -435,7 +428,7 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
         for (const filter of filterList) {
             query.filters.push(filter);
         }
-        if (exports._.isArray(filterList) && filterList.length > 0) {
+        if (_.isArray(filterList) && filterList.length > 0) {
             query.filters.operator = key;
             // override the operator if its returned from rule condition
             if (policy?.filters?.operator) {
@@ -454,7 +447,7 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
     if (aqlQueryFilters && query?.filters?.length > 0) {
         query.filters = [];
     }
-    if (!exports._.isEmpty(query) && (!exports._.isNil(query.filters) || !exports._.isEmpty(query['fields']) || !exports._.isEmpty(query['custom_query']))) {
+    if (!_.isEmpty(query) && (!_.isNil(query.filters) || !_.isEmpty(query['fields']) || !_.isEmpty(query['custom_query']))) {
         if (query['custom_arguments']) {
             query['custom_arguments'] = { value: Buffer.from(JSON.stringify(query['custom_arguments'])) };
         }
@@ -463,8 +456,7 @@ const buildFilterPermissions = async (policySet, subject, reqResources, database
     }
     return undefined;
 };
-exports.buildFilterPermissions = buildFilterPermissions;
-const generateOperationStatus = (code, message) => {
+export const generateOperationStatus = (code, message) => {
     if (!code) {
         code = 500; // Internal server error
     }
@@ -473,7 +465,6 @@ const generateOperationStatus = (code, message) => {
         message
     };
 };
-exports.generateOperationStatus = generateOperationStatus;
 /**
  * Check if the attributes of a resources from a rule, policy
  * or policy set match the attributes from a request.
@@ -481,7 +472,7 @@ exports.generateOperationStatus = generateOperationStatus;
  * @param ruleAttributes
  * @param requestAttributes
  */
-const attributesMatch = (ruleAttributes, requestAttributes) => {
+export const attributesMatch = (ruleAttributes, requestAttributes) => {
     if (ruleAttributes?.length > 0) {
         for (const attribute of ruleAttributes) {
             const id = attribute.id;
@@ -538,7 +529,6 @@ const attributesMatch = (ruleAttributes, requestAttributes) => {
     }
     return true;
 };
-exports.attributesMatch = attributesMatch;
 /**
  * creates resource filters and custom query / arguments for the resource list provided
  * It iterates through each resource and filter the applicable policies and
@@ -556,7 +546,7 @@ exports.attributesMatch = attributesMatch;
  * if this param is missing defaults to `arangoDB`
  *
  */
-const createResourceFilterMap = async (resource, policySetResponse, resources, action, subject, subjectID, authzEnforced, targetScope, database) => {
+export const createResourceFilterMap = async (resource, policySetResponse, resources, action, subject, subjectID, authzEnforced, targetScope, database) => {
     const resourceFilterMap = [];
     const customQueryArgs = [];
     for (const resourceObj of resource) {
@@ -571,8 +561,8 @@ const createResourceFilterMap = async (resource, policySetResponse, resources, a
         else {
             resourceName = resourcenameNameSpace;
         }
-        const resourceType = (0, authz_1.formatResourceType)(resourceName, resourceNameSpace);
-        const urns = config_1.cfg.get('authorization:urns');
+        const resourceType = formatResourceType(resourceName, resourceNameSpace);
+        const urns = cfg.get('authorization:urns');
         const resourceValueURN = urns?.model + `:${resourceType}`;
         const resourcePolicies = { policy_sets: [{ policies: [] }] };
         const resourceAttributes = [{ id: urns?.entity, value: resourceValueURN }];
@@ -584,10 +574,10 @@ const createResourceFilterMap = async (resource, policySetResponse, resources, a
                     for (const policy of policies) {
                         const policyTargetResources = policy?.target?.resources;
                         if (policyTargetResources) {
-                            const policyMatch = (0, exports.attributesMatch)(policyTargetResources, resourceAttributes);
+                            const policyMatch = attributesMatch(policyTargetResources, resourceAttributes);
                             if (policyMatch && policy?.rules?.length > 0) {
                                 for (const rule of policy.rules) {
-                                    const ruleMatch = (0, exports.attributesMatch)(rule?.target?.resources, resourceAttributes);
+                                    const ruleMatch = attributesMatch(rule?.target?.resources, resourceAttributes);
                                     if (ruleMatch) {
                                         resourcePolicies.policy_sets[0].policies.push(policy);
                                         break;
@@ -598,7 +588,7 @@ const createResourceFilterMap = async (resource, policySetResponse, resources, a
                         else if (policy?.rules) {
                             // check for rule
                             for (const rule of policy.rules) {
-                                const ruleMatch = (0, exports.attributesMatch)(rule?.target?.resources, resourceAttributes);
+                                const ruleMatch = attributesMatch(rule?.target?.resources, resourceAttributes);
                                 if (ruleMatch) {
                                     resourcePolicies.policy_sets[0].policies.push(policy);
                                     break;
@@ -609,9 +599,9 @@ const createResourceFilterMap = async (resource, policySetResponse, resources, a
                 }
             });
         }
-        const permissionArguments = await (0, exports.buildFilterPermissions)(resourcePolicies.policy_sets[0], subject, resources, database);
+        const permissionArguments = await buildFilterPermissions(resourcePolicies.policy_sets[0], subject, resources, database);
         if (permissionArguments) {
-            if (!exports._.isArray(permissionArguments.filters)) {
+            if (!_.isArray(permissionArguments.filters)) {
                 permissionArguments.filters = [permissionArguments.filters];
             }
             resourceFilterMap.push({ resource: resourceName, filters: permissionArguments.filters });
@@ -627,27 +617,26 @@ const createResourceFilterMap = async (resource, policySetResponse, resources, a
             const msg = [
                 `Access not allowed for request with subject:${subjectID},`,
                 `resource:${resourceName}, action:${action}, target_scope:${targetScope};`,
-                `the response was ${access_control_1.Response_Decision.DENY}`
+                `the response was ${Response_Decision.DENY}`
             ].join(' ');
             const details = `Subject:${subjectID} does not have access to target scope ${targetScope}}`;
-            logger_1.default?.verbose(msg);
-            logger_1.default?.verbose('Details:', { details });
-            return { decision: access_control_1.Response_Decision.DENY, operation_status: (0, exports.generateOperationStatus)(Number(config_1.errors.ACTION_NOT_ALLOWED.code), msg) };
+            logger?.verbose(msg);
+            logger?.verbose('Details:', { details });
+            return { decision: Response_Decision.DENY, operation_status: generateOperationStatus(Number(errors.ACTION_NOT_ALLOWED.code), msg) };
         }
         else {
-            logger_1.default?.verbose([
-                `The Access response was ${access_control_1.Response_Decision.DENY} for a request from subject:${subjectID}`,
+            logger?.verbose([
+                `The Access response was ${Response_Decision.DENY} for a request from subject:${subjectID}`,
                 `resource:${resourceName}, action:${action}, target_scope:${targetScope}`,
                 `but since ACS enforcement config is disabled overriding the ACS result`,
             ].join(' '));
-            return { decision: access_control_1.Response_Decision.PERMIT, operation_status: { code: 200, message: 'success' } };
+            return { decision: Response_Decision.PERMIT, operation_status: { code: 200, message: 'success' } };
         }
     }
     return {
         resourceFilterMap, customQueryArgs
     };
 };
-exports.createResourceFilterMap = createResourceFilterMap;
 /**
  * converts the Obligation Attribute[] to Obligation[] object
  *
@@ -656,9 +645,9 @@ exports.createResourceFilterMap = createResourceFilterMap;
  * to property[].
  *
  */
-const mapResourceURNObligationProperties = (obligations) => {
+export const mapResourceURNObligationProperties = (obligations) => {
     const mappedResourceObligation = [];
-    const urns = config_1.cfg.get('authorization:urns');
+    const urns = cfg.get('authorization:urns');
     if (obligations?.length > 0) {
         for (const obligationObj of obligations) {
             if (obligationObj?.id === urns.entity && obligationObj?.value) {
@@ -683,5 +672,4 @@ const mapResourceURNObligationProperties = (obligations) => {
     }
     return mappedResourceObligation;
 };
-exports.mapResourceURNObligationProperties = mapResourceURNObligationProperties;
 //# sourceMappingURL=utils.js.map