@riocrypto/common-server 1.0.2770 → 1.0.2774

package/build/middlewares/require-min-admin-role.d.ts

@@ -1,3 +1,3 @@
-import { AdminAuthRole } from "@riocrypto/common";
+import { AdminAuthSpecialPermission, AdminAuthRole } from "@riocrypto/common";
 import { NextFunction, Request, Response } from "express";
-export declare const requireMinAdminRole: (req: Request, res: Response, next: NextFunction, minRole: AdminAuthRole) => Promise<void>;
+export declare const requireMinAdminRole: (req: Request, res: Response, next: NextFunction, minRole: AdminAuthRole, requiredSpecialPermissions?: AdminAuthSpecialPermission[]) => Promise<void>;

package/build/middlewares/require-min-admin-role.js

@@ -16,12 +16,16 @@ const adminRoleOrder = [
     common_1.AdminAuthRole.CreateAndModify,
     common_1.AdminAuthRole.SuperAdmin,
 ];
-const requireMinAdminRole = (req, res, next, minRole) => __awaiter(void 0, void 0, void 0, function* () {
+const requireMinAdminRole = (req, res, next, minRole, requiredSpecialPermissions = []) => __awaiter(void 0, void 0, void 0, function* () {
     var _a;
     if (req.adminAuth) {
-        if (adminRoleOrder.indexOf((_a = req.adminAuth) === null || _a === void 0 ? void 0 : _a.role) <
-            adminRoleOrder.indexOf(minRole)) {
-            throw new common_1.GenericInputError(`Insufficient permissions. This endpoint requires at least the ${minRole} role. Contact Javier to change your access role.`);
+        if (adminRoleOrder.indexOf(req.adminAuth.role) < adminRoleOrder.indexOf(minRole)) {
+            throw new common_1.GenericInputError(`Insufficient permissions.`);
+        }
+        if (requiredSpecialPermissions.length > 0) {
+            if (!((_a = req.adminAuth.permissions) === null || _a === void 0 ? void 0 : _a.some((permission) => requiredSpecialPermissions.includes(permission)))) {
+                throw new common_1.GenericInputError("Insufficient permissions.");
+            }
         }
     }
     next();

package/build/models/admin-auth.d.ts

@@ -1,4 +1,4 @@
-import { APIKey, AdminAuthRole, AdminTaskType } from "@riocrypto/common";
+import { APIKey, AdminAuthRole, AdminAuthSpecialPermission, AdminTaskType } from "@riocrypto/common";
 import { Mongoose, Model, Document, HydratedDocument } from "mongoose";
 interface AdminAuthAttrs {
     password: string;
@@ -18,6 +18,7 @@ interface AdminAuthAttrs {
     lastName: string;
     secondLastName?: string;
     role: AdminAuthRole;
+    permissions?: AdminAuthSpecialPermission[];
     previousPasswords?: string[];
     authenticatorSecret?: string;
     apiKeys?: APIKey[];
@@ -37,6 +38,7 @@ interface AdminAuthDoc extends Document {
     assignedTaskTypes: AdminTaskType[];
     userAuthId?: string;
     role: AdminAuthRole;
+    permissions?: AdminAuthSpecialPermission[];
     firstName?: string;
     middleName?: string;
     lastName?: string;

package/build/models/admin-auth.js

@@ -10,6 +10,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildAdminAuth = void 0;
+const common_1 = require("@riocrypto/common");
 const password_1 = require("../services/password");
 const buildAdminAuth = (mongoose) => {
     // if model is already defined, return it
@@ -45,7 +46,14 @@ const buildAdminAuth = (mongoose) => {
         },
         role: {
             type: String,
+            enum: Object.values(common_1.AdminAuthRole),
         },
+        permissions: [
+            {
+                type: String,
+                enum: Object.values(common_1.AdminAuthSpecialPermission),
+            },
+        ],
         slack: {
             type: Object,
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.2770",
+  "version": "1.0.2774",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -24,7 +24,7 @@
     "@google-cloud/secret-manager": "^5.6.0",
     "@google-cloud/storage": "^7.19.0",
     "@hyperdx/node-opentelemetry": "^0.10.3",
-    "@riocrypto/common": "1.0.2566",
+    "@riocrypto/common": "1.0.2567",
     "@slack/web-api": "^7.15.0",
     "@types/express": "^4.17.25",
     "axios": "1.13.6",