@rufous/aem 1.1.16 → 1.1.18

package/build/events/admin-default-state-created-event.d.ts

@@ -0,0 +1,12 @@
+import { Subjects } from './subjects';
+export interface AdminDefaultStateCreatedEvent {
+    subject: Subjects.AdminDefaultStateCreated;
+    data: {
+        id: string;
+        statusName: string;
+        color: string;
+        description: string;
+        createdBy: string;
+        createdAt: Date;
+    };
+}

package/build/events/admin-default-state-created-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/subjects.d.ts

@@ -23,6 +23,7 @@ export declare enum Subjects {
     AdminWorkflowStatusTransitionCreated = "admin:workflow:status:transition:created",
     AdminWorkflowItemDeleted = "admin:workflow:item:deleted",
     AdminDefaultStateTransitionCreated = "admin:default:state:transition:created",
+    AdminDefaultStateCreated = "admin:default:state:created",
     LeaveTypeDeleted = "leave:type:deleted",
     BankAccountCreated = "bank:account:created",
     CandidateCreated = "candidate:created",

package/build/events/subjects.js

@@ -27,6 +27,7 @@ var Subjects;
     Subjects["AdminWorkflowStatusTransitionCreated"] = "admin:workflow:status:transition:created";
     Subjects["AdminWorkflowItemDeleted"] = "admin:workflow:item:deleted";
     Subjects["AdminDefaultStateTransitionCreated"] = "admin:default:state:transition:created";
+    Subjects["AdminDefaultStateCreated"] = "admin:default:state:created";
     Subjects["LeaveTypeDeleted"] = "leave:type:deleted";
     Subjects["BankAccountCreated"] = "bank:account:created";
     Subjects["CandidateCreated"] = "candidate:created";

package/build/index.d.ts

@@ -10,6 +10,7 @@ export * from './errors/security-error';
 export * from './middlewares/current-user';
 export * from './middlewares/error-handler';
 export * from './middlewares/require-auth';
+export * from './middlewares/required-permissions';
 export * from './middlewares/require-candidate-auth';
 export * from './middlewares/require-company-employee-auth';
 export * from './middlewares/require-company-employee-manager-auth';
@@ -33,6 +34,7 @@ export * from './events/admin-hierarchy-created-event';
 export * from './events/admin-department-created-event';
 export * from './events/admin-department-recurring-created-event';
 export * from './events/admin-default-state-transition-created-event';
+export * from './events/admin-default-state-created-event';
 export * from './events/admin-category-created-event';
 export * from './events/admin-workflow-created-event';
 export * from './events/admin-team-created-event';

package/build/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./errors/security-error"), exports);
 __exportStar(require("./middlewares/current-user"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/require-auth"), exports);
+__exportStar(require("./middlewares/required-permissions"), exports);
 __exportStar(require("./middlewares/require-candidate-auth"), exports);
 __exportStar(require("./middlewares/require-company-employee-auth"), exports);
 __exportStar(require("./middlewares/require-company-employee-manager-auth"), exports);
@@ -46,6 +47,7 @@ __exportStar(require("./events/admin-hierarchy-created-event"), exports);
 __exportStar(require("./events/admin-department-created-event"), exports);
 __exportStar(require("./events/admin-department-recurring-created-event"), exports);
 __exportStar(require("./events/admin-default-state-transition-created-event"), exports);
+__exportStar(require("./events/admin-default-state-created-event"), exports);
 __exportStar(require("./events/admin-category-created-event"), exports);
 __exportStar(require("./events/admin-workflow-created-event"), exports);
 __exportStar(require("./events/admin-team-created-event"), exports);

package/build/middlewares/required-permissions.d.ts

@@ -0,0 +1,2 @@
+import { Request, Response, NextFunction } from "express";
+export declare const requirePermissions: (accessType: string | undefined, permissionType: string[] | undefined, userModel: any, permissionsModel: any, req: Request, res: Response, next: NextFunction) => Response<any> | undefined;

package/build/middlewares/required-permissions.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requirePermissions = void 0;
+var not_authorized_error_1 = require("../errors/not-authorized-error");
+var user_status_1 = require("../types/user-status");
+var mongoose_1 = __importDefault(require("mongoose"));
+exports.requirePermissions = function (accessType, permissionType, userModel, permissionsModel, req, res, next) {
+    if (accessType === void 0) { accessType = "read"; }
+    if (permissionType === void 0) { permissionType = []; }
+    if (!req.currentUser) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    if (req.currentUser.ust === user_status_1.UserStatus.Suspended) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    var user = req.currentUser;
+    var userDetails = mongoose_1.default.model(userModel).findById(user.id);
+    var ispermExist = false;
+    if (!userDetails) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    else if (userDetails.roles) {
+        var permissions = mongoose_1.default
+            .model(permissionsModel)
+            .find({ roles: { $in: userDetails.roles } });
+        var permissionsArr = permissions
+            .filter(function (perm) { return perm[accessType]; })
+            .map(function (perm) { return perm.name; });
+        ispermExist = permissionsArr.some(function (perm) {
+            return permissionType.includes(perm);
+        });
+    }
+    if (!ispermExist) {
+        return res.status(403).json({
+            error: "Sorry, you don't have access.",
+        });
+    }
+    else {
+        next();
+    }
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rufous/aem",
-  "version": "1.1.16",
+  "version": "1.1.18",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [
@@ -21,9 +21,11 @@
     "@types/cookie-session": "^2.0.41",
     "@types/express": "^4.17.3",
     "@types/jsonwebtoken": "^8.5.0",
+    "@types/mongoose": "5.7.8",
     "cookie-session": "^1.4.0",
     "express": "^4.17.1",
     "express-validator": "^6.6.0",
+    "mongoose": "5.10.19",
     "express-winston": "^4.0.5",
     "jsonwebtoken": "^8.5.1",
     "node-nats-streaming": "^0.3.2",