@rufous/aem 1.1.17 → 1.1.19

package/build/index.d.ts

@@ -10,6 +10,7 @@ export * from './errors/security-error';
 export * from './middlewares/current-user';
 export * from './middlewares/error-handler';
 export * from './middlewares/require-auth';
+export * from './middlewares/required-permissions';
 export * from './middlewares/require-candidate-auth';
 export * from './middlewares/require-company-employee-auth';
 export * from './middlewares/require-company-employee-manager-auth';
@@ -114,6 +115,7 @@ export * from './events/job-matched-count-event';
 export * from './events/partner-job-matched-candidates-count-event';
 export * from './events/team-created-event';
 export * from './events/employee-group-created-event';
+export * from './events/user-role-created-event';
 export * from './types/access-level';
 export * from './types/asset-status';
 export * from './types/asset-allocation-status';

package/build/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./errors/security-error"), exports);
 __exportStar(require("./middlewares/current-user"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/require-auth"), exports);
+__exportStar(require("./middlewares/required-permissions"), exports);
 __exportStar(require("./middlewares/require-candidate-auth"), exports);
 __exportStar(require("./middlewares/require-company-employee-auth"), exports);
 __exportStar(require("./middlewares/require-company-employee-manager-auth"), exports);
@@ -127,6 +128,7 @@ __exportStar(require("./events/job-matched-count-event"), exports);
 __exportStar(require("./events/partner-job-matched-candidates-count-event"), exports);
 __exportStar(require("./events/team-created-event"), exports);
 __exportStar(require("./events/employee-group-created-event"), exports);
+__exportStar(require("./events/user-role-created-event"), exports);
 __exportStar(require("./types/access-level"), exports);
 __exportStar(require("./types/asset-status"), exports);
 __exportStar(require("./types/asset-allocation-status"), exports);

package/build/middlewares/required-permissions.d.ts

@@ -0,0 +1,2 @@
+import { Request, Response, NextFunction } from "express";
+export declare const requirePermissions: (accessType: string | undefined, permissionType: string[] | undefined, userModel: any, permissionsModel: any, req: Request, res: Response, next: NextFunction) => Response<any> | undefined;

package/build/middlewares/required-permissions.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requirePermissions = void 0;
+var not_authorized_error_1 = require("../errors/not-authorized-error");
+var user_status_1 = require("../types/user-status");
+var mongoose_1 = __importDefault(require("mongoose"));
+exports.requirePermissions = function (accessType, permissionType, userModel, permissionsModel, req, res, next) {
+    if (accessType === void 0) { accessType = "read"; }
+    if (permissionType === void 0) { permissionType = []; }
+    if (!req.currentUser) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    if (req.currentUser.ust === user_status_1.UserStatus.Suspended) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    var user = req.currentUser;
+    var userDetails = mongoose_1.default.model(userModel).findById(user.id);
+    var ispermExist = false;
+    if (!userDetails) {
+        throw new not_authorized_error_1.NotAuthorizedError();
+    }
+    else if (userDetails.roles) {
+        var permissions = mongoose_1.default
+            .model(permissionsModel)
+            .find({ roles: { $in: userDetails.roles } });
+        var permissionsArr = permissions
+            .filter(function (perm) { return perm[accessType]; })
+            .map(function (perm) { return perm.name; });
+        ispermExist = permissionsArr.some(function (perm) {
+            return permissionType.includes(perm);
+        });
+    }
+    if (!ispermExist) {
+        return res.status(403).json({
+            error: "Sorry, you don't have access.",
+        });
+    }
+    else {
+        next();
+    }
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rufous/aem",
-  "version": "1.1.17",
+  "version": "1.1.19",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [
@@ -21,9 +21,11 @@
     "@types/cookie-session": "^2.0.41",
     "@types/express": "^4.17.3",
     "@types/jsonwebtoken": "^8.5.0",
+    "@types/mongoose": "5.7.8",
     "cookie-session": "^1.4.0",
     "express": "^4.17.1",
     "express-validator": "^6.6.0",
+    "mongoose": "5.10.19",
     "express-winston": "^4.0.5",
     "jsonwebtoken": "^8.5.1",
     "node-nats-streaming": "^0.3.2",