@saltcorn/data 1.6.0-beta.4 → 1.6.0-beta.6

package/dist/plugin-helper.d.ts

@@ -12,6 +12,7 @@ import type { Where } from "@saltcorn/db-common/internal";
 import type { GenObj } from "@saltcorn/types/common_types";
 import type { AbstractUser } from "@saltcorn/types/model-abstracts/abstract_user";
 import type { FieldLike } from "@saltcorn/types/base_types";
+import User from "models/user";
 /**
  *
  * @param {string} url0
@@ -204,22 +205,13 @@ declare const stateFieldsToQuery: ({ state, stateHash, fields, prefix, noSortAnd
     prefix?: string;
     noSortAndPaging?: boolean;
 }) => GenObj;
-/**
- * @function
- * @param {object} opts
- * @param {Field[]} opts.fields
- * @param {object} opts.state
- * @param {string} [opts.prefix = ""]
- * @param {boolean} [opts.approximate = true]
- * @param {Table} opts.table
- * @returns {object}
- */
-declare const stateFieldsToWhere: ({ fields, state, approximate, table, prefix, }: {
+declare const stateFieldsToWhere: ({ fields, state, approximate, table, prefix, user, }: {
     fields: Field[];
     state: GenObj;
     approximate?: boolean;
     table?: Table;
     prefix?: string;
+    user?: User;
 }) => Where;
 /**
  * initial_config_all_fields Contract

package/dist/plugin-helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-helper.d.ts","sourceRoot":"","sources":["../plugin-helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,KAAK,MAAM,gBAAgB,CAAC;AACnC,OAAO,KAAK,MAAM,gBAAgB,CAAC;AA4BnC,QAAA,MAGE,gCAAgC,gHAIpB,CAAC;AAGf,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAO,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,QAAA,MAAM,SAAS,GACb,MAAM,MAAM,EACZ,OAAO,MAAM,EACb,OAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAC5C,aAAY,MAAW,EACvB,YAAW,MAAW,EACtB,YAAW,MAAW,EACtB,YAAW,MAAW,EACtB,aAAa,MAAM,EACnB,iBAAiB,MAAM,EACvB,eAAe,MAAM,EACrB,aAAa,MAAM,GAAG,KAAK,EAC3B,aAAa,MAAM,EACnB,oBAAoB,OAAO,EAC3B,aAAa,OAAO,EAAE,cAAc;AACpC,aAAa,MAAM,EACnB,aAAa,MAAM,EACnB,MAAM,MAAM,EACZ,eAAe,OAAO,KACrB,MAqFF,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,kBAAkB,GAAI,OAAO,MAAM,EAAE,aAAa,OAAO,KAAG,MAiDjE,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,kBAAkB,GACtB,QAAQ,KAAK,EAAE,EACf,MAAM,MAAM,EACZ,eAAc,OAAe,KAC5B;IACD,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAuGxC,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,kBAAkB,GACtB,OAAO,KAAK,EACZ,cAAc,MAAM,KACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAkBlC,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,GACrB,QAAQ,KAAK,EAAE,EACf,QAAQ,OAAO,EACf,WAAU,MAAU,EACpB,OAAO,MAAM,EACb,MAAM,MAAM,KACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAsC7B,CAAC;AAyGF;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,GAC7B,QAAQ,KAAK,EACb,UAAU,MAAM,EAChB,QAAQ;IACN,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;CACrC,KACA,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CAkD3C,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,8BAA8B,GAClC,QAAQ,KAAK,EACb,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CA+B3C,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,8BAA8B,GAClC,QAAQ,KAAK,EACb,UAAU,MAAM,EAChB,OAAO;IACL,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;CACrC,EACD,MAAM,MAAM,EAAE,KACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CA+D3C,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GACtB,OAAO,KAAK,EACZ,UAAU,MAAM,EAChB,SAAQ,CAAC,CAAC,EAAE,IAAI,KAAK,OAAoB,KACxC,OAAO,CAAC;IACT,cAAc,EAAE,GAAG,EAAE,CAAC;IACtB,cAAc,EAAE,GAAG,EAAE,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;CAC3C,CA6JA,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB,GACzB,QAAQ,MAAM,EACd,OAAO,KAAK,EACZ,QAAO,MAAW,KACjB,OAAO,CAAC,GAAG,EAAE,CAOe,CAAC;AAEhC;;;;;;;;;GASG;AACH,QAAA,MAAM,mBAAmB,GAAU,oFAQhC;IACD,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,KAAG,OAAO,CAAC,GAAG,EAAE,CAknBhB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,GACnB,OAAO,KAAK,EACZ,UAAU,MAAM,GAAG,IAAI,EACvB,WAAU,MAAU,KACnB,OAAO,CAAC,GAAG,EAAE,CA0Cf,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,gBAAgB,GACpB,OAAO,KAAK,EACZ,UAAU,MAAM,KACf,OAAO,CAAC,GAAG,EAAE,CAoBf,CAAC;AAmCF,QAAA,MAAM,qBAAqB,GAAI,iJAgB5B;IACD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAG,MA6DH,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,sBAAsB,GAC1B,SAAS,GAAG,EAAE,EACd,QAAQ,KAAK,EAAE,EACf,QAAQ,GAAG,EACX,KAAK,MAAM,EACX,OAAO,KAAK,KACX;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAgOtE,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GAAI,wDAMzB;IACD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,KAAG,MA+DH,CAAC;AAwFF;;;;;;;;;GASG;AACH,QAAA,MAAM,kBAAkB,GAAI,gDAMzB;IACD,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,KAAG,KAqTH,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,GAC5B,QAAQ,OAAO,MACT,8BAGJ;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAG,OAAO,CAAC,GAAG,CA8Hd,CAAC;AAEJ;;;;GAIG;AAEH,QAAA,MAAM,cAAc,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,MAAM,GAAG,SAGrD,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,SAAS,GAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,MA4CjE,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,EAAE,KAAG,KAAK,GAAG,MA+BjE,CAAC;AACF;;;;;;GAMG;AACH,QAAA,MAAM,2BAA2B,GAC/B,eAAe,QAAQ,EACvB,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,EAAE,EAC9B,UAAS,MAAW,EACpB,WAAU,MAAW,KACpB,MAybF,CAAC;AAoBF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,GAAU,uBAI9B;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,KAAG,OAAO,CAAC,GAAG,CAiJd,CAAC;AAEF,QAAA,MAAM,WAAW,GAAI,aAAa;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,QAKzC,CAAC;AAEhC,QAAA,MAAM,iBAAiB,QAAa,OAAO,CAAC,GAAG,CAyC9C,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,WAAW,GACf,UAAU,MAAM,EAChB,WAAW,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,KAC9B,MAgCF,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,GACnB,QAAQ;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAC3B,MAAM,YAAY,GAAG,SAAS,EAC9B,YAAY,MAAM,KACjB,OAAO,CAAC,GAAG,EAAE,CA0Cf,CAAC;AAEF,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,8BAA8B,EAC9B,8BAA8B,EAC9B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,QAAQ,EACR,MAAM,EACN,eAAe,GAChB,CAAC"}
+{"version":3,"file":"plugin-helper.d.ts","sourceRoot":"","sources":["../plugin-helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,KAAK,MAAM,gBAAgB,CAAC;AACnC,OAAO,KAAK,MAAM,gBAAgB,CAAC;AA4BnC,QAAA,MAGE,gCAAgC,gHAIpB,CAAC;AAGf,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAO,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,IAAI,MAAM,aAAa,CAAC;AAE/B;;;;;;;;;;;;;;;;GAgBG;AACH,QAAA,MAAM,SAAS,GACb,MAAM,MAAM,EACZ,OAAO,MAAM,EACb,OAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAC5C,aAAY,MAAW,EACvB,YAAW,MAAW,EACtB,YAAW,MAAW,EACtB,YAAW,MAAW,EACtB,aAAa,MAAM,EACnB,iBAAiB,MAAM,EACvB,eAAe,MAAM,EACrB,aAAa,MAAM,GAAG,KAAK,EAC3B,aAAa,MAAM,EACnB,oBAAoB,OAAO,EAC3B,aAAa,OAAO,EAAE,cAAc;AACpC,aAAa,MAAM,EACnB,aAAa,MAAM,EACnB,MAAM,MAAM,EACZ,eAAe,OAAO,KACrB,MAqFF,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,kBAAkB,GAAI,OAAO,MAAM,EAAE,aAAa,OAAO,KAAG,MAiDjE,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,kBAAkB,GACtB,QAAQ,KAAK,EAAE,EACf,MAAM,MAAM,EACZ,eAAc,OAAe,KAC5B;IACD,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAuGxC,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,kBAAkB,GACtB,OAAO,KAAK,EACZ,cAAc,MAAM,KACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAkBlC,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,GACrB,QAAQ,KAAK,EAAE,EACf,QAAQ,OAAO,EACf,WAAU,MAAU,EACpB,OAAO,MAAM,EACb,MAAM,MAAM,KACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAsC7B,CAAC;AAyGF;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,GAC7B,QAAQ,KAAK,EACb,UAAU,MAAM,EAChB,QAAQ;IACN,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;CACrC,KACA,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CAkD3C,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,8BAA8B,GAClC,QAAQ,KAAK,EACb,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CA+B3C,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,8BAA8B,GAClC,QAAQ,KAAK,EACb,UAAU,MAAM,EAChB,OAAO;IACL,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;CACrC,EACD,MAAM,MAAM,EAAE,KACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,EAAE,CA+D3C,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GACtB,OAAO,KAAK,EACZ,UAAU,MAAM,EAChB,SAAQ,CAAC,CAAC,EAAE,IAAI,KAAK,OAAoB,KACxC,OAAO,CAAC;IACT,cAAc,EAAE,GAAG,EAAE,CAAC;IACtB,cAAc,EAAE,GAAG,EAAE,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;CAC3C,CA6JA,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,qBAAqB,GACzB,QAAQ,MAAM,EACd,OAAO,KAAK,EACZ,QAAO,MAAW,KACjB,OAAO,CAAC,GAAG,EAAE,CAOe,CAAC;AAEhC;;;;;;;;;GASG;AACH,QAAA,MAAM,mBAAmB,GAAU,oFAQhC;IACD,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,KAAG,OAAO,CAAC,GAAG,EAAE,CAknBhB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,GACnB,OAAO,KAAK,EACZ,UAAU,MAAM,GAAG,IAAI,EACvB,WAAU,MAAU,KACnB,OAAO,CAAC,GAAG,EAAE,CA0Cf,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,gBAAgB,GACpB,OAAO,KAAK,EACZ,UAAU,MAAM,KACf,OAAO,CAAC,GAAG,EAAE,CAoBf,CAAC;AAmCF,QAAA,MAAM,qBAAqB,GAAI,iJAgB5B;IACD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAG,MA6DH,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,sBAAsB,GAC1B,SAAS,GAAG,EAAE,EACd,QAAQ,KAAK,EAAE,EACf,QAAQ,GAAG,EACX,KAAK,MAAM,EACX,OAAO,KAAK,KACX;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAgOtE,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GAAI,wDAMzB;IACD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,KAAG,MA+DH,CAAC;AAiIF,QAAA,MAAM,kBAAkB,GAAI,sDAOzB;IACD,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb,KAAG,KA6UH,CAAC;AAEF;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,GAC5B,QAAQ,OAAO,MACT,8BAGJ;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAG,OAAO,CAAC,GAAG,CA8Hd,CAAC;AAEJ;;;;GAIG;AAEH,QAAA,MAAM,cAAc,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,MAAM,GAAG,SAGrD,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,SAAS,GAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,EAAE,EAAE,MAAM,MAAM,KAAG,MA4CjE,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,EAAE,KAAG,KAAK,GAAG,MA+BjE,CAAC;AACF;;;;;;GAMG;AACH,QAAA,MAAM,2BAA2B,GAC/B,eAAe,QAAQ,EACvB,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,EAAE,EAC9B,UAAS,MAAW,EACpB,WAAU,MAAW,KACpB,MAybF,CAAC;AAoBF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,GAAU,uBAI9B;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,KAAG,OAAO,CAAC,GAAG,CAmJd,CAAC;AAEF,QAAA,MAAM,WAAW,GAAI,aAAa;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,QAKzC,CAAC;AAEhC,QAAA,MAAM,iBAAiB,QAAa,OAAO,CAAC,GAAG,CAyC9C,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,WAAW,GACf,UAAU,MAAM,EAChB,WAAW,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,KAC9B,MAgCF,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,GACnB,QAAQ;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAC3B,MAAM,YAAY,GAAG,SAAS,EAC9B,YAAY,MAAM,KACjB,OAAO,CAAC,GAAG,EAAE,CA0Cf,CAAC;AAEF,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,8BAA8B,EAC9B,8BAA8B,EAC9B,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,QAAQ,EACR,MAAM,EACN,eAAe,GAChB,CAAC"}

package/dist/plugin-helper.js

@@ -1768,7 +1768,7 @@ const queryToString = (query) => {
     };
     return JSON.stringify(relObj);
 };
-const handleRelationPath = (queryObj, qstate, table) => {
+const handleRelationPath = (queryObj, qstate, table, user) => {
     if (queryObj.path.length > 0) {
         const levels = [];
         let lastTableName = queryObj.sourcetable;
@@ -1776,6 +1776,9 @@ const handleRelationPath = (queryObj, qstate, table) => {
         for (const level of queryObj.path) {
             if (level.inboundKey) {
                 const tbl = table_1.default.findOne(level.table);
+                if (typeof user !== "undefined" &&
+                    (user?.role_id || 100) > tbl.min_role_read)
+                    return;
                 levels.push({
                     ...level,
                     pk_name: tbl?.pk_name,
@@ -1789,6 +1792,9 @@ const handleRelationPath = (queryObj, qstate, table) => {
             }
             else {
                 const lastTable = table_1.default.findOne({ name: lastTableName });
+                if (typeof user !== "undefined" &&
+                    (user?.role_id || 100) > lastTable.min_role_read)
+                    return;
                 const refField = lastTable?.fields?.find((field) => field.name === level.fkey);
                 levels.push({
                     table: refField?.reftable_name,
@@ -1797,6 +1803,9 @@ const handleRelationPath = (queryObj, qstate, table) => {
                 });
                 lastTableName = refField?.reftable_name;
                 const finalTable = table_1.default.findOne({ name: lastTableName });
+                if (typeof user !== "undefined" &&
+                    (user?.role_id || 100) > lastTable.min_role_read)
+                    return;
                 if (!where)
                     where = {
                         [finalTable?.pk_name || "id"]: queryObj.srcId !== "NULL" ? queryObj.srcId : null,
@@ -1822,7 +1831,24 @@ const handleRelationPath = (queryObj, qstate, table) => {
  * @param {Table} opts.table
  * @returns {object}
  */
-const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix = "", }) => {
+/**
+ * Recursively strip inSelect/inSelectWithLevels from user-provided objects
+ * to prevent subquery injection through passthrough code paths.
+ */
+function stripDangerousOperators(obj) {
+    if (typeof obj !== "object" || obj === null)
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(stripDangerousOperators);
+    const result = {};
+    for (const [k, v] of Object.entries(obj)) {
+        if (k === "inSelect" || k === "inSelectWithLevels")
+            continue;
+        result[k] = stripDangerousOperators(v);
+    }
+    return result;
+}
+const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix = "", user, }) => {
     let qstate = {};
     const orFields = [];
     Object.entries(state || {}).forEach(([k, v]) => {
@@ -1849,7 +1875,7 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
             return;
         }
         if (k === "or" && typeof v === "object") {
-            qstate.or = v;
+            qstate.or = stripDangerousOperators(v);
             return;
         }
         if (k === "_or_field") {
@@ -1861,11 +1887,11 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
         }
         const field = fields.find((fld) => fld.name === k);
         if (k === "_relation_path_" || k === "_inbound_relation_path_")
-            handleRelationPath(typeof v === "string" ? stringToQuery(v) : v, qstate, table);
+            handleRelationPath(typeof v === "string" ? stringToQuery(v) : v, qstate, table, user);
         else if (k.startsWith(".")) {
             const queryObj = parseRelationPath(k);
             queryObj.srcId = v;
-            handleRelationPath(queryObj, qstate, table);
+            handleRelationPath(queryObj, qstate, table, user);
         }
         else if (k.startsWith("_fromdate_")) {
             const datefield = db_1.default.sqlsanitize(k.replace("_fromdate_", ""));
@@ -1947,7 +1973,7 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
             if (nfield) {
                 if (!qstate.not)
                     qstate.not = {};
-                qstate.not[notfield] = v;
+                qstate.not[notfield] = stripDangerousOperators(v);
             }
         }
         else if (field &&
@@ -2020,7 +2046,7 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
             ];
         }
         else if (typeof v === "object" && field) {
-            qstate[k] = v;
+            qstate[k] = stripDangerousOperators(v);
         }
         else if (field && field.type && field.type.read)
             qstate[k] = Array.isArray(v)
@@ -2035,21 +2061,25 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
             const [thoughTblNm, throughField] = throughPart.split("->");
             const [jtNm, lblField] = finalPart.split("->");
             const jtTbl = table_1.default.findOne(jtNm);
+            const throughTable = table_1.default.findOne(thoughTblNm);
             let where = { [db_1.default.sqlsanitize(lblField)]: v };
-            qstate[jFieldNm] = [
-                ...(qstate[jFieldNm] ? [qstate[jFieldNm]] : []),
-                {
-                    // where jFieldNm in (select id from jtnm where lblField=v)
-                    inSelect: {
-                        table: db_1.default.sqlsanitize(thoughTblNm),
-                        tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
-                        field: db_1.default.sqlsanitize(throughField),
-                        valField: jtTbl?.pk_name || "id",
-                        through: db_1.default.sqlsanitize(jtNm),
-                        where,
+            if (typeof user === "undefined" ||
+                ((user?.role_id || 100) <= jtTbl.min_role_read &&
+                    (user?.role_id || 100) <= throughTable.min_role_read))
+                qstate[jFieldNm] = [
+                    ...(qstate[jFieldNm] ? [qstate[jFieldNm]] : []),
+                    {
+                        // where jFieldNm in (select id from jtnm where lblField=v)
+                        inSelect: {
+                            table: db_1.default.sqlsanitize(thoughTblNm),
+                            tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
+                            field: db_1.default.sqlsanitize(throughField),
+                            valField: jtTbl?.pk_name || "id",
+                            through: db_1.default.sqlsanitize(jtNm),
+                            where,
+                        },
                     },
-                },
-            ];
+                ];
         }
         else if (k.includes("->")) {
             // jFieldNm.jtnm->lblField
@@ -2063,23 +2093,26 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
                 lblFld.type?.name === "String" &&
                 !lblFld.attributes?.options)
                 where = { [db_1.default.sqlsanitize(lblField)]: { ilike: v } };
-            qstate[jFieldNm] = [
-                ...(qstate[jFieldNm] ? [qstate[jFieldNm]] : []),
-                {
-                    // where jFieldNm in (select id from jtnm where lblField=v)
-                    inSelect: {
-                        table: db_1.default.sqlsanitize(jtNm),
-                        tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
-                        field: jTable?.pk_name,
-                        where,
+            if (typeof user === "undefined" ||
+                (user?.role_id || 100) <= jTable.min_role_read)
+                qstate[jFieldNm] = [
+                    ...(qstate[jFieldNm] ? [qstate[jFieldNm]] : []),
+                    {
+                        // where jFieldNm in (select id from jtnm where lblField=v)
+                        inSelect: {
+                            table: db_1.default.sqlsanitize(jtNm),
+                            tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
+                            field: jTable?.pk_name,
+                            where,
+                        },
                     },
-                },
-            ];
+                ];
         }
         else if (k.includes(".")) {
             const kpath = k.split(".");
             if (kpath.length === 3) {
                 const [jtNm, jFieldNm, lblField] = kpath;
+                const jTbl = table_1.default.findOne(jtNm);
                 let isString = false;
                 const labelField = table_1.default.findOne({ name: jtNm })?.getField?.(lblField);
                 if (labelField)
@@ -2087,39 +2120,46 @@ const stateFieldsToWhere = ({ fields, state, approximate = true, table, prefix =
                         labelField.type?.name === "String" &&
                             !labelField.attributes?.exact_search_only;
                 const pk = table ? table.pk_name : "id";
-                qstate[pk] = [
-                    ...(qstate[pk] ? [qstate[pk]] : []),
-                    {
-                        // where id in (select jFieldNm from jtnm where lblField=v)
-                        inSelect: {
-                            table: db_1.default.sqlsanitize(jtNm),
-                            tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
-                            field: db_1.default.sqlsanitize(jFieldNm),
-                            where: {
-                                [db_1.default.sqlsanitize(lblField)]: isString && approximate ? { ilike: v } : v,
+                if (typeof user === "undefined" ||
+                    (user?.role_id || 100) <= jTbl.min_role_read)
+                    qstate[pk] = [
+                        ...(qstate[pk] ? [qstate[pk]] : []),
+                        {
+                            // where id in (select jFieldNm from jtnm where lblField=v)
+                            inSelect: {
+                                table: db_1.default.sqlsanitize(jtNm),
+                                tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
+                                field: db_1.default.sqlsanitize(jFieldNm),
+                                where: {
+                                    [db_1.default.sqlsanitize(lblField)]: isString && approximate ? { ilike: v } : v,
+                                },
                             },
                         },
-                    },
-                ];
+                    ];
             }
             else if (kpath.length === 4) {
                 const [jtNm, jFieldNm, tblName, lblField] = kpath;
+                const jTbl = table_1.default.findOne(jtNm);
+                const thTbl = table_1.default.findOne(tblName);
                 const pk = table ? table.pk_name : "id";
-                qstate[pk] = [
-                    ...(qstate[pk] ? [qstate[pk]] : []),
-                    {
-                        // where id in (select ss1.id from jtNm ss1 join tblName ss2 on ss2.id = ss1.jFieldNm where ss2.lblField=v)
-                        inSelect: {
-                            table: db_1.default.sqlsanitize(jtNm),
-                            tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
-                            field: db_1.default.sqlsanitize(jFieldNm),
-                            valField: table_1.default.findOne(jtNm)?.pk_name || "id",
-                            through: db_1.default.sqlsanitize(tblName),
-                            through_pk: table_1.default.findOne(tblName)?.pk_name || "id",
-                            where: { [db_1.default.sqlsanitize(lblField)]: v },
+                if (typeof user === "undefined" ||
+                    ((user?.role_id || 100) <= jTbl.min_role_read &&
+                        (user?.role_id || 100) <= thTbl.min_role_read))
+                    qstate[pk] = [
+                        ...(qstate[pk] ? [qstate[pk]] : []),
+                        {
+                            // where id in (select ss1.id from jtNm ss1 join tblName ss2 on ss2.id = ss1.jFieldNm where ss2.lblField=v)
+                            inSelect: {
+                                table: db_1.default.sqlsanitize(jtNm),
+                                tenant: db_1.default.isSQLite ? undefined : db_1.default.getTenantSchema(),
+                                field: db_1.default.sqlsanitize(jFieldNm),
+                                valField: table_1.default.findOne(jtNm)?.pk_name || "id",
+                                through: db_1.default.sqlsanitize(tblName),
+                                through_pk: table_1.default.findOne(tblName)?.pk_name || "id",
+                                where: { [db_1.default.sqlsanitize(lblField)]: v },
+                            },
                         },
-                    },
-                ];
+                    ];
             }
         }
     });
@@ -2795,7 +2835,8 @@ const run_action_column = async ({ col, req, ...rest }) => {
             eval_js: "reset_spinners()",
             page_load_tag: req.headers["page-load-tag"],
         };
-        state.emitDynamicUpdate(db_1.default.getTenantSchema(), reset_msg);
+        const userIds = req.user ? undefined : null;
+        state.emitDynamicUpdate(db_1.default.getTenantSchema(), reset_msg, userIds);
     };
     const successAsyncHandler = (data) => {
         const state = getState();
@@ -2803,7 +2844,8 @@ const run_action_column = async ({ col, req, ...rest }) => {
         const emitData = { ...data };
         if (req.headers["page-load-tag"])
             emitData.page_load_tag = req.headers["page-load-tag"];
-        state.emitDynamicUpdate(db_1.default.getTenantSchema(), emitData);
+        const userIds = req.user ? undefined : null;
+        state.emitDynamicUpdate(db_1.default.getTenantSchema(), emitData, userIds);
         if (!emitData.resume_workflow &&
             !emitData.popup?.startsWith?.("/actions/fill-workflow-form/"))
             reset_spinner(state);
@@ -2815,7 +2857,7 @@ const run_action_column = async ({ col, req, ...rest }) => {
             state.emitDynamicUpdate(db_1.default.getTenantSchema(), {
                 error: err.message || err,
                 page_load_tag: req.headers["page-load-tag"],
-            });
+            }, req.user ? undefined : null);
         }
         reset_spinner(state);
     };