@solidxai/core 0.1.12-beta.3 → 0.1.12-beta.4

package/dist/services/role-metadata.service.d.ts

@@ -18,6 +18,7 @@ export declare class RoleMetadataService extends CRUDService<RoleMetadata> {
     createRolesIfNotExists(roles: CreateRoleMetadataDto[]): Promise<void>;
     private resolveRoleModule;
     addAllPermissionsToRole(roleName: string): Promise<RoleMetadata>;
+    addAllPermissionsToRoleExceptPrefixes(roleName: string, excludedPermissionPrefixes: string[]): Promise<RoleMetadata>;
     addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata>;
     addPermissionToRole(roleName: string, permissionName: string[]): Promise<RoleMetadata>;
     private _addPermissionsToRole;

package/dist/services/role-metadata.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-metadata.service.d.ts","sourceRoot":"","sources":["../../src/services/role-metadata.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAM,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,qBACa,mBAAoB,SAAQ,WAAW,CAAC,YAAY,CAAC;IAM9D,QAAQ,CAAC,aAAa,EAAE,aAAa;IAGrC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAGrC,QAAQ,CAAC,oBAAoB,EAAE,4BAA4B;IAC3D,QAAQ,CAAC,SAAS,EAAE,SAAS;IAZ/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAO;gBAI1C,aAAa,EAAE,aAAa,EAG5B,IAAI,EAAE,sBAAsB,EAG5B,oBAAoB,EAAE,4BAA4B,EAClD,SAAS,EAAE,SAAS;IAMzB,cAAc,CAAC,QAAQ,EAAE,MAAM;IAe/B,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAevD,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,EAAE;YA0D7C,iBAAiB;IAgBzB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIhE,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIxF,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE;YAItD,qBAAqB;IA8C7B,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;YAsBrF,uBAAuB;YAUvB,qBAAqB;IAiBnC,OAAO,CAAC,yBAAyB;YAmBnB,4BAA4B;CAsB3C"}
+{"version":3,"file":"role-metadata.service.d.ts","sourceRoot":"","sources":["../../src/services/role-metadata.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAM,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,qBACa,mBAAoB,SAAQ,WAAW,CAAC,YAAY,CAAC;IAM9D,QAAQ,CAAC,aAAa,EAAE,aAAa;IAGrC,QAAQ,CAAC,IAAI,EAAE,sBAAsB;IAGrC,QAAQ,CAAC,oBAAoB,EAAE,4BAA4B;IAC3D,QAAQ,CAAC,SAAS,EAAE,SAAS;IAZ/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAO;gBAI1C,aAAa,EAAE,aAAa,EAG5B,IAAI,EAAE,sBAAsB,EAG5B,oBAAoB,EAAE,4BAA4B,EAClD,SAAS,EAAE,SAAS;IAMzB,cAAc,CAAC,QAAQ,EAAE,MAAM;IAe/B,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAevD,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,EAAE;YA0D7C,iBAAiB;IAgBzB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIhE,qCAAqC,CAAC,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIpH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIxF,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE;YAItD,qBAAqB;IAkD7B,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;YAsBrF,uBAAuB;YAUvB,qBAAqB;IAqBnC,OAAO,CAAC,yBAAyB;YAmBnB,4BAA4B;CAsB3C"}

package/dist/services/role-metadata.service.js

@@ -110,13 +110,16 @@ let RoleMetadataService = RoleMetadataService_1 = class RoleMetadataService exte
     async addAllPermissionsToRole(roleName) {
         return await this._addPermissionsToRole(roleName, null);
     }
+    async addAllPermissionsToRoleExceptPrefixes(roleName, excludedPermissionPrefixes) {
+        return await this._addPermissionsToRole(roleName, null, excludedPermissionPrefixes);
+    }
     async addPermissionsToRole(roleName, permissionNames) {
         return await this._addPermissionsToRole(roleName, permissionNames);
     }
     async addPermissionToRole(roleName, permissionName) {
         return await this._addPermissionsToRole(roleName, permissionName);
     }
-    async _addPermissionsToRole(roleName, permissionNames) {
+    async _addPermissionsToRole(roleName, permissionNames, excludedPermissionPrefixes = []) {
         const role = await this.repo.findOne({
             where: { name: roleName },
             select: {
@@ -128,7 +131,7 @@ let RoleMetadataService = RoleMetadataService_1 = class RoleMetadataService exte
             throw new Error(`Role '${roleName}' not found.`);
         }
         const joinInfo = this.getRolePermissionJoinInfo();
-        const targetPermissions = await this.loadTargetPermissions(permissionNames);
+        const targetPermissions = await this.loadTargetPermissions(permissionNames, excludedPermissionPrefixes);
         if (!permissionNames || permissionNames.length === 0) {
             await this.entityManager
                 .createQueryBuilder()
@@ -179,20 +182,20 @@ let RoleMetadataService = RoleMetadataService_1 = class RoleMetadataService exte
         }
         return existingPermission;
     }
-    async loadTargetPermissions(permissionNames) {
+    async loadTargetPermissions(permissionNames, excludedPermissionPrefixes = []) {
         if (permissionNames && permissionNames.length !== 0) {
             const uniquePermissionNames = [...new Set(permissionNames)];
             const permissions = await this.permissionRepository.find({ where: { name: (0, typeorm_2.In)(uniquePermissionNames) } });
             if (permissions.length !== uniquePermissionNames.length) {
                 throw new Error(`One or more permissions not found.`);
             }
-            return permissions;
+            return permissions.filter((permission) => !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)));
         }
         const permissions = await this.permissionRepository.find();
         if (permissions.length === 0) {
             throw new Error(`No permissions configured in the system. Did you forget to run the PermissionSeederService?`);
         }
-        return permissions;
+        return permissions.filter((permission) => !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)));
     }
     getRolePermissionJoinInfo() {
         const relation = this.repo.metadata.relations.find((candidate) => candidate.propertyName === 'permissions');

package/dist/services/role-metadata.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-metadata.service.js","sourceRoot":"","sources":["../../src/services/role-metadata.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAuE;AACvE,uCAAyC;AACzC,6CAAsD;AACtD,iDAAwD;AACxD,qCAA4C;AAE5C,gEAA8D;AAC9D,iGAA6F;AAC7F,qFAAiF;AAEjF,+EAAoE;AAK7D,IAAM,mBAAmB,2BAAzB,MAAM,mBAAoB,SAAQ,0BAAyB;IAIhE,YAEE,aAAqC,EAG5B,IAA4B,EAG5B,oBAAkD,EAClD,SAAoB;QAG7B,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAV3D,kBAAa,GAAb,aAAa,CAAe;QAG5B,SAAI,GAAJ,IAAI,CAAwB;QAG5B,yBAAoB,GAApB,oBAAoB,CAA8B;QAClD,cAAS,GAAT,SAAS,CAAW;QAZd,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,kCAA6B,GAAG,GAAG,CAAC;IAerD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,WAAW,QAAQ,YAAY,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,QAAgB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;aACT;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,WAAW,QAAQ,YAAY,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,sBAAsB,CAAC,KAA8B;QACzD,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAGrD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC3C,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;oBACD,SAAS,EAAE;wBACT,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAGH,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC;oBAEzE,IAAI,WAAW,GAAG,EAAE,CAAC;oBAErB,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1D,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACrF,CAAC;oBACJ,CAAC;oBAGD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;wBACpD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACrC,CAAC;gBAgBH,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAA8B;QAC5D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,uCAAc,CAAC,CAAC,OAAO,CAAC;gBACpE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,uCAAc,CAAC,CAAC,OAAO,CAAC;gBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAgB;QAC5C,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,eAAyB;QACpE,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,cAAwB;QAClE,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAgB,EAAE,eAAyB;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;aACX;SACF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,cAAc,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAE5E,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,aAAa;iBACrB,kBAAkB,EAAE;iBACpB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;iBACxB,KAAK,CAAC,GAAG,QAAQ,CAAC,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;iBAChE,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnH,CAAC;aACI,CAAC;YACJ,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa;iBAC1C,kBAAkB,EAAE;iBACpB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC;iBACnD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;iBAC3C,KAAK,CAAC,GAAG,QAAQ,CAAC,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;iBAChE,UAAU,EAAE,CAAC;YAEhB,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,oBAAoB,GAAG,iBAAiB;iBAC3C,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;iBAClC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;YAEtE,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,QAAgB,EAAE,eAAyB;QAGzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,+BAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC;QAGD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAErG,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,IAAY;QAChD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YACjE,KAAK,EAAE,EAAE,IAAI,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,0BAAiB,CAAC,+BAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,eAAgC;QAClE,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,YAAE,EAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;YACzG,IAAI,WAAW,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,yBAAyB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC;QAC5G,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;QACxE,IAAI,CAAC,YAAY,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,sBAAsB,CAAC,SAAS;YACpD,YAAY;YACZ,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,MAAc,EACd,aAAuB,EACvB,QAAiF;QAEjF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,6BAA6B,EAAE,CAAC;YAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACrF,MAAM,IAAI,CAAC,aAAa;iBACrB,kBAAkB,EAAE;iBACpB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;iBACxB,MAAM,CACL,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC3B,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;gBAC/B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,YAAY;aAC5C,CAAC,CAAC,CACJ;iBACA,OAAO,EAAE,CAAC;QACf,CAAC;IACH,CAAC;CAGF,CAAA;AA/QY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,6BAAmB,GAAE,CAAA;qCACE,uBAAa;QAGtB,iDAAsB;QAGN,6DAA4B;QACvC,gBAAS;GAbpB,mBAAmB,CA+Q/B","sourcesContent":["import { Injectable, Logger, NotFoundException } from '@nestjs/common';\nimport { ModuleRef } from \"@nestjs/core\";\nimport { InjectEntityManager } from '@nestjs/typeorm';\nimport { CRUDService } from 'src/services/crud.service';\nimport { EntityManager, In } from 'typeorm';\n\nimport { ERROR_MESSAGES } from 'src/constants/error-messages';\nimport { PermissionMetadataRepository } from 'src/repository/permission-metadata.repository';\nimport { RoleMetadataRepository } from 'src/repository/role-metadata.repository';\nimport { CreateRoleMetadataDto } from '../dtos/create-role-metadata.dto';\nimport { ModuleMetadata } from '../entities/module-metadata.entity';\nimport { PermissionMetadata } from '../entities/permission-metadata.entity';\nimport { RoleMetadata } from '../entities/role-metadata.entity';\n\n@Injectable()\nexport class RoleMetadataService extends CRUDService<RoleMetadata> {\n  private readonly logger = new Logger(RoleMetadataService.name);\n  private readonly permissionAssignmentBatchSize = 500;\n\n  constructor(\n    @InjectEntityManager()\n    readonly entityManager: EntityManager,\n    // @InjectRepository(RoleMetadata, 'default')\n    // readonly repo: Repository<RoleMetadata>,\n    readonly repo: RoleMetadataRepository,\n    // @InjectRepository(PermissionMetadata)\n    // private readonly permissionRepository: Repository<PermissionMetadata>,\n    readonly permissionRepository: PermissionMetadataRepository,\n    readonly moduleRef: ModuleRef\n\n  ) {\n    super(entityManager, repo, 'roleMetadata', 'solid-core', moduleRef);\n  }\n\n  async findRoleByName(roleName: string) {\n    const entity = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      relations: {\n        permissions: true\n      }\n    });\n    if (!entity) {\n      throw new NotFoundException(`Entity #${roleName} not found`);\n    }\n    return entity;\n  }\n\n  async assertRoleExistsByName(roleName: string): Promise<void> {\n    const entity = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      select: {\n        id: true\n      }\n    });\n    if (!entity) {\n      throw new NotFoundException(`Entity #${roleName} not found`);\n    }\n  }\n\n  // OK\n  async createRolesIfNotExists(roles: CreateRoleMetadataDto[]) {\n    for (let id = 0; id < roles.length; id++) {\n      try {\n        const roleObj = roles[id];\n        const module = await this.resolveRoleModule(roleObj);\n        // this.logger.log(`Resolving role: ${JSON.stringify(roleObj)}`);\n\n        const existingRole = await this.repo.findOne({\n          where: {\n            name: roleObj.name,\n          },\n          relations: {\n            module: true,\n          },\n        });\n\n        // Create only if not existing already.\n        if (!existingRole) {\n          this.logger.debug(`Role ${roleObj.name} does not exist, hence creating`);\n\n          let permissions = [];\n\n          if (roleObj.permissions && roleObj.permissions.length > 0) {\n            await Promise.all(\n              roleObj.permissions.map(permission => this.preloadPermissionByName(permission.name)),\n            );\n          }\n\n          // const role = this.repo.create({ ...roleObj, permissions });\n          const role = this.repo.create({ ...roleObj, ...(module ? { module } : {}) });\n          await this.repo.save(role);\n        } else {\n          if (module && existingRole.module?.id !== module.id) {\n            existingRole.module = module;\n            await this.repo.save(existingRole);\n          }\n          /*\n          this.logger.debug(`Role ${roleObj.name} already exists`);\n          const existingPermissions = existingRole.permissions.map(permission => permission.name);\n          const newPermissions = roleObj.permissions.map(permission => permission.name);\n          const permissionsToAdd = newPermissions.filter(permission => !existingPermissions.includes(permission));\n          const permissionsToRemove = existingPermissions.filter(permission => !newPermissions.includes(permission));\n          this.logger.debug(`Permissions to add: ${JSON.stringify(permissionsToAdd)}`);\n          if (permissionsToAdd.length > 0) {\n            await this.addPermissionsToRole(roleObj.name, permissionsToAdd);\n          }\n          this.logger.debug(`Permissions to remove: ${JSON.stringify(permissionsToRemove)}`);\n          if (permissionsToRemove.length > 0) {\n            await this.removePermissionsFromRole(roleObj.name, permissionsToRemove);\n          }\n          */\n        }\n      } catch (error: any) {\n        this.logger.error(error);\n      }\n    }\n  }\n\n  private async resolveRoleModule(roleObj: CreateRoleMetadataDto): Promise<ModuleMetadata | null> {\n    if (roleObj.moduleId) {\n      return await this.entityManager.getRepository(ModuleMetadata).findOne({\n        where: { id: roleObj.moduleId },\n      });\n    }\n\n    if (roleObj.moduleUserKey) {\n      return await this.entityManager.getRepository(ModuleMetadata).findOne({\n        where: { name: roleObj.moduleUserKey },\n      });\n    }\n\n    return null;\n  }\n\n  async addAllPermissionsToRole(roleName: string): Promise<RoleMetadata> {\n    return await this._addPermissionsToRole(roleName, null);\n  }\n\n  async addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {\n    return await this._addPermissionsToRole(roleName, permissionNames);\n  }\n\n  async addPermissionToRole(roleName: string, permissionName: string[]) {\n    return await this._addPermissionsToRole(roleName, permissionName);\n  }\n\n  private async _addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {\n    const role = await this.repo.findOne({\n      where: { name: roleName },\n      select: {\n        id: true,\n        name: true,\n      }\n    });\n    if (!role) {\n      throw new Error(`Role '${roleName}' not found.`);\n    }\n\n    const joinInfo = this.getRolePermissionJoinInfo();\n    const targetPermissions = await this.loadTargetPermissions(permissionNames);\n\n    if (!permissionNames || permissionNames.length === 0) {\n      await this.entityManager\n        .createQueryBuilder()\n        .delete()\n        .from(joinInfo.tableName)\n        .where(`${joinInfo.roleIdColumn} = :roleId`, { roleId: role.id })\n        .execute();\n\n      await this.insertRolePermissionMappings(role.id, targetPermissions.map((permission) => permission.id), joinInfo);\n    }\n    else {\n      const existingRows = await this.entityManager\n        .createQueryBuilder()\n        .select(joinInfo.permissionIdColumn, 'permissionId')\n        .from(joinInfo.tableName, 'role_permission')\n        .where(`${joinInfo.roleIdColumn} = :roleId`, { roleId: role.id })\n        .getRawMany();\n\n      const existingPermissionIds = new Set(existingRows.map((row) => Number(row.permissionId)));\n      const missingPermissionIds = targetPermissions\n        .map((permission) => permission.id)\n        .filter((permissionId) => !existingPermissionIds.has(permissionId));\n\n      if (missingPermissionIds.length > 0) {\n        await this.insertRolePermissionMappings(role.id, missingPermissionIds, joinInfo);\n      }\n    }\n\n    return await this.findRoleByName(roleName);\n  }\n\n  async removePermissionsFromRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {\n\n    // load the role with the respective permissions.\n    const role = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      relations: {\n        permissions: true\n      }\n    });\n\n    if (!role) {\n      throw new Error(ERROR_MESSAGES.ROLE_NOT_FOUND(roleName));\n    }\n\n    // modify the permissions array.\n    role.permissions = role.permissions.filter(permission => !permissionNames.includes(permission.name));\n\n    return await this.repo.save(role);\n  }\n\n  private async preloadPermissionByName(name: string): Promise<PermissionMetadata> {\n    const existingPermission = await this.permissionRepository.findOne({\n      where: { name },\n    });\n    if (!existingPermission) {\n      throw new NotFoundException(ERROR_MESSAGES.PERMISSION_NOT_EXIST(name));\n    }\n    return existingPermission;\n  }\n\n  private async loadTargetPermissions(permissionNames: string[] | null): Promise<PermissionMetadata[]> {\n    if (permissionNames && permissionNames.length !== 0) {\n      const uniquePermissionNames = [...new Set(permissionNames)];\n      const permissions = await this.permissionRepository.find({ where: { name: In(uniquePermissionNames) } });\n      if (permissions.length !== uniquePermissionNames.length) {\n        throw new Error(`One or more permissions not found.`);\n      }\n      return permissions;\n    }\n\n    const permissions = await this.permissionRepository.find();\n    if (permissions.length === 0) {\n      throw new Error(`No permissions configured in the system. Did you forget to run the PermissionSeederService?`);\n    }\n    return permissions;\n  }\n\n  private getRolePermissionJoinInfo(): { tableName: string; roleIdColumn: string; permissionIdColumn: string } {\n    const relation = this.repo.metadata.relations.find((candidate) => candidate.propertyName === 'permissions');\n    if (!relation?.junctionEntityMetadata) {\n      throw new Error('Role-permission join table metadata not found.');\n    }\n\n    const roleIdColumn = relation.joinColumns[0]?.databaseName;\n    const permissionIdColumn = relation.inverseJoinColumns[0]?.databaseName;\n    if (!roleIdColumn || !permissionIdColumn) {\n      throw new Error('Role-permission join table column metadata not found.');\n    }\n\n    return {\n      tableName: relation.junctionEntityMetadata.tableName,\n      roleIdColumn,\n      permissionIdColumn,\n    };\n  }\n\n  private async insertRolePermissionMappings(\n    roleId: number,\n    permissionIds: number[],\n    joinInfo: { tableName: string; roleIdColumn: string; permissionIdColumn: string },\n  ): Promise<void> {\n    for (let index = 0; index < permissionIds.length; index += this.permissionAssignmentBatchSize) {\n      const batch = permissionIds.slice(index, index + this.permissionAssignmentBatchSize);\n      await this.entityManager\n        .createQueryBuilder()\n        .insert()\n        .into(joinInfo.tableName)\n        .values(\n          batch.map((permissionId) => ({\n            [joinInfo.roleIdColumn]: roleId,\n            [joinInfo.permissionIdColumn]: permissionId,\n          })),\n        )\n        .execute();\n    }\n  }\n\n\n}\n"]}
+{"version":3,"file":"role-metadata.service.js","sourceRoot":"","sources":["../../src/services/role-metadata.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAuE;AACvE,uCAAyC;AACzC,6CAAsD;AACtD,iDAAwD;AACxD,qCAA4C;AAE5C,gEAA8D;AAC9D,iGAA6F;AAC7F,qFAAiF;AAEjF,+EAAoE;AAK7D,IAAM,mBAAmB,2BAAzB,MAAM,mBAAoB,SAAQ,0BAAyB;IAIhE,YAEE,aAAqC,EAG5B,IAA4B,EAG5B,oBAAkD,EAClD,SAAoB;QAG7B,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAV3D,kBAAa,GAAb,aAAa,CAAe;QAG5B,SAAI,GAAJ,IAAI,CAAwB;QAG5B,yBAAoB,GAApB,oBAAoB,CAA8B;QAClD,cAAS,GAAT,SAAS,CAAW;QAZd,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,kCAA6B,GAAG,GAAG,CAAC;IAerD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,WAAW,QAAQ,YAAY,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,QAAgB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;aACT;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,WAAW,QAAQ,YAAY,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,sBAAsB,CAAC,KAA8B;QACzD,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAGrD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC3C,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;oBACD,SAAS,EAAE;wBACT,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAGH,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,IAAI,iCAAiC,CAAC,CAAC;oBAEzE,IAAI,WAAW,GAAG,EAAE,CAAC;oBAErB,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1D,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACrF,CAAC;oBACJ,CAAC;oBAGD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;wBACpD,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACrC,CAAC;gBAgBH,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAA8B;QAC5D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,uCAAc,CAAC,CAAC,OAAO,CAAC;gBACpE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,uCAAc,CAAC,CAAC,OAAO,CAAC;gBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAgB;QAC5C,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,qCAAqC,CAAC,QAAgB,EAAE,0BAAoC;QAChG,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,eAAyB;QACpE,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,cAAwB;QAClE,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,QAAgB,EAChB,eAAyB,EACzB,6BAAuC,EAAE;QAEzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;aACX;SACF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,cAAc,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;QAExG,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,aAAa;iBACrB,kBAAkB,EAAE;iBACpB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;iBACxB,KAAK,CAAC,GAAG,QAAQ,CAAC,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;iBAChE,OAAO,EAAE,CAAC;YAEb,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnH,CAAC;aACI,CAAC;YACJ,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa;iBAC1C,kBAAkB,EAAE;iBACpB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC;iBACnD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;iBAC3C,KAAK,CAAC,GAAG,QAAQ,CAAC,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;iBAChE,UAAU,EAAE,CAAC;YAEhB,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,oBAAoB,GAAG,iBAAiB;iBAC3C,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;iBAClC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;YAEtE,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,QAAgB,EAAE,eAAyB;QAGzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;aACf;YACD,SAAS,EAAE;gBACT,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,+BAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC;QAGD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAErG,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,IAAY;QAChD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YACjE,KAAK,EAAE,EAAE,IAAI,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,0BAAiB,CAAC,+BAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,eAAgC,EAAE,6BAAuC,EAAE;QAC7G,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,YAAE,EAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC;YACzG,IAAI,WAAW,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACvC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACvC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CACjF,CAAC;IACJ,CAAC;IAEO,yBAAyB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC;QAC5G,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;QACxE,IAAI,CAAC,YAAY,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,sBAAsB,CAAC,SAAS;YACpD,YAAY;YACZ,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,MAAc,EACd,aAAuB,EACvB,QAAiF;QAEjF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,6BAA6B,EAAE,CAAC;YAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACrF,MAAM,IAAI,CAAC,aAAa;iBACrB,kBAAkB,EAAE;iBACpB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;iBACxB,MAAM,CACL,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC3B,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;gBAC/B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,YAAY;aAC5C,CAAC,CAAC,CACJ;iBACA,OAAO,EAAE,CAAC;QACf,CAAC;IACH,CAAC;CAGF,CAAA;AA3RY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,6BAAmB,GAAE,CAAA;qCACE,uBAAa;QAGtB,iDAAsB;QAGN,6DAA4B;QACvC,gBAAS;GAbpB,mBAAmB,CA2R/B","sourcesContent":["import { Injectable, Logger, NotFoundException } from '@nestjs/common';\nimport { ModuleRef } from \"@nestjs/core\";\nimport { InjectEntityManager } from '@nestjs/typeorm';\nimport { CRUDService } from 'src/services/crud.service';\nimport { EntityManager, In } from 'typeorm';\n\nimport { ERROR_MESSAGES } from 'src/constants/error-messages';\nimport { PermissionMetadataRepository } from 'src/repository/permission-metadata.repository';\nimport { RoleMetadataRepository } from 'src/repository/role-metadata.repository';\nimport { CreateRoleMetadataDto } from '../dtos/create-role-metadata.dto';\nimport { ModuleMetadata } from '../entities/module-metadata.entity';\nimport { PermissionMetadata } from '../entities/permission-metadata.entity';\nimport { RoleMetadata } from '../entities/role-metadata.entity';\n\n@Injectable()\nexport class RoleMetadataService extends CRUDService<RoleMetadata> {\n  private readonly logger = new Logger(RoleMetadataService.name);\n  private readonly permissionAssignmentBatchSize = 500;\n\n  constructor(\n    @InjectEntityManager()\n    readonly entityManager: EntityManager,\n    // @InjectRepository(RoleMetadata, 'default')\n    // readonly repo: Repository<RoleMetadata>,\n    readonly repo: RoleMetadataRepository,\n    // @InjectRepository(PermissionMetadata)\n    // private readonly permissionRepository: Repository<PermissionMetadata>,\n    readonly permissionRepository: PermissionMetadataRepository,\n    readonly moduleRef: ModuleRef\n\n  ) {\n    super(entityManager, repo, 'roleMetadata', 'solid-core', moduleRef);\n  }\n\n  async findRoleByName(roleName: string) {\n    const entity = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      relations: {\n        permissions: true\n      }\n    });\n    if (!entity) {\n      throw new NotFoundException(`Entity #${roleName} not found`);\n    }\n    return entity;\n  }\n\n  async assertRoleExistsByName(roleName: string): Promise<void> {\n    const entity = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      select: {\n        id: true\n      }\n    });\n    if (!entity) {\n      throw new NotFoundException(`Entity #${roleName} not found`);\n    }\n  }\n\n  // OK\n  async createRolesIfNotExists(roles: CreateRoleMetadataDto[]) {\n    for (let id = 0; id < roles.length; id++) {\n      try {\n        const roleObj = roles[id];\n        const module = await this.resolveRoleModule(roleObj);\n        // this.logger.log(`Resolving role: ${JSON.stringify(roleObj)}`);\n\n        const existingRole = await this.repo.findOne({\n          where: {\n            name: roleObj.name,\n          },\n          relations: {\n            module: true,\n          },\n        });\n\n        // Create only if not existing already.\n        if (!existingRole) {\n          this.logger.debug(`Role ${roleObj.name} does not exist, hence creating`);\n\n          let permissions = [];\n\n          if (roleObj.permissions && roleObj.permissions.length > 0) {\n            await Promise.all(\n              roleObj.permissions.map(permission => this.preloadPermissionByName(permission.name)),\n            );\n          }\n\n          // const role = this.repo.create({ ...roleObj, permissions });\n          const role = this.repo.create({ ...roleObj, ...(module ? { module } : {}) });\n          await this.repo.save(role);\n        } else {\n          if (module && existingRole.module?.id !== module.id) {\n            existingRole.module = module;\n            await this.repo.save(existingRole);\n          }\n          /*\n          this.logger.debug(`Role ${roleObj.name} already exists`);\n          const existingPermissions = existingRole.permissions.map(permission => permission.name);\n          const newPermissions = roleObj.permissions.map(permission => permission.name);\n          const permissionsToAdd = newPermissions.filter(permission => !existingPermissions.includes(permission));\n          const permissionsToRemove = existingPermissions.filter(permission => !newPermissions.includes(permission));\n          this.logger.debug(`Permissions to add: ${JSON.stringify(permissionsToAdd)}`);\n          if (permissionsToAdd.length > 0) {\n            await this.addPermissionsToRole(roleObj.name, permissionsToAdd);\n          }\n          this.logger.debug(`Permissions to remove: ${JSON.stringify(permissionsToRemove)}`);\n          if (permissionsToRemove.length > 0) {\n            await this.removePermissionsFromRole(roleObj.name, permissionsToRemove);\n          }\n          */\n        }\n      } catch (error: any) {\n        this.logger.error(error);\n      }\n    }\n  }\n\n  private async resolveRoleModule(roleObj: CreateRoleMetadataDto): Promise<ModuleMetadata | null> {\n    if (roleObj.moduleId) {\n      return await this.entityManager.getRepository(ModuleMetadata).findOne({\n        where: { id: roleObj.moduleId },\n      });\n    }\n\n    if (roleObj.moduleUserKey) {\n      return await this.entityManager.getRepository(ModuleMetadata).findOne({\n        where: { name: roleObj.moduleUserKey },\n      });\n    }\n\n    return null;\n  }\n\n  async addAllPermissionsToRole(roleName: string): Promise<RoleMetadata> {\n    return await this._addPermissionsToRole(roleName, null);\n  }\n\n  async addAllPermissionsToRoleExceptPrefixes(roleName: string, excludedPermissionPrefixes: string[]): Promise<RoleMetadata> {\n    return await this._addPermissionsToRole(roleName, null, excludedPermissionPrefixes);\n  }\n\n  async addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {\n    return await this._addPermissionsToRole(roleName, permissionNames);\n  }\n\n  async addPermissionToRole(roleName: string, permissionName: string[]) {\n    return await this._addPermissionsToRole(roleName, permissionName);\n  }\n\n  private async _addPermissionsToRole(\n    roleName: string,\n    permissionNames: string[],\n    excludedPermissionPrefixes: string[] = [],\n  ): Promise<RoleMetadata> {\n    const role = await this.repo.findOne({\n      where: { name: roleName },\n      select: {\n        id: true,\n        name: true,\n      }\n    });\n    if (!role) {\n      throw new Error(`Role '${roleName}' not found.`);\n    }\n\n    const joinInfo = this.getRolePermissionJoinInfo();\n    const targetPermissions = await this.loadTargetPermissions(permissionNames, excludedPermissionPrefixes);\n\n    if (!permissionNames || permissionNames.length === 0) {\n      await this.entityManager\n        .createQueryBuilder()\n        .delete()\n        .from(joinInfo.tableName)\n        .where(`${joinInfo.roleIdColumn} = :roleId`, { roleId: role.id })\n        .execute();\n\n      await this.insertRolePermissionMappings(role.id, targetPermissions.map((permission) => permission.id), joinInfo);\n    }\n    else {\n      const existingRows = await this.entityManager\n        .createQueryBuilder()\n        .select(joinInfo.permissionIdColumn, 'permissionId')\n        .from(joinInfo.tableName, 'role_permission')\n        .where(`${joinInfo.roleIdColumn} = :roleId`, { roleId: role.id })\n        .getRawMany();\n\n      const existingPermissionIds = new Set(existingRows.map((row) => Number(row.permissionId)));\n      const missingPermissionIds = targetPermissions\n        .map((permission) => permission.id)\n        .filter((permissionId) => !existingPermissionIds.has(permissionId));\n\n      if (missingPermissionIds.length > 0) {\n        await this.insertRolePermissionMappings(role.id, missingPermissionIds, joinInfo);\n      }\n    }\n\n    return await this.findRoleByName(roleName);\n  }\n\n  async removePermissionsFromRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {\n\n    // load the role with the respective permissions.\n    const role = await this.repo.findOne({\n      where: {\n        name: roleName\n      },\n      relations: {\n        permissions: true\n      }\n    });\n\n    if (!role) {\n      throw new Error(ERROR_MESSAGES.ROLE_NOT_FOUND(roleName));\n    }\n\n    // modify the permissions array.\n    role.permissions = role.permissions.filter(permission => !permissionNames.includes(permission.name));\n\n    return await this.repo.save(role);\n  }\n\n  private async preloadPermissionByName(name: string): Promise<PermissionMetadata> {\n    const existingPermission = await this.permissionRepository.findOne({\n      where: { name },\n    });\n    if (!existingPermission) {\n      throw new NotFoundException(ERROR_MESSAGES.PERMISSION_NOT_EXIST(name));\n    }\n    return existingPermission;\n  }\n\n  private async loadTargetPermissions(permissionNames: string[] | null, excludedPermissionPrefixes: string[] = []): Promise<PermissionMetadata[]> {\n    if (permissionNames && permissionNames.length !== 0) {\n      const uniquePermissionNames = [...new Set(permissionNames)];\n      const permissions = await this.permissionRepository.find({ where: { name: In(uniquePermissionNames) } });\n      if (permissions.length !== uniquePermissionNames.length) {\n        throw new Error(`One or more permissions not found.`);\n      }\n      return permissions.filter((permission) =>\n        !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)),\n      );\n    }\n\n    const permissions = await this.permissionRepository.find();\n    if (permissions.length === 0) {\n      throw new Error(`No permissions configured in the system. Did you forget to run the PermissionSeederService?`);\n    }\n    return permissions.filter((permission) =>\n      !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)),\n    );\n  }\n\n  private getRolePermissionJoinInfo(): { tableName: string; roleIdColumn: string; permissionIdColumn: string } {\n    const relation = this.repo.metadata.relations.find((candidate) => candidate.propertyName === 'permissions');\n    if (!relation?.junctionEntityMetadata) {\n      throw new Error('Role-permission join table metadata not found.');\n    }\n\n    const roleIdColumn = relation.joinColumns[0]?.databaseName;\n    const permissionIdColumn = relation.inverseJoinColumns[0]?.databaseName;\n    if (!roleIdColumn || !permissionIdColumn) {\n      throw new Error('Role-permission join table column metadata not found.');\n    }\n\n    return {\n      tableName: relation.junctionEntityMetadata.tableName,\n      roleIdColumn,\n      permissionIdColumn,\n    };\n  }\n\n  private async insertRolePermissionMappings(\n    roleId: number,\n    permissionIds: number[],\n    joinInfo: { tableName: string; roleIdColumn: string; permissionIdColumn: string },\n  ): Promise<void> {\n    for (let index = 0; index < permissionIds.length; index += this.permissionAssignmentBatchSize) {\n      const batch = permissionIds.slice(index, index + this.permissionAssignmentBatchSize);\n      await this.entityManager\n        .createQueryBuilder()\n        .insert()\n        .into(joinInfo.tableName)\n        .values(\n          batch.map((permissionId) => ({\n            [joinInfo.roleIdColumn]: roleId,\n            [joinInfo.permissionIdColumn]: permissionId,\n          })),\n        )\n        .execute();\n    }\n  }\n\n\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidxai/core",
-  "version": "0.1.12-beta.3",
+  "version": "0.1.12-beta.4",
   "description": "This module is a NestJS module containing all the required core providers required by a Solid application",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/commands/seed.command.ts

@@ -1,6 +1,7 @@
 import { Logger } from '@nestjs/common';
 import { Command, CommandRunner, Option } from 'nest-commander';
 import { SolidRegistry } from 'src/helpers/solid-registry';
+import { ModuleMetadataSeederOptions } from 'src/interfaces';
 
 interface SeedCommandOptions {
   seeder?: string;
@@ -17,20 +18,33 @@ export class SeedCommand extends CommandRunner {
   }
 
   async run(passedParam: string[], options?: SeedCommandOptions): Promise<void> {
-    let parsedConf: any = null;
+    let parsedConf: ModuleMetadataSeederOptions | null = null;
     if (options?.modulesToSeed) {
       const modulesToSeed = options.modulesToSeed
         .split(',')
         .map((m) => m.trim())
         .filter(Boolean);
-      parsedConf = { modulesToSeed };
+      parsedConf = {
+        modulesToSeed,
+        pruneMetadata: true,
+        seedGlobalMetadata: true,
+      };
       this.logger.log(`Modules to seed: ${modulesToSeed.join(', ')}`);
     } else {
       this.logger.log('No --modules-to-seed flag provided. Running with default seeder behavior.');
+      parsedConf = {
+        modulesToSeed: null,
+        pruneMetadata: true,
+        seedGlobalMetadata: true,
+      };
     }
 
     if (options?.prune) {
-      parsedConf = parsedConf ?? {};
+      parsedConf = parsedConf ?? {
+        modulesToSeed: null,
+        pruneMetadata: true,
+        seedGlobalMetadata: true,
+      };
       parsedConf.pruneMetadata = true;
     }
 

package/src/dtos/create-role-metadata.dto.ts

@@ -8,6 +8,8 @@ import { ApiProperty } from '@nestjs/swagger';
 
 export const ADMIN_ROLE_NAME = 'Admin';
 export const INTERNAL_ROLE_NAME = 'Internal User';
+export const ALLOWED_TO_IMPORT_ROLE_NAME = 'Allowed To Import';
+export const ALLOWED_TO_EXPORT_ROLE_NAME = 'Allowed To Export';
 export const PUBLIC_ROLE_NAME = 'Public';
 
 export class CreateRoleMetadataDto {

package/src/interfaces.ts

@@ -228,6 +228,8 @@ export interface ISolidDatabaseModule {
 
 export enum EventType {
   USER_REGISTERED = 'user.registered',
+  MODULE_METADATA_SEEDER_STARTED = 'module-metadata-seeder.started',
+  MODULE_METADATA_SEEDER_FINISHED = 'module-metadata-seeder.finished',
 }
 
 export class EventDetails<T> {
@@ -237,6 +239,24 @@ export class EventDetails<T> {
   ) { }
 }
 
+export interface ModuleMetadataSeederOptions {
+  modulesToSeed: string[] | null;
+  pruneMetadata: boolean;
+  seedGlobalMetadata: boolean;
+}
+
+export interface ModuleMetadataSeederEventPayload {
+  seedRunId: string;
+  options: ModuleMetadataSeederOptions;
+  startedAt: string;
+  finishedAt?: string;
+  durationMs?: number;
+  success?: boolean;
+  seededModuleNames?: string[];
+  currentStep?: string;
+  errorMessage?: string;
+}
+
 export interface IExtensionUserCreationProvider<T extends User = User, TDto extends CreateUserDto = CreateUserDto> {
   readonly repo: Repository<T>;
   buildExtensionEntity(dto: TDto): Promise<T>;

package/src/seeders/module-metadata-seeder.service.ts

@@ -1,4 +1,5 @@
 import { forwardRef, Inject, Injectable, Logger } from '@nestjs/common';
+import { EventEmitter2 } from '@nestjs/event-emitter';
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
@@ -39,7 +40,12 @@ import { User } from '../entities/user.entity';
 import { MENU_ROLE_JOIN_TABLE_NAME, MENU_ROLE_JOIN_TABLE_NAME_MENU_COL, MENU_ROLE_JOIN_TABLE_NAME_ROLE_COL } from '../dtos/create-menu-item-metadata.dto';
 import { DEFAULT_SA_PASSWORD } from '../dtos/create-user.dto';
 import { SignUpDto } from '../dtos/sign-up.dto';
-import { ADMIN_ROLE_NAME, CreateRoleMetadataDto } from 'src/dtos/create-role-metadata.dto';
+import {
+    ADMIN_ROLE_NAME,
+    ALLOWED_TO_EXPORT_ROLE_NAME,
+    ALLOWED_TO_IMPORT_ROLE_NAME,
+    CreateRoleMetadataDto,
+} from 'src/dtos/create-role-metadata.dto';
 import { CreateSavedFiltersDto } from 'src/dtos/create-saved-filters.dto';
 import { CreateScheduledJobDto } from 'src/dtos/create-scheduled-job.dto';
 import { CreateLocaleDto } from 'src/dtos/create-locale.dto';
@@ -60,6 +66,7 @@ import { FieldMetadata } from 'src/entities/field-metadata.entity';
 import { ModelMetadata } from 'src/entities/model-metadata.entity';
 import { PermissionMetadata } from 'src/entities/permission-metadata.entity';
 import { ViewMetadata } from 'src/entities/view-metadata.entity';
+import { EventDetails, EventType, ModuleMetadataSeederEventPayload } from 'src/interfaces';
 
 /**
  * Central metadata seeder for both solid-core and consuming modules.
@@ -79,6 +86,11 @@ import { ViewMetadata } from 'src/entities/view-metadata.entity';
  */
 @Injectable()
 export class ModuleMetadataSeederService {
+    private readonly adminPermissionExclusionPrefixes = [
+        'ImportTransactionController.',
+        'ExportTemplateController.',
+        'ExportTransactionController.',
+    ];
     private readonly logger = new Logger(ModuleMetadataSeederService.name);
     // Stable tag used on all verbose seed timing logs so runs can be grepped quickly.
     private readonly seedTimingTag = 'SEED_TIMING';
@@ -98,6 +110,7 @@ export class ModuleMetadataSeederService {
         private readonly moduleMetadataService: ModuleMetadataService,
         @Inject(forwardRef(() => ModelMetadataService))
         private readonly modelMetadataService: ModelMetadataService,
+        private readonly eventEmitter: EventEmitter2,
         private readonly fieldMetadataService: FieldMetadataService,
         private readonly mediaStorageProviderMetadataService: MediaStorageProviderMetadataService,
         private readonly roleService: RoleMetadataService,
@@ -131,7 +144,26 @@ export class ModuleMetadataSeederService {
         let currentModule = 'global';
         let currentStep = 'bootstrap';
         let modulesToSeed: string[] | null = null;
+        const requestedModulesToSeed = Array.isArray(conf?.modulesToSeed) ? [...conf.modulesToSeed] : null;
         const shouldSeedGlobalMetadata = conf?.seedGlobalMetadata !== false;
+        const seedOptions: ModuleMetadataSeederEventPayload['options'] = {
+            modulesToSeed: requestedModulesToSeed,
+            pruneMetadata: Boolean(conf?.pruneMetadata),
+            seedGlobalMetadata: shouldSeedGlobalMetadata,
+        };
+        const seedRunId = uuidv4();
+        const startedAt = new Date();
+        const seededModuleNames: string[] = [];
+
+        this.emitModuleMetadataSeederEvent(
+            EventType.MODULE_METADATA_SEEDER_STARTED,
+            {
+                seedRunId,
+                options: seedOptions,
+                startedAt: startedAt.toISOString(),
+                currentStep,
+            },
+        );
 
         try {
             this.enablePruning = Boolean(conf?.pruneMetadata);
@@ -190,6 +222,7 @@ export class ModuleMetadataSeederService {
 
                     console.log(`▶ Seeding Metadata for Module: ${moduleMetadata.name}`);
                     this.logger.log(`Seeding Metadata for Module: ${moduleMetadata.name}`);
+                    seededModuleNames.push(moduleMetadata.name);
 
                     await this.timeOperation('module-total', async () => {
                         currentStep = 'seedMediaStorageProviders';
@@ -283,10 +316,37 @@ export class ModuleMetadataSeederService {
             // Add a console log indicating seeding is finished. This needs to be console.log so that it looks proper when this code is run via CLI.
             console.log(`✔ Seeding completed.`);
             //this.logger.log(`All Seeders finished`);
+            await this.emitModuleMetadataSeederFinishedEvent(
+                EventType.MODULE_METADATA_SEEDER_FINISHED,
+                {
+                    seedRunId,
+                    options: seedOptions,
+                    startedAt: startedAt.toISOString(),
+                    finishedAt: new Date().toISOString(),
+                    durationMs: Date.now() - startedAt.getTime(),
+                    success: true,
+                    seededModuleNames,
+                    currentStep,
+                },
+            );
 
             //FIXME: Handle displaying the created users credentials in a better way.
             // this.logger.log(`Newly created username is: ${usersDetail?.length > 0 ? usersDetail[0]?.username : ''} and password is ${usersDetail?.length > 0 ? usersDetail[0]?.password : ''}`);
         } catch (error: any) {
+            await this.emitModuleMetadataSeederFinishedEvent(
+                EventType.MODULE_METADATA_SEEDER_FINISHED,
+                {
+                    seedRunId,
+                    options: seedOptions,
+                    startedAt: startedAt.toISOString(),
+                    finishedAt: new Date().toISOString(),
+                    durationMs: Date.now() - startedAt.getTime(),
+                    success: false,
+                    seededModuleNames,
+                    currentStep,
+                    errorMessage: error?.message,
+                },
+            );
             this.logSeedFailureForCli(error, {
                 moduleName: currentModule,
                 step: currentStep,
@@ -297,6 +357,31 @@ export class ModuleMetadataSeederService {
         }
     }
 
+    private emitModuleMetadataSeederEvent(
+        type: EventType.MODULE_METADATA_SEEDER_STARTED | EventType.MODULE_METADATA_SEEDER_FINISHED,
+        payload: ModuleMetadataSeederEventPayload,
+    ): void {
+        try {
+            this.eventEmitter.emit(type, new EventDetails<ModuleMetadataSeederEventPayload>(type, payload));
+        } catch (error: any) {
+            this.logger.warn(`Failed to emit ${type}: ${error?.message ?? error}`);
+        }
+    }
+
+    private async emitModuleMetadataSeederFinishedEvent(
+        type: EventType.MODULE_METADATA_SEEDER_FINISHED,
+        payload: ModuleMetadataSeederEventPayload,
+    ): Promise<void> {
+        try {
+            console.log(`▶ Running post-seed hooks for runId=${payload.seedRunId}`);
+            await this.eventEmitter.emitAsync(type, new EventDetails<ModuleMetadataSeederEventPayload>(type, payload));
+            console.log(`✔ Post-seed hooks completed for runId=${payload.seedRunId}`);
+        } catch (error: any) {
+            console.log(`✖ Post-seed hooks failed for runId=${payload.seedRunId}: ${error?.message ?? error}`);
+            this.logger.warn(`Failed to emit ${type}: ${error?.message ?? error}`);
+        }
+    }
+
     private buildTimingPrefix(itemTag: string, options?: { moduleName?: string; component?: string; serviceCall?: string }): string {
         const parts = [`[${this.seedTimingTag}]`, `[ITEM:${itemTag}]`];
         if (options?.moduleName) {
@@ -498,10 +583,17 @@ export class ModuleMetadataSeederService {
 
     private async setupDefaultRolesWithPermissions() {
         this.logger.debug(`About to add all permissions to the Admin role`);
-        await this.timeOperation('role-add-all-permissions', () => this.roleService.addAllPermissionsToRole(ADMIN_ROLE_NAME), {
+        await this.timeOperation('role-add-all-permissions', () => this.roleService.addAllPermissionsToRoleExceptPrefixes(ADMIN_ROLE_NAME, this.adminPermissionExclusionPrefixes), {
+            moduleName: 'global',
+            component: 'default-roles',
+            serviceCall: 'roleService.addAllPermissionsToRoleExceptPrefixes',
+            details: `role=${ADMIN_ROLE_NAME}`,
+        });
+
+        await this.timeOperation('attach-capability-roles-to-admin-users', () => this.attachCapabilityRolesToAdminUsers(), {
             moduleName: 'global',
             component: 'default-roles',
-            serviceCall: 'roleService.addAllPermissionsToRole',
+            serviceCall: 'attachCapabilityRolesToAdminUsers',
             details: `role=${ADMIN_ROLE_NAME}`,
         });
 
@@ -514,6 +606,20 @@ export class ModuleMetadataSeederService {
         // await this.roleService.addPermissionToRole(PUBLIC_ROLE_NAME, ['SettingController.wrapSettings', 'AuthenticationController.logout']);
     }
 
+    private async attachCapabilityRolesToAdminUsers(): Promise<void> {
+        const adminUsers = await this.userService.findUsersByRole(ADMIN_ROLE_NAME, {});
+        if (!adminUsers?.length) {
+            return;
+        }
+
+        const capabilityRoles = [ALLOWED_TO_IMPORT_ROLE_NAME, ALLOWED_TO_EXPORT_ROLE_NAME];
+        for (const adminUser of adminUsers) {
+            for (const capabilityRole of capabilityRoles) {
+                await this.userService.addRoleToUser(adminUser.username, capabilityRole);
+            }
+        }
+    }
+
     private async seedSecurityRules(overallMetadata: any): Promise<{ pruned: number; upserted: number }> {
         const securityRules = this.getSeedArray<CreateSecurityRuleDto>(overallMetadata?.securityRules);
         const pruned = this.enablePruning ? await this.timeOperation('prune-security-rules', () => this.pruneSecurityRules(securityRules, overallMetadata?.moduleMetadata?.name), {

package/src/seeders/permission-metadata-seeder.service.ts

@@ -6,6 +6,11 @@ import { RoleMetadataService } from '../services/role-metadata.service';
 @Injectable()
 export class PermissionMetadataSeederService {
   private readonly logger = new Logger(PermissionMetadataSeederService.name);
+  private readonly adminPermissionExclusionPrefixes = [
+    'ImportTransactionController.',
+    'ExportTemplateController.',
+    'ExportTransactionController.',
+  ];
 
   constructor(
     // @InjectRepository(PermissionMetadata)
@@ -58,6 +63,6 @@ export class PermissionMetadataSeederService {
     }
 
     // Associate the Admin role with all existing permissions. 
-    await this.roleService.addAllPermissionsToRole("Admin");
+    await this.roleService.addAllPermissionsToRoleExceptPrefixes("Admin", this.adminPermissionExclusionPrefixes);
   }
 }

package/src/seeders/seed-data/solid-core-metadata.json

@@ -5336,14 +5336,6 @@
         "ChatterMessageController.findMany",
         "ChatterMessageController.markCompleted",
         "ChatterMessageController.updateCustomNoteMessage",
-        "ImportTransactionController.getImportTemplate",
-        "ImportTransactionController.getImportInstructions",
-        "ImportTransactionController.getImportMappingInfo",
-        "ImportTransactionController.startImportSync",
-        "ImportTransactionController.startImportAsync",
-        "ImportTransactionController.exportFailedImportedImports",
-        "ExportTemplateController.startExportSync",
-        "ExportTemplateController.startExportAsync",
         "ListOfValuesController.findMany",
         "ListOfValuesController.findOne",
         "SettingController.getAllSettings",
@@ -5363,6 +5355,31 @@
         "agent:invoke"
       ]
     },
+    {
+      "name": "Allowed To Import",
+      "permissions": [
+        "ImportTransactionController.create",
+        "ImportTransactionController.delete",
+        "ImportTransactionController.deleteMany",
+        "ImportTransactionController.getImportTemplate",
+        "ImportTransactionController.getImportInstructions",
+        "ImportTransactionController.getImportMappingInfo",
+        "ImportTransactionController.partialUpdate",
+        "ImportTransactionController.startImportSync",
+        "ImportTransactionController.startImportAsync",
+        "ImportTransactionController.exportFailedImportedImports"
+      ]
+    },
+    {
+      "name": "Allowed To Export",
+      "permissions": [
+        "ExportTemplateController.create",
+        "ExportTemplateController.delete",
+        "ExportTemplateController.findMany",
+        "ExportTemplateController.startExportSync",
+        "ExportTemplateController.startExportAsync"
+      ]
+    },
     {
       "name": "Public",
       "permissions": [
@@ -8630,8 +8647,7 @@
                                 "attrs": {
                                   "name": "form-1",
                                   "label": "User",
-                                  "className": "grid",
-                                  "width": "20vw"
+                                  "className": "grid"
                                 },
                                 "children": [
                                   {

package/src/services/authentication.service.ts

@@ -109,6 +109,26 @@ export class AuthenticationService {
     });
   }
 
+  private async resolveUserForPasswordSignIn(username: string, email: string) {
+    const normalizedEmail = email?.trim().toLowerCase();
+    const query = (await this.userRepository
+      .createSecurityRuleAwareQueryBuilder("u"))
+      .leftJoinAndSelect("u.roles", "roles");
+
+    if (username) {
+      query.where("u.username = :username", { username });
+    }
+    if (normalizedEmail) {
+      if (username) {
+        query.orWhere("LOWER(u.email) = :email", { email: normalizedEmail });
+      } else {
+        query.where("LOWER(u.email) = :email", { email: normalizedEmail });
+      }
+    }
+
+    return await query.getOne();
+  }
+
   async updatePasswordDetails(user: User, newPassword: string) {
     user.password = await this.hashingService.hash(newPassword);
     user.passwordScheme = this.hashingService.name();
@@ -985,7 +1005,10 @@ export class AuthenticationService {
   }
 
   async signIn(signInDto: SignInDto) {
-    const user = await this.resolveUser(signInDto.username, signInDto.email);
+    const user = await this.resolveUserForPasswordSignIn(
+      signInDto.username,
+      signInDto.email,
+    );
     if (!user) {
       throw new UnauthorizedException(ERROR_MESSAGES.INVALID_CREDENTIALS);
     }

package/src/services/role-metadata.service.ts

@@ -140,6 +140,10 @@ export class RoleMetadataService extends CRUDService<RoleMetadata> {
     return await this._addPermissionsToRole(roleName, null);
   }
 
+  async addAllPermissionsToRoleExceptPrefixes(roleName: string, excludedPermissionPrefixes: string[]): Promise<RoleMetadata> {
+    return await this._addPermissionsToRole(roleName, null, excludedPermissionPrefixes);
+  }
+
   async addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {
     return await this._addPermissionsToRole(roleName, permissionNames);
   }
@@ -148,7 +152,11 @@ export class RoleMetadataService extends CRUDService<RoleMetadata> {
     return await this._addPermissionsToRole(roleName, permissionName);
   }
 
-  private async _addPermissionsToRole(roleName: string, permissionNames: string[]): Promise<RoleMetadata> {
+  private async _addPermissionsToRole(
+    roleName: string,
+    permissionNames: string[],
+    excludedPermissionPrefixes: string[] = [],
+  ): Promise<RoleMetadata> {
     const role = await this.repo.findOne({
       where: { name: roleName },
       select: {
@@ -161,7 +169,7 @@ export class RoleMetadataService extends CRUDService<RoleMetadata> {
     }
 
     const joinInfo = this.getRolePermissionJoinInfo();
-    const targetPermissions = await this.loadTargetPermissions(permissionNames);
+    const targetPermissions = await this.loadTargetPermissions(permissionNames, excludedPermissionPrefixes);
 
     if (!permissionNames || permissionNames.length === 0) {
       await this.entityManager
@@ -226,21 +234,25 @@ export class RoleMetadataService extends CRUDService<RoleMetadata> {
     return existingPermission;
   }
 
-  private async loadTargetPermissions(permissionNames: string[] | null): Promise<PermissionMetadata[]> {
+  private async loadTargetPermissions(permissionNames: string[] | null, excludedPermissionPrefixes: string[] = []): Promise<PermissionMetadata[]> {
     if (permissionNames && permissionNames.length !== 0) {
       const uniquePermissionNames = [...new Set(permissionNames)];
       const permissions = await this.permissionRepository.find({ where: { name: In(uniquePermissionNames) } });
       if (permissions.length !== uniquePermissionNames.length) {
         throw new Error(`One or more permissions not found.`);
       }
-      return permissions;
+      return permissions.filter((permission) =>
+        !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)),
+      );
     }
 
     const permissions = await this.permissionRepository.find();
     if (permissions.length === 0) {
       throw new Error(`No permissions configured in the system. Did you forget to run the PermissionSeederService?`);
     }
-    return permissions;
+    return permissions.filter((permission) =>
+      !excludedPermissionPrefixes.some((prefix) => permission.name.startsWith(prefix)),
+    );
   }
 
   private getRolePermissionJoinInfo(): { tableName: string; roleIdColumn: string; permissionIdColumn: string } {