@spinajs/orm-api 2.0.131 → 2.0.133

package/lib/cjs/controllers/crud/Read.js

@@ -0,0 +1,230 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CrudRead = void 0;
+const orm_1 = require("@spinajs/orm");
+const http_1 = require("@spinajs/http");
+const rbac_http_1 = require("@spinajs/rbac-http");
+const rbac_1 = require("@spinajs/rbac");
+const di_1 = require("@spinajs/di");
+const exceptions_1 = require("@spinajs/exceptions");
+const log_1 = require("@spinajs/log");
+require("@spinajs/rbac");
+const ModelType_js_1 = require("../../route-args/ModelType.js");
+const QueryArgs_js_1 = require("../../dto/QueryArgs.js");
+const QueryFilter_js_1 = require("../../dto/QueryFilter.js");
+const QueryIncludes_js_1 = require("../../dto/QueryIncludes.js");
+const Crud_js_1 = require("./Crud.js");
+const FindModelType_js_1 = require("../../policies/FindModelType.js");
+let CrudRead = class CrudRead extends Crud_js_1.Crud {
+    checkAny(resource, user) {
+        // if we have user
+        if (user) {
+            return this.Ac.can(user.Role).readAny(resource);
+        }
+        else {
+            // if not try guest account
+            return this.Ac.can('guest').readAny(resource);
+        }
+    }
+    checkOwn(resource, user) {
+        // if we have user
+        if (user) {
+            return this.Ac.can(user.Role).readOwn(resource);
+        }
+        else {
+            // if not try guest account
+            return this.Ac.can('guest').readOwn(resource);
+        }
+    }
+    /**
+     *
+     * Creates query on model and ansures that user have proper permission to access it
+     *
+     * @param model model to query against
+     * @param user user for permission check
+     * @returns
+     */
+    getSafeQuery(model, user) {
+        const descriptor = this.getModelDescriptor(model);
+        const query = model.query();
+        // retrieve resource name, if model does not have @OrmResource decorator set
+        // model name is default resource name
+        let resource = descriptor.RbacResource ? descriptor.RbacResource : descriptor.Name;
+        let permission = this.checkAny(resource, user);
+        if (!permission.granted) {
+            // permission for readAny not  granted, check for own
+            permission = this.checkOwn(resource, user);
+            if (permission.granted && user) {
+                if (model.ensureOwnership) {
+                    model.ensureOwnership(query, user, descriptor);
+                }
+                else {
+                    throw new exceptions_1.UnexpectedServerError(`Resource ${resource} does not have ensureOwnership method implemented`);
+                }
+            }
+            if (!permission.granted) {
+                throw new exceptions_1.Forbidden(`You do not access to ${resource}`);
+            }
+        }
+        return { query, permission };
+    }
+    async getAll(model, getParams, filters, includes, user) {
+        const { query, permission } = this.getSafeQuery(model, user);
+        query
+            .where(filters)
+            .select('*')
+            .populate(includes)
+            .order(getParams.order, getParams.orderDirection ?? orm_1.SortOrder.ASC)
+            .skip(getParams.page * getParams.perPage ?? 0)
+            .take(getParams.perPage ?? 10);
+        const count = await query.clone().clearColumns().count('*', 'count').takeFirst().asRaw();
+        const result = await query;
+        return new http_1.Ok({
+            Data: result.map((x) => x.dehydrateWithRelations()).map((x) => permission.filter(x)),
+            Total: count.count,
+        });
+    }
+    async get(user, model, id, includes) {
+        const descriptor = this.getModelDescriptor(model);
+        const { query, permission } = this.getSafeQuery(model, user);
+        const result = await query
+            .select('*')
+            .where(descriptor.PrimaryKey, id)
+            .populate(includes)
+            .firstOrThrow(new exceptions_1.ResourceNotFound(`Record with id ${id} not found`, {
+            Resource: model.name,
+            [descriptor.PrimaryKey]: id,
+        }));
+        return new http_1.Ok(permission.filter(result.dehydrateWithRelations()));
+    }
+    async getRelation(model, id, relation, relationId, includes, user) {
+        const mDescriptor = this.getModelDescriptor(model);
+        const rDescriptor = this.getRelationDescriptor(model, relation);
+        const rmDescriptor = this.getModelDescriptor(rDescriptor.TargetModel);
+        const { query, permission } = this.getSafeQuery(rDescriptor.TargetModel, user);
+        if (!mDescriptor.Relations.has(relation)) {
+            return new exceptions_1.BadRequest(`Resource ${mDescriptor.Name} does not have relation ${relation} defined`);
+        }
+        const pExists = await model.exists(id);
+        if (!pExists) {
+            throw new exceptions_1.ResourceNotFound(`Record with id ${id} not found`, {
+                Resource: model.name,
+                [mDescriptor.PrimaryKey]: id,
+            });
+        }
+        const result = await query
+            .select('*')
+            .populate(includes)
+            .where(rmDescriptor.PrimaryKey, relationId)
+            .firstOrThrow(new exceptions_1.ResourceNotFound(`Record with id ${relationId} not found`, {
+            Resource: rDescriptor.TargetModel.name,
+            [rmDescriptor.PrimaryKey]: relationId,
+        }));
+        return new http_1.Ok(permission.filter(result.dehydrateWithRelations()));
+    }
+    async getRelations(model, id, relation, params, filters, includes, user) {
+        const mDescriptor = this.getModelDescriptor(model);
+        const rDescriptor = this.getRelationDescriptor(model, relation);
+        const { query, permission } = this.getSafeQuery(rDescriptor.TargetModel, user);
+        if (!mDescriptor.Relations.has(relation)) {
+            return new exceptions_1.BadRequest(`Resource ${mDescriptor.Name} does not have relation ${relation} defined`);
+        }
+        const pExists = await model.exists(id);
+        if (!pExists) {
+            throw new exceptions_1.ResourceNotFound(`Record with id ${id} not found`, {
+                Resource: model.name,
+                [mDescriptor.PrimaryKey]: id,
+            });
+        }
+        query
+            .where(filters)
+            .where(rDescriptor.ForeignKey, id)
+            .select('*')
+            .populate(includes)
+            .order(params.order, params.orderDirection ?? orm_1.SortOrder.ASC)
+            .skip(params.page * params.perPage ?? 0)
+            .take(params.perPage ?? 10);
+        const count = await query.clone().clearColumns().count('*', 'count').takeFirst().asRaw();
+        const result = await query;
+        return new http_1.Ok({
+            Data: result.map((x) => x.dehydrateWithRelations()).map((x) => permission.filter(x)),
+            Total: count,
+        });
+    }
+};
+__decorate([
+    (0, log_1.Logger)('orm-http:api'),
+    __metadata("design:type", log_1.Log)
+], CrudRead.prototype, "Log", void 0);
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", orm_1.Orm)
+], CrudRead.prototype, "Orm", void 0);
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", rbac_1.AccessControl)
+], CrudRead.prototype, "Ac", void 0);
+__decorate([
+    (0, http_1.Get)(':model'),
+    __param(0, (0, ModelType_js_1.ModelType)()),
+    __param(1, (0, http_1.Query)()),
+    __param(2, (0, http_1.Query)()),
+    __param(3, (0, http_1.Query)()),
+    __param(4, (0, rbac_http_1.User)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, QueryArgs_js_1.QueryArgs, QueryFilter_js_1.QueryFilter, QueryIncludes_js_1.QueryIncludes, rbac_1.User]),
+    __metadata("design:returntype", Promise)
+], CrudRead.prototype, "getAll", null);
+__decorate([
+    (0, http_1.Get)(':model/:id'),
+    __param(0, (0, rbac_http_1.User)()),
+    __param(1, (0, ModelType_js_1.ModelType)()),
+    __param(2, (0, http_1.Param)()),
+    __param(3, (0, http_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [rbac_1.User, Object, Number, QueryIncludes_js_1.QueryIncludes]),
+    __metadata("design:returntype", Promise)
+], CrudRead.prototype, "get", null);
+__decorate([
+    (0, http_1.Get)(':model/:id/:relation/:relationId'),
+    __param(0, (0, ModelType_js_1.ModelType)()),
+    __param(1, (0, http_1.Param)()),
+    __param(2, (0, http_1.Param)()),
+    __param(3, (0, http_1.Param)()),
+    __param(4, (0, http_1.Query)()),
+    __param(5, (0, rbac_http_1.User)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String, Object, QueryIncludes_js_1.QueryIncludes, rbac_1.User]),
+    __metadata("design:returntype", Promise)
+], CrudRead.prototype, "getRelation", null);
+__decorate([
+    (0, http_1.Get)(':model/:id/:relation'),
+    __param(0, (0, ModelType_js_1.ModelType)()),
+    __param(1, (0, http_1.Param)()),
+    __param(2, (0, http_1.Param)()),
+    __param(3, (0, http_1.Query)()),
+    __param(4, (0, http_1.Query)()),
+    __param(5, (0, http_1.Query)()),
+    __param(6, (0, rbac_http_1.User)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String, QueryArgs_js_1.QueryArgs, QueryFilter_js_1.QueryFilter, QueryIncludes_js_1.QueryIncludes, rbac_1.User]),
+    __metadata("design:returntype", Promise)
+], CrudRead.prototype, "getRelations", null);
+CrudRead = __decorate([
+    (0, http_1.BasePath)('crud'),
+    (0, http_1.Policy)(FindModelType_js_1.FindModelType)
+], CrudRead);
+exports.CrudRead = CrudRead;
+//# sourceMappingURL=Read.js.map

package/lib/cjs/controllers/crud/Read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Read.js","sourceRoot":"","sources":["../../../../src/controllers/crud/Read.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,sCAA4D;AAC5D,wCAAwE;AACxE,kDAA0C;AAC1C,wCAAuF;AACvF,oCAAyC;AACzC,oDAAqG;AACrG,sCAA2C;AAC3C,yBAAuB;AAGvB,gEAA0D;AAC1D,yDAAmD;AACnD,6DAAuD;AACvD,iEAA2D;AAC3D,uCAAiC;AACjC,sEAAgE;AAIzD,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,cAAI;IAUtB,QAAQ,CAAC,QAAgB,EAAE,IAAgB;QACnD,kBAAkB;QAClB,IAAI,IAAI,EAAE;YACR,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACjD;aAAM;YACL,2BAA2B;YAC3B,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC/C;IACH,CAAC;IAES,QAAQ,CAAC,QAAgB,EAAE,IAAgB;QACnD,kBAAkB;QAClB,IAAI,IAAI,EAAE;YACR,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACjD;aAAM;YACL,2BAA2B;YAC3B,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC/C;IACH,CAAC;IAED;;;;;;;OAOG;IACO,YAAY,CAAC,KAAmB,EAAE,IAAgB;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAyB,CAAC;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAE5B,4EAA4E;QAC5E,sCAAsC;QACtC,IAAI,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACnF,IAAI,UAAU,GAAe,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YACvB,qDAAqD;YACrD,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,EAAE;gBAC9B,IAAI,KAAK,CAAC,eAAe,EAAE;oBACzB,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;iBAChD;qBAAM;oBACL,MAAM,IAAI,kCAAqB,CAAC,YAAY,QAAQ,mDAAmD,CAAC,CAAC;iBAC1G;aACF;YAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;gBACvB,MAAM,IAAI,sBAAS,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;aACzD;SACF;QAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAGY,AAAN,KAAK,CAAC,MAAM,CAAc,KAAmB,EAAW,SAAoB,EAAW,OAAoB,EAAW,QAAuB,EAAU,IAAgB;QAC5K,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,KAAK;aACF,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,GAAG,CAAC;aACX,QAAQ,CAAC,QAAQ,CAAC;aAClB,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,cAAc,IAAI,eAAS,CAAC,GAAG,CAAC;aACjE,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,IAAI,CAAC,CAAC;aAC7C,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAEjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,EAAqB,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QAE3B,OAAO,IAAI,SAAE,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpF,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAGY,AAAN,KAAK,CAAC,GAAG,CAAS,IAAe,EAAe,KAAmB,EAAW,EAAU,EAAW,QAAuB;QAC/H,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAyB,CAAC;QAC1E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,KAAK;aACvB,MAAM,CAAC,GAAG,CAAC;aACX,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;aAChC,QAAQ,CAAC,QAAQ,CAAC;aAClB,YAAY,CACX,IAAI,6BAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;YACrD,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE;SAC5B,CAAC,CACH,CAAC;QAEJ,OAAO,IAAI,SAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAGY,AAAN,KAAK,CAAC,WAAW,CAAc,KAAmB,EAAW,EAAO,EAAW,QAAgB,EAAW,UAAe,EAAW,QAAuB,EAAU,IAAgB;QAC1L,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACxC,OAAO,IAAI,uBAAU,CAAC,YAAY,WAAW,CAAC,IAAI,2BAA2B,QAAQ,UAAU,CAAC,CAAC;SAClG;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,6BAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;gBAC3D,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC;SACJ;QAED,MAAM,MAAM,GAAG,MAAM,KAAK;aACvB,MAAM,CAAC,GAAG,CAAC;aACX,QAAQ,CAAC,QAAQ,CAAC;aAClB,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC;aAC1C,YAAY,CACX,IAAI,6BAAgB,CAAC,kBAAkB,UAAU,YAAY,EAAE;YAC7D,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,IAAI;YACtC,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,UAAU;SACtC,CAAC,CACH,CAAC;QAEJ,OAAO,IAAI,SAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAc,KAAmB,EAAW,EAAO,EAAW,QAAgB,EAAW,MAAiB,EAAW,OAAoB,EAAW,QAAuB,EAAU,IAAgB;QAC5N,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACxC,OAAO,IAAI,uBAAU,CAAC,YAAY,WAAW,CAAC,IAAI,2BAA2B,QAAQ,UAAU,CAAC,CAAC;SAClG;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,6BAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;gBAC3D,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC;SACJ;QAED,KAAK;aACF,KAAK,CAAC,OAAO,CAAC;aACd,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;aACjC,MAAM,CAAC,GAAG,CAAC;aACX,QAAQ,CAAC,QAAQ,CAAC;aAClB,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,IAAI,eAAS,CAAC,GAAG,CAAC;aAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,EAAqB,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QAE3B,OAAO,IAAI,SAAE,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3KC;IAAC,IAAA,YAAM,EAAC,cAAc,CAAC;8BACR,SAAG;qCAAC;AAEnB;IAAC,IAAA,eAAU,GAAE;8BACE,SAAG;qCAAC;AAEnB;IAAC,IAAA,eAAU,GAAE;8BACC,oBAAa;oCAAC;AA2Df;IADZ,IAAA,UAAG,EAAC,QAAQ,CAAC;IACO,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAwB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAwB,WAAA,IAAA,YAAK,GAAE,CAAA;IAA2B,WAAA,IAAA,gBAAI,GAAE,CAAA;;6CAAnF,wBAAS,EAAoB,4BAAW,EAAqB,gCAAa,EAAiB,WAAS;;sCAiB7K;AAGY;IADZ,IAAA,UAAG,EAAC,YAAY,CAAC;IACA,WAAA,IAAA,gBAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAc,WAAA,IAAA,YAAK,GAAE,CAAA;;qCAA1E,WAAS,kBAA4E,gCAAa;;mCAehI;AAGY;IADZ,IAAA,UAAG,EAAC,kCAAkC,CAAC;IACd,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAW,WAAA,IAAA,YAAK,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAmB,WAAA,IAAA,YAAK,GAAE,CAAA;IAA2B,WAAA,IAAA,gBAAI,GAAE,CAAA;;qEAAtB,gCAAa,EAAiB,WAAS;;2CA8B3L;AAGY;IADZ,IAAA,UAAG,EAAC,sBAAsB,CAAC;IACD,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAW,WAAA,IAAA,YAAK,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAqB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAwB,WAAA,IAAA,YAAK,GAAE,CAAA;IAA2B,WAAA,IAAA,gBAAI,GAAE,CAAA;;6DAAnF,wBAAS,EAAoB,4BAAW,EAAqB,gCAAa,EAAiB,WAAS;;4CAiC7N;AA3KU,QAAQ;IAFpB,IAAA,eAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,aAAM,EAAC,gCAAa,CAAC;GACT,QAAQ,CA4KpB;AA5KY,4BAAQ"}

package/lib/cjs/controllers/crud/Update.d.ts

@@ -0,0 +1,13 @@
+import { IModelStatic, Orm } from '@spinajs/orm';
+import { Ok } from '@spinajs/http';
+import { Log } from '@spinajs/log';
+import { AccessControl } from '@spinajs/rbac';
+import { Crud } from './Crud.js';
+export declare class CrudUpdate extends Crud {
+    protected Log: Log;
+    protected Orm: Orm;
+    protected Ac: AccessControl;
+    update(model: IModelStatic, id: number, data: unknown): Promise<Ok>;
+    updateRelation(model: IModelStatic, id: number, relation: string, relationId: any, data: unknown): Promise<Ok>;
+}
+//# sourceMappingURL=Update.d.ts.map

package/lib/cjs/controllers/crud/Update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Update.d.ts","sourceRoot":"","sources":["../../../../src/controllers/crud/Update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAY,EAAE,EAAiC,MAAM,eAAe,CAAC;AAQ5E,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,qBAEa,UAAW,SAAQ,IAAI;IAElC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC;IAIf,MAAM,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,MAAM,EAAe,IAAI,EAAE,OAAO;IAmBxF,cAAc,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,MAAM,EAAW,QAAQ,EAAE,MAAM,EAAW,UAAU,EAAE,GAAG,EAAe,IAAI,EAAE,OAAO;CA4BnK"}

package/lib/cjs/controllers/crud/Update.js

@@ -0,0 +1,99 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CrudUpdate = void 0;
+const orm_1 = require("@spinajs/orm");
+const http_1 = require("@spinajs/http");
+const rbac_http_1 = require("@spinajs/rbac-http");
+const di_1 = require("@spinajs/di");
+const exceptions_1 = require("@spinajs/exceptions");
+const ModelType_js_1 = require("../../route-args/ModelType.js");
+const FindModelType_js_1 = require("../../policies/FindModelType.js");
+const log_1 = require("@spinajs/log");
+const rbac_1 = require("@spinajs/rbac");
+const Crud_js_1 = require("./Crud.js");
+let CrudUpdate = class CrudUpdate extends Crud_js_1.Crud {
+    async update(model, id, data) {
+        const descriptor = this.getModelDescriptor(model);
+        const entity = await model.where(descriptor.PrimaryKey, id).firstOrThrow(new exceptions_1.ResourceNotFound(`Record with id ${id} not found`, {
+            Resource: model.name,
+            [descriptor.PrimaryKey]: id,
+        }));
+        entity.hydrate(data);
+        await entity.update();
+        this.Log.trace('Updated entity with id ${id}');
+        return new http_1.Ok(entity.toJSON());
+    }
+    async updateRelation(model, id, relation, relationId, data) {
+        const mDescriptor = this.getModelDescriptor(model);
+        const rDescriptor = this.getRelationDescriptor(model, relation);
+        const rmDescriptor = this.getModelDescriptor(rDescriptor.TargetModel);
+        const query = rDescriptor.TargetModel.query();
+        const pExists = await model.exists(id);
+        if (!pExists) {
+            throw new exceptions_1.ResourceNotFound(`Record with id ${id} not found`, {
+                Resource: model.name,
+                [mDescriptor.PrimaryKey]: id,
+            });
+        }
+        const result = await query.where(rmDescriptor.PrimaryKey, relationId).firstOrThrow(new exceptions_1.ResourceNotFound(`Record with id ${relationId} not found`, {
+            Resource: rDescriptor.TargetModel.name,
+            [rmDescriptor.PrimaryKey]: relationId,
+        }));
+        this.Log.trace(`Updating relation ${relation} with id ${relationId} for model ${model.name} with id ${id}`);
+        result.hydrate(data);
+        await result.update();
+        return new http_1.Ok(result.toJSON());
+    }
+};
+__decorate([
+    (0, log_1.Logger)('orm-http:api'),
+    __metadata("design:type", log_1.Log)
+], CrudUpdate.prototype, "Log", void 0);
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", orm_1.Orm)
+], CrudUpdate.prototype, "Orm", void 0);
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", rbac_1.AccessControl)
+], CrudUpdate.prototype, "Ac", void 0);
+__decorate([
+    (0, http_1.Put)(':model/:id'),
+    (0, rbac_http_1.Permission)('updateAny'),
+    __param(0, (0, ModelType_js_1.ModelType)()),
+    __param(1, (0, http_1.Param)()),
+    __param(2, (0, http_1.BodyField)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Number, Object]),
+    __metadata("design:returntype", Promise)
+], CrudUpdate.prototype, "update", null);
+__decorate([
+    (0, http_1.Put)(':model/:id/:relation/:relationId'),
+    (0, rbac_http_1.Permission)('updateAny'),
+    __param(0, (0, ModelType_js_1.ModelType)()),
+    __param(1, (0, http_1.Param)()),
+    __param(2, (0, http_1.Param)()),
+    __param(3, (0, http_1.Param)()),
+    __param(4, (0, http_1.BodyField)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Number, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], CrudUpdate.prototype, "updateRelation", null);
+CrudUpdate = __decorate([
+    (0, http_1.BasePath)('crud'),
+    (0, http_1.Policy)(FindModelType_js_1.FindModelType)
+], CrudUpdate);
+exports.CrudUpdate = CrudUpdate;
+//# sourceMappingURL=Update.js.map

package/lib/cjs/controllers/crud/Update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Update.js","sourceRoot":"","sources":["../../../../src/controllers/crud/Update.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sCAAiD;AACjD,wCAA4E;AAC5E,kDAAgD;AAChD,oCAAyC;AACzC,oDAAuD;AAGvD,gEAA0D;AAC1D,sEAAgE;AAChE,sCAA2C;AAC3C,wCAA8C;AAC9C,uCAAiC;AAI1B,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,cAAI;IAYrB,AAAN,KAAK,CAAC,MAAM,CAAc,KAAmB,EAAW,EAAU,EAAe,IAAa;QACnG,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,YAAY,CACtE,IAAI,6BAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;YACrD,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE;SAC5B,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAEtB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAE/C,OAAO,IAAI,SAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IAIY,AAAN,KAAK,CAAC,cAAc,CAAc,KAAmB,EAAW,EAAU,EAAW,QAAgB,EAAW,UAAe,EAAe,IAAa;QAChK,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,6BAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;gBAC3D,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC;SACJ;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,YAAY,CAChF,IAAI,6BAAgB,CAAC,kBAAkB,UAAU,YAAY,EAAE;YAC7D,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,IAAI;YACtC,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,UAAU;SACtC,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,QAAQ,YAAY,UAAU,cAAc,KAAK,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC,CAAC;QAE5G,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAEtB,OAAO,IAAI,SAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;CACF,CAAA;AA1DC;IAAC,IAAA,YAAM,EAAC,cAAc,CAAC;8BACR,SAAG;uCAAC;AAEnB;IAAC,IAAA,eAAU,GAAE;8BACE,SAAG;uCAAC;AAEnB;IAAC,IAAA,eAAU,GAAE;8BACC,oBAAa;sCAAC;AAIf;IAFZ,IAAA,UAAG,EAAC,YAAY,CAAC;IACjB,IAAA,sBAAU,EAAC,WAAW,CAAC;IACH,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAc,WAAA,IAAA,gBAAS,GAAE,CAAA;;;;wCAetF;AAIY;IAFZ,IAAA,UAAG,EAAC,kCAAkC,CAAC;IACvC,IAAA,sBAAU,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,wBAAS,GAAE,CAAA;IAAuB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAc,WAAA,IAAA,YAAK,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAK,GAAE,CAAA;IAAmB,WAAA,IAAA,gBAAS,GAAE,CAAA;;;;gDA2BnJ;AA1DU,UAAU;IAFtB,IAAA,eAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,aAAM,EAAC,gCAAa,CAAC;GACT,UAAU,CA2DtB;AA3DY,gCAAU"}

package/lib/mjs/config/orm-http.js

@@ -14,7 +14,7 @@ const ormHttp = {
     api: {
         endpoint: {
             transformer: {
-                service: 'JsonApiCollectionTransofrmer',
+                service: 'JsonApiCollectionTransformer',
             },
         },
     },

package/lib/mjs/controllers/crud/Create.d.ts

@@ -0,0 +1,16 @@
+import { IModelStatic, Orm } from '@spinajs/orm';
+import { Ok } from '@spinajs/http';
+import { Log } from '@spinajs/log';
+import { Crud } from './Crud.js';
+import { AccessControl, User as UserModel } from '@spinajs/rbac';
+import { Permission } from 'accesscontrol';
+export declare class CrudCreate extends Crud {
+    protected Log: Log;
+    protected Orm: Orm;
+    protected Ac: AccessControl;
+    protected checkAny(resource: string, user?: UserModel): Permission;
+    protected checkOwn(resource: string, user?: UserModel): Permission;
+    save(model: IModelStatic, data: unknown, user?: UserModel): Promise<Ok>;
+    insertRelation(model: IModelStatic, id: any, relation: string, data: unknown, user?: UserModel): Promise<Ok>;
+}
+//# sourceMappingURL=Create.d.ts.map

package/lib/mjs/controllers/crud/Create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Create.d.ts","sourceRoot":"","sources":["../../../../src/controllers/crud/Create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAY,EAAE,EAAkC,MAAM,eAAe,CAAC;AAO7E,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAwB,IAAI,IAAI,SAAS,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,qBAEa,UAAW,SAAQ,IAAI;IAElC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC;IAE5B,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU;IAUlE,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU;IAMrD,IAAI,CAAc,KAAK,EAAE,YAAY,EAAe,IAAI,EAAE,OAAO,EAAU,IAAI,CAAC,EAAE,SAAS;IA4B3F,cAAc,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,GAAG,EAAW,QAAQ,EAAE,MAAM,EAAe,IAAI,EAAE,OAAO,EAAU,IAAI,CAAC,EAAE,SAAS;CA4ChK"}

package/lib/mjs/controllers/crud/Create.js

@@ -0,0 +1,139 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Orm } from '@spinajs/orm';
+import { BasePath, Ok, Post, Policy, BodyField, Param } from '@spinajs/http';
+import { Autoinject } from '@spinajs/di';
+import { Forbidden, ResourceNotFound, UnexpectedServerError } from '@spinajs/exceptions';
+import { User } from '@spinajs/rbac-http';
+import _ from 'lodash';
+import { ModelType } from '../../route-args/ModelType.js';
+import { FindModelType } from '../../policies/FindModelType.js';
+import { Log, Logger } from '@spinajs/log';
+import { Crud } from './Crud.js';
+import { AccessControl, User as UserModel } from '@spinajs/rbac';
+let CrudCreate = class CrudCreate extends Crud {
+    checkAny(resource, user) {
+        // if we have user
+        if (user) {
+            return this.Ac.can(user.Role).createAny(resource);
+        }
+        else {
+            // if not try guest account
+            return this.Ac.can('guest').createAny(resource);
+        }
+    }
+    checkOwn(resource, user) {
+        const role = user ? user.Role : 'guest';
+        return this.Ac.can(role).createOwn(resource);
+    }
+    async save(model, data, user) {
+        const mDescriptor = this.getModelDescriptor(model);
+        let resource = mDescriptor.RbacResource ? mDescriptor.RbacResource : mDescriptor.Name;
+        let permission = this.checkAny(resource, user);
+        const toInsert = (Array.isArray(data) ? data : [data]).map((x) => new model(x));
+        if (!permission.granted) {
+            permission = this.checkOwn(resource, user);
+            if (permission.granted && user) {
+                if (model.checkOwnership) {
+                    if (_.some(toInsert, (x) => !model.checkOwnership(x, user))) {
+                        throw new Forbidden(`You can only create ${resource} that is assigned to you !`);
+                    }
+                }
+                else {
+                    throw new UnexpectedServerError(`Resource ${resource} does not have checkOwnership method implemented`);
+                }
+            }
+            if (!permission.granted) {
+                throw new Forbidden(`You cannot create resource ${resource}`);
+            }
+        }
+        await model.insert(toInsert);
+        return new Ok(toInsert.map((x) => x.dehydrate()));
+    }
+    async insertRelation(model, id, relation, data, user) {
+        const mDescriptor = this.getModelDescriptor(model);
+        const rDescriptor = this.getRelationDescriptor(model, relation);
+        let resource = mDescriptor.RbacResource ? mDescriptor.RbacResource : mDescriptor.Name;
+        let permission = this.checkAny(resource, user);
+        const toInsert = (Array.isArray(data) ? data : [data]).map((x) => permission.filter(x)).map((x) => new rDescriptor.TargetModel(x));
+        const m = await model.get(id);
+        if (!m) {
+            throw new ResourceNotFound(`Record with id ${id} not found`, {
+                Resource: model.name,
+                [mDescriptor.PrimaryKey]: id,
+            });
+        }
+        if (!permission.granted) {
+            permission = this.checkOwn(resource, user);
+            if (permission.granted && user) {
+                if (model.checkOwnership) {
+                    if (!model.checkOwnership(m, user)) {
+                        throw new Forbidden(`Cannot create relations for  ${resource} that you do not own`);
+                    }
+                    if (_.some(toInsert, (x) => !model.checkOwnership(x, user))) {
+                        throw new Forbidden(`You can only create ${resource} that you own`);
+                    }
+                }
+                else {
+                    throw new UnexpectedServerError(`Resource ${resource} does not have checkOwnership method implemented`);
+                }
+            }
+            if (!permission.granted) {
+                throw new Forbidden(`You do not access to ${resource}`);
+            }
+        }
+        toInsert.forEach((x) => {
+            m.attach(x);
+        });
+        await rDescriptor.TargetModel.insert(toInsert);
+        return new Ok(toInsert.map((x) => x.dehydrate()));
+    }
+};
+__decorate([
+    Logger('orm-http:api'),
+    __metadata("design:type", Log)
+], CrudCreate.prototype, "Log", void 0);
+__decorate([
+    Autoinject(),
+    __metadata("design:type", Orm)
+], CrudCreate.prototype, "Orm", void 0);
+__decorate([
+    Autoinject(),
+    __metadata("design:type", AccessControl)
+], CrudCreate.prototype, "Ac", void 0);
+__decorate([
+    Post(':model'),
+    __param(0, ModelType()),
+    __param(1, BodyField()),
+    __param(2, User()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, UserModel]),
+    __metadata("design:returntype", Promise)
+], CrudCreate.prototype, "save", null);
+__decorate([
+    Post(':model/:id/:relation'),
+    __param(0, ModelType()),
+    __param(1, Param()),
+    __param(2, Param()),
+    __param(3, BodyField()),
+    __param(4, User()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String, Object, UserModel]),
+    __metadata("design:returntype", Promise)
+], CrudCreate.prototype, "insertRelation", null);
+CrudCreate = __decorate([
+    BasePath('crud'),
+    Policy(FindModelType)
+], CrudCreate);
+export { CrudCreate };
+//# sourceMappingURL=Create.js.map

package/lib/mjs/controllers/crud/Create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Create.js","sourceRoot":"","sources":["../../../../src/controllers/crud/Create.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAgB,GAAG,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,CAAC,MAAM,QAAQ,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAwB,IAAI,IAAI,SAAS,EAAE,MAAM,eAAe,CAAC;AAKhF,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,IAAI;IAUxB,QAAQ,CAAC,QAAgB,EAAE,IAAgB;QACnD,kBAAkB;QAClB,IAAI,IAAI,EAAE;YACR,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SACnD;aAAM;YACL,2BAA2B;YAC3B,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SACjD;IACH,CAAC;IAES,QAAQ,CAAC,QAAgB,EAAE,IAAgB;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACxC,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI,CAAc,KAAmB,EAAe,IAAa,EAAU,IAAgB;QACtG,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAyB,CAAC;QAC3E,IAAI,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;QACtF,IAAI,UAAU,GAAe,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YACvB,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,EAAE;gBAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;oBACxB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE;wBAC3D,MAAM,IAAI,SAAS,CAAC,uBAAuB,QAAQ,4BAA4B,CAAC,CAAC;qBAClF;iBACF;qBAAM;oBACL,MAAM,IAAI,qBAAqB,CAAC,YAAY,QAAQ,kDAAkD,CAAC,CAAC;iBACzG;aACF;YAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;gBACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;aAC/D;SACF;QAED,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAGY,AAAN,KAAK,CAAC,cAAc,CAAc,KAAmB,EAAW,EAAO,EAAW,QAAgB,EAAe,IAAa,EAAU,IAAgB;QAC7J,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAyB,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;QACtF,IAAI,UAAU,GAAe,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnI,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,EAAE;YACN,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,EAAE;gBAC3D,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC;SACJ;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YACvB,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,OAAO,IAAI,IAAI,EAAE;gBAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;oBACxB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;wBAClC,MAAM,IAAI,SAAS,CAAC,gCAAgC,QAAQ,sBAAsB,CAAC,CAAC;qBACrF;oBAED,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE;wBAC3D,MAAM,IAAI,SAAS,CAAC,uBAAuB,QAAQ,eAAe,CAAC,CAAC;qBACrE;iBACF;qBAAM;oBACL,MAAM,IAAI,qBAAqB,CAAC,YAAY,QAAQ,kDAAkD,CAAC,CAAC;iBACzG;aACF;YAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;gBACvB,MAAM,IAAI,SAAS,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;aACzD;SACF;QAED,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/C,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;CACF,CAAA;AAjGC;IAAC,MAAM,CAAC,cAAc,CAAC;8BACR,GAAG;uCAAC;AAEnB;IAAC,UAAU,EAAE;8BACE,GAAG;uCAAC;AAEnB;IAAC,UAAU,EAAE;8BACC,aAAa;sCAAC;AAkBf;IADZ,IAAI,CAAC,QAAQ,CAAC;IACI,WAAA,SAAS,EAAE,CAAA;IAAuB,WAAA,SAAS,EAAE,CAAA;IAAiB,WAAA,IAAI,EAAE,CAAA;;qDAAQ,SAAS;;sCAyBvG;AAGY;IADZ,IAAI,CAAC,sBAAsB,CAAC;IACA,WAAA,SAAS,EAAE,CAAA;IAAuB,WAAA,KAAK,EAAE,CAAA;IAAW,WAAA,KAAK,EAAE,CAAA;IAAoB,WAAA,SAAS,EAAE,CAAA;IAAiB,WAAA,IAAI,EAAE,CAAA;;qEAAQ,SAAS;;gDA2C9J;AAjGU,UAAU;IAFtB,QAAQ,CAAC,MAAM,CAAC;IAChB,MAAM,CAAC,aAAa,CAAC;GACT,UAAU,CAkGtB;SAlGY,UAAU"}

package/lib/mjs/controllers/crud/Crud.d.ts

@@ -0,0 +1,13 @@
+import { IModelStatic, IOrmRelation, SelectQueryBuilder } from '@spinajs/orm';
+import { BaseController } from '@spinajs/http';
+/**
+ * Base class for crud operations. Provides helper functions
+ */
+export declare abstract class Crud extends BaseController {
+    protected prepareQuery(model: IModelStatic, relation: string, id: any, callback: (this: SelectQueryBuilder<SelectQueryBuilder<any>>, relation: IOrmRelation) => void): {
+        relation: any;
+        relationModel: any;
+        query: import("@spinajs/orm").ISelectQueryBuilder<import("@spinajs/orm").ModelBase<unknown>[]>;
+    };
+}
+//# sourceMappingURL=Crud.d.ts.map

package/lib/mjs/controllers/crud/Crud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Crud.d.ts","sourceRoot":"","sources":["../../../../src/controllers/crud/Crud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAI/C;;GAEG;AACH,8BAAsB,IAAK,SAAQ,cAAc;IAC/C,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,KAAK,IAAI;;;;;CAYrK"}

package/lib/mjs/controllers/crud/Crud.js

@@ -0,0 +1,18 @@
+import { BaseController } from '@spinajs/http';
+/**
+ * Base class for crud operations. Provides helper functions
+ */
+export class Crud extends BaseController {
+    prepareQuery(model, relation, id, callback) {
+        const descriptor = this.getModelDescriptor(model);
+        const rDescriptor = this.getRelationDescriptor(model, relation);
+        const tDescriptor = this.getModelDescriptor(rDescriptor.TargetModel);
+        const sQuery = model.query().where(descriptor.PrimaryKey, id).populate(relation, callback);
+        return {
+            relation: rDescriptor,
+            relationModel: tDescriptor,
+            query: sQuery,
+        };
+    }
+}
+//# sourceMappingURL=Crud.js.map

package/lib/mjs/controllers/crud/Crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Crud.js","sourceRoot":"","sources":["../../../../src/controllers/crud/Crud.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAI/C;;GAEG;AACH,MAAM,OAAgB,IAAK,SAAQ,cAAc;IACrC,YAAY,CAAC,KAAmB,EAAE,QAAgB,EAAE,EAAO,EAAE,QAA6F;QAClK,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE3F,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;CACF"}

package/lib/mjs/controllers/crud/Delete.d.ts

@@ -0,0 +1,16 @@
+import { IModelStatic, Orm } from '@spinajs/orm';
+import { Ok } from '@spinajs/http';
+import { Log } from '@spinajs/log';
+import { Crud } from './Crud.js';
+import { AccessControl } from '@spinajs/rbac';
+export declare class CrudDelete extends Crud {
+    protected Log: Log;
+    protected Orm: Orm;
+    protected Ac: AccessControl;
+    batchDelete(model: IModelStatic, ids: any[]): Promise<Ok>;
+    del(model: IModelStatic, id: any): Promise<Ok>;
+    deleteRelationBatch(model: IModelStatic, id: any, relation: string, relationIds: any[]): Promise<Ok>;
+    deleteRelation(model: IModelStatic, id: any, relation: string, relationId: number): Promise<Ok>;
+    deleteRelationAll(model: IModelStatic, id: any, relation: string): Promise<Ok>;
+}
+//# sourceMappingURL=Delete.d.ts.map

package/lib/mjs/controllers/crud/Delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Delete.d.ts","sourceRoot":"","sources":["../../../../src/controllers/crud/Delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,GAAG,EAAgB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAY,EAAE,EAA8D,MAAM,eAAe,CAAC;AAQzG,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,qBAEa,UAAW,SAAQ,IAAI;IAElC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC;IAGf,WAAW,CAAc,KAAK,EAAE,YAAY,EAAU,GAAG,EAAE,GAAG,EAAE;IAahE,GAAG,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,GAAG;IAatD,mBAAmB,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,GAAG,EAAW,QAAQ,EAAE,MAAM,EAAU,WAAW,EAAE,GAAG,EAAE;IAuB7H,cAAc,CAAc,KAAK,EAAE,YAAY,EAAW,EAAE,EAAE,GAAG,EAAW,QAAQ,EAAE,MAAM,EAAW,UAAU,EAAE,MAAM;IAwBzH,iBAAiB,CAAc,KAAK,EAAE,YAAY,EAAiC,EAAE,EAAE,GAAG,EAAW,QAAQ,EAAE,MAAM;CAoBnI"}