@steedos/objectql 2.1.54 → 2.1.58

package/src/types/object.ts

@@ -15,7 +15,10 @@ import { brokeEmitEvents } from "./object_events";
 import { translationObject } from "@steedos/i18n";
 import { getObjectLayouts } from "./object_layouts";
 import { sortBy, forEach } from 'lodash';
-declare var Creator: any;
+import { ShareRules } from './shareRule';
+import { RestrictionRule } from './restrictionRule';
+import { FieldPermission } from './field_permission';
+
 const clone = require('clone')
 
 // 主子表有层级限制，超过3层就报错，该函数判断当前对象作为主表对象往下的层级最多不越过3层，
@@ -366,11 +369,14 @@ export class SteedosObjectType extends SteedosObjectProperties {
 
         for (const trigger of triggers) {
             let params = generateActionParams(when, context); //参考sf
-            try {
-                await this._schema.metadataBroker.call(`${trigger.service.name}.${trigger.metadata.action}`, params)
-            } catch (error) {
-                console.error(error)
-            }
+            await this._schema.metadataBroker.call(`${trigger.service.name}.${trigger.metadata.action}`, params).catch((error)=>{
+                //如果action trigger 下线，则只打印error
+                if(error && _.isObject(error) && error.type === 'SERVICE_NOT_AVAILABLE'){
+                    console.error(`runTriggerActions error`, error)
+                }else{
+                    throw error
+                }
+            })
         }
 
     }
@@ -631,18 +637,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
             disabled_actions: null,
             unreadable_fields: null,
             uneditable_fields: null,
-            unrelated_objects: null
+            unrelated_objects: null,
+            field_permissions: null,
+            // read_filters: [],
+            // edit_filters: []
         }
 
         if (_.isEmpty(roles)) {
             throw new Error('not find user permission');
         }
 
+        const rolesFieldsPermission = await FieldPermission.getObjectFieldsPermissionGroupRole(this.name);
+
         roles.forEach((role) => {
-            let rolePermission = objectRolesPermission[role]
+            let rolePermission = objectRolesPermission[role];
             if (rolePermission) {
+                let roleFieldsPermission = rolesFieldsPermission[role];
                 _.each(userObjectPermission, (v, k) => {
-                    let _v = rolePermission[k]
+                    let _v = rolePermission[k];
+                    if (k === 'field_permissions') {
+                        _v = roleFieldsPermission
+                    }
                     if (_.isBoolean(v)) {
                         if (v === false && _v === true) {
                             userObjectPermission[k] = _v
@@ -651,20 +666,56 @@ export class SteedosObjectType extends SteedosObjectProperties {
                         if(_.isBoolean(_v)){
                             userObjectPermission[k] = _v
                         }
-                    } else if ((_.isArray(v) || _.isNull(v))) {
+                    } else if (['read_filters', 'edit_filters'].indexOf(k) > -1) {
+                        if ('edit_filters' === k) {
+                            if (!_.isEmpty(_v)) {
+                                userObjectPermission['read_filters'].push(_v);
+                            }
+                        }
+                        if (!_.isEmpty(_v)) {
+                            userObjectPermission[k].push(_v);
+                        }
+                    }
+                    else if ((_.isArray(v) || _.isNull(v))) {
                         if (!_.isArray(_v)) {
                             _v = []
                         }
                         if (_.isNull(v)) {
                             userObjectPermission[k] = _v
                         } else {
-                            userObjectPermission[k] = _.intersection(v, _v)
+                            if (k === 'field_permissions') {
+                                userObjectPermission[k] = _.union(v, _v)
+                            } else {
+                                userObjectPermission[k] = _.intersection(v, _v)
+                            }
                         }
                     }
                 })
             }
-        })
+        });
+
+        const field_permissions = {};
+        if (userObjectPermission.field_permissions) {
+            _.each(userObjectPermission.field_permissions, (field_permission) => {
+                const { field, read, edit } = field_permission;
+                if (field_permissions[field]) {
+                    field_permissions[field].edit = field_permissions[field].edit || edit;
+                    if (field_permissions[field].edit) {
+                        field_permissions[field].read = true
+                    } else {
+                        field_permissions[field].read = field_permissions[field].read || read;
+                    }
+                } else {
+                    field_permissions[field] = {
+                        field: field,
+                        read: edit || read,
+                        edit: edit
+                    }
+                }
+            })
+        }
 
+        userObjectPermission.field_permissions = field_permissions;
 
         userObjectPermission.disabled_list_views = userObjectPermission.disabled_list_views || []
         userObjectPermission.disabled_actions = userObjectPermission.disabled_actions || []
@@ -677,7 +728,6 @@ export class SteedosObjectType extends SteedosObjectProperties {
             return Object.assign({}, userObjectPermission, { allowRead: true, viewAllRecords: true, viewCompanyRecords: true })
         }
 
-        Creator.processPermissions(userObjectPermission)
         return userObjectPermission;
     }
 
@@ -1018,6 +1068,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
             })
         }
 
+        // 使用字段级安全性作为限制用户对字段的访问权限的手段；然后使用页面布局主要在选项卡中组织详细信息和编辑页面。这可以减少需要维护的页面布局数量。
+        // 例如，如果字段在页面布局中是必需的，并且在字段级安全性设置中是只读的，则字段级安全性将覆盖页面布局，并且该字段将对用户是只读的。
+        const userObjectFields = objectConfig.fields;
+        _.each(objectConfig.permissions.field_permissions, (field_permission, field) => {
+            const { read, edit } = field_permission;
+            if (read) {
+                userObjectFields[field].omit = true;
+            }
+            if (edit) {
+                userObjectFields[field].omit = false;
+                userObjectFields[field].hidden = false;
+                userObjectFields[field].readonly = false;
+                userObjectFields[field].disabled = false;
+            }
+            if (!read && !edit) {
+                delete userObjectFields[field]
+            }
+        })
+
+        objectConfig.fields = userObjectFields
+
         // TODO object layout 是否需要控制审批记录显示？
         let spaceProcessDefinition = await getObject("process_definition").directFind({ filters: [['space', '=', userSession.spaceId], ['object_name', '=', this.name], ['active', '=', true]] })
         if (spaceProcessDefinition.length > 0) {
@@ -1253,11 +1324,37 @@ export class SteedosObjectType extends SteedosObjectProperties {
         return await this.runTriggerActions(when, context)
     }
 
+    // private async appendRecordPermission(records, userSession) {
+    //     const _ids = _.pluck(records, '_id');
+    //     const objPm = await this.getUserObjectPermission(userSession);
+    //     const permissionFilters = this.getObjectPermissionFilters(objPm, userSession, true);
+    //     if (_.isEmpty(permissionFilters)) {
+    //         return;
+    //     }
+    //     const filters = formatFiltersToODataQuery(['_id', 'in', _ids])
+
+    //     const results = await this.directFind({
+    //         fields: ['_id'],
+    //         filters: `(${filters}) and (${permissionFilters.join(' or ')})`
+    //     });
+    //     const allowEditIds = _.pluck(results, '_id');
+    //     _.each(records, (record) => {
+    //         if (_.include(allowEditIds, record._id)) {
+    //             record.record_permissions = {
+    //                 allowRead: true,
+    //                 allowEdit: true,
+    //                 allowDelete: true,
+    //             }
+    //         }
+    //     })
+
+    // }
+
     private async getTriggerContext(when: string, method: string, args: any[], recordId?: string) {
 
         let userSession = args[args.length - 1]
 
-        let context: SteedosTriggerContextConfig = { userId: userSession ? userSession.userId : undefined, spaceId: userSession ? userSession.spaceId : undefined }
+        let context: SteedosTriggerContextConfig = { objectName: this.name, userId: userSession ? userSession.userId : undefined, spaceId: userSession ? userSession.spaceId : undefined }
 
         if (method === 'find' || method === 'findOne' || method === 'count') {
             context.query = args[args.length - 2]
@@ -1403,7 +1500,16 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 let values = returnValue || {}
                 if (method === 'count') {
                     values = returnValue || 0
-                }
+                } 
+                // else{
+                //     if (userSession) {
+                //         let _records = returnValue
+                //         if (method == 'findOne' && returnValue) {
+                //             _records = [_records]
+                //         }
+                //         await this.appendRecordPermission(_records, userSession);
+                //     }
+                // }
                 Object.assign(afterTriggerContext, { data: { values: values } })
             }
             // console.log("==returnValue==", returnValue);
@@ -1481,6 +1587,33 @@ export class SteedosObjectType extends SteedosObjectProperties {
         }
     }
 
+    // private getObjectPermissionFilters(objectPermission, userSession, isEdit) {
+    //     const objectPermissionFilters = [];
+
+    //     let permissionFiltersKey = 'read_filters';
+    //     if (isEdit) {
+    //         permissionFiltersKey = 'edit_filters';
+    //     }
+
+    //     const globalData = Object.assign({}, userSession, { now: new Date() });
+
+    //     let permissionFilters = objectPermission[permissionFiltersKey];
+
+    //     _.each(permissionFilters, (permissionFilter) => {
+    //         if (_.isString(permissionFilter) && isExpression(permissionFilter.trim())) {
+    //             try {
+    //                 const filters = parseSingleExpression(permissionFilter, {}, "#", globalData);
+    //                 if (filters && !_.isString(filters)) {
+    //                     objectPermissionFilters.push(`(${formatFiltersToODataQuery(filters, userSession)})`)
+    //                 }
+    //             } catch (error) {
+    //                 console.error(`getObjectPermissionFilters error`, permissionFilter, error.message);
+    //             }
+    //         }
+    //     })
+    //     return objectPermissionFilters;
+    // }
+
     /**
      * 把query.filters用formatFiltersToODataQuery转为odata query
      * 主要是为了把userSession中的utcOffset逻辑传入formatFiltersToODataQuery函数处理
@@ -1511,7 +1644,6 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 if (method === 'aggregate' || method === 'aggregatePrefixalPipeline') {
                     query = args[args.length - 3];
                 }
-
                 if (query.filters && !_.isString(query.filters)) {
                     query.filters = formatFiltersToODataQuery(query.filters);
                 }
@@ -1524,7 +1656,7 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     return
                 }
 
-                let spaceFilter, companyFilter, ownerFilter, sharesFilter, clientFilter = query.filters, filters, permissionFilters = [], userFilters = [];
+                let spaceFilter, companyFilter, ownerFilter, sharesFilter, shareRuleFilters, restrictionRuleFilters, clientFilter = query.filters, filters, permissionFilters = [], userFilters = [];
 
                 if (spaceId) {
                     spaceFilter = `(space eq '${spaceId}')`;
@@ -1544,12 +1676,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     ownerFilter = `(owner eq '${userId}')`;
                 }
 
-                if (!objPm.viewAllRecords) {
-                    sharesFilter = getUserObjectSharesFilters(this.name, userSession);
+                shareRuleFilters = await ShareRules.getUserObjectFilters(this.name, userSession);
+
+                if (!_.isEmpty(shareRuleFilters)) {
+                    permissionFilters.push(`(${shareRuleFilters.join(' or ')})`);
                 }
 
+                restrictionRuleFilters = await RestrictionRule.getUserObjectFilters(this.name, userSession);
+
+                if (!_.isEmpty(restrictionRuleFilters)) {
+                    userFilters.push(`(${restrictionRuleFilters.join(' or ')})`);
+                }
+                // objectPermissionFilters = this.getObjectPermissionFilters(objPm, userSession, false);
+
+                // if (!_.isEmpty(objectPermissionFilters)) {
+                //     permissionFilters.push(`(${objectPermissionFilters.join(' or ')})`);
+                // }
+
+                sharesFilter = getUserObjectSharesFilters(this.name, userSession);
+
                 if (!_.isEmpty(companyFilter)) {
-                    permissionFilters.push(`(${companyFilter.join(' or ')})`);
+                    permissionFilters.push(`(${companyFilter.join(' and ')})`);
                 }
 
                 if (ownerFilter) {
@@ -1584,9 +1731,14 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 }
             }
             else if (method === 'update' || method === 'updateOne') {
-                if (!objPm.allowEdit) {
+                const permissionFilters = null; //this.getObjectPermissionFilters(objPm, userSession, true);
+                if (!objPm.allowEdit && _.isEmpty(permissionFilters)) {
                     throw new Error(`no ${method} permission!`);
                 }
+                let objectPermissionEditFilters = '';
+                if (!_.isEmpty(permissionFilters)) {
+                    objectPermissionEditFilters = ` or (${permissionFilters.join(' or ')})`
+                }
                 let id = args[args.length - 3];
                 if (!objPm.modifyAllRecords && objPm.modifyCompanyRecords) {
                     let companyFilters = _.map(userSession.companies, function (comp: any) {
@@ -1594,25 +1746,35 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     }).join(' or ')
                     if (companyFilters) {
                         if (_.isString(id)) {
-                            id = { filters: `(_id eq \'${id}\') and (${companyFilters})` }
+                            id = { filters: `(_id eq \'${id}\') and (${companyFilters}${objectPermissionEditFilters})` }
                         }
                         else if (_.isObject(id)) {
                             if (id.filters && !_.isString(id.filters)) {
                                 id.filters = formatFiltersToODataQuery(id.filters);
                             }
-                            id.filters = id.filters ? `(${id.filters}) and (${companyFilters})` : `(${companyFilters})`;
+                            id.filters = id.filters ? `(${id.filters}) and (${companyFilters}${objectPermissionEditFilters})` : `(${companyFilters}${objectPermissionEditFilters})`;
                         }
                     }
                 }
                 else if (!objPm.modifyAllRecords && !objPm.modifyCompanyRecords && objPm.allowEdit) {
                     if (_.isString(id)) {
-                        id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\')` }
+                        id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\' ${objectPermissionEditFilters})` }
                     }
                     else if (_.isObject(id)) {
                         if (id.filters && !_.isString(id.filters)) {
                             id.filters = formatFiltersToODataQuery(id.filters);
                         }
-                        id.filters = id.filters ? `(${id.filters}) and (owner eq \'${userId}\')` : `(owner eq \'${userId}\')`;
+                        id.filters = id.filters ? `(${id.filters}) and (owner eq \'${userId}\' ${objectPermissionEditFilters})` : `(owner eq \'${userId}\' ${objectPermissionEditFilters})`;
+                    }
+                } else if (objectPermissionEditFilters) {
+                    if (_.isString(id)) {
+                        id = { filters: `(_id eq \'${id}\') and (${objectPermissionEditFilters})` }
+                    }
+                    else if (_.isObject(id)) {
+                        if (id.filters && !_.isString(id.filters)) {
+                            id.filters = formatFiltersToODataQuery(id.filters);
+                        }
+                        id.filters = id.filters ? `(${id.filters}) and (${objectPermissionEditFilters})` : `(${objectPermissionEditFilters})`;
                     }
                 }
                 args[args.length - 3] = id;
@@ -1636,20 +1798,37 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 }
             }
             else if (method === 'delete') {
-                if (!objPm.allowDelete) {
+                const permissionFilters = null; //this.getObjectPermissionFilters(objPm, userSession, true);
+                if (!objPm.allowDelete && _.isEmpty(permissionFilters)) {
                     throw new Error(`no ${method} permission!`);
                 }
+
+                let objectPermissionEditFilters = '';
+                if (!_.isEmpty(permissionFilters)) {
+                    objectPermissionEditFilters = ` or (${permissionFilters.join(' or ')})`
+                }
+
                 let id = args[args.length - 2];
                 if (!objPm.modifyAllRecords && objPm.modifyCompanyRecords) {
                     let companyFilters = _.map(userSession.companies, function (comp: any) {
                         return `(company_id eq '${comp._id}') or (company_ids eq '${comp._id}')`
                     }).join(' or ')
                     if (companyFilters) {
-                        id = { filters: `(_id eq \'${id}\') and (${companyFilters})` };
+                        id = { filters: `(_id eq \'${id}\') and (${companyFilters}${objectPermissionEditFilters})` };
                     }
                 }
                 else if (!objPm.modifyAllRecords && !objPm.modifyCompanyRecords) {
-                    id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\')` };
+                    id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\'${objectPermissionEditFilters})` };
+                } else if (objectPermissionEditFilters) {
+                    if (_.isString(id)) {
+                        id = { filters: `(_id eq \'${id}\') and (${objectPermissionEditFilters})` }
+                    }
+                    else if (_.isObject(id)) {
+                        if (id.filters && !_.isString(id.filters)) {
+                            id.filters = formatFiltersToODataQuery(id.filters);
+                        }
+                        id.filters = id.filters ? `(${id.filters}) and (${objectPermissionEditFilters})` : `(${objectPermissionEditFilters})`;
+                    }
                 }
                 args[args.length - 2] = id;
             }

package/src/types/object_dynamic_load.ts

@@ -3,7 +3,7 @@ import path = require('path')
 import { SteedosObjectTypeConfig, SteedosObjectPermissionTypeConfig, SteedosActionTypeConfig, getDataSource } from '.'
 // import { isMeteor } from '../util'
 import { Dictionary } from '@salesforce/ts-types';
-import { loadObjectFields, loadObjectListViews, loadObjectButtons, loadObjectMethods, loadObjectActions, loadObjectTriggers, addObjectListenerConfig, loadObjectLayouts, getLazyLoadFields, getLazyLoadButtons, loadObjectPermissions, loadSourceProfiles, loadSourcePermissionset, loadObjectValidationRules, loadSourceRoles, loadSourceFlowRoles, loadSourceApprovalProcesses, loadSourceWorkflows, loadStandardProfiles, loadStandardPermissionsets, preloadDBObjectFields, preloadDBObjectButtons, preloadDBApps, preloadDBObjectLayouts, preloadDBTabs } from '../dynamic-load'
+import { loadObjectFields, loadObjectListViews, loadObjectButtons, loadObjectMethods, loadObjectActions, loadObjectTriggers, addObjectListenerConfig, loadObjectLayouts, getLazyLoadFields, getLazyLoadButtons, loadObjectPermissions, loadSourceProfiles, loadSourcePermissionset, loadObjectValidationRules, loadSourceRoles, loadSourceFlowRoles, loadSourceApprovalProcesses, loadSourceWorkflows, loadStandardProfiles, loadStandardPermissionsets, preloadDBObjectFields, preloadDBObjectButtons, preloadDBApps, preloadDBObjectLayouts, preloadDBTabs, preloadDBShareRules, preloadDBRestrictionRules, preloadDBPermissionFields } from '../dynamic-load'
 import { transformListenersToTriggers } from '..';
 import { getSteedosSchema } from './schema';
 
@@ -338,6 +338,9 @@ export const loadStandardMetadata = async (serviceName: string, datasourceApiNam
             await preloadDBObjectLayouts(datasource);
             await preloadDBObjectFields(datasource);
             await preloadDBObjectButtons(datasource);
+            await preloadDBShareRules(datasource);
+            await preloadDBRestrictionRules(datasource);
+            await preloadDBPermissionFields(datasource);
         }
     }
 }

package/src/types/object_permission.ts

@@ -22,6 +22,7 @@ abstract class SteedosObjectPermissionTypeProperties {
     unreadable_fields?: string[]
     uneditable_fields?: string[]
     unrelated_objects?: string[]
+    field_permissions?: any
 }
 
 export interface SteedosObjectPermissionTypeConfig extends SteedosObjectPermissionTypeProperties { }
@@ -71,6 +72,37 @@ export class SteedosObjectPermissionType extends SteedosObjectPermissionTypeProp
             this.allowRead = true;
         }
 
+        if (this.allowRead) {
+            typeof this.allowReadFiles !== "boolean" && (this.allowReadFiles = true);
+            typeof this.viewAllFiles !== "boolean" && (this.viewAllFiles = true);
+        }
+        if (this.allowEdit) {
+            typeof this.allowCreateFiles !== "boolean" && (this.allowCreateFiles = true);
+            typeof this.allowEditFiles !== "boolean" && (this.allowEditFiles = true);
+            typeof this.allowDeleteFiles !== "boolean" && (this.allowDeleteFiles = true);
+        }
+        if (this.modifyAllRecords) {
+            typeof this.modifyAllFiles !== "boolean" && (this.modifyAllFiles = true);
+        }
+        if (this.allowCreateFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.allowEditFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.allowDeleteFiles) {
+            this.allowEditFiles = true;
+            this.allowReadFiles = true;
+        }
+        if (this.viewAllFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.modifyAllFiles) {
+            this.allowReadFiles = true;
+            this.allowEditFiles = true;
+            this.allowDeleteFiles = true;
+            this.viewAllFiles = true;
+        }
         this.object_name = object_name
     }
 

package/src/types/restrictionRule.ts

@@ -0,0 +1,57 @@
+import { registerRestrictionRules } from '../metadata-register/restrictionRules';
+import { getSteedosSchema } from '../types'
+import * as _ from 'lodash'
+import { isExpression, parseSingleExpression } from '../util'
+import { formatFiltersToODataQuery } from "@steedos/filters";
+
+export type SteedosRestrictionRuleConfig = {
+    _id: string,
+    name: string,
+    object_name: string,
+    active: boolean,
+    record_filter: string,
+    entry_criteria: string,
+    description: string
+}
+
+export class RestrictionRule {
+    static async find(objectApiName) {
+        const schema = getSteedosSchema();
+        return await registerRestrictionRules.find(schema.broker, {
+            pattern: `${objectApiName}.*`
+        })
+    }
+    static async getUserObjectFilters(objectApiName, userSession: any) {
+        const rules = await this.find(objectApiName);
+        if (_.isEmpty(rules)) {
+            return;
+        }
+        const rulesFilters = [];
+        const globalData = { now: new Date() };
+        _.each(rules, (rule) => {
+            const { active, entry_criteria, record_filter } = rule.metadata;
+            if (active) {
+                if (_.isString(entry_criteria) && isExpression(entry_criteria.trim())) {
+                    try {
+                        const meetCriteria = parseSingleExpression(entry_criteria, {}, "#", globalData, userSession);
+                        if (_.isBoolean(meetCriteria) && meetCriteria) {
+                            if (_.isString(record_filter) && isExpression(record_filter.trim())) {
+                                try {
+                                    const filters = parseSingleExpression(record_filter, {}, "#", globalData, userSession);
+                                    if (filters && !_.isString(filters)) {
+                                        rulesFilters.push(`(${formatFiltersToODataQuery(filters, userSession)})`)
+                                    }
+                                } catch (error) {
+                                    console.error(`RestrictionRule.getUserObjectFilters record_filter error`, objectApiName, record_filter, error.message);
+                                }
+                            }
+                        }
+                    } catch (error) {
+                        console.error(`RestrictionRule.getUserObjectFilters entry_criteria error`, objectApiName, entry_criteria, error.message);
+                    }
+                }
+            }
+        })
+        return rulesFilters;
+    }
+}

package/src/types/shareRule.ts

@@ -0,0 +1,57 @@
+import { registerShareRules } from '../metadata-register/shareRules';
+import { getSteedosSchema } from '../types'
+import * as _ from 'lodash'
+import { isExpression, parseSingleExpression } from '../util'
+import { formatFiltersToODataQuery } from "@steedos/filters";
+
+export type SteedosShareRuleConfig = {
+    _id: string,
+    name: string,
+    object_name: string,
+    active: boolean,
+    record_filter: string,
+    entry_criteria: string,
+    description: string
+}
+
+export class ShareRules {
+    static async find(objectApiName) {
+        const schema = getSteedosSchema();
+        return await registerShareRules.find(schema.broker, {
+            pattern: `${objectApiName}.*`
+        })
+    }
+    static async getUserObjectFilters(objectApiName, userSession: any) {
+        const rules = await this.find(objectApiName);
+        if (_.isEmpty(rules)) {
+            return;
+        }
+        const rulesFilters = [];
+        const globalData = { now: new Date() };
+        _.each(rules, (rule) => {
+            const { active, entry_criteria, record_filter } = rule.metadata;
+            if (active) {
+                if (_.isString(entry_criteria) && isExpression(entry_criteria.trim())) {
+                    try {
+                        const meetCriteria = parseSingleExpression(entry_criteria, {}, "#", globalData, userSession);
+                        if (_.isBoolean(meetCriteria) && meetCriteria) {
+                            if (_.isString(record_filter) && isExpression(record_filter.trim())) {
+                                try {
+                                    const filters = parseSingleExpression(record_filter, {}, "#", globalData, userSession);
+                                    if (filters && !_.isString(filters)) {
+                                        rulesFilters.push(`(${formatFiltersToODataQuery(filters, userSession)})`)
+                                    }
+                                } catch (error) {
+                                    console.error(`ShareRules.getUserObjectFilters record_filter error`, objectApiName, record_filter, error.message);
+                                }
+                            }
+                        }
+                    } catch (error) {
+                        console.error(`ShareRules.getUserObjectFilters entry_criteria error`, objectApiName, entry_criteria, error.message);
+                    }
+                }
+            }
+        })
+        return rulesFilters;
+    }
+}

package/src/types/trigger.ts

@@ -12,6 +12,7 @@ export type SteedosTriggerContextConfig = {
     previousDoc?: JsonMap,  //仅afterUpdate, afterDelete时存在此属性
     query?: SteedosQueryOptions,
     data?: JsonMap //仅afterFind，afterCount时存在此属性
+    objectName?: string
 }
 
 export type SteedosTriggerTypeConfig = {

package/src/util/field.ts

@@ -71,13 +71,13 @@ export const getFieldsByType = (doc, type: string, dataType?: string) => {
             fields.push({ name: 'formula_blank_value', required: false });
             fields.push({ name: 'summary_object', required: true });
             fields.push({ name: 'summary_type', required: true });
-            fields.push({ name: 'summary_filters', required: true });
+            fields.push({ name: 'summary_filters', required: false });
             if (doc.summary_type != 'count') {
                 fields.push({ name: 'summary_field', required: true });
             }
-            fields.push({ name: 'data_type', required: true });
-            fields.push({ name: 'precision', required: false });
-            fields.push({ name: 'scale', required: false });
+            fields.push({ name: 'data_type', required: false });
+            fields.push({ name: 'precision', required: true });
+            fields.push({ name: 'scale', required: true });
             fields.push({ name: 'filters' });
             fields.push({ name: 'filters.$' });
             fields.push({ name: 'filters.$.field' });

package/src/util/function_expression.ts

@@ -0,0 +1,63 @@
+import * as _ from 'lodash'
+
+const globalTag = '__G_L_O_B_A_L__';
+
+const getParentPath = function (path) {
+    var pathArr;
+    if (typeof path === 'string') {
+        pathArr = path.split('.');
+        if (pathArr.length === 1) {
+            return '#';
+        }
+        pathArr.pop();
+        return pathArr.join('.');
+    }
+    return '#';
+}
+
+const getValueByPath = function (formData, path) {
+    if (path === '#' || !path) {
+        return formData || {};
+    } else if (typeof path === 'string') {
+        return _.get(formData, path);
+    } else {
+        console.error('path has to be a string');
+    }
+};
+
+export const isExpression = function (func) {
+    var pattern, reg1, reg2;
+    if (typeof func !== 'string') {
+        return false;
+    }
+    pattern = /^{{(.+)}}$/;
+    reg1 = /^{{(function.+)}}$/;
+    reg2 = /^{{(.+=>.+)}}$/;
+    if (typeof func === 'string' && func.match(pattern) && !func.match(reg1) && !func.match(reg2)) {
+        return true;
+    }
+    return false;
+};
+
+export const parseSingleExpression = function (func, formData, dataPath, global, userSession = {}) {
+    var error, funcBody, parent, parentPath, str;
+
+    if (formData === void 0) {
+        formData = {};
+    }
+    parentPath = getParentPath(dataPath);
+    parent = getValueByPath(formData, parentPath) || {};
+    if (typeof func === 'string') {
+        funcBody = func.substring(2, func.length - 2);
+        str = `\n  var $user=${JSON.stringify(userSession)};   return ` + funcBody.replace(/\bformData\b/g, JSON.stringify(formData).replace(/\bglobal\b/g, globalTag)).replace(/\bglobal\b/g, JSON.stringify(global)).replace(new RegExp('\\b' + globalTag + '\\b', 'g'), 'global').replace(/rootValue/g, JSON.stringify(parent));
+        try {
+            return Function(str)();
+        } catch (_error) {
+            error = _error;
+            console.log(error, func, dataPath);
+            return func;
+        }
+    } else {
+        return func;
+    }
+};