@steedos/objectql 2.1.55 → 2.1.59

package/src/formula/simple_params.ts

@@ -0,0 +1,92 @@
+import { SteedosFormulaBlankValue } from './type';
+import { FormulonDataType } from './params';
+
+const VALUE_TYPES_NOT_SUPPORTED = ["function"];
+
+function getSubstitutionDataType(value: any){
+    const valueType = typeof value;
+    let dateType: FormulonDataType;
+    if(VALUE_TYPES_NOT_SUPPORTED.indexOf(dateType) > -1){
+        throw new Error(`runFormula:Catch an error the param type "${valueType}" is not supported while eval formula with the params value: "${value}"`);
+    }
+    switch (valueType) {
+        case 'string':
+            dateType = FormulonDataType.Text;
+            break;
+        case 'number':
+            dateType = FormulonDataType.Number;
+            break;
+        case 'boolean':
+            dateType = FormulonDataType.Checkbox;
+            break;
+        case 'object':
+            if(value === null){
+                dateType = FormulonDataType.Null;
+            }
+            else if (value instanceof Date){
+                dateType = FormulonDataType.Datetime;
+            }
+            else{
+                throw new Error(`runFormula:Catch an error the param type "${valueType}" is not supported while eval formula with the params value: "${value}"`);
+            }
+            break;
+        case 'undefined':
+            dateType = FormulonDataType.Null;
+            break;
+        default:
+            break;
+    }
+    return dateType;
+}
+
+function getSubstitutionOptions(dataType: string, value: any){
+    switch (dataType) {
+        case FormulonDataType.Number:
+            let scale = 0;
+            let str = value.toString();
+            let dotStr = str.toString().split(".")[1];
+            let dotCount = dotStr && dotStr.length;
+            if(dotCount > 0){
+                scale = dotCount;
+            }
+            return { scale };
+        case FormulonDataType.Text:
+            return {length: Number.MAX_VALUE};
+        default:
+            return ;
+    }
+}
+
+function getSubstitutionValue(dataType: string, value: any, blankValue: SteedosFormulaBlankValue){
+    switch (dataType) {
+        case FormulonDataType.Text:
+            if(value === null || value === undefined){
+                return '';
+            }
+            break;
+        case FormulonDataType.Number:
+            if(value === null || value === undefined){
+                if(blankValue === SteedosFormulaBlankValue.blanks){
+                    return null;
+                }
+                else{
+                    return 0;
+                }
+            }
+            break;
+        default:
+            break;
+    }
+    return value;
+}
+
+export function getSimpleParamSubstitution(value: any, blankValue: SteedosFormulaBlankValue){
+    let fieldSubstitution: any = {
+        type: 'literal',
+        value: value
+    }
+    fieldSubstitution.dataType = getSubstitutionDataType(value);
+    fieldSubstitution.options = getSubstitutionOptions(fieldSubstitution.dataType, value);
+    fieldSubstitution.value  = getSubstitutionValue(fieldSubstitution.dataType, value, blankValue);
+    return fieldSubstitution;
+}

package/src/formula/type.ts

@@ -44,7 +44,7 @@ export type SteedosFormulaVarPathTypeConfig = {
  */
 export type SteedosFormulaParamTypeConfig = {
     key: string,
-    path: any,
+    path?: any,
     value: any
 }
 
@@ -62,8 +62,9 @@ export type SteedosFormulaParamTypeConfig = {
  */
 export type SteedosFormulaVarTypeConfig = {
     key: string,
-    paths: Array<SteedosFormulaVarPathTypeConfig>,
-    is_user_var?: boolean
+    paths?: Array<SteedosFormulaVarPathTypeConfig>,
+    is_user_var?: boolean,
+    is_simple_var?: boolean //当不传入objectApiName时变量上设置该属性表示一个普通的变量，此时paths为空
 }
 
 export type SteedosFieldFormulaTypeConfig = {

package/src/index.ts

@@ -10,4 +10,7 @@ export * from "./dynamic-load"
 export * from './metadata-register/query'
 export * from './metadata-register/chart'
 export * from './metadata-register/page'
-export * from './metadata-register/tab'
+export * from './metadata-register/tab'
+export * from './metadata-register/shareRules'
+export * from './metadata-register/restrictionRules'
+export * from './metadata-register/permissionFields'

package/src/metadata-register/_base.ts

@@ -1,3 +1,5 @@
+import { JsonMap } from "@salesforce/ts-types"
+import * as _ from 'lodash';
 const clone = require('clone');
 export class RegisterBase{
     serviceName;
@@ -5,9 +7,14 @@ export class RegisterBase{
         this.serviceName = serviceName;
     }
 
+    getApiName(metadata) {
+        return metadata._id || metadata.name;
+    }
+
     async register(broker, packageServiceName, config){
         const metadata = clone(config);
-        const res = await broker.call(`${this.serviceName}.add`, {apiName: metadata._id || metadata.name ,data: metadata}, {meta: {
+        const res = await broker.call(`${this.serviceName}.add`, { apiName: this.getApiName(metadata), data: metadata }, {
+            meta: {
             metadataServiceName: packageServiceName,
             caller: {
                 nodeID: broker.nodeID,
@@ -19,8 +26,12 @@ export class RegisterBase{
         return res;
     }
 
-    async remove(broker, metadataApiName){
-        const res = await broker.call(`${this.serviceName}.delete`, {fullName: metadataApiName});
+    async remove(broker, metadataApiNameOrConfig: string | JsonMap) {
+        let metadataApiName = metadataApiNameOrConfig;
+        if (_.isObject(metadataApiName)) {
+            metadataApiName = this.getApiName(metadataApiNameOrConfig);
+        }
+        const res = await broker.call(`${this.serviceName}.delete`, { fullName: metadataApiName, metadataApiName: metadataApiName });
         return res;
     }
 

package/src/metadata-register/permissionFields.ts

@@ -0,0 +1,13 @@
+import { RegisterBase } from "./_base";
+const SERVICE_NAME = 'permission_fields';
+class RegisterPermissionFields extends RegisterBase {
+    constructor() {
+        super(SERVICE_NAME);
+    }
+
+    getApiName(config) {
+        return `${config.name}`
+    }
+}
+
+export const registerPermissionFields = new RegisterPermissionFields();

package/src/metadata-register/restrictionRules.ts

@@ -0,0 +1,12 @@
+import { RegisterBase } from "./_base";
+const SERVICE_NAME = 'restriction_rules';
+class RegisterRestrictionRules extends RegisterBase {
+    constructor() {
+        super(SERVICE_NAME);
+    }
+
+    getApiName(config) {
+        return `${config.object_name}.${config.name}`
+    }
+}
+export const registerRestrictionRules = new RegisterRestrictionRules();

package/src/metadata-register/shareRules.ts

@@ -0,0 +1,13 @@
+import { RegisterBase } from "./_base";
+const SERVICE_NAME = 'share_rules';
+class RegisterShareRules extends RegisterBase {
+    constructor() {
+        super(SERVICE_NAME);
+    }
+
+    getApiName(config) {
+        return `${config.object_name}.${config.name}`
+    }
+}
+
+export const registerShareRules = new RegisterShareRules();

package/src/types/field_permission.ts

@@ -0,0 +1,26 @@
+import { registerPermissionFields } from '../metadata-register/permissionFields';
+import { getSteedosSchema } from '../types'
+import * as _ from 'lodash'
+
+export class FieldPermission {
+
+    static async getObjectFieldsPermission(objectApiName, permissionSetApiName) {
+        const schema = getSteedosSchema();
+        return await registerPermissionFields.find(schema.broker, {
+            pattern: `${permissionSetApiName}.${objectApiName}.*`
+        })
+    }
+
+    static async getObjectFieldsPermissionGroupRole(objectApiName) {
+        const permissions = await this.getObjectFieldsPermission(objectApiName, '*');
+        const result = {};
+        _.each(permissions, (permission) => {
+            const { permission_set_id, field, editable, readable } = permission.metadata;
+            if (!result[permission_set_id]) {
+                result[permission_set_id] = [];
+            }
+            result[permission_set_id].push({ field: field, read: readable, edit: editable })
+        })
+        return result;
+    }
+}

package/src/types/object.ts

@@ -15,7 +15,10 @@ import { brokeEmitEvents } from "./object_events";
 import { translationObject } from "@steedos/i18n";
 import { getObjectLayouts } from "./object_layouts";
 import { sortBy, forEach } from 'lodash';
-declare var Creator: any;
+import { ShareRules } from './shareRule';
+import { RestrictionRule } from './restrictionRule';
+import { FieldPermission } from './field_permission';
+
 const clone = require('clone')
 
 // 主子表有层级限制，超过3层就报错，该函数判断当前对象作为主表对象往下的层级最多不越过3层，
@@ -634,18 +637,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
             disabled_actions: null,
             unreadable_fields: null,
             uneditable_fields: null,
-            unrelated_objects: null
+            unrelated_objects: null,
+            field_permissions: null,
+            // read_filters: [],
+            // edit_filters: []
         }
 
         if (_.isEmpty(roles)) {
             throw new Error('not find user permission');
         }
 
+        const rolesFieldsPermission = await FieldPermission.getObjectFieldsPermissionGroupRole(this.name);
+
         roles.forEach((role) => {
-            let rolePermission = objectRolesPermission[role]
+            let rolePermission = objectRolesPermission[role];
             if (rolePermission) {
+                let roleFieldsPermission = rolesFieldsPermission[role];
                 _.each(userObjectPermission, (v, k) => {
-                    let _v = rolePermission[k]
+                    let _v = rolePermission[k];
+                    if (k === 'field_permissions') {
+                        _v = roleFieldsPermission
+                    }
                     if (_.isBoolean(v)) {
                         if (v === false && _v === true) {
                             userObjectPermission[k] = _v
@@ -654,20 +666,56 @@ export class SteedosObjectType extends SteedosObjectProperties {
                         if(_.isBoolean(_v)){
                             userObjectPermission[k] = _v
                         }
-                    } else if ((_.isArray(v) || _.isNull(v))) {
+                    } else if (['read_filters', 'edit_filters'].indexOf(k) > -1) {
+                        if ('edit_filters' === k) {
+                            if (!_.isEmpty(_v)) {
+                                userObjectPermission['read_filters'].push(_v);
+                            }
+                        }
+                        if (!_.isEmpty(_v)) {
+                            userObjectPermission[k].push(_v);
+                        }
+                    }
+                    else if ((_.isArray(v) || _.isNull(v))) {
                         if (!_.isArray(_v)) {
                             _v = []
                         }
                         if (_.isNull(v)) {
                             userObjectPermission[k] = _v
                         } else {
-                            userObjectPermission[k] = _.intersection(v, _v)
+                            if (k === 'field_permissions') {
+                                userObjectPermission[k] = _.union(v, _v)
+                            } else {
+                                userObjectPermission[k] = _.intersection(v, _v)
+                            }
                         }
                     }
                 })
             }
-        })
+        });
+
+        const field_permissions = {};
+        if (userObjectPermission.field_permissions) {
+            _.each(userObjectPermission.field_permissions, (field_permission) => {
+                const { field, read, edit } = field_permission;
+                if (field_permissions[field]) {
+                    field_permissions[field].edit = field_permissions[field].edit || edit;
+                    if (field_permissions[field].edit) {
+                        field_permissions[field].read = true
+                    } else {
+                        field_permissions[field].read = field_permissions[field].read || read;
+                    }
+                } else {
+                    field_permissions[field] = {
+                        field: field,
+                        read: edit || read,
+                        edit: edit
+                    }
+                }
+            })
+        }
 
+        userObjectPermission.field_permissions = field_permissions;
 
         userObjectPermission.disabled_list_views = userObjectPermission.disabled_list_views || []
         userObjectPermission.disabled_actions = userObjectPermission.disabled_actions || []
@@ -680,7 +728,6 @@ export class SteedosObjectType extends SteedosObjectProperties {
             return Object.assign({}, userObjectPermission, { allowRead: true, viewAllRecords: true, viewCompanyRecords: true })
         }
 
-        Creator.processPermissions(userObjectPermission)
         return userObjectPermission;
     }
 
@@ -1021,6 +1068,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
             })
         }
 
+        // 使用字段级安全性作为限制用户对字段的访问权限的手段；然后使用页面布局主要在选项卡中组织详细信息和编辑页面。这可以减少需要维护的页面布局数量。
+        // 例如，如果字段在页面布局中是必需的，并且在字段级安全性设置中是只读的，则字段级安全性将覆盖页面布局，并且该字段将对用户是只读的。
+        const userObjectFields = objectConfig.fields;
+        _.each(objectConfig.permissions.field_permissions, (field_permission, field) => {
+            const { read, edit } = field_permission;
+            if (read) {
+                userObjectFields[field].omit = true;
+            }
+            if (edit) {
+                userObjectFields[field].omit = false;
+                userObjectFields[field].hidden = false;
+                userObjectFields[field].readonly = false;
+                userObjectFields[field].disabled = false;
+            }
+            if (!read && !edit) {
+                delete userObjectFields[field]
+            }
+        })
+
+        objectConfig.fields = userObjectFields
+
         // TODO object layout 是否需要控制审批记录显示？
         let spaceProcessDefinition = await getObject("process_definition").directFind({ filters: [['space', '=', userSession.spaceId], ['object_name', '=', this.name], ['active', '=', true]] })
         if (spaceProcessDefinition.length > 0) {
@@ -1256,6 +1324,32 @@ export class SteedosObjectType extends SteedosObjectProperties {
         return await this.runTriggerActions(when, context)
     }
 
+    // private async appendRecordPermission(records, userSession) {
+    //     const _ids = _.pluck(records, '_id');
+    //     const objPm = await this.getUserObjectPermission(userSession);
+    //     const permissionFilters = this.getObjectPermissionFilters(objPm, userSession, true);
+    //     if (_.isEmpty(permissionFilters)) {
+    //         return;
+    //     }
+    //     const filters = formatFiltersToODataQuery(['_id', 'in', _ids])
+
+    //     const results = await this.directFind({
+    //         fields: ['_id'],
+    //         filters: `(${filters}) and (${permissionFilters.join(' or ')})`
+    //     });
+    //     const allowEditIds = _.pluck(results, '_id');
+    //     _.each(records, (record) => {
+    //         if (_.include(allowEditIds, record._id)) {
+    //             record.record_permissions = {
+    //                 allowRead: true,
+    //                 allowEdit: true,
+    //                 allowDelete: true,
+    //             }
+    //         }
+    //     })
+
+    // }
+
     private async getTriggerContext(when: string, method: string, args: any[], recordId?: string) {
 
         let userSession = args[args.length - 1]
@@ -1406,7 +1500,16 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 let values = returnValue || {}
                 if (method === 'count') {
                     values = returnValue || 0
-                }
+                } 
+                // else{
+                //     if (userSession) {
+                //         let _records = returnValue
+                //         if (method == 'findOne' && returnValue) {
+                //             _records = [_records]
+                //         }
+                //         await this.appendRecordPermission(_records, userSession);
+                //     }
+                // }
                 Object.assign(afterTriggerContext, { data: { values: values } })
             }
             // console.log("==returnValue==", returnValue);
@@ -1484,6 +1587,33 @@ export class SteedosObjectType extends SteedosObjectProperties {
         }
     }
 
+    // private getObjectPermissionFilters(objectPermission, userSession, isEdit) {
+    //     const objectPermissionFilters = [];
+
+    //     let permissionFiltersKey = 'read_filters';
+    //     if (isEdit) {
+    //         permissionFiltersKey = 'edit_filters';
+    //     }
+
+    //     const globalData = Object.assign({}, userSession, { now: new Date() });
+
+    //     let permissionFilters = objectPermission[permissionFiltersKey];
+
+    //     _.each(permissionFilters, (permissionFilter) => {
+    //         if (_.isString(permissionFilter) && isExpression(permissionFilter.trim())) {
+    //             try {
+    //                 const filters = parseSingleExpression(permissionFilter, {}, "#", globalData);
+    //                 if (filters && !_.isString(filters)) {
+    //                     objectPermissionFilters.push(`(${formatFiltersToODataQuery(filters, userSession)})`)
+    //                 }
+    //             } catch (error) {
+    //                 console.error(`getObjectPermissionFilters error`, permissionFilter, error.message);
+    //             }
+    //         }
+    //     })
+    //     return objectPermissionFilters;
+    // }
+
     /**
      * 把query.filters用formatFiltersToODataQuery转为odata query
      * 主要是为了把userSession中的utcOffset逻辑传入formatFiltersToODataQuery函数处理
@@ -1514,7 +1644,6 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 if (method === 'aggregate' || method === 'aggregatePrefixalPipeline') {
                     query = args[args.length - 3];
                 }
-
                 if (query.filters && !_.isString(query.filters)) {
                     query.filters = formatFiltersToODataQuery(query.filters);
                 }
@@ -1527,7 +1656,7 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     return
                 }
 
-                let spaceFilter, companyFilter, ownerFilter, sharesFilter, clientFilter = query.filters, filters, permissionFilters = [], userFilters = [];
+                let spaceFilter, companyFilter, ownerFilter, sharesFilter, shareRuleFilters, restrictionRuleFilters, clientFilter = query.filters, filters, permissionFilters = [], userFilters = [];
 
                 if (spaceId) {
                     spaceFilter = `(space eq '${spaceId}')`;
@@ -1547,12 +1676,27 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     ownerFilter = `(owner eq '${userId}')`;
                 }
 
-                if (!objPm.viewAllRecords) {
-                    sharesFilter = getUserObjectSharesFilters(this.name, userSession);
+                shareRuleFilters = await ShareRules.getUserObjectFilters(this.name, userSession);
+
+                if (!_.isEmpty(shareRuleFilters)) {
+                    permissionFilters.push(`(${shareRuleFilters.join(' or ')})`);
+                }
+
+                restrictionRuleFilters = await RestrictionRule.getUserObjectFilters(this.name, userSession);
+
+                if (!_.isEmpty(restrictionRuleFilters)) {
+                    userFilters.push(`(${restrictionRuleFilters.join(' or ')})`);
                 }
+                // objectPermissionFilters = this.getObjectPermissionFilters(objPm, userSession, false);
+
+                // if (!_.isEmpty(objectPermissionFilters)) {
+                //     permissionFilters.push(`(${objectPermissionFilters.join(' or ')})`);
+                // }
+
+                sharesFilter = getUserObjectSharesFilters(this.name, userSession);
 
                 if (!_.isEmpty(companyFilter)) {
-                    permissionFilters.push(`(${companyFilter.join(' or ')})`);
+                    permissionFilters.push(`(${companyFilter.join(' and ')})`);
                 }
 
                 if (ownerFilter) {
@@ -1587,9 +1731,14 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 }
             }
             else if (method === 'update' || method === 'updateOne') {
-                if (!objPm.allowEdit) {
+                const permissionFilters = null; //this.getObjectPermissionFilters(objPm, userSession, true);
+                if (!objPm.allowEdit && _.isEmpty(permissionFilters)) {
                     throw new Error(`no ${method} permission!`);
                 }
+                let objectPermissionEditFilters = '';
+                if (!_.isEmpty(permissionFilters)) {
+                    objectPermissionEditFilters = ` or (${permissionFilters.join(' or ')})`
+                }
                 let id = args[args.length - 3];
                 if (!objPm.modifyAllRecords && objPm.modifyCompanyRecords) {
                     let companyFilters = _.map(userSession.companies, function (comp: any) {
@@ -1597,25 +1746,35 @@ export class SteedosObjectType extends SteedosObjectProperties {
                     }).join(' or ')
                     if (companyFilters) {
                         if (_.isString(id)) {
-                            id = { filters: `(_id eq \'${id}\') and (${companyFilters})` }
+                            id = { filters: `(_id eq \'${id}\') and (${companyFilters}${objectPermissionEditFilters})` }
                         }
                         else if (_.isObject(id)) {
                             if (id.filters && !_.isString(id.filters)) {
                                 id.filters = formatFiltersToODataQuery(id.filters);
                             }
-                            id.filters = id.filters ? `(${id.filters}) and (${companyFilters})` : `(${companyFilters})`;
+                            id.filters = id.filters ? `(${id.filters}) and (${companyFilters}${objectPermissionEditFilters})` : `(${companyFilters}${objectPermissionEditFilters})`;
                         }
                     }
                 }
                 else if (!objPm.modifyAllRecords && !objPm.modifyCompanyRecords && objPm.allowEdit) {
                     if (_.isString(id)) {
-                        id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\')` }
+                        id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\' ${objectPermissionEditFilters})` }
                     }
                     else if (_.isObject(id)) {
                         if (id.filters && !_.isString(id.filters)) {
                             id.filters = formatFiltersToODataQuery(id.filters);
                         }
-                        id.filters = id.filters ? `(${id.filters}) and (owner eq \'${userId}\')` : `(owner eq \'${userId}\')`;
+                        id.filters = id.filters ? `(${id.filters}) and (owner eq \'${userId}\' ${objectPermissionEditFilters})` : `(owner eq \'${userId}\' ${objectPermissionEditFilters})`;
+                    }
+                } else if (objectPermissionEditFilters) {
+                    if (_.isString(id)) {
+                        id = { filters: `(_id eq \'${id}\') and (${objectPermissionEditFilters})` }
+                    }
+                    else if (_.isObject(id)) {
+                        if (id.filters && !_.isString(id.filters)) {
+                            id.filters = formatFiltersToODataQuery(id.filters);
+                        }
+                        id.filters = id.filters ? `(${id.filters}) and (${objectPermissionEditFilters})` : `(${objectPermissionEditFilters})`;
                     }
                 }
                 args[args.length - 3] = id;
@@ -1639,20 +1798,37 @@ export class SteedosObjectType extends SteedosObjectProperties {
                 }
             }
             else if (method === 'delete') {
-                if (!objPm.allowDelete) {
+                const permissionFilters = null; //this.getObjectPermissionFilters(objPm, userSession, true);
+                if (!objPm.allowDelete && _.isEmpty(permissionFilters)) {
                     throw new Error(`no ${method} permission!`);
                 }
+
+                let objectPermissionEditFilters = '';
+                if (!_.isEmpty(permissionFilters)) {
+                    objectPermissionEditFilters = ` or (${permissionFilters.join(' or ')})`
+                }
+
                 let id = args[args.length - 2];
                 if (!objPm.modifyAllRecords && objPm.modifyCompanyRecords) {
                     let companyFilters = _.map(userSession.companies, function (comp: any) {
                         return `(company_id eq '${comp._id}') or (company_ids eq '${comp._id}')`
                     }).join(' or ')
                     if (companyFilters) {
-                        id = { filters: `(_id eq \'${id}\') and (${companyFilters})` };
+                        id = { filters: `(_id eq \'${id}\') and (${companyFilters}${objectPermissionEditFilters})` };
                     }
                 }
                 else if (!objPm.modifyAllRecords && !objPm.modifyCompanyRecords) {
-                    id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\')` };
+                    id = { filters: `(_id eq \'${id}\') and (owner eq \'${userId}\'${objectPermissionEditFilters})` };
+                } else if (objectPermissionEditFilters) {
+                    if (_.isString(id)) {
+                        id = { filters: `(_id eq \'${id}\') and (${objectPermissionEditFilters})` }
+                    }
+                    else if (_.isObject(id)) {
+                        if (id.filters && !_.isString(id.filters)) {
+                            id.filters = formatFiltersToODataQuery(id.filters);
+                        }
+                        id.filters = id.filters ? `(${id.filters}) and (${objectPermissionEditFilters})` : `(${objectPermissionEditFilters})`;
+                    }
                 }
                 args[args.length - 2] = id;
             }

package/src/types/object_dynamic_load.ts

@@ -3,7 +3,7 @@ import path = require('path')
 import { SteedosObjectTypeConfig, SteedosObjectPermissionTypeConfig, SteedosActionTypeConfig, getDataSource } from '.'
 // import { isMeteor } from '../util'
 import { Dictionary } from '@salesforce/ts-types';
-import { loadObjectFields, loadObjectListViews, loadObjectButtons, loadObjectMethods, loadObjectActions, loadObjectTriggers, addObjectListenerConfig, loadObjectLayouts, getLazyLoadFields, getLazyLoadButtons, loadObjectPermissions, loadSourceProfiles, loadSourcePermissionset, loadObjectValidationRules, loadSourceRoles, loadSourceFlowRoles, loadSourceApprovalProcesses, loadSourceWorkflows, loadStandardProfiles, loadStandardPermissionsets, preloadDBObjectFields, preloadDBObjectButtons, preloadDBApps, preloadDBObjectLayouts, preloadDBTabs } from '../dynamic-load'
+import { loadObjectFields, loadObjectListViews, loadObjectButtons, loadObjectMethods, loadObjectActions, loadObjectTriggers, addObjectListenerConfig, loadObjectLayouts, getLazyLoadFields, getLazyLoadButtons, loadObjectPermissions, loadSourceProfiles, loadSourcePermissionset, loadObjectValidationRules, loadSourceRoles, loadSourceFlowRoles, loadSourceApprovalProcesses, loadSourceWorkflows, loadStandardProfiles, loadStandardPermissionsets, preloadDBObjectFields, preloadDBObjectButtons, preloadDBApps, preloadDBObjectLayouts, preloadDBTabs, preloadDBShareRules, preloadDBRestrictionRules, preloadDBPermissionFields } from '../dynamic-load'
 import { transformListenersToTriggers } from '..';
 import { getSteedosSchema } from './schema';
 
@@ -338,6 +338,9 @@ export const loadStandardMetadata = async (serviceName: string, datasourceApiNam
             await preloadDBObjectLayouts(datasource);
             await preloadDBObjectFields(datasource);
             await preloadDBObjectButtons(datasource);
+            await preloadDBShareRules(datasource);
+            await preloadDBRestrictionRules(datasource);
+            await preloadDBPermissionFields(datasource);
         }
     }
 }

package/src/types/object_permission.ts

@@ -22,6 +22,7 @@ abstract class SteedosObjectPermissionTypeProperties {
     unreadable_fields?: string[]
     uneditable_fields?: string[]
     unrelated_objects?: string[]
+    field_permissions?: any
 }
 
 export interface SteedosObjectPermissionTypeConfig extends SteedosObjectPermissionTypeProperties { }
@@ -71,6 +72,37 @@ export class SteedosObjectPermissionType extends SteedosObjectPermissionTypeProp
             this.allowRead = true;
         }
 
+        if (this.allowRead) {
+            typeof this.allowReadFiles !== "boolean" && (this.allowReadFiles = true);
+            typeof this.viewAllFiles !== "boolean" && (this.viewAllFiles = true);
+        }
+        if (this.allowEdit) {
+            typeof this.allowCreateFiles !== "boolean" && (this.allowCreateFiles = true);
+            typeof this.allowEditFiles !== "boolean" && (this.allowEditFiles = true);
+            typeof this.allowDeleteFiles !== "boolean" && (this.allowDeleteFiles = true);
+        }
+        if (this.modifyAllRecords) {
+            typeof this.modifyAllFiles !== "boolean" && (this.modifyAllFiles = true);
+        }
+        if (this.allowCreateFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.allowEditFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.allowDeleteFiles) {
+            this.allowEditFiles = true;
+            this.allowReadFiles = true;
+        }
+        if (this.viewAllFiles) {
+            this.allowReadFiles = true;
+        }
+        if (this.modifyAllFiles) {
+            this.allowReadFiles = true;
+            this.allowEditFiles = true;
+            this.allowDeleteFiles = true;
+            this.viewAllFiles = true;
+        }
         this.object_name = object_name
     }