@steedos/standard-permission 2.2.55-beta.16

package/main/default/client/permission_set.client.js

@@ -0,0 +1,38 @@
+Steedos.PermissionSetManager = {};
+
+Steedos.PermissionSetManager.changeSchema = function(doc, schema){
+    var objectSchema = Creator.getObjectSchema(Creator.getObject("permission_set"));
+
+    var hiddenField = function(fieldName){
+        schema._schema[fieldName].autoform.omit = true;
+        schema._schema[fieldName].autoform.type = 'hidden';
+        schema._schema[fieldName].optional = true;
+    }
+
+    if(doc.type == 'profile'){
+        hiddenField('users');
+        schema._schema.license = objectSchema.license;
+        schema._schema.license.optional = false;
+        schema._schema.password_history = objectSchema.password_history;
+        schema._schema.max_login_attempts = objectSchema.max_login_attempts;
+        schema._schema.lockout_interval = objectSchema.lockout_interval;
+        schema._schema.enable_MFA = objectSchema.enable_MFA;
+        schema._schema.logout_other_clients = objectSchema.logout_other_clients;
+        schema._schema.login_expiration_in_days = objectSchema.login_expiration_in_days;
+        schema._schema.phone_logout_other_clients = objectSchema.phone_logout_other_clients;
+        schema._schema.phone_login_expiration_in_days = objectSchema.phone_login_expiration_in_days;
+    }else{
+        hiddenField('password_history');
+        hiddenField('max_login_attempts');
+        hiddenField('lockout_interval');
+        hiddenField('enable_MFA');
+        hiddenField('logout_other_clients');
+        hiddenField('login_expiration_in_days');
+        hiddenField('phone_logout_other_clients');
+        hiddenField('phone_login_expiration_in_days');
+        schema._schema.license.optional = true;
+        schema._schema.license.defaultValue = null;
+        schema._schema.license.autoform.defaultValue = null;
+        schema._schema.users = objectSchema.users;
+    }
+}

package/main/default/objectTranslations/permission_objects.en/permission_objects.en.objectTranslation.yml

@@ -0,0 +1,108 @@
+name: permission_objects
+label: Permission
+description: 
+fields:
+  name:
+    label: Name
+    help: 
+    description: 
+  permission_set_id:
+    label: Permission Set
+    help: 
+    description: 
+  object_name:
+    label: Object
+    help: 
+    description: 
+  allowRead:
+    label: Allow Read
+    help: 
+    description: 
+  allowCreate:
+    label: Allow Create
+    help: 
+    description: 
+  allowEdit:
+    label: Allow Edit
+    help: 
+    description: 
+  allowDelete:
+    label: Allow Delete
+    help: 
+    description: 
+  viewAllRecords:
+    label: View All Records
+    help: 
+    description: 
+  modifyAllRecords:
+    label: Modify All Records
+    help: 
+    description: 
+  viewCompanyRecords:
+    label: View Division's Records
+    help: 
+    description: 
+  modifyCompanyRecords:
+    label: Modify Division's Records
+    help: 
+    description: 
+  allowReadFiles:
+    label: Allow Read Files
+    help: 
+    description: 
+  allowCreateFiles:
+    label: Allow Create Files
+    help: 
+    description: 
+  allowEditFiles:
+    label: Allow Edit Files
+    help: 
+    description: 
+  allowDeleteFiles:
+    label: Allow Delete Files
+    help: 
+    description: 
+  viewAllFiles:
+    label: View All Files
+    help: 
+    description: 
+  modifyAllFiles:
+    label: Modify All Files
+    help: 
+    description: 
+  disabled_list_views:
+    label: Disabled ListViews
+    help: 
+    description: 
+  disabled_actions:
+    label: Disabled Actions
+    help: 
+    description: 
+  unreadable_fields:
+    label: Unreadable Fields
+    help: 
+    description: 
+  uneditable_fields:
+    label: Uneditable Fields
+    help: 
+    description: 
+  unrelated_objects:
+    label: Unrelated Objects
+    help: 
+    description: 
+  is_system:
+    label: 系统
+    help: 
+    description: 
+groups:
+  files_permissions: Files permissions
+listviews:
+  customize:
+    label: Customize
+  system:
+    label: System
+  all:
+    label: All
+actions:
+  customize:
+    label: Customize

package/main/default/objectTranslations/permission_objects.zh-CN/permission_objects.zh-CN.objectTranslation.yml

@@ -0,0 +1,108 @@
+name: permission_objects
+label: 对象权限
+description: 
+fields:
+  name:
+    label: 名称
+    help: 
+    description: 
+  permission_set_id:
+    label: 权限集
+    help: 
+    description: 
+  object_name:
+    label: 对象
+    help: 
+    description: 
+  allowRead:
+    label: 允许查看
+    help: 
+    description: 
+  allowCreate:
+    label: 允许创建
+    help: 
+    description: 
+  allowEdit:
+    label: 允许编辑
+    help: 
+    description: 
+  allowDelete:
+    label: 允许删除
+    help: 
+    description: 
+  viewAllRecords:
+    label: 查看所有记录
+    help: 
+    description: 
+  modifyAllRecords:
+    label: 修改所有记录
+    help: 
+    description: 
+  viewCompanyRecords:
+    label: 查看本分部
+    help: 
+    description: 
+  modifyCompanyRecords:
+    label: 修改本分部
+    help: 
+    description: 
+  allowReadFiles:
+    label: 允许查看附件
+    help: 
+    description: 
+  allowCreateFiles:
+    label: 允许创建附件
+    help: 
+    description: 
+  allowEditFiles:
+    label: 允许修改附件
+    help: 
+    description: 
+  allowDeleteFiles:
+    label: 允许删除附件
+    help: 
+    description: 
+  viewAllFiles:
+    label: 查看所有附件
+    help: 
+    description: 
+  modifyAllFiles:
+    label: 修改所有附件
+    help: 
+    description: 
+  disabled_list_views:
+    label: 禁用列表视图
+    help: 
+    description: 
+  disabled_actions:
+    label: 禁用操作
+    help: 
+    description: 
+  unreadable_fields:
+    label: 不可见字段
+    help: 
+    description: 
+  uneditable_fields:
+    label: 不可编辑字段
+    help: 
+    description: 
+  unrelated_objects:
+    label: 禁用关联对象
+    help: 
+    description: 
+  is_system:
+    label: 系统
+    help: 
+    description: 
+groups:
+  files_permissions: 附件权限
+listviews:
+  customize:
+    label: 自定义
+  system:
+    label: 系统
+  all:
+    label: 全部
+actions:
+  customize:
+    label: 自定义

package/main/default/objectTranslations/permission_set.en/permission_set.en.objectTranslation.yml

@@ -0,0 +1,87 @@
+name: permission_set
+label: Permission Set
+description: 
+fields:
+  name:
+    label: Name
+    help: 
+    description: 
+  label:
+    label: Label
+    help: 
+    description: 
+  type:
+    label: Type
+    help: 
+    options:
+      - label: Profile
+        value: profile
+      - label: Permission set
+        value: permission_set
+    description: 
+  license:
+    label: License
+    help: 
+    description: 
+  assigned_apps:
+    label: Assigned Apps
+    help: 
+    description: 
+  users:
+    label: Users
+    help: 'When the type is a profile, no user needs to be selected'
+    description: 
+  is_system:
+    label: System
+    help: 
+    description: 
+  password_history:
+    label: 强制密码历史
+    help: 
+    description: 
+  max_login_attempts:
+    label: 最大无效登录尝试次数
+    help: 
+    options:
+      - label: '3'
+        value: '3'
+      - label: '5'
+        value: '5'
+      - label: '10'
+        value: '10'
+      - label: 无限制
+        value: '0'
+    description: 
+  lockout_interval:
+    label: 锁定有效期间
+    help: 
+    options:
+      - label: 15 分钟
+        value: '15'
+      - label: 30 分钟
+        value: '30'
+      - label: 60 分钟
+        value: '60'
+      - label: 始终(必须由管理员重置)
+        value: '0'
+    description: 
+groups:
+  profile_password_policy: profile password policy
+listviews:
+  all:
+    label: All
+  permission_set:
+    label: Permission Set
+  profile:
+    label: Profile
+actions:
+  customize:
+    label: Customize
+CustomLabels:
+  permission_set_admin: Admin
+  permission_set_user: User
+  permission_set_supplier: Supplier
+  permission_set_customer: Customer
+  permission_set_field_license_options_platform: 
+  permission_set_field_license_options_community: 
+  permission_set_field_password_history_options: 

package/main/default/objectTranslations/permission_set.zh-CN/permission_set.zh-CN.objectTranslation.yml

@@ -0,0 +1,87 @@
+name: permission_set
+label: 权限集
+description: 
+fields:
+  name:
+    label: API名称
+    help: 
+    description: 
+  label:
+    label: 显示名称
+    help: 
+    description: 
+  type:
+    label: 类别
+    help: 
+    options:
+      - label: 简档
+        value: profile
+      - label: 权限集
+        value: permission_set
+    description: 
+  license:
+    label: 许可证
+    help: 
+    description: 
+  assigned_apps:
+    label: 授权应用
+    help: 
+    description: 
+  users:
+    label: 成员
+    help: 类别为简档时，不需要选择成员
+    description: 
+  is_system:
+    label: 系统
+    help: 
+    description: 
+  password_history:
+    label: 强制密码历史
+    help: 
+    description: 
+  max_login_attempts:
+    label: 最大无效登录尝试次数
+    help: 
+    options:
+      - label: '3'
+        value: '3'
+      - label: '5'
+        value: '5'
+      - label: '10'
+        value: '10'
+      - label: 无限制
+        value: '0'
+    description: 
+  lockout_interval:
+    label: 锁定有效期间
+    help: 
+    options:
+      - label: 15 分钟
+        value: '15'
+      - label: 30 分钟
+        value: '30'
+      - label: 60 分钟
+        value: '60'
+      - label: 始终(必须由管理员重置)
+        value: '0'
+    description: 
+groups:
+  profile_password_policy: 密码策略
+listviews:
+  all:
+    label: 全部
+  permission_set:
+    label: 权限集
+  profile:
+    label: 简档
+actions:
+  customize:
+    label: 自定义
+CustomLabels:
+  permission_set_admin: 管理员
+  permission_set_user: 用户
+  permission_set_supplier: 供应商
+  permission_set_customer: 客户
+  permission_set_field_license_options_platform: 华炎魔方
+  permission_set_field_license_options_community: 华炎社区
+  permission_set_field_password_history_options: 记住 %s 个密码

package/main/default/objectTranslations/permission_shares.en/permission_shares.en.objectTranslation.yml

@@ -0,0 +1,27 @@
+name: permission_shares
+label: Permission Share
+description: 
+fields:
+  name:
+    label: Name
+    help: 
+    description: 
+  object_name:
+    label: Object
+    help: 
+    description: 
+  filters:
+    label: Filters
+    help: Format of OData Filters Required.
+    description: 
+  organizations:
+    label: Departments
+    help: 
+    description: 
+  users:
+    label: Users
+    help: 
+    description: 
+listviews:
+  all:
+    label: All

package/main/default/objectTranslations/permission_shares.zh-CN/permission_shares.zh-CN.objectTranslation.yml

@@ -0,0 +1,27 @@
+name: permission_shares
+label: 共享规则
+description: 
+fields:
+  name:
+    label: 名称
+    help: 
+    description: 
+  object_name:
+    label: 对象
+    help: 
+    description: 
+  filters:
+    label: 过滤条件
+    help: 格式为odata filters
+    description: 
+  organizations:
+    label: 授权组织
+    help: 
+    description: 
+  users:
+    label: 授权用户
+    help: 
+    description: 
+listviews:
+  all:
+    label: 全部

package/main/default/objects/permission_fields.object.yml

@@ -0,0 +1,184 @@
+name: permission_fields
+label: 字段权限
+icon: omni_supervisor
+version: 2
+enable_inline_edit: false
+hidden: true
+fields:
+  name:
+    label: Api 名称
+    type: text
+    readonly: true
+    sort_no: 100
+  permission_set_id:
+    label: 权限集
+    type: lookup
+    reference_to: permission_set
+    index: true
+    name: permission_set_id
+    filterable: true
+    reference_to_field: name
+    readonly: true
+    sort_no: 110
+  permission_object:
+    label: 对象权限
+    type: master_detail
+    required: true
+    reference_to: permission_objects
+    index: true
+    name: permission_object
+    reference_to_field: name
+    filterable: true
+    hidden: false
+    readonly: true
+    sort_no: 120
+  object_name:
+    readonly: true
+    label: 对象
+    type: lookup
+    reference_to: objects
+    write_requires_master_read: true
+    reference_to_field: name
+    index: true
+    required: true
+    create: false
+    sort_no: 130
+    optionsFunction: !<tag:yaml.org,2002:js/function> |-
+      function () {
+              var _options;
+
+              _options = [];
+
+              _.forEach(Creator.objectsByName, function (o, k) {
+                if (!o.hidden) {
+                  return _options.push({
+                    label: o.label,
+                    value: k,
+                    icon: o.icon
+                  });
+                }
+              });
+
+              return _options;
+            }
+    name: object_name
+    filterable: true
+  field:
+    readonly: true
+    type: lookup
+    label: 字段
+    reference_to: object_fields
+    reference_to_field: name
+    sort_no: 140
+    depend_on:
+      - object_name
+    defaultIcon: service_contract
+    filtersFunction: !<tag:yaml.org,2002:js/function> |-
+      function (filters, values) {
+        if(values && values.object_name){
+          if(values._grid_row_id){
+            var selected = _.find(values.fields, function(item){return item._id==values._grid_row_id});
+            var selectedAll = _.pluck(values.fields, 'field_name');
+            if(selected){
+              selectedAll = _.difference(selectedAll, [selected.field_name]);
+            }
+            if(selectedAll && selectedAll.length > 0){
+              return [['object', '=', values.object_name], ['name', '!=', selectedAll]]
+            }
+          }
+          return ['object', '=', values.object_name]
+        }else{
+          return ['_id', '=', 'no']
+        }
+      }
+  readable:
+    type: boolean
+    label: 允许查看
+    sort_no: 150
+  editable:
+    label: 允许编辑
+    type: boolean
+    sort_no: 160
+  is_system:
+    type: boolean
+    label: 系统
+    # omit: true
+    readonly: true
+    visible_on: "{{global.mode ==='read' ? true : false}}"
+    disabled: true
+    sort_no: 170
+paging:
+  enabled: false
+actions:
+  standard_new:
+    label: standard_new
+    visible: !!js/function |
+      function(){
+        return false;
+      }
+list_views:
+  customize:
+    columns:
+      - permission_set_id
+      - field
+      - readable
+      - editable
+      - is_system
+    label: Customize
+    filters:
+      - ["is_system","<>",true]
+    filter_scope: space
+  system:
+    columns:
+      - permission_set_id
+      - field
+      - readable
+      - editable
+      - is_system
+    label: System
+    filters:
+      - ["is_system","=",true]
+    filter_scope: space
+  all:
+    label: All
+    columns:
+      - permission_set_id
+      - field
+      - readable
+      - editable
+      - is_system
+    filter_scope: space
+form:
+  onValuesChange: !!js/function |
+    function(props){
+      const { changedValues, values, form } = props;
+      const readonlyFields = ['created', 'created_by', 'modified', 'modified_by'];
+      if(changedValues.editable){
+        if(window._.include(readonlyFields, values.field)){
+          return setTimeout(function(){
+            form.setFieldsValue({editable: false})
+          }, 50)
+        }
+        form.setFieldsValue({readable: true});
+      }
+      
+      if(_.has(changedValues, 'readable') && !changedValues.readable && values.editable){
+        form.setFieldsValue({editable: false})
+      }
+    }
+
+permission_set:
+  user:
+    allowCreate: false
+    allowDelete: false
+    allowEdit: false
+    allowRead: false
+    modifyAllRecords: false
+    viewAllRecords: false
+  admin:
+    allowCreate: false
+    allowDelete: true
+    allowEdit: true
+    allowRead: true
+    modifyAllRecords: true
+    viewAllRecords: true