@steedos/standard-permission 2.3.0-beta.35 → 2.3.0-beta.36

package/main/default/objectTranslations/permission_tabs.en/permission_tabs.en.objectTranslation.yml

@@ -0,0 +1,30 @@
+name: permission_tabs
+label: Permission Tabs
+description: 
+fields:
+  permission_set_id:
+    label: Permission Set
+    help: 
+    description: 
+  tab:
+    label: Tab
+    help: 
+    description: 
+  permission:
+    label: Permission
+    help: 
+    description: 
+    options:
+      - label: 'On'
+        value: 'on'
+      - label: 'Off'
+        value: 'off'
+      - label: 'Hidden'
+        value: 'hidden'
+  is_system:
+    label: System
+    help: 
+    description: 
+listviews:
+  all:
+    label: All

package/main/default/objectTranslations/permission_tabs.zh-CN/permission_tabs.zh-CN.objectTranslation.yml

@@ -0,0 +1,30 @@
+name: permission_tabs
+label: 选项卡权限
+description: 
+fields:
+  permission_set_id:
+    label: 权限集
+    help: 
+    description: 
+  tab:
+    label: 选项卡
+    help: 
+    description: 
+  permission:
+    label: 权限
+    help: 
+    description: 
+    options:
+      - label: 默认打开
+        value: 'on'
+      - label: 默认关闭
+        value: 'off'
+      - label: 隐藏选项卡
+        value: 'hidden'
+  is_system:
+    label: 系统
+    help: 
+    description: 
+listviews:
+  all:
+    label: 全部

package/main/default/objects/permission_tabs/buttons/customize.button.js

@@ -0,0 +1,30 @@
+/*
+ * @Author: sunhaolin@hotoa.com
+ * @Date: 2022-10-27 14:30:02
+ * @LastEditors: sunhaolin@hotoa.com
+ * @LastEditTime: 2022-10-27 14:46:17
+ * @Description: 
+ */
+module.exports = {
+    customize: function (object_name, record_id, fields) {
+        var doc = Creator.odata.get(object_name, record_id);
+        var newDoc = {}
+        _.each(Creator.getObject(object_name).fields, function (v, k) {
+            if (_.has(doc, k)) {
+                newDoc[k] = doc[k]
+            }
+        })
+        delete newDoc.is_system;
+
+        Creator.odata.insert(object_name, Object.assign(newDoc), function (result, error) {
+            if (result) {
+                SteedosUI.reloadRecord(object_name, result._id);
+                FlowRouter.reload();
+                FlowRouter.go(`/app/-/${object_name}/view/${result._id}`)
+            }
+        });
+    },
+    customizeVisible: function (object_name, record_id, record_permissions, record) {
+        return record && Creator.baseObject.actions.standard_new.visible() && record.is_system;
+    }
+}

package/main/default/objects/permission_tabs/buttons/customize.button.yml

@@ -0,0 +1,4 @@
+name: customize
+is_enable: true
+label: 自定义
+'on': record_only

package/main/default/objects/permission_tabs/fields/is_system.field.yml

@@ -0,0 +1,7 @@
+name: is_system
+type: boolean
+label: 系统
+visible_on: "{{global.mode ==='read' ? true : false}}"
+readonly: true
+disabled: true
+sort_no: 999

package/main/default/objects/permission_tabs/fields/permission.field.yml

@@ -0,0 +1,13 @@
+name: permission
+label: 权限
+type: select
+options:
+  - label: 默认打开
+    value: 'on'
+  - label: 默认关闭
+    value: 'off'
+  - label: 隐藏选项卡
+    value: 'hidden'
+defaultValue: 'on'
+required: true
+index: true

package/main/default/objects/permission_tabs/fields/permission_set.field.yml

@@ -0,0 +1,7 @@
+name: permission_set
+label: 所属权限集
+type: master_detail
+reference_to: permission_set
+reference_to_field: name
+required: true
+index: true

package/main/default/objects/permission_tabs/fields/tab.field.yml

@@ -0,0 +1,7 @@
+name: tab
+label: 选项卡
+type: lookup
+reference_to: tabs
+reference_to_field: name
+required: true
+index: true

package/main/default/objects/permission_tabs/listviews/all.listview.yml

@@ -0,0 +1,14 @@
+name: all
+columns:
+  - field: permission_set
+  - field: tab
+  - field: permission
+  - field: is_system
+filter_scope: space
+filters: []
+label: 所有
+mobile_columns: []
+scrolling_mode: standard
+shared: true
+sort_no: 100
+type: grid

package/main/default/objects/permission_tabs/permission_tabs.object.yml

@@ -0,0 +1,5 @@
+name: permission_tabs
+label: 选项卡权限
+icon: apps
+version: 2
+hidden: true

package/main/default/objects/permission_tabs/permissions/admin.permission.yml

@@ -0,0 +1,14 @@
+name: 选项卡权限.管理员
+allowCreate: true
+allowCreateFiles: true
+allowDelete: true
+allowDeleteFiles: true
+allowEdit: true
+allowEditFiles: true
+allowRead: true
+allowReadFiles: true
+modifyAllFiles: true
+modifyAllRecords: true
+permission_set_id: admin
+viewAllFiles: true
+viewAllRecords: true

package/main/default/objects/permission_tabs/permissions/user.permission.yml

@@ -0,0 +1,14 @@
+name: 选项卡权限.用户
+allowCreate: false
+allowCreateFiles: false
+allowDelete: false
+allowDeleteFiles: false
+allowEdit: false
+allowEditFiles: false
+allowRead: true
+allowReadFiles: true
+modifyAllRecords: false
+permission_set_id: user
+viewAllFiles: true
+viewAllRecords: true
+viewCompanyRecords: true

package/main/default/triggers/permission_tabs_metadata.trigger.js

@@ -0,0 +1,147 @@
+/*
+ * @Author: sunhaolin@hotoa.com
+ * @Date: 2022-10-26 14:14:51
+ * @LastEditors: sunhaolin@hotoa.com
+ * @LastEditTime: 2022-10-27 17:42:29
+ * @Description: 
+ */
+const objectql = require('@steedos/objectql');
+const auth = require('@steedos/auth');
+const _ = require('underscore');
+async function getAll() {
+    const schema = objectql.getSteedosSchema();
+    const configs = await objectql.registerTab.getAll(schema.broker)
+    const dataList = _.pluck(configs, 'metadata');
+    let permissionTabs = [];
+    for (const item of dataList) {
+        if (!item._id) {
+            item._id = `${item.name}`
+        }
+        if (item.permissions) {
+            for (const permissionTab of item.permissions) {
+                permissionTabs.push({
+                    _id: `${permissionTab.permission_set}_${item.name}`,
+                    permission: permissionTab.permission,
+                    permission_set: permissionTab.permission_set,
+                    tab: item.name,
+
+                    is_system: true,
+                    record_permissions: { // 此属性控制记录在前台页面的权限
+                        allowEdit: false,
+                        allowDelete: false,
+                        allowRead: true,
+                    }
+                });
+            }
+        }
+    }
+    return permissionTabs;
+}
+
+/**
+ * 检查同一个权限集下针对同一个选项卡是否重复配置
+ * @param {*} permission_set 
+ * @param {*} tab 
+ * @param {*} action beforeInsert/beforeUpdate
+ * @param {*} id 
+ */
+async function checkMultiple(permission_set, tab, action, id) {
+    if (!permission_set || !tab) return
+
+    const pTabObj = objectql.getObject('permission_tabs')
+    const pTabDocs = await pTabObj.find({
+        filters: [
+            ['permission_set', '=', permission_set],
+            ['tab', '=', tab]
+        ]
+    })
+
+    if (pTabDocs.length > 1) {
+        throw new Error(`权限集/简档 ${permission_set} 下发现选项卡 ${tab} 权限配置了${pTabDocs.length}条，请及时处理。`)
+    }
+
+    if (pTabDocs.length === 1 && (action === 'beforeInsert' || (action === 'beforeUpdate' && pTabDocs[0]._id != id))) {
+        throw new Error(`已在权限集/简档 ${permission_set} 下配置过选项卡 ${tab} 的权限，无需重复配置。`)
+    }
+}
+
+module.exports = {
+    listenTo: 'permission_tabs',
+
+    beforeInsert: async function () {
+        const { doc, id } = this
+        await checkMultiple(doc.permission_set, doc.tab, 'beforeInsert', id)
+    },
+
+    beforeUpdate: async function () {
+        const { doc, getObject, object_name, id } = this
+        const pTabObj = getObject(object_name)
+        const nowDoc = await pTabObj.findOne(id)
+        const newDoc = {
+            ...nowDoc,
+            ...doc
+        }
+        await checkMultiple(newDoc.permission_set, newDoc.tab, 'beforeUpdate', id)
+    },
+
+    beforeFind: async function () {
+        delete this.query.fields;
+    },
+
+    beforeAggregate: async function () {
+        delete this.query.fields;
+    },
+
+    afterFind: async function () {
+        const { spaceId } = this;
+        let dataList = await getAll();
+        if (dataList) {
+            dataList.forEach((doc) => {
+                if (!_.find(this.data.values, (value) => {
+                    return value.permission_set === doc.permission_set && value.tab === doc.tab
+                })) {
+                    this.data.values.push(doc);
+                }
+            })
+            const records = objectql.getSteedosSchema().metadataDriver.find(this.data.values, this.query, spaceId);
+            if (records.length > 0) {
+                this.data.values = records;
+            } else {
+                this.data.values.length = 0;
+            }
+        }
+    },
+    afterAggregate: async function () {
+        const { spaceId } = this;
+        let dataList = await getAll();
+        if (dataList) {
+            dataList.forEach((doc) => {
+                if (!_.find(this.data.values, (value) => {
+                    return value.permission_set === doc.permission_set && value.tab === doc.tab
+                })) {
+                    this.data.values.push(doc);
+                };
+            })
+            const records = objectql.getSteedosSchema().metadataDriver.find(this.data.values, this.query, spaceId);
+            if (records.length > 0) {
+                this.data.values = records;
+            } else {
+                this.data.values.length = 0;
+            }
+        }
+    },
+    afterCount: async function () {
+        delete this.query.fields;
+        let result = await objectql.getObject(this.object_name).find(this.query, await auth.getSessionByUserId(this.userId, this.spaceId))
+        this.data.values = result.length;
+    },
+    afterFindOne: async function () {
+        if (_.isEmpty(this.data.values)) {
+            const all = await getAll();
+            const id = this.id;
+            this.data.values = _.find(all, function (item) {
+                return item._id === id
+            });
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@steedos/standard-permission",
-    "version": "2.3.0-beta.35",
+    "version": "2.3.0-beta.36",
     "main": "package.service.js",
     "private": false,
     "publishConfig": {
@@ -12,5 +12,5 @@
     "description": "steedos package",
     "repository": {},
     "license": "MIT",
-    "gitHead": "a5fb79aafcd152165f41d981c8d1ce97d7f4c205"
+    "gitHead": "1fef67d04c0796a7453dbea7f8101514f155235f"
 }