@stoker-platform/utils 0.5.77 → 0.5.79

package/lib/src/schema/getIndexFields.js

@@ -5,6 +5,7 @@ import { getAccessFields } from "./getAccessFields.js";
 import { getDependencyFields } from "./getDependencyFields.js";
 import { roleHasOperationAccess } from "../access/roleHasOperationAccess.js";
 import { isRelationField } from "./isRelationField.js";
+import { fieldRoleProjectionAccess, getFieldAccessGroupFields } from "../access/fieldAccess.js";
 export const getRoleFields = (collection, role) => {
     const indexFields = [];
     const { fields, roleSystemFields, preloadCache, queries } = collection;
@@ -15,7 +16,7 @@ export const getRoleFields = (collection, role) => {
         required: true,
     });
     fields.forEach((field) => {
-        if (!field.access || field.access.includes(role)) {
+        if (fieldRoleProjectionAccess(field, role)) {
             indexFields.push(field);
         }
     });
@@ -35,7 +36,7 @@ export const getRoleFields = (collection, role) => {
         const queryField = getField(fields.concat(systemFieldsSchema), query.field);
         if ((!query.roles || query.roles.includes(role)) &&
             queryField &&
-            (!queryField.access || queryField.access?.includes(role)) &&
+            fieldRoleProjectionAccess(queryField, role) &&
             systemFields.includes(query.field)) {
             indexFields.push(getField(systemFieldsSchema, query.field));
         }
@@ -52,16 +53,6 @@ export const getDependencyAccessFields = (field, collection, schema) => {
     const indexFields = [];
     const { fields, preloadCache } = collection;
     const systemFieldsSchema = getSystemFieldsSchema();
-    if (preloadCache?.range) {
-        preloadCache.range.fields.forEach((field) => {
-            if (systemFields.includes(field)) {
-                indexFields.push(getField(systemFieldsSchema, field));
-            }
-            else {
-                indexFields.push(getField(fields, field));
-            }
-        });
-    }
     const dependentRoles = new Set();
     const dependentFields = getDependencyFields(collection, schema);
     Object.entries(dependentFields).map(([fieldName, collectionValues]) => {
@@ -76,6 +67,16 @@ export const getDependencyAccessFields = (field, collection, schema) => {
     dependentRoles.forEach((role) => {
         indexFields.push(...getAccessFields(collection, role));
     });
+    if (preloadCache?.range) {
+        preloadCache.range.fields.forEach((field) => {
+            if (systemFields.includes(field)) {
+                indexFields.push(getField(systemFieldsSchema, field));
+            }
+            else if (Array.from(dependentRoles).some((role) => fieldRoleProjectionAccess(getField(fields, field), role))) {
+                indexFields.push(getField(fields, field));
+            }
+        });
+    }
     return [...new Set(indexFields)];
 };
 export const getDependencyIndexFields = (field, collection, schema) => {
@@ -121,6 +122,71 @@ export const getDependencyIndexFields = (field, collection, schema) => {
     indexFields.push(...getDependencyAccessFields(field, collection, schema));
     return [...new Set(indexFields)];
 };
+export const getFieldAccessGroupRoles = (groupKey, collection, roleGroup) => {
+    // eslint-disable-next-line security/detect-object-injection
+    const applicableRoles = collection.fieldAccessGroups?.[groupKey]?.applicableRoles || [];
+    return roleGroup.roles.filter((role) => applicableRoles.includes(role));
+};
+export const getFieldAccessGroupKey = (groupKey, roleGroupKey) => {
+    return `${groupKey}-${roleGroupKey}`;
+};
+export const getFieldAccessGroupIndexFields = (groupKey, collection, roleGroup) => {
+    // eslint-disable-next-line security/detect-object-injection
+    if (!collection.fieldAccessGroups?.[groupKey])
+        return [];
+    const overlayRoles = getFieldAccessGroupRoles(groupKey, collection, roleGroup);
+    if (overlayRoles.length === 0)
+        return [];
+    const indexFields = [];
+    const { fields, softDelete, preloadCache, roleSystemFields, queries } = collection;
+    const systemFieldsSchema = getSystemFieldsSchema();
+    indexFields.push({
+        name: "Collection_Path",
+        type: "Array",
+        required: true,
+    });
+    indexFields.push({
+        name: "id",
+        type: "String",
+        required: true,
+    });
+    // eslint-disable-next-line security/detect-object-injection
+    const groupFields = getFieldAccessGroupFields(collection)[groupKey] || [];
+    indexFields.push(...groupFields);
+    if (softDelete) {
+        const softDeleteField = getField(fields, softDelete.archivedField);
+        if (softDeleteField && !groupFields.includes(softDeleteField)) {
+            indexFields.push(softDeleteField);
+        }
+    }
+    if (preloadCache?.range) {
+        preloadCache.range.fields.forEach((field) => {
+            if (systemFields.includes(field)) {
+                indexFields.push(getField(systemFieldsSchema, field));
+            }
+            else if (overlayRoles.some((role) => fieldRoleProjectionAccess(getField(fields, field), role))) {
+                indexFields.push(getField(fields, field));
+            }
+        });
+    }
+    roleSystemFields
+        ?.filter((systemField) => systemField.field !== "Collection_Path" &&
+        overlayRoles.some((role) => !systemField.roles || systemField.roles.includes(role)))
+        .forEach((systemField) => {
+        indexFields.push(getField(systemFieldsSchema, systemField.field));
+    });
+    queries?.forEach((query) => {
+        const queryField = getField(fields.concat(systemFieldsSchema), query.field);
+        if (queryField &&
+            overlayRoles.some((role) => (!query.roles || query.roles.includes(role)) && fieldRoleProjectionAccess(queryField, role))) {
+            indexFields.push(queryField);
+        }
+    });
+    for (const role of overlayRoles) {
+        indexFields.push(...getAccessFields(collection, role));
+    }
+    return [...new Set(indexFields)];
+};
 export const getRoleGroups = (collection, schema) => {
     const { preloadCache } = collection;
     const roleGroups = new Set();
@@ -194,7 +260,7 @@ export const getAllRoleGroups = (schema, permissions, collections) => {
         roleGroupsArray.map((roleGroup) => {
             roleGroup.fields.forEach((field) => {
                 // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-                if (permissions && field.access && !field.access?.includes(permissions.Role)) {
+                if (permissions && field.access && !fieldRoleProjectionAccess(field, permissions.Role)) {
                     roleGroup.fields = roleGroup.fields.filter((groupField) => groupField.name !== field.name);
                 }
             });