@strapi/permissions 0.0.0-next.f5107c72369ee86a8ec1b6782f2e890925033ca3 → 0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@strapi/permissions",
3
- "version": "0.0.0-next.f5107c72369ee86a8ec1b6782f2e890925033ca3",
3
+ "version": "0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3",
4
4
  "description": "Strapi's permission layer.",
5
5
  "repository": {
6
6
  "type": "git",
@@ -19,34 +19,38 @@
19
19
  "url": "https://strapi.io"
20
20
  }
21
21
  ],
22
- "files": [
23
- "./dist"
24
- ],
25
22
  "main": "./dist/index.js",
23
+ "module": "./dist/index.mjs",
24
+ "source": "./src/index.ts",
26
25
  "types": "./dist/index.d.ts",
26
+ "files": [
27
+ "./dist/**/!(*.d.ts.map)"
28
+ ],
27
29
  "scripts": {
28
- "build": "run -T tsc",
29
- "build:ts": "run build",
30
- "watch": "run -T tsc -w --preserveWatchOutput",
30
+ "build": "pack-up build",
31
31
  "clean": "run -T rimraf ./dist",
32
+ "lint": "run -T eslint .",
32
33
  "prepublishOnly": "yarn clean && yarn build",
34
+ "test:ts": "run -T tsc --noEmit",
33
35
  "test:unit": "run -T jest",
34
36
  "test:unit:watch": "run -T jest --watch",
35
- "lint": "run -T eslint ."
37
+ "watch": "pack-up watch"
36
38
  },
37
39
  "dependencies": {
38
- "@casl/ability": "5.4.4",
39
- "@strapi/utils": "0.0.0-next.f5107c72369ee86a8ec1b6782f2e890925033ca3",
40
+ "@casl/ability": "6.5.0",
41
+ "@strapi/utils": "0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3",
40
42
  "lodash": "4.17.21",
43
+ "qs": "6.11.1",
41
44
  "sift": "16.0.1"
42
45
  },
43
46
  "devDependencies": {
44
- "eslint-config-custom": "0.0.0-next.f5107c72369ee86a8ec1b6782f2e890925033ca3",
45
- "tsconfig": "0.0.0-next.f5107c72369ee86a8ec1b6782f2e890925033ca3"
47
+ "@strapi/pack-up": "0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3",
48
+ "eslint-config-custom": "0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3",
49
+ "tsconfig": "0.0.0-next.f9f70e25b50f5805e8fa6484dd10a31f9caf54f3"
46
50
  },
47
51
  "engines": {
48
52
  "node": ">=16.0.0 <=20.x.x",
49
53
  "npm": ">=6.0.0"
50
54
  },
51
- "gitHead": "f5107c72369ee86a8ec1b6782f2e890925033ca3"
55
+ "gitHead": "f9f70e25b50f5805e8fa6484dd10a31f9caf54f3"
52
56
  }
@@ -1,29 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- Object.defineProperty(exports, "__esModule", { value: true });
26
- exports.permission = void 0;
27
- const permission = __importStar(require("./permission"));
28
- exports.permission = permission;
29
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/domain/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yDAA2C;AAElC,gCAAU"}
@@ -1,42 +0,0 @@
1
- "use strict";
2
- var __importDefault = (this && this.__importDefault) || function (mod) {
3
- return (mod && mod.__esModule) ? mod : { "default": mod };
4
- };
5
- Object.defineProperty(exports, "__esModule", { value: true });
6
- exports.getProperty = exports.addCondition = exports.sanitizePermissionFields = exports.create = void 0;
7
- const fp_1 = __importDefault(require("lodash/fp"));
8
- const PERMISSION_FIELDS = ['action', 'subject', 'properties', 'conditions'];
9
- const sanitizePermissionFields = fp_1.default.pick(PERMISSION_FIELDS);
10
- exports.sanitizePermissionFields = sanitizePermissionFields;
11
- /**
12
- * Creates a permission with default values for optional properties
13
- */
14
- const getDefaultPermission = () => ({
15
- conditions: [],
16
- properties: {},
17
- subject: null,
18
- });
19
- /**
20
- * Create a new permission based on given attributes
21
- *
22
- * @param {object} attributes
23
- */
24
- const create = fp_1.default.pipe(fp_1.default.pick(PERMISSION_FIELDS), fp_1.default.merge(getDefaultPermission()));
25
- exports.create = create;
26
- /**
27
- * Add a condition to a permission
28
- */
29
- const addCondition = fp_1.default.curry((condition, permission) => {
30
- const { conditions } = permission;
31
- const newConditions = Array.isArray(conditions)
32
- ? fp_1.default.uniq(conditions.concat(condition))
33
- : [condition];
34
- return fp_1.default.set('conditions', newConditions, permission);
35
- });
36
- exports.addCondition = addCondition;
37
- /**
38
- * Gets a property or a part of a property from a permission.
39
- */
40
- const getProperty = fp_1.default.curry((property, permission) => fp_1.default.get(`properties.${property}`, permission));
41
- exports.getProperty = getProperty;
42
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/permission/index.ts"],"names":[],"mappings":";;;;;;AAAA,mDAA0B;AAE1B,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAErF,MAAM,wBAAwB,GAAG,YAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAgD1C,4DAAwB;AAvCzC;;GAEG;AACH,MAAM,oBAAoB,GAAG,GAA8D,EAAE,CAAC,CAAC;IAC7F,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,GAAG,YAAC,CAAC,IAAI,CAAC,YAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,YAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;AAyBzE,wBAAM;AAvBf;;GAEG;AACH,MAAM,YAAY,GAAG,YAAC,CAAC,KAAK,CAAC,CAAC,SAAiB,EAAE,UAAsB,EAAc,EAAE;IACrF,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAElC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7C,CAAC,CAAC,YAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEhB,OAAO,YAAC,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAYwC,oCAAY;AAVvD;;GAEG;AACH,MAAM,WAAW,GAAG,YAAC,CAAC,KAAK,CACzB,CACE,QAAW,EACX,UAAsB,EACO,EAAE,CAAC,YAAC,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,EAAE,UAAU,CAAC,CAC9E,CAAC;AAEuD,kCAAW"}
@@ -1,66 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- Object.defineProperty(exports, "__esModule", { value: true });
26
- exports.caslAbilityBuilder = void 0;
27
- const sift = __importStar(require("sift"));
28
- const ability_1 = require("@casl/ability");
29
- const fp_1 = require("lodash/fp");
30
- const allowedOperations = [
31
- '$or',
32
- '$and',
33
- '$eq',
34
- '$ne',
35
- '$in',
36
- '$nin',
37
- '$lt',
38
- '$lte',
39
- '$gt',
40
- '$gte',
41
- '$exists',
42
- '$elemMatch',
43
- ];
44
- const operations = (0, fp_1.pick)(allowedOperations, sift);
45
- const conditionsMatcher = (conditions) => {
46
- return sift.createQueryTester(conditions, { operations });
47
- };
48
- /**
49
- * Casl Ability Builder.
50
- */
51
- const caslAbilityBuilder = () => {
52
- const { can, build, ...rest } = new ability_1.AbilityBuilder(ability_1.Ability);
53
- return {
54
- can(permission) {
55
- const { action, subject, properties = {}, condition } = permission;
56
- const { fields } = properties;
57
- return can(action, (0, fp_1.isNil)(subject) ? 'all' : subject, fields, (0, fp_1.isObject)(condition) ? condition : undefined);
58
- },
59
- build() {
60
- return build({ conditionsMatcher });
61
- },
62
- ...rest,
63
- };
64
- };
65
- exports.caslAbilityBuilder = caslAbilityBuilder;
66
- //# sourceMappingURL=casl-ability.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"casl-ability.js","sourceRoot":"","sources":["../../../src/engine/abilities/casl-ability.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,2CAAiE;AACjE,kCAAkD;AAgBlD,MAAM,iBAAiB,GAAG;IACxB,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,SAAS;IACT,YAAY;CACJ,CAAC;AAEX,MAAM,UAAU,GAAG,IAAA,SAAI,EAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAEjD,MAAM,iBAAiB,GAAG,CAAC,UAAmB,EAAE,EAAE;IAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF;;GAEG;AACI,MAAM,kBAAkB,GAAG,GAAyB,EAAE;IAC3D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,wBAAc,CAAC,iBAAO,CAAC,CAAC;IAE5D,OAAO;QACL,GAAG,CAAC,UAA0B;YAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;YACnE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAE9B,OAAO,GAAG,CACR,MAAM,EACN,IAAA,UAAK,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAChC,MAAM,EACN,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAC5C,CAAC;QACJ,CAAC;QAED,KAAK;YACH,OAAO,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,GAAG,IAAI;KACR,CAAC;AACJ,CAAC,CAAC;AAtBW,QAAA,kBAAkB,sBAsB7B"}
@@ -1,18 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
- for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
- };
16
- Object.defineProperty(exports, "__esModule", { value: true });
17
- __exportStar(require("./casl-ability"), exports);
18
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/abilities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B"}
@@ -1,100 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- Object.defineProperty(exports, "__esModule", { value: true });
26
- exports.createWillRegisterContext = exports.createBeforeEvaluateContext = exports.createValidateContext = exports.createEngineHooks = void 0;
27
- const fp_1 = require("lodash/fp");
28
- const utils_1 = require("@strapi/utils");
29
- const domain = __importStar(require("../domain"));
30
- /**
31
- * Create a hook map used by the permission Engine
32
- */
33
- const createEngineHooks = () => ({
34
- 'before-format::validate.permission': utils_1.hooks.createAsyncBailHook(),
35
- 'format.permission': utils_1.hooks.createAsyncSeriesWaterfallHook(),
36
- 'after-format::validate.permission': utils_1.hooks.createAsyncBailHook(),
37
- 'before-evaluate.permission': utils_1.hooks.createAsyncSeriesHook(),
38
- 'before-register.permission': utils_1.hooks.createAsyncSeriesHook(),
39
- });
40
- exports.createEngineHooks = createEngineHooks;
41
- /**
42
- * Create a context from a domain {@link Permission} used by the validate hooks
43
- */
44
- const createValidateContext = (permission) => ({
45
- get permission() {
46
- return (0, fp_1.cloneDeep)(permission);
47
- },
48
- });
49
- exports.createValidateContext = createValidateContext;
50
- /**
51
- * Create a context from a domain {@link Permission} used by the before valuate hook
52
- */
53
- const createBeforeEvaluateContext = (permission) => ({
54
- get permission() {
55
- return (0, fp_1.cloneDeep)(permission);
56
- },
57
- addCondition(condition) {
58
- Object.assign(permission, domain.permission.addCondition(condition, permission));
59
- return this;
60
- },
61
- });
62
- exports.createBeforeEvaluateContext = createBeforeEvaluateContext;
63
- /**
64
- * Create a context from a casl Permission & some options
65
- * @param caslPermission
66
- */
67
- const createWillRegisterContext = ({ permission, options }) => ({
68
- ...options,
69
- get permission() {
70
- return (0, fp_1.cloneDeep)(permission);
71
- },
72
- condition: {
73
- and(rawConditionObject) {
74
- if (!permission.condition) {
75
- permission.condition = { $and: [] };
76
- }
77
- if ((0, fp_1.isArray)(permission.condition.$and)) {
78
- permission.condition.$and.push(rawConditionObject);
79
- }
80
- return this;
81
- },
82
- or(rawConditionObject) {
83
- if (!permission.condition) {
84
- permission.condition = { $and: [] };
85
- }
86
- if ((0, fp_1.isArray)(permission.condition.$and)) {
87
- const orClause = permission.condition.$and.find((0, fp_1.has)('$or'));
88
- if (orClause) {
89
- orClause.$or.push(rawConditionObject);
90
- }
91
- else {
92
- permission.condition.$and.push({ $or: [rawConditionObject] });
93
- }
94
- }
95
- return this;
96
- },
97
- },
98
- });
99
- exports.createWillRegisterContext = createWillRegisterContext;
100
- //# sourceMappingURL=hooks.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/engine/hooks.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kCAAoD;AACpD,yCAAsC;AAEtC,kDAAoC;AAcpC;;GAEG;AACH,MAAM,iBAAiB,GAAG,GAA0B,EAAE,CAAC,CAAC;IACtD,oCAAoC,EAAE,aAAK,CAAC,mBAAmB,EAAE;IACjE,mBAAmB,EAAE,aAAK,CAAC,8BAA8B,EAAE;IAC3D,mCAAmC,EAAE,aAAK,CAAC,mBAAmB,EAAE;IAChE,4BAA4B,EAAE,aAAK,CAAC,qBAAqB,EAAE;IAC3D,4BAA4B,EAAE,aAAK,CAAC,qBAAqB,EAAE;CAC5D,CAAC,CAAC;AA4ED,8CAAiB;AA1EnB;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC;AAoED,sDAAqB;AAlEvB;;GAEG;AACH,MAAM,2BAA2B,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAEjF,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAsDD,kEAA2B;AA/C7B;;;GAGG;AACH,MAAM,yBAAyB,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAA6B,EAAE,EAAE,CAAC,CAAC;IACzF,GAAG,OAAO;IAEV,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS,EAAE;QACT,GAAG,CAAC,kBAA2B;YAC7B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;gBACzB,UAAU,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACrC;YAED,IAAI,IAAA,YAAO,EAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACtC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;aACpD;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,EAAE,CAAC,kBAA2B;YAC5B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;gBACzB,UAAU,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACrC;YAED,IAAI,IAAA,YAAO,EAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,QAAG,EAAC,KAAK,CAAC,CAAC,CAAC;gBAE5D,IAAI,QAAQ,EAAE;oBACZ,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;iBACvC;qBAAM;oBACL,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;iBAC/D;aACF;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC,CAAC;AAMD,8DAAyB"}
@@ -1,140 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- var __importDefault = (this && this.__importDefault) || function (mod) {
26
- return (mod && mod.__esModule) ? mod : { "default": mod };
27
- };
28
- Object.defineProperty(exports, "__esModule", { value: true });
29
- exports.new = exports.abilities = void 0;
30
- const fp_1 = __importDefault(require("lodash/fp"));
31
- const hooks_1 = require("./hooks");
32
- const abilities = __importStar(require("./abilities"));
33
- exports.abilities = abilities;
34
- /**
35
- * Create a default state object for the engine
36
- */
37
- const createEngineState = () => {
38
- const hooks = (0, hooks_1.createEngineHooks)();
39
- return { hooks };
40
- };
41
- const newEngine = (params) => {
42
- const { providers, abilityBuilderFactory = abilities.caslAbilityBuilder } = params;
43
- const state = createEngineState();
44
- const runValidationHook = async (hook, context) => state.hooks[hook].call(context);
45
- /**
46
- * Evaluate a permission using local and registered behaviors (using hooks).
47
- * Validate, format (add condition, etc...), evaluate (evaluate conditions) and register a permission
48
- */
49
- const evaluate = async (params) => {
50
- const { options, register } = params;
51
- const preFormatValidation = await runValidationHook('before-format::validate.permission', (0, hooks_1.createBeforeEvaluateContext)(params.permission));
52
- if (preFormatValidation === false) {
53
- return;
54
- }
55
- const permission = (await state.hooks['format.permission'].call(params.permission));
56
- const afterFormatValidation = await runValidationHook('after-format::validate.permission', (0, hooks_1.createValidateContext)(permission));
57
- if (afterFormatValidation === false) {
58
- return;
59
- }
60
- await state.hooks['before-evaluate.permission'].call((0, hooks_1.createBeforeEvaluateContext)(permission));
61
- const { action, subject, properties, conditions = [] } = permission;
62
- if (conditions.length === 0) {
63
- return register({ action, subject, properties });
64
- }
65
- const resolveConditions = fp_1.default.map(providers.condition.get);
66
- const removeInvalidConditions = fp_1.default.filter((condition) => fp_1.default.isFunction(condition.handler));
67
- const evaluateConditions = (conditions) => {
68
- return Promise.all(conditions.map(async (condition) => ({
69
- condition,
70
- result: await condition.handler(fp_1.default.merge(options, { permission: fp_1.default.cloneDeep(permission) })),
71
- })));
72
- };
73
- const removeInvalidResults = fp_1.default.filter(({ result }) => fp_1.default.isBoolean(result) || fp_1.default.isObject(result));
74
- const evaluatedConditions = await Promise.resolve(conditions)
75
- .then(resolveConditions)
76
- .then(removeInvalidConditions)
77
- .then(evaluateConditions)
78
- .then(removeInvalidResults);
79
- const resultPropEq = fp_1.default.propEq('result');
80
- const pickResults = fp_1.default.map(fp_1.default.prop('result'));
81
- if (evaluatedConditions.every(resultPropEq(false))) {
82
- return;
83
- }
84
- if (fp_1.default.isEmpty(evaluatedConditions) || evaluatedConditions.some(resultPropEq(true))) {
85
- return register({ action, subject, properties });
86
- }
87
- const results = pickResults(evaluatedConditions).filter(fp_1.default.isObject);
88
- if (fp_1.default.isEmpty(results)) {
89
- return register({ action, subject, properties });
90
- }
91
- return register({
92
- action,
93
- subject,
94
- properties,
95
- condition: { $and: [{ $or: results }] },
96
- });
97
- };
98
- return {
99
- get hooks() {
100
- return state.hooks;
101
- },
102
- /**
103
- * Create a register function that wraps a `can` function
104
- * used to register a permission in the ability builder
105
- */
106
- createRegisterFunction(can, options) {
107
- return async (permission) => {
108
- const hookContext = (0, hooks_1.createWillRegisterContext)({ options, permission });
109
- await state.hooks['before-register.permission'].call(hookContext);
110
- return can(permission);
111
- };
112
- },
113
- /**
114
- * Register a new handler for a given hook
115
- */
116
- on(hook, handler) {
117
- const validHooks = Object.keys(state.hooks);
118
- const isValidHook = validHooks.includes(hook);
119
- if (!isValidHook) {
120
- throw new Error(`Invalid hook supplied when trying to register an handler to the permission engine. Got "${hook}" but expected one of ${validHooks.join(', ')}`);
121
- }
122
- state.hooks[hook].register(handler);
123
- return this;
124
- },
125
- /**
126
- * Generate an ability based on the instance's
127
- * ability builder and the given permissions
128
- */
129
- async generateAbility(permissions, options = {}) {
130
- const { can, build } = abilityBuilderFactory();
131
- for (const permission of permissions) {
132
- const register = this.createRegisterFunction(can, options);
133
- await evaluate({ permission, options, register });
134
- }
135
- return build();
136
- },
137
- };
138
- };
139
- exports.new = newEngine;
140
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAA0B;AAI1B,mCAKiB;AAGjB,uDAAyC;AAGhC,8BAAS;AAgClB;;GAEG;AACH,MAAM,iBAAiB,GAAG,GAAG,EAAE;IAC7B,MAAM,KAAK,GAAG,IAAA,yBAAiB,GAAE,CAAC;IAElC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAoB,EAAU,EAAE;IACjD,MAAM,EAAE,SAAS,EAAE,qBAAqB,GAAG,SAAS,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC;IAEnF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAc,EAAE,OAAgB,EAAE,EAAE,CACnE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC;;;OAGG;IACH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAsB,EAAE,EAAE;QAChD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAErC,MAAM,mBAAmB,GAAG,MAAM,iBAAiB,CACjD,oCAAoC,EACpC,IAAA,mCAA2B,EAAC,MAAM,CAAC,UAAU,CAAC,CAC/C,CAAC;QAEF,IAAI,mBAAmB,KAAK,KAAK,EAAE;YACjC,OAAO;SACR;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,UAAU,CAClB,CAAe,CAAC;QAEjB,MAAM,qBAAqB,GAAG,MAAM,iBAAiB,CACnD,mCAAmC,EACnC,IAAA,6BAAqB,EAAC,UAAU,CAAC,CAClC,CAAC;QAEF,IAAI,qBAAqB,KAAK,KAAK,EAAE;YACnC,OAAO;SACR;QAED,MAAM,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAA,mCAA2B,EAAC,UAAU,CAAC,CAAC,CAAC;QAE9F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC;QAEpE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3B,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,MAAM,iBAAiB,GAAG,YAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,uBAAuB,GAAG,YAAC,CAAC,MAAM,CAAC,CAAC,SAAoB,EAAE,EAAE,CAChE,YAAC,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAChC,CAAC;QAEF,MAAM,kBAAkB,GAAG,CAAC,UAAuB,EAAE,EAAE;YACrD,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBACnC,SAAS;gBACT,MAAM,EAAE,MAAM,SAAS,CAAC,OAAO,CAC7B,YAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAC,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC1D;aACF,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,oBAAoB,GAAG,YAAC,CAAC,MAAM,CACnC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,YAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC1D,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;aAC1D,IAAI,CAAC,iBAAiB,CAAC;aACvB,IAAI,CAAC,uBAAuB,CAAC;aAC7B,IAAI,CAAC,kBAAkB,CAAC;aACxB,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAE9B,MAAM,YAAY,GAAG,YAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,YAAC,CAAC,GAAG,CAAC,YAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5C,IAAI,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE;YAClD,OAAO;SACR;QAED,IAAI,YAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE;YAClF,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,YAAC,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,YAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACtB,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,OAAO,QAAQ,CAAC;YACd,MAAM;YACN,OAAO;YACP,UAAU;YACV,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED;;;WAGG;QACH,sBAAsB,CAAC,GAAG,EAAE,OAAgC;YAC1D,OAAO,KAAK,EAAE,UAAoC,EAAE,EAAE;gBACpD,MAAM,WAAW,GAAG,IAAA,iCAAyB,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;gBAEvE,MAAM,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAElE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;YACzB,CAAC,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,EAAE,CAAC,IAAI,EAAE,OAAO;YACd,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,CAAC,WAAW,EAAE;gBAChB,MAAM,IAAI,KAAK,CACb,2FAA2F,IAAI,yBAAyB,UAAU,CAAC,IAAI,CACrI,IAAI,CACL,EAAE,CACJ,CAAC;aACH;YAED,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,UAAmC,EAAE;YACtE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,qBAAqB,EAAE,CAAC;YAE/C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAE3D,MAAM,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;aACnD;YAED,OAAO,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEoB,wBAAG"}