@strapi/permissions 4.14.3 → 4.14.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@strapi/permissions",
3
- "version": "4.14.3",
3
+ "version": "4.14.4",
4
4
  "description": "Strapi's permission layer.",
5
5
  "repository": {
6
6
  "type": "git",
@@ -19,35 +19,38 @@
19
19
  "url": "https://strapi.io"
20
20
  }
21
21
  ],
22
+ "main": "./dist/index.js",
23
+ "module": "./dist/index.mjs",
24
+ "source": "./src/index.ts",
25
+ "types": "./dist/index.d.ts",
22
26
  "files": [
23
27
  "./dist"
24
28
  ],
25
- "main": "./dist/index.js",
26
- "types": "./dist/index.d.ts",
27
29
  "scripts": {
28
- "build": "run -T tsc",
29
- "build:ts": "run build",
30
- "watch": "run -T tsc -w --preserveWatchOutput",
30
+ "build": "pack-up build",
31
31
  "clean": "run -T rimraf ./dist",
32
+ "lint": "run -T eslint .",
32
33
  "prepublishOnly": "yarn clean && yarn build",
34
+ "test:ts": "run -T tsc --noEmit",
33
35
  "test:unit": "run -T jest",
34
36
  "test:unit:watch": "run -T jest --watch",
35
- "lint": "run -T eslint ."
37
+ "watch": "pack-up watch"
36
38
  },
37
39
  "dependencies": {
38
40
  "@casl/ability": "6.5.0",
39
- "@strapi/utils": "4.14.3",
41
+ "@strapi/utils": "4.14.4",
40
42
  "lodash": "4.17.21",
41
43
  "qs": "6.11.1",
42
44
  "sift": "16.0.1"
43
45
  },
44
46
  "devDependencies": {
45
- "eslint-config-custom": "4.14.3",
46
- "tsconfig": "4.14.3"
47
+ "@strapi/pack-up": "4.14.4",
48
+ "eslint-config-custom": "4.14.4",
49
+ "tsconfig": "4.14.4"
47
50
  },
48
51
  "engines": {
49
52
  "node": ">=16.0.0 <=20.x.x",
50
53
  "npm": ">=6.0.0"
51
54
  },
52
- "gitHead": "f509e0b15d77e2475bdc1ada1b26dd0ba2b1dbca"
55
+ "gitHead": "fbd6e3e3014b1c5eee1d7bb8d65e273318662656"
53
56
  }
@@ -1,29 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- Object.defineProperty(exports, "__esModule", { value: true });
26
- exports.permission = void 0;
27
- const permission = __importStar(require("./permission"));
28
- exports.permission = permission;
29
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/domain/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yDAA2C;AAElC,gCAAU"}
@@ -1,42 +0,0 @@
1
- "use strict";
2
- var __importDefault = (this && this.__importDefault) || function (mod) {
3
- return (mod && mod.__esModule) ? mod : { "default": mod };
4
- };
5
- Object.defineProperty(exports, "__esModule", { value: true });
6
- exports.getProperty = exports.addCondition = exports.sanitizePermissionFields = exports.create = void 0;
7
- const fp_1 = __importDefault(require("lodash/fp"));
8
- const PERMISSION_FIELDS = ['action', 'subject', 'properties', 'conditions'];
9
- const sanitizePermissionFields = fp_1.default.pick(PERMISSION_FIELDS);
10
- exports.sanitizePermissionFields = sanitizePermissionFields;
11
- /**
12
- * Creates a permission with default values for optional properties
13
- */
14
- const getDefaultPermission = () => ({
15
- conditions: [],
16
- properties: {},
17
- subject: null,
18
- });
19
- /**
20
- * Create a new permission based on given attributes
21
- *
22
- * @param {object} attributes
23
- */
24
- const create = fp_1.default.pipe(fp_1.default.pick(PERMISSION_FIELDS), fp_1.default.merge(getDefaultPermission()));
25
- exports.create = create;
26
- /**
27
- * Add a condition to a permission
28
- */
29
- const addCondition = fp_1.default.curry((condition, permission) => {
30
- const { conditions } = permission;
31
- const newConditions = Array.isArray(conditions)
32
- ? fp_1.default.uniq(conditions.concat(condition))
33
- : [condition];
34
- return fp_1.default.set('conditions', newConditions, permission);
35
- });
36
- exports.addCondition = addCondition;
37
- /**
38
- * Gets a property or a part of a property from a permission.
39
- */
40
- const getProperty = fp_1.default.curry((property, permission) => fp_1.default.get(`properties.${property}`, permission));
41
- exports.getProperty = getProperty;
42
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/permission/index.ts"],"names":[],"mappings":";;;;;;AAAA,mDAA0B;AAE1B,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAErF,MAAM,wBAAwB,GAAG,YAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAiD1C,4DAAwB;AAvCzC;;GAEG;AACH,MAAM,oBAAoB,GAAG,GAA8D,EAAE,CAAC,CAAC;IAC7F,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,GAAG,YAAC,CAAC,IAAI,CAAC,YAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,YAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;AAyBzE,wBAAM;AAvBf;;GAEG;AACH,MAAM,YAAY,GAAG,YAAC,CAAC,KAAK,CAAC,CAAC,SAAiB,EAAE,UAAsB,EAAc,EAAE;IACrF,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAElC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7C,CAAC,CAAC,YAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEhB,OAAO,YAAC,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAYwC,oCAAY;AAVvD;;GAEG;AACH,MAAM,WAAW,GAAG,YAAC,CAAC,KAAK,CACzB,CACE,QAAW,EACX,UAAsB,EACO,EAAE,CAAC,YAAC,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,EAAE,UAAU,CAAC,CAC9E,CAAC;AAEuD,kCAAW"}
@@ -1,87 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- var __importDefault = (this && this.__importDefault) || function (mod) {
26
- return (mod && mod.__esModule) ? mod : { "default": mod };
27
- };
28
- Object.defineProperty(exports, "__esModule", { value: true });
29
- exports.caslAbilityBuilder = void 0;
30
- const sift = __importStar(require("sift"));
31
- const qs_1 = __importDefault(require("qs"));
32
- const ability_1 = require("@casl/ability");
33
- const fp_1 = require("lodash/fp");
34
- const allowedOperations = [
35
- '$or',
36
- '$and',
37
- '$eq',
38
- '$ne',
39
- '$in',
40
- '$nin',
41
- '$lt',
42
- '$lte',
43
- '$gt',
44
- '$gte',
45
- '$exists',
46
- '$elemMatch',
47
- ];
48
- const operations = (0, fp_1.pick)(allowedOperations, sift);
49
- const conditionsMatcher = (conditions) => {
50
- return sift.createQueryTester(conditions, { operations });
51
- };
52
- const buildParametrizedAction = ({ name, params }) => {
53
- return `${name}?${qs_1.default.stringify(params)}`;
54
- };
55
- /**
56
- * Casl Ability Builder.
57
- */
58
- const caslAbilityBuilder = () => {
59
- const { can, build, ...rest } = new ability_1.AbilityBuilder(ability_1.Ability);
60
- return {
61
- can(permission) {
62
- const { action, subject, properties = {}, condition } = permission;
63
- const { fields } = properties;
64
- const caslAction = typeof action === 'string' ? action : buildParametrizedAction(action);
65
- return can(caslAction, (0, fp_1.isNil)(subject) ? 'all' : subject, fields, (0, fp_1.isObject)(condition) ? condition : undefined);
66
- },
67
- buildParametrizedAction({ name, params }) {
68
- return `${name}?${qs_1.default.stringify(params)}`;
69
- },
70
- build() {
71
- const ability = build({ conditionsMatcher });
72
- function decorateCan(originalCan) {
73
- return function (...args) {
74
- const [action, ...rest] = args;
75
- const caslAction = typeof action === 'string' ? action : buildParametrizedAction(action);
76
- // Call the original `can` method
77
- return originalCan.apply(ability, [caslAction, ...rest]);
78
- };
79
- }
80
- ability.can = decorateCan(ability.can);
81
- return ability;
82
- },
83
- ...rest,
84
- };
85
- };
86
- exports.caslAbilityBuilder = caslAbilityBuilder;
87
- //# sourceMappingURL=casl-ability.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"casl-ability.js","sourceRoot":"","sources":["../../../src/engine/abilities/casl-ability.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,4CAAoB;AACpB,2CAAiE;AACjE,kCAAkD;AAsBlD,MAAM,iBAAiB,GAAG;IACxB,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,SAAS;IACT,YAAY;CACJ,CAAC;AAEX,MAAM,UAAU,GAAG,IAAA,SAAI,EAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAEjD,MAAM,iBAAiB,GAAG,CAAC,UAAmB,EAAE,EAAE;IAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAsB,EAAE,EAAE;IACvE,OAAO,GAAG,IAAI,IAAI,YAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF;;GAEG;AACI,MAAM,kBAAkB,GAAG,GAAyB,EAAE;IAC3D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,wBAAc,CAAC,iBAAO,CAAC,CAAC;IAE5D,OAAO;QACL,GAAG,CAAC,UAA0B;YAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;YACnE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;YAE9B,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAEzF,OAAO,GAAG,CACR,UAAU,EACV,IAAA,UAAK,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAChC,MAAM,EACN,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAC5C,CAAC;QACJ,CAAC;QAED,uBAAuB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAsB;YAC1D,OAAO,GAAG,IAAI,IAAI,YAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,CAAC;QAED,KAAK;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAE7C,SAAS,WAAW,CAAC,WAA2B;gBAC9C,OAAO,UAAU,GAAG,IAAgC;oBAClD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;oBAC/B,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;oBAEzF,iCAAiC;oBACjC,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC3D,CAAC,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,GAAG,IAAI;KACR,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,kBAAkB,sBAyC7B"}
@@ -1,18 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
- for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
- };
16
- Object.defineProperty(exports, "__esModule", { value: true });
17
- __exportStar(require("./casl-ability"), exports);
18
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/abilities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B"}
@@ -1,100 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- Object.defineProperty(exports, "__esModule", { value: true });
26
- exports.createWillRegisterContext = exports.createBeforeEvaluateContext = exports.createValidateContext = exports.createEngineHooks = void 0;
27
- const fp_1 = require("lodash/fp");
28
- const utils_1 = require("@strapi/utils");
29
- const domain = __importStar(require("../domain"));
30
- /**
31
- * Create a hook map used by the permission Engine
32
- */
33
- const createEngineHooks = () => ({
34
- 'before-format::validate.permission': utils_1.hooks.createAsyncBailHook(),
35
- 'format.permission': utils_1.hooks.createAsyncSeriesWaterfallHook(),
36
- 'after-format::validate.permission': utils_1.hooks.createAsyncBailHook(),
37
- 'before-evaluate.permission': utils_1.hooks.createAsyncSeriesHook(),
38
- 'before-register.permission': utils_1.hooks.createAsyncSeriesHook(),
39
- });
40
- exports.createEngineHooks = createEngineHooks;
41
- /**
42
- * Create a context from a domain {@link Permission} used by the validate hooks
43
- */
44
- const createValidateContext = (permission) => ({
45
- get permission() {
46
- return (0, fp_1.cloneDeep)(permission);
47
- },
48
- });
49
- exports.createValidateContext = createValidateContext;
50
- /**
51
- * Create a context from a domain {@link Permission} used by the before valuate hook
52
- */
53
- const createBeforeEvaluateContext = (permission) => ({
54
- get permission() {
55
- return (0, fp_1.cloneDeep)(permission);
56
- },
57
- addCondition(condition) {
58
- Object.assign(permission, domain.permission.addCondition(condition, permission));
59
- return this;
60
- },
61
- });
62
- exports.createBeforeEvaluateContext = createBeforeEvaluateContext;
63
- /**
64
- * Create a context from a casl Permission & some options
65
- * @param caslPermission
66
- */
67
- const createWillRegisterContext = ({ permission, options }) => ({
68
- ...options,
69
- get permission() {
70
- return (0, fp_1.cloneDeep)(permission);
71
- },
72
- condition: {
73
- and(rawConditionObject) {
74
- if (!permission.condition) {
75
- permission.condition = { $and: [] };
76
- }
77
- if ((0, fp_1.isArray)(permission.condition.$and)) {
78
- permission.condition.$and.push(rawConditionObject);
79
- }
80
- return this;
81
- },
82
- or(rawConditionObject) {
83
- if (!permission.condition) {
84
- permission.condition = { $and: [] };
85
- }
86
- if ((0, fp_1.isArray)(permission.condition.$and)) {
87
- const orClause = permission.condition.$and.find((0, fp_1.has)('$or'));
88
- if (orClause) {
89
- orClause.$or.push(rawConditionObject);
90
- }
91
- else {
92
- permission.condition.$and.push({ $or: [rawConditionObject] });
93
- }
94
- }
95
- return this;
96
- },
97
- },
98
- });
99
- exports.createWillRegisterContext = createWillRegisterContext;
100
- //# sourceMappingURL=hooks.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/engine/hooks.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kCAAoD;AACpD,yCAAsC;AAEtC,kDAAoC;AAcpC;;GAEG;AACH,MAAM,iBAAiB,GAAG,GAA0B,EAAE,CAAC,CAAC;IACtD,oCAAoC,EAAE,aAAK,CAAC,mBAAmB,EAAE;IACjE,mBAAmB,EAAE,aAAK,CAAC,8BAA8B,EAAE;IAC3D,mCAAmC,EAAE,aAAK,CAAC,mBAAmB,EAAE;IAChE,4BAA4B,EAAE,aAAK,CAAC,qBAAqB,EAAE;IAC3D,4BAA4B,EAAE,aAAK,CAAC,qBAAqB,EAAE;CAC5D,CAAC,CAAC;AA4ED,8CAAiB;AA1EnB;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC;AAoED,sDAAqB;AAlEvB;;GAEG;AACH,MAAM,2BAA2B,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAEjF,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAsDD,kEAA2B;AA/C7B;;;GAGG;AACH,MAAM,yBAAyB,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAA6B,EAAE,EAAE,CAAC,CAAC;IACzF,GAAG,OAAO;IAEV,IAAI,UAAU;QACZ,OAAO,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS,EAAE;QACT,GAAG,CAAC,kBAA2B;YAC7B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;gBACzB,UAAU,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACrC;YAED,IAAI,IAAA,YAAO,EAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACtC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;aACpD;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,EAAE,CAAC,kBAA2B;YAC5B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;gBACzB,UAAU,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACrC;YAED,IAAI,IAAA,YAAO,EAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,QAAG,EAAC,KAAK,CAAC,CAAC,CAAC;gBAE5D,IAAI,QAAQ,EAAE;oBACZ,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;iBACvC;qBAAM;oBACL,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;iBAC/D;aACF;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC,CAAC;AAMD,8DAAyB"}
@@ -1,145 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || function (mod) {
19
- if (mod && mod.__esModule) return mod;
20
- var result = {};
21
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
22
- __setModuleDefault(result, mod);
23
- return result;
24
- };
25
- var __importDefault = (this && this.__importDefault) || function (mod) {
26
- return (mod && mod.__esModule) ? mod : { "default": mod };
27
- };
28
- Object.defineProperty(exports, "__esModule", { value: true });
29
- exports.new = exports.abilities = void 0;
30
- const fp_1 = __importDefault(require("lodash/fp"));
31
- const qs_1 = __importDefault(require("qs"));
32
- const hooks_1 = require("./hooks");
33
- const abilities = __importStar(require("./abilities"));
34
- exports.abilities = abilities;
35
- /**
36
- * Create a default state object for the engine
37
- */
38
- const createEngineState = () => {
39
- const hooks = (0, hooks_1.createEngineHooks)();
40
- return { hooks };
41
- };
42
- const newEngine = (params) => {
43
- const { providers, abilityBuilderFactory = abilities.caslAbilityBuilder } = params;
44
- const state = createEngineState();
45
- const runValidationHook = async (hook, context) => state.hooks[hook].call(context);
46
- /**
47
- * Evaluate a permission using local and registered behaviors (using hooks).
48
- * Validate, format (add condition, etc...), evaluate (evaluate conditions) and register a permission
49
- */
50
- const evaluate = async (params) => {
51
- const { options, register } = params;
52
- const preFormatValidation = await runValidationHook('before-format::validate.permission', (0, hooks_1.createBeforeEvaluateContext)(params.permission));
53
- if (preFormatValidation === false) {
54
- return;
55
- }
56
- const permission = (await state.hooks['format.permission'].call(params.permission));
57
- const afterFormatValidation = await runValidationHook('after-format::validate.permission', (0, hooks_1.createValidateContext)(permission));
58
- if (afterFormatValidation === false) {
59
- return;
60
- }
61
- await state.hooks['before-evaluate.permission'].call((0, hooks_1.createBeforeEvaluateContext)(permission));
62
- const { action: actionName, subject, properties, conditions = [], actionParameters = {}, } = permission;
63
- let action = actionName;
64
- if (actionParameters && Object.keys(actionParameters).length > 0) {
65
- action = `${actionName}?${qs_1.default.stringify(actionParameters)}`;
66
- }
67
- if (conditions.length === 0) {
68
- return register({ action, subject, properties });
69
- }
70
- const resolveConditions = fp_1.default.map(providers.condition.get);
71
- const removeInvalidConditions = fp_1.default.filter((condition) => fp_1.default.isFunction(condition.handler));
72
- const evaluateConditions = (conditions) => {
73
- return Promise.all(conditions.map(async (condition) => ({
74
- condition,
75
- result: await condition.handler(fp_1.default.merge(options, { permission: fp_1.default.cloneDeep(permission) })),
76
- })));
77
- };
78
- const removeInvalidResults = fp_1.default.filter(({ result }) => fp_1.default.isBoolean(result) || fp_1.default.isObject(result));
79
- const evaluatedConditions = await Promise.resolve(conditions)
80
- .then(resolveConditions)
81
- .then(removeInvalidConditions)
82
- .then(evaluateConditions)
83
- .then(removeInvalidResults);
84
- const resultPropEq = fp_1.default.propEq('result');
85
- const pickResults = fp_1.default.map(fp_1.default.prop('result'));
86
- if (evaluatedConditions.every(resultPropEq(false))) {
87
- return;
88
- }
89
- if (fp_1.default.isEmpty(evaluatedConditions) || evaluatedConditions.some(resultPropEq(true))) {
90
- return register({ action, subject, properties });
91
- }
92
- const results = pickResults(evaluatedConditions).filter(fp_1.default.isObject);
93
- if (fp_1.default.isEmpty(results)) {
94
- return register({ action, subject, properties });
95
- }
96
- return register({
97
- action,
98
- subject,
99
- properties,
100
- condition: { $and: [{ $or: results }] },
101
- });
102
- };
103
- return {
104
- get hooks() {
105
- return state.hooks;
106
- },
107
- /**
108
- * Create a register function that wraps a `can` function
109
- * used to register a permission in the ability builder
110
- */
111
- createRegisterFunction(can, options) {
112
- return async (permission) => {
113
- const hookContext = (0, hooks_1.createWillRegisterContext)({ options, permission });
114
- await state.hooks['before-register.permission'].call(hookContext);
115
- return can(permission);
116
- };
117
- },
118
- /**
119
- * Register a new handler for a given hook
120
- */
121
- on(hook, handler) {
122
- const validHooks = Object.keys(state.hooks);
123
- const isValidHook = validHooks.includes(hook);
124
- if (!isValidHook) {
125
- throw new Error(`Invalid hook supplied when trying to register an handler to the permission engine. Got "${hook}" but expected one of ${validHooks.join(', ')}`);
126
- }
127
- state.hooks[hook].register(handler);
128
- return this;
129
- },
130
- /**
131
- * Generate an ability based on the instance's
132
- * ability builder and the given permissions
133
- */
134
- async generateAbility(permissions, options = {}) {
135
- const { can, build } = abilityBuilderFactory();
136
- for (const permission of permissions) {
137
- const register = this.createRegisterFunction(can, options);
138
- await evaluate({ permission, options, register });
139
- }
140
- return build();
141
- },
142
- };
143
- };
144
- exports.new = newEngine;
145
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/engine/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAA0B;AAC1B,4CAAoB;AAIpB,mCAKiB;AAGjB,uDAAyC;AAGhC,8BAAS;AAmClB;;GAEG;AACH,MAAM,iBAAiB,GAAG,GAAG,EAAE;IAC7B,MAAM,KAAK,GAAG,IAAA,yBAAiB,GAAE,CAAC;IAElC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAoB,EAAU,EAAE;IACjD,MAAM,EAAE,SAAS,EAAE,qBAAqB,GAAG,SAAS,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC;IAEnF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAc,EAAE,OAAgB,EAAE,EAAE,CACnE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC;;;OAGG;IACH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAsB,EAAE,EAAE;QAChD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAErC,MAAM,mBAAmB,GAAG,MAAM,iBAAiB,CACjD,oCAAoC,EACpC,IAAA,mCAA2B,EAAC,MAAM,CAAC,UAAU,CAAC,CAC/C,CAAC;QAEF,IAAI,mBAAmB,KAAK,KAAK,EAAE;YACjC,OAAO;SACR;QAED,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,UAAU,CAClB,CAAe,CAAC;QAEjB,MAAM,qBAAqB,GAAG,MAAM,iBAAiB,CACnD,mCAAmC,EACnC,IAAA,6BAAqB,EAAC,UAAU,CAAC,CAClC,CAAC;QAEF,IAAI,qBAAqB,KAAK,KAAK,EAAE;YACnC,OAAO;SACR;QAED,MAAM,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAA,mCAA2B,EAAC,UAAU,CAAC,CAAC,CAAC;QAE9F,MAAM,EACJ,MAAM,EAAE,UAAU,EAClB,OAAO,EACP,UAAU,EACV,UAAU,GAAG,EAAE,EACf,gBAAgB,GAAG,EAAE,GACtB,GAAG,UAAU,CAAC;QAEf,IAAI,MAAM,GAAG,UAAU,CAAC;QAExB,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;YAChE,MAAM,GAAG,GAAG,UAAU,IAAI,YAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;SAC5D;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3B,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,MAAM,iBAAiB,GAAG,YAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,uBAAuB,GAAG,YAAC,CAAC,MAAM,CAAC,CAAC,SAAoB,EAAE,EAAE,CAChE,YAAC,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAChC,CAAC;QAEF,MAAM,kBAAkB,GAAG,CAAC,UAAuB,EAAE,EAAE;YACrD,OAAO,OAAO,CAAC,GAAG,CAChB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBACnC,SAAS;gBACT,MAAM,EAAE,MAAM,SAAS,CAAC,OAAO,CAC7B,YAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAC,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC1D;aACF,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,oBAAoB,GAAG,YAAC,CAAC,MAAM,CACnC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,YAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC1D,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;aAC1D,IAAI,CAAC,iBAAiB,CAAC;aACvB,IAAI,CAAC,uBAAuB,CAAC;aAC7B,IAAI,CAAC,kBAAkB,CAAC;aACxB,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAE9B,MAAM,YAAY,GAAG,YAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,YAAC,CAAC,GAAG,CAAC,YAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5C,IAAI,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE;YAClD,OAAO;SACR;QAED,IAAI,YAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE;YAClF,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,YAAC,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,YAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACtB,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;SAClD;QAED,OAAO,QAAQ,CAAC;YACd,MAAM;YACN,OAAO;YACP,UAAU;YACV,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED;;;WAGG;QACH,sBAAsB,CAAC,GAAG,EAAE,OAAgC;YAC1D,OAAO,KAAK,EAAE,UAAoC,EAAE,EAAE;gBACpD,MAAM,WAAW,GAAG,IAAA,iCAAyB,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;gBAEvE,MAAM,KAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAElE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;YACzB,CAAC,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,EAAE,CAAC,IAAI,EAAE,OAAO;YACd,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,CAAC,WAAW,EAAE;gBAChB,MAAM,IAAI,KAAK,CACb,2FAA2F,IAAI,yBAAyB,UAAU,CAAC,IAAI,CACrI,IAAI,CACL,EAAE,CACJ,CAAC;aACH;YAED,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,UAAmC,EAAE;YACtE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,qBAAqB,EAAE,CAAC;YAE/C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAE3D,MAAM,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;aACnD;YAED,OAAO,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEoB,wBAAG"}