@tachybase/plugin-sub-accounts 0.23.8

package/dist/server/hooks/merge-role-create.js

@@ -0,0 +1,34 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var merge_role_create_exports = {};
+__export(merge_role_create_exports, {
+  mergeRoleCreate: () => mergeRoleCreate
+});
+module.exports = __toCommonJS(merge_role_create_exports);
+async function mergeRoleCreate(model, options) {
+  if (!model.ownerUserId) {
+    return;
+  }
+  const app = this;
+  await model.resetAcl({ acl: app.acl, transaction: options.transaction });
+  await model.refreshDataSourcesAcl({ acl: app.acl, transaction: options.transaction });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  mergeRoleCreate
+});

package/dist/server/hooks/refresh-datasources.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 启动时，给所有合并角色装载数据源权限
+ */
+export declare function refreshDataSourcesAclAtAppStart(): Promise<void>;
+/**
+ * 当单个角色的数据源权限发生变化时，刷新合并角色的数据源权限
+ */
+export declare function refreshDataSourcesAcl(): void;

package/dist/server/hooks/refresh-datasources.js

@@ -0,0 +1,43 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var refresh_datasources_exports = {};
+__export(refresh_datasources_exports, {
+  refreshDataSourcesAcl: () => refreshDataSourcesAcl,
+  refreshDataSourcesAclAtAppStart: () => refreshDataSourcesAclAtAppStart
+});
+module.exports = __toCommonJS(refresh_datasources_exports);
+async function refreshDataSourcesAclAtAppStart() {
+  const app = this;
+  const exists = await app.db.collectionExistsInDb("dataSourcesRoles");
+  if (!exists) {
+    return;
+  }
+  const roles = await app.db.getRepository("roles").find({
+    filter: { ownerUserId: { $ne: null } }
+  });
+  for (const role of roles) {
+    await role.refreshDataSourcesAcl({ acl: app.acl });
+  }
+}
+function refreshDataSourcesAcl() {
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  refreshDataSourcesAcl,
+  refreshDataSourcesAclAtAppStart
+});

package/dist/server/hooks/source-role-destroy.d.ts

@@ -0,0 +1,6 @@
+import { DestroyOptions } from '@tachybase/database';
+import { MergeRoleModel } from '../model/MergeRoleModel';
+/**
+ * 原始角色变化会导致合成角色也发生变化
+ */
+export declare function sourceRoleDestroy(model: MergeRoleModel, options: DestroyOptions): Promise<void>;

package/dist/server/hooks/source-role-destroy.js

@@ -0,0 +1,46 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var source_role_destroy_exports = {};
+__export(source_role_destroy_exports, {
+  sourceRoleDestroy: () => sourceRoleDestroy
+});
+module.exports = __toCommonJS(source_role_destroy_exports);
+async function sourceRoleDestroy(model, options) {
+  if (model.ownerUserId) {
+    return;
+  }
+  const { transaction } = options;
+  const affectedUsers = await model.db.getRepository("users").find({
+    filter: {
+      "roles.name": model.name
+    },
+    appends: ["selfRole"]
+  });
+  if (!affectedUsers.length) {
+    return;
+  }
+  const affectedRoles = affectedUsers.map((u) => u.selfRole);
+  const acl = this.acl;
+  for (const affectedRole of affectedRoles) {
+    await affectedRole.resetAcl({ transaction, acl });
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  sourceRoleDestroy
+});

package/dist/server/hooks/source-role-update.d.ts

@@ -0,0 +1,6 @@
+import { UpdateOptions } from '@tachybase/database';
+import { MergeRoleModel } from '../model/MergeRoleModel';
+/**
+ * 原始角色变化会导致合成角色也发生变化
+ */
+export declare function sourceRoleUpdate(model: MergeRoleModel, options: UpdateOptions): Promise<void>;

package/dist/server/hooks/source-role-update.js

@@ -0,0 +1,57 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var source_role_update_exports = {};
+__export(source_role_update_exports, {
+  sourceRoleUpdate: () => sourceRoleUpdate
+});
+module.exports = __toCommonJS(source_role_update_exports);
+const observeFields = ["snippets", "allowNewMenu"];
+async function sourceRoleUpdate(model, options) {
+  if (model.ownerUserId) {
+    return;
+  }
+  let newResetAcl = false;
+  for (const field of options.fields) {
+    if (observeFields.includes(field)) {
+      newResetAcl = true;
+      break;
+    }
+  }
+  if (!newResetAcl) {
+    return;
+  }
+  const { transaction } = options;
+  const affectedUsers = await model.db.getRepository("users").find({
+    filter: {
+      "roles.name": model.name
+    },
+    appends: ["selfRole"]
+  });
+  if (!affectedUsers.length) {
+    return;
+  }
+  const affectedRoles = affectedUsers.map((u) => u.selfRole);
+  const acl = this.acl;
+  for (const affectedRole of affectedRoles) {
+    await affectedRole.resetAcl({ transaction, acl, changedFields: options.fields });
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  sourceRoleUpdate
+});

package/dist/server/hooks/user-change-roles.d.ts

@@ -0,0 +1,9 @@
+import { UpdateOptions } from '@tachybase/database';
+import { MergeRoleModel } from '../model/MergeRoleModel';
+/**
+ * 用户新增/删除/设置 角色
+ * @param model
+ * @param options
+ * @returns
+ */
+export declare function userChangeRoles(model: MergeRoleModel, options: UpdateOptions): Promise<void>;

package/dist/server/hooks/user-change-roles.js

@@ -0,0 +1,55 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var user_change_roles_exports = {};
+__export(user_change_roles_exports, {
+  userChangeRoles: () => userChangeRoles
+});
+module.exports = __toCommonJS(user_change_roles_exports);
+async function userChangeRoles(model, options) {
+  if (model.dataValues.roles === void 0) {
+    return;
+  }
+  const rolesBefore = await model.getRoles();
+  const rolesNameBefore = rolesBefore.map((role) => role.name);
+  const rolesNameAfter = model.dataValues.roles || [];
+  let changed = false;
+  if (rolesNameBefore.length !== rolesNameAfter.length) {
+    changed = true;
+  } else {
+    for (const role of rolesNameAfter) {
+      if (!rolesNameBefore.includes(role)) {
+        changed = true;
+        break;
+      }
+    }
+  }
+  if (!changed) {
+    return;
+  }
+  const { transaction } = options;
+  const selfRole = await model.getSelfRole({ transaction });
+  if (selfRole) {
+    const acl = this.acl;
+    await selfRole.resetAcl({ transaction, acl });
+    await selfRole.refreshDataSourcesAcl({ transaction, acl });
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  userChangeRoles
+});

package/dist/server/hooks/user-create.d.ts

@@ -0,0 +1,2 @@
+import { CreateOptions, Model } from '@tachybase/database';
+export declare function createMergeRole(user: Model, options: CreateOptions): Promise<void>;

package/dist/server/hooks/user-create.js

@@ -0,0 +1,38 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var user_create_exports = {};
+__export(user_create_exports, {
+  createMergeRole: () => createMergeRole
+});
+module.exports = __toCommonJS(user_create_exports);
+async function createMergeRole(user, options) {
+  const { transaction } = options;
+  const roleRepo = user.db.getRepository("roles");
+  const roleName = `m_${user.id}`;
+  const mergeRole = {
+    title: `{{${user.id} + '_' + t("All")}}`,
+    name: roleName,
+    ownerUserId: user.id
+  };
+  const mergeRoleModel = await roleRepo.create({ values: mergeRole, transaction });
+  await mergeRoleModel.resetAcl({ acl: this.acl, transaction });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createMergeRole
+});

package/dist/server/index.d.ts

@@ -0,0 +1 @@
+export { default } from './plugin';

package/dist/server/index.js

@@ -0,0 +1,33 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var server_exports = {};
+__export(server_exports, {
+  default: () => import_plugin.default
+});
+module.exports = __toCommonJS(server_exports);
+var import_plugin = __toESM(require("./plugin"));

package/dist/server/middlewares/change-user-roles.d.ts

@@ -0,0 +1,8 @@
+import { Context } from '@tachybase/actions';
+/**
+ * 在角色列表中增加、删除、设置用户角色时，重置用户的自身合并角色
+ * 在角色列表中增加、删除、设置菜单项，重置用户的自身合并角色
+ * @param ctx
+ * @param next
+ */
+export declare function changeUserRolesMiddleware(ctx: Context, next: any): Promise<void>;

package/dist/server/middlewares/change-user-roles.js

@@ -0,0 +1,66 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var change_user_roles_exports = {};
+__export(change_user_roles_exports, {
+  changeUserRolesMiddleware: () => changeUserRolesMiddleware
+});
+module.exports = __toCommonJS(change_user_roles_exports);
+async function changeUserRolesMiddleware(ctx, next) {
+  await next();
+  const { associatedName, resourceName, actionName, values, associatedIndex } = ctx.action.params;
+  if (associatedName === "roles" && resourceName === "users" && ["add", "remove", "set"].includes(actionName) && (values == null ? void 0 : values.length)) {
+    const userRepo = ctx.db.getRepository("users");
+    const userList = await userRepo.find({
+      fields: ["id"],
+      filter: {
+        id: { $in: values }
+      },
+      appends: ["selfRole"]
+    });
+    const userMap = userList.reduce((map, user) => {
+      map.set(user.id, user);
+      return map;
+    }, /* @__PURE__ */ new Map());
+    for (const userId of values) {
+      const user = userMap.get(userId);
+      const selfRole = user.selfRole;
+      if (!selfRole) {
+        continue;
+      }
+      await selfRole.resetAcl({ acl: ctx.app.acl });
+    }
+  } else if (associatedName === "roles" && resourceName === "menuUiSchemas" && ["add", "remove", "set"].includes(actionName)) {
+    const affectedUsers = await ctx.db.getRepository("users").find({
+      filter: {
+        "roles.name": associatedIndex
+      },
+      appends: ["selfRole"]
+    });
+    if (!affectedUsers.length) {
+      return;
+    }
+    const affectedRoles = affectedUsers.map((u) => u.selfRole);
+    for (const affectedRole of affectedRoles) {
+      await affectedRole.resetAcl({ acl: ctx.app.acl, changedFields: ["menuUiSchemas"] });
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  changeUserRolesMiddleware
+});

package/dist/server/middlewares/set-self-role.d.ts

@@ -0,0 +1,2 @@
+import { Context } from '@tachybase/actions';
+export declare function setSelfRole(ctx: Context, next: any): Promise<any>;

package/dist/server/middlewares/set-self-role.js

@@ -0,0 +1,54 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var set_self_role_exports = {};
+__export(set_self_role_exports, {
+  setSelfRole: () => setSelfRole
+});
+module.exports = __toCommonJS(set_self_role_exports);
+async function setSelfRole(ctx, next) {
+  if (!ctx.state.currentUser) {
+    return next();
+  }
+  const currentUser = await ctx.db.getRepository("users").findOne({
+    filterByTk: ctx.state.currentUser.id,
+    appends: ["selfRole"]
+  });
+  if (!currentUser.selfRole) {
+    return next();
+  }
+  const sourceRoles = await currentUser.selfRole.getSourceRoles();
+  if (sourceRoles.find((r) => r.name === "root")) {
+    if (!ctx.get("X-Role") || ctx.get("X-Role") === "anonymous") {
+      ctx.headers["x-role"] = "root";
+    }
+    return next();
+  }
+  if (!ctx.state.attachRoles) {
+    ctx.state.attachRoles = [];
+  }
+  ctx.state.currentRole = currentUser.selfRole.name;
+  ctx.state.attachRoles.push(currentUser.selfRole);
+  if (!ctx.get("X-Role") || ctx.get("X-Role") === "anonymous") {
+    ctx.headers["x-role"] = currentUser.selfRole.name;
+  }
+  return next();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  setSelfRole
+});

package/dist/server/model/MergeRoleModel.d.ts

@@ -0,0 +1,49 @@
+import { ACL } from '@tachybase/acl';
+import { Transaction } from '@tachybase/database';
+import { RoleModel } from '@tachybase/module-acl';
+export declare class MergeRoleModel extends RoleModel {
+    rootResource: MergeRoleModel;
+    /**
+     * 获取源头角色
+     * @param transaction
+     * @returns
+     */
+    getSourceRoles(transaction: Transaction): Promise<any>;
+    /**
+     * 数据表操作权限更新
+     */
+    refreshDataSourcesAcl({ transaction, acl }: {
+        transaction?: Transaction;
+        acl: ACL;
+    }): Promise<void>;
+    /**
+     * 数据表操作权限更新
+     */
+    refreshDataSourcesAclForResource(acl: ACL, resourceName: string, actionName: string): void;
+    /**
+     * source变动后导致本身属性或者ui有关属性变动
+     */
+    resetAcl({ transaction, acl, changedFields, }: {
+        transaction?: Transaction;
+        acl: ACL;
+        changedFields?: string[];
+    }): Promise<void>;
+    /**
+     * role本身属性变动
+     */
+    private resetRoleProperty;
+    /**
+     * 融合策略, 整个系统中这个变量会被主数据库 data-source-manager的DataSourcesRolesModel.writeToAcl方法设置覆盖
+     * root为null
+     * data-source的actions体现在[权限页面][数据源][配置][通用操作权限] 但是整个role下的
+     * FIXME: strategy这个类型设置的很奇怪,目前只找到actions,依据AvailableStrategyOptions应该还有displayName,allowConfigure,resource
+     */
+    private mergeStrategy;
+    /**
+     * 融合短语,体现在[权限页面][系统管理],主要影响[配置页面] [配置插件] [重启应用]
+     * 主要是 ui.* pm.* app.* 等短语
+     */
+    private mergeSnippets;
+    private mergeMenuUiSchemas;
+    private mergeDataSource;
+}