@tachybase/plugin-sub-accounts 0.23.8

package/dist/server/model/MergeRoleModel.js

@@ -0,0 +1,205 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var MergeRoleModel_exports = {};
+__export(MergeRoleModel_exports, {
+  MergeRoleModel: () => MergeRoleModel
+});
+module.exports = __toCommonJS(MergeRoleModel_exports);
+var import_acl = require("@tachybase/acl");
+var import_module_acl = require("@tachybase/module-acl");
+var import_RoleActionParamsMerge = require("../acl/RoleActionParamsMerge");
+var import_RoleSnippets = require("../acl/RoleSnippets");
+var import_RoleStrategy = require("../acl/RoleStrategy");
+class MergeRoleModel extends import_module_acl.RoleModel {
+  rootResource;
+  /**
+   * 获取源头角色
+   * @param transaction
+   * @returns
+   */
+  async getSourceRoles(transaction) {
+    const user = await this.getOwnerUser({ transaction });
+    return await user.getRoles({ appends: ["menuUiSchemas"], transaction });
+  }
+  /**
+   * 数据表操作权限更新
+   */
+  async refreshDataSourcesAcl({ transaction, acl }) {
+    const strategyArray = [];
+    const resourcesMap = /* @__PURE__ */ new Map();
+    const transactionExist = !!transaction;
+    if (!transaction) {
+      transaction = await this.db.sequelize.transaction();
+    }
+    this.sourceRoles = await this.getSourceRoles(transaction);
+    if (this.sourceRoles.find((r) => r.name === "root")) {
+      if (!transactionExist) {
+        transaction.commit();
+      }
+      return;
+    }
+    for (const sourceRole of this.sourceRoles) {
+      let sourceAclRole = acl.getRole(sourceRole.name);
+      if (!sourceAclRole) {
+        sourceAclRole = acl.define({
+          role: sourceRole.name,
+          strategy: {},
+          actions: {}
+        });
+      }
+      strategyArray.push(sourceAclRole.strategy);
+      for (const [resourceName, value] of sourceAclRole.resources) {
+        let list = resourcesMap.get(resourceName);
+        if (!list) {
+          list = [];
+          resourcesMap.set(resourceName, list);
+        }
+        list.push(value.actions);
+      }
+    }
+    const aclRole = acl.getRole(this.name);
+    aclRole.setStrategy({ ...import_RoleStrategy.RoleStrategy.merge(strategyArray) });
+    const newResources = /* @__PURE__ */ new Map();
+    for (const [resourceName, actions] of resourcesMap) {
+      const actionMap = /* @__PURE__ */ new Map();
+      for (const action of actions) {
+        for (const [actionName, params] of action) {
+          let list = actionMap.get(actionName);
+          if (!list) {
+            list = [];
+            actionMap.set(actionName, list);
+          }
+          list.push(params);
+        }
+      }
+      const newActions = /* @__PURE__ */ new Map();
+      for (const [actionName, params] of actionMap) {
+        newActions.set(actionName, import_RoleActionParamsMerge.RoleActionParamsMerge.merge(params));
+      }
+      const newAclResource = new import_acl.ACLResource({ role: aclRole, name: resourceName });
+      newAclResource.actions = newActions;
+      newResources.set(resourceName, newAclResource);
+    }
+    aclRole.resources = newResources;
+    if (!transactionExist) {
+      transaction.commit();
+    }
+  }
+  /**
+   * 数据表操作权限更新
+   */
+  refreshDataSourcesAclForResource(acl, resourceName, actionName) {
+  }
+  /**
+   * source变动后导致本身属性或者ui有关属性变动
+   */
+  async resetAcl({
+    transaction,
+    acl,
+    changedFields
+  }) {
+    if (!this.ownerUserId) {
+      return;
+    }
+    const transactionExist = !!transaction;
+    if (!transaction) {
+      transaction = await this.db.sequelize.transaction();
+    }
+    this.sourceRoles = await this.getSourceRoles(transaction);
+    this.rootResource = this.sourceRoles.find((role) => role.name === "root");
+    this.resetRoleProperty(transaction);
+    if (!changedFields || changedFields.includes("snippets")) {
+      await this.mergeSnippets();
+    }
+    if (!changedFields || changedFields.includes("menuUiSchemas")) {
+      await this.mergeMenuUiSchemas(transaction);
+    }
+    await this.save({ transaction });
+    if (!transactionExist) {
+      await transaction.commit();
+    }
+    this.writeToAcl({ acl, withOutStrategy: true });
+  }
+  /**
+   * role本身属性变动
+   */
+  resetRoleProperty(transaction) {
+    this.allowConfigure = this.sourceRoles.some((role) => role.allowConfigure);
+    this.allowNewMenu = this.sourceRoles.some((role) => role.allowNewMenu);
+  }
+  /**
+   * 融合策略, 整个系统中这个变量会被主数据库 data-source-manager的DataSourcesRolesModel.writeToAcl方法设置覆盖
+   * root为null
+   * data-source的actions体现在[权限页面][数据源][配置][通用操作权限] 但是整个role下的
+   * FIXME: strategy这个类型设置的很奇怪,目前只找到actions,依据AvailableStrategyOptions应该还有displayName,allowConfigure,resource
+   */
+  mergeStrategy() {
+    throw new Error("Method not implemented.");
+  }
+  /**
+   * 融合短语,体现在[权限页面][系统管理],主要影响[配置页面] [配置插件] [重启应用]
+   * 主要是 ui.* pm.* app.* 等短语
+   */
+  mergeSnippets() {
+    if (this.rootResource) {
+      this.snippets = ["ui.*", "pm", "pm.*"];
+      return;
+    }
+    if (this.sourceRoles.length === 0) {
+      this.snippets = ["!ui.*", "!pm", "!pm.*"];
+      return;
+    }
+    if (this.sourceRoles.length === 1) {
+      this.snippets = this.sourceRoles[0].snippets;
+      return;
+    }
+    const snippets = [];
+    for (const sourceRole of this.sourceRoles) {
+      snippets.push(new Set(sourceRole.snippets));
+    }
+    this.snippets = import_RoleSnippets.RoleSnippets.mergeSet(snippets);
+  }
+  async mergeMenuUiSchemas(transaction) {
+    if (this.rootResource) {
+      await this.setMenuUiSchemas([], { transaction });
+      return;
+    }
+    const menuUiSchemaNamesSet = [];
+    const menuUiSchemasList = [];
+    for (const sourceRole of this.sourceRoles) {
+      const menuUiSchemas = await sourceRole.getMenuUiSchemas();
+      for (const menuUiSchema of menuUiSchemas) {
+        const xUid = menuUiSchema.get("x-uid");
+        if (menuUiSchemaNamesSet.includes(xUid)) {
+          continue;
+        }
+        menuUiSchemaNamesSet.push(xUid);
+        menuUiSchemasList.push(menuUiSchema);
+      }
+    }
+    await this.setMenuUiSchemas(menuUiSchemasList, { transaction });
+  }
+  // 由于数据库操作,还要分表,每个表还有不同的权限策略,此处不保存到数据库,而是在内存中进行操作
+  mergeDataSource(Transaction2) {
+    throw new Error("Method not implemented.");
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  MergeRoleModel
+});

package/dist/server/plugin.d.ts

@@ -0,0 +1,11 @@
+import { Plugin } from '@tachybase/server';
+export declare class PluginSubAccountsServer extends Plugin {
+    afterAdd(): Promise<void>;
+    beforeLoad(): Promise<void>;
+    load(): Promise<void>;
+    install(): Promise<void>;
+    afterEnable(): Promise<void>;
+    afterDisable(): Promise<void>;
+    remove(): Promise<void>;
+}
+export default PluginSubAccountsServer;

package/dist/server/plugin.js

@@ -0,0 +1,85 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var plugin_exports = {};
+__export(plugin_exports, {
+  PluginSubAccountsServer: () => PluginSubAccountsServer,
+  default: () => plugin_default
+});
+module.exports = __toCommonJS(plugin_exports);
+var import_server = require("@tachybase/server");
+var import_addMergeRoles = require("./addMergeRoles");
+var import_hooks = require("./hooks");
+var import_user_create = require("./hooks/user-create");
+var import_change_user_roles = require("./middlewares/change-user-roles");
+var import_set_self_role = require("./middlewares/set-self-role");
+var import_MergeRoleModel = require("./model/MergeRoleModel");
+class PluginSubAccountsServer extends import_server.Plugin {
+  async afterAdd() {
+  }
+  async beforeLoad() {
+    this.app.db.registerModels({
+      RoleModel: import_MergeRoleModel.MergeRoleModel
+    });
+    this.app.on("dataSourceAfterStart", async () => {
+      await (0, import_addMergeRoles.addMergeRole)(this.app);
+      import_hooks.refreshDataSourcesAclAtAppStart.bind(this.app)();
+    });
+    this.app.db.on("roles.afterUpdate", import_hooks.sourceRoleUpdate.bind(this.app));
+    this.app.db.on("roles.afterDestroy", import_hooks.sourceRoleDestroy.bind(this.app));
+    this.app.db.on("roles.afterCreate", import_hooks.mergeRoleCreate.bind(this.app));
+    this.app.db.on("users.afterCreateWithAssociations", import_user_create.createMergeRole.bind(this.app));
+    this.app.db.on("users.afterUpdateWithAssociations", import_hooks.userChangeRoles.bind(this.app));
+    this.app.on("dataSource:writeToAcl", async ({ roleName, transaction }) => {
+      const affectedUsers = await this.app.db.getRepository("users").find({
+        filter: {
+          "roles.name": roleName
+        },
+        appends: ["selfRole"]
+      });
+      if (!affectedUsers.length) {
+        return;
+      }
+      const affectedRoles = affectedUsers.map((u) => u.selfRole);
+      const acl = this.app.acl;
+      for (const affectedRole of affectedRoles) {
+        await affectedRole.refreshDataSourcesAcl({ transaction, acl });
+      }
+    });
+  }
+  async load() {
+    const ignoreMerged = () => ({ filter: { ownerUserId: null } });
+    this.app.acl.addFixedParams("roles", "list", ignoreMerged);
+    this.app.acl.addFixedParams("roles", "update", ignoreMerged);
+    this.app.acl.addFixedParams("roles", "destroy", ignoreMerged);
+    this.app.resourcer.use(import_set_self_role.setSelfRole, { tag: "setSelfRole", before: "setCurrentRole", after: "setDepartmentsInfo" });
+    this.app.resourcer.use(import_change_user_roles.changeUserRolesMiddleware, { tag: "changeUserRolesMiddleware" });
+  }
+  async install() {
+  }
+  async afterEnable() {
+  }
+  async afterDisable() {
+  }
+  async remove() {
+  }
+}
+var plugin_default = PluginSubAccountsServer;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PluginSubAccountsServer
+});

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@tachybase/plugin-sub-accounts",
+  "version": "0.23.8",
+  "description": "Generates synthetic roles, each user can create their own sub-accounts (unfinished)",
+  "main": "dist/server/index.js",
+  "devDependencies": {
+    "minimatch": "^5.1.6"
+  },
+  "peerDependencies": {
+    "@tachybase/actions": "0.23.8",
+    "@tachybase/client": "0.23.8",
+    "@tachybase/server": "0.23.8",
+    "@tachybase/test": "0.23.8",
+    "@tachybase/database": "0.23.8",
+    "@tachybase/acl": "0.23.8",
+    "@tachybase/utils": "0.23.8",
+    "@tachybase/module-acl": "0.23.8"
+  },
+  "description.zh-CN": "生成合成角色,每个用户可以生成自己的子账户(未完成)",
+  "displayName.zh-CN": "子账户和合成角色",
+  "scripts": {
+    "build": "tachybase-build --no-dts @tachybase/plugin-sub-accounts"
+  }
+}

package/server.d.ts

@@ -0,0 +1,2 @@
+export * from './dist/server';
+export { default } from './dist/server';

package/server.js

@@ -0,0 +1 @@
+module.exports = require('./dist/server/index.js');