@teamplay/backend 0.2.2 → 0.2.4

package/features/accessControl.js

@@ -0,0 +1,50 @@
+import sharedbAccess, { registerOrmRules } from '@teamplay/sharedb-access'
+import { isAccessControl } from '@teamplay/utils/accessControl'
+
+export default function accessControl (
+  backend,
+  { models = {}, dontUseOldDocs = true, ...options } = {}
+) {
+  sharedbAccess(backend, { dontUseOldDocs, ...options })
+
+  for (const modelPattern in models) {
+    const { access, factory } = models[modelPattern]
+
+    if (factory) {
+      // TODO: implement checking access from factory
+      throw Error('accessControl factory model: NOT IMPLEMENTED')
+    } else if (access) {
+      const collectionName = modelPattern
+      if (/\./.test(collectionName)) throw Error(ERRORS.onlyTopLevelCollections(modelPattern))
+      if (!isAccessControl(access)) throw Error(ERRORS.improperAccessControlProps(collectionName, access))
+      registerOrmRules(backend, collectionName, access)
+    }
+  }
+
+  console.log('✓ Security: Access Control for DB collections on backend is enabled')
+}
+
+const ERRORS = {
+  onlyTopLevelCollections: (modelPattern) => `
+    accessControl: you can only define 'access' for access control rules in the top-level collection models
+      (i.e. 'model/items.js')
+      Found 'access' in '${modelPattern}'.
+      Move it to the top-level collection model: 'models/${modelPattern.split('.')[0]}.js'
+  `,
+  improperAccessControlProps: (collectionName, props) => `
+    accessControl: received incorrect 'access' object for accessControl.
+    Possibly not wrapped into an \`accessControl()\` call.
+
+    Make sure you wrap your 'access' object into an \`accessControl({})\` call:
+    Example:
+      import { accessControl } from 'startupjs'
+      export const access = accessControl({
+        create: () => true,
+        ...
+      })
+
+    Collection name: '${collectionName}'
+    Got:
+      ${JSON.stringify(props)}
+  `
+}

package/index.js

@@ -1,6 +1,3 @@
-import ShareDbAccess, {
-  registerOrmRules
-} from '@teamplay/sharedb-access'
 import ShareDB from 'sharedb'
 import shareDbHooks from 'sharedb-hooks'
 import { pubsub } from './redis/index.js'
@@ -8,12 +5,12 @@ import { db } from './db/index.js'
 import maybeFlushRedis from './redis/maybeFlushRedis.js'
 import initValidateSchema from './features/validateSchema.js'
 import initServerAggregate from './features/serverAggregate.js'
+import initAccessControl from './features/accessControl.js'
 
 export { redis, redlock, Redlock } from './redis/index.js'
 export { db, mongo, mongoClient, createMongoIndex, sqlite } from './db/index.js'
 
 const usersConnectionCounter = {}
-global.__clients = {}
 
 export default function createBackend ({
   secure = false,
@@ -46,31 +43,8 @@ export default function createBackend ({
 
   if (hooks) hooks(backend)
 
-  const ORM = global.STARTUP_JS_ORM || {}
-
-  // sharedb-access
   if (accessControl) {
-    // eslint-disable-next-line
-    new ShareDbAccess(backend, { dontUseOldDocs: true })
-
-    for (const path in ORM) {
-      const ormEntity = ORM[path].OrmEntity
-
-      const { access } = ormEntity
-      const isFactory = !!ormEntity.factory
-
-      // TODO:
-      //   - move registerOrmRulesFromFactory and registerOrmRules to this library
-      //   - rewrite factories check to not use model anymore
-      if (isFactory) {
-        throw Error('Sharedb-access does not support ORM factories yet')
-        // registerOrmRulesFromFactory(backend, path, ormEntity)
-      } else if (access) {
-        registerOrmRules(backend, path, access)
-      }
-    }
-
-    console.log('sharedb-access is working')
+    initAccessControl(backend, { models })
   }
 
   if (serverAggregate) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teamplay/backend",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Create new ShareDB backend instance",
   "type": "module",
   "main": "index.js",
@@ -12,11 +12,11 @@
     ".": "./index.js"
   },
   "dependencies": {
-    "@teamplay/schema": "^0.2.2",
-    "@teamplay/server-aggregate": "^0.2.2",
-    "@teamplay/sharedb-access": "^0.2.2",
-    "@teamplay/sharedb-schema": "^0.2.2",
-    "@teamplay/utils": "^0.2.2",
+    "@teamplay/schema": "^0.2.4",
+    "@teamplay/server-aggregate": "^0.2.4",
+    "@teamplay/sharedb-access": "^0.2.4",
+    "@teamplay/sharedb-schema": "^0.2.4",
+    "@teamplay/utils": "^0.2.4",
     "@types/ioredis-mock": "^8.2.5",
     "ioredis": "^5.3.2",
     "ioredis-mock": "^8.9.0",
@@ -29,5 +29,5 @@
     "sharedb-redis-pubsub": "^2.0.1",
     "sqlite3": "^5.1.6"
   },
-  "gitHead": "a3c17b5956a4ff67393906cf5421b3101771b39f"
+  "gitHead": "9d78732c718f86a12cfa74d0a2b23b31d8ba8daa"
 }