@things-factory/organization 10.1.259 → 10.1.261

package/dist-server/service/certificate/employment-certificates.js

@@ -20,20 +20,13 @@ exports.CAREER_CERTIFICATE_KIND = 'organization.career-certificate';
     ['employee-certificate', 'query'],
     ['employee-certificate', 'mutation']
 ]);
-/** What the caller holds, asked as the doors ask it. */
-async function holds(context, category, privilege) {
-    const { domain, user, unsafeIP, prohibitedPrivileges } = context?.state ?? {};
-    if (!domain || !user)
-        return false;
-    return !!(await (0, auth_base_1.checkPermission)({ category, privilege, owner: true }, user, domain, unsafeIP, prohibitedPrivileges));
-}
 /** Who is asking about whom: theirs, and what they hold. */
 async function standingOf(context, employeeId) {
     return {
         own: !!employeeId && (await (0, my_employee_1.myEmployeeIds)(context)).includes(employeeId),
-        self: await holds(context, 'employee-self', 'mutation'),
-        issuing: await holds(context, 'employee-certificate', 'mutation'),
-        reading: await holds(context, 'employee-certificate', 'query')
+        self: await (0, auth_base_1.requestHolds)(context, 'employee-self', 'mutation'),
+        issuing: await (0, auth_base_1.requestHolds)(context, 'employee-certificate', 'mutation'),
+        reading: await (0, auth_base_1.requestHolds)(context, 'employee-certificate', 'query')
     };
 }
 async function employeeOf(context, id) {

package/dist-server/service/certificate/employment-certificates.js.map

@@ -1 +1 @@
-{"version":3,"file":"employment-certificates.js","sourceRoot":"","sources":["../../../server/service/certificate/employment-certificates.ts"],"names":[],"mappings":";;;AAAA,yDAA8E;AAC9E,6CAAgE;AAChE,iDAA2E;AAE3E,mDAA+C;AAC/C,yDAAuD;AACvD,iFAA0G;AAC1G,yFAAyF;AAEzF;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,qCAAqC,CAAA;AACnE,QAAA,uBAAuB,GAAG,iCAAiC,CAAA;AAExE,gGAAgG;AAChG,IAAA,6BAAiB,EAAC,sCAAsC,EAAE;IACxD,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACjC,CAAC,sBAAsB,EAAE,UAAU,CAAC;CACrC,CAAC,CAAA;AAEF,wDAAwD;AACxD,KAAK,UAAU,KAAK,CAAC,OAAY,EAAE,QAAgB,EAAE,SAA+B;IAClF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7E,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAA,2BAAe,EAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAC7H,CAAC;AAED,4DAA4D;AAC5D,KAAK,UAAU,UAAU,CAAC,OAAY,EAAE,UAAqC;IAC3E,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACxE,IAAI,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC;QACvD,OAAO,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,UAAU,CAAC;QACjE,OAAO,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC;KAC/D,CAAA;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAY,EAAE,EAAU;IAChD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,mBAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACnI,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAO,CAAC,oBAAoB,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACxF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,MAAM,IAAI,IAAI,CAAC,mCAA2B,EAAE,+BAAuB,CAAU,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,KAAK,+BAAuB,CAAA;IAC/C,IAAA,gCAA0B,EAAC;QACzB,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC5B,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,kDAAe,CAAC,CAAC,CAAC,sDAAmB,EAAE,SAAS,EAAE,IAAI,EAAE;QAC/F,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK;YAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACjD,MAAM,KAAK,GAAG,IAAA,+CAAgB,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC1F,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAA;QACxE,CAAC;QACD,iFAAiF;QACjF,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,MAAM,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3C,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK;YAC3B,OAAO,IAAA,kDAAmB,EAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACpE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG;YACxB,OAAO,IAAA,iDAAkB,EAAC,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { checkPermission, declarePrivileges } from '@things-factory/auth-base'\nimport { registerIssuedDocumentKind } from '@things-factory/pdf'\nimport { calendarDay, getRepository, Refusal } from '@things-factory/shell'\n\nimport { Employee } from '../employee/employee'\nimport { myEmployeeIds } from '../employee/my-employee'\nimport { certificateFacts, mayIssueCertificate, mayReadCertificate } from './employment-certificate-rules'\nimport { CAREER_TEMPLATE, EMPLOYMENT_TEMPLATE } from './employment-certificate-templates'\n\n/*\n * 재직증명서 · 경력증명서 - issued documents of the employment, which organization owns (ADR-0176 decision 5). An employee\n * issues their own 재직증명서 (`employee-self`); everyone else's, and every 경력증명서, under `employee-certificate`\n * (`organization.certificates-issuing`). No birth date or address is printed (Q2).\n */\nexport const EMPLOYMENT_CERTIFICATE_KIND = 'organization.employment-certificate'\nexport const CAREER_CERTIFICATE_KIND = 'organization.career-certificate'\n\n/* Asked here only - no field gates on it - so declared here, or no role could be granted it. */\ndeclarePrivileges('organization employment certificates', [\n  ['employee-certificate', 'query'],\n  ['employee-certificate', 'mutation']\n])\n\n/** What the caller holds, asked as the doors ask it. */\nasync function holds(context: any, category: string, privilege: 'query' | 'mutation'): Promise<boolean> {\n  const { domain, user, unsafeIP, prohibitedPrivileges } = context?.state ?? {}\n  if (!domain || !user) return false\n  return !!(await checkPermission({ category, privilege, owner: true } as any, user, domain, unsafeIP, prohibitedPrivileges))\n}\n\n/** Who is asking about whom: theirs, and what they hold. */\nasync function standingOf(context: any, employeeId: string | null | undefined) {\n  return {\n    own: !!employeeId && (await myEmployeeIds(context)).includes(employeeId),\n    self: await holds(context, 'employee-self', 'mutation'),\n    issuing: await holds(context, 'employee-certificate', 'mutation'),\n    reading: await holds(context, 'employee-certificate', 'query')\n  }\n}\n\nasync function employeeOf(context: any, id: string): Promise<Employee> {\n  const { domain, tx } = context.state\n  const employee = await getRepository(Employee, tx).findOne({ where: { id, domain: { id: domain.id } }, relations: ['department'] })\n  if (!employee) throw new Refusal('employee-not-found', {}, 'the employee was not found')\n  return employee\n}\n\nfor (const kind of [EMPLOYMENT_CERTIFICATE_KIND, CAREER_CERTIFICATE_KIND] as const) {\n  const career = kind === CAREER_CERTIFICATE_KIND\n  registerIssuedDocumentKind({\n    kind,\n    prefix: career ? '경력' : '재직',\n    refType: 'Employee',\n    template: { content_template: career ? CAREER_TEMPLATE : EMPLOYMENT_TEMPLATE, page_size: 'A4' },\n    async dataOf(context, refId, input) {\n      const employee = await employeeOf(context, refId)\n      const facts = certificateFacts(kind, employee, calendarDay(context.state.domain.timezone))\n      return { subjectName: employee.name ?? '', data: { employee: facts } }\n    },\n    /* One's own employee record - issued from 내 정보 › 내 증명서 (the issuance ledger). */\n    async ownSubject(context) {\n      const mine = await myEmployeeIds(context)\n      return mine.length === 1 ? mine[0] : null\n    },\n    async mayIssue(context, refId) {\n      return mayIssueCertificate(kind, await standingOf(context, refId))\n    },\n    async mayRead(context, row) {\n      return mayReadCertificate(await standingOf(context, row.refId))\n    }\n  })\n}\n"]}
+{"version":3,"file":"employment-certificates.js","sourceRoot":"","sources":["../../../server/service/certificate/employment-certificates.ts"],"names":[],"mappings":";;;AAAA,yDAA2E;AAC3E,6CAAgE;AAChE,iDAA2E;AAE3E,mDAA+C;AAC/C,yDAAuD;AACvD,iFAA0G;AAC1G,yFAAyF;AAEzF;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,qCAAqC,CAAA;AACnE,QAAA,uBAAuB,GAAG,iCAAiC,CAAA;AAExE,gGAAgG;AAChG,IAAA,6BAAiB,EAAC,sCAAsC,EAAE;IACxD,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACjC,CAAC,sBAAsB,EAAE,UAAU,CAAC;CACrC,CAAC,CAAA;AAEF,4DAA4D;AAC5D,KAAK,UAAU,UAAU,CAAC,OAAY,EAAE,UAAqC;IAC3E,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACxE,IAAI,EAAE,MAAM,IAAA,wBAAY,EAAC,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC;QAC9D,OAAO,EAAE,MAAM,IAAA,wBAAY,EAAC,OAAO,EAAE,sBAAsB,EAAE,UAAU,CAAC;QACxE,OAAO,EAAE,MAAM,IAAA,wBAAY,EAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC;KACtE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAY,EAAE,EAAU;IAChD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,mBAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACnI,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAO,CAAC,oBAAoB,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACxF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,MAAM,IAAI,IAAI,CAAC,mCAA2B,EAAE,+BAAuB,CAAU,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,KAAK,+BAAuB,CAAA;IAC/C,IAAA,gCAA0B,EAAC;QACzB,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC5B,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,kDAAe,CAAC,CAAC,CAAC,sDAAmB,EAAE,SAAS,EAAE,IAAI,EAAE;QAC/F,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK;YAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACjD,MAAM,KAAK,GAAG,IAAA,+CAAgB,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC1F,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAA;QACxE,CAAC;QACD,iFAAiF;QACjF,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,MAAM,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3C,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK;YAC3B,OAAO,IAAA,kDAAmB,EAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACpE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG;YACxB,OAAO,IAAA,iDAAkB,EAAC,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { declarePrivileges, requestHolds } from '@things-factory/auth-base'\nimport { registerIssuedDocumentKind } from '@things-factory/pdf'\nimport { calendarDay, getRepository, Refusal } from '@things-factory/shell'\n\nimport { Employee } from '../employee/employee'\nimport { myEmployeeIds } from '../employee/my-employee'\nimport { certificateFacts, mayIssueCertificate, mayReadCertificate } from './employment-certificate-rules'\nimport { CAREER_TEMPLATE, EMPLOYMENT_TEMPLATE } from './employment-certificate-templates'\n\n/*\n * 재직증명서 · 경력증명서 - issued documents of the employment, which organization owns (ADR-0176 decision 5). An employee\n * issues their own 재직증명서 (`employee-self`); everyone else's, and every 경력증명서, under `employee-certificate`\n * (`organization.certificates-issuing`). No birth date or address is printed (Q2).\n */\nexport const EMPLOYMENT_CERTIFICATE_KIND = 'organization.employment-certificate'\nexport const CAREER_CERTIFICATE_KIND = 'organization.career-certificate'\n\n/* Asked here only - no field gates on it - so declared here, or no role could be granted it. */\ndeclarePrivileges('organization employment certificates', [\n  ['employee-certificate', 'query'],\n  ['employee-certificate', 'mutation']\n])\n\n/** Who is asking about whom: theirs, and what they hold. */\nasync function standingOf(context: any, employeeId: string | null | undefined) {\n  return {\n    own: !!employeeId && (await myEmployeeIds(context)).includes(employeeId),\n    self: await requestHolds(context, 'employee-self', 'mutation'),\n    issuing: await requestHolds(context, 'employee-certificate', 'mutation'),\n    reading: await requestHolds(context, 'employee-certificate', 'query')\n  }\n}\n\nasync function employeeOf(context: any, id: string): Promise<Employee> {\n  const { domain, tx } = context.state\n  const employee = await getRepository(Employee, tx).findOne({ where: { id, domain: { id: domain.id } }, relations: ['department'] })\n  if (!employee) throw new Refusal('employee-not-found', {}, 'the employee was not found')\n  return employee\n}\n\nfor (const kind of [EMPLOYMENT_CERTIFICATE_KIND, CAREER_CERTIFICATE_KIND] as const) {\n  const career = kind === CAREER_CERTIFICATE_KIND\n  registerIssuedDocumentKind({\n    kind,\n    prefix: career ? '경력' : '재직',\n    refType: 'Employee',\n    template: { content_template: career ? CAREER_TEMPLATE : EMPLOYMENT_TEMPLATE, page_size: 'A4' },\n    async dataOf(context, refId, input) {\n      const employee = await employeeOf(context, refId)\n      const facts = certificateFacts(kind, employee, calendarDay(context.state.domain.timezone))\n      return { subjectName: employee.name ?? '', data: { employee: facts } }\n    },\n    /* One's own employee record - issued from 내 정보 › 내 증명서 (the issuance ledger). */\n    async ownSubject(context) {\n      const mine = await myEmployeeIds(context)\n      return mine.length === 1 ? mine[0] : null\n    },\n    async mayIssue(context, refId) {\n      return mayIssueCertificate(kind, await standingOf(context, refId))\n    },\n    async mayRead(context, row) {\n      return mayReadCertificate(await standingOf(context, row.refId))\n    }\n  })\n}\n"]}