@tomei/sso 0.46.8 → 0.46.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomei/sso",
-  "version": "0.46.8",
+  "version": "0.46.9",
   "description": "Tomei SSO Package",
   "main": "dist/index.js",
   "scripts": {

package/src/components/user-privilege/user-privilege.ts

@@ -1,6 +1,14 @@
 import { ClassError, ObjectBase } from '@tomei/general';
 import { IUserPrivilegeAttr } from '../../interfaces/user-privilege.interface';
 import { UserPrivilegeRepository } from './user-privilege.repository';
+import { User as UserClass } from '../login-user/user';
+import { ApplicationConfig } from '@tomei/config';
+import SystemPrivilegeModel from '../../models/system-privilege.entity';
+import SystemModel from '../../models/system.entity';
+import { UserGroupRepository } from '../user-group/user-group.repository';
+import GroupModel from '../../models/group.entity';
+import User from '../../models/user.entity';
+import { GroupPrivilegeRepository } from '../group-privilege/group-privilege.repository';
 
 export class UserPrivilege extends ObjectBase {
   TableName = 'sso_UserPrivilege';
@@ -33,6 +41,8 @@ export class UserPrivilege extends ObjectBase {
   }
 
   private static _Repository = new UserPrivilegeRepository();
+  private static _UserGroupRepository = new UserGroupRepository();
+  private static _GroupPrivilegeRepository = new GroupPrivilegeRepository();
 
   private constructor(userPrivilegeAttr?: IUserPrivilegeAttr) {
     super();
@@ -71,4 +81,259 @@ export class UserPrivilege extends ObjectBase {
       throw error;
     }
   }
+
+  public static async findAll(
+    loginUser: UserClass, //The currently logged-in user initiating the request.
+    dbTransaction: any, //The active database transaction to ensure consistency during the query.
+    whereOption: {
+      //An object containing filter criteria, specifically:
+      UserId: number; //The ID of the user whose system access records are to be retrieved.
+      SystemCode?: string;
+    },
+    pagination: {
+      //An object containing pagination parameters:
+      page: number; //The current page number to retrieve.
+      limit: number; //The number of records to retrieve per page.
+    },
+  ): Promise<{
+    records: {
+      UserPrivilegeId: number;
+      SystemPrivilegeId: string;
+      PrivilegeCode: string;
+      SystemName: string;
+      Status: string;
+      CreatedBy: string;
+      CreatedAt: Date;
+      UpdatedBy: string;
+      UpdatedAt: Date;
+    }[];
+    pagination: {
+      currentPage: number;
+      pageSize: number;
+      totalRecords: number;
+    };
+  }> {
+    try {
+      // Privilege Checking:
+      // Call loginUser.checkPrivileges() method by passing:
+      // SystemCode: Retrieve from app config.
+      //   PrivilegeCode: 'USER_PRIVILEGE_LIST'.
+      const systemCode =
+        ApplicationConfig.getComponentConfigValue('system-code');
+      const privilegeCode = 'USER_PRIVILEGE_LIST';
+      const isPrivileged = await loginUser.checkPrivileges(
+        systemCode,
+        privilegeCode,
+      );
+      if (!isPrivileged) {
+        throw new ClassError(
+          'UserPrivilege',
+          'UserPrivilegeErrMsg01',
+          'You do not have permission to access this resource.',
+        );
+      }
+
+      const options: any = {
+        where: {
+          UserId: whereOption.UserId,
+        },
+        offset: (pagination.page - 1) * pagination.limit,
+        limit: pagination.limit,
+        transaction: dbTransaction,
+        include: [
+          {
+            model: SystemPrivilegeModel,
+            attributes: ['PrivilegeCode'],
+            include: [
+              {
+                model: SystemModel,
+                attributes: ['Name'],
+              },
+            ],
+          },
+          {
+            model: User,
+            as: 'CreatedByUser',
+            attributes: ['FullName'],
+          },
+          {
+            model: User,
+            as: 'UpdatedByUser',
+            attributes: ['FullName'],
+          },
+        ],
+      };
+      const { count, rows } = await this._Repository.findAllWithPagination(
+        options,
+      );
+      return {
+        records: rows.map((record) => {
+          return {
+            UserPrivilegeId: record.UserPrivilegeId,
+            SystemPrivilegeId: record.SystemPrivilegeId,
+            PrivilegeCode: record.Privilege.PrivilegeCode,
+            SystemName: record.Privilege.System.Name,
+            Status: record.Status,
+            CreatedBy: record.CreatedByUser.FullName,
+            CreatedAt: record.CreatedAt,
+            UpdatedBy: record.UpdatedByUser.FullName,
+            UpdatedAt: record.UpdatedAt,
+          };
+        }),
+        pagination: {
+          currentPage: pagination.page,
+          pageSize: pagination.limit,
+          totalRecords: count,
+        },
+      };
+    } catch (error) {
+      throw error;
+    }
+  }
+
+  public static async findAllInheritedPrivileges(
+    UserId: number, //The ID of the user for whom privileges are being retrieved.
+    loginUser: UserClass, //The currently logged-in user initiating the request.
+    dbTransaction: any, //The active database transaction to ensure consistency during the query.
+  ) {
+    try {
+      // Part 1: Privilege Checking
+      // Call loginUser.checkPrivileges() to ensure the user has permission to retrieve system access information.
+      // SystemCode: Retrieve from app config.
+      // PrivilegeCode: 'USER_PRIVILEGE_LIST'.
+      // If the privilege check fails, throw an error with a 403 Forbidden status.
+      const systemCode =
+        ApplicationConfig.getComponentConfigValue('system-code');
+      const privilegeCode = 'USER_PRIVILEGE_LIST';
+      const isPrivileged = await loginUser.checkPrivileges(
+        systemCode,
+        privilegeCode,
+      );
+      if (!isPrivileged) {
+        throw new ClassError(
+          'UserPrivilege',
+          'UserPrivilegeErrMsg01',
+          'You do not have permission to access this resource.',
+        );
+      }
+
+      // Part 2: Retrieve User Groups
+      // Query the sso_UserGroup table to find all active groups the user belongs to.
+      // Join with the sso_Group table to retrieve the GroupCode, GroupName, and InheritGroupPrivilegeYNfields.
+      // Ensure that the value of InheritGroupPrivilegeYN is explicitly 'Y' or 'N' for each group.
+      // If InheritGroupPrivilegeYN is not set, default it to 'N'.
+      // Return only active groups (based on Status field).
+      // The query should return the following fields for each group:
+      // - GroupCode
+      // - GroupName
+      // - InheritPrivilegeYN
+
+      const userGroups = await UserPrivilege._UserGroupRepository.findAll({
+        where: {
+          UserId,
+        },
+        include: [
+          {
+            model: GroupModel,
+            attributes: ['GroupCode', 'Name', 'InheritParentPrivilegeYN'],
+          },
+        ],
+        transaction: dbTransaction,
+      });
+
+      const listOfGroups = userGroups.map((groups) => {
+        let inheritPrivilegeYN = groups.InheritGroupPrivilegeYN;
+        if (inheritPrivilegeYN !== 'Y') {
+          inheritPrivilegeYN = 'N';
+        }
+        return {
+          GroupCode: groups.GroupCode,
+          GroupName: groups.Group.Name,
+          InheritPrivilegeYN: inheritPrivilegeYN,
+          Status: groups.Status,
+        };
+      });
+
+      // Part 3: Retrieve System Privilege for Groups with Inheritance
+      // For each group where InheritGroupPrivilegeYN = 'Y', query the sso_GroupPrivilege table to retrieve system privilege details.
+      // Join with the sso_SystemPrivilege table to fetch system details (PrivilegeCode).
+      // Ensure only active group privilege (Status = 'Active') are included.
+      // For each privilege, retrieve the following fields:
+      // - GroupPrivilegeId (from sso_GroupPrivilege.GroupPrivilegeId)
+      // - SystemPrivilegeId (from sso_GroupPrivilege.SystemPrivilegeId)
+      // - PrivilegeCode (from sso_SystemPrivilege.SystemCode)
+      // - Status (from sso_GroupPrivilege.Status)
+      // - CreatedAt (from sso_GroupPrivilege.CreatedAt)
+      // - UpdatedAt (from sso_GroupPrivilege.UpdatedAt)
+
+      const userGroupPrivilege = [];
+      for (let i = 0; i < listOfGroups.length; i++) {
+        const group = await listOfGroups[i];
+        const data = {
+          GroupCode: group.GroupCode,
+          GroupName: group.GroupName,
+          InheritPrivilegeYN: group.InheritPrivilegeYN,
+          systems: [],
+        };
+
+        // Part 4: Handling Non-Inherited Groups
+        // For groups where InheritGroupSPrivilegeYN = 'N', return the group details without group privilege records.
+        // Set the Privileges field to an empty array or null to indicate no inherited privilege for those groups.
+        if (group.InheritPrivilegeYN === 'Y') {
+          if (group.Status === 'Active') {
+            const options: any = {
+              where: {
+                GroupCode: group.GroupCode,
+                Status: 'Active',
+              },
+              transaction: dbTransaction,
+              include: [
+                {
+                  model: SystemPrivilegeModel,
+                  attributes: ['PrivilegeCode'],
+                  include: [
+                    {
+                      model: SystemModel,
+                      attributes: ['Name'],
+                    },
+                  ],
+                },
+                {
+                  model: User,
+                  as: 'CreatedByUser',
+                  attributes: ['FullName'],
+                },
+                {
+                  model: User,
+                  as: 'UpdatedByUser',
+                  attributes: ['FullName'],
+                },
+              ],
+            };
+            const systemPrivilege =
+              await this._GroupPrivilegeRepository.findAll(options);
+
+            const privilegeDetails = systemPrivilege.map((record) => {
+              return {
+                GroupPrivilegeId: record.GroupPrivilegeId,
+                SystemPrivilegeId: record.SystemPrivilegeId,
+                PrivilegeCode: record.Privilege.PrivilegeCode,
+                Status: record.Status,
+                CreatedBy: record.CreatedByUser.FullName,
+                CreatedAt: record.CreatedAt,
+                UpdatedBy: record.UpdatedByUser.FullName,
+                UpdatedAt: record.UpdatedAt,
+              };
+            });
+
+            data.systems = privilegeDetails;
+          }
+        }
+        userGroupPrivilege.push(data);
+      }
+      return userGroupPrivilege;
+    } catch (error) {
+      throw error;
+    }
+  }
 }