@tomei/sso 0.53.6 → 0.54.2

package/src/components/user-group/user-group.ts

@@ -646,4 +646,52 @@ export class UserGroup extends ObjectBase {
       throw error;
     }
   }
+
+  public static isUserMemberOfGroup(
+    dbTransaction: any,
+    loginUser: LoginUser,
+    UserId: number,
+    GroupCode: string,
+  ): Promise<boolean> {
+    return new Promise(async (resolve, reject) => {
+      try {
+        // Part 1: Privilege Checking
+        // Call loginUser.checkPrivileges() to ensure the user has permission to retrieve system access information.
+        // SystemCode: Retrieve from app config.
+        // PrivilegeCode: 'USER_GROUP_VIEW'.
+        const systemCode =
+          ApplicationConfig.getComponentConfigValue('system-code');
+        const isPrivileged = await loginUser.checkPrivileges(
+          systemCode,
+          'USER_GROUP_VIEW',
+        );
+        // If the privilege check fails, throw an error with a 403 Forbidden status.
+        if (!isPrivileged) {
+          throw new ClassError(
+            'UserGroup',
+            'UserGroupErrMsg0X',
+            'User does not have privilege to view user group.',
+            'isUserMemberOfGroup',
+            403,
+          );
+        }
+        // Part 2: Retrieve User Group
+        // Query the sso_UserGroup table to find the user group record with the given UserId and GroupCode.
+        // If the record exists, return true; otherwise, return false.
+        const userGroup = await UserGroup.findOne(
+          dbTransaction,
+          loginUser,
+          GroupCode,
+          UserId,
+        );
+        if (userGroup) {
+          resolve(true);
+        } else {
+          resolve(false);
+        }
+      } catch (error) {
+        reject(error);
+      }
+    });
+  }
 }

package/src/components/user-system-access/user-system-access.ts

@@ -11,7 +11,8 @@ import GroupSystemAccessModel from '../../models/group-system-access.entity';
 import UserModel from '../../models/user.entity';
 import { ActionEnum, Activity } from '@tomei/activity-history';
 import { Op } from 'sequelize';
-
+import { UserPrivilegeRepository } from '../user-privilege/user-privilege.repository';
+import UserGroupModel from 'models/user-group.entity';
 export class UserSystemAccess extends ObjectBase {
   ObjectType = 'UserSystemAccess';
   TableName = 'sso_UserSystemAccess';
@@ -43,6 +44,7 @@ export class UserSystemAccess extends ObjectBase {
   }
 
   private static _Repository = new UserSystemAccessRepository();
+  private static _UserPrivilegeRepo = new UserPrivilegeRepository();
 
   private constructor(userSystemAccessAttr?: IUserSystemAccess) {
     super();
@@ -311,16 +313,18 @@ export class UserSystemAccess extends ObjectBase {
         transaction: dbTransaction,
       });
 
-      const systemAccessUserPrivileges = allPrivileges.map((privilege) => {
-        const filteredUsers = allSystemAccessUsers
-          .map((userAccess) => userAccess.User)
-          .filter((user) => search.UserId.includes(String(user.UserId)));
+      const systemAccessUserPrivileges = allPrivileges.map(
+        async (privilege) => {
+          const filteredUsers = allSystemAccessUsers
+            .map((userAccess) => userAccess.User)
+            .filter((user) => search.UserId.includes(String(user.UserId)));
 
-        return {
-          ...privilege.get({ plain: true }),
-          Users: filteredUsers,
-        };
-      });
+          return {
+            ...privilege.get({ plain: true }),
+            Users: filteredUsers,
+          };
+        },
+      );
 
       return systemAccessUserPrivileges;
     } catch (error) {

package/tsconfig.build.json

@@ -1,6 +1,6 @@
-{
-  "extends": "./tsconfig.json",
-  "include": ["**/*.ts"],
-  "exclude": ["node_modules", "__tests__", "dist", "**/*spec.ts"]
-}
+{
+  "extends": "./tsconfig.json",
+  "include": ["**/*.ts"],
+  "exclude": ["node_modules", "__tests__", "dist", "**/*spec.ts"]
+}
   

package/tsconfig.json

@@ -1,24 +1,24 @@
-{
-  "compilerOptions": {
-    "module": "commonjs",
-    "declaration": true,
-    "removeComments": true,
-    "emitDecoratorMetadata": true,
-    "experimentalDecorators": true,
-    "allowSyntheticDefaultImports": true,
-    "moduleResolution": "node",
-    "target": "es6",
-    "sourceMap": true,
-    "outDir": "./dist",
-    "baseUrl": "./src",
-    "rootDir": "./",
-    "incremental": true,
-    "skipLibCheck": true,
-    "noImplicitAny": false,
-    "strictBindCallApply": false,
-    "forceConsistentCasingInFileNames": false,
-    "noFallthroughCasesInSwitch": false,
-    "strictNullChecks": false,
-  },
-  "exclude": ["node_modules", "dist"]
+{
+  "compilerOptions": {
+    "module": "commonjs",
+    "declaration": true,
+    "removeComments": true,
+    "emitDecoratorMetadata": true,
+    "experimentalDecorators": true,
+    "allowSyntheticDefaultImports": true,
+    "moduleResolution": "node",
+    "target": "es6",
+    "sourceMap": true,
+    "outDir": "./dist",
+    "baseUrl": "./src",
+    "rootDir": "./",
+    "incremental": true,
+    "skipLibCheck": true,
+    "noImplicitAny": false,
+    "strictBindCallApply": false,
+    "forceConsistentCasingInFileNames": false,
+    "noFallthroughCasesInSwitch": false,
+    "strictNullChecks": false,
+  },
+  "exclude": ["node_modules", "dist"]
 }

package/dist/__tests__/unit/components/group-privilege/group-privilege.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/unit/components/group-privilege/group-privilege.test.js

@@ -1,71 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const group_privilege_1 = require("../../../../src/components/group-privilege/group-privilege");
-const group_privilege_repository_1 = require("../../../../src/components/group-privilege/group-privilege.repository");
-const general_1 = require("@tomei/general");
-describe('GroupPrivilege', () => {
-    afterEach(() => {
-        jest.restoreAllMocks();
-    });
-    it('should initialize with GroupPrivilegeAttr', () => __awaiter(void 0, void 0, void 0, function* () {
-        const mockGroupPrivilegeAttr = {
-            GroupPrivilegeId: 1,
-            GroupCode: 'group1',
-            PrivilegeCode: 'privilege1',
-            Status: 'active',
-            CreatedAt: new Date(),
-            UpdatedAt: new Date(),
-            CreatedById: 1,
-            UpdatedById: 1,
-        };
-        const findOneMock = jest
-            .spyOn(group_privilege_repository_1.GroupPrivilegeRepository.prototype, 'findOne')
-            .mockResolvedValueOnce({ get: jest.fn().mockReturnValue(mockGroupPrivilegeAttr) });
-        const groupPrivilege = yield group_privilege_1.GroupPrivilege.init(null, 1);
-        expect(findOneMock).toBeCalledWith({
-            where: { GroupPrivilegeId: 1 },
-            transaction: null,
-        });
-        expect(groupPrivilege).toBeInstanceOf(group_privilege_1.GroupPrivilege);
-        expect(groupPrivilege.GroupPrivilegeId).toEqual(mockGroupPrivilegeAttr.GroupPrivilegeId);
-        expect(groupPrivilege.GroupCode).toEqual(mockGroupPrivilegeAttr.GroupCode);
-        expect(groupPrivilege.PrivilegeCode).toEqual(mockGroupPrivilegeAttr.PrivilegeCode);
-        expect(groupPrivilege.Status).toEqual(mockGroupPrivilegeAttr.Status);
-        expect(groupPrivilege.CreatedAt).toEqual(mockGroupPrivilegeAttr.CreatedAt);
-        expect(groupPrivilege.UpdatedAt).toEqual(mockGroupPrivilegeAttr.UpdatedAt);
-        expect(groupPrivilege.CreatedById).toEqual(mockGroupPrivilegeAttr.CreatedById);
-        expect(groupPrivilege.UpdatedById).toEqual(mockGroupPrivilegeAttr.UpdatedById);
-    }));
-    it('should throw ClassError when GroupPrivilegeAttr is not found', () => __awaiter(void 0, void 0, void 0, function* () {
-        const findOneMock = jest
-            .spyOn(group_privilege_repository_1.GroupPrivilegeRepository.prototype, 'findOne')
-            .mockResolvedValueOnce(null);
-        yield expect(group_privilege_1.GroupPrivilege.init(null, 1)).rejects.toThrow(general_1.ClassError);
-        expect(findOneMock).toBeCalledWith({
-            where: { GroupPrivilegeId: 1 },
-            transaction: null,
-        });
-    }));
-    it('should initialize with default values', () => __awaiter(void 0, void 0, void 0, function* () {
-        const groupPrivilege = yield group_privilege_1.GroupPrivilege.init();
-        expect(groupPrivilege).toBeInstanceOf(group_privilege_1.GroupPrivilege);
-        expect(groupPrivilege.GroupPrivilegeId).toBeUndefined();
-        expect(groupPrivilege.GroupCode).toBeUndefined();
-        expect(groupPrivilege.PrivilegeCode).toBeUndefined();
-        expect(groupPrivilege.Status).toBeUndefined();
-        expect(groupPrivilege.CreatedAt).toBeUndefined();
-        expect(groupPrivilege.UpdatedAt).toBeUndefined();
-        expect(groupPrivilege.CreatedById).toBeUndefined();
-        expect(groupPrivilege.UpdatedById).toBeUndefined();
-    }));
-});
-//# sourceMappingURL=group-privilege.test.js.map

package/dist/__tests__/unit/components/group-privilege/group-privilege.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"group-privilege.test.js","sourceRoot":"","sources":["../../../../../__tests__/unit/components/group-privilege/group-privilege.test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,gGAA4F;AAC5F,sHAAiH;AACjH,4CAA4C;AAE5C,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAS,EAAE;QACzD,MAAM,sBAAsB,GAAG;YAC7B,gBAAgB,EAAE,CAAC;YACnB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;SACf,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI;aACrB,KAAK,CAAC,qDAAwB,CAAC,SAAS,EAAE,SAAS,CAAC;aACpD,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAS,CAAC,CAAC;QAE5F,MAAM,cAAc,GAAG,MAAM,gCAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC;YACjC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,gCAAc,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QACzF,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACnF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAS,EAAE;QAC5E,MAAM,WAAW,GAAG,IAAI;aACrB,KAAK,CAAC,qDAAwB,CAAC,SAAS,EAAE,SAAS,CAAC;aACpD,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,MAAM,CAAC,gCAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAU,CAAC,CAAC;QAEvE,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC;YACjC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAS,EAAE;QACrD,MAAM,cAAc,GAAG,MAAM,gCAAc,CAAC,IAAI,EAAE,CAAC;QAEnD,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,CAAC,gCAAc,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;IACrD,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/unit/components/login-user/login-user.spec.js

@@ -1,6 +0,0 @@
-describe('LoginUser', () => {
-    it('should be true', () => {
-        expect(true).toBe(true);
-    });
-});
-//# sourceMappingURL=login-user.spec.js.map

package/dist/__tests__/unit/components/login-user/login-user.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-user.spec.js","sourceRoot":"","sources":["../../../../../__tests__/unit/components/login-user/login-user.spec.ts"],"names":[],"mappings":"AAuuBA,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}