@webda/core 1.5.0 → 1.6.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/application.d.ts +0 -7
- package/lib/application.js +20 -18
- package/lib/application.js.map +1 -1
- package/lib/application.spec.js +32 -11
- package/lib/application.spec.js.map +1 -1
- package/lib/core.d.ts +20 -2
- package/lib/core.js +73 -32
- package/lib/core.js.map +1 -1
- package/lib/core.spec.js +7 -7
- package/lib/core.spec.js.map +1 -1
- package/lib/index.d.ts +3 -0
- package/lib/index.js +3 -0
- package/lib/index.js.map +1 -1
- package/lib/models/aclmodel.d.ts +40 -1
- package/lib/models/aclmodel.js +55 -0
- package/lib/models/aclmodel.js.map +1 -1
- package/lib/models/aclmodel.spec.js +17 -5
- package/lib/models/aclmodel.spec.js.map +1 -1
- package/lib/models/coremodel.d.ts +22 -6
- package/lib/models/coremodel.js +15 -7
- package/lib/models/coremodel.js.map +1 -1
- package/lib/models/coremodel.spec.js +6 -7
- package/lib/models/coremodel.spec.js.map +1 -1
- package/lib/models/ownermodel.spec.js +11 -11
- package/lib/models/ownermodel.spec.js.map +1 -1
- package/lib/models/user.d.ts +2 -0
- package/lib/models/user.js +4 -2
- package/lib/models/user.js.map +1 -1
- package/lib/models/user.spec.js +9 -2
- package/lib/models/user.spec.js.map +1 -1
- package/lib/queues/filequeue.js +6 -5
- package/lib/queues/filequeue.js.map +1 -1
- package/lib/queues/filequeue.spec.js +3 -3
- package/lib/queues/filequeue.spec.js.map +1 -1
- package/lib/queues/pubsubservice.d.ts +27 -0
- package/lib/queues/pubsubservice.js +21 -0
- package/lib/queues/pubsubservice.js.map +1 -0
- package/lib/queues/queueservice.d.ts +3 -16
- package/lib/queues/queueservice.js +2 -13
- package/lib/queues/queueservice.js.map +1 -1
- package/lib/services/authentication.js +11 -6
- package/lib/services/authentication.js.map +1 -1
- package/lib/services/authentication.spec.js +14 -7
- package/lib/services/authentication.spec.js.map +1 -1
- package/lib/services/binary.js +11 -6
- package/lib/services/binary.js.map +1 -1
- package/lib/services/binary.spec.d.ts +6 -6
- package/lib/services/binary.spec.js +22 -21
- package/lib/services/binary.spec.js.map +1 -1
- package/lib/services/configuration.d.ts +9 -0
- package/lib/services/configuration.js +27 -2
- package/lib/services/configuration.js.map +1 -1
- package/lib/services/configuration.spec.js +19 -2
- package/lib/services/configuration.spec.js.map +1 -1
- package/lib/services/cron.spec.js +2 -2
- package/lib/services/cron.spec.js.map +1 -1
- package/lib/services/filebinary.js +9 -12
- package/lib/services/filebinary.js.map +1 -1
- package/lib/services/filebinary.spec.js +1 -1
- package/lib/services/filebinary.spec.js.map +1 -1
- package/lib/services/fileconfiguration.d.ts +7 -1
- package/lib/services/fileconfiguration.js +9 -0
- package/lib/services/fileconfiguration.js.map +1 -1
- package/lib/services/fileconfiguration.spec.js +83 -4
- package/lib/services/fileconfiguration.spec.js.map +1 -1
- package/lib/services/kubernetesconfiguration.d.ts +6 -0
- package/lib/services/kubernetesconfiguration.js +13 -0
- package/lib/services/kubernetesconfiguration.js.map +1 -1
- package/lib/services/kubernetesconfiguration.spec.js +40 -16
- package/lib/services/kubernetesconfiguration.spec.js.map +1 -1
- package/lib/services/mailer.d.ts +51 -2
- package/lib/services/mailer.js +24 -9
- package/lib/services/mailer.js.map +1 -1
- package/lib/services/mailer.spec.js +1 -1
- package/lib/services/mailer.spec.js.map +1 -1
- package/lib/services/oauth.js +1 -1
- package/lib/services/oauth.js.map +1 -1
- package/lib/services/service.d.ts +10 -0
- package/lib/services/service.js +35 -5
- package/lib/services/service.js.map +1 -1
- package/lib/services/service.spec.js +28 -5
- package/lib/services/service.spec.js.map +1 -1
- package/lib/stores/aggregator.d.ts +43 -0
- package/lib/stores/aggregator.js +106 -0
- package/lib/stores/aggregator.js.map +1 -0
- package/lib/stores/file.d.ts +1 -1
- package/lib/stores/file.js +5 -5
- package/lib/stores/file.js.map +1 -1
- package/lib/stores/file.spec.d.ts +3 -1
- package/lib/stores/file.spec.js +48 -20
- package/lib/stores/file.spec.js.map +1 -1
- package/lib/stores/mapper.d.ts +151 -0
- package/lib/stores/mapper.js +294 -0
- package/lib/stores/mapper.js.map +1 -0
- package/lib/{policies/aclpolicy.spec.d.ts → stores/mapper.spec.d.ts} +0 -0
- package/lib/stores/mapper.spec.js +55 -0
- package/lib/stores/mapper.spec.js.map +1 -0
- package/lib/stores/memory.js +0 -3
- package/lib/stores/memory.js.map +1 -1
- package/lib/stores/memory.spec.d.ts +3 -1
- package/lib/stores/memory.spec.js +12 -0
- package/lib/stores/memory.spec.js.map +1 -1
- package/lib/stores/store.d.ts +31 -110
- package/lib/stores/store.js +51 -281
- package/lib/stores/store.js.map +1 -1
- package/lib/stores/store.spec.d.ts +12 -0
- package/lib/stores/store.spec.js +116 -24
- package/lib/stores/store.spec.js.map +1 -1
- package/lib/utils/context.d.ts +10 -0
- package/lib/utils/context.js +15 -3
- package/lib/utils/context.js.map +1 -1
- package/lib/utils/context.spec.js +5 -0
- package/lib/utils/context.spec.js.map +1 -1
- package/lib/utils/cookie.d.ts +12 -0
- package/lib/utils/cookie.js +13 -1
- package/lib/utils/cookie.js.map +1 -1
- package/lib/utils/cookie.spec.js +13 -13
- package/lib/utils/cookie.spec.js.map +1 -1
- package/lib/utils/serializers.js +4 -4
- package/lib/utils/serializers.js.map +1 -1
- package/lib/utils/serializers.spec.js +11 -11
- package/lib/utils/serializers.spec.js.map +1 -1
- package/lib/utils/waiter.js +1 -1
- package/lib/utils/waiter.js.map +1 -1
- package/lib/utils/waiter.spec.js +6 -6
- package/lib/utils/waiter.spec.js.map +1 -1
- package/package.json +11 -9
- package/test/config-file-no-reload.json +70 -0
- package/test/config-file-reload.json +7 -1
- package/test/config-kube-reload.json +7 -1
- package/test/config.json +35 -23
- package/test/config.old-default.json +0 -16
- package/test/config.old.json +0 -16
- package/lib/policies/aclpolicy.d.ts +0 -16
- package/lib/policies/aclpolicy.js +0 -72
- package/lib/policies/aclpolicy.js.map +0 -1
- package/lib/policies/aclpolicy.spec.js +0 -104
- package/lib/policies/aclpolicy.spec.js.map +0 -1
- package/lib/policies/ownerpolicy.d.ts +0 -25
- package/lib/policies/ownerpolicy.js +0 -80
- package/lib/policies/ownerpolicy.js.map +0 -1
- package/lib/policies/ownerpolicy.spec.d.ts +0 -1
- package/lib/policies/ownerpolicy.spec.js +0 -199
- package/lib/policies/ownerpolicy.spec.js.map +0 -1
- package/lib/policies/rolepolicy.d.ts +0 -10
- package/lib/policies/rolepolicy.js +0 -47
- package/lib/policies/rolepolicy.js.map +0 -1
- package/lib/policies/rolepolicy.spec.d.ts +0 -1
- package/lib/policies/rolepolicy.spec.js +0 -91
- package/lib/policies/rolepolicy.spec.js.map +0 -1
- package/lib/utils/json.d.ts +0 -8
- package/lib/utils/json.js +0 -74
- package/lib/utils/json.js.map +0 -1
- package/lib/utils/json.spec.d.ts +0 -1
- package/lib/utils/json.spec.js +0 -83
- package/lib/utils/json.spec.js.map +0 -1
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import { Context, User } from "../index";
|
|
2
|
-
declare const AclPolicyMixIn: (Sup: any) => {
|
|
3
|
-
new (): {
|
|
4
|
-
[x: string]: any;
|
|
5
|
-
__acls: Map<string, string>;
|
|
6
|
-
getAcls(): Map<string, string>;
|
|
7
|
-
setAcls(acls: Map<string, string>): void;
|
|
8
|
-
_httpGetAcls(ctx: any): Promise<Map<string, string>>;
|
|
9
|
-
_httpPutAcls(ctx: any): Promise<void>;
|
|
10
|
-
getGroups(ctx: Context, user: User): string[];
|
|
11
|
-
hasPermission(ctx: Context, user: User, action: string): Promise<boolean>;
|
|
12
|
-
canAct(ctx: Context, action: string): Promise<any>;
|
|
13
|
-
};
|
|
14
|
-
[x: string]: any;
|
|
15
|
-
};
|
|
16
|
-
export { AclPolicyMixIn };
|
|
@@ -1,72 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.AclPolicyMixIn = void 0;
|
|
13
|
-
const AclPolicyMixIn = Sup => class extends Sup {
|
|
14
|
-
constructor() {
|
|
15
|
-
super(...arguments);
|
|
16
|
-
this.__acls = new Map();
|
|
17
|
-
}
|
|
18
|
-
getAcls() {
|
|
19
|
-
return this.__acls;
|
|
20
|
-
}
|
|
21
|
-
setAcls(acls) {
|
|
22
|
-
this.__acls = acls;
|
|
23
|
-
}
|
|
24
|
-
_httpGetAcls(ctx) {
|
|
25
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
26
|
-
return this.__acls;
|
|
27
|
-
});
|
|
28
|
-
}
|
|
29
|
-
_httpPutAcls(ctx) {
|
|
30
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
31
|
-
this.__acls = ctx.body;
|
|
32
|
-
yield this.save();
|
|
33
|
-
});
|
|
34
|
-
}
|
|
35
|
-
// Should cache the user role in the session
|
|
36
|
-
getGroups(ctx, user) {
|
|
37
|
-
let groups = user.getGroups();
|
|
38
|
-
if (!groups) {
|
|
39
|
-
groups = [];
|
|
40
|
-
}
|
|
41
|
-
groups = groups.slice(0);
|
|
42
|
-
groups.push(user.uuid);
|
|
43
|
-
return groups;
|
|
44
|
-
}
|
|
45
|
-
hasPermission(ctx, user, action) {
|
|
46
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
47
|
-
let groups = this.getGroups(ctx, user);
|
|
48
|
-
for (let i in this.__acls) {
|
|
49
|
-
if (groups.indexOf(i) >= 0) {
|
|
50
|
-
if (this.__acls[i] === "all" || this.__acls[i].split(",").indexOf(action) >= 0) {
|
|
51
|
-
return true;
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
return false;
|
|
56
|
-
});
|
|
57
|
-
}
|
|
58
|
-
canAct(ctx, action) {
|
|
59
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
60
|
-
if (!this.__acls || !ctx.getCurrentUserId()) {
|
|
61
|
-
throw 403;
|
|
62
|
-
}
|
|
63
|
-
let user = yield ctx.getCurrentUser();
|
|
64
|
-
if (yield this.hasPermission(ctx, user, action)) {
|
|
65
|
-
return this;
|
|
66
|
-
}
|
|
67
|
-
throw 403;
|
|
68
|
-
});
|
|
69
|
-
}
|
|
70
|
-
};
|
|
71
|
-
exports.AclPolicyMixIn = AclPolicyMixIn;
|
|
72
|
-
//# sourceMappingURL=aclpolicy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"aclpolicy.js","sourceRoot":"","sources":["../../src/policies/aclpolicy.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;AAGb,MAAM,cAAc,GAAG,GAAG,CAAC,EAAE,CAC3B,KAAM,SAAQ,GAAG;IAAjB;;QACE,WAAM,GAAwB,IAAI,GAAG,EAAkB,CAAC;IAoD1D,CAAC;IAlDC,OAAO;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,IAAyB;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAEK,YAAY,CAAC,GAAG;;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;KAAA;IAEK,YAAY,CAAC,GAAG;;YACpB,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;YACvB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;KAAA;IAED,4CAA4C;IAC5C,SAAS,CAAC,GAAY,EAAE,IAAU;QAChC,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,GAAG,EAAE,CAAC;SACb;QACD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAEK,aAAa,CAAC,GAAY,EAAE,IAAU,EAAE,MAAc;;YAC1D,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE;gBACzB,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;oBAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;wBAC9E,OAAO,IAAI,CAAC;qBACb;iBACF;aACF;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KAAA;IAEK,MAAM,CAAC,GAAY,EAAE,MAAc;;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE;gBAC3C,MAAM,GAAG,CAAC;aACX;YACD,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;gBAC/C,OAAO,IAAI,CAAC;aACb;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;KAAA;CACF,CAAC;AAEK,wCAAc"}
|
|
@@ -1,104 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
-
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
-
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
-
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
-
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
-
};
|
|
8
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
9
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
10
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
11
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
12
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
13
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
14
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
15
|
-
});
|
|
16
|
-
};
|
|
17
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
18
|
-
const assert = require("assert");
|
|
19
|
-
const mocha_1 = require("@testdeck/mocha");
|
|
20
|
-
const index_1 = require("../index");
|
|
21
|
-
class AclPolicyModel extends index_1.AclPolicyMixIn(index_1.CoreModel) {
|
|
22
|
-
}
|
|
23
|
-
let AclPolicyTest = class AclPolicyTest {
|
|
24
|
-
before() {
|
|
25
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
26
|
-
this._webda = new index_1.Core(new index_1.Application(__dirname + "/../../test/config.json"));
|
|
27
|
-
this._ctx = yield this._webda.newContext(new index_1.HttpContext("test.webda.io", "GET", "/"));
|
|
28
|
-
this._session = this._ctx.getSession();
|
|
29
|
-
this._session.login("user-uid", "none");
|
|
30
|
-
this.model = new AclPolicyModel();
|
|
31
|
-
this._user = new index_1.User();
|
|
32
|
-
this._user.uuid = "user-uid";
|
|
33
|
-
this._user.addGroup("gip-123");
|
|
34
|
-
this._ctx.getCurrentUser = () => __awaiter(this, void 0, void 0, function* () {
|
|
35
|
-
return this._user;
|
|
36
|
-
});
|
|
37
|
-
});
|
|
38
|
-
}
|
|
39
|
-
get() {
|
|
40
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
41
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "get"));
|
|
42
|
-
this.model.__acls["gip-123"] = "get";
|
|
43
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "get"), this.model);
|
|
44
|
-
});
|
|
45
|
-
}
|
|
46
|
-
multipermissions() {
|
|
47
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
48
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
49
|
-
this.model.__acls["gip-123"] = "get,action";
|
|
50
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "get"), this.model);
|
|
51
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "action"), this.model);
|
|
52
|
-
});
|
|
53
|
-
}
|
|
54
|
-
multigroups() {
|
|
55
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
56
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
57
|
-
this.model.__acls["gip-124"] = "get,action";
|
|
58
|
-
this.model.__acls["gip-123"] = "get";
|
|
59
|
-
this.model.__acls["gip-122"] = "get,action";
|
|
60
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "get"), this.model);
|
|
61
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
62
|
-
});
|
|
63
|
-
}
|
|
64
|
-
userid() {
|
|
65
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
66
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
67
|
-
this.model.__acls["user-uid"] = "get";
|
|
68
|
-
this.model.__acls["gip-122"] = "get,action";
|
|
69
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "get"), this.model);
|
|
70
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
71
|
-
});
|
|
72
|
-
}
|
|
73
|
-
all() {
|
|
74
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
75
|
-
yield assert.rejects(this.model.canAct.bind(this.model, this._ctx, "action"));
|
|
76
|
-
this.model.__acls["gip-124"] = "get,action";
|
|
77
|
-
this.model.__acls["user-uid"] = "all";
|
|
78
|
-
this.model.__acls["gip-122"] = "get,action";
|
|
79
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "get"), this.model);
|
|
80
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "action"), this.model);
|
|
81
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "delete"), this.model);
|
|
82
|
-
assert.strictEqual(yield this.model.canAct(this._ctx, "whatever"), this.model);
|
|
83
|
-
});
|
|
84
|
-
}
|
|
85
|
-
};
|
|
86
|
-
__decorate([
|
|
87
|
-
mocha_1.test
|
|
88
|
-
], AclPolicyTest.prototype, "get", null);
|
|
89
|
-
__decorate([
|
|
90
|
-
mocha_1.test
|
|
91
|
-
], AclPolicyTest.prototype, "multipermissions", null);
|
|
92
|
-
__decorate([
|
|
93
|
-
mocha_1.test
|
|
94
|
-
], AclPolicyTest.prototype, "multigroups", null);
|
|
95
|
-
__decorate([
|
|
96
|
-
mocha_1.test
|
|
97
|
-
], AclPolicyTest.prototype, "userid", null);
|
|
98
|
-
__decorate([
|
|
99
|
-
mocha_1.test
|
|
100
|
-
], AclPolicyTest.prototype, "all", null);
|
|
101
|
-
AclPolicyTest = __decorate([
|
|
102
|
-
mocha_1.suite
|
|
103
|
-
], AclPolicyTest);
|
|
104
|
-
//# sourceMappingURL=aclpolicy.spec.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"aclpolicy.spec.js","sourceRoot":"","sources":["../../src/policies/aclpolicy.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iCAAiC;AACjC,2CAA8C;AAC9C,oCAAyG;AAEzG,MAAM,cAAe,SAAQ,sBAAc,CAAC,iBAAS,CAAC;CAAG;AAGzD,IAAM,aAAa,GAAnB,MAAM,aAAa;IAOX,MAAM;;YACV,IAAI,CAAC,MAAM,GAAG,IAAI,YAAI,CAAC,IAAI,mBAAW,CAAC,SAAS,GAAG,yBAAyB,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,mBAAW,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,YAAI,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,GAAS,EAAE;gBACpC,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC,CAAA,CAAC;QACJ,CAAC;KAAA;IAEW,GAAG;;YACb,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YACrC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC;KAAA;IACW,gBAAgB;;YAC1B,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC;KAAA;IAEW,WAAW;;YACrB,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,CAAC;KAAA;IAEW,MAAM;;YAChB,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,CAAC;KAAA;IAEW,GAAG;;YACb,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjF,CAAC;KAAA;CACF,CAAA;AAvCO;IAAL,YAAI;wCAIJ;AACK;IAAL,YAAI;qDAKJ;AAEK;IAAL,YAAI;gDAOJ;AAEK;IAAL,YAAI;2CAMJ;AAEK;IAAL,YAAI;wCASJ;AA3DG,aAAa;IADlB,aAAK;GACA,aAAa,CA4DlB"}
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import { Context } from "../index";
|
|
2
|
-
declare class OwnerPolicy {
|
|
3
|
-
_user: string;
|
|
4
|
-
public: boolean;
|
|
5
|
-
uuid: string;
|
|
6
|
-
/**
|
|
7
|
-
* Return false if can't create
|
|
8
|
-
*/
|
|
9
|
-
canCreate(ctx: Context): Promise<this>;
|
|
10
|
-
getOwner(): string;
|
|
11
|
-
canAct(ctx: Context, action: string): Promise<this>;
|
|
12
|
-
/**
|
|
13
|
-
* Return false if can't update
|
|
14
|
-
*/
|
|
15
|
-
canUpdate(ctx: Context): Promise<this>;
|
|
16
|
-
/**
|
|
17
|
-
* Return false if can't get
|
|
18
|
-
*/
|
|
19
|
-
canGet(ctx: Context): Promise<this>;
|
|
20
|
-
/**
|
|
21
|
-
* Return false if can't delete
|
|
22
|
-
*/
|
|
23
|
-
canDelete(ctx: Context): Promise<this>;
|
|
24
|
-
}
|
|
25
|
-
export { OwnerPolicy };
|
|
@@ -1,80 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.OwnerPolicy = void 0;
|
|
13
|
-
class OwnerPolicy {
|
|
14
|
-
/**
|
|
15
|
-
* Return false if can't create
|
|
16
|
-
*/
|
|
17
|
-
canCreate(ctx) {
|
|
18
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
19
|
-
this._user = ctx.getSession().getUserId();
|
|
20
|
-
if (!this._user) {
|
|
21
|
-
throw 403;
|
|
22
|
-
}
|
|
23
|
-
return this;
|
|
24
|
-
});
|
|
25
|
-
}
|
|
26
|
-
getOwner() {
|
|
27
|
-
return this._user;
|
|
28
|
-
}
|
|
29
|
-
canAct(ctx, action) {
|
|
30
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
31
|
-
if (action === "create") {
|
|
32
|
-
return this.canCreate(ctx);
|
|
33
|
-
}
|
|
34
|
-
else if (action === "update" || action === "attach_binary" || action === "detach_binary") {
|
|
35
|
-
return this.canUpdate(ctx);
|
|
36
|
-
}
|
|
37
|
-
else if (action === "get" || action === "get_binary") {
|
|
38
|
-
return this.canGet(ctx);
|
|
39
|
-
}
|
|
40
|
-
else if (action === "delete") {
|
|
41
|
-
return this.canDelete(ctx);
|
|
42
|
-
}
|
|
43
|
-
throw 403;
|
|
44
|
-
});
|
|
45
|
-
}
|
|
46
|
-
/**
|
|
47
|
-
* Return false if can't update
|
|
48
|
-
*/
|
|
49
|
-
canUpdate(ctx) {
|
|
50
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
51
|
-
// Allow to modify itself by default
|
|
52
|
-
if ((!this.getOwner() || ctx.getSession().getUserId() !== this.getOwner()) &&
|
|
53
|
-
ctx.getSession().getUserId() !== this.uuid) {
|
|
54
|
-
throw 403;
|
|
55
|
-
}
|
|
56
|
-
return this;
|
|
57
|
-
});
|
|
58
|
-
}
|
|
59
|
-
/**
|
|
60
|
-
* Return false if can't get
|
|
61
|
-
*/
|
|
62
|
-
canGet(ctx) {
|
|
63
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
64
|
-
if (this.public) {
|
|
65
|
-
return this;
|
|
66
|
-
}
|
|
67
|
-
return this.canUpdate(ctx);
|
|
68
|
-
});
|
|
69
|
-
}
|
|
70
|
-
/**
|
|
71
|
-
* Return false if can't delete
|
|
72
|
-
*/
|
|
73
|
-
canDelete(ctx) {
|
|
74
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
75
|
-
return this.canUpdate(ctx);
|
|
76
|
-
});
|
|
77
|
-
}
|
|
78
|
-
}
|
|
79
|
-
exports.OwnerPolicy = OwnerPolicy;
|
|
80
|
-
//# sourceMappingURL=ownerpolicy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"ownerpolicy.js","sourceRoot":"","sources":["../../src/policies/ownerpolicy.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;AAEb,MAAM,WAAW;IAIf;;OAEG;IACG,SAAS,CAAC,GAAY;;YAC1B,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACf,MAAM,GAAG,CAAC;aACX;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEK,MAAM,CAAC,GAAY,EAAE,MAAc;;YACvC,IAAI,MAAM,KAAK,QAAQ,EAAE;gBACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aAC5B;iBAAM,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe,EAAE;gBAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aAC5B;iBAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,EAAE;gBACtD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACzB;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE;gBAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aAC5B;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;KAAA;IACD;;OAEG;IACG,SAAS,CAAC,GAAY;;YAC1B,oCAAoC;YACpC,IACE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtE,GAAG,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,IAAI,EAC1C;gBACA,MAAM,GAAG,CAAC;aACX;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED;;OAEG;IACG,MAAM,CAAC,GAAY;;YACvB,IAAI,IAAI,CAAC,MAAM,EAAE;gBACf,OAAO,IAAI,CAAC;aACb;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;KAAA;IAED;;OAEG;IACG,SAAS,CAAC,GAAY;;YAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;KAAA;CACF;AAEQ,kCAAW"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|
|
@@ -1,199 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
|
3
|
-
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
|
4
|
-
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
|
5
|
-
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
|
6
|
-
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
|
7
|
-
};
|
|
8
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
9
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
10
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
11
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
12
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
13
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
14
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
15
|
-
});
|
|
16
|
-
};
|
|
17
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
18
|
-
const assert = require("assert");
|
|
19
|
-
const mocha_1 = require("@testdeck/mocha");
|
|
20
|
-
const index_1 = require("../index");
|
|
21
|
-
const test_1 = require("../test");
|
|
22
|
-
let OwnerPolicyTest = class OwnerPolicyTest extends test_1.WebdaTest {
|
|
23
|
-
before() {
|
|
24
|
-
const _super = Object.create(null, {
|
|
25
|
-
before: { get: () => super.before }
|
|
26
|
-
});
|
|
27
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
28
|
-
yield _super.before.call(this);
|
|
29
|
-
this._ctx = yield this.webda.newContext(new index_1.HttpContext("test.webda.io", "GET", "/"));
|
|
30
|
-
this._session = this._ctx.newSession();
|
|
31
|
-
this._session.login("none", "none");
|
|
32
|
-
this._ctx.getCurrentUser = () => __awaiter(this, void 0, void 0, function* () {
|
|
33
|
-
return this._user;
|
|
34
|
-
});
|
|
35
|
-
this._taskStore = this.webda.getService("Tasks");
|
|
36
|
-
this._userStore = this.webda.getService("Users");
|
|
37
|
-
assert.notStrictEqual(this._taskStore, undefined);
|
|
38
|
-
assert.notStrictEqual(this._userStore, undefined);
|
|
39
|
-
});
|
|
40
|
-
}
|
|
41
|
-
beforeEach() {
|
|
42
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
43
|
-
yield this._taskStore.__clean();
|
|
44
|
-
yield this._userStore.__clean();
|
|
45
|
-
this._ctx = yield this.newContext({});
|
|
46
|
-
yield this._taskStore.save({
|
|
47
|
-
_user: "fake_user",
|
|
48
|
-
uuid: "task_user1",
|
|
49
|
-
name: "for_schema"
|
|
50
|
-
});
|
|
51
|
-
yield this._taskStore.save({
|
|
52
|
-
_user: "fake_user2",
|
|
53
|
-
uuid: "task_user2"
|
|
54
|
-
});
|
|
55
|
-
yield this._taskStore.save({
|
|
56
|
-
_user: "fake_user3",
|
|
57
|
-
uuid: "task_public",
|
|
58
|
-
public: true
|
|
59
|
-
});
|
|
60
|
-
});
|
|
61
|
-
}
|
|
62
|
-
postNotLogged() {
|
|
63
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
64
|
-
yield this.beforeEach();
|
|
65
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "POST", "/tasks", {
|
|
66
|
-
name: "Task #1"
|
|
67
|
-
});
|
|
68
|
-
assert.notStrictEqual(executor, undefined);
|
|
69
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
70
|
-
});
|
|
71
|
-
}
|
|
72
|
-
post() {
|
|
73
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
74
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "POST", "/tasks", {
|
|
75
|
-
name: "Task #1"
|
|
76
|
-
});
|
|
77
|
-
this._ctx.session.login("fake_user", "fake_ident");
|
|
78
|
-
yield executor.execute(this._ctx);
|
|
79
|
-
let task = JSON.parse(this._ctx.getResponseBody());
|
|
80
|
-
assert.strictEqual(task.name, "Task #1");
|
|
81
|
-
});
|
|
82
|
-
}
|
|
83
|
-
getWrongOwner() {
|
|
84
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
85
|
-
yield this.beforeEach();
|
|
86
|
-
this._ctx.getSession().login("fake_user2", "fake_ident");
|
|
87
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "GET", "/tasks/task_user1", {});
|
|
88
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
89
|
-
});
|
|
90
|
-
}
|
|
91
|
-
putWrongOwner() {
|
|
92
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
93
|
-
yield this.beforeEach();
|
|
94
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
95
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "PUT", "/tasks/task_user1", {});
|
|
96
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
97
|
-
});
|
|
98
|
-
}
|
|
99
|
-
put() {
|
|
100
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
101
|
-
yield this.beforeEach();
|
|
102
|
-
this._ctx.session.login("fake_user", "fake_ident");
|
|
103
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "PUT", "/tasks/task_user1", { public: true });
|
|
104
|
-
yield executor.execute(this._ctx);
|
|
105
|
-
let result = JSON.parse(this._ctx.getResponseBody());
|
|
106
|
-
assert.strictEqual(result.uuid, "task_user1");
|
|
107
|
-
assert.strictEqual(result.public, true);
|
|
108
|
-
});
|
|
109
|
-
}
|
|
110
|
-
getPublic() {
|
|
111
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
112
|
-
yield this.beforeEach();
|
|
113
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
114
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "GET", "/tasks/task_public");
|
|
115
|
-
yield executor.execute(this._ctx);
|
|
116
|
-
let result = JSON.parse(this._ctx.getResponseBody());
|
|
117
|
-
assert.strictEqual(result.uuid, "task_public");
|
|
118
|
-
});
|
|
119
|
-
}
|
|
120
|
-
actioms() {
|
|
121
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
122
|
-
yield this.beforeEach();
|
|
123
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
124
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "GET", "/tasks/task_user1/actionable");
|
|
125
|
-
yield executor.execute(this._ctx);
|
|
126
|
-
executor = this.getExecutor(this._ctx, "test.webda.io", "PUT", "/tasks/task_user1/impossible");
|
|
127
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
128
|
-
});
|
|
129
|
-
}
|
|
130
|
-
delete() {
|
|
131
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
132
|
-
yield this.beforeEach();
|
|
133
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
134
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "DELETE", "/tasks/task_user2");
|
|
135
|
-
yield executor.execute(this._ctx);
|
|
136
|
-
});
|
|
137
|
-
}
|
|
138
|
-
deleteWrongOwner() {
|
|
139
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
140
|
-
yield this.beforeEach();
|
|
141
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
142
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "DELETE", "/tasks/task_user1");
|
|
143
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
144
|
-
});
|
|
145
|
-
}
|
|
146
|
-
deleteWrongOwnerPublic() {
|
|
147
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
148
|
-
yield this.beforeEach();
|
|
149
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
150
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "DELETE", "/tasks/task_public");
|
|
151
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 403);
|
|
152
|
-
});
|
|
153
|
-
}
|
|
154
|
-
deleteUnknown() {
|
|
155
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
156
|
-
yield this.beforeEach();
|
|
157
|
-
this._ctx.session.login("fake_user2", "fake_ident");
|
|
158
|
-
let executor = this.getExecutor(this._ctx, "test.webda.io", "DELETE", "/tasks/task_unknown");
|
|
159
|
-
yield assert.rejects(executor.execute.bind(executor, this._ctx), res => res == 404);
|
|
160
|
-
});
|
|
161
|
-
}
|
|
162
|
-
};
|
|
163
|
-
__decorate([
|
|
164
|
-
mocha_1.test("POST - not logged")
|
|
165
|
-
], OwnerPolicyTest.prototype, "postNotLogged", null);
|
|
166
|
-
__decorate([
|
|
167
|
-
mocha_1.test("POST")
|
|
168
|
-
], OwnerPolicyTest.prototype, "post", null);
|
|
169
|
-
__decorate([
|
|
170
|
-
mocha_1.test("GET - wrong owner")
|
|
171
|
-
], OwnerPolicyTest.prototype, "getWrongOwner", null);
|
|
172
|
-
__decorate([
|
|
173
|
-
mocha_1.test("PUT - wrong owner")
|
|
174
|
-
], OwnerPolicyTest.prototype, "putWrongOwner", null);
|
|
175
|
-
__decorate([
|
|
176
|
-
mocha_1.test("PUT")
|
|
177
|
-
], OwnerPolicyTest.prototype, "put", null);
|
|
178
|
-
__decorate([
|
|
179
|
-
mocha_1.test("GET - public")
|
|
180
|
-
], OwnerPolicyTest.prototype, "getPublic", null);
|
|
181
|
-
__decorate([
|
|
182
|
-
mocha_1.test("Actions")
|
|
183
|
-
], OwnerPolicyTest.prototype, "actioms", null);
|
|
184
|
-
__decorate([
|
|
185
|
-
mocha_1.test("DELETE")
|
|
186
|
-
], OwnerPolicyTest.prototype, "delete", null);
|
|
187
|
-
__decorate([
|
|
188
|
-
mocha_1.test("DELETE - wrong owner")
|
|
189
|
-
], OwnerPolicyTest.prototype, "deleteWrongOwner", null);
|
|
190
|
-
__decorate([
|
|
191
|
-
mocha_1.test("DELETE - wrong owner - public")
|
|
192
|
-
], OwnerPolicyTest.prototype, "deleteWrongOwnerPublic", null);
|
|
193
|
-
__decorate([
|
|
194
|
-
mocha_1.test("DELETE - unknown")
|
|
195
|
-
], OwnerPolicyTest.prototype, "deleteUnknown", null);
|
|
196
|
-
OwnerPolicyTest = __decorate([
|
|
197
|
-
mocha_1.suite
|
|
198
|
-
], OwnerPolicyTest);
|
|
199
|
-
//# sourceMappingURL=ownerpolicy.spec.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"ownerpolicy.spec.js","sourceRoot":"","sources":["../../src/policies/ownerpolicy.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iCAAiC;AACjC,2CAA8C;AAC9C,oCAA8F;AAC9F,kCAAoC;AAGpC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAAS;IAO/B,MAAM;;;;;YACV,MAAM,OAAM,MAAM,WAAE,CAAC;YACrB,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,mBAAW,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,GAAS,EAAE;gBACpC,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC,CAAA,CAAC;YACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAwB,OAAO,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU,GAA0B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;KAAA;IAEK,UAAU;;YACd,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;KAAA;IAEgC,aAAa;;YAC5C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAC5E,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IAEmB,IAAI;;YACtB,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAC5E,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YACnD,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;KAAA;IAEgC,aAAa;;YAC5C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACzD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAC5F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IACgC,aAAa;;YAC5C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAC5F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IACkB,GAAG;;YACpB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;KAAA;IAC2B,SAAS;;YACnC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;YACzF,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;KAAA;IACsB,OAAO;;YAC5B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;YACnG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC/F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IACqB,MAAM;;YAC1B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAC3F,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;KAAA;IACmC,gBAAgB;;YAClD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAC3F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IAC4C,sBAAsB;;YACjE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YAC5F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;IAC+B,aAAa;;YAC3C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAC7F,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;KAAA;CACF,CAAA;AAhF4B;IAA1B,YAAI,CAAC,mBAAmB,CAAC;oDAOzB;AAEa;IAAb,YAAI,CAAC,MAAM,CAAC;2CAQZ;AAE0B;IAA1B,YAAI,CAAC,mBAAmB,CAAC;oDAKzB;AAC0B;IAA1B,YAAI,CAAC,mBAAmB,CAAC;oDAKzB;AACY;IAAZ,YAAI,CAAC,KAAK,CAAC;0CAQX;AACqB;IAArB,YAAI,CAAC,cAAc,CAAC;gDAOpB;AACgB;IAAhB,YAAI,CAAC,SAAS,CAAC;8CAOf;AACe;IAAf,YAAI,CAAC,QAAQ,CAAC;6CAKd;AAC6B;IAA7B,YAAI,CAAC,sBAAsB,CAAC;uDAK5B;AACsC;IAAtC,YAAI,CAAC,+BAA+B,CAAC;6DAKrC;AACyB;IAAzB,YAAI,CAAC,kBAAkB,CAAC;oDAKxB;AAxHG,eAAe;IADpB,aAAK;GACA,eAAe,CAyHpB"}
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
import { Context } from "../index";
|
|
2
|
-
declare const mixin: (Sup: any, rolesMap: any, permissive?: boolean) => {
|
|
3
|
-
new (): {
|
|
4
|
-
[x: string]: any;
|
|
5
|
-
getRoles(ctx: Context): Promise<any>;
|
|
6
|
-
canAct(ctx: Context, action: string): Promise<any>;
|
|
7
|
-
};
|
|
8
|
-
[x: string]: any;
|
|
9
|
-
};
|
|
10
|
-
export { mixin as RolePolicyMixIn };
|
|
@@ -1,47 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
-
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
-
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
-
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
-
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
-
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
-
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
-
});
|
|
10
|
-
};
|
|
11
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
-
exports.RolePolicyMixIn = void 0;
|
|
13
|
-
const mixin = (Sup, rolesMap, permissive = false) => class extends Sup {
|
|
14
|
-
getRoles(ctx) {
|
|
15
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
16
|
-
if (!ctx.getCurrentUserId()) {
|
|
17
|
-
throw 403;
|
|
18
|
-
}
|
|
19
|
-
// If roles are cached in session
|
|
20
|
-
if (ctx.getSession().roles) {
|
|
21
|
-
return ctx.getSession().roles;
|
|
22
|
-
}
|
|
23
|
-
let user = yield ctx.getCurrentUser();
|
|
24
|
-
// Cache roles in session
|
|
25
|
-
ctx.getSession().roles = user.getRoles();
|
|
26
|
-
return ctx.getSession().roles;
|
|
27
|
-
});
|
|
28
|
-
}
|
|
29
|
-
canAct(ctx, action) {
|
|
30
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
31
|
-
// If this action doesn't require role
|
|
32
|
-
if (!rolesMap[action]) {
|
|
33
|
-
if (permissive) {
|
|
34
|
-
return this;
|
|
35
|
-
}
|
|
36
|
-
throw 403;
|
|
37
|
-
}
|
|
38
|
-
let roles = yield this.getRoles(ctx);
|
|
39
|
-
if (roles.indexOf(rolesMap[action]) >= 0) {
|
|
40
|
-
return this;
|
|
41
|
-
}
|
|
42
|
-
throw 403;
|
|
43
|
-
});
|
|
44
|
-
}
|
|
45
|
-
};
|
|
46
|
-
exports.RolePolicyMixIn = mixin;
|
|
47
|
-
//# sourceMappingURL=rolepolicy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rolepolicy.js","sourceRoot":"","sources":["../../src/policies/rolepolicy.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;AAGb,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAsB,KAAK,EAAE,EAAE,CAC3D,KAAM,SAAQ,GAAG;IACT,QAAQ,CAAC,GAAY;;YACzB,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE;gBAC3B,MAAM,GAAG,CAAC;aACX;YACD,iCAAiC;YACjC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE;gBAC1B,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;aAC/B;YACD,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACtC,yBAAyB;YACzB,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;QAChC,CAAC;KAAA;IAEK,MAAM,CAAC,GAAY,EAAE,MAAc;;YACvC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;gBACrB,IAAI,UAAU,EAAE;oBACd,OAAO,IAAI,CAAC;iBACb;gBACD,MAAM,GAAG,CAAC;aACX;YACD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE;gBACxC,OAAO,IAAI,CAAC;aACb;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;KAAA;CACF,CAAC;AAEc,gCAAe"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export {};
|