@webda/core 4.0.0-beta.1 → 4.0.0-beta.3

package/lib/models/ownermodel.model.d.ts

@@ -0,0 +1,68 @@
+import { type ModelClass, ModelLink, type PrimaryKeyType, UuidModel } from "@webda/models";
+import { User } from "./user.model.js";
+import { IOperationContext } from "../contexts/icontext.js";
+/**
+ * Abstract class to define an object with an owner
+ *
+ * The owner is the user that created the object
+ * The owner can be changed by the owner
+ */
+export declare abstract class AbstractOwnerModel<T extends User> extends UuidModel {
+    /**
+     * Default owner of the object
+     */
+    get _user(): ModelLink<T>;
+    set _user(value: string | T | PrimaryKeyType<T> | ModelLink<T>);
+    /**
+     * Define if the object is publicly readable
+     * @default false
+     */
+    public?: boolean;
+    /**
+     *
+     * @returns
+     */
+    abstract getOwnerModel(): ModelClass<T>;
+    /**
+     * Set object owner
+     * @param uuid - the unique identifier
+     */
+    setOwner(uuid: PrimaryKeyType<T>): void;
+    /**
+     * Return the owner of the object
+     *
+     * Only the owner can do update to the object
+     * @returns the result
+     */
+    getOwner(): ModelLink<T>;
+    /**
+     * Check if the current user can perform the given action based on ownership
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    canAct(context: IOperationContext, action: string): Promise<string | boolean>;
+    /**
+     * Return a query to filter OwnerModel
+     *
+     * @param context - the execution context
+     * @returns the result
+     */
+    static getPermissionQuery(context?: IOperationContext): null | {
+        partial: boolean;
+        query: string;
+    };
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON(): any;
+}
+/**
+ * @WebdaModel
+ */
+export declare class OwnerModel extends AbstractOwnerModel<User> {
+    /**
+     * Get the User model class used for ownership
+     * @returns the result
+     */
+    getOwnerModel(): ModelClass<User>;
+}
+//# sourceMappingURL=ownermodel.model.d.ts.map

package/lib/models/ownermodel.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownermodel.model.d.ts","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,8BAAsB,kBAAkB,CAAC,CAAC,SAAS,IAAI,CAAE,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAExB;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAU7D;IACD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAGtC;IAED;;;;;OAKG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAEvB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAalF;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAQjG;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAOZ;CACF;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,kBAAkB,CAAC,IAAI,CAAC;IACtD;;;OAGG;IACH,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,CAEhC;CACF"}

package/lib/models/ownermodel.model.js

@@ -0,0 +1,112 @@
+import { WEBDA_STORAGE } from "@webda/models";
+//import { UuidModel } from "./uuid.js";
+import { ModelLink, UuidModel } from "@webda/models";
+import { User } from "./user.model.js";
+/**
+ * Abstract class to define an object with an owner
+ *
+ * The owner is the user that created the object
+ * The owner can be changed by the owner
+ */
+export class AbstractOwnerModel extends UuidModel {
+    /**
+     * Default owner of the object
+     */
+    get _user() {
+        return this[WEBDA_STORAGE]["_user"];
+    }
+    set _user(value) {
+        if (value instanceof ModelLink) {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+        else if (value != null) {
+            const inst = this[WEBDA_STORAGE]["_user"] || new ModelLink(User);
+            inst.set(value);
+            this[WEBDA_STORAGE]["_user"] = inst;
+        }
+        else {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+    }
+    /**
+     * Define if the object is publicly readable
+     * @default false
+     */
+    public;
+    /**
+     * Set object owner
+     * @param uuid - the unique identifier
+     */
+    setOwner(uuid) {
+        this._user ??= new ModelLink(this.getOwnerModel()).set(uuid);
+        this._user.set(uuid);
+    }
+    /**
+     * Return the owner of the object
+     *
+     * Only the owner can do update to the object
+     * @returns the result
+     */
+    getOwner() {
+        return this._user;
+    }
+    /**
+     * Check if the current user can perform the given action based on ownership
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    async canAct(context, action) {
+        // Object is public
+        if (this.public && (action === "get" || action === "get_binary")) {
+            return true;
+        }
+        else if (!context.getCurrentUserId()) {
+            return "You need to be logged in to access this object";
+        }
+        else if (!this.getOwner() && action !== "create") {
+            return "Object does not have an owner";
+        }
+        if (action === "create") {
+            //this.setOwner(Uuid.parse(ctx.getCurrentUserId(), this.getOwnerModel()));
+        }
+        return context.getCurrentUserId() === this.getOwner()?.toString();
+    }
+    /**
+     * Return a query to filter OwnerModel
+     *
+     * @param context - the execution context
+     * @returns the result
+     */
+    static getPermissionQuery(context) {
+        if (!context) {
+            return null;
+        }
+        return {
+            query: `_user = '${context.getCurrentUserId()}' OR public = TRUE`,
+            partial: false
+        };
+    }
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON() {
+        const result = super.toJSON ? super.toJSON() : {};
+        for (const key of Object.keys(this)) {
+            result[key] = this[key];
+        }
+        Object.assign(result, this[WEBDA_STORAGE]);
+        return result;
+    }
+}
+/**
+ * @WebdaModel
+ */
+export class OwnerModel extends AbstractOwnerModel {
+    /**
+     * Get the User model class used for ownership
+     * @returns the result
+     */
+    getOwnerModel() {
+        return User;
+    }
+}
+//# sourceMappingURL=ownermodel.model.js.map

package/lib/models/ownermodel.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownermodel.model.js","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,wCAAwC;AACxC,OAAO,EAAmB,SAAS,EAAuB,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC;;;;;GAKG;AACH,MAAM,OAAgB,kBAAmC,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAAoD;QAC5D,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAiB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD;;;OAGG;IACH,MAAM,CAAW;IAQjB;;;OAGG;IACH,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAc;QACrD,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACvC,OAAO,gDAAgD,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,0EAA0E;QAC5E,CAAC;QACD,OAAO,OAAO,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAA2B;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,YAAY,OAAO,CAAC,gBAAgB,EAAE,oBAAoB;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,kBAAwB;IACtD;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/lib/models/registry.model.d.ts

@@ -0,0 +1,76 @@
+import { type Settable, UuidModel } from "@webda/models";
+/**
+ * Specific type for registry
+ */
+export declare class RegistryEntry extends UuidModel {
+    /** Create a new RegistryEntry
+     * @param data - initial data
+     */
+    constructor(data?: Settable<RegistryEntry>);
+    /**
+     * Registry entries are not serializable to DTO
+     * @returns the result
+     */
+    toDTO(): undefined;
+    /**
+     * No-op DTO deserialization for registry entries
+     * @returns this for chaining
+     */
+    fromDTO(): this;
+    /**
+     * Remove an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @returns the result
+     */
+    static removeAttribute(uuid: string, attribute: string): Promise<void>;
+    /**
+     * Set an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @param value - the value to set
+     * @returns the result
+     */
+    static setAttribute(uuid: string, attribute: string, value: any): Promise<void>;
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static get<K = any>(uuid: string, data?: K): Promise<RegistryEntry & K>;
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static put<K = any>(uuid: string, data: K): Promise<K & RegistryEntry>;
+    /**
+     * Delete a registry entry by UUID
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static delete(uuid: string): Promise<void>;
+    /**
+     * Check if a registry entry exists
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static exists(uuid: string): Promise<boolean>;
+    /**
+     * Perform a conditional patch
+     * @param uuid - the unique identifier
+     * @param patch - the patch to apply
+     * @param conditionField - the condition field name
+     * @param conditionValue - the condition value
+     * @returns the result
+     */
+    static patch(uuid: string, patch: any, conditionField: string, conditionValue: any): Promise<void>;
+}
+/**
+ * Use the registry
+ * @returns the result
+ */
+export declare function useRegistry(): typeof RegistryEntry;
+//# sourceMappingURL=registry.model.d.ts.map

package/lib/models/registry.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.model.d.ts","sourceRoot":"","sources":["../../src/models/registry.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,KAAK,QAAQ,EAAiB,SAAS,EAAE,MAAM,eAAe,CAAC;AAG3I;;GAEG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C;;OAEG;IACH,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,EAGzC;IAED;;;OAGG;IACH,KAAK,IAAI,SAAS,CAEjB;IAED;;;OAGG;IACH,OAAO,IAAI,IAAI,CAEd;IAED;;;;;OAKG;IACH,OAAa,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAG3D;IAED;;;;;;OAMG;IACH,OAAa,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,iBAGpE;IAED;;;;;OAKG;IACH,OAAa,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAI5E;IAED;;;;;OAKG;IACH,OAAa,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,aAAa,CAAC,CAE3E;IAED;;;;OAIG;IACH,OAAa,MAAM,CAAC,IAAI,EAAE,MAAM,iBAE/B;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,oBAEzB;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,iBAGjF;CACF;AAED;;;GAGG;AACH,wBAAgB,WAAW,yBAE1B"}

package/lib/models/registry.model.js

@@ -0,0 +1,104 @@
+import { UuidModel } from "@webda/models";
+/**
+ * Specific type for registry
+ */
+export class RegistryEntry extends UuidModel {
+    /** Create a new RegistryEntry
+     * @param data - initial data
+     */
+    constructor(data) {
+        super(data);
+        Object.assign(this, data);
+    }
+    /**
+     * Registry entries are not serializable to DTO
+     * @returns the result
+     */
+    toDTO() {
+        return undefined;
+    }
+    /**
+     * No-op DTO deserialization for registry entries
+     * @returns this for chaining
+     */
+    fromDTO() {
+        return this;
+    }
+    /**
+     * Remove an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @returns the result
+     */
+    static async removeAttribute(uuid, attribute) {
+        // @ts-ignore
+        return await RegistryEntry.ref(uuid).removeAttribute(attribute);
+    }
+    /**
+     * Set an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @param value - the value to set
+     * @returns the result
+     */
+    static async setAttribute(uuid, attribute, value) {
+        // @ts-ignore
+        return await RegistryEntry.ref(uuid).setAttribute(attribute, value);
+    }
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static async get(uuid, data) {
+        return data
+            ? await RegistryEntry.ref(uuid).upsert(data)
+            : await RegistryEntry.ref(uuid).get();
+    }
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static async put(uuid, data) {
+        return await RegistryEntry.ref(uuid).upsert(data);
+    }
+    /**
+     * Delete a registry entry by UUID
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static async delete(uuid) {
+        return await RegistryEntry.ref(uuid).delete();
+    }
+    /**
+     * Check if a registry entry exists
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static exists(uuid) {
+        return RegistryEntry.ref(uuid).exists();
+    }
+    /**
+     * Perform a conditional patch
+     * @param uuid - the unique identifier
+     * @param patch - the patch to apply
+     * @param conditionField - the condition field name
+     * @param conditionValue - the condition value
+     * @returns the result
+     */
+    static patch(uuid, patch, conditionField, conditionValue) {
+        // @ts-ignore
+        return RegistryEntry.ref(uuid).patch(patch, conditionField, conditionValue);
+    }
+}
+/**
+ * Use the registry
+ * @returns the result
+ */
+export function useRegistry() {
+    return RegistryEntry;
+}
+//# sourceMappingURL=registry.model.js.map

package/lib/models/registry.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.model.js","sourceRoot":"","sources":["../../src/models/registry.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmG,SAAS,EAAE,MAAM,eAAe,CAAC;AAG3I;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C;;OAEG;IACH,YAAY,IAA8B;QACxC,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,SAAiB;QAC1D,aAAa;QACb,OAAO,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,CAAM,SAAS,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAE,KAAU;QACnE,aAAa;QACb,OAAO,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAM,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAU,IAAY,EAAE,IAAQ;QAC9C,OAAO,IAAI;YACT,CAAC,CAAM,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAM,IAAI,CAAC;YACtD,CAAC,CAAoB,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAU,IAAY,EAAE,IAAO;QAC7C,OAAY,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAM,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY;QAC9B,OAAO,MAAM,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,IAAY;QACxB,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,IAAY,EAAE,KAAU,EAAE,cAAsB,EAAE,cAAmB;QAChF,aAAa;QACb,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAO,cAAc,EAAE,cAAc,CAAC,CAAC;IACnF,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/lib/models/rolemodel.model.d.ts

@@ -0,0 +1,28 @@
+import { Model } from "@webda/models";
+import type { IOperationContext } from "../contexts/icontext.js";
+/** Model with role-based access control, mapping actions to required roles */
+declare abstract class RoleModel extends Model {
+    abstract getRolesMap(): {
+        [key: string]: string;
+    };
+    /**
+     * Whether actions without an explicit role mapping are allowed
+     * @returns true if the condition is met
+     */
+    isPermissive(): boolean;
+    /**
+     * Get the roles for the current user, caching them in the session
+     * @param ctx - the operation context
+     * @returns the result
+     */
+    getRoles(ctx: IOperationContext): Promise<any>;
+    /**
+     * Check if the user has the required role for the given action
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    canAct(context: IOperationContext, action: string): Promise<string | boolean>;
+}
+export { RoleModel };
+//# sourceMappingURL=rolemodel.model.d.ts.map

package/lib/models/rolemodel.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolemodel.model.d.ts","sourceRoot":"","sources":["../../src/models/rolemodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIjE,8EAA8E;AAC9E,uBAAe,SAAU,SAAQ,KAAK;IACpC,QAAQ,CAAC,WAAW,IAAI;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAElD;;;OAGG;IACH,YAAY,IAAI,OAAO,CAEtB;IAED;;;;OAIG;IACG,QAAQ,CAAC,GAAG,EAAE,iBAAiB,gBAYpC;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAalF;CACF;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/lib/models/rolemodel.model.js

@@ -0,0 +1,53 @@
+import { Model } from "@webda/models";
+import * as WebdaError from "../errors/errors.js";
+import { useContext } from "../contexts/execution.js";
+/** Model with role-based access control, mapping actions to required roles */
+class RoleModel extends Model {
+    /**
+     * Whether actions without an explicit role mapping are allowed
+     * @returns true if the condition is met
+     */
+    isPermissive() {
+        return false;
+    }
+    /**
+     * Get the roles for the current user, caching them in the session
+     * @param ctx - the operation context
+     * @returns the result
+     */
+    async getRoles(ctx) {
+        if (!ctx.getCurrentUserId()) {
+            throw new WebdaError.Forbidden("No user");
+        }
+        // If roles are cached in session
+        if (ctx.getSession().roles) {
+            return ctx.getSession().roles;
+        }
+        const user = await ctx.getCurrentUser();
+        // Cache roles in session
+        ctx.getSession().roles = user.getRoles();
+        return ctx.getSession().roles;
+    }
+    /**
+     * Check if the user has the required role for the given action
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    async canAct(context, action) {
+        // If this action doesn't require role
+        if (!this.getRolesMap()[action]) {
+            if (this.isPermissive()) {
+                return true;
+            }
+            return "No permission for this action defined";
+        }
+        const roles = await this.getRoles(useContext());
+        if (roles.indexOf(this.getRolesMap()[action]) >= 0) {
+            return true;
+        }
+        return "No permission";
+    }
+}
+export { RoleModel };
+//# sourceMappingURL=rolemodel.model.js.map

package/lib/models/rolemodel.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolemodel.model.js","sourceRoot":"","sources":["../../src/models/rolemodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,8EAA8E;AAC9E,MAAe,SAAU,SAAQ,KAAK;IAGpC;;;OAGG;IACH,YAAY;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAsB;QACnC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,iCAAiC;QACjC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QACxC,yBAAyB;QACzB,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAc;QACrD,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,uCAAuC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/lib/models/simpleuser.model.d.ts

@@ -0,0 +1,78 @@
+import { Ident } from "./ident.model.js";
+import { ModelRelated, Settable } from "@webda/models";
+import { User } from "./user.model.js";
+/**
+ * Simple user offers groups and roles management
+ *
+ * Groups and roles are defined just as string, no
+ * models
+ */
+export declare class SimpleUser extends User {
+    /** Create a new SimpleUser
+     * @param data - initial data
+     */
+    constructor(data?: Settable<SimpleUser>);
+    /**
+     * Groups for a user
+     */
+    _groups: string[];
+    /**
+     * Roles of the user
+     */
+    _roles: string[];
+    /**
+     * Normal ident
+     */
+    readonly _idents: ModelRelated<Ident, User, "_user">;
+    /**
+     * Return idents
+     * @returns the result
+     */
+    getIdents(): any;
+    /**
+     * Add a group for the user
+     * @param group - the group name
+     * @returns the result
+     */
+    addGroup(group: string): void;
+    /**
+     *
+     * @param group - the group name
+     * @returns true if the condition is met
+     */
+    inGroup(group: string): boolean;
+    /**
+     * Remove a group from this user
+     * @param group - the group name
+     */
+    removeGroup(group: string): void;
+    /**
+     * Get all groups this user belongs to
+     * @returns the list of results
+     */
+    getGroups(): string[];
+    /**
+     * Get all roles assigned to this user
+     * @returns the list of results
+     */
+    getRoles(): string[];
+    /**
+     * Add a role to this user if not already present
+     * @param role - the role
+     */
+    addRole(role: string): void;
+    /**
+     * Check if this user has the given role
+     * @param role - the role
+     * @returns the result
+     */
+    hasRole(role: string): boolean;
+    /**
+     * Remove a role from this user
+     * @param role - the role
+     */
+    removeRole(role: string): void;
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON(): any;
+}
+//# sourceMappingURL=simpleuser.model.d.ts.map

package/lib/models/simpleuser.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"simpleuser.model.d.ts","sourceRoot":"","sources":["../../src/models/simpleuser.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAW,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,IAAI;IAClC;;OAEG;IACH,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,EAEtC;IACD;;OAEG;IACH,OAAO,EAAE,MAAM,EAAE,CAAM;IACvB;;OAEG;IACH,MAAM,EAAE,MAAM,EAAE,CAAM;IACtB;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAgF;IACpI;;;OAGG;IACH,SAAS,IACgB,GAAG,CAC3B;IAED;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,QAKrB;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK9B;IAED;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,QAMxB;IAED;;;OAGG;IACH,SAAS,IAAI,MAAM,EAAE,CAEpB;IAED;;;OAGG;IACH,QAAQ,IAAI,MAAM,EAAE,CAEnB;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,QAKnB;IAED;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,WAEnB;IAED;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,QAMtB;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAOZ;CACF"}

package/lib/models/simpleuser.model.js

@@ -0,0 +1,123 @@
+import { WEBDA_STORAGE } from "@webda/models";
+import { Ident } from "./ident.model.js";
+import { ModelRelated } from "@webda/models";
+import { User } from "./user.model.js";
+/**
+ * Simple user offers groups and roles management
+ *
+ * Groups and roles are defined just as string, no
+ * models
+ */
+export class SimpleUser extends User {
+    /** Create a new SimpleUser
+     * @param data - initial data
+     */
+    constructor(data) {
+        super(data);
+    }
+    /**
+     * Groups for a user
+     */
+    _groups = [];
+    /**
+     * Roles of the user
+     */
+    _roles = [];
+    /**
+     * Normal ident
+     */
+    _idents = new ModelRelated(Ident, this, "_user");
+    /**
+     * Return idents
+     * @returns the result
+     */
+    getIdents() {
+        return this._idents;
+    }
+    /**
+     * Add a group for the user
+     * @param group - the group name
+     * @returns the result
+     */
+    addGroup(group) {
+        if (this.inGroup(group)) {
+            return;
+        }
+        this._groups.push(group);
+    }
+    /**
+     *
+     * @param group - the group name
+     * @returns true if the condition is met
+     */
+    inGroup(group) {
+        if (group === "all" || group === this.uuid) {
+            return true;
+        }
+        return this._groups.includes(group);
+    }
+    /**
+     * Remove a group from this user
+     * @param group - the group name
+     */
+    removeGroup(group) {
+        const ind = this._groups.indexOf(group);
+        if (ind < 0) {
+            return;
+        }
+        this._groups.splice(ind, 1);
+    }
+    /**
+     * Get all groups this user belongs to
+     * @returns the list of results
+     */
+    getGroups() {
+        return this._groups;
+    }
+    /**
+     * Get all roles assigned to this user
+     * @returns the list of results
+     */
+    getRoles() {
+        return this._roles;
+    }
+    /**
+     * Add a role to this user if not already present
+     * @param role - the role
+     */
+    addRole(role) {
+        if (this.hasRole(role)) {
+            return;
+        }
+        this._roles.push(role);
+    }
+    /**
+     * Check if this user has the given role
+     * @param role - the role
+     * @returns the result
+     */
+    hasRole(role) {
+        return this._roles.indexOf(role) >= 0;
+    }
+    /**
+     * Remove a role from this user
+     * @param role - the role
+     */
+    removeRole(role) {
+        const ind = this._roles.indexOf(role);
+        if (ind < 0) {
+            return;
+        }
+        this._roles.splice(ind, 1);
+    }
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON() {
+        const result = super.toJSON ? super.toJSON() : {};
+        for (const key of Object.keys(this)) {
+            result[key] = this[key];
+        }
+        Object.assign(result, this[WEBDA_STORAGE]);
+        return result;
+    }
+}
+//# sourceMappingURL=simpleuser.model.js.map