@yongdall/organization-rbac 0.6.5 → 0.6.6

package/index.d.mts

@@ -1,37 +1,33 @@
-import * as imodel15 from "imodel";
-import * as _yongdall_model2 from "@yongdall/model";
+import * as imodel20 from "imodel";
+import * as _yongdall_model3 from "@yongdall/model";
 
-//#region plugins/organization-rbac/models/OrganizationAppointment.d.mts
-declare const OrganizationAppointment: _yongdall_model2.ModelTable<{
-  id: imodel15.FieldDefine<"uuid", false, false>;
-  label: imodel15.FieldDefine<"string", false, false>;
-  description: imodel15.FieldDefine<"string", false, true>;
-  createdAt: imodel15.FieldDefine<"date", false, false>;
-  updatedAt: imodel15.FieldDefine<"date", false, false>;
-}, string>;
+//#region plugins/organization-rbac/models/CompositeRole.d.mts
+declare const CompositeRole: _yongdall_model3.ModelTable<{
+  id: imodel20.FieldDefine<"uuid", false, false>;
+  label: imodel20.FieldDefine<"string", false, false>;
+  organizationId: imodel20.FieldDefine<"uuid", false, true>;
+  description: imodel20.FieldDefine<"text", false, true>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+  updatedAt: imodel20.FieldDefine<"date", false, false>;
+}, "compositeRole">;
 //#endregion
-//#region plugins/organization-rbac/models/OrganizationMember.d.mts
+//#region plugins/organization-rbac/models/OrganizationCompositeRole.d.mts
 /**
  * 组织用户角色模型
+ * @typedef {Object} OrganizationUserRole
+ * @property {string} userId - 用户ID，主键第一部分
+ * @property {string} organizationId - 组织ID，主键第二部分
+ * @property {string} roleId - 角色ID，主键第三部分
+ * @property {number} no - 编号
  */
-type OrganizationUserRole = {
-  /**
-   * - 用户ID，主键第一部分
-   */
-  userId: string;
-  /**
-   * - 组织ID，主键第二部分
-   */
-  organizationId: string;
-  /**
-   * - 角色ID，主键第三部分
-   */
-  roleId: string;
-  /**
-   * - 编号
-   */
-  no: number;
-};
+declare const OrganizationCompositeRole: _yongdall_model3.ModelTable<{
+  compositeRoleId: imodel20.FieldDefine<"uuid", false, false>;
+  organizationId: imodel20.FieldDefine<"uuid", false, false>;
+  roleId: imodel20.FieldDefine<"uuid", false, false>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+}, "organizationCompositeRole">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserCompositeRole.d.mts
 /**
  * 组织用户角色模型
  * @typedef {Object} OrganizationUserRole
@@ -40,36 +36,60 @@ type OrganizationUserRole = {
  * @property {string} roleId - 角色ID，主键第三部分
  * @property {number} no - 编号
  */
-declare const OrganizationUserRole: _yongdall_model2.ModelTable<{
-  userId: imodel15.FieldDefine<"uuid", false, false>;
-  organizationId: imodel15.FieldDefine<"uuid", false, false>;
-  roleId: imodel15.FieldDefine<"uuid", false, false>;
-  no: imodel15.FieldDefine<"i32", false, false>;
-}, string>;
-declare const OrganizationMember: _yongdall_model2.ModelTable<{
-  id: imodel15.FieldDefine<"uuid", false, false>;
-  userId: imodel15.FieldDefine<"uuid", false, false>;
-  organizationId: imodel15.FieldDefine<"uuid", false, false>;
-  appointmentId: imodel15.FieldDefine<"uuid", false, true>;
-  default: imodel15.FieldDefine<"bool", false, false>;
-  createdAt: imodel15.FieldDefine<"date", false, false>;
-  updatedAt: imodel15.FieldDefine<"date", false, false>;
-  roles: imodel15.FieldDefine<_yongdall_model2.ModelTable<{
-    userId: imodel15.FieldDefine<"uuid", false, false>;
-    organizationId: imodel15.FieldDefine<"uuid", false, false>;
-    roleId: imodel15.FieldDefine<"uuid", false, false>;
-    no: imodel15.FieldDefine<"i32", false, false>;
-  }, string>, true, false>;
-}, string>;
+declare const OrganizationUserCompositeRole: _yongdall_model3.ModelTable<{
+  userId: imodel20.FieldDefine<"uuid", false, false>;
+  organizationId: imodel20.FieldDefine<"uuid", false, false>;
+  compositeRoleId: imodel20.FieldDefine<"uuid", false, false>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+  updatedAt: imodel20.FieldDefine<"date", false, false>;
+}, "organizationUserCompositeRole">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationAppointment.d.mts
+declare const OrganizationAppointment: _yongdall_model3.ModelTable<{
+  id: imodel20.FieldDefine<"uuid", false, false>;
+  label: imodel20.FieldDefine<"string", false, false>;
+  description: imodel20.FieldDefine<"string", false, true>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+  updatedAt: imodel20.FieldDefine<"date", false, false>;
+}, "organizationAppointment">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationMember.d.mts
+declare const OrganizationMember: _yongdall_model3.ModelTable<{
+  id: imodel20.FieldDefine<"uuid", false, false>;
+  userId: imodel20.FieldDefine<"uuid", false, false>;
+  organizationId: imodel20.FieldDefine<"uuid", false, false>;
+  appointmentId: imodel20.FieldDefine<"uuid", false, true>;
+  default: imodel20.FieldDefine<"bool", false, false>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+  updatedAt: imodel20.FieldDefine<"date", false, false>;
+}, "organizationMember">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserRole.d.mts
+declare const OrganizationUserRole: _yongdall_model3.ModelTable<{
+  userId: imodel20.FieldDefine<"uuid", false, false>;
+  organizationId: imodel20.FieldDefine<"uuid", false, false>;
+  roleId: imodel20.FieldDefine<"uuid", false, false>;
+  createdAt: imodel20.FieldDefine<"date", false, false>;
+}, "organizationUserRole">;
 //#endregion
 //#region plugins/organization-rbac/index.d.mts
 /** 所在组织 */
-declare const useOrganizations: () => Promise<Set<string>>;
+declare const getOrganizations: (userId: string | null) => Promise<Set<unknown>>;
 /** 角色 */
+declare const getOrganizationRoleIds: (userId: string | null) => Promise<{
+  [k: string]: Set<string>;
+}>;
+declare const getOrganizationPermissions: (userId: string | null) => Promise<Record<string, Set<string>>>;
+declare const getOrganizationAllPermissions: (userId: string | null) => Promise<Set<string>>;
+/** @deprecated */
+declare const useOrganizations: () => Promise<Set<unknown>>;
+/** @deprecated */
 declare const useOrganizationRoleIds: () => Promise<{
   [k: string]: Set<string>;
 }>;
+/** @deprecated */
 declare const useOrganizationPermissions: () => Promise<Record<string, Set<string>>>;
+/** @deprecated */
 declare const useOrganizationAllPermissions: () => Promise<Set<string>>;
 //#endregion
-export { OrganizationAppointment, OrganizationMember, OrganizationUserRole, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };
+export { CompositeRole, OrganizationAppointment, OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole, OrganizationUserRole, getOrganizationAllPermissions, getOrganizationPermissions, getOrganizationRoleIds, getOrganizations, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };

package/index.mjs

@@ -1,3 +1,3 @@
-import { a as OrganizationMember, i as useOrganizations, n as useOrganizationPermissions, o as OrganizationUserRole, r as useOrganizationRoleIds, s as OrganizationAppointment, t as useOrganizationAllPermissions } from "./organization-rbac-BF8uzSCr.mjs";
+import { a as useOrganizationAllPermissions, c as useOrganizations, d as OrganizationAppointment, f as CompositeRole, i as getOrganizations, l as OrganizationUserRole, m as OrganizationCompositeRole, n as getOrganizationPermissions, o as useOrganizationPermissions, p as OrganizationUserCompositeRole, r as getOrganizationRoleIds, s as useOrganizationRoleIds, t as getOrganizationAllPermissions, u as OrganizationMember } from "./organization-rbac-CVRP1FKi.mjs";
 
-export { OrganizationAppointment, OrganizationMember, OrganizationUserRole, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };
+export { CompositeRole, OrganizationAppointment, OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole, OrganizationUserRole, getOrganizationAllPermissions, getOrganizationPermissions, getOrganizationRoleIds, getOrganizations, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };

package/organization-rbac-CVRP1FKi.mjs

@@ -0,0 +1,513 @@
+import { createKeyStore } from "@yongdall/context";
+import { Action, Query, Where, actions, createField, createModel, now, uuid } from "@yongdall/model";
+import { ServerError, getModel, getUser } from "@yongdall/core";
+import { useDatabase } from "@yongdall/connection";
+import { findRolePermissions } from "@yongdall/role-permission";
+import PluginMeta from "@yongdall/plugin-meta";
+
+//#region plugins/organization-rbac/constants.mts
+const { id: pluginId, database } = PluginMeta();
+
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationCompositeRole.mts
+/**
+* 组织用户角色模型
+* @typedef {Object} OrganizationUserRole
+* @property {string} userId - 用户ID，主键第一部分
+* @property {string} organizationId - 组织ID，主键第二部分
+* @property {string} roleId - 角色ID，主键第三部分
+* @property {number} no - 编号
+*/
+const OrganizationCompositeRole = createModel("organizationCompositeRole", {
+	compositeRoleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "复合角色",
+		model: "compositeRole",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	roleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "role",
+		renderer: "document",
+		immutable: true,
+		primary: 3
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	})
+}, {
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy"
+		]
+	}],
+	database,
+	label: "组织复合角色配置",
+	hooks: { async afterCreate(conn, model, record) {
+		if (!record.organizationId) throw new ServerError("组织不存在");
+		if (!record.roleId) throw new ServerError("角色不存在");
+		const [compositeRole] = await conn.call(new Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1));
+		if (!compositeRole) throw new Error("复合角色不存在");
+		if (!compositeRole.organizationId) return;
+		const organizationModel = await getModel("organization");
+		if (organizationModel) {
+			const [organization] = await useDatabase(organizationModel.databaseId).call(new Query(organizationModel).where({
+				id: record.organizationId,
+				mainId: compositeRole.organizationId
+			}).limit(1));
+			if (!organization) throw new ServerError("请选择关联组织");
+		}
+		const roleModel = await getModel("role");
+		if (roleModel?.fields.open) {
+			const [role] = await useDatabase(roleModel.databaseId).call(new Query(roleModel).where({
+				id: record.organizationId,
+				open: true
+			}).limit(1));
+			if (!role) throw new ServerError("请选择有效角色");
+		}
+	} }
+});
+
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserCompositeRole.mts
+/**
+* 组织用户角色模型
+* @typedef {Object} OrganizationUserRole
+* @property {string} userId - 用户ID，主键第一部分
+* @property {string} organizationId - 组织ID，主键第二部分
+* @property {string} roleId - 角色ID，主键第三部分
+* @property {number} no - 编号
+*/
+const OrganizationUserCompositeRole = createModel("organizationUserCompositeRole", {
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true
+	}),
+	compositeRoleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "compositeRole",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	label: "用户复合角色",
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy"
+		]
+	}],
+	hooks: { async afterCreate(conn, model, record) {
+		const [compositeRole] = await conn.call(new Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1));
+		if (!compositeRole) throw new ServerError("复合角色不存在");
+		if ((compositeRole.organizationId || null) === (record.organizationId || null)) return;
+		throw new ServerError("复合角色与组织不匹配");
+	} }
+});
+
+//#endregion
+//#region plugins/organization-rbac/models/CompositeRole.mts
+const CompositeRole = createModel("compositeRole", {
+	id: createField("uuid", {
+		nullable: false,
+		default: uuid,
+		primary: 1,
+		uncreatable: true,
+		layout: { hidden: true }
+	}),
+	label: createField("string", {
+		size: 255,
+		nullable: false,
+		default: "",
+		label: "名称",
+		layout: { colSpan: 6 }
+	}),
+	organizationId: createField("uuid", {
+		nullable: true,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		source: { search: "internal=0" }
+	}),
+	description: createField("text", {
+		nullable: true,
+		label: "描述"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	labelField: "label",
+	label: "复合角色",
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}],
+	hooks: {
+		async afterCreate(conn, model, { organizationId }) {
+			if (!organizationId) return;
+			const organizationModel = await getModel("organization");
+			if (!organizationModel) return;
+			const [organization] = await useDatabase(organizationModel.databaseId).call(new Query(organizationModel).where({
+				id: organizationId,
+				internal: false
+			}).limit(1));
+			if (organization) return;
+			throw new ServerError("请选择外部组织");
+		},
+		async afterDelete(conn, model, record, update) {
+			const list = [conn.call(Action.delete(OrganizationUserCompositeRole, Where.and({ compositeRoleId: record.id })))];
+			if (!update) list.push(conn.call(Action.delete(OrganizationCompositeRole, Where.and({ compositeRoleId: record.id }))));
+			await Promise.all(list);
+		}
+	}
+});
+
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationAppointment.mts
+const OrganizationAppointment = createModel("organizationAppointment", {
+	id: createField("uuid", {
+		nullable: false,
+		primary: 1,
+		default: uuid,
+		uncreatable: true,
+		immutable: true
+	}),
+	label: createField("string", {
+		nullable: false,
+		label: "职务名称"
+	}),
+	description: createField("string", {
+		nullable: true,
+		label: "描述"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	permissions: [{
+		permission: "system:organization",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}]
+});
+
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationMember.mts
+const OrganizationMember = createModel("organizationMember", {
+	id: createField("uuid", {
+		nullable: false,
+		index: true,
+		primary: 1,
+		default: uuid,
+		uncreatable: true,
+		immutable: true
+	}),
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		layout: { rowSpan: 6 }
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		layout: { rowSpan: 6 }
+	}),
+	appointmentId: createField("uuid", {
+		nullable: true,
+		index: true,
+		label: "职务",
+		model: "appointment",
+		renderer: "document",
+		layout: { rowSpan: 6 }
+	}),
+	default: createField("bool", {
+		nullable: false,
+		default: false,
+		label: "默认职务"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	indexes: [{
+		fields: [
+			"userId",
+			"organizationId",
+			"appointmentId"
+		],
+		unique: true
+	}],
+	permissions: [{
+		permission: "system:user",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}],
+	hooks: {
+		async afterCreate(conn, Model, record) {
+			if (!record.default) return;
+			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
+		},
+		async afterUpdate(conn, Model, record, oldRecord) {
+			if (!record.default) return;
+			if (oldRecord.default) return;
+			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
+		}
+	}
+});
+
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserRole.mts
+const OrganizationUserRole = createModel("organizationUserRole", {
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	roleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "role",
+		renderer: "document",
+		immutable: true,
+		primary: 3
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	})
+}, {
+	database,
+	permissions: [{
+		permission: "system:user",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}]
+});
+
+//#endregion
+//#region plugins/organization-rbac/index.mts
+/** 所在组织 */
+const getOrganizations = createKeyStore(async (userId) => {
+	if (!userId) return /* @__PURE__ */ new Set();
+	const relations = await useDatabase(OrganizationMember.databaseId).call(new Query(OrganizationMember).select(["organizationId"]).where("userId", userId));
+	return new Set(relations.map((v) => v.organizationId));
+}, (user) => user || "");
+/** 角色 */
+const getOrganizationRoleIds = createKeyStore(async (userId) => {
+	const compositeRoleIds = new Query(OrganizationUserCompositeRole).select("compositeRoleId").where("userId", "=", userId);
+	const list = await Promise.all([useDatabase(OrganizationUserRole.databaseId).call(new Query(OrganizationUserRole).select(["organizationId", "roleId"]).where("userId", userId)), useDatabase(OrganizationCompositeRole.databaseId).call(new Query(OrganizationCompositeRole).select(["organizationId", "roleId"]).where("compositeRoleId", "in", compositeRoleIds))]);
+	return Object.fromEntries(Object.entries(Object.groupBy(list.flat(), (v) => v.organizationId)).map(([organizationId, list]) => [organizationId, new Set(list?.map((v) => v.roleId))]));
+}, (user) => user || "");
+const getOrganizationPermissions = createKeyStore(async (userId) => {
+	const roleIds = await getOrganizationRoleIds(userId);
+	const allRoleIds = [...new Set(Object.values(roleIds).flatMap((v) => [...v]))];
+	const permissions = Object.create(null);
+	if (!allRoleIds.length) return permissions;
+	const values = await findRolePermissions(allRoleIds);
+	const list = Object.fromEntries(Object.entries(Object.groupBy(values, (l) => l.roleId)).map(([k, v]) => [k, v?.map((v) => v.permission)]));
+	for (const [organization, roleSet] of Object.entries(roleIds)) {
+		const s = new Set([...roleSet].flatMap((v) => list[v] || []));
+		if (!s.size) continue;
+		permissions[organization] = s;
+	}
+	return permissions;
+}, (user) => user || "");
+const getOrganizationAllPermissions = createKeyStore(async (userId) => {
+	const v = await getOrganizationPermissions(userId);
+	return new Set(Object.values(v).flatMap((v) => [...v]));
+}, (user) => user || "");
+/** @deprecated */
+const useOrganizations = () => getUser().then(getOrganizations);
+/** @deprecated */
+const useOrganizationRoleIds = () => getUser().then(getOrganizationRoleIds);
+/** @deprecated */
+const useOrganizationPermissions = () => getUser().then(getOrganizationPermissions);
+/** @deprecated */
+const useOrganizationAllPermissions = () => getUser().then(getOrganizationAllPermissions);
+
+//#endregion
+export { useOrganizationAllPermissions as a, useOrganizations as c, OrganizationAppointment as d, CompositeRole as f, getOrganizations as i, OrganizationUserRole as l, OrganizationCompositeRole as m, getOrganizationPermissions as n, useOrganizationPermissions as o, OrganizationUserCompositeRole as p, getOrganizationRoleIds as r, useOrganizationRoleIds as s, getOrganizationAllPermissions as t, OrganizationMember as u };
+//# sourceMappingURL=organization-rbac-CVRP1FKi.mjs.map

package/organization-rbac-CVRP1FKi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-rbac-CVRP1FKi.mjs","names":[],"sources":["../../plugins/organization-rbac/constants.mts","../../plugins/organization-rbac/models/OrganizationCompositeRole.mts","../../plugins/organization-rbac/models/OrganizationUserCompositeRole.mts","../../plugins/organization-rbac/models/CompositeRole.mts","../../plugins/organization-rbac/models/OrganizationAppointment.mts","../../plugins/organization-rbac/models/OrganizationMember.mts","../../plugins/organization-rbac/models/OrganizationUserRole.mts","../../plugins/organization-rbac/index.mts"],"sourcesContent":["import PluginMeta from '@yongdall/plugin-meta';\nexport const {\n\tid: pluginId,\n\tdatabase: database,\n} = PluginMeta();\n","import { actions, createField, createModel, now, Query, uuid, Where } from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { CompositeRole } from './CompositeRole.mts';\nimport { getModel, ServerError } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationCompositeRole = createModel('organizationCompositeRole', {\n\tcompositeRoleId: createField('uuid', { nullable: false, index: true, label: '复合角色', model: 'compositeRole', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n}, {\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'destroy'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy'] },\n\t],\n\tdatabase,\n\tlabel: '组织复合角色配置',\n\thooks: {\n\t\tasync afterCreate(conn, model, record) {\n\t\t\tif (!record.organizationId) { throw new ServerError('组织不存在') }\n\t\t\tif (!record.roleId) { throw new ServerError('角色不存在') }\n\t\t\tconst [compositeRole] = await conn.call(\n\t\t\t\tnew Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1)\n\t\t\t)\n\t\t\tif (!compositeRole) {\n\t\t\t\tthrow new Error('复合角色不存在')\n\t\t\t}\n\t\t\tif (!compositeRole.organizationId) { return }\n\t\t\tconst organizationModel = await getModel('organization')\n\t\t\tif (organizationModel) {\n\t\t\t\tconst [organization] = await useDatabase(organizationModel.databaseId).call(\n\t\t\t\t\tnew Query(organizationModel).where({ id: record.organizationId, mainId: compositeRole.organizationId }).limit(1)\n\t\t\t\t)\n\t\t\t\tif (!organization) {\n\t\t\t\t\tthrow new ServerError('请选择关联组织');\n\t\t\t\t}\n\n\t\t\t}\n\t\t\tconst roleModel = await getModel('role')\n\t\t\tif (roleModel?.fields.open) {\n\t\t\t\tconst [role] = await useDatabase(roleModel.databaseId).call(\n\t\t\t\t\tnew Query(roleModel).where({ id: record.organizationId, open: true }).limit(1)\n\t\t\t\t)\n\t\t\t\tif (!role) {\n\t\t\t\t\tthrow new ServerError('请选择有效角色');\n\t\t\t\t}\n\n\t\t\t}\n\t\t},\n\t}\n});\n","import { actions, createField, createModel, now, Query, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { CompositeRole } from './CompositeRole.mts';\nimport { ServerError } from '@yongdall/core';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationUserCompositeRole = createModel('organizationUserCompositeRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true }),\n\tcompositeRoleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'compositeRole', renderer: 'document', immutable: true, primary: 2 }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n},{\n\tdatabase,\n\tlabel: '用户复合角色',\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'destroy'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, model, record) {\n\t\t\tconst [compositeRole] = await conn.call(\n\t\t\t\tnew Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1)\n\t\t\t)\n\t\t\tif (!compositeRole) {\n\t\t\t\tthrow new ServerError('复合角色不存在')\n\t\t\t}\n\t\t\tif ((compositeRole.organizationId || null) === (record.organizationId || null)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthrow new ServerError('复合角色与组织不匹配');\n\t\t},\n\t}\n});\n","import { Action, actions, createField, createModel, now, Query, uuid, Where } from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { getModel, ServerError } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { OrganizationCompositeRole } from './OrganizationCompositeRole.mts';\nimport { OrganizationUserCompositeRole } from './OrganizationUserCompositeRole.mts';\n\n\nexport const CompositeRole = createModel('compositeRole', {\n\tid: createField('uuid', { nullable: false, default: uuid, primary: 1, uncreatable: true, layout: { hidden: true } }),\n\tlabel: createField('string', { size: 255, nullable: false, default: '', label: '名称', layout: { colSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: true, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, source: { search: 'internal=0' } }),\n\tdescription: createField('text', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n}, {\n\tdatabase,\n\tlabelField: 'label',\n\tlabel: '复合角色',\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, model, { organizationId }) {\n\t\t\tif (!organizationId) { return; }\n\t\t\tconst organizationModel = await getModel('organization')\n\t\t\tif (!organizationModel) { return; }\n\t\t\tconst [organization] = await useDatabase(organizationModel.databaseId).call(\n\t\t\t\tnew Query(organizationModel).where({ id: organizationId, internal: false }).limit(1)\n\t\t\t)\n\t\t\tif (organization) { return; }\n\t\t\tthrow new ServerError('请选择外部组织');\n\t\t},\n\t\tasync afterDelete(conn, model, record, update) {\n\t\t\tconst list = [\n\t\t\t\tconn.call(Action.delete(OrganizationUserCompositeRole, Where.and({ compositeRoleId: record.id })))\n\t\t\t]\n\n\t\t\tif (!update) {\n\t\t\t\tlist.push(\n\t\t\t\t\tconn.call(Action.delete(OrganizationCompositeRole, Where.and({ compositeRoleId: record.id })))\n\t\t\t\t)\n\t\t\t}\n\t\t\tawait Promise.all(list)\n\t\t},\n\t}\n});\n","import { createField, createModel, now, uuid } from '@yongdall/model';\nimport { database } from '../constants.mts';\n\n\n\n// export const OrganizationAppointmentRole = createModel('organizationAppointmentRole', {\n// \tappointmentId: createField('uuid', { nullable: false, index: true, label: '职务', model: 'appointment', renderer: 'document', immutable: true, primary: 1 }),\n// \troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 2 }),\n// \tno: createField('i32', { nullable: false, default: 0 }),\n// });\n\nexport const OrganizationAppointment = createModel('organizationAppointment', {\n\tid: createField('uuid', { nullable: false, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tlabel: createField('string', { nullable: false, label: '职务名称' }),\n\tdescription: createField('string', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\t// roles: createField(OrganizationAppointmentRole, { \n\t// \tarray: true, \n\t// \tconstraints: { appointmentId: { field: 'id' }, no: { noField: true } }, \n\t// \tlabel: '角色列表' \n\t// }),\n}, {\n\tdatabase,\n\n\tpermissions: [\n\t\t{ permission: 'system:organization', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\n\n\nexport const OrganizationMember = createModel('organizationMember', {\n\tid: createField('uuid', { nullable: false, index: true, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\tappointmentId: createField('uuid', { nullable: true, index: true, label: '职务', model: 'appointment', renderer: 'document', layout: { rowSpan: 6 } }),\n\n\tdefault: createField('bool', { nullable: false, default: false, label: '默认职务' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n}, {\n\tdatabase,\n\tindexes: [\n\t\t{ fields: ['userId', 'organizationId', 'appointmentId'], unique: true }\n\t],\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, Model, record) {\n\t\t\tif (!record.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\n\t\tasync afterUpdate(conn, Model, record, oldRecord) {\n\t\t\tif (!record.default) { return }\n\t\t\tif (oldRecord.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\t}\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\n\nexport const OrganizationUserRole = createModel('organizationUserRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\n},{\n\tdatabase,\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'destroy'] },\n\t],\n});\n","import { createKeyStore } from '@yongdall/context';\nimport { Query } from '@yongdall/model';\nimport { getUser } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { findRolePermissions } from '@yongdall/role-permission';\nimport { OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole, OrganizationUserRole } from './models/index.mts';\n\nexport * from './models/index.mts';\n\n\n/** 所在组织 */\nexport const getOrganizations = createKeyStore(async (userId: string | null) => {\n\tif (!userId) { return new Set(); }\n\tconst relations: { organizationId: string }[] = await useDatabase(OrganizationMember.databaseId).call(\n\t\tnew Query(OrganizationMember).select(['organizationId']).where('userId', userId)\n\t);\n\treturn new Set(relations.map(v => v.organizationId));\n}, user => user || '');\n\n\n/** 角色 */\nexport const getOrganizationRoleIds = createKeyStore(async (userId: string | null) => {\n\tconst compositeRoleIds = new Query(OrganizationUserCompositeRole).select('compositeRoleId').where('userId', '=', userId)\n\tconst list: { organizationId: number; roleId: string; }[][] = await Promise.all([\n\t\tuseDatabase(OrganizationUserRole.databaseId).call(\n\t\t\tnew Query(OrganizationUserRole).select(['organizationId', 'roleId'])\n\t\t\t\t.where('userId', userId)\n\t\t),\n\t\tuseDatabase(OrganizationCompositeRole.databaseId).call(\n\t\t\tnew Query(OrganizationCompositeRole).select(['organizationId', 'roleId'])\n\t\t\t\t.where('compositeRoleId', 'in', compositeRoleIds)\n\t\t)\n\t]);\n\n\treturn Object.fromEntries((Object.entries(Object.groupBy(list.flat(), v => v.organizationId))\n\t\t.map(([organizationId, list]) => [organizationId, new Set(list?.map(v => v.roleId))])))\n}, user => user || '');\n\n\nexport const getOrganizationPermissions = createKeyStore(async (userId: string | null) => {\n\tconst roleIds = await getOrganizationRoleIds(userId)\n\tconst allRoleIds = [...new Set(Object.values(roleIds).flatMap(v => [...v]))];\n\tconst permissions: Record<string, Set<string>> = Object.create(null);\n\tif (!allRoleIds.length) { return permissions; }\n\tconst values = await findRolePermissions(allRoleIds);\n\tconst list = Object.fromEntries(Object.entries(Object.groupBy(values, l => l.roleId)).map(([k, v]) => [k, v?.map(v => v.permission)]));\n\tfor (const [organization, roleSet] of Object.entries(roleIds)) {\n\t\tconst s = new Set([...roleSet].flatMap(v => list[v] || []));\n\t\tif (!s.size) { continue; }\n\t\tpermissions[organization] = s;\n\t}\n\treturn permissions;\n}, user => user || '');\n\n\n\nexport const getOrganizationAllPermissions = createKeyStore(async (userId: string | null) => {\n\tconst v = await getOrganizationPermissions(userId)\n\treturn new Set(Object.values(v).flatMap(v => [...v]));\n}, user => user || '');\n\n/** @deprecated */\nexport const useOrganizations = () => getUser().then(getOrganizations);\n/** @deprecated */\nexport const useOrganizationRoleIds = () => getUser().then(getOrganizationRoleIds);\n/** @deprecated */\nexport const useOrganizationPermissions = () => getUser().then(getOrganizationPermissions);\n/** @deprecated */\nexport const useOrganizationAllPermissions = () => getUser().then(getOrganizationAllPermissions);\n"],"mappings":";;;;;;;;AACA,MAAa,EACZ,IAAI,UACM,aACP,YAAY;;;;;;;;;;;;ACUhB,MAAa,4BAA4B,YAAY,6BAA6B;CACjF,iBAAiB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAQ,OAAO;EAAiB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAChK,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAE5I,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,EAAE;CAEF,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;EAAE,EACxH;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAU;EAAE,CACvK;CACD;CACA,OAAO;CACP,OAAO,EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;AACtC,MAAI,CAAC,OAAO,eAAkB,OAAM,IAAI,YAAY,QAAQ;AAC5D,MAAI,CAAC,OAAO,OAAU,OAAM,IAAI,YAAY,QAAQ;EACpD,MAAM,CAAC,iBAAiB,MAAM,KAAK,KAClC,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,OAAO,iBAAiB,CAAC,CAAC,MAAM,EAAE,CACvE;AACD,MAAI,CAAC,cACJ,OAAM,IAAI,MAAM,UAAU;AAE3B,MAAI,CAAC,cAAc,eAAkB;EACrC,MAAM,oBAAoB,MAAM,SAAS,eAAe;AACxD,MAAI,mBAAmB;GACtB,MAAM,CAAC,gBAAgB,MAAM,YAAY,kBAAkB,WAAW,CAAC,KACtE,IAAI,MAAM,kBAAkB,CAAC,MAAM;IAAE,IAAI,OAAO;IAAgB,QAAQ,cAAc;IAAgB,CAAC,CAAC,MAAM,EAAE,CAChH;AACD,OAAI,CAAC,aACJ,OAAM,IAAI,YAAY,UAAU;;EAIlC,MAAM,YAAY,MAAM,SAAS,OAAO;AACxC,MAAI,WAAW,OAAO,MAAM;GAC3B,MAAM,CAAC,QAAQ,MAAM,YAAY,UAAU,WAAW,CAAC,KACtD,IAAI,MAAM,UAAU,CAAC,MAAM;IAAE,IAAI,OAAO;IAAgB,MAAM;IAAM,CAAC,CAAC,MAAM,EAAE,CAC9E;AACD,OAAI,CAAC,KACJ,OAAM,IAAI,YAAY,UAAU;;IAKnC;CACD,CAAC;;;;;;;;;;;;AChDF,MAAa,gCAAgC,YAAY,iCAAiC;CACzF,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,CAAC;CAChJ,iBAAiB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAiB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAE9J,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CACjG,EAAC;CACD;CACA,OAAO;CAEP,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;EAAE,EACxH;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAU;EAAE,CACvK;CACD,OAAO,EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;EACtC,MAAM,CAAC,iBAAiB,MAAM,KAAK,KAClC,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,OAAO,iBAAiB,CAAC,CAAC,MAAM,EAAE,CACvE;AACD,MAAI,CAAC,cACJ,OAAM,IAAI,YAAY,UAAU;AAEjC,OAAK,cAAc,kBAAkB,WAAW,OAAO,kBAAkB,MACxE;AAED,QAAM,IAAI,YAAY,aAAa;IAEpC;CACD,CAAC;;;;AClCF,MAAa,gBAAgB,YAAY,iBAAiB;CACzD,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAM,SAAS;EAAG,aAAa;EAAM,QAAQ,EAAE,QAAQ,MAAM;EAAE,CAAC;CACpH,OAAO,YAAY,UAAU;EAAE,MAAM;EAAK,UAAU;EAAO,SAAS;EAAI,OAAO;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CAC9G,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,QAAQ,cAAc;EAAE,CAAC;CACjL,aAAa,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,CAAC;CAEjE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CACjG,EAAE;CACF;CACA,YAAY;CACZ,OAAO;CAEP,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,EACnJ;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,IAAI;EAAE,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,CACxL;CACD,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,EAAE,kBAAkB;AAClD,OAAI,CAAC,eAAkB;GACvB,MAAM,oBAAoB,MAAM,SAAS,eAAe;AACxD,OAAI,CAAC,kBAAqB;GAC1B,MAAM,CAAC,gBAAgB,MAAM,YAAY,kBAAkB,WAAW,CAAC,KACtE,IAAI,MAAM,kBAAkB,CAAC,MAAM;IAAE,IAAI;IAAgB,UAAU;IAAO,CAAC,CAAC,MAAM,EAAE,CACpF;AACD,OAAI,aAAgB;AACpB,SAAM,IAAI,YAAY,UAAU;;EAEjC,MAAM,YAAY,MAAM,OAAO,QAAQ,QAAQ;GAC9C,MAAM,OAAO,CACZ,KAAK,KAAK,OAAO,OAAO,+BAA+B,MAAM,IAAI,EAAE,iBAAiB,OAAO,IAAI,CAAC,CAAC,CAAC,CAClG;AAED,OAAI,CAAC,OACJ,MAAK,KACJ,KAAK,KAAK,OAAO,OAAO,2BAA2B,MAAM,IAAI,EAAE,iBAAiB,OAAO,IAAI,CAAC,CAAC,CAAC,CAC9F;AAEF,SAAM,QAAQ,IAAI,KAAK;;EAExB;CACD,CAAC;;;;ACtCF,MAAa,0BAA0B,YAAY,2BAA2B;CAC7E,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAE3G,OAAO,YAAY,UAAU;EAAE,UAAU;EAAO,OAAO;EAAQ,CAAC;CAChE,aAAa,YAAY,UAAU;EAAE,UAAU;EAAM,OAAO;EAAM,CAAC;CAEnE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAOjG,EAAE;CACF;CAEA,aAAa,CACZ;EAAE,YAAY;EAAuB,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,CACrI;CACD,CAAC;;;;AC3BF,MAAa,qBAAqB,YAAY,sBAAsB;CACnE,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAExH,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxJ,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxK,eAAe,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAe,UAAU;EAAY,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CAEpJ,SAAS,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAO,OAAO;EAAQ,CAAC;CAEhF,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAEjG,EAAE;CACF;CACA,SAAS,CACR;EAAE,QAAQ;GAAC;GAAU;GAAkB;GAAgB;EAAE,QAAQ;EAAM,CACvE;CACD,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,CAC7H;CACD,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;AACtC,OAAI,CAAC,OAAO,QAAW;AACvB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAGH,MAAM,YAAY,MAAM,OAAO,QAAQ,WAAW;AACjD,OAAI,CAAC,OAAO,QAAW;AACvB,OAAI,UAAU,QAAW;AACzB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAEH;CACD,CAAC;;;;AC3CF,MAAa,uBAAuB,YAAY,wBAAwB;CACvE,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAG5I,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAE/F,EAAC;CACD;CACA,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;EAAE,CAClG;CACD,CAAC;;;;;ACLF,MAAa,mBAAmB,eAAe,OAAO,WAA0B;AAC/E,KAAI,CAAC,OAAU,wBAAO,IAAI,KAAK;CAC/B,MAAM,YAA0C,MAAM,YAAY,mBAAmB,WAAW,CAAC,KAChG,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,UAAU,OAAO,CAChF;AACD,QAAO,IAAI,IAAI,UAAU,KAAI,MAAK,EAAE,eAAe,CAAC;IAClD,SAAQ,QAAQ,GAAG;;AAItB,MAAa,yBAAyB,eAAe,OAAO,WAA0B;CACrF,MAAM,mBAAmB,IAAI,MAAM,8BAA8B,CAAC,OAAO,kBAAkB,CAAC,MAAM,UAAU,KAAK,OAAO;CACxH,MAAM,OAAwD,MAAM,QAAQ,IAAI,CAC/E,YAAY,qBAAqB,WAAW,CAAC,KAC5C,IAAI,MAAM,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,SAAS,CAAC,CAClE,MAAM,UAAU,OAAO,CACzB,EACD,YAAY,0BAA0B,WAAW,CAAC,KACjD,IAAI,MAAM,0BAA0B,CAAC,OAAO,CAAC,kBAAkB,SAAS,CAAC,CACvE,MAAM,mBAAmB,MAAM,iBAAiB,CAClD,CACD,CAAC;AAEF,QAAO,OAAO,YAAa,OAAO,QAAQ,OAAO,QAAQ,KAAK,MAAM,GAAE,MAAK,EAAE,eAAe,CAAC,CAC3F,KAAK,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,IAAI,IAAI,MAAM,KAAI,MAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE;IACtF,SAAQ,QAAQ,GAAG;AAGtB,MAAa,6BAA6B,eAAe,OAAO,WAA0B;CACzF,MAAM,UAAU,MAAM,uBAAuB,OAAO;CACpD,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,QAAQ,CAAC,SAAQ,MAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CAC5E,MAAM,cAA2C,OAAO,OAAO,KAAK;AACpE,KAAI,CAAC,WAAW,OAAU,QAAO;CACjC,MAAM,SAAS,MAAM,oBAAoB,WAAW;CACpD,MAAM,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,QAAQ,SAAQ,MAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,KAAI,MAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AACtI,MAAK,MAAM,CAAC,cAAc,YAAY,OAAO,QAAQ,QAAQ,EAAE;EAC9D,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAQ,MAAK,KAAK,MAAM,EAAE,CAAC,CAAC;AAC3D,MAAI,CAAC,EAAE,KAAQ;AACf,cAAY,gBAAgB;;AAE7B,QAAO;IACL,SAAQ,QAAQ,GAAG;AAItB,MAAa,gCAAgC,eAAe,OAAO,WAA0B;CAC5F,MAAM,IAAI,MAAM,2BAA2B,OAAO;AAClD,QAAO,IAAI,IAAI,OAAO,OAAO,EAAE,CAAC,SAAQ,MAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,SAAQ,QAAQ,GAAG;;AAGtB,MAAa,yBAAyB,SAAS,CAAC,KAAK,iBAAiB;;AAEtE,MAAa,+BAA+B,SAAS,CAAC,KAAK,uBAAuB;;AAElF,MAAa,mCAAmC,SAAS,CAAC,KAAK,2BAA2B;;AAE1F,MAAa,sCAAsC,SAAS,CAAC,KAAK,8BAA8B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yongdall/organization-rbac",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "type": "module",
   "main": "./index.mjs",
   "exports": {
@@ -11,14 +11,15 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@yongdall/connection": "^0.6.5",
-    "@yongdall/context": "^0.6.5",
-    "@yongdall/core": "^0.6.5",
-    "@yongdall/model": "^0.6.5",
-    "@yongdall/role-permission": "^0.6.5"
+    "@yongdall/connection": "^0.6.6",
+    "@yongdall/context": "^0.6.6",
+    "@yongdall/core": "^0.6.6",
+    "@yongdall/model": "^0.6.6",
+    "@yongdall/plugin-meta": "^0.6.6",
+    "@yongdall/role-permission": "^0.6.6"
   },
   "devDependencies": {
-    "@yongdall/migrate": "^0.6.5",
-    "@yongdall/types": "^0.6.5"
+    "@yongdall/migrate": "^0.6.6",
+    "@yongdall/types": "^0.6.6"
   }
 }

package/yongdall/migration.mjs

@@ -1,9 +1,15 @@
-import { a as OrganizationMember, s as OrganizationAppointment } from "../organization-rbac-BF8uzSCr.mjs";
+import { d as OrganizationAppointment, f as CompositeRole, m as OrganizationCompositeRole, p as OrganizationUserCompositeRole, u as OrganizationMember } from "../organization-rbac-CVRP1FKi.mjs";
 
-//#region plugins/organization-rbac/yongdall/migration.mjs
+//#region plugins/organization-rbac/yongdall/migration.mts
 /** @import { Profile } from '@yongdall/migrate' */
 /** @type {Profile['models']} */
-const models = [OrganizationAppointment, OrganizationMember];
+const models = [
+	OrganizationAppointment,
+	OrganizationMember,
+	CompositeRole,
+	OrganizationCompositeRole,
+	OrganizationUserCompositeRole
+];
 
 //#endregion
 export { models };

package/yongdall/migration.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"migration.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/migration.mjs"],"sourcesContent":["/** @import { Profile } from '@yongdall/migrate' */\nimport { OrganizationAppointment, OrganizationMember } from '../index.mts';\n\n\n/** @type {Profile['models']} */\nexport const models = [\n\tOrganizationAppointment,\n\tOrganizationMember,\n];\n"],"mappings":";;;;;AAKA,MAAa,SAAS,CACrB,yBACA,mBACA"}
+{"version":3,"file":"migration.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/migration.mts"],"sourcesContent":["/** @import { Profile } from '@yongdall/migrate' */\nimport { CompositeRole, OrganizationAppointment, OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole } from '../index.mts';\n\n\n/** @type {Profile['models']} */\nexport const models = [\n\tOrganizationAppointment,\n\tOrganizationMember,\n\tCompositeRole,\n\tOrganizationCompositeRole,\n\tOrganizationUserCompositeRole,\n];\n"],"mappings":";;;;;AAKA,MAAa,SAAS;CACrB;CACA;CACA;CACA;CACA;CACA"}

package/yongdall/model.mjs

@@ -1,11 +1,14 @@
-import { a as OrganizationMember, s as OrganizationAppointment } from "../organization-rbac-BF8uzSCr.mjs";
+import { d as OrganizationAppointment, f as CompositeRole, m as OrganizationCompositeRole, p as OrganizationUserCompositeRole, u as OrganizationMember } from "../organization-rbac-CVRP1FKi.mjs";
 
-//#region plugins/organization-rbac/yongdall/model.mjs
+//#region plugins/organization-rbac/yongdall/model.mts
 /** @import { ModelProfile } from '@yongdall/core' */
 /** @type {ModelProfile['models']} */
 const models = {
 	organizationAppointment: OrganizationAppointment,
-	organizationMember: OrganizationMember
+	organizationMember: OrganizationMember,
+	compositeRole: CompositeRole,
+	organizationCompositeRole: OrganizationCompositeRole,
+	organizationUserCompositeRole: OrganizationUserCompositeRole
 };
 
 //#endregion

package/yongdall/model.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"model.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/model.mjs"],"sourcesContent":["/** @import { ModelProfile } from '@yongdall/core' */\nimport { OrganizationAppointment, OrganizationMember } from '../index.mts';\n\n/** @type {ModelProfile['models']} */\nexport const models = {\n\torganizationAppointment: OrganizationAppointment,\n\torganizationMember: OrganizationMember,\n};\n"],"mappings":";;;;;AAIA,MAAa,SAAS;CACrB,yBAAyB;CACzB,oBAAoB;CACpB"}
+{"version":3,"file":"model.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/model.mts"],"sourcesContent":["/** @import { ModelProfile } from '@yongdall/core' */\nimport { CompositeRole, OrganizationAppointment, OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole } from '../index.mts';\n\n/** @type {ModelProfile['models']} */\nexport const models = {\n\torganizationAppointment: OrganizationAppointment,\n\torganizationMember: OrganizationMember,\n\t\tcompositeRole: CompositeRole,\n\t\torganizationCompositeRole: OrganizationCompositeRole,\n\t\torganizationUserCompositeRole: OrganizationUserCompositeRole,\n};\n"],"mappings":";;;;;AAIA,MAAa,SAAS;CACrB,yBAAyB;CACzB,oBAAoB;CACnB,eAAe;CACf,2BAA2B;CAC3B,+BAA+B;CAChC"}

package/yongdall/user.mjs

@@ -1,16 +1,3 @@
-import { n as useOrganizationPermissions, t as useOrganizationAllPermissions } from "../organization-rbac-BF8uzSCr.mjs";
+import { n as getOrganizationPermissions, t as getOrganizationAllPermissions } from "../organization-rbac-CVRP1FKi.mjs";
 
-//#region plugins/organization-rbac/yongdall/user.mjs
-/** @import { UserManager } from '@yongdall/core' */
-/** @type {UserManager['getOrganizationAllPermissions']} */
-const getOrganizationAllPermissions = () => {
-	return useOrganizationAllPermissions();
-};
-/** @type {UserManager['getOrganizationPermissions']} */
-const getOrganizationPermissions = () => {
-	return useOrganizationPermissions();
-};
-
-//#endregion
-export { getOrganizationAllPermissions, getOrganizationPermissions };
-//# sourceMappingURL=user.mjs.map
+export { getOrganizationAllPermissions, getOrganizationPermissions };

package/organization-rbac-BF8uzSCr.mjs

@@ -1,230 +0,0 @@
-import { createComputed } from "@yongdall/context";
-import { Query, Where, actions, createField, createModel, now, uuid } from "@yongdall/model";
-import { getUser } from "@yongdall/core";
-import { useDatabase } from "@yongdall/connection";
-import { findRolePermissions } from "@yongdall/role-permission";
-
-//#region plugins/organization-rbac/models/OrganizationAppointment.mjs
-const OrganizationAppointment = createModel("organizationAppointment", {
-	id: createField("uuid", {
-		nullable: false,
-		primary: 1,
-		default: uuid,
-		uncreatable: true,
-		immutable: true
-	}),
-	label: createField("string", {
-		nullable: false,
-		label: "职务名称"
-	}),
-	description: createField("string", {
-		nullable: true,
-		label: "描述"
-	}),
-	createdAt: createField("date", {
-		nullable: false,
-		default: now,
-		creating: now,
-		label: "创建日期"
-	}),
-	updatedAt: createField("date", {
-		nullable: false,
-		default: now,
-		updating: now,
-		label: "最后更新日期"
-	})
-}, { permissions: [{
-	permission: "system:organization",
-	fields: "*",
-	authorizations: [
-		"query",
-		"read",
-		"create",
-		"update",
-		"destroy",
-		"add",
-		"remove"
-	]
-}] });
-
-//#endregion
-//#region plugins/organization-rbac/models/OrganizationMember.mjs
-/**
-* 组织用户角色模型
-* @typedef {Object} OrganizationUserRole
-* @property {string} userId - 用户ID，主键第一部分
-* @property {string} organizationId - 组织ID，主键第二部分
-* @property {string} roleId - 角色ID，主键第三部分
-* @property {number} no - 编号
-*/
-const OrganizationUserRole = createModel("organizationUserRole", {
-	userId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "用户",
-		model: "user",
-		renderer: "document",
-		immutable: true,
-		primary: 1
-	}),
-	organizationId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "组织",
-		model: "organization",
-		renderer: "document",
-		immutable: true,
-		primary: 2
-	}),
-	roleId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "角色",
-		model: "role",
-		renderer: "document",
-		immutable: true,
-		primary: 3
-	}),
-	no: createField("i32", {
-		nullable: false,
-		default: 0
-	})
-});
-const OrganizationMember = createModel("organizationMember", {
-	id: createField("uuid", {
-		nullable: false,
-		index: true,
-		primary: 1,
-		default: uuid,
-		uncreatable: true,
-		immutable: true
-	}),
-	userId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "用户",
-		model: "user",
-		renderer: "document",
-		immutable: true,
-		layout: { rowSpan: 6 }
-	}),
-	organizationId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "组织",
-		model: "organization",
-		renderer: "document",
-		immutable: true,
-		layout: { rowSpan: 6 }
-	}),
-	appointmentId: createField("uuid", {
-		nullable: true,
-		index: true,
-		label: "职务",
-		model: "appointment",
-		renderer: "document",
-		layout: { rowSpan: 6 }
-	}),
-	default: createField("bool", {
-		nullable: false,
-		default: false,
-		label: "默认职务"
-	}),
-	createdAt: createField("date", {
-		nullable: false,
-		default: now,
-		creating: now,
-		label: "创建日期"
-	}),
-	updatedAt: createField("date", {
-		nullable: false,
-		default: now,
-		updating: now,
-		label: "最后更新日期"
-	}),
-	roles: createField(OrganizationUserRole, {
-		array: true,
-		constraints: {
-			organizationId: { field: "organizationId" },
-			userId: { field: "userId" },
-			no: { noField: true }
-		},
-		label: "角色列表",
-		layout: { columns: [{ actions: ["add", "remove"] }, {
-			field: "roleId",
-			placeholder: 1
-		}] }
-	})
-}, {
-	indexes: [{
-		fields: [
-			"userId",
-			"organizationId",
-			"appointmentId"
-		],
-		unique: true
-	}],
-	permissions: [{
-		permission: "system:user",
-		fields: "*",
-		authorizations: [
-			"query",
-			"read",
-			"create",
-			"update",
-			"destroy",
-			"add",
-			"remove"
-		]
-	}],
-	hooks: {
-		async afterCreate(conn, Model, record) {
-			if (!record.default) return;
-			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
-		},
-		async afterUpdate(conn, Model, record, oldRecord) {
-			if (!record.default) return;
-			if (oldRecord.default) return;
-			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
-		}
-	}
-});
-
-//#endregion
-//#region plugins/organization-rbac/index.mts
-/** 所在组织 */
-const useOrganizations = createComputed(async () => {
-	const id = await getUser();
-	const relations = await useDatabase().call(actions.select(new Query(OrganizationMember).select(["organizationId"]).where("userId", id)));
-	return new Set(relations.map((v) => v.organizationId));
-});
-/** 角色 */
-const useOrganizationRoleIds = createComputed(async () => {
-	const organizations = await useOrganizations();
-	if (!organizations.size) return {};
-	const id = await getUser();
-	const list = await useDatabase().call(actions.select(new Query(OrganizationUserRole).select(["organizationId", "roleId"]).where("organizationId", "in", [...organizations]).where("userId", id)));
-	return Object.fromEntries(Object.entries(Object.groupBy(list, (v) => v.organizationId)).map(([organizationId, list]) => [organizationId, new Set(list?.map((v) => v.roleId))]));
-});
-const useOrganizationPermissions = createComputed(async () => {
-	const roleIds = await useOrganizationRoleIds();
-	const allRoleIds = [...new Set(Object.values(roleIds).flatMap((v) => [...v]))];
-	const permissions = Object.create(null);
-	if (!allRoleIds.length) return permissions;
-	const values = await findRolePermissions(allRoleIds);
-	const list = Object.fromEntries(Object.entries(Object.groupBy(values, (l) => l.roleId)).map(([k, v]) => [k, v?.map((v) => v.permission)]));
-	for (const [organization, roleSet] of Object.entries(roleIds)) {
-		const s = new Set([...roleSet].flatMap((v) => list[v] || []));
-		if (!s.size) continue;
-		permissions[organization] = s;
-	}
-	return permissions;
-});
-const useOrganizationAllPermissions = createComputed(async () => {
-	const v = await useOrganizationPermissions();
-	return new Set(Object.values(v).flatMap((v) => [...v]));
-});
-
-//#endregion
-export { OrganizationMember as a, useOrganizations as i, useOrganizationPermissions as n, OrganizationUserRole as o, useOrganizationRoleIds as r, OrganizationAppointment as s, useOrganizationAllPermissions as t };
-//# sourceMappingURL=organization-rbac-BF8uzSCr.mjs.map

package/organization-rbac-BF8uzSCr.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"organization-rbac-BF8uzSCr.mjs","names":[],"sources":["../../plugins/organization-rbac/models/OrganizationAppointment.mjs","../../plugins/organization-rbac/models/OrganizationMember.mjs","../../plugins/organization-rbac/index.mts"],"sourcesContent":["import { createField, createModel, now, uuid } from '@yongdall/model';\n\n\n\n// export const OrganizationAppointmentRole = createModel('organizationAppointmentRole', {\n// \tappointmentId: createField('uuid', { nullable: false, index: true, label: '职务', model: 'appointment', renderer: 'document', immutable: true, primary: 1 }),\n// \troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 2 }),\n// \tno: createField('i32', { nullable: false, default: 0 }),\n// });\n\nexport const OrganizationAppointment = createModel('organizationAppointment', {\n\tid: createField('uuid', { nullable: false, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tlabel: createField('string', { nullable: false, label: '职务名称' }),\n\tdescription: createField('string', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\t// roles: createField(OrganizationAppointmentRole, { \n\t// \tarray: true, \n\t// \tconstraints: { appointmentId: { field: 'id' }, no: { noField: true } }, \n\t// \tlabel: '角色列表' \n\t// }),\n}, {\n\n\tpermissions: [\n\t\t{ permission: 'system:organization', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationUserRole = createModel('organizationUserRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\tno: createField('i32', { nullable: false, default: 0 }),\n});\n\n\nexport const OrganizationMember = createModel('organizationMember', {\n\tid: createField('uuid', { nullable: false, index: true, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\tappointmentId: createField('uuid', { nullable: true, index: true, label: '职务', model: 'appointment', renderer: 'document', layout: { rowSpan: 6 } }),\n\n\tdefault: createField('bool', { nullable: false, default: false, label: '默认职务' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\troles: createField(OrganizationUserRole, {\n\t\tarray: true,\n\t\tconstraints: {\n\t\t\torganizationId: { field: 'organizationId' },\n\t\t\tuserId: { field: 'userId' },\n\t\t\tno: { noField: true }\n\t\t},\n\t\tlabel: '角色列表',\n\t\tlayout: {\n\t\t\tcolumns: [{ actions: ['add', 'remove'] }, { field: 'roleId', placeholder: 1 }],\n\t\t},\n\t}),\n}, {\n\tindexes: [\n\t\t{ fields: ['userId', 'organizationId', 'appointmentId'], unique: true }\n\t],\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, Model, record) {\n\t\t\tif (!record.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\n\t\tasync afterUpdate(conn, Model, record, oldRecord) {\n\t\t\tif (!record.default) { return }\n\t\t\tif (oldRecord.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\t}\n});\n","import { createComputed } from '@yongdall/context';\nimport { actions, Query } from '@yongdall/model';\nimport { getUser } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { findRolePermissions } from '@yongdall/role-permission';\nimport { OrganizationMember, OrganizationUserRole } from './models/index.mjs';\n\nexport * from './models/index.mjs';\n\n\n/** 所在组织 */\nexport const useOrganizations = createComputed(async () => {\n\tconst id = await getUser();\n\tconst relations: {organizationId: string}[] = await useDatabase().call(actions.select(\n\t\tnew Query(OrganizationMember).select(['organizationId']).where('userId', id)\n\t));\n\treturn new Set(relations.map(v => v.organizationId));\n});\n\n\n/** 角色 */\nexport const useOrganizationRoleIds = createComputed(async () => {\n\tconst organizations = await useOrganizations()\n\tif (!organizations.size) { return {}; }\n\tconst id = await getUser();\n\tconst list: {organizationId: number; roleId: string;}[] = await useDatabase().call(actions.select(\n\t\tnew Query(OrganizationUserRole).select(['organizationId', 'roleId'])\n\t\t\t.where('organizationId', 'in', [...organizations])\n\t\t\t.where('userId', id)\n\t));\n\treturn Object.fromEntries((Object.entries(Object.groupBy(list, v => v.organizationId))\n\t\t.map(([organizationId, list]) => [organizationId, new Set(list?.map(v => v.roleId))])))\n});\n\n\nexport const useOrganizationPermissions = createComputed(async () => {\n\tconst roleIds = await useOrganizationRoleIds()\n\tconst allRoleIds = [...new Set(Object.values(roleIds).flatMap(v =>[...v]))];\n\tconst permissions: Record<string, Set<string>> = Object.create(null);\n\tif (!allRoleIds.length) { return permissions; }\n\tconst values = await findRolePermissions(allRoleIds);\n\tconst list = Object.fromEntries(Object.entries(Object.groupBy(values, l => l.roleId)).map(([k,v]) => [k, v?.map(v => v.permission)]));\n\tfor (const [organization, roleSet] of Object.entries(roleIds)) {\n\t\tconst s = new Set([...roleSet].flatMap(v => list[v] || []));\n\t\tif (!s.size) { continue; }\n\t\tpermissions[organization] = s;\n\t}\n\treturn permissions;\n});\n\n\n\nexport const useOrganizationAllPermissions = createComputed(async () => {\n\tconst v = await useOrganizationPermissions()\n\treturn new Set(Object.values(v).flatMap(v => [...v]));\n});\n"],"mappings":";;;;;;;AAUA,MAAa,0BAA0B,YAAY,2BAA2B;CAC7E,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAE3G,OAAO,YAAY,UAAU;EAAE,UAAU;EAAO,OAAO;EAAQ,CAAC;CAChE,aAAa,YAAY,UAAU;EAAE,UAAU;EAAM,OAAO;EAAM,CAAC;CAEnE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAOjG,EAAE,EAEF,aAAa,CACZ;CAAE,YAAY;CAAuB,QAAQ;CAAK,gBAAgB;EAAC;EAAS;EAAQ;EAAU;EAAU;EAAW;EAAO;EAAS;CAAE,CACrI,EACD,CAAC;;;;;;;;;;;;ACnBF,MAAa,uBAAuB,YAAY,wBAAwB;CACvE,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAE5I,IAAI,YAAY,OAAO;EAAE,UAAU;EAAO,SAAS;EAAG,CAAC;CACvD,CAAC;AAGF,MAAa,qBAAqB,YAAY,sBAAsB;CACnE,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAExH,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxJ,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxK,eAAe,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAe,UAAU;EAAY,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CAEpJ,SAAS,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAO,OAAO;EAAQ,CAAC;CAEhF,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAEjG,OAAO,YAAY,sBAAsB;EACxC,OAAO;EACP,aAAa;GACZ,gBAAgB,EAAE,OAAO,kBAAkB;GAC3C,QAAQ,EAAE,OAAO,UAAU;GAC3B,IAAI,EAAE,SAAS,MAAM;GACrB;EACD,OAAO;EACP,QAAQ,EACP,SAAS,CAAC,EAAE,SAAS,CAAC,OAAO,SAAS,EAAE,EAAE;GAAE,OAAO;GAAU,aAAa;GAAG,CAAC,EAC9E;EACD,CAAC;CACF,EAAE;CACF,SAAS,CACR;EAAE,QAAQ;GAAC;GAAU;GAAkB;GAAgB;EAAE,QAAQ;EAAM,CACvE;CACD,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,CAC7H;CACD,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;AACtC,OAAI,CAAC,OAAO,QAAW;AACvB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAGH,MAAM,YAAY,MAAM,OAAO,QAAQ,WAAW;AACjD,OAAI,CAAC,OAAO,QAAW;AACvB,OAAI,UAAU,QAAW;AACzB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAEH;CACD,CAAC;;;;;AC7DF,MAAa,mBAAmB,eAAe,YAAY;CAC1D,MAAM,KAAK,MAAM,SAAS;CAC1B,MAAM,YAAwC,MAAM,aAAa,CAAC,KAAK,QAAQ,OAC9E,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,UAAU,GAAG,CAC5E,CAAC;AACF,QAAO,IAAI,IAAI,UAAU,KAAI,MAAK,EAAE,eAAe,CAAC;EACnD;;AAIF,MAAa,yBAAyB,eAAe,YAAY;CAChE,MAAM,gBAAgB,MAAM,kBAAkB;AAC9C,KAAI,CAAC,cAAc,KAAQ,QAAO,EAAE;CACpC,MAAM,KAAK,MAAM,SAAS;CAC1B,MAAM,OAAoD,MAAM,aAAa,CAAC,KAAK,QAAQ,OAC1F,IAAI,MAAM,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,SAAS,CAAC,CAClE,MAAM,kBAAkB,MAAM,CAAC,GAAG,cAAc,CAAC,CACjD,MAAM,UAAU,GAAG,CACrB,CAAC;AACF,QAAO,OAAO,YAAa,OAAO,QAAQ,OAAO,QAAQ,OAAM,MAAK,EAAE,eAAe,CAAC,CACpF,KAAK,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,IAAI,IAAI,MAAM,KAAI,MAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE;EACvF;AAGF,MAAa,6BAA6B,eAAe,YAAY;CACpE,MAAM,UAAU,MAAM,wBAAwB;CAC9C,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,QAAQ,CAAC,SAAQ,MAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CAC3E,MAAM,cAA2C,OAAO,OAAO,KAAK;AACpE,KAAI,CAAC,WAAW,OAAU,QAAO;CACjC,MAAM,SAAS,MAAM,oBAAoB,WAAW;CACpD,MAAM,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,QAAQ,SAAQ,MAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAE,OAAO,CAAC,GAAG,GAAG,KAAI,MAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AACrI,MAAK,MAAM,CAAC,cAAc,YAAY,OAAO,QAAQ,QAAQ,EAAE;EAC9D,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAQ,MAAK,KAAK,MAAM,EAAE,CAAC,CAAC;AAC3D,MAAI,CAAC,EAAE,KAAQ;AACf,cAAY,gBAAgB;;AAE7B,QAAO;EACN;AAIF,MAAa,gCAAgC,eAAe,YAAY;CACvE,MAAM,IAAI,MAAM,4BAA4B;AAC5C,QAAO,IAAI,IAAI,OAAO,OAAO,EAAE,CAAC,SAAQ,MAAK,CAAC,GAAG,EAAE,CAAC,CAAC;EACpD"}

package/yongdall/user.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/user.mjs"],"sourcesContent":["/** @import { UserManager } from '@yongdall/core' */\nimport { useOrganizationAllPermissions, useOrganizationPermissions } from '../index.mts';\n\n\n/** @type {UserManager['getOrganizationAllPermissions']} */\nexport const getOrganizationAllPermissions = () => {\n\treturn useOrganizationAllPermissions();\n};\n/** @type {UserManager['getOrganizationPermissions']} */\nexport const getOrganizationPermissions = () => {\n\treturn useOrganizationPermissions();\n};\n"],"mappings":";;;;;AAKA,MAAa,sCAAsC;AAClD,QAAO,+BAA+B;;;AAGvC,MAAa,mCAAmC;AAC/C,QAAO,4BAA4B"}