@yongdall/organization-rbac 0.6.5 → 0.7.0

package/index.d.mts

@@ -1,37 +1,30 @@
-import * as imodel15 from "imodel";
-import * as _yongdall_model2 from "@yongdall/model";
-
-//#region plugins/organization-rbac/models/OrganizationAppointment.d.mts
-declare const OrganizationAppointment: _yongdall_model2.ModelTable<{
-  id: imodel15.FieldDefine<"uuid", false, false>;
-  label: imodel15.FieldDefine<"string", false, false>;
-  description: imodel15.FieldDefine<"string", false, true>;
-  createdAt: imodel15.FieldDefine<"date", false, false>;
-  updatedAt: imodel15.FieldDefine<"date", false, false>;
-}, string>;
+//#region plugins/organization-rbac/models/CompositeRole.d.mts
+export declare const CompositeRole: import("@yongdall/model").ModelTable<{
+  id: import("imodel").FieldDefine<"uuid", false, false>;
+  label: import("imodel").FieldDefine<"string", false, false>;
+  organizationId: import("imodel").FieldDefine<"uuid", false, true>;
+  description: import("imodel").FieldDefine<"text", false, true>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+  updatedAt: import("imodel").FieldDefine<"date", false, false>;
+}, "compositeRole">;
 //#endregion
-//#region plugins/organization-rbac/models/OrganizationMember.d.mts
+//#region plugins/organization-rbac/models/OrganizationCompositeRole.d.mts
 /**
  * 组织用户角色模型
+ * @typedef {Object} OrganizationUserRole
+ * @property {string} userId - 用户ID，主键第一部分
+ * @property {string} organizationId - 组织ID，主键第二部分
+ * @property {string} roleId - 角色ID，主键第三部分
+ * @property {number} no - 编号
  */
-type OrganizationUserRole = {
-  /**
-   * - 用户ID，主键第一部分
-   */
-  userId: string;
-  /**
-   * - 组织ID，主键第二部分
-   */
-  organizationId: string;
-  /**
-   * - 角色ID，主键第三部分
-   */
-  roleId: string;
-  /**
-   * - 编号
-   */
-  no: number;
-};
+export declare const OrganizationCompositeRole: import("@yongdall/model").ModelTable<{
+  compositeRoleId: import("imodel").FieldDefine<"uuid", false, false>;
+  organizationId: import("imodel").FieldDefine<"uuid", false, false>;
+  roleId: import("imodel").FieldDefine<"uuid", false, false>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+}, "organizationCompositeRole">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserCompositeRole.d.mts
 /**
  * 组织用户角色模型
  * @typedef {Object} OrganizationUserRole
@@ -40,36 +33,49 @@ type OrganizationUserRole = {
  * @property {string} roleId - 角色ID，主键第三部分
  * @property {number} no - 编号
  */
-declare const OrganizationUserRole: _yongdall_model2.ModelTable<{
-  userId: imodel15.FieldDefine<"uuid", false, false>;
-  organizationId: imodel15.FieldDefine<"uuid", false, false>;
-  roleId: imodel15.FieldDefine<"uuid", false, false>;
-  no: imodel15.FieldDefine<"i32", false, false>;
-}, string>;
-declare const OrganizationMember: _yongdall_model2.ModelTable<{
-  id: imodel15.FieldDefine<"uuid", false, false>;
-  userId: imodel15.FieldDefine<"uuid", false, false>;
-  organizationId: imodel15.FieldDefine<"uuid", false, false>;
-  appointmentId: imodel15.FieldDefine<"uuid", false, true>;
-  default: imodel15.FieldDefine<"bool", false, false>;
-  createdAt: imodel15.FieldDefine<"date", false, false>;
-  updatedAt: imodel15.FieldDefine<"date", false, false>;
-  roles: imodel15.FieldDefine<_yongdall_model2.ModelTable<{
-    userId: imodel15.FieldDefine<"uuid", false, false>;
-    organizationId: imodel15.FieldDefine<"uuid", false, false>;
-    roleId: imodel15.FieldDefine<"uuid", false, false>;
-    no: imodel15.FieldDefine<"i32", false, false>;
-  }, string>, true, false>;
-}, string>;
+export declare const OrganizationUserCompositeRole: import("@yongdall/model").ModelTable<{
+  userId: import("imodel").FieldDefine<"uuid", false, false>;
+  organizationId: import("imodel").FieldDefine<"uuid", false, false>;
+  compositeRoleId: import("imodel").FieldDefine<"uuid", false, false>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+  updatedAt: import("imodel").FieldDefine<"date", false, false>;
+}, "organizationUserCompositeRole">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationAppointment.d.mts
+export declare const OrganizationAppointment: import("@yongdall/model").ModelTable<{
+  id: import("imodel").FieldDefine<"uuid", false, false>;
+  label: import("imodel").FieldDefine<"string", false, false>;
+  description: import("imodel").FieldDefine<"string", false, true>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+  updatedAt: import("imodel").FieldDefine<"date", false, false>;
+}, "organizationAppointment">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationMember.d.mts
+export declare const OrganizationMember: import("@yongdall/model").ModelTable<{
+  id: import("imodel").FieldDefine<"uuid", false, false>;
+  userId: import("imodel").FieldDefine<"uuid", false, false>;
+  organizationId: import("imodel").FieldDefine<"uuid", false, false>;
+  appointmentId: import("imodel").FieldDefine<"uuid", false, true>;
+  default: import("imodel").FieldDefine<"bool", false, false>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+  updatedAt: import("imodel").FieldDefine<"date", false, false>;
+}, "organizationMember">;
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserRole.d.mts
+export declare const OrganizationUserRole: import("@yongdall/model").ModelTable<{
+  userId: import("imodel").FieldDefine<"uuid", false, false>;
+  organizationId: import("imodel").FieldDefine<"uuid", false, false>;
+  roleId: import("imodel").FieldDefine<"uuid", false, false>;
+  createdAt: import("imodel").FieldDefine<"date", false, false>;
+}, "organizationUserRole">;
 //#endregion
 //#region plugins/organization-rbac/index.d.mts
 /** 所在组织 */
-declare const useOrganizations: () => Promise<Set<string>>;
+export declare const getOrganizations: (userId: string | null) => Promise<Set<unknown>>;
 /** 角色 */
-declare const useOrganizationRoleIds: () => Promise<{
+export declare const getOrganizationRoleIds: (userId: string | null) => Promise<{
   [k: string]: Set<string>;
 }>;
-declare const useOrganizationPermissions: () => Promise<Record<string, Set<string>>>;
-declare const useOrganizationAllPermissions: () => Promise<Set<string>>;
-//#endregion
-export { OrganizationAppointment, OrganizationMember, OrganizationUserRole, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };
+export declare const getOrganizationPermissions: (userId: string | null) => Promise<Record<string, Set<string>>>;
+export declare const getOrganizationAllPermissions: (userId: string | null) => Promise<Set<string>>;
+//#endregion

package/index.mjs

@@ -1,3 +1,2 @@
-import { a as OrganizationMember, i as useOrganizations, n as useOrganizationPermissions, o as OrganizationUserRole, r as useOrganizationRoleIds, s as OrganizationAppointment, t as useOrganizationAllPermissions } from "./organization-rbac-BF8uzSCr.mjs";
-
-export { OrganizationAppointment, OrganizationMember, OrganizationUserRole, useOrganizationAllPermissions, useOrganizationPermissions, useOrganizationRoleIds, useOrganizations };
+import { a as OrganizationUserRole, c as CompositeRole, i as getOrganizations, l as OrganizationUserCompositeRole, n as getOrganizationPermissions, o as OrganizationMember, r as getOrganizationRoleIds, s as OrganizationAppointment, t as getOrganizationAllPermissions, u as OrganizationCompositeRole } from "./organization-rbac--hDZMB8h.mjs";
+export { CompositeRole, OrganizationAppointment, OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole, OrganizationUserRole, getOrganizationAllPermissions, getOrganizationPermissions, getOrganizationRoleIds, getOrganizations };

package/organization-rbac--hDZMB8h.mjs

@@ -0,0 +1,497 @@
+import { createKeyStore } from "@yongdall/context";
+import { Action, Query, Where, actions, createField, createModel, now, uuid } from "@yongdall/model";
+import { ServerError, getModel } from "@yongdall/core";
+import { useDatabase } from "@yongdall/connection";
+import { findRolePermissions } from "@yongdall/role-permission";
+import PluginMeta from "@yongdall/plugin-meta";
+//#region plugins/organization-rbac/constants.mts
+const { id: pluginId, database } = PluginMeta();
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationCompositeRole.mts
+/**
+* 组织用户角色模型
+* @typedef {Object} OrganizationUserRole
+* @property {string} userId - 用户ID，主键第一部分
+* @property {string} organizationId - 组织ID，主键第二部分
+* @property {string} roleId - 角色ID，主键第三部分
+* @property {number} no - 编号
+*/
+const OrganizationCompositeRole = createModel("organizationCompositeRole", {
+	compositeRoleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "复合角色",
+		model: "compositeRole",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	roleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "role",
+		renderer: "document",
+		immutable: true,
+		primary: 3
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	})
+}, {
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy"
+		]
+	}],
+	database,
+	label: "组织复合角色配置",
+	hooks: { async afterCreate(conn, model, record) {
+		if (!record.organizationId) throw new ServerError("组织不存在");
+		if (!record.roleId) throw new ServerError("角色不存在");
+		const [compositeRole] = await conn.call(new Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1));
+		if (!compositeRole) throw new Error("复合角色不存在");
+		if (!compositeRole.organizationId) return;
+		const organizationModel = await getModel("organization");
+		if (organizationModel) {
+			const [organization] = await useDatabase(organizationModel.databaseId).call(new Query(organizationModel).where({
+				id: record.organizationId,
+				mainId: compositeRole.organizationId
+			}).limit(1));
+			if (!organization) throw new ServerError("请选择关联组织");
+		}
+		const roleModel = await getModel("role");
+		if (roleModel?.fields.open) {
+			const [role] = await useDatabase(roleModel.databaseId).call(new Query(roleModel).where({
+				id: record.organizationId,
+				open: true
+			}).limit(1));
+			if (!role) throw new ServerError("请选择有效角色");
+		}
+	} }
+});
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserCompositeRole.mts
+/**
+* 组织用户角色模型
+* @typedef {Object} OrganizationUserRole
+* @property {string} userId - 用户ID，主键第一部分
+* @property {string} organizationId - 组织ID，主键第二部分
+* @property {string} roleId - 角色ID，主键第三部分
+* @property {number} no - 编号
+*/
+const OrganizationUserCompositeRole = createModel("organizationUserCompositeRole", {
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true
+	}),
+	compositeRoleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "compositeRole",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	label: "用户复合角色",
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy"
+		]
+	}],
+	hooks: { async afterCreate(conn, model, record) {
+		const [compositeRole] = await conn.call(new Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1));
+		if (!compositeRole) throw new ServerError("复合角色不存在");
+		if ((compositeRole.organizationId || null) === (record.organizationId || null)) return;
+		throw new ServerError("复合角色与组织不匹配");
+	} }
+});
+//#endregion
+//#region plugins/organization-rbac/models/CompositeRole.mts
+const CompositeRole = createModel("compositeRole", {
+	id: createField("uuid", {
+		nullable: false,
+		default: uuid,
+		primary: 1,
+		uncreatable: true,
+		layout: { hidden: true }
+	}),
+	label: createField("string", {
+		size: 255,
+		nullable: false,
+		default: "",
+		label: "名称",
+		layout: { colSpan: 6 }
+	}),
+	organizationId: createField("uuid", {
+		nullable: true,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		source: { search: "internal=0" }
+	}),
+	description: createField("text", {
+		nullable: true,
+		label: "描述"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	labelField: "label",
+	label: "复合角色",
+	permissions: [{
+		permission: "system:compositeRole",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}, {
+		permission: "system:compositeRole",
+		organizationField: "organizationId",
+		fields: ["*"],
+		authorizations: [
+			"options",
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}],
+	hooks: {
+		async afterCreate(conn, model, { organizationId }) {
+			if (!organizationId) return;
+			const organizationModel = await getModel("organization");
+			if (!organizationModel) return;
+			const [organization] = await useDatabase(organizationModel.databaseId).call(new Query(organizationModel).where({
+				id: organizationId,
+				internal: false
+			}).limit(1));
+			if (organization) return;
+			throw new ServerError("请选择外部组织");
+		},
+		async afterDelete(conn, model, record, update) {
+			const list = [conn.call(Action.delete(OrganizationUserCompositeRole, Where.and({ compositeRoleId: record.id })))];
+			if (!update) list.push(conn.call(Action.delete(OrganizationCompositeRole, Where.and({ compositeRoleId: record.id }))));
+			await Promise.all(list);
+		}
+	}
+});
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationAppointment.mts
+const OrganizationAppointment = createModel("organizationAppointment", {
+	id: createField("uuid", {
+		nullable: false,
+		primary: 1,
+		default: uuid,
+		uncreatable: true,
+		immutable: true
+	}),
+	label: createField("string", {
+		nullable: false,
+		label: "职务名称"
+	}),
+	description: createField("string", {
+		nullable: true,
+		label: "描述"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	permissions: [{
+		permission: "system:organization",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}]
+});
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationMember.mts
+const OrganizationMember = createModel("organizationMember", {
+	id: createField("uuid", {
+		nullable: false,
+		index: true,
+		primary: 1,
+		default: uuid,
+		uncreatable: true,
+		immutable: true
+	}),
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		layout: { rowSpan: 6 }
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		layout: { rowSpan: 6 }
+	}),
+	appointmentId: createField("uuid", {
+		nullable: true,
+		index: true,
+		label: "职务",
+		model: "appointment",
+		renderer: "document",
+		layout: { rowSpan: 6 }
+	}),
+	default: createField("bool", {
+		nullable: false,
+		default: false,
+		label: "默认职务"
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	}),
+	updatedAt: createField("date", {
+		nullable: false,
+		default: now,
+		updating: now,
+		label: "最后更新日期"
+	})
+}, {
+	database,
+	indexes: [{
+		fields: [
+			"userId",
+			"organizationId",
+			"appointmentId"
+		],
+		unique: true
+	}],
+	permissions: [{
+		permission: "system:user",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"update",
+			"destroy",
+			"add",
+			"remove"
+		]
+	}],
+	hooks: {
+		async afterCreate(conn, Model, record) {
+			if (!record.default) return;
+			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
+		},
+		async afterUpdate(conn, Model, record, oldRecord) {
+			if (!record.default) return;
+			if (oldRecord.default) return;
+			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
+		}
+	}
+});
+//#endregion
+//#region plugins/organization-rbac/models/OrganizationUserRole.mts
+const OrganizationUserRole = createModel("organizationUserRole", {
+	userId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "用户",
+		model: "user",
+		renderer: "document",
+		immutable: true,
+		primary: 1
+	}),
+	organizationId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "组织",
+		model: "organization",
+		renderer: "document",
+		immutable: true,
+		primary: 2
+	}),
+	roleId: createField("uuid", {
+		nullable: false,
+		index: true,
+		label: "角色",
+		model: "role",
+		renderer: "document",
+		immutable: true,
+		primary: 3
+	}),
+	createdAt: createField("date", {
+		nullable: false,
+		default: now,
+		creating: now,
+		label: "创建日期"
+	})
+}, {
+	database,
+	permissions: [{
+		permission: "system:user",
+		fields: "*",
+		authorizations: [
+			"query",
+			"read",
+			"create",
+			"destroy"
+		]
+	}]
+});
+//#endregion
+//#region plugins/organization-rbac/index.mts
+/** 所在组织 */
+const getOrganizations = createKeyStore(async (userId) => {
+	if (!userId) return /* @__PURE__ */ new Set();
+	const relations = await useDatabase(OrganizationMember.databaseId).call(new Query(OrganizationMember).select(["organizationId"]).where("userId", userId));
+	return new Set(relations.map((v) => v.organizationId));
+}, (user) => user || "");
+/** 角色 */
+const getOrganizationRoleIds = createKeyStore(async (userId) => {
+	const compositeRoleIds = new Query(OrganizationUserCompositeRole).select("compositeRoleId").where("userId", "=", userId);
+	const list = await Promise.all([useDatabase(OrganizationUserRole.databaseId).call(new Query(OrganizationUserRole).select(["organizationId", "roleId"]).where("userId", userId)), useDatabase(OrganizationCompositeRole.databaseId).call(new Query(OrganizationCompositeRole).select(["organizationId", "roleId"]).where("compositeRoleId", "in", compositeRoleIds))]);
+	return Object.fromEntries(Object.entries(Object.groupBy(list.flat(), (v) => v.organizationId)).map(([organizationId, list]) => [organizationId, new Set(list?.map((v) => v.roleId))]));
+}, (user) => user || "");
+const getOrganizationPermissions = createKeyStore(async (userId) => {
+	const roleIds = await getOrganizationRoleIds(userId);
+	const allRoleIds = [...new Set(Object.values(roleIds).flatMap((v) => [...v]))];
+	const permissions = Object.create(null);
+	if (!allRoleIds.length) return permissions;
+	const values = await findRolePermissions(allRoleIds);
+	const list = Object.fromEntries(Object.entries(Object.groupBy(values, (l) => l.roleId)).map(([k, v]) => [k, v?.map((v) => v.permission)]));
+	for (const [organization, roleSet] of Object.entries(roleIds)) {
+		const s = new Set([...roleSet].flatMap((v) => list[v] || []));
+		if (!s.size) continue;
+		permissions[organization] = s;
+	}
+	return permissions;
+}, (user) => user || "");
+const getOrganizationAllPermissions = createKeyStore(async (userId) => {
+	const v = await getOrganizationPermissions(userId);
+	return new Set(Object.values(v).flatMap((v) => [...v]));
+}, (user) => user || "");
+//#endregion
+export { OrganizationUserRole as a, CompositeRole as c, getOrganizations as i, OrganizationUserCompositeRole as l, getOrganizationPermissions as n, OrganizationMember as o, getOrganizationRoleIds as r, OrganizationAppointment as s, getOrganizationAllPermissions as t, OrganizationCompositeRole as u };
+
+//# sourceMappingURL=organization-rbac--hDZMB8h.mjs.map

package/organization-rbac--hDZMB8h.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-rbac--hDZMB8h.mjs","names":[],"sources":["../../plugins/organization-rbac/constants.mts","../../plugins/organization-rbac/models/OrganizationCompositeRole.mts","../../plugins/organization-rbac/models/OrganizationUserCompositeRole.mts","../../plugins/organization-rbac/models/CompositeRole.mts","../../plugins/organization-rbac/models/OrganizationAppointment.mts","../../plugins/organization-rbac/models/OrganizationMember.mts","../../plugins/organization-rbac/models/OrganizationUserRole.mts","../../plugins/organization-rbac/index.mts"],"sourcesContent":["import PluginMeta from '@yongdall/plugin-meta';\nexport const {\n\tid: pluginId,\n\tdatabase: database,\n} = PluginMeta();\n","import { actions, createField, createModel, now, Query, uuid, Where } from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { CompositeRole } from './CompositeRole.mts';\nimport { getModel, ServerError } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationCompositeRole = createModel('organizationCompositeRole', {\n\tcompositeRoleId: createField('uuid', { nullable: false, index: true, label: '复合角色', model: 'compositeRole', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n}, {\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'destroy'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy'] },\n\t],\n\tdatabase,\n\tlabel: '组织复合角色配置',\n\thooks: {\n\t\tasync afterCreate(conn, model, record) {\n\t\t\tif (!record.organizationId) { throw new ServerError('组织不存在') }\n\t\t\tif (!record.roleId) { throw new ServerError('角色不存在') }\n\t\t\tconst [compositeRole] = await conn.call(\n\t\t\t\tnew Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1)\n\t\t\t)\n\t\t\tif (!compositeRole) {\n\t\t\t\tthrow new Error('复合角色不存在')\n\t\t\t}\n\t\t\tif (!compositeRole.organizationId) { return }\n\t\t\tconst organizationModel = await getModel('organization')\n\t\t\tif (organizationModel) {\n\t\t\t\tconst [organization] = await useDatabase(organizationModel.databaseId).call(\n\t\t\t\t\tnew Query(organizationModel).where({ id: record.organizationId, mainId: compositeRole.organizationId }).limit(1)\n\t\t\t\t)\n\t\t\t\tif (!organization) {\n\t\t\t\t\tthrow new ServerError('请选择关联组织');\n\t\t\t\t}\n\n\t\t\t}\n\t\t\tconst roleModel = await getModel('role')\n\t\t\tif (roleModel?.fields.open) {\n\t\t\t\tconst [role] = await useDatabase(roleModel.databaseId).call(\n\t\t\t\t\tnew Query(roleModel).where({ id: record.organizationId, open: true }).limit(1)\n\t\t\t\t)\n\t\t\t\tif (!role) {\n\t\t\t\t\tthrow new ServerError('请选择有效角色');\n\t\t\t\t}\n\n\t\t\t}\n\t\t},\n\t}\n});\n","import { actions, createField, createModel, now, Query, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { CompositeRole } from './CompositeRole.mts';\nimport { ServerError } from '@yongdall/core';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationUserCompositeRole = createModel('organizationUserCompositeRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true }),\n\tcompositeRoleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'compositeRole', renderer: 'document', immutable: true, primary: 2 }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n},{\n\tdatabase,\n\tlabel: '用户复合角色',\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'destroy'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, model, record) {\n\t\t\tconst [compositeRole] = await conn.call(\n\t\t\t\tnew Query(CompositeRole).where({ id: record.compositeRoleId }).limit(1)\n\t\t\t)\n\t\t\tif (!compositeRole) {\n\t\t\t\tthrow new ServerError('复合角色不存在')\n\t\t\t}\n\t\t\tif ((compositeRole.organizationId || null) === (record.organizationId || null)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthrow new ServerError('复合角色与组织不匹配');\n\t\t},\n\t}\n});\n","import { Action, actions, createField, createModel, now, Query, uuid, Where } from '@yongdall/model';\nimport { database } from '../constants.mts';\nimport { getModel, ServerError } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { OrganizationCompositeRole } from './OrganizationCompositeRole.mts';\nimport { OrganizationUserCompositeRole } from './OrganizationUserCompositeRole.mts';\n\n\nexport const CompositeRole = createModel('compositeRole', {\n\tid: createField('uuid', { nullable: false, default: uuid, primary: 1, uncreatable: true, layout: { hidden: true } }),\n\tlabel: createField('string', { size: 255, nullable: false, default: '', label: '名称', layout: { colSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: true, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, source: { search: 'internal=0' } }),\n\tdescription: createField('text', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n}, {\n\tdatabase,\n\tlabelField: 'label',\n\tlabel: '复合角色',\n\n\tpermissions: [\n\t\t{ permission: 'system:compositeRole', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t\t{ permission: 'system:compositeRole', organizationField: 'organizationId', fields: ['*'], authorizations: ['options', 'query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, model, { organizationId }) {\n\t\t\tif (!organizationId) { return; }\n\t\t\tconst organizationModel = await getModel('organization')\n\t\t\tif (!organizationModel) { return; }\n\t\t\tconst [organization] = await useDatabase(organizationModel.databaseId).call(\n\t\t\t\tnew Query(organizationModel).where({ id: organizationId, internal: false }).limit(1)\n\t\t\t)\n\t\t\tif (organization) { return; }\n\t\t\tthrow new ServerError('请选择外部组织');\n\t\t},\n\t\tasync afterDelete(conn, model, record, update) {\n\t\t\tconst list = [\n\t\t\t\tconn.call(Action.delete(OrganizationUserCompositeRole, Where.and({ compositeRoleId: record.id })))\n\t\t\t]\n\n\t\t\tif (!update) {\n\t\t\t\tlist.push(\n\t\t\t\t\tconn.call(Action.delete(OrganizationCompositeRole, Where.and({ compositeRoleId: record.id })))\n\t\t\t\t)\n\t\t\t}\n\t\t\tawait Promise.all(list)\n\t\t},\n\t}\n});\n","import { createField, createModel, now, uuid } from '@yongdall/model';\nimport { database } from '../constants.mts';\n\n\n\n// export const OrganizationAppointmentRole = createModel('organizationAppointmentRole', {\n// \tappointmentId: createField('uuid', { nullable: false, index: true, label: '职务', model: 'appointment', renderer: 'document', immutable: true, primary: 1 }),\n// \troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 2 }),\n// \tno: createField('i32', { nullable: false, default: 0 }),\n// });\n\nexport const OrganizationAppointment = createModel('organizationAppointment', {\n\tid: createField('uuid', { nullable: false, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tlabel: createField('string', { nullable: false, label: '职务名称' }),\n\tdescription: createField('string', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\t// roles: createField(OrganizationAppointmentRole, { \n\t// \tarray: true, \n\t// \tconstraints: { appointmentId: { field: 'id' }, no: { noField: true } }, \n\t// \tlabel: '角色列表' \n\t// }),\n}, {\n\tdatabase,\n\n\tpermissions: [\n\t\t{ permission: 'system:organization', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\n\n\nexport const OrganizationMember = createModel('organizationMember', {\n\tid: createField('uuid', { nullable: false, index: true, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\tappointmentId: createField('uuid', { nullable: true, index: true, label: '职务', model: 'appointment', renderer: 'document', layout: { rowSpan: 6 } }),\n\n\tdefault: createField('bool', { nullable: false, default: false, label: '默认职务' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n}, {\n\tdatabase,\n\tindexes: [\n\t\t{ fields: ['userId', 'organizationId', 'appointmentId'], unique: true }\n\t],\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, Model, record) {\n\t\t\tif (!record.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\n\t\tasync afterUpdate(conn, Model, record, oldRecord) {\n\t\t\tif (!record.default) { return }\n\t\t\tif (oldRecord.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\t}\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\nimport { database } from '../constants.mts';\n\nexport const OrganizationUserRole = createModel('organizationUserRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\n},{\n\tdatabase,\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'destroy'] },\n\t],\n});\n","import { createKeyStore } from '@yongdall/context';\nimport { Query } from '@yongdall/model';\nimport { getUser } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { findRolePermissions } from '@yongdall/role-permission';\nimport { OrganizationCompositeRole, OrganizationMember, OrganizationUserCompositeRole, OrganizationUserRole } from './models/index.mts';\n\nexport * from './models/index.mts';\n\n\n/** 所在组织 */\nexport const getOrganizations = createKeyStore(async (userId: string | null) => {\n\tif (!userId) { return new Set(); }\n\tconst relations: { organizationId: string }[] = await useDatabase(OrganizationMember.databaseId).call(\n\t\tnew Query(OrganizationMember).select(['organizationId']).where('userId', userId)\n\t);\n\treturn new Set(relations.map(v => v.organizationId));\n}, user => user || '');\n\n\n/** 角色 */\nexport const getOrganizationRoleIds = createKeyStore(async (userId: string | null) => {\n\tconst compositeRoleIds = new Query(OrganizationUserCompositeRole).select('compositeRoleId').where('userId', '=', userId)\n\tconst list: { organizationId: number; roleId: string; }[][] = await Promise.all([\n\t\tuseDatabase(OrganizationUserRole.databaseId).call(\n\t\t\tnew Query(OrganizationUserRole).select(['organizationId', 'roleId'])\n\t\t\t\t.where('userId', userId)\n\t\t),\n\t\tuseDatabase(OrganizationCompositeRole.databaseId).call(\n\t\t\tnew Query(OrganizationCompositeRole).select(['organizationId', 'roleId'])\n\t\t\t\t.where('compositeRoleId', 'in', compositeRoleIds)\n\t\t)\n\t]);\n\n\treturn Object.fromEntries((Object.entries(Object.groupBy(list.flat(), v => v.organizationId))\n\t\t.map(([organizationId, list]) => [organizationId, new Set(list?.map(v => v.roleId))])))\n}, user => user || '');\n\n\nexport const getOrganizationPermissions = createKeyStore(async (userId: string | null) => {\n\tconst roleIds = await getOrganizationRoleIds(userId)\n\tconst allRoleIds = [...new Set(Object.values(roleIds).flatMap(v => [...v]))];\n\tconst permissions: Record<string, Set<string>> = Object.create(null);\n\tif (!allRoleIds.length) { return permissions; }\n\tconst values = await findRolePermissions(allRoleIds);\n\tconst list = Object.fromEntries(Object.entries(Object.groupBy(values, l => l.roleId)).map(([k, v]) => [k, v?.map(v => v.permission)]));\n\tfor (const [organization, roleSet] of Object.entries(roleIds)) {\n\t\tconst s = new Set([...roleSet].flatMap(v => list[v] || []));\n\t\tif (!s.size) { continue; }\n\t\tpermissions[organization] = s;\n\t}\n\treturn permissions;\n}, user => user || '');\n\n\n\nexport const getOrganizationAllPermissions = createKeyStore(async (userId: string | null) => {\n\tconst v = await getOrganizationPermissions(userId)\n\treturn new Set(Object.values(v).flatMap(v => [...v]));\n}, user => user || '');\n"],"mappings":";;;;;;;AACA,MAAa,EACZ,IAAI,UACM,aACP,WAAW;;;;;;;;;;;ACUf,MAAa,4BAA4B,YAAY,6BAA6B;CACjF,iBAAiB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAQ,OAAO;EAAiB,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAC/J,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAC3J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAE3I,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;AAC/F,GAAG;CAEF,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;EAAS;CAAE,GACvH;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;EAAS;CAAE,CACvK;CACA;CACA,OAAO;CACP,OAAO,EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;EACtC,IAAI,CAAC,OAAO,gBAAkB,MAAM,IAAI,YAAY,OAAO;EAC3D,IAAI,CAAC,OAAO,QAAU,MAAM,IAAI,YAAY,OAAO;EACnD,MAAM,CAAC,iBAAiB,MAAM,KAAK,KAClC,IAAI,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CACvE;EACA,IAAI,CAAC,eACJ,MAAM,IAAI,MAAM,SAAS;EAE1B,IAAI,CAAC,cAAc,gBAAkB;EACrC,MAAM,oBAAoB,MAAM,SAAS,cAAc;EACvD,IAAI,mBAAmB;GACtB,MAAM,CAAC,gBAAgB,MAAM,YAAY,kBAAkB,UAAU,CAAC,CAAC,KACtE,IAAI,MAAM,iBAAiB,CAAC,CAAC,MAAM;IAAE,IAAI,OAAO;IAAgB,QAAQ,cAAc;GAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAChH;GACA,IAAI,CAAC,cACJ,MAAM,IAAI,YAAY,SAAS;EAGjC;EACA,MAAM,YAAY,MAAM,SAAS,MAAM;EACvC,IAAI,WAAW,OAAO,MAAM;GAC3B,MAAM,CAAC,QAAQ,MAAM,YAAY,UAAU,UAAU,CAAC,CAAC,KACtD,IAAI,MAAM,SAAS,CAAC,CAAC,MAAM;IAAE,IAAI,OAAO;IAAgB,MAAM;GAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAC9E;GACA,IAAI,CAAC,MACJ,MAAM,IAAI,YAAY,SAAS;EAGjC;CACD,EACD;AACD,CAAC;;;;;;;;;;;AChDD,MAAa,gCAAgC,YAAY,iCAAiC;CACzF,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAC3I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;CAAK,CAAC;CAC/I,iBAAiB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAiB,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAE7J,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;CAC9F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAS,CAAC;AACjG,GAAE;CACD;CACA,OAAO;CAEP,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;EAAS;CAAE,GACvH;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;EAAS;CAAE,CACvK;CACA,OAAO,EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;EACtC,MAAM,CAAC,iBAAiB,MAAM,KAAK,KAClC,IAAI,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CACvE;EACA,IAAI,CAAC,eACJ,MAAM,IAAI,YAAY,SAAS;EAEhC,KAAK,cAAc,kBAAkB,WAAW,OAAO,kBAAkB,OACxE;EAED,MAAM,IAAI,YAAY,YAAY;CACnC,EACD;AACD,CAAC;;;AClCD,MAAa,gBAAgB,YAAY,iBAAiB;CACzD,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAM,SAAS;EAAG,aAAa;EAAM,QAAQ,EAAE,QAAQ,KAAK;CAAE,CAAC;CACnH,OAAO,YAAY,UAAU;EAAE,MAAM;EAAK,UAAU;EAAO,SAAS;EAAI,OAAO;EAAM,QAAQ,EAAE,SAAS,EAAE;CAAE,CAAC;CAC7G,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,QAAQ,aAAa;CAAE,CAAC;CAChL,aAAa,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;CAAK,CAAC;CAEhE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;CAC9F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAS,CAAC;AACjG,GAAG;CACF;CACA,YAAY;CACZ,OAAO;CAEP,aAAa,CACZ;EAAE,YAAY;EAAwB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;EAAQ;CAAE,GAClJ;EAAE,YAAY;EAAwB,mBAAmB;EAAkB,QAAQ,CAAC,GAAG;EAAG,gBAAgB;GAAC;GAAW;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;EAAQ;CAAE,CACxL;CACA,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,EAAE,kBAAkB;GAClD,IAAI,CAAC,gBAAkB;GACvB,MAAM,oBAAoB,MAAM,SAAS,cAAc;GACvD,IAAI,CAAC,mBAAqB;GAC1B,MAAM,CAAC,gBAAgB,MAAM,YAAY,kBAAkB,UAAU,CAAC,CAAC,KACtE,IAAI,MAAM,iBAAiB,CAAC,CAAC,MAAM;IAAE,IAAI;IAAgB,UAAU;GAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CACpF;GACA,IAAI,cAAgB;GACpB,MAAM,IAAI,YAAY,SAAS;EAChC;EACA,MAAM,YAAY,MAAM,OAAO,QAAQ,QAAQ;GAC9C,MAAM,OAAO,CACZ,KAAK,KAAK,OAAO,OAAO,+BAA+B,MAAM,IAAI,EAAE,iBAAiB,OAAO,GAAG,CAAC,CAAC,CAAC,CAClG;GAEA,IAAI,CAAC,QACJ,KAAK,KACJ,KAAK,KAAK,OAAO,OAAO,2BAA2B,MAAM,IAAI,EAAE,iBAAiB,OAAO,GAAG,CAAC,CAAC,CAAC,CAC9F;GAED,MAAM,QAAQ,IAAI,IAAI;EACvB;CACD;AACD,CAAC;;;ACtCD,MAAa,0BAA0B,YAAY,2BAA2B;CAC7E,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;CAAK,CAAC;CAE1G,OAAO,YAAY,UAAU;EAAE,UAAU;EAAO,OAAO;CAAO,CAAC;CAC/D,aAAa,YAAY,UAAU;EAAE,UAAU;EAAM,OAAO;CAAK,CAAC;CAElE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;CAC9F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAS,CAAC;AAOjG,GAAG;CACF;CAEA,aAAa,CACZ;EAAE,YAAY;EAAuB,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;EAAQ;CAAE,CACrI;AACD,CAAC;;;AC3BD,MAAa,qBAAqB,YAAY,sBAAsB;CACnE,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;CAAK,CAAC;CAEvH,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,EAAE;CAAE,CAAC;CACvJ,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,EAAE;CAAE,CAAC;CACvK,eAAe,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAe,UAAU;EAAY,QAAQ,EAAE,SAAS,EAAE;CAAE,CAAC;CAEnJ,SAAS,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAO,OAAO;CAAO,CAAC;CAE/E,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;CAC9F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAS,CAAC;AAEjG,GAAG;CACF;CACA,SAAS,CACR;EAAE,QAAQ;GAAC;GAAU;GAAkB;EAAe;EAAG,QAAQ;CAAK,CACvE;CACA,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;EAAQ;CAAE,CAC7H;CACA,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;GACtC,IAAI,CAAC,OAAO,SAAW;GACvB,MAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,MAAM,GACjB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,IAAI,CAAC,CAC3D,IAAI,UAAU,OAAO,MAAM,CAC9B,CAAC;EACF;EAEA,MAAM,YAAY,MAAM,OAAO,QAAQ,WAAW;GACjD,IAAI,CAAC,OAAO,SAAW;GACvB,IAAI,UAAU,SAAW;GACzB,MAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,MAAM,GACjB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,IAAI,CAAC,CAC3D,IAAI,UAAU,OAAO,MAAM,CAC9B,CAAC;EACF;CACD;AACD,CAAC;;;AC3CD,MAAa,uBAAuB,YAAY,wBAAwB;CACvE,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAC3I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAC3J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;CAAE,CAAC;CAG3I,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;CAAO,CAAC;AAE/F,GAAE;CACD;CACA,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;EAAS;CAAE,CAClG;AACD,CAAC;;;;ACLD,MAAa,mBAAmB,eAAe,OAAO,WAA0B;CAC/E,IAAI,CAAC,QAAU,uBAAO,IAAI,IAAI;CAC9B,MAAM,YAA0C,MAAM,YAAY,mBAAmB,UAAU,CAAC,CAAC,KAChG,IAAI,MAAM,kBAAkB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,UAAU,MAAM,CAChF;CACA,OAAO,IAAI,IAAI,UAAU,KAAI,MAAK,EAAE,cAAc,CAAC;AACpD,IAAG,SAAQ,QAAQ,EAAE;;AAIrB,MAAa,yBAAyB,eAAe,OAAO,WAA0B;CACrF,MAAM,mBAAmB,IAAI,MAAM,6BAA6B,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,UAAU,KAAK,MAAM;CACvH,MAAM,OAAwD,MAAM,QAAQ,IAAI,CAC/E,YAAY,qBAAqB,UAAU,CAAC,CAAC,KAC5C,IAAI,MAAM,oBAAoB,CAAC,CAAC,OAAO,CAAC,kBAAkB,QAAQ,CAAC,CAAC,CAClE,MAAM,UAAU,MAAM,CACzB,GACA,YAAY,0BAA0B,UAAU,CAAC,CAAC,KACjD,IAAI,MAAM,yBAAyB,CAAC,CAAC,OAAO,CAAC,kBAAkB,QAAQ,CAAC,CAAC,CACvE,MAAM,mBAAmB,MAAM,gBAAgB,CAClD,CACD,CAAC;CAED,OAAO,OAAO,YAAa,OAAO,QAAQ,OAAO,QAAQ,KAAK,KAAK,IAAG,MAAK,EAAE,cAAc,CAAC,CAAC,CAC3F,KAAK,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,IAAI,IAAI,MAAM,KAAI,MAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAE;AACxF,IAAG,SAAQ,QAAQ,EAAE;AAGrB,MAAa,6BAA6B,eAAe,OAAO,WAA0B;CACzF,MAAM,UAAU,MAAM,uBAAuB,MAAM;CACnD,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,OAAO,CAAC,CAAC,SAAQ,MAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3E,MAAM,cAA2C,OAAO,OAAO,IAAI;CACnE,IAAI,CAAC,WAAW,QAAU,OAAO;CACjC,MAAM,SAAS,MAAM,oBAAoB,UAAU;CACnD,MAAM,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,QAAQ,SAAQ,MAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,KAAI,MAAK,EAAE,UAAU,CAAC,CAAC,CAAC;CACrI,KAAK,MAAM,CAAC,cAAc,YAAY,OAAO,QAAQ,OAAO,GAAG;EAC9D,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,SAAQ,MAAK,KAAK,MAAM,CAAC,CAAC,CAAC;EAC1D,IAAI,CAAC,EAAE,MAAQ;EACf,YAAY,gBAAgB;CAC7B;CACA,OAAO;AACR,IAAG,SAAQ,QAAQ,EAAE;AAIrB,MAAa,gCAAgC,eAAe,OAAO,WAA0B;CAC5F,MAAM,IAAI,MAAM,2BAA2B,MAAM;CACjD,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,SAAQ,MAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,IAAG,SAAQ,QAAQ,EAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yongdall/organization-rbac",
-  "version": "0.6.5",
+  "version": "0.7.0",
   "type": "module",
   "main": "./index.mjs",
   "exports": {
@@ -11,14 +11,15 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@yongdall/connection": "^0.6.5",
-    "@yongdall/context": "^0.6.5",
-    "@yongdall/core": "^0.6.5",
-    "@yongdall/model": "^0.6.5",
-    "@yongdall/role-permission": "^0.6.5"
+    "@yongdall/connection": "^0.7.0",
+    "@yongdall/context": "^0.7.0",
+    "@yongdall/core": "^0.7.0",
+    "@yongdall/model": "^0.7.0",
+    "@yongdall/plugin-meta": "^0.7.0",
+    "@yongdall/role-permission": "^0.7.0"
   },
   "devDependencies": {
-    "@yongdall/migrate": "^0.6.5",
-    "@yongdall/types": "^0.6.5"
+    "@yongdall/migrate": "^0.7.0",
+    "@yongdall/types": "^0.7.0"
   }
 }

package/yongdall/migration.mjs

@@ -1,10 +1,14 @@
-import { a as OrganizationMember, s as OrganizationAppointment } from "../organization-rbac-BF8uzSCr.mjs";
-
-//#region plugins/organization-rbac/yongdall/migration.mjs
-/** @import { Profile } from '@yongdall/migrate' */
-/** @type {Profile['models']} */
-const models = [OrganizationAppointment, OrganizationMember];
-
+import { a as OrganizationUserRole, c as CompositeRole, l as OrganizationUserCompositeRole, o as OrganizationMember, s as OrganizationAppointment, u as OrganizationCompositeRole } from "../organization-rbac--hDZMB8h.mjs";
+//#region plugins/organization-rbac/yongdall/migration.mts
+const models = [
+	OrganizationAppointment,
+	OrganizationMember,
+	OrganizationUserRole,
+	CompositeRole,
+	OrganizationCompositeRole,
+	OrganizationUserCompositeRole
+];
 //#endregion
 export { models };
+
 //# sourceMappingURL=migration.mjs.map

package/yongdall/migration.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"migration.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/migration.mjs"],"sourcesContent":["/** @import { Profile } from '@yongdall/migrate' */\nimport { OrganizationAppointment, OrganizationMember } from '../index.mts';\n\n\n/** @type {Profile['models']} */\nexport const models = [\n\tOrganizationAppointment,\n\tOrganizationMember,\n];\n"],"mappings":";;;;;AAKA,MAAa,SAAS,CACrB,yBACA,mBACA"}
+{"version":3,"file":"migration.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/migration.mts"],"sourcesContent":["import type { Profile } from '@yongdall/migrate';\nimport {\n\tCompositeRole,\n\tOrganizationAppointment,\n\tOrganizationCompositeRole,\n\tOrganizationMember,\n\tOrganizationUserCompositeRole,\n\tOrganizationUserRole,\n} from '../index.mts';\n\n\nexport const models: Profile['models'] = [\n\tOrganizationAppointment,\n\tOrganizationMember,\n\tOrganizationUserRole,\n\tCompositeRole,\n\tOrganizationCompositeRole,\n\tOrganizationUserCompositeRole,\n];\n"],"mappings":";;AAWA,MAAa,SAA4B;CACxC;CACA;CACA;CACA;CACA;CACA;AACD"}

package/yongdall/model.mjs

@@ -1,13 +1,14 @@
-import { a as OrganizationMember, s as OrganizationAppointment } from "../organization-rbac-BF8uzSCr.mjs";
-
-//#region plugins/organization-rbac/yongdall/model.mjs
-/** @import { ModelProfile } from '@yongdall/core' */
-/** @type {ModelProfile['models']} */
+import { a as OrganizationUserRole, c as CompositeRole, l as OrganizationUserCompositeRole, o as OrganizationMember, s as OrganizationAppointment, u as OrganizationCompositeRole } from "../organization-rbac--hDZMB8h.mjs";
+//#region plugins/organization-rbac/yongdall/model.mts
 const models = {
 	organizationAppointment: OrganizationAppointment,
-	organizationMember: OrganizationMember
+	organizationMember: OrganizationMember,
+	organizationUserRole: OrganizationUserRole,
+	compositeRole: CompositeRole,
+	organizationCompositeRole: OrganizationCompositeRole,
+	organizationUserCompositeRole: OrganizationUserCompositeRole
 };
-
 //#endregion
 export { models };
+
 //# sourceMappingURL=model.mjs.map

package/yongdall/model.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"model.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/model.mjs"],"sourcesContent":["/** @import { ModelProfile } from '@yongdall/core' */\nimport { OrganizationAppointment, OrganizationMember } from '../index.mts';\n\n/** @type {ModelProfile['models']} */\nexport const models = {\n\torganizationAppointment: OrganizationAppointment,\n\torganizationMember: OrganizationMember,\n};\n"],"mappings":";;;;;AAIA,MAAa,SAAS;CACrB,yBAAyB;CACzB,oBAAoB;CACpB"}
+{"version":3,"file":"model.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/model.mts"],"sourcesContent":["import type { ModelProfile } from '@yongdall/core';\nimport {\n\tCompositeRole,\n\tOrganizationAppointment,\n\tOrganizationCompositeRole,\n\tOrganizationMember,\n\tOrganizationUserCompositeRole,\n\tOrganizationUserRole,\n} from '../index.mts';\n\nexport const models: ModelProfile['models'] = {\n\torganizationAppointment: OrganizationAppointment,\n\torganizationMember: OrganizationMember,\n\torganizationUserRole: OrganizationUserRole,\n\tcompositeRole: CompositeRole,\n\torganizationCompositeRole: OrganizationCompositeRole,\n\torganizationUserCompositeRole: OrganizationUserCompositeRole,\n};\n"],"mappings":";;AAUA,MAAa,SAAiC;CAC7C,yBAAyB;CACzB,oBAAoB;CACpB,sBAAsB;CACtB,eAAe;CACf,2BAA2B;CAC3B,+BAA+B;AAChC"}

package/yongdall/user.mjs

@@ -1,16 +1,2 @@
-import { n as useOrganizationPermissions, t as useOrganizationAllPermissions } from "../organization-rbac-BF8uzSCr.mjs";
-
-//#region plugins/organization-rbac/yongdall/user.mjs
-/** @import { UserManager } from '@yongdall/core' */
-/** @type {UserManager['getOrganizationAllPermissions']} */
-const getOrganizationAllPermissions = () => {
-	return useOrganizationAllPermissions();
-};
-/** @type {UserManager['getOrganizationPermissions']} */
-const getOrganizationPermissions = () => {
-	return useOrganizationPermissions();
-};
-
-//#endregion
+import { n as getOrganizationPermissions, t as getOrganizationAllPermissions } from "../organization-rbac--hDZMB8h.mjs";
 export { getOrganizationAllPermissions, getOrganizationPermissions };
-//# sourceMappingURL=user.mjs.map

package/organization-rbac-BF8uzSCr.mjs

@@ -1,230 +0,0 @@
-import { createComputed } from "@yongdall/context";
-import { Query, Where, actions, createField, createModel, now, uuid } from "@yongdall/model";
-import { getUser } from "@yongdall/core";
-import { useDatabase } from "@yongdall/connection";
-import { findRolePermissions } from "@yongdall/role-permission";
-
-//#region plugins/organization-rbac/models/OrganizationAppointment.mjs
-const OrganizationAppointment = createModel("organizationAppointment", {
-	id: createField("uuid", {
-		nullable: false,
-		primary: 1,
-		default: uuid,
-		uncreatable: true,
-		immutable: true
-	}),
-	label: createField("string", {
-		nullable: false,
-		label: "职务名称"
-	}),
-	description: createField("string", {
-		nullable: true,
-		label: "描述"
-	}),
-	createdAt: createField("date", {
-		nullable: false,
-		default: now,
-		creating: now,
-		label: "创建日期"
-	}),
-	updatedAt: createField("date", {
-		nullable: false,
-		default: now,
-		updating: now,
-		label: "最后更新日期"
-	})
-}, { permissions: [{
-	permission: "system:organization",
-	fields: "*",
-	authorizations: [
-		"query",
-		"read",
-		"create",
-		"update",
-		"destroy",
-		"add",
-		"remove"
-	]
-}] });
-
-//#endregion
-//#region plugins/organization-rbac/models/OrganizationMember.mjs
-/**
-* 组织用户角色模型
-* @typedef {Object} OrganizationUserRole
-* @property {string} userId - 用户ID，主键第一部分
-* @property {string} organizationId - 组织ID，主键第二部分
-* @property {string} roleId - 角色ID，主键第三部分
-* @property {number} no - 编号
-*/
-const OrganizationUserRole = createModel("organizationUserRole", {
-	userId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "用户",
-		model: "user",
-		renderer: "document",
-		immutable: true,
-		primary: 1
-	}),
-	organizationId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "组织",
-		model: "organization",
-		renderer: "document",
-		immutable: true,
-		primary: 2
-	}),
-	roleId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "角色",
-		model: "role",
-		renderer: "document",
-		immutable: true,
-		primary: 3
-	}),
-	no: createField("i32", {
-		nullable: false,
-		default: 0
-	})
-});
-const OrganizationMember = createModel("organizationMember", {
-	id: createField("uuid", {
-		nullable: false,
-		index: true,
-		primary: 1,
-		default: uuid,
-		uncreatable: true,
-		immutable: true
-	}),
-	userId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "用户",
-		model: "user",
-		renderer: "document",
-		immutable: true,
-		layout: { rowSpan: 6 }
-	}),
-	organizationId: createField("uuid", {
-		nullable: false,
-		index: true,
-		label: "组织",
-		model: "organization",
-		renderer: "document",
-		immutable: true,
-		layout: { rowSpan: 6 }
-	}),
-	appointmentId: createField("uuid", {
-		nullable: true,
-		index: true,
-		label: "职务",
-		model: "appointment",
-		renderer: "document",
-		layout: { rowSpan: 6 }
-	}),
-	default: createField("bool", {
-		nullable: false,
-		default: false,
-		label: "默认职务"
-	}),
-	createdAt: createField("date", {
-		nullable: false,
-		default: now,
-		creating: now,
-		label: "创建日期"
-	}),
-	updatedAt: createField("date", {
-		nullable: false,
-		default: now,
-		updating: now,
-		label: "最后更新日期"
-	}),
-	roles: createField(OrganizationUserRole, {
-		array: true,
-		constraints: {
-			organizationId: { field: "organizationId" },
-			userId: { field: "userId" },
-			no: { noField: true }
-		},
-		label: "角色列表",
-		layout: { columns: [{ actions: ["add", "remove"] }, {
-			field: "roleId",
-			placeholder: 1
-		}] }
-	})
-}, {
-	indexes: [{
-		fields: [
-			"userId",
-			"organizationId",
-			"appointmentId"
-		],
-		unique: true
-	}],
-	permissions: [{
-		permission: "system:user",
-		fields: "*",
-		authorizations: [
-			"query",
-			"read",
-			"create",
-			"update",
-			"destroy",
-			"add",
-			"remove"
-		]
-	}],
-	hooks: {
-		async afterCreate(conn, Model, record) {
-			if (!record.default) return;
-			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
-		},
-		async afterUpdate(conn, Model, record, oldRecord) {
-			if (!record.default) return;
-			if (oldRecord.default) return;
-			await conn.call(actions.update(Model, { default: false }, Where.and("organizationId", "=", record.organizationId, true).and("userId", record.userId)));
-		}
-	}
-});
-
-//#endregion
-//#region plugins/organization-rbac/index.mts
-/** 所在组织 */
-const useOrganizations = createComputed(async () => {
-	const id = await getUser();
-	const relations = await useDatabase().call(actions.select(new Query(OrganizationMember).select(["organizationId"]).where("userId", id)));
-	return new Set(relations.map((v) => v.organizationId));
-});
-/** 角色 */
-const useOrganizationRoleIds = createComputed(async () => {
-	const organizations = await useOrganizations();
-	if (!organizations.size) return {};
-	const id = await getUser();
-	const list = await useDatabase().call(actions.select(new Query(OrganizationUserRole).select(["organizationId", "roleId"]).where("organizationId", "in", [...organizations]).where("userId", id)));
-	return Object.fromEntries(Object.entries(Object.groupBy(list, (v) => v.organizationId)).map(([organizationId, list]) => [organizationId, new Set(list?.map((v) => v.roleId))]));
-});
-const useOrganizationPermissions = createComputed(async () => {
-	const roleIds = await useOrganizationRoleIds();
-	const allRoleIds = [...new Set(Object.values(roleIds).flatMap((v) => [...v]))];
-	const permissions = Object.create(null);
-	if (!allRoleIds.length) return permissions;
-	const values = await findRolePermissions(allRoleIds);
-	const list = Object.fromEntries(Object.entries(Object.groupBy(values, (l) => l.roleId)).map(([k, v]) => [k, v?.map((v) => v.permission)]));
-	for (const [organization, roleSet] of Object.entries(roleIds)) {
-		const s = new Set([...roleSet].flatMap((v) => list[v] || []));
-		if (!s.size) continue;
-		permissions[organization] = s;
-	}
-	return permissions;
-});
-const useOrganizationAllPermissions = createComputed(async () => {
-	const v = await useOrganizationPermissions();
-	return new Set(Object.values(v).flatMap((v) => [...v]));
-});
-
-//#endregion
-export { OrganizationMember as a, useOrganizations as i, useOrganizationPermissions as n, OrganizationUserRole as o, useOrganizationRoleIds as r, OrganizationAppointment as s, useOrganizationAllPermissions as t };
-//# sourceMappingURL=organization-rbac-BF8uzSCr.mjs.map

package/organization-rbac-BF8uzSCr.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"organization-rbac-BF8uzSCr.mjs","names":[],"sources":["../../plugins/organization-rbac/models/OrganizationAppointment.mjs","../../plugins/organization-rbac/models/OrganizationMember.mjs","../../plugins/organization-rbac/index.mts"],"sourcesContent":["import { createField, createModel, now, uuid } from '@yongdall/model';\n\n\n\n// export const OrganizationAppointmentRole = createModel('organizationAppointmentRole', {\n// \tappointmentId: createField('uuid', { nullable: false, index: true, label: '职务', model: 'appointment', renderer: 'document', immutable: true, primary: 1 }),\n// \troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 2 }),\n// \tno: createField('i32', { nullable: false, default: 0 }),\n// });\n\nexport const OrganizationAppointment = createModel('organizationAppointment', {\n\tid: createField('uuid', { nullable: false, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tlabel: createField('string', { nullable: false, label: '职务名称' }),\n\tdescription: createField('string', { nullable: true, label: '描述' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\t// roles: createField(OrganizationAppointmentRole, { \n\t// \tarray: true, \n\t// \tconstraints: { appointmentId: { field: 'id' }, no: { noField: true } }, \n\t// \tlabel: '角色列表' \n\t// }),\n}, {\n\n\tpermissions: [\n\t\t{ permission: 'system:organization', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n});\n","import { actions, createField, createModel, now, uuid, Where} from '@yongdall/model';\n\n/**\n * 组织用户角色模型\n * @typedef {Object} OrganizationUserRole\n * @property {string} userId - 用户ID，主键第一部分\n * @property {string} organizationId - 组织ID，主键第二部分\n * @property {string} roleId - 角色ID，主键第三部分\n * @property {number} no - 编号\n */\nexport const OrganizationUserRole = createModel('organizationUserRole', {\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, primary: 1 }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, primary: 2 }),\n\troleId: createField('uuid', { nullable: false, index: true, label: '角色', model: 'role', renderer: 'document', immutable: true, primary: 3 }),\n\n\tno: createField('i32', { nullable: false, default: 0 }),\n});\n\n\nexport const OrganizationMember = createModel('organizationMember', {\n\tid: createField('uuid', { nullable: false, index: true, primary: 1, default: uuid, uncreatable: true, immutable: true }),\n\n\tuserId: createField('uuid', { nullable: false, index: true, label: '用户', model: 'user', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\torganizationId: createField('uuid', { nullable: false, index: true, label: '组织', model: 'organization', renderer: 'document', immutable: true, layout: { rowSpan: 6 } }),\n\tappointmentId: createField('uuid', { nullable: true, index: true, label: '职务', model: 'appointment', renderer: 'document', layout: { rowSpan: 6 } }),\n\n\tdefault: createField('bool', { nullable: false, default: false, label: '默认职务' }),\n\n\tcreatedAt: createField('date', { nullable: false, default: now, creating: now, label: '创建日期' }),\n\tupdatedAt: createField('date', { nullable: false, default: now, updating: now, label: '最后更新日期' }),\n\n\troles: createField(OrganizationUserRole, {\n\t\tarray: true,\n\t\tconstraints: {\n\t\t\torganizationId: { field: 'organizationId' },\n\t\t\tuserId: { field: 'userId' },\n\t\t\tno: { noField: true }\n\t\t},\n\t\tlabel: '角色列表',\n\t\tlayout: {\n\t\t\tcolumns: [{ actions: ['add', 'remove'] }, { field: 'roleId', placeholder: 1 }],\n\t\t},\n\t}),\n}, {\n\tindexes: [\n\t\t{ fields: ['userId', 'organizationId', 'appointmentId'], unique: true }\n\t],\n\tpermissions: [\n\t\t{ permission: 'system:user', fields: '*', authorizations: ['query', 'read', 'create', 'update', 'destroy', 'add', 'remove'] },\n\t],\n\thooks: {\n\t\tasync afterCreate(conn, Model, record) {\n\t\t\tif (!record.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\n\t\tasync afterUpdate(conn, Model, record, oldRecord) {\n\t\t\tif (!record.default) { return }\n\t\t\tif (oldRecord.default) { return }\n\t\t\tawait conn.call(actions.update(\n\t\t\t\tModel,\n\t\t\t\t{ default: false },\n\t\t\t\tWhere.and('organizationId', '=', record.organizationId, true)\n\t\t\t\t\t.and('userId', record.userId),\n\t\t\t));\n\t\t},\n\t}\n});\n","import { createComputed } from '@yongdall/context';\nimport { actions, Query } from '@yongdall/model';\nimport { getUser } from '@yongdall/core';\nimport { useDatabase } from '@yongdall/connection';\nimport { findRolePermissions } from '@yongdall/role-permission';\nimport { OrganizationMember, OrganizationUserRole } from './models/index.mjs';\n\nexport * from './models/index.mjs';\n\n\n/** 所在组织 */\nexport const useOrganizations = createComputed(async () => {\n\tconst id = await getUser();\n\tconst relations: {organizationId: string}[] = await useDatabase().call(actions.select(\n\t\tnew Query(OrganizationMember).select(['organizationId']).where('userId', id)\n\t));\n\treturn new Set(relations.map(v => v.organizationId));\n});\n\n\n/** 角色 */\nexport const useOrganizationRoleIds = createComputed(async () => {\n\tconst organizations = await useOrganizations()\n\tif (!organizations.size) { return {}; }\n\tconst id = await getUser();\n\tconst list: {organizationId: number; roleId: string;}[] = await useDatabase().call(actions.select(\n\t\tnew Query(OrganizationUserRole).select(['organizationId', 'roleId'])\n\t\t\t.where('organizationId', 'in', [...organizations])\n\t\t\t.where('userId', id)\n\t));\n\treturn Object.fromEntries((Object.entries(Object.groupBy(list, v => v.organizationId))\n\t\t.map(([organizationId, list]) => [organizationId, new Set(list?.map(v => v.roleId))])))\n});\n\n\nexport const useOrganizationPermissions = createComputed(async () => {\n\tconst roleIds = await useOrganizationRoleIds()\n\tconst allRoleIds = [...new Set(Object.values(roleIds).flatMap(v =>[...v]))];\n\tconst permissions: Record<string, Set<string>> = Object.create(null);\n\tif (!allRoleIds.length) { return permissions; }\n\tconst values = await findRolePermissions(allRoleIds);\n\tconst list = Object.fromEntries(Object.entries(Object.groupBy(values, l => l.roleId)).map(([k,v]) => [k, v?.map(v => v.permission)]));\n\tfor (const [organization, roleSet] of Object.entries(roleIds)) {\n\t\tconst s = new Set([...roleSet].flatMap(v => list[v] || []));\n\t\tif (!s.size) { continue; }\n\t\tpermissions[organization] = s;\n\t}\n\treturn permissions;\n});\n\n\n\nexport const useOrganizationAllPermissions = createComputed(async () => {\n\tconst v = await useOrganizationPermissions()\n\treturn new Set(Object.values(v).flatMap(v => [...v]));\n});\n"],"mappings":";;;;;;;AAUA,MAAa,0BAA0B,YAAY,2BAA2B;CAC7E,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAE3G,OAAO,YAAY,UAAU;EAAE,UAAU;EAAO,OAAO;EAAQ,CAAC;CAChE,aAAa,YAAY,UAAU;EAAE,UAAU;EAAM,OAAO;EAAM,CAAC;CAEnE,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAOjG,EAAE,EAEF,aAAa,CACZ;CAAE,YAAY;CAAuB,QAAQ;CAAK,gBAAgB;EAAC;EAAS;EAAQ;EAAU;EAAU;EAAW;EAAO;EAAS;CAAE,CACrI,EACD,CAAC;;;;;;;;;;;;ACnBF,MAAa,uBAAuB,YAAY,wBAAwB;CACvE,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5I,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAC5J,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,SAAS;EAAG,CAAC;CAE5I,IAAI,YAAY,OAAO;EAAE,UAAU;EAAO,SAAS;EAAG,CAAC;CACvD,CAAC;AAGF,MAAa,qBAAqB,YAAY,sBAAsB;CACnE,IAAI,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,SAAS;EAAG,SAAS;EAAM,aAAa;EAAM,WAAW;EAAM,CAAC;CAExH,QAAQ,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAQ,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxJ,gBAAgB,YAAY,QAAQ;EAAE,UAAU;EAAO,OAAO;EAAM,OAAO;EAAM,OAAO;EAAgB,UAAU;EAAY,WAAW;EAAM,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CACxK,eAAe,YAAY,QAAQ;EAAE,UAAU;EAAM,OAAO;EAAM,OAAO;EAAM,OAAO;EAAe,UAAU;EAAY,QAAQ,EAAE,SAAS,GAAG;EAAE,CAAC;CAEpJ,SAAS,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAO,OAAO;EAAQ,CAAC;CAEhF,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAQ,CAAC;CAC/F,WAAW,YAAY,QAAQ;EAAE,UAAU;EAAO,SAAS;EAAK,UAAU;EAAK,OAAO;EAAU,CAAC;CAEjG,OAAO,YAAY,sBAAsB;EACxC,OAAO;EACP,aAAa;GACZ,gBAAgB,EAAE,OAAO,kBAAkB;GAC3C,QAAQ,EAAE,OAAO,UAAU;GAC3B,IAAI,EAAE,SAAS,MAAM;GACrB;EACD,OAAO;EACP,QAAQ,EACP,SAAS,CAAC,EAAE,SAAS,CAAC,OAAO,SAAS,EAAE,EAAE;GAAE,OAAO;GAAU,aAAa;GAAG,CAAC,EAC9E;EACD,CAAC;CACF,EAAE;CACF,SAAS,CACR;EAAE,QAAQ;GAAC;GAAU;GAAkB;GAAgB;EAAE,QAAQ;EAAM,CACvE;CACD,aAAa,CACZ;EAAE,YAAY;EAAe,QAAQ;EAAK,gBAAgB;GAAC;GAAS;GAAQ;GAAU;GAAU;GAAW;GAAO;GAAS;EAAE,CAC7H;CACD,OAAO;EACN,MAAM,YAAY,MAAM,OAAO,QAAQ;AACtC,OAAI,CAAC,OAAO,QAAW;AACvB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAGH,MAAM,YAAY,MAAM,OAAO,QAAQ,WAAW;AACjD,OAAI,CAAC,OAAO,QAAW;AACvB,OAAI,UAAU,QAAW;AACzB,SAAM,KAAK,KAAK,QAAQ,OACvB,OACA,EAAE,SAAS,OAAO,EAClB,MAAM,IAAI,kBAAkB,KAAK,OAAO,gBAAgB,KAAK,CAC3D,IAAI,UAAU,OAAO,OAAO,CAC9B,CAAC;;EAEH;CACD,CAAC;;;;;AC7DF,MAAa,mBAAmB,eAAe,YAAY;CAC1D,MAAM,KAAK,MAAM,SAAS;CAC1B,MAAM,YAAwC,MAAM,aAAa,CAAC,KAAK,QAAQ,OAC9E,IAAI,MAAM,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM,UAAU,GAAG,CAC5E,CAAC;AACF,QAAO,IAAI,IAAI,UAAU,KAAI,MAAK,EAAE,eAAe,CAAC;EACnD;;AAIF,MAAa,yBAAyB,eAAe,YAAY;CAChE,MAAM,gBAAgB,MAAM,kBAAkB;AAC9C,KAAI,CAAC,cAAc,KAAQ,QAAO,EAAE;CACpC,MAAM,KAAK,MAAM,SAAS;CAC1B,MAAM,OAAoD,MAAM,aAAa,CAAC,KAAK,QAAQ,OAC1F,IAAI,MAAM,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,SAAS,CAAC,CAClE,MAAM,kBAAkB,MAAM,CAAC,GAAG,cAAc,CAAC,CACjD,MAAM,UAAU,GAAG,CACrB,CAAC;AACF,QAAO,OAAO,YAAa,OAAO,QAAQ,OAAO,QAAQ,OAAM,MAAK,EAAE,eAAe,CAAC,CACpF,KAAK,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,IAAI,IAAI,MAAM,KAAI,MAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE;EACvF;AAGF,MAAa,6BAA6B,eAAe,YAAY;CACpE,MAAM,UAAU,MAAM,wBAAwB;CAC9C,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,QAAQ,CAAC,SAAQ,MAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CAC3E,MAAM,cAA2C,OAAO,OAAO,KAAK;AACpE,KAAI,CAAC,WAAW,OAAU,QAAO;CACjC,MAAM,SAAS,MAAM,oBAAoB,WAAW;CACpD,MAAM,OAAO,OAAO,YAAY,OAAO,QAAQ,OAAO,QAAQ,SAAQ,MAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAE,OAAO,CAAC,GAAG,GAAG,KAAI,MAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AACrI,MAAK,MAAM,CAAC,cAAc,YAAY,OAAO,QAAQ,QAAQ,EAAE;EAC9D,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAQ,MAAK,KAAK,MAAM,EAAE,CAAC,CAAC;AAC3D,MAAI,CAAC,EAAE,KAAQ;AACf,cAAY,gBAAgB;;AAE7B,QAAO;EACN;AAIF,MAAa,gCAAgC,eAAe,YAAY;CACvE,MAAM,IAAI,MAAM,4BAA4B;AAC5C,QAAO,IAAI,IAAI,OAAO,OAAO,EAAE,CAAC,SAAQ,MAAK,CAAC,GAAG,EAAE,CAAC,CAAC;EACpD"}

package/yongdall/user.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.mjs","names":[],"sources":["../../../plugins/organization-rbac/yongdall/user.mjs"],"sourcesContent":["/** @import { UserManager } from '@yongdall/core' */\nimport { useOrganizationAllPermissions, useOrganizationPermissions } from '../index.mts';\n\n\n/** @type {UserManager['getOrganizationAllPermissions']} */\nexport const getOrganizationAllPermissions = () => {\n\treturn useOrganizationAllPermissions();\n};\n/** @type {UserManager['getOrganizationPermissions']} */\nexport const getOrganizationPermissions = () => {\n\treturn useOrganizationPermissions();\n};\n"],"mappings":";;;;;AAKA,MAAa,sCAAsC;AAClD,QAAO,+BAA+B;;;AAGvC,MAAa,mCAAmC;AAC/C,QAAO,4BAA4B"}