biz-email-builder-shared 1.0.17 → 1.0.18

package/dist/entity/index.d.ts

@@ -1,5 +1,5 @@
 export * from "./user.entity";
 export * from "./template.entity";
-export * from "./role.entitty";
+export * from "./user-group.entitty";
 export * from "./feature.entitiy";
 //# sourceMappingURL=index.d.ts.map

package/dist/entity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entity/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entity/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC"}

package/dist/entity/index.js

@@ -16,5 +16,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./user.entity"), exports);
 __exportStar(require("./template.entity"), exports);
-__exportStar(require("./role.entitty"), exports);
+__exportStar(require("./user-group.entitty"), exports);
 __exportStar(require("./feature.entitiy"), exports);

package/dist/entity/user-group.entitty.d.ts

@@ -0,0 +1,14 @@
+import { Types } from "mongoose";
+interface IUserGroup {
+    name: string;
+    isDeleted: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date;
+    features: Types.ObjectId[];
+}
+export declare const UserGroupModel: import("mongoose").Model<IUserGroup, {}, {}, {}, import("mongoose").Document<unknown, {}, IUserGroup> & Omit<IUserGroup & {
+    _id: Types.ObjectId;
+}, never>, any>;
+export {};
+//# sourceMappingURL=user-group.entitty.d.ts.map

package/dist/entity/user-group.entitty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-group.entitty.d.ts","sourceRoot":"","sources":["../../src/entity/user-group.entitty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,EAAE,MAAM,UAAU,CAAC;AAEhD,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;CAC5B;AAcD,eAAO,MAAM,cAAc;SACmkI,MAAO,QAAQ;eAD/hI,CAAC"}

package/dist/entity/user-group.entitty.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGroupModel = void 0;
+const mongoose_1 = require("mongoose");
+const UserGroupSchema = new mongoose_1.Schema({
+    name: { type: String, unique: true, sparse: true },
+    isDeleted: { type: Boolean, default: false },
+    deletedAt: { type: Date, default: null },
+    features: { type: [{ type: mongoose_1.Schema.Types.ObjectId, ref: 'feature' }], default: [], _id: false },
+}, {
+    timestamps: true,
+});
+exports.UserGroupModel = (0, mongoose_1.model)("user-group", UserGroupSchema);

package/dist/entity/user.entity.d.ts

@@ -1,7 +1,10 @@
+import { Types } from "mongoose";
+import { ROLES } from "../utilities";
 interface IUser {
     email: string | null;
     password: string;
-    role: string;
+    role: ROLES;
+    groups: Array<Types.ObjectId>;
     isVerified: boolean;
     verificationToken: string;
     createdAt: Date;
@@ -10,7 +13,7 @@ interface IUser {
     isDeleted: boolean;
 }
 export declare const UserModel: import("mongoose").Model<IUser, {}, {}, {}, import("mongoose").Document<unknown, {}, IUser> & Omit<IUser & {
-    _id: import("mongoose").Types.ObjectId;
+    _id: Types.ObjectId;
 }, never>, any>;
 export {};
 //# sourceMappingURL=user.entity.d.ts.map

package/dist/entity/user.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../src/entity/user.entity.ts"],"names":[],"mappings":"AAGA,UAAU,KAAK;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAiBD,eAAO,MAAM,SAAS;;eAAmC,CAAC"}
+{"version":3,"file":"user.entity.d.ts","sourceRoot":"","sources":["../../src/entity/user.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,UAAU,KAAK;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7B,UAAU,EAAE,OAAO,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAkBD,eAAO,MAAM,SAAS;SACwyH,MAAO,QAAQ;eADpxH,CAAC"}

package/dist/entity/user.entity.js

@@ -10,7 +10,8 @@ const UserSchema = new mongoose_1.Schema({
     isVerified: { type: Boolean, default: false },
     verificationToken: { type: String },
     deletedAt: { type: Date, default: null },
-    isDeleted: { type: Boolean, default: false }
+    isDeleted: { type: Boolean, default: false },
+    groups: { type: [{ type: mongoose_1.Schema.Types.ObjectId, ref: 'user-group' }], default: [], _id: false }
 }, {
     timestamps: true,
 });

package/dist/middleware/authentication.d.ts

@@ -1,5 +1,8 @@
 import { Response, NextFunction } from "express";
+import { FEATURE_TYPE, ROLES } from "../utilities";
 import { IRequest } from "../types";
-declare const authorize: (roles: string[]) => (req: IRequest, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
-export { authorize };
+declare const authorize: () => (req: IRequest, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
+declare const checkRoleAccess: (roles: ROLES[]) => (req: IRequest, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
+declare const checkFeatureAccess: (features: FEATURE_TYPE[]) => (req: IRequest, res: Response, next: NextFunction) => Promise<Response<any, Record<string, any>> | undefined>;
+export { authorize, checkFeatureAccess, checkRoleAccess };
 //# sourceMappingURL=authentication.d.ts.map

package/dist/middleware/authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/middleware/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAIpC,QAAA,MAAM,SAAS,UAAW,MAAM,EAAE,WACJ,QAAQ,OAAO,QAAQ,QAAQ,YAAY,4DA+BxE,CAAA;AAGD,OAAO,EAAC,SAAS,EAAC,CAAC"}
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/middleware/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAa,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAIpC,QAAA,MAAM,SAAS,cACe,QAAQ,OAAO,QAAQ,QAAQ,YAAY,4DA0BxE,CAAA;AAED,QAAA,MAAM,eAAe,UAAW,KAAK,EAAE,WACT,QAAQ,OAAO,QAAQ,QAAQ,YAAY,4DAmBxE,CAAA;AAED,QAAA,MAAM,kBAAkB,aAAc,YAAY,EAAE,WACtB,QAAQ,OAAO,QAAQ,QAAQ,YAAY,4DAmBxE,CAAA;AAGD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC"}

package/dist/middleware/authentication.js

@@ -11,30 +11,26 @@ var __rest = (this && this.__rest) || function (s, e) {
     return t;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.authorize = void 0;
+exports.checkRoleAccess = exports.checkFeatureAccess = exports.authorize = void 0;
 const utilities_1 = require("../utilities");
 const entity_1 = require("../entity");
-const authorize = (roles) => {
+const authorize = () => {
     return async function (req, res, next) {
         if (!req.headers.authorization) {
             return res.status(401).json({ message: 'Unauthorized' });
         }
-        if (!roles.length) {
-            return res.status(401).json({ message: 'Unauthorized' });
-        }
         if (req.headers.authorization) {
             const token = await (0, utilities_1.verifyUid)(req.headers.authorization);
             if (!token) {
                 return res.status(401).json({ message: 'Session Expired' });
             }
-            let user = await entity_1.UserModel.findById(token.value.id);
+            let user = await entity_1.UserModel.findById(token.value.id).populate({
+                path: "groups",
+                populate: { path: "features", select: "name" },
+            }).lean();
             if (!user) {
                 return res.status(401).json({ message: 'No User Found' });
             }
-            const hasAccess = roles.find(role => role === user.role);
-            if (!hasAccess) {
-                return res.status(403).json({ message: 'Forbbiden' });
-            }
             const _a = user.toObject(), { createdAt, updatedAt, deletedAt, password } = _a, rest = __rest(_a, ["createdAt", "updatedAt", "deletedAt", "password"]);
             req.user = rest;
             next();
@@ -42,3 +38,36 @@ const authorize = (roles) => {
     };
 };
 exports.authorize = authorize;
+const checkRoleAccess = (roles) => {
+    return async function (req, res, next) {
+        const { user } = req;
+        if (!user) {
+            return res.status(401).json({ message: 'Unauthorized' });
+        }
+        const hasAccess = roles.find(role => role === user.role);
+        if (!hasAccess) {
+            return res.status(403).json({ message: 'Forbbiden: Role access denied' });
+        }
+        user.isAdmin = user.role === utilities_1.ROLES.ADMIN;
+        if (user.isAdmin) {
+            user.groups.push({ name: "DEFAULT", features: Object.values(utilities_1.FEATURE_TYPE).map(value => ({ name: value })) });
+        }
+        next();
+    };
+};
+exports.checkRoleAccess = checkRoleAccess;
+const checkFeatureAccess = (features) => {
+    return async function (req, res, next) {
+        const { user } = req;
+        if (!user) {
+            return res.status(401).json({ message: 'Unauthorized' });
+        }
+        const userFeatureNames = user.groups.flatMap(group => group.features ? group.features.map((feature) => feature.name) : []);
+        const hasAccess = features.some((feature) => userFeatureNames.includes(feature));
+        if (!hasAccess) {
+            return res.status(403).json({ message: "Forbidden: Feature access denied" });
+        }
+        next();
+    };
+};
+exports.checkFeatureAccess = checkFeatureAccess;

package/dist/types/IRequest.d.ts

@@ -1,8 +1,20 @@
 import { Request } from "express";
+import { FEATURE_TYPE, ROLES } from "../utilities";
+export interface IRequestUser {
+    email: string | null;
+    role: ROLES;
+    groups: Array<{
+        name: string;
+        features: Array<{
+            name: FEATURE_TYPE;
+        }>;
+    }>;
+    isVerified: boolean;
+    deletedAt: Date;
+    isDeleted: boolean;
+    isAdmin: boolean;
+}
 export interface IRequest extends Request {
-    user?: any;
-    role?: any;
-    file?: any;
-    features?: Array<any>;
+    user?: IRequestUser;
 }
 //# sourceMappingURL=IRequest.d.ts.map

package/dist/types/IRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IRequest.d.ts","sourceRoot":"","sources":["../../src/types/IRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,WAAW,QAAS,SAAQ,OAAO;IACrC,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,IAAI,CAAC,EAAC,GAAG,CAAC;IACV,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;CACxB"}
+{"version":3,"file":"IRequest.d.ts","sourceRoot":"","sources":["../../src/types/IRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,YAAY;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,KAAK,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC;QACV,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,YAAY,CAAA;SAAE,CAAC,CAAA;KAC1C,CAAC,CAAA;IACF,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,QAAS,SAAQ,OAAO;IACrC,IAAI,CAAC,EAAE,YAAY,CAAA;CACtB"}

package/dist/utilities/index.d.ts

@@ -17,4 +17,21 @@ export declare enum OWNERSHIP_TYPE {
     VIEWER = "VIEWER",
     EDITOR = "EDITOR"
 }
+export declare enum FEATURE_TYPE {
+    ADD_USER = "ADD_USER",
+    DELETE_USER = "DELETE_USER",
+    MODIFY_USER = "MODIFY_USER",
+    LIST_USER = "LIST_USER",
+    ADD_USER_GROUP = "ADD_USER_GROUP",
+    DELETE_USER_GROUP = "DELETE_USER_GROUP",
+    MODIFY_USER_GROUP = "MODIFY_USER_GROUP",
+    LIST_USER_GROUP = "LIST_USER_GROUP",
+    PREVIEW_PRE_BUILT_TEMPLATE = "PREVIEW_PRE_BUILT_TEMPLATE",
+    CLONE_TEMPLATE = "CLONE_TEMPLATE",
+    CREATE_TEMPLATE = "CREATE_TEMPLATE",
+    DELETE_TEMPLATE = "DELETE_TEMPLATE",
+    SHARE_TEMPLATE = "SHARE_TEMPLATE",
+    UPDATE_TEAMPLATE = "UPDATE_TEAMPLATE",
+    LIST_TEMPLATE = "LIST_TEMPLATE"
+}
 //# sourceMappingURL=index.d.ts.map

package/dist/utilities/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utilities/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,oBAAY,KAAK;IACf,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utilities/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,oBAAY,KAAK;IACf,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,YAAY;IAEtB,QAAQ,aAAW;IACnB,WAAW,gBAAc;IACzB,WAAW,gBAAc;IACzB,SAAS,cAAY;IAGrB,cAAc,mBAAiB;IAC/B,iBAAiB,sBAAoB;IACrC,iBAAiB,sBAAoB;IACrC,eAAe,oBAAkB;IAGjC,0BAA0B,+BAA6B;IACvD,cAAc,mBAAiB;IAC/B,eAAe,oBAAkB;IACjC,eAAe,oBAAkB;IACjC,cAAc,mBAAiB;IAC/B,gBAAgB,qBAAmB;IACnC,aAAa,kBAAgB;CAC9B"}

package/dist/utilities/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OWNERSHIP_TYPE = exports.RECORD_TYPE = exports.ROLES = void 0;
+exports.FEATURE_TYPE = exports.OWNERSHIP_TYPE = exports.RECORD_TYPE = exports.ROLES = void 0;
 __exportStar(require("./callWithRetries"), exports);
 __exportStar(require("./createFolder"), exports);
 __exportStar(require("./encryptionUtils"), exports);
@@ -37,3 +37,24 @@ var OWNERSHIP_TYPE;
     OWNERSHIP_TYPE["VIEWER"] = "VIEWER";
     OWNERSHIP_TYPE["EDITOR"] = "EDITOR";
 })(OWNERSHIP_TYPE || (exports.OWNERSHIP_TYPE = OWNERSHIP_TYPE = {}));
+var FEATURE_TYPE;
+(function (FEATURE_TYPE) {
+    // MANAGE USER
+    FEATURE_TYPE["ADD_USER"] = "ADD_USER";
+    FEATURE_TYPE["DELETE_USER"] = "DELETE_USER";
+    FEATURE_TYPE["MODIFY_USER"] = "MODIFY_USER";
+    FEATURE_TYPE["LIST_USER"] = "LIST_USER";
+    // MANAGE GROUPS
+    FEATURE_TYPE["ADD_USER_GROUP"] = "ADD_USER_GROUP";
+    FEATURE_TYPE["DELETE_USER_GROUP"] = "DELETE_USER_GROUP";
+    FEATURE_TYPE["MODIFY_USER_GROUP"] = "MODIFY_USER_GROUP";
+    FEATURE_TYPE["LIST_USER_GROUP"] = "LIST_USER_GROUP";
+    // MANAGE TEMPLATE
+    FEATURE_TYPE["PREVIEW_PRE_BUILT_TEMPLATE"] = "PREVIEW_PRE_BUILT_TEMPLATE";
+    FEATURE_TYPE["CLONE_TEMPLATE"] = "CLONE_TEMPLATE";
+    FEATURE_TYPE["CREATE_TEMPLATE"] = "CREATE_TEMPLATE";
+    FEATURE_TYPE["DELETE_TEMPLATE"] = "DELETE_TEMPLATE";
+    FEATURE_TYPE["SHARE_TEMPLATE"] = "SHARE_TEMPLATE";
+    FEATURE_TYPE["UPDATE_TEAMPLATE"] = "UPDATE_TEAMPLATE";
+    FEATURE_TYPE["LIST_TEMPLATE"] = "LIST_TEMPLATE";
+})(FEATURE_TYPE || (exports.FEATURE_TYPE = FEATURE_TYPE = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "biz-email-builder-shared",
-  "version": "1.0.17",
+  "version": "1.0.18",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [