dbgate-api-premium 6.8.2 → 7.0.0

package/src/controllers/storageDb.js

@@ -449,6 +449,46 @@ async function saveStorageTeamFilesPermissions(
   }
 }
 
+async function saveStorageTeamFoldersPermissions(
+  table,
+  idColumn,
+  idValue,
+  usedTeamFoldersRead,
+  usedTeamFoldersWrite,
+  usedTeamFoldersUse
+) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  const records = _.uniq([...usedTeamFoldersRead, ...usedTeamFoldersWrite, ...usedTeamFoldersUse]).map(
+    teamFolderId => ({
+      team_folder_id: teamFolderId,
+      allow_read: usedTeamFoldersRead.includes(teamFolderId) ? 1 : 0,
+      allow_write: usedTeamFoldersWrite.includes(teamFolderId) ? 1 : 0,
+      allow_use: usedTeamFoldersUse.includes(teamFolderId) ? 1 : 0,
+    })
+  );
+
+  await runQueryFmt(driver, conn, 'delete from %i where %i = %v', table, idColumn, idValue);
+
+  for (const record of records) {
+    await runQueryFmt(
+      driver,
+      conn,
+      'insert into %i (%i, ~team_folder_id, ~allow_read_files, ~allow_write_files, ~allow_use_files) values (%v, %v, %v, %v, %v)',
+      table,
+      idColumn,
+      idValue,
+      record.team_folder_id,
+      record.allow_read,
+      record.allow_write,
+      record.allow_use
+    );
+  }
+}
+
 function getStorageConnectionError() {
   return storageConnectionError;
 }
@@ -493,7 +533,7 @@ async function storageCheckUserRoleConnectionAccess(userId, conid) {
   return respByUser.length > 0 || respByRole.length > 0 || respByLogged.length > 0;
 }
 
-async function storageCreateTeamFile({ fileType, file, data, ownerUserId, metadata }) {
+async function storageCreateTeamFile({ fileType, file, data, ownerUserId, metadata, teamFolderId }) {
   const [conn, driver] = await getStorageConnection();
   if (!conn) {
     return null;
@@ -505,54 +545,126 @@ async function storageCreateTeamFile({ fileType, file, data, ownerUserId, metada
     return null;
   }
   await storageSqlCommandFmt(
-    'insert into ~team_files (~file_type_id, ~file_name, ~file_content, ~owner_user_id, ~metadata) values (%v, %v, %v, %v, %v)',
+    'insert into ~team_files (~file_type_id, ~file_name, ~file_content, ~owner_user_id, ~metadata, ~team_folder_id) values (%v, %v, %v, %v, %v, %v)',
     typeId,
     file,
     data,
     ownerUserId ?? null,
-    metadata
+    metadata,
+    parseInt(teamFolderId ?? -1)
   );
   const teamFileId = await selectStorageIdentity('team_files');
   return { teamFileId };
 }
 
-async function storageListTeamFilesForUser(userId) {
+async function storageListTeamFoldersForUser(userId) {
   const [conn, driver] = await getStorageConnection();
   if (!conn) {
     return null;
   }
 
   const sqlCond =
-    additionalCond => `exists (select 1 from ~user_team_files where ~user_team_files.~user_id = ${userId} and ~user_team_files.~team_file_id = ~team_files.~id ${additionalCond(
-      'user_team_files'
+    additionalCond => `exists (select 1 from ~user_team_folders where ~user_team_folders.~user_id = ${userId} and ~user_team_folders.~team_folder_id = ~team_folders.~id ${additionalCond(
+      'user_team_folders'
     )})) 
-    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCond(
-      'role_team_files'
+    or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_folders.~team_folder_id = ~team_folders.~id ${additionalCond(
+      'role_team_folders'
     )}))
-    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = -2 and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCond(
-      'role_team_files'
+    or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = -2 and ~role_team_folders.~team_folder_id = ~team_folders.~id ${additionalCond(
+      'role_team_folders'
     )})`;
 
+  const resp = await storageSelectFmt(
+    `
+    select ~team_folders.~id, ~team_folders.~folder_name,
+
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_write_files = 1`)}
+    ) then 1 else 0 end as ~allow_create,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_read_files = 1`)}
+    ) then 1 else 0 end as ~allow_read,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_write_files = 1`)}
+    ) then 1 else 0 end as ~allow_write,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_use_files = 1`)}
+    ) then 1 else 0 end as ~allow_use
+
+    from ~team_folders
+    where 
+    (exists (select 1 from ~user_team_folders where ~user_team_folders.~user_id = ${userId} and ~user_team_folders.~team_folder_id = ~team_folders.~id)) 
+    or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_folders.~team_folder_id = ~team_folders.~id))
+    or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = -2 and ~role_team_folders.~team_folder_id = ~team_folders.~id))`
+  );
+  return resp;
+}
+
+async function storageListTeamFilesForUser(userId) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  const sqlCondWithFolders = (additionalCondFile, additionalCondFolder) => `(
+    (exists (select 1 from ~user_team_files where ~user_team_files.~user_id = ${userId} and ~user_team_files.~team_file_id = ~team_files.~id ${additionalCondFile(
+    'user_team_files'
+  )})) 
+    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCondFile(
+    'role_team_files'
+  )}))
+    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = -2 and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCondFile(
+      'role_team_files'
+    )}))
+    or (~team_files.~team_folder_id is not null and (
+      (exists (select 1 from ~user_team_folders where ~user_team_folders.~user_id = ${userId} and ~user_team_folders.~team_folder_id = ~team_files.~team_folder_id ${additionalCondFolder(
+    'user_team_folders'
+  )}))
+      or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id ${additionalCondFolder(
+    'role_team_folders'
+  )}))
+      or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = -2 and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id ${additionalCondFolder(
+        'role_team_folders'
+      )}))
+    ))
+  )`;
+
   const resp = await storageSelectFmt(
     `
     select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name, ~team_files.~owner_user_id,
+      ~team_folders.~id as ~team_folder_id, ~team_folders.~folder_name as ~team_folder_name,
 
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_read = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_read = 1`,
+      table => `and ~${table}.~allow_read_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_read,
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_write = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_write = 1`,
+      table => `and ~${table}.~allow_write_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_write,
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_use = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_use = 1`,
+      table => `and ~${table}.~allow_use_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_use
 
     from ~team_files
     inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id
+    inner join ~team_folders on ~team_files.~team_folder_id = ~team_folders.~id
     where ~team_files.~owner_user_id = ${userId}
     or (exists (select 1 from ~user_team_files where ~user_team_files.~user_id = ${userId} and ~user_team_files.~team_file_id = ~team_files.~id)) 
     or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_files.~team_file_id = ~team_files.~id))
-    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = -2 and ~role_team_files.~team_file_id = ~team_files.~id))`
+    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = -2 and ~role_team_files.~team_file_id = ~team_files.~id))
+    or (~team_files.~team_folder_id is not null and (
+      (exists (select 1 from ~user_team_folders where ~user_team_folders.~user_id = ${userId} and ~user_team_folders.~team_folder_id = ~team_files.~team_folder_id))
+      or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = ${userId}) and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id))
+      or (exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = -2 and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id))
+    ))`
   );
   return resp;
 }
@@ -564,8 +676,21 @@ async function storageListAllTeamFiles() {
   }
 
   const resp =
-    await storageSelectFmt(`select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name, ~team_files.~owner_user_id 
-    from ~team_files inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id`);
+    await storageSelectFmt(`select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name, ~team_files.~owner_user_id,
+      ~team_folders.~id as ~team_folder_id, ~team_folders.~folder_name as ~team_folder_name
+    from ~team_files inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id
+    inner join ~team_folders on ~team_files.~team_folder_id = ~team_folders.~id
+    `);
+  return resp;
+}
+
+async function storageListAllTeamFolders() {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  const resp = await storageSelectFmt(`select ~team_folders.~id, ~team_folders.~folder_name from ~team_folders`);
   return resp;
 }
 
@@ -574,27 +699,79 @@ async function storageListTeamFilesForRole(roleId) {
   if (!conn) {
     return null;
   }
-  const sqlCond = additionalCond =>
-    `exists (select 1 from ~role_team_files where ~role_team_files.~role_id = ${roleId} and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCond(
-      'role_team_files'
-    )})`;
+
+  const sqlCondWithFolders = (additionalCondFile, additionalCondFolder) => `(
+    (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = ${roleId} and ~role_team_files.~team_file_id = ~team_files.~id ${additionalCondFile(
+    'role_team_files'
+  )}))
+    or (~team_files.~team_folder_id is not null and (
+      exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = ${roleId} and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id ${additionalCondFolder(
+    'role_team_folders'
+  )})
+    ))
+  )`;
 
   const resp = await storageSelectFmt(
     `
     select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name, ~team_files.~owner_user_id,
+    ~team_folders.~id as ~team_folder_id, ~team_folders.~folder_name as ~team_folder_name,
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_read = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_read = 1`,
+      table => `and ~${table}.~allow_read_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_read,
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_write = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_write = 1`,
+      table => `and ~${table}.~allow_write_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_write,
     case when (
-    ${sqlCond(table => `and ~${table}.~allow_use = 1`)}
+    ${sqlCondWithFolders(
+      table => `and ~${table}.~allow_use = 1`,
+      table => `and ~${table}.~allow_use_files = 1`
+    )}
     ) then 1 else 0 end as ~allow_use
     from ~team_files 
     inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id
+    inner join ~team_folders on ~team_files.~team_folder_id = ~team_folders.~id
     where ~team_files.~owner_user_id = ${roleId}
-    or (${sqlCond(() => '')})`
+    or (exists (select 1 from ~role_team_files where ~role_team_files.~role_id = ${roleId} and ~role_team_files.~team_file_id = ~team_files.~id))
+    or (~team_files.~team_folder_id is not null and (
+      exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = ${roleId} and ~role_team_folders.~team_folder_id = ~team_files.~team_folder_id)
+    ))`
+  );
+  return resp;
+}
+
+async function storageListTeamFoldersForRole(roleId) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+  const sqlCond = additionalCond =>
+    `exists (select 1 from ~role_team_folders where ~role_team_folders.~role_id = ${roleId} and ~role_team_folders.~team_folder_id = ~team_folders.~id ${additionalCond(
+      'role_team_folders'
+    )})`;
+
+  const resp = await storageSelectFmt(
+    `
+    select ~team_folders.~id, ~team_folders.~folder_name,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_write_files = 1`)}
+    ) then 1 else 0 end as ~allow_create,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_read_files = 1`)}
+    ) then 1 else 0 end as ~allow_read,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_write_files = 1`)}
+    ) then 1 else 0 end as ~allow_write,
+    case when (
+    ${sqlCond(table => `and ~${table}.~allow_use_files = 1`)}
+    ) then 1 else 0 end as ~allow_use
+    from ~team_folders 
+    where (${sqlCond(() => '')})`
   );
   return resp;
 }
@@ -669,13 +846,76 @@ async function storageGetTeamFileRoleAccess(teamFileId, roleId) {
   return resp;
 }
 
+async function storageGetTeamFolderUserAccess(teamFolderId, userId) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  const respUser = await storageSelectFmt(
+    'select allow_read_files, allow_write_files, allow_use_files from ~user_team_folders where ~user_team_folders.~user_id = %v and ~user_team_folders.~team_folder_id = %v',
+    userId,
+    teamFolderId
+  );
+  const respRole = await storageSelectFmt(
+    'select allow_read_files, allow_write_files, allow_use_files from ~role_team_folders where ~role_team_folders.~role_id in (select ~role_id from ~user_roles where ~user_roles.~user_id = %v) and ~role_team_folders.~team_folder_id = %v',
+    userId,
+    teamFolderId
+  );
+
+  const resp = {
+    allowRead: false,
+    allowWrite: false,
+    allowUse: false,
+  };
+
+  for (const row of respUser) {
+    resp.allowRead ||= row.allow_read_files;
+    resp.allowWrite ||= row.allow_write_files;
+    resp.allowUse ||= row.allow_use_files;
+  }
+
+  for (const row of respRole) {
+    resp.allowRead ||= row.allow_read_files;
+    resp.allowWrite ||= row.allow_write_files;
+    resp.allowUse ||= row.allow_use_files;
+  }
+
+  return resp;
+}
+
+async function storageGetTeamFolderRoleAccess(teamFolderId, roleId) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+  const respRole = await storageSelectFmt(
+    'select allow_read_files, allow_write_files, allow_use_files from ~role_team_folders where ~role_team_folders.~role_id = %v and ~role_team_folders.~team_folder_id = %v',
+    roleId,
+    teamFolderId
+  );
+  const resp = {
+    allowRead: false,
+    allowWrite: false,
+    allowUse: false,
+  };
+
+  for (const row of respRole) {
+    resp.allowRead ||= row.allow_read_files;
+    resp.allowWrite ||= row.allow_write_files;
+    resp.allowUse ||= row.allow_use_files;
+  }
+
+  return resp;
+}
+
 async function storageGetExistingFile(teamFileId) {
   const [conn, driver] = await getStorageConnection();
   if (!conn) {
     return null;
   }
   const resp = await storageSelectFmt(
-    `select ~team_files.~id, ~team_files.~owner_user_id, ~team_file_types.~name as ~type_name
+    `select ~team_files.~id, ~team_files.~owner_user_id, ~team_file_types.~name as ~type_name, ~team_files.~team_folder_id
     from ~team_files inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id where ~team_files.~id = %v`,
     teamFileId
   );
@@ -689,7 +929,7 @@ async function storageGetExistingFileWithContent(teamFileId) {
   }
   const resp = await storageSelectFmt(
     `select ~team_files.~id, ~team_files.~file_name, ~team_files.~owner_user_id, ~team_file_types.~name as ~type_name, ~team_files.~file_content, 
-      ~users.login as ~owner_login, ~users.~email as ~owner_email, ~team_file_types.~format as ~type_format
+      ~users.login as ~owner_login, ~users.~email as ~owner_email, ~team_file_types.~format as ~type_format, ~team_files.~team_folder_id
     from ~team_files inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id 
     left join ~users on ~team_files.~owner_user_id = ~users.~id
     where ~team_files.~id = %v`,
@@ -726,6 +966,48 @@ async function storageUpdateTeamFileAdmin({ teamFileId, name }) {
   return true;
 }
 
+async function storageInsertTeamFolderAdmin({ name }) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+  await storageSqlCommandFmt('insert into ~team_folders (~folder_name) values (%v)', name);
+}
+
+async function storageUpdateTeamFolderAdmin({ teamFolderId, name }) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+  await storageSqlCommandFmt('update ~team_folders set ~folder_name = %v where ~id = %v', name, teamFolderId);
+  return true;
+}
+
+async function storageListAllAdminFolders() {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  const resp = await storageSelectFmt(`select ~team_folders.~id, ~team_folders.~folder_name, 
+      (select count(*) from ~team_files where ~team_files.~team_folder_id = ~team_folders.~id) as ~file_count
+      from ~team_folders`);
+  return resp;
+}
+
+async function storageGetExistingFolder(teamFolderId) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+  const resp = await storageSelectFmt(
+    `select ~team_folders.~id, ~team_folders.~folder_name
+    from ~team_folders where ~team_folders.~id = %v`,
+    teamFolderId
+  );
+  return resp?.[0];
+}
+
 async function storageListAllAdminFiles() {
   const [conn, driver] = await getStorageConnection();
   if (!conn) {
@@ -733,8 +1015,12 @@ async function storageListAllAdminFiles() {
   }
 
   const resp =
-    await storageSelectFmt(`select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name 
-    from ~team_files inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id`);
+    await storageSelectFmt(`select ~team_files.~id, ~team_files.~file_name, ~team_files.~metadata, ~team_file_types.~name as ~type_name, 
+      ~team_folders.~folder_name, ~team_files.~team_folder_id, ~team_files.~owner_user_id
+    from ~team_files 
+    inner join ~team_file_types on ~team_files.~file_type_id = ~team_file_types.~id
+    inner join ~team_folders on ~team_files.~team_folder_id = ~team_folders.~id
+    `);
   return resp;
 }
 
@@ -748,6 +1034,19 @@ async function storageDeleteFile(id) {
   return true;
 }
 
+async function storageDeleteFolder(id) {
+  const [conn, driver] = await getStorageConnection();
+  if (!conn) {
+    return null;
+  }
+
+  // move files to default folder
+  await storageSqlCommandFmt('update ~team_files set ~team_folder_id = -1 where ~team_folder_id = %v', id);
+  // delete fodler
+  await storageSqlCommandFmt('delete from ~team_folders where ~id = %v', id);
+  return true;
+}
+
 async function storageCopyFile(id, newName, userId) {
   const [conn, driver] = await getStorageConnection();
   if (!conn) {
@@ -796,13 +1095,24 @@ module.exports = {
   storageGetExistingFile,
   storageGetTeamFileRoleAccess,
   storageListTeamFilesForUser,
+  storageListTeamFoldersForUser,
   storageListTeamFilesForRole,
+  storageListTeamFoldersForRole,
   storageUpdateTeamFile,
   storageListAllTeamFiles,
+  storageListAllTeamFolders,
   storageGetExistingFileWithContent,
   storageListAllAdminFiles,
   storageUpdateTeamFileAdmin,
   storageDeleteFile,
   saveStorageTeamFilesPermissions,
   storageCopyFile,
+  storageListAllAdminFolders,
+  storageGetExistingFolder,
+  storageUpdateTeamFolderAdmin,
+  storageDeleteFolder,
+  storageInsertTeamFolderAdmin,
+  saveStorageTeamFoldersPermissions,
+  storageGetTeamFolderRoleAccess,
+  storageGetTeamFolderUserAccess,
 };