dexie-cloud-addon 4.0.0-beta.14 → 4.0.0-beta.17

package/dist/types/DexieCloudAPI.d.ts

@@ -1,5 +1,5 @@
 import { DexieCloudOptions } from './DexieCloudOptions';
-import { DexieCloudSchema } from 'dexie-cloud-common';
+import { DBRealmRole, DexieCloudSchema } from 'dexie-cloud-common';
 import { UserLogin } from './db/entities/UserLogin';
 import * as Rx from 'rxjs';
 import { PersistedSyncState } from './db/entities/PersistedSyncState';
@@ -22,6 +22,9 @@ export interface DexieCloudAPI {
     persistedSyncState: Rx.BehaviorSubject<PersistedSyncState | undefined>;
     userInteraction: Rx.BehaviorSubject<DXCUserInteraction | undefined>;
     invites: Rx.Observable<Invite[]>;
+    roles: Rx.Observable<{
+        [roleName: string]: DBRealmRole;
+    }>;
     usingServiceWorker?: boolean;
     /** Login using Dexie Cloud OTP or Demo user.
      *

package/dist/types/WSObservable.d.ts

@@ -61,6 +61,7 @@ export declare class WSConnection extends Subscription {
     constructor(databaseUrl: string, rev: string, realmSetHash: string, clientIdentity: string, token: string | undefined, tokenExpiration: Date | undefined, subscriber: Subscriber<WSConnectionMsg>, messageProducer: Observable<WSClientToServerMsg>, webSocketStatus: BehaviorSubject<DXCWebSocketStatus>);
     private teardown;
     private disconnect;
+    reconnecting: boolean;
     reconnect(): void;
     connect(): Promise<void>;
 }

package/dist/types/getGlobalRolesObservable.d.ts

@@ -0,0 +1,5 @@
+import Dexie from 'dexie';
+import { DBRealmRole } from 'dexie-cloud-common';
+export declare const getGlobalRolesObservable: (x: Dexie) => import("./mapValueObservable").ObservableWithCurrentValue<{
+    [roleName: string]: DBRealmRole;
+}>;

package/dist/types/getInvitesObservable.d.ts

@@ -4,7 +4,7 @@ export declare const getInvitesObservable: (x: Dexie) => import("./mapValueObser
     realm: import("dexie-cloud-common").DBRealm & {
         permissions: import("dexie-cloud-common").DBPermissionSet;
     };
-    id?: string | undefined;
+    id: string;
     userId?: string | undefined;
     email?: string | undefined;
     name?: string | undefined;

package/dist/umd/dexie-cloud-addon.js

@@ -108,7 +108,7 @@
      *
      * ==========================================================================
      *
-     * Version 4.0.0-beta.14, Mon Dec 20 2021
+     * Version 4.0.0-beta.17, Fri Apr 08 2022
      *
      * https://dexie.org
      *
@@ -5303,166 +5303,22 @@
             return rv;
         };
     }
-    var SECONDS = 1000;
-    var MINUTES = 60 * SECONDS;
-    var myId = randomString(16);
-    var GUARDED_JOB_HEARTBEAT = 1 * SECONDS;
-    var GUARDED_JOB_TIMEOUT = 1 * MINUTES;
-    function performGuardedJob(db, jobName, jobsTableName, job, _e) {
-        var _f = _e === void 0 ? {} : _e, awaitRemoteJob = _f.awaitRemoteJob;
-        return __awaiter$1(this, void 0, void 0, function () {
-            function aquireLock() {
-                return __awaiter$1(this, void 0, void 0, function () {
-                    var gotTheLock, jobDoneObservable, err_1;
-                    var _this_1 = this;
-                    return __generator$1(this, function (_e) {
-                        switch (_e.label) {
-                            case 0: return [4 /*yield*/, db.transaction('rw!', jobsTableName, function () { return __awaiter$1(_this_1, void 0, void 0, function () {
-                                    var currentWork;
-                                    return __generator$1(this, function (_e) {
-                                        switch (_e.label) {
-                                            case 0: return [4 /*yield*/, jobsTable.get(jobName)];
-                                            case 1:
-                                                currentWork = _e.sent();
-                                                if (!!currentWork) return [3 /*break*/, 3];
-                                                // No one else is working. Let's record that we are.
-                                                return [4 /*yield*/, jobsTable.add({
-                                                        nodeId: myId,
-                                                        started: new Date(),
-                                                        heartbeat: new Date()
-                                                    }, jobName)];
-                                            case 2:
-                                                // No one else is working. Let's record that we are.
-                                                _e.sent();
-                                                return [2 /*return*/, true];
-                                            case 3:
-                                                if (!(currentWork.heartbeat.getTime() <
-                                                    Date.now() - GUARDED_JOB_TIMEOUT)) return [3 /*break*/, 5];
-                                                console.warn("Latest ".concat(jobName, " worker seem to have died.\n"), "The dead job started:", currentWork.started, "\n", "Last heart beat was:", currentWork.heartbeat, '\n', "We're now taking over!");
-                                                // Now, take over!
-                                                return [4 /*yield*/, jobsTable.put({
-                                                        nodeId: myId,
-                                                        started: new Date(),
-                                                        heartbeat: new Date()
-                                                    }, jobName)];
-                                            case 4:
-                                                // Now, take over!
-                                                _e.sent();
-                                                return [2 /*return*/, true];
-                                            case 5: return [2 /*return*/, false];
-                                        }
-                                    });
-                                }); })];
-                            case 1:
-                                gotTheLock = _e.sent();
-                                if (gotTheLock)
-                                    return [2 /*return*/, true];
-                                if (!awaitRemoteJob) return [3 /*break*/, 6];
-                                _e.label = 2;
-                            case 2:
-                                _e.trys.push([2, 4, , 6]);
-                                jobDoneObservable = rxjs.from(Dexie.liveQuery(function () { return jobsTable.get(jobName); })).pipe(timeout(GUARDED_JOB_TIMEOUT), filter(function (job) { return !job; }));
-                                return [4 /*yield*/, jobDoneObservable.toPromise()];
-                            case 3:
-                                _e.sent();
-                                return [2 /*return*/, false];
-                            case 4:
-                                err_1 = _e.sent();
-                                if (err_1.name !== 'TimeoutError') {
-                                    throw err_1;
-                                }
-                                return [4 /*yield*/, aquireLock()];
-                            case 5: 
-                            // Timeout stopped us! Try aquire the lock now.
-                            // It will likely succeed this time unless
-                            // another client took it.
-                            return [2 /*return*/, _e.sent()];
-                            case 6: return [2 /*return*/, false];
-                        }
-                    });
-                });
-            }
-            var jobsTable, heartbeat;
-            var _this_1 = this;
-            return __generator$1(this, function (_g) {
-                switch (_g.label) {
-                    case 0:
-                        jobsTable = db.table(jobsTableName);
-                        return [4 /*yield*/, aquireLock()];
-                    case 1:
-                        if (!_g.sent()) return [3 /*break*/, 6];
-                        heartbeat = setInterval(function () {
-                            jobsTable.update(jobName, function (job) {
-                                if (job.nodeId === myId) {
-                                    job.heartbeat = new Date();
-                                }
-                            });
-                        }, GUARDED_JOB_HEARTBEAT);
-                        _g.label = 2;
-                    case 2:
-                        _g.trys.push([2, , 4, 6]);
-                        return [4 /*yield*/, job()];
-                    case 3: return [2 /*return*/, _g.sent()];
-                    case 4:
-                        // Stop heartbeat
-                        clearInterval(heartbeat);
-                        // Remove the persisted job state:
-                        return [4 /*yield*/, db.transaction('rw!', jobsTableName, function () { return __awaiter$1(_this_1, void 0, void 0, function () {
-                                var currentWork;
-                                return __generator$1(this, function (_e) {
-                                    switch (_e.label) {
-                                        case 0: return [4 /*yield*/, jobsTable.get(jobName)];
-                                        case 1:
-                                            currentWork = _e.sent();
-                                            if (currentWork && currentWork.nodeId === myId) {
-                                                jobsTable.delete(jobName);
-                                            }
-                                            return [2 /*return*/];
-                                    }
-                                });
-                            }); })];
-                    case 5:
-                        // Remove the persisted job state:
-                        _g.sent();
-                        return [7 /*endfinally*/];
-                    case 6: return [2 /*return*/];
-                }
-            });
-        });
-    }
     function performInitialSync(db, cloudOptions, cloudSchema) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var _this_1 = this;
             return __generator$1(this, function (_e) {
                 switch (_e.label) {
                     case 0:
-                        console.debug("Performing initial sync");
-                        return [4 /*yield*/, performGuardedJob(db, 'initialSync', '$jobs', function () { return __awaiter$1(_this_1, void 0, void 0, function () {
-                                var syncState;
-                                return __generator$1(this, function (_e) {
-                                    switch (_e.label) {
-                                        case 0: return [4 /*yield*/, db.getPersistedSyncState()];
-                                        case 1:
-                                            syncState = _e.sent();
-                                            if (!!(syncState === null || syncState === void 0 ? void 0 : syncState.initiallySynced)) return [3 /*break*/, 3];
-                                            return [4 /*yield*/, sync(db, cloudOptions, cloudSchema, { isInitialSync: true })];
-                                        case 2:
-                                            _e.sent();
-                                            _e.label = 3;
-                                        case 3: return [2 /*return*/];
-                                    }
-                                });
-                            }); }, { awaitRemoteJob: true } // Don't return until the job is done!
-                            )];
+                        console.debug('Performing initial sync');
+                        return [4 /*yield*/, sync(db, cloudOptions, cloudSchema, { isInitialSync: true })];
                     case 1:
                         _e.sent();
-                        console.debug("Done initial sync");
+                        console.debug('Done initial sync');
                         return [2 /*return*/];
                 }
             });
         });
     }
-    var USER_INACTIVITY_TIMEOUT = 300000; // 300_000;
+    var USER_INACTIVITY_TIMEOUT = 180000; // 3 minutes
     var INACTIVE_WAIT_TIME = 20000;
     // This observable will be emitted to later down....
     var userIsActive = new rxjs.BehaviorSubject(true);
@@ -5476,9 +5332,12 @@
     //   for just a short time.
     var userIsReallyActive = new rxjs.BehaviorSubject(true);
     userIsActive
-        .pipe(switchMap(function (isActive) { return isActive
-        ? rxjs.of(true)
-        : rxjs.of(false).pipe(delay(INACTIVE_WAIT_TIME)); }), distinctUntilChanged())
+        .pipe(switchMap(function (isActive) {
+        //console.debug('SyncStatus: DUBB: isActive changed to', isActive);
+        return isActive
+            ? rxjs.of(true)
+            : rxjs.of(false).pipe(delay(INACTIVE_WAIT_TIME));
+    }), distinctUntilChanged())
         .subscribe(userIsReallyActive);
     //
     // First create some corner-stone observables to build the flow on
@@ -5493,7 +5352,7 @@
     var documentBecomesVisible = visibilityStateIsChanged.pipe(filter(function () { return document.visibilityState === 'visible'; }));
     // Any of various user-activity-related events happen:
     var userDoesSomething = typeof window !== 'undefined'
-        ? rxjs.merge(documentBecomesVisible, rxjs.fromEvent(window, 'mousemove'), rxjs.fromEvent(window, 'keydown'), rxjs.fromEvent(window, 'wheel'), rxjs.fromEvent(window, 'touchmove'))
+        ? rxjs.merge(documentBecomesVisible, rxjs.fromEvent(window, 'mousedown'), rxjs.fromEvent(window, 'mousemove'), rxjs.fromEvent(window, 'keydown'), rxjs.fromEvent(window, 'wheel'), rxjs.fromEvent(window, 'touchmove'))
         : rxjs.of({});
     if (typeof document !== 'undefined') {
         //
@@ -5548,6 +5407,7 @@
         function WSConnection(databaseUrl, rev, realmSetHash, clientIdentity, token, tokenExpiration, subscriber, messageProducer, webSocketStatus) {
             var _this_1 = _super_1.call(this, function () { return _this_1.teardown(); }) || this;
             _this_1.id = ++counter;
+            _this_1.reconnecting = false;
             console.debug('New WebSocket Connection', _this_1.id, token ? 'authorized' : 'unauthorized');
             _this_1.databaseUrl = databaseUrl;
             _this_1.rev = rev;
@@ -5568,7 +5428,7 @@
             this.disconnect();
         };
         WSConnection.prototype.disconnect = function () {
-            this.webSocketStatus.next("disconnected");
+            this.webSocketStatus.next('disconnected');
             if (this.pinger) {
                 clearInterval(this.pinger);
                 this.pinger = null;
@@ -5586,17 +5446,25 @@
             }
         };
         WSConnection.prototype.reconnect = function () {
-            this.disconnect();
-            this.connect();
+            var _this_1 = this;
+            if (this.reconnecting)
+                return;
+            this.reconnecting = true;
+            try {
+                this.disconnect();
+            }
+            catch (_e) { }
+            this.connect()
+                .catch(function () { })
+                .then(function () { return (_this_1.reconnecting = false); }); // finally()
         };
         WSConnection.prototype.connect = function () {
             return __awaiter$1(this, void 0, void 0, function () {
-                var wsUrl, searchParams, ws;
+                var wsUrl, searchParams, ws, everConnected_1;
                 var _this_1 = this;
                 return __generator$1(this, function (_e) {
                     switch (_e.label) {
                         case 0:
-                            this.webSocketStatus.next("connecting");
                             this.lastServerActivity = new Date();
                             if (this.pauseUntil && this.pauseUntil > new Date()) {
                                 console.debug('WS not reconnecting just yet', {
@@ -5611,12 +5479,14 @@
                             if (!this.databaseUrl)
                                 throw new Error("Cannot connect without a database URL");
                             if (this.closed) {
+                                //console.debug('SyncStatus: DUBB: Ooops it was closed!');
                                 return [2 /*return*/];
                             }
                             if (this.tokenExpiration && this.tokenExpiration < new Date()) {
                                 this.subscriber.error(new TokenExpiredError()); // Will be handled in connectWebSocket.ts.
                                 return [2 /*return*/];
                             }
+                            this.webSocketStatus.next('connecting');
                             this.pinger = setInterval(function () { return __awaiter$1(_this_1, void 0, void 0, function () {
                                 var _this_1 = this;
                                 return __generator$1(this, function (_e) {
@@ -5666,7 +5536,7 @@
                             searchParams = new URLSearchParams();
                             if (this.subscriber.closed)
                                 return [2 /*return*/];
-                            searchParams.set('v', "2");
+                            searchParams.set('v', '2');
                             searchParams.set('rev', this.rev);
                             searchParams.set('realmsHash', this.realmSetHash);
                             searchParams.set('clientId', this.clientIdentity);
@@ -5707,17 +5577,23 @@
                             _e.label = 1;
                         case 1:
                             _e.trys.push([1, 3, , 4]);
+                            everConnected_1 = false;
                             return [4 /*yield*/, new Promise(function (resolve, reject) {
                                     ws.onopen = function (event) {
                                         console.debug('dexie-cloud WebSocket onopen');
+                                        everConnected_1 = true;
                                         resolve(null);
                                     };
                                     ws.onerror = function (event) {
-                                        var error = event.error || new Error('WebSocket Error');
-                                        _this_1.disconnect();
-                                        _this_1.subscriber.error(error);
-                                        _this_1.webSocketStatus.next("error");
-                                        reject(error);
+                                        if (!everConnected_1) {
+                                            var error = event.error || new Error('WebSocket Error');
+                                            _this_1.subscriber.error(error);
+                                            _this_1.webSocketStatus.next('error');
+                                            reject(error);
+                                        }
+                                        else {
+                                            _this_1.reconnect();
+                                        }
                                     };
                                 })];
                         case 2:
@@ -5725,8 +5601,9 @@
                             this.messageProducerSubscription = this.messageProducer.subscribe(function (msg) {
                                 var _e;
                                 if (!_this_1.closed) {
-                                    if (msg.type === 'ready' && _this_1.webSocketStatus.value !== 'connected') {
-                                        _this_1.webSocketStatus.next("connected");
+                                    if (msg.type === 'ready' &&
+                                        _this_1.webSocketStatus.value !== 'connected') {
+                                        _this_1.webSocketStatus.next('connected');
                                     }
                                     (_e = _this_1.ws) === null || _e === void 0 ? void 0 : _e.send(TSON.stringify(msg));
                                 }
@@ -5835,7 +5712,10 @@
                 else {
                     return rxjs.throwError(error);
                 }
-            }), catchError(function (error) { return rxjs.from(waitAndReconnectWhenUserDoesSomething(error)).pipe(switchMap(function () { return createObservable(); })); }));
+            }), catchError(function (error) {
+                db.cloud.webSocketStatus.next("error");
+                return rxjs.from(waitAndReconnectWhenUserDoesSomething(error)).pipe(switchMap(function () { return createObservable(); }));
+            }));
         }
         return createObservable().subscribe(function (msg) {
             if (msg) {
@@ -5868,6 +5748,135 @@
             });
         });
     }
+    var SECONDS = 1000;
+    var MINUTES = 60 * SECONDS;
+    var myId = randomString(16);
+    var GUARDED_JOB_HEARTBEAT = 1 * SECONDS;
+    var GUARDED_JOB_TIMEOUT = 1 * MINUTES;
+    function performGuardedJob(db, jobName, jobsTableName, job, _e) {
+        var _f = _e === void 0 ? {} : _e, awaitRemoteJob = _f.awaitRemoteJob;
+        return __awaiter$1(this, void 0, void 0, function () {
+            function aquireLock() {
+                return __awaiter$1(this, void 0, void 0, function () {
+                    var gotTheLock, jobDoneObservable, err_1;
+                    var _this_1 = this;
+                    return __generator$1(this, function (_e) {
+                        switch (_e.label) {
+                            case 0: return [4 /*yield*/, db.transaction('rw!', jobsTableName, function () { return __awaiter$1(_this_1, void 0, void 0, function () {
+                                    var currentWork;
+                                    return __generator$1(this, function (_e) {
+                                        switch (_e.label) {
+                                            case 0: return [4 /*yield*/, jobsTable.get(jobName)];
+                                            case 1:
+                                                currentWork = _e.sent();
+                                                if (!!currentWork) return [3 /*break*/, 3];
+                                                // No one else is working. Let's record that we are.
+                                                return [4 /*yield*/, jobsTable.add({
+                                                        nodeId: myId,
+                                                        started: new Date(),
+                                                        heartbeat: new Date()
+                                                    }, jobName)];
+                                            case 2:
+                                                // No one else is working. Let's record that we are.
+                                                _e.sent();
+                                                return [2 /*return*/, true];
+                                            case 3:
+                                                if (!(currentWork.heartbeat.getTime() <
+                                                    Date.now() - GUARDED_JOB_TIMEOUT)) return [3 /*break*/, 5];
+                                                console.warn("Latest ".concat(jobName, " worker seem to have died.\n"), "The dead job started:", currentWork.started, "\n", "Last heart beat was:", currentWork.heartbeat, '\n', "We're now taking over!");
+                                                // Now, take over!
+                                                return [4 /*yield*/, jobsTable.put({
+                                                        nodeId: myId,
+                                                        started: new Date(),
+                                                        heartbeat: new Date()
+                                                    }, jobName)];
+                                            case 4:
+                                                // Now, take over!
+                                                _e.sent();
+                                                return [2 /*return*/, true];
+                                            case 5: return [2 /*return*/, false];
+                                        }
+                                    });
+                                }); })];
+                            case 1:
+                                gotTheLock = _e.sent();
+                                if (gotTheLock)
+                                    return [2 /*return*/, true];
+                                if (!awaitRemoteJob) return [3 /*break*/, 6];
+                                _e.label = 2;
+                            case 2:
+                                _e.trys.push([2, 4, , 6]);
+                                jobDoneObservable = rxjs.from(Dexie.liveQuery(function () { return jobsTable.get(jobName); })).pipe(timeout(GUARDED_JOB_TIMEOUT), filter(function (job) { return !job; }));
+                                return [4 /*yield*/, jobDoneObservable.toPromise()];
+                            case 3:
+                                _e.sent();
+                                return [2 /*return*/, false];
+                            case 4:
+                                err_1 = _e.sent();
+                                if (err_1.name !== 'TimeoutError') {
+                                    throw err_1;
+                                }
+                                return [4 /*yield*/, aquireLock()];
+                            case 5: 
+                            // Timeout stopped us! Try aquire the lock now.
+                            // It will likely succeed this time unless
+                            // another client took it.
+                            return [2 /*return*/, _e.sent()];
+                            case 6: return [2 /*return*/, false];
+                        }
+                    });
+                });
+            }
+            var jobsTable, heartbeat;
+            var _this_1 = this;
+            return __generator$1(this, function (_g) {
+                switch (_g.label) {
+                    case 0:
+                        jobsTable = db.table(jobsTableName);
+                        return [4 /*yield*/, aquireLock()];
+                    case 1:
+                        if (!_g.sent()) return [3 /*break*/, 6];
+                        heartbeat = setInterval(function () {
+                            jobsTable.update(jobName, function (job) {
+                                if (job.nodeId === myId) {
+                                    job.heartbeat = new Date();
+                                }
+                            });
+                        }, GUARDED_JOB_HEARTBEAT);
+                        _g.label = 2;
+                    case 2:
+                        _g.trys.push([2, , 4, 6]);
+                        return [4 /*yield*/, job()];
+                    case 3: return [2 /*return*/, _g.sent()];
+                    case 4:
+                        // Stop heartbeat
+                        clearInterval(heartbeat);
+                        // Remove the persisted job state:
+                        return [4 /*yield*/, db.transaction('rw!', jobsTableName, function () { return __awaiter$1(_this_1, void 0, void 0, function () {
+                                var currentWork;
+                                return __generator$1(this, function (_e) {
+                                    switch (_e.label) {
+                                        case 0: return [4 /*yield*/, jobsTable.get(jobName)];
+                                        case 1:
+                                            currentWork = _e.sent();
+                                            if (!(currentWork && currentWork.nodeId === myId)) return [3 /*break*/, 3];
+                                            return [4 /*yield*/, jobsTable.delete(jobName)];
+                                        case 2:
+                                            _e.sent();
+                                            _e.label = 3;
+                                        case 3: return [2 /*return*/];
+                                    }
+                                });
+                            }); })];
+                    case 5:
+                        // Remove the persisted job state:
+                        _g.sent();
+                        return [7 /*endfinally*/];
+                    case 6: return [2 /*return*/];
+                }
+            });
+        });
+    }
     var ongoingSyncs = new WeakMap();
     function syncIfPossible(db, cloudOptions, cloudSchema, options) {
         var ongoing = ongoingSyncs.get(db);
@@ -6476,6 +6485,21 @@
         rv.getValue = function () { return currentValue; };
         return rv;
     }
+    var getGlobalRolesObservable = associate(function (db) {
+        return createSharedValueObservable(Dexie.liveQuery(function () { return db.roles
+            .where({ realmId: 'rlm-public' })
+            .toArray()
+            .then(function (roles) {
+            var rv = {};
+            for (var _e = 0, _f = roles
+                .slice()
+                .sort(function (a, b) { return (a.sortOrder || 0) - (b.sortOrder || 0); }); _e < _f.length; _e++) {
+                var role = _f[_e];
+                rv[role.name] = role;
+            }
+            return rv;
+        }); }), {});
+    });
     var getCurrentUserEmitter = associate(function (db) { return new rxjs.BehaviorSubject(UNAUTHORIZED_USER); });
     var getInternalAccessControlObservable = associate(function (db) {
         return createSharedValueObservable(getCurrentUserEmitter(db._novip).pipe(switchMap(function (currentUser) { return Dexie.liveQuery(function () { return db.transaction('r', 'realms', 'members', function () { return Promise.all([
@@ -6578,17 +6602,40 @@
         return reduced;
     }
     var getPermissionsLookupObservable = associate(function (db) {
-        var o = getInternalAccessControlObservable(db._novip);
+        var o = createSharedValueObservable(rxjs.combineLatest([
+            getInternalAccessControlObservable(db._novip),
+            getGlobalRolesObservable(db._novip),
+        ]).pipe(map(function (_e) {
+            var _f = _e[0], selfMembers = _f.selfMembers, realms = _f.realms, userId = _f.userId, globalRoles = _e[1];
+            return ({
+                selfMembers: selfMembers,
+                realms: realms,
+                userId: userId,
+                globalRoles: globalRoles,
+            });
+        })), {
+            selfMembers: [],
+            realms: [],
+            userId: UNAUTHORIZED_USER.userId,
+            globalRoles: {},
+        });
         return mapValueObservable(o, function (_e) {
             var _f;
-            var selfMembers = _e.selfMembers, realms = _e.realms, userId = _e.userId;
+            var selfMembers = _e.selfMembers, realms = _e.realms, userId = _e.userId, globalRoles = _e.globalRoles;
             var rv = realms
-                .map(function (realm) { return (__assign(__assign({}, realm), { permissions: realm.owner === userId
-                    ? { manage: '*' }
-                    : mergePermissions.apply(void 0, selfMembers
-                        .filter(function (m) { return m.realmId === realm.realmId; })
-                        .map(function (m) { return m.permissions; })
-                        .filter(function (p) { return p; })) })); })
+                .map(function (realm) {
+                var selfRealmMembers = selfMembers.filter(function (m) { return m.realmId === realm.realmId; });
+                var directPermissionSets = selfRealmMembers
+                    .map(function (m) { return m.permissions; })
+                    .filter(function (p) { return p; });
+                var rolePermissionSets = flatten(selfRealmMembers.map(function (m) { return m.roles; }).filter(function (roleName) { return roleName; }))
+                    .map(function (role) { return globalRoles[role]; })
+                    .filter(function (role) { return role; })
+                    .map(function (role) { return role.permissions; });
+                return __assign(__assign({}, realm), { permissions: realm.owner === userId
+                        ? { manage: '*' }
+                        : mergePermissions.apply(void 0, __spreadArray$1(__spreadArray$1([], directPermissionSets, false), rolePermissionSets, false)) });
+            })
                 .reduce(function (p, c) {
                 var _e;
                 return (__assign(__assign({}, p), (_e = {}, _e[c.realmId] = c, _e)));
@@ -6686,7 +6733,7 @@
             var realm = permissionsLookup[realmId || dexie.cloud.currentUserId];
             if (!realm)
                 return new PermissionChecker({}, tableName, !owner || owner === dexie.cloud.currentUserId);
-            return new PermissionChecker(realm.permissions, tableName, !owner || owner === dexie.cloud.currentUserId);
+            return new PermissionChecker(realm.permissions, tableName, realmId === dexie.cloud.currentUserId || owner === dexie.cloud.currentUserId);
         };
         var o = source.pipe(map(mapper));
         o.getValue = function () { return mapper(source.getValue()); };
@@ -6724,6 +6771,7 @@
         //
         var currentUserEmitter = getCurrentUserEmitter(dexie);
         var subscriptions = [];
+        var configuredProgramatically = false;
         // local sync worker - used when there's no service worker.
         var localSyncWorker = null;
         dexie.on('ready', function (dexie) { return __awaiter$1(_this_1, void 0, void 0, function () {
@@ -6759,7 +6807,7 @@
             currentUserEmitter.next(UNAUTHORIZED_USER);
         });
         dexie.cloud = {
-            version: '4.0.0-beta.14',
+            version: '4.0.0-beta.17',
             options: __assign({}, DEFAULT_OPTIONS),
             schema: null,
             serverState: null,
@@ -6793,8 +6841,10 @@
                 });
             },
             invites: getInvitesObservable(dexie),
+            roles: getGlobalRolesObservable(dexie),
             configure: function (options) {
                 options = dexie.cloud.options = __assign(__assign({}, dexie.cloud.options), options);
+                configuredProgramatically = true;
                 if (options.databaseUrl && options.nameSuffix) {
                     // @ts-ignore
                     dexie.name = "".concat(origIdbName, "-").concat(getDbNameFromDbUrl(options.databaseUrl));
@@ -6929,7 +6979,7 @@
                                                     ])];
                                             case 1:
                                                 _f = _m.sent(), persistedOptions = _f[0], persistedSchema = _f[1], persistedSyncState = _f[2];
-                                                if (!!options) return [3 /*break*/, 2];
+                                                if (!!configuredProgramatically) return [3 /*break*/, 2];
                                                 // Options not specified programatically (use case for SW!)
                                                 // Take persisted options:
                                                 db.cloud.options = persistedOptions || null;
@@ -6938,9 +6988,10 @@
                                                 if (!(!persistedOptions ||
                                                     JSON.stringify(persistedOptions) !== JSON.stringify(options))) return [3 /*break*/, 4];
                                                 // Update persisted options:
+                                                if (!options)
+                                                    throw new Error("Internal error"); // options cannot be null if configuredProgramatically is set.
                                                 return [4 /*yield*/, db.$syncState.put(options, 'options')];
                                             case 3:
-                                                // Update persisted options:
                                                 _m.sent();
                                                 _m.label = 4;
                                             case 4:
@@ -7086,7 +7137,7 @@
             });
         }
     }
-    dexieCloud.version = '4.0.0-beta.14';
+    dexieCloud.version = '4.0.0-beta.17';
     Dexie__default["default"].Cloud = dexieCloud;
 
     exports["default"] = dexieCloud;