easywork-common-lib 1.0.1372 → 1.0.1376

package/dist/modules/authorization/services/permission-evaluator.service.js

@@ -1,328 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var PermissionEvaluatorService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PermissionEvaluatorService = void 0;
-const common_1 = require("@nestjs/common");
-const typeorm_1 = require("@nestjs/typeorm");
-const typeorm_2 = require("typeorm");
-const entities_1 = require("../../../entities/");
-const common_2 = require("../../../common/");
-const dynamic_filter_service_1 = require("./dynamic-filter.service");
-const resource_configurations_1 = require("../config/resource-configurations");
-let PermissionEvaluatorService = PermissionEvaluatorService_1 = class PermissionEvaluatorService {
-    permissionRepository;
-    dynamicFilterService;
-    logger = new common_1.Logger(PermissionEvaluatorService_1.name);
-    constructor(permissionRepository, dynamicFilterService) {
-        this.permissionRepository = permissionRepository;
-        this.dynamicFilterService = dynamicFilterService;
-    }
-    async evaluate(context) {
-        const rules = await this.getUserPermissionRules(context);
-        const result = await this.evaluateRules(rules, context);
-        return result;
-    }
-    async getUserPermissionRules(context) {
-        const permissions = await this.permissionRepository.find({
-            where: {
-                resource: context.resource,
-                isActive: true,
-                isDeleted: false,
-            },
-        });
-        const rules = [];
-        for (const permission of permissions) {
-            if (permission.rules && Array.isArray(permission.rules)) {
-                rules.push(...permission.rules);
-            }
-        }
-        return rules;
-    }
-    async evaluateRules(rules, context) {
-        const applicableRules = rules.filter(rule => rule.action === context.action || rule.action === common_2.PermissionAction.MANAGE);
-        if (applicableRules.length === 0) {
-            return { allowed: false, reason: 'No applicable rules found' };
-        }
-        const sortedRules = this.sortRulesByPermissiveness(applicableRules);
-        const results = await Promise.all(sortedRules.map(rule => {
-            return this.evaluateRule(rule, context);
-        }));
-        const finalResult = this.combineResults(results);
-        return finalResult;
-    }
-    async evaluateRule(rule, context) {
-        const conditionsMet = await this.checkConditions(rule, context);
-        if (!conditionsMet) {
-            return { allowed: false, reason: 'Conditions not met' };
-        }
-        const filters = await this.buildFiltersFromCriteria(rule, context);
-        return {
-            allowed: true,
-            scope: rule.scope,
-            filters,
-        };
-    }
-    async checkConditions(rule, context) {
-        if (!rule.conditions || rule.conditions.length === 0) {
-            return true;
-        }
-        const conditionChecks = rule.conditions.map(condition => this.checkCondition(condition, rule, context));
-        const results = await Promise.all(conditionChecks);
-        return results.every(result => result);
-    }
-    async checkCondition(condition, rule, context) {
-        const { user, targetEntity, resource } = context;
-        const config = (0, resource_configurations_1.getResourceConfig)(resource);
-        switch (condition) {
-            case common_2.PermissionCondition.ALWAYS:
-                return true;
-            case common_2.PermissionCondition.OWNER:
-                if (!targetEntity)
-                    return true;
-                const createdByField = config.columnMappings.createdBy;
-                return targetEntity[createdByField] === user.id;
-            case common_2.PermissionCondition.ASSIGNED_TO:
-                if (!targetEntity)
-                    return true;
-                const assignedToField = config.columnMappings.assignedTo;
-                const assignedTo = targetEntity[assignedToField];
-                if (Array.isArray(assignedTo)) {
-                    return assignedTo.some((assignee) => assignee?.id === user.id || assignee === user.id);
-                }
-                return assignedTo === user.id || (assignedTo && assignedTo.id === user.id);
-            case common_2.PermissionCondition.OBSERVER:
-                if (!targetEntity)
-                    return true;
-                const observersField = config.columnMappings.observers;
-                const observers = targetEntity[observersField] || [];
-                if (Array.isArray(observers)) {
-                    return observers.some((observer) => observer?.id === user.id || observer === user.id);
-                }
-                return observers === user.id;
-            case common_2.PermissionCondition.PARTICIPANT:
-                if (!targetEntity)
-                    return true;
-                const participantsField = config.columnMappings.participants;
-                if (!participantsField)
-                    return true;
-                const participants = targetEntity[participantsField] || [];
-                if (Array.isArray(participants)) {
-                    return participants.some((participant) => participant?.id === user.id || participant === user.id);
-                }
-                return participants === user.id;
-            case common_2.PermissionCondition.SUBGROUP_SUPERVISOR:
-                const supervisedSubGroups = user.supervisedSubGroups || [];
-                if (supervisedSubGroups.length > 0)
-                    return true;
-                const subGroupRepo = context.additionalContext?.subGroupRepository;
-                if (subGroupRepo) {
-                    return await this.checkIsSubGroupSupervisor(user.id, subGroupRepo);
-                }
-                return false;
-            case common_2.PermissionCondition.SUBGROUP_MEMBER:
-                const assistantSubGroups = user.assistantSubGroups || [];
-                if (assistantSubGroups.length > 0)
-                    return true;
-                const subGroupRepository = context.additionalContext?.subGroupRepository;
-                if (subGroupRepository) {
-                    return await this.checkIsSubGroupMember(user.id, subGroupRepository);
-                }
-                return false;
-            case common_2.PermissionCondition.SAME_GROUP:
-                if (!targetEntity)
-                    return true;
-                const groupIdField = config.columnMappings.groupId;
-                const entityGroupId = targetEntity[groupIdField];
-                if (!entityGroupId)
-                    return true;
-                return (user.groups || []).some((g) => g.id === entityGroupId);
-            case common_2.PermissionCondition.SAME_TEAM:
-                const teamMemberIds = context.additionalContext?.teamMemberIds || [];
-                const userSubGroups = user.subGroups || [];
-                if (targetEntity && config.subGroupConfig?.relationField) {
-                    const subGroupIdField = config.subGroupConfig.relationField;
-                    const entitySubGroupId = targetEntity[subGroupIdField];
-                    if (entitySubGroupId) {
-                        const hasSubGroupAccess = userSubGroups.some((sg) => sg.id === entitySubGroupId);
-                        const hasTeamAccess = teamMemberIds.length > 1;
-                        return hasSubGroupAccess || hasTeamAccess;
-                    }
-                }
-                const hasSubGroups = userSubGroups.length > 0;
-                const hasTeamMembers = teamMemberIds.length > 1;
-                return hasSubGroups || hasTeamMembers;
-            case common_2.PermissionCondition.ROLE_LEVEL:
-                const ruleWithLevels = rule;
-                if (!ruleWithLevels.minRoleLevel)
-                    return true;
-                const userMaxLevel = Math.min(...user.roles.map((r) => r.level));
-                const minLevel = ruleWithLevels.minRoleLevel;
-                const maxLevel = ruleWithLevels.maxRoleLevel;
-                let levelCheck = true;
-                if (minLevel !== undefined) {
-                    levelCheck = levelCheck && userMaxLevel >= minLevel;
-                }
-                if (maxLevel !== undefined) {
-                    levelCheck = levelCheck && userMaxLevel <= maxLevel;
-                }
-                return levelCheck;
-            case common_2.PermissionCondition.TIME_BASED:
-                return this.checkTimeRestrictions(rule, targetEntity);
-            case common_2.PermissionCondition.STATUS_BASED:
-                return this.checkStatusRestrictions(rule, targetEntity);
-            default:
-                this.logger.warn(`Unknown condition: ${condition}`);
-                return false;
-        }
-    }
-    checkTimeRestrictions(rule, targetEntity) {
-        if (!rule.timeRestrictions || !targetEntity)
-            return true;
-        const now = new Date();
-        const { createdWithin, modifiedWithin } = rule.timeRestrictions;
-        if (createdWithin && targetEntity.createdAt) {
-            const createdAt = new Date(targetEntity.createdAt);
-            const hoursDiff = (now.getTime() - createdAt.getTime()) / (1000 * 60 * 60);
-            if (hoursDiff > createdWithin)
-                return false;
-        }
-        if (modifiedWithin && targetEntity.updatedAt) {
-            const updatedAt = new Date(targetEntity.updatedAt);
-            const hoursDiff = (now.getTime() - updatedAt.getTime()) / (1000 * 60 * 60);
-            if (hoursDiff > modifiedWithin)
-                return false;
-        }
-        return true;
-    }
-    checkStatusRestrictions(rule, targetEntity) {
-        if (!rule.statusRestrictions || !targetEntity)
-            return true;
-        return rule.statusRestrictions.includes(targetEntity.status);
-    }
-    async buildFiltersFromCriteria(rule, context) {
-        const ruleWithCriteria = rule;
-        if (!ruleWithCriteria.filterCriteria) {
-            return this.buildLegacyFilters(rule, context);
-        }
-        const assistantIds = context.additionalContext?.teamMemberIds || context.additionalContext?.assistantIds || [];
-        const enhancedContext = {
-            ...context,
-            additionalContext: {
-                ...context.additionalContext,
-                ruleConditions: rule.conditions || [],
-            },
-        };
-        const filters = await this.dynamicFilterService.buildFiltersFromCriteria(ruleWithCriteria.filterCriteria, enhancedContext, assistantIds);
-        if (rule.statusRestrictions) {
-            filters.status = { in: rule.statusRestrictions };
-        }
-        return filters;
-    }
-    buildLegacyFilters(rule, context) {
-        const filters = {};
-        const { user, resource } = context;
-        const config = (0, resource_configurations_1.getResourceConfig)(resource);
-        const createdByField = config.columnMappings.createdBy;
-        const assignedToField = config.columnMappings.assignedTo;
-        const observersField = config.columnMappings.observers;
-        const groupIdField = config.columnMappings.groupId;
-        switch (rule.scope) {
-            case common_2.PermissionScope.OWN:
-                filters[createdByField] = user.id;
-                break;
-            case common_2.PermissionScope.ASSIGNED:
-                filters.or = [{ [createdByField]: user.id }, { [assignedToField]: user.id }, { [observersField]: { contains: [user.id] } }];
-                break;
-            case common_2.PermissionScope.TEAM:
-                const teamMemberIds = context.additionalContext?.teamMemberIds || [];
-                if (teamMemberIds.length > 0) {
-                    filters.or = [{ [createdByField]: { in: teamMemberIds } }, { [assignedToField]: { in: teamMemberIds } }, { [observersField]: { contains: teamMemberIds } }];
-                }
-                break;
-            case common_2.PermissionScope.GROUP:
-                const groupIds = (user.groups || []).map((g) => g.id);
-                if (groupIds.length > 0) {
-                    filters[groupIdField] = { in: groupIds };
-                }
-                break;
-            case common_2.PermissionScope.SUPERVISED:
-                const supervisedUserIds = this.getSupervisedUserIds(user);
-                if (supervisedUserIds.length > 0) {
-                    filters.or = [{ [createdByField]: user.id }, { [createdByField]: { in: supervisedUserIds } }];
-                }
-                break;
-            case common_2.PermissionScope.ALL:
-                break;
-        }
-        return filters;
-    }
-    getSupervisedUserIds(user) {
-        const supervisedIds = [];
-        if (user.subGroups) {
-            user.subGroups.forEach((sg) => {
-                if (sg.assistants) {
-                    supervisedIds.push(...sg.assistants.map((a) => a.id));
-                }
-            });
-        }
-        return supervisedIds;
-    }
-    sortRulesByPermissiveness(rules) {
-        const scopeOrder = {
-            [common_2.PermissionScope.ALL]: 0,
-            [common_2.PermissionScope.GROUP]: 1,
-            [common_2.PermissionScope.SUPERVISED]: 2,
-            [common_2.PermissionScope.TEAM]: 3,
-            [common_2.PermissionScope.ASSIGNED]: 4,
-            [common_2.PermissionScope.OWN]: 5,
-        };
-        return rules.sort((a, b) => scopeOrder[a.scope] - scopeOrder[b.scope]);
-    }
-    combineResults(results) {
-        const allowedResults = results.filter(r => r.allowed);
-        if (allowedResults.length === 0) {
-            return { allowed: false, reason: 'No rules passed' };
-        }
-        return allowedResults[0];
-    }
-    async checkIsSubGroupSupervisor(userId, subGroupRepository) {
-        try {
-            const supervisedCount = await subGroupRepository.createQueryBuilder('sg').where('sg.supervisor = :userId', { userId }).getCount();
-            return supervisedCount > 0;
-        }
-        catch (error) {
-            this.logger.error(`Error checking subgroup supervisor status: ${error}`);
-            return false;
-        }
-    }
-    async checkIsSubGroupMember(userId, subGroupRepository) {
-        try {
-            const memberCount = await subGroupRepository.createQueryBuilder('sg').innerJoin('sg.assistants', 'assistant').where('assistant.id = :userId', { userId }).getCount();
-            return memberCount > 0;
-        }
-        catch (error) {
-            this.logger.error(`Error checking subgroup member status: ${error}`);
-            return false;
-        }
-    }
-};
-exports.PermissionEvaluatorService = PermissionEvaluatorService;
-exports.PermissionEvaluatorService = PermissionEvaluatorService = PermissionEvaluatorService_1 = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, typeorm_1.InjectRepository)(entities_1.Permission)),
-    __metadata("design:paramtypes", [typeorm_2.Repository,
-        dynamic_filter_service_1.DynamicFilterService])
-], PermissionEvaluatorService);
-//# sourceMappingURL=permission-evaluator.service.js.map

package/dist/modules/authorization/services/permission-evaluator.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-evaluator.service.js","sourceRoot":"","sources":["../../../../src/modules/authorization/services/permission-evaluator.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,iDAAgD;AAChD,6CAAmJ;AAEnJ,qEAAgE;AAChE,+EAAsE;AAG/D,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAKlB;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAEtE,YAEmB,oBAA4C,EAC5C,oBAA0C;QAD1C,yBAAoB,GAApB,oBAAoB,CAAwB;QAC5C,yBAAoB,GAApB,oBAAoB,CAAsB;IAC1D,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,OAA8B;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAExD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAA8B;QAEjE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACvD,KAAK,EAAE;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK;aACjB;SACF,CAAC,CAAC;QAGH,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAAuB,EAAE,OAA8B;QAEjF,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,yBAAgB,CAAC,MAAM,CAAC,CAAC;QAExH,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACjE,CAAC;QAGD,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACrB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAoB,EAAE,OAA8B;QAC7E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEnE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAoB,EAAE,OAA8B;QAChF,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,SAA8B,EAAE,IAAoB,EAAE,OAA8B;QAC/G,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAGjD,MAAM,MAAM,GAAG,IAAA,2CAAiB,EAAC,QAAQ,CAAC,CAAC;QAE3C,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,4BAAmB,CAAC,MAAM;gBAC7B,OAAO,IAAI,CAAC;YAEd,KAAK,4BAAmB,CAAC,KAAK;gBAC5B,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;gBACvD,OAAO,YAAY,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAElD,KAAK,4BAAmB,CAAC,WAAW;gBAClC,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC/B,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;gBAEzD,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;gBACjD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,QAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC;gBACD,OAAO,UAAU,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;YAE7E,KAAK,4BAAmB,CAAC,QAAQ;gBAC/B,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;gBACvD,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,QAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBACD,OAAO,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;YAE/B,KAAK,4BAAmB,CAAC,WAAW;gBAElC,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC/B,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC7D,IAAI,CAAC,iBAAiB;oBAAE,OAAO,IAAI,CAAC;gBACpC,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;oBAChC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,WAAgB,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzG,CAAC;gBACD,OAAO,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;YAElC,KAAK,4BAAmB,CAAC,mBAAmB;gBAE1C,MAAM,mBAAmB,GAAI,IAAY,CAAC,mBAAmB,IAAI,EAAE,CAAC;gBACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAGhD,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBACnE,IAAI,YAAY,EAAE,CAAC;oBACjB,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,KAAK,CAAC;YAEf,KAAK,4BAAmB,CAAC,eAAe;gBAEtC,MAAM,kBAAkB,GAAI,IAAY,CAAC,kBAAkB,IAAI,EAAE,CAAC;gBAClE,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAG/C,MAAM,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBACzE,IAAI,kBAAkB,EAAE,CAAC;oBACvB,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO,KAAK,CAAC;YAEf,KAAK,4BAAmB,CAAC,UAAU;gBACjC,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;gBACnD,MAAM,aAAa,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAa;oBAAE,OAAO,IAAI,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;YAEtE,KAAK,4BAAmB,CAAC,SAAS;gBAGhC,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,EAAE,aAAa,IAAI,EAAE,CAAC;gBACrE,MAAM,aAAa,GAAI,IAAY,CAAC,SAAS,IAAI,EAAE,CAAC;gBAEpD,IAAI,YAAY,IAAI,MAAM,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;oBACzD,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC;oBAC5D,MAAM,gBAAgB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;oBAEvD,IAAI,gBAAgB,EAAE,CAAC;wBAGrB,MAAM,iBAAiB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC;wBACtF,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;wBAC/C,OAAO,iBAAiB,IAAI,aAAa,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBAID,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC9C,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;gBAChD,OAAO,YAAY,IAAI,cAAc,CAAC;YAExC,KAAK,4BAAmB,CAAC,UAAU;gBACjC,MAAM,cAAc,GAAG,IAAW,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAGtE,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC;gBAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC;gBAG7C,IAAI,UAAU,GAAG,IAAI,CAAC;gBACtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,UAAU,GAAG,UAAU,IAAI,YAAY,IAAI,QAAQ,CAAC;gBACtD,CAAC;gBACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,UAAU,GAAG,UAAU,IAAI,YAAY,IAAI,QAAQ,CAAC;gBACtD,CAAC;gBAED,OAAO,UAAU,CAAC;YAEpB,KAAK,4BAAmB,CAAC,UAAU;gBACjC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAExD,KAAK,4BAAmB,CAAC,YAAY;gBACnC,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAE1D;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;gBACpD,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,IAAoB,EAAE,YAAiB;QACnE,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAEhE,IAAI,aAAa,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,IAAI,SAAS,GAAG,aAAa;gBAAE,OAAO,KAAK,CAAC;QAC9C,CAAC;QAED,IAAI,cAAc,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,IAAI,SAAS,GAAG,cAAc;gBAAE,OAAO,KAAK,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,uBAAuB,CAAC,IAAoB,EAAE,YAAiB;QACrE,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAoB,EAAE,OAA8B;QACzF,MAAM,gBAAgB,GAAG,IAAW,CAAC;QAErC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,YAAY,IAAI,EAAE,CAAC;QAG/G,MAAM,eAAe,GAAG;YACtB,GAAG,OAAO;YACV,iBAAiB,EAAE;gBACjB,GAAG,OAAO,CAAC,iBAAiB;gBAC5B,cAAc,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;aACtC;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;QAEzI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,kBAAkB,CAAC,IAAoB,EAAE,OAA8B;QAC7E,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAGnC,MAAM,MAAM,GAAG,IAAA,2CAAiB,EAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;QACvD,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;QAEnD,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,wBAAe,CAAC,GAAG;gBACtB,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM;YAER,KAAK,wBAAe,CAAC,QAAQ;gBAC3B,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5H,MAAM;YAER,KAAK,wBAAe,CAAC,IAAI;gBACvB,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,EAAE,aAAa,IAAI,EAAE,CAAC;gBACrE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;gBAC9J,CAAC;gBACD,MAAM;YAER,KAAK,wBAAe,CAAC,KAAK;gBACxB,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;gBAC3C,CAAC;gBACD,MAAM;YAER,KAAK,wBAAe,CAAC,UAAU;gBAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAC1D,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM;YAER,KAAK,wBAAe,CAAC,GAAG;gBACtB,MAAM;QACV,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,oBAAoB,CAAC,IAAS;QAEpC,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,IAAK,IAAY,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAO,EAAE,EAAE;gBAC1C,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;oBAClB,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,yBAAyB,CAAC,KAAuB;QACvD,MAAM,UAAU,GAAG;YACjB,CAAC,wBAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,CAAC,wBAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,CAAC,wBAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,CAAC,wBAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,CAAC,wBAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,CAAC,wBAAe,CAAC,GAAG,CAAC,EAAE,CAAC;SACzB,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,cAAc,CAAC,OAA2B;QAChD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACvD,CAAC;QAGD,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAKO,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,kBAAuB;QAC7E,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YAElI,OAAO,eAAe,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,kBAAuB;QACzE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YAErK,OAAO,WAAW,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAA;AAnYY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,qBAAU,CAAC,CAAA;qCACU,oBAAU;QACV,6CAAoB;GANlD,0BAA0B,CAmYtC"}

package/dist/modules/authorization/services/resource-access-filter.service.d.ts

@@ -1,20 +0,0 @@
-import { SelectQueryBuilder } from "typeorm";
-import { IResourceAccessFilter } from "../interfaces/authorization.interface";
-import { PermissionContextType } from "../../../common/";
-export declare class ResourceAccessFilterService implements IResourceAccessFilter {
-    applyFilters(queryBuilder: SelectQueryBuilder<any>, context: PermissionContextType): SelectQueryBuilder<any>;
-    private applyConditionsToQueryBuilder;
-    buildWhereConditions(context: PermissionContextType): Record<string, any>;
-    private applyCondition;
-    private applyOrConditions;
-    private applyAndConditions;
-    private applyObjectCondition;
-    private buildObjectConditionString;
-    buildAccessConditions(user: any, additionalFilters?: Record<string, any>): Record<string, any>;
-    private getSupervisedUserIds;
-    private isTaskRelationField;
-    private applyTaskRelationCondition;
-    private buildTaskRelationCondition;
-    private getTaskRelationTableName;
-    private extractUserId;
-}