emilsoftware-utilities 2.0.0-dev.60 → 2.0.0-dev.62

package/dist/accessi-module/Services/PermissionService/PermissionService.js

@@ -50,7 +50,8 @@ let PermissionService = class PermissionService {
         return new Set(result.map((row) => { var _a; return Number((_a = row[fieldName]) !== null && _a !== void 0 ? _a : row[fieldName.toLowerCase()]); }));
     }
     getAllActiveMenusAsGrants() {
-        return __awaiter(this, void 0, void 0, function* () {
+        return __awaiter(this, arguments, void 0, function* (scopeCodes = []) {
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
             const query = `
                 SELECT
                     M.CODMNU AS codice_menu,
@@ -64,14 +65,49 @@ let PermissionService = class PermissionService {
                     M.NOTE AS note
                 FROM MENU M
                 LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP
-                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1
+                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1${scopeFilter.sql}
             `;
-            return yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, [])
+            return yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, scopeFilter.params)
                 .then(results => results.map(Utilities_1.RestUtilities.convertKeysToCamelCase));
         });
     }
-    getUserDirectPermissions(codiceUtente) {
+    /**
+     * Normalizza e valida il filtro `scope` (CSV). Restituisce i codici in
+     * maiuscolo; lista vuota significa "nessun filtro" (comportamento storico).
+     */
+    resolveScopeCodes(scope) {
         return __awaiter(this, void 0, void 0, function* () {
+            const codes = Array.from(new Set(String(scope !== null && scope !== void 0 ? scope : '')
+                .split(',')
+                .map((value) => value.trim().toUpperCase())
+                .filter((value) => value.length > 0)));
+            if (codes.length === 0) {
+                return [];
+            }
+            const placeholders = codes.map(() => '?').join(', ');
+            const rows = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, `SELECT CODICE FROM SCOPES WHERE CODICE IN (${placeholders})`, codes));
+            const known = new Set(rows.map((row) => { var _a, _b; return String((_b = (_a = row.CODICE) !== null && _a !== void 0 ? _a : row.codice) !== null && _b !== void 0 ? _b : '').trim().toUpperCase(); }));
+            const missing = codes.filter((code) => !known.has(code));
+            if (missing.length > 0) {
+                throw new common_1.BadRequestException(`Scope non validi: ${missing.join(', ')}.`);
+            }
+            return codes;
+        });
+    }
+    /** Clausola SQL EXISTS per filtrare i menu sugli scope richiesti. */
+    scopeFilter(alias, scopeCodes) {
+        if (scopeCodes.length === 0) {
+            return { sql: '', params: [] };
+        }
+        const placeholders = scopeCodes.map(() => '?').join(', ');
+        return {
+            sql: ` AND EXISTS (SELECT 1 FROM MENU_SCOPES MS WHERE MS.CODICE_MENU = ${alias}.CODMNU AND MS.CODICE_SCOPE IN (${placeholders}))`,
+            params: [...scopeCodes],
+        };
+    }
+    getUserDirectPermissions(codiceUtente_1) {
+        return __awaiter(this, arguments, void 0, function* (codiceUtente, scopeCodes = []) {
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
             const queryAbilitazioni = `
                 SELECT
                     A.CODMNU AS codice_menu,
@@ -86,14 +122,15 @@ let PermissionService = class PermissionService {
                 FROM ABILITAZIONI A
                 INNER JOIN MENU M ON A.CODMNU = M.CODMNU
                 LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP
-                WHERE A.CODUTE = ? AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1
+                WHERE A.CODUTE = ? AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1${scopeFilter.sql}
             `;
-            return yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, queryAbilitazioni, [codiceUtente])
+            return yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, queryAbilitazioni, [codiceUtente, ...scopeFilter.params])
                 .then(results => results.map(Utilities_1.RestUtilities.convertKeysToCamelCase));
         });
     }
-    getUserRoles(codiceUtente) {
-        return __awaiter(this, void 0, void 0, function* () {
+    getUserRoles(codiceUtente_1) {
+        return __awaiter(this, arguments, void 0, function* (codiceUtente, scopeCodes = []) {
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
             const queryRuoli = `
                 SELECT
                     R.CODRUO AS codice_ruolo,
@@ -110,9 +147,9 @@ let PermissionService = class PermissionService {
                     AND M.FLGENABLED = 1
                 LEFT JOIN MENU_GRP G
                     ON G.CODGRP = M.CODGRP
-                WHERE RU.CODUTE = ?
+                WHERE RU.CODUTE = ?${scopeFilter.sql}
             `;
-            const ruoliResult = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, queryRuoli, [codiceUtente]))
+            const ruoliResult = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, queryRuoli, [codiceUtente, ...scopeFilter.params]))
                 .map(Utilities_1.RestUtilities.convertKeysToCamelCase);
             return this.assembleRoles(ruoliResult);
         });
@@ -391,8 +428,10 @@ let PermissionService = class PermissionService {
         });
     }
     /** Restituisce solo menu abilitati; per il catalogo amministrativo usare `getGroupsWithMenus(true)`. */
-    getMenus() {
+    getMenus(scope) {
         return __awaiter(this, void 0, void 0, function* () {
+            const scopeCodes = yield this.resolveScopeCodes(scope);
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
             const query = `
                 SELECT
                     M.CODMNU AS codice_menu,
@@ -407,10 +446,10 @@ let PermissionService = class PermissionService {
                     M.ORDINE AS ordine_menu
                 FROM MENU M
                 LEFT JOIN MENU_GRP G ON M.CODGRP = G.CODGRP
-                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1
+                WHERE M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1${scopeFilter.sql}
                 ORDER BY G.CODGRP, M.CODMNU
             `;
-            const result = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, []);
+            const result = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, scopeFilter.params);
             return result.map(Utilities_1.RestUtilities.convertKeysToCamelCase);
         });
     }
@@ -419,10 +458,15 @@ let PermissionService = class PermissionService {
      * i flussi applicativi di autorizzazione devono usare il comportamento predefinito, che nasconde voci disabilitate.
      */
     getGroupsWithMenus() {
-        return __awaiter(this, arguments, void 0, function* (includeDisabled = false) {
-            const filtersClause = includeDisabled
+        return __awaiter(this, arguments, void 0, function* (includeDisabled = false, scope) {
+            const scopeCodes = yield this.resolveScopeCodes(scope);
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
+            let filtersClause = includeDisabled
                 ? ''
                 : 'WHERE M.FLGENABLED = 1 AND (G.FLGENABLED IS NULL OR G.FLGENABLED = 1)';
+            if (scopeFilter.sql) {
+                filtersClause = filtersClause ? `${filtersClause}${scopeFilter.sql}` : `WHERE 1 = 1${scopeFilter.sql}`;
+            }
             const query = `
                 SELECT
                     M.CODMNU AS codice_menu,
@@ -442,7 +486,7 @@ let PermissionService = class PermissionService {
                 ${filtersClause}
                 ORDER BY G.CODGRP, M.CODMNU
             `;
-            const result = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, []);
+            const result = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, query, scopeFilter.params);
             const groupMap = new Map();
             result.forEach((row) => {
                 var _a, _b, _c;
@@ -676,17 +720,18 @@ let PermissionService = class PermissionService {
      * Calcola l'autorizzazione effettiva: grant diretti e grant dei ruoli sono uniti per codice menu
      * prendendo il livello massimo. I superutenti ricevono tutti i menu attivi.
      */
-    getUserRolesAndGrants(codiceUtente) {
+    getUserRolesAndGrants(codiceUtente, scope) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
+            const scopeCodes = yield this.resolveScopeCodes(scope);
             const codiceUtenteQuery = "SELECT FLGSUPER as flag_super FROM UTENTI_CONFIG WHERE CODUTE = ?";
             const result = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, codiceUtenteQuery, [codiceUtente]);
             if (!result || result.length == 0)
                 throw new Error("Nessun utente trovato con il codice utente " + codiceUtente);
             const isSuperAdmin = this.isSuperFlag((_a = result.map(Utilities_1.RestUtilities.convertKeysToCamelCase)[0]) === null || _a === void 0 ? void 0 : _a.flagSuper);
-            const abilitazioni = yield this.getUserDirectPermissions(codiceUtente);
-            const ruoli = yield this.getUserRoles(codiceUtente);
-            const grants = this.composeGrants(abilitazioni, ruoli, isSuperAdmin, yield this.getAllActiveMenusAsGrants());
+            const abilitazioni = yield this.getUserDirectPermissions(codiceUtente, scopeCodes);
+            const ruoli = yield this.getUserRoles(codiceUtente, scopeCodes);
+            const grants = this.composeGrants(abilitazioni, ruoli, isSuperAdmin, yield this.getAllActiveMenusAsGrants(scopeCodes));
             return { abilitazioni, ruoli, grants };
         });
     }
@@ -698,9 +743,11 @@ let PermissionService = class PermissionService {
      * (invece di N set di query) e restituisce mappa per codice utente. Stessa composizione della
      * lettura singola.
      */
-    getUsersRolesAndGrants(codiciUtente) {
+    getUsersRolesAndGrants(codiciUtente, scope) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a, _b;
+            const scopeCodes = yield this.resolveScopeCodes(scope);
+            const scopeFilter = this.scopeFilter('M', scopeCodes);
             const result = new Map();
             const ids = Array.from(new Set(codiciUtente.filter((id) => Number.isInteger(id) && id > 0)));
             if (ids.length === 0) {
@@ -728,7 +775,7 @@ let PermissionService = class PermissionService {
             FROM ABILITAZIONI A
             INNER JOIN MENU M ON A.CODMNU = M.CODMNU
             LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP
-            WHERE A.CODUTE IN (${placeholders}) AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1`, ids)).map(Utilities_1.RestUtilities.convertKeysToCamelCase);
+            WHERE A.CODUTE IN (${placeholders}) AND M.FLGENABLED = 1 AND COALESCE(G.FLGENABLED, 1) = 1${scopeFilter.sql}`, [...ids, ...scopeFilter.params])).map(Utilities_1.RestUtilities.convertKeysToCamelCase);
             const roleRows = (yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, `SELECT
                 RU.CODUTE AS codice_utente,
                 R.CODRUO AS codice_ruolo,
@@ -742,8 +789,8 @@ let PermissionService = class PermissionService {
             LEFT JOIN RUOLI_MNU RM ON R.CODRUO = RM.CODRUO
             LEFT JOIN MENU M ON RM.CODMNU = M.CODMNU AND M.FLGENABLED = 1
             LEFT JOIN MENU_GRP G ON G.CODGRP = M.CODGRP
-            WHERE RU.CODUTE IN (${placeholders})`, ids)).map(Utilities_1.RestUtilities.convertKeysToCamelCase);
-            const allActiveMenus = yield this.getAllActiveMenusAsGrants();
+            WHERE RU.CODUTE IN (${placeholders})${scopeFilter.sql}`, [...ids, ...scopeFilter.params])).map(Utilities_1.RestUtilities.convertKeysToCamelCase);
+            const allActiveMenus = yield this.getAllActiveMenusAsGrants(scopeCodes);
             const permissionsByUser = new Map();
             for (const row of permissionRows) {
                 const { codiceUtente } = row, grant = __rest(row, ["codiceUtente"]);
@@ -781,6 +828,112 @@ let PermissionService = class PermissionService {
             return result;
         });
     }
+    // -----------------------------------------------------------------------
+    // Scope applicativi: catalogo e associazioni menu/scope.
+    // -----------------------------------------------------------------------
+    normalizeScopeCode(value) {
+        const code = String(value !== null && value !== void 0 ? value : '').trim().toUpperCase();
+        if (!/^[A-Z][A-Z0-9_]{0,19}$/.test(code)) {
+            throw new common_1.BadRequestException('Codice scope non valido: usa lettere maiuscole, cifre e underscore (max 20 caratteri).');
+        }
+        return code;
+    }
+    assertScopeExists(codiceScope) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if ((yield this.countWhere('SCOPES', 'CODICE', codiceScope)) === 0) {
+                throw new common_1.BadRequestException(`Lo scope ${codiceScope} non esiste.`);
+            }
+        });
+    }
+    assertMenuExists(codiceMenu) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if ((yield this.countWhere('MENU', 'CODMNU', codiceMenu)) === 0) {
+                throw new common_1.BadRequestException(`Il menu ${codiceMenu} non esiste.`);
+            }
+        });
+    }
+    /** Catalogo degli scope applicativi (disponibile anche ai client per le etichette). */
+    getScopes() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const rows = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, 'SELECT CODICE AS codice, NOME AS nome FROM SCOPES ORDER BY CODICE', []);
+            return rows.map(Utilities_1.RestUtilities.convertKeysToCamelCase);
+        });
+    }
+    createScope(input) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const codice = this.normalizeScopeCode(input.codice);
+            if ((yield this.countWhere('SCOPES', 'CODICE', codice)) > 0) {
+                throw new common_1.BadRequestException(`Lo scope ${codice} esiste gia.`);
+            }
+            yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, 'INSERT INTO SCOPES (CODICE, NOME) VALUES (?, ?)', [codice, input.nome]);
+        });
+    }
+    updateScope(codiceScope, input) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const codice = this.normalizeScopeCode(codiceScope);
+            yield this.assertScopeExists(codice);
+            if (input.nome === undefined)
+                return;
+            yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, 'UPDATE SCOPES SET NOME = ? WHERE CODICE = ?', [input.nome, codice]);
+        });
+    }
+    /** Elimina lo scope; le associazioni menu/scope spariscono per FK ON DELETE CASCADE. */
+    deleteScope(codiceScope) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const codice = this.normalizeScopeCode(codiceScope);
+            yield this.assertScopeExists(codice);
+            yield Orm_1.Orm.execute(this.accessiOptions.databaseOptions, 'DELETE FROM SCOPES WHERE CODICE = ?', [codice]);
+        });
+    }
+    /** Scope associati a un menu. */
+    getMenuScopes(codiceMenu) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const code = String(codiceMenu !== null && codiceMenu !== void 0 ? codiceMenu : '').trim().toUpperCase();
+            yield this.assertMenuExists(code);
+            const rows = yield Orm_1.Orm.query(this.accessiOptions.databaseOptions, 'SELECT CODICE_SCOPE FROM MENU_SCOPES WHERE CODICE_MENU = ? ORDER BY CODICE_SCOPE', [code]);
+            return rows
+                .map((row) => { var _a, _b; return String((_b = (_a = row.CODICE_SCOPE) !== null && _a !== void 0 ? _a : row.codiceScope) !== null && _b !== void 0 ? _b : '').trim(); })
+                .filter((value) => value.length > 0);
+        });
+    }
+    /** Sostituisce in modo atomico gli scope di un menu. */
+    setMenuScopes(codiceMenu, scopes) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const code = String(codiceMenu !== null && codiceMenu !== void 0 ? codiceMenu : '').trim().toUpperCase();
+            yield this.assertMenuExists(code);
+            const normalized = Array.from(new Set((scopes !== null && scopes !== void 0 ? scopes : []).map((scope) => this.normalizeScopeCode(scope))));
+            for (const scope of normalized) {
+                yield this.assertScopeExists(scope);
+            }
+            const queries = [
+                { query: 'DELETE FROM MENU_SCOPES WHERE CODICE_MENU = ?', params: [code] },
+                ...normalized.map((scope) => ({
+                    query: 'INSERT INTO MENU_SCOPES (CODICE_MENU, CODICE_SCOPE) VALUES (?, ?)',
+                    params: [code, scope],
+                })),
+            ];
+            yield Orm_1.Orm.executeMultiple(this.accessiOptions.databaseOptions, queries);
+        });
+    }
+    /** Sostituisce in modo atomico i menu di uno scope (assegnazione massiva). */
+    setScopeMenus(codiceScope, menus) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const scope = this.normalizeScopeCode(codiceScope);
+            yield this.assertScopeExists(scope);
+            const normalized = Array.from(new Set((menus !== null && menus !== void 0 ? menus : []).map((menu) => String(menu !== null && menu !== void 0 ? menu : '').trim().toUpperCase()).filter(Boolean)));
+            for (const menu of normalized) {
+                yield this.assertMenuExists(menu);
+            }
+            const queries = [
+                { query: 'DELETE FROM MENU_SCOPES WHERE CODICE_SCOPE = ?', params: [scope] },
+                ...normalized.map((menu) => ({
+                    query: 'INSERT INTO MENU_SCOPES (CODICE_MENU, CODICE_SCOPE) VALUES (?, ?)',
+                    params: [menu, scope],
+                })),
+            ];
+            yield Orm_1.Orm.executeMultiple(this.accessiOptions.databaseOptions, queries);
+        });
+    }
 };
 exports.PermissionService = PermissionService;
 exports.PermissionService = PermissionService = __decorate([