npm - grm-shared-library - Versions diffs - 1.1.208 → 1.1.210 - Mend

grm-shared-library 1.1.208 → 1.1.210

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (29) hide show

package/README.md CHANGED Viewed

@@ -145,3 +145,73 @@ filtering) are delivered in later phases and should build on top of these types.
 ```bash
 npm test   # compiles src/modules/country and runs the country/currency suite
 ```
+## Roles and permissions
+This package is the authority on both. clarion-authentication seeds them into its
+database on boot; every other service reads them from here.
+| File | Holds |
+|---|---|
+| `role/enums/role.enum.ts` | `Roles` - the role names. |
+| `role/constants/roles-by-scope.ts` | `ORGANIZATION_ROLES` / `CONTROL_CENTRE_ROLES` / `MOBILE_ROLES` - each role's **scope**. |
+| `role/data/roles.data.ts` | `ROLES_DATA` - the permissions each role is seeded with. |
+| `permission/enums/permission-actions.enum.ts` | `PermissionActions` - every action, as `verb:resource`. |
+| `permission/data/permissions.data.ts` | `PERMISSIONS_DATA` - the catalogue role management shows, grouped by `PermissionsModule`. |
+**WHAT a role may do and WHERE it may do it are separate.** Permissions answer the
+first and are checked by the gateway's `PermissionGuard` (ANY-of). Scope answers the
+second and comes only from which list in `roles-by-scope.ts` the role is in: the
+gateway (`AccessScopeService`), clarion-authentication (`AuthorizationService`) and
+clarion-socket (tracking rooms) all read those lists, and downstream services confine
+a caller to the scope the gateway built. A role in no list gets no scope at all and
+every tenant-scoped call it makes fails closed.
+That is how one job exists at two scopes. `Organization:Response-Units-Admin` and
+`Control-Centre:Response-Units-Admin` are seeded from the **same** permission list
+(`RESPONSE_UNITS_ADMIN_PERMISSIONS`) - all of the `Response Unit` and `Tracking`
+modules, plus `read:control-centre` and `read:organization`, which their own screens
+call - and differ only in the list they are in.
+### The Tracking permission module
+clarion-response-tracking's routes used to be guarded by the `Response Unit` actions.
+Every mobile user holds `read:response-unit`, so every app user could read their
+organization's tracking provider connections, and nobody could be given tracking
+without being given the response units. They now have their own:
+| Action | Covers |
+|---|---|
+| `create` / `read` / `update` / `delete:tracking-provider-connection` | The link to a tracking platform (Telox, Wialon). `update` also covers test, enable, disable, reconnect. |
+| `create` / `read` / `update` / `delete:tracking-device-binding` | Which provider unit is which response unit. `read` also covers the unmapped-units worklist; `update`, resolving / reopening an entry on it. |
+| `read:tracking-position` | Where units are now - the incident map and live tracking. |
+| `read:tracking-history` | Where a unit has been. Separate on purpose: a movement history is a record of somebody's working day. |
+| `read:tracking-operations` | The tracking operations dashboard. |
+| `manage:tracking-operations` | Reconciling the tracking service's copy of the response units (the dry run included). |
+Who holds them: Owner, Admin, `Control-Centre:Admin` and both Response-Units-Admins -
+all twelve (everybody who could administer tracking before the split still can);
+`Organization:User` - the five `read` actions; `Control-Centre:User` and `Responder` -
+position and history; `Mobile-User` - **none**.
+### Adding a role: every step fails silently on its own
+1. **Here** - the `Roles` value, a scope list, and a `ROLES_DATA` entry. `roles.spec.ts`
+   fails if a scoped role is unseeded, a seeded role is not in the enum, or a role
+   holds an action the catalogue does not list.
+2. **clarion-authentication** - `users.roles` is a Postgres ENUM array, so the label
+   needs an `ALTER TYPE "users_roles_enum" ADD VALUE IF NOT EXISTS` migration. Without
+   it the role is seeded, offered by the admin, and rejected at the INSERT.
+3. **Every service that reads the role lists** - clarion-api-gateway,
+   clarion-authentication, clarion-socket - must INSTALL the new version (the lockfile
+   decides, not the caret) and redeploy. The gateway also validates `roles` with
+   `@IsEnum(Roles)`.
+4. **clarion-socket** names the organization roles admitted to tracking rooms one by
+   one; an organization role that should see the fleet has to be added there.
+5. **clarion-admin** shows menu entries by role NAME (`requiresAnyRole` in
+   `sidebar-data.ts`), from `clarion-shared-types`' mirror of `Roles`.
+Deploy clarion-authentication first and let it reseed. The gateway caches role
+permissions for five minutes, so a gateway that starts REQUIRING a new action should
+go out after that window - or the roles that were just granted it are refused until
+their cache entry expires.

package/dist/cjs/modules/permission/data/permissions.data.js CHANGED Viewed

@@ -64,6 +64,18 @@ exports.PERMISSIONS_DATA = [
             permission_actions_enum_1.PermissionActions.DELETE_CONTROL_CENTRE
         ]
     },
+    {
+        // The zone actions were granted to roles long before they were listed
+        // here. They worked - the gateway matches on the string - but role
+        // management could neither show nor assign them.
+        module: permissions_module_enum_1.PermissionsModule.ZONE,
+        actions: [
+            permission_actions_enum_1.PermissionActions.CREATE_ZONE,
+            permission_actions_enum_1.PermissionActions.READ_ZONE,
+            permission_actions_enum_1.PermissionActions.UPDATE_ZONE,
+            permission_actions_enum_1.PermissionActions.DELETE_ZONE
+        ]
+    },
     {
         module: permissions_module_enum_1.PermissionsModule.USER,
         actions: [
@@ -104,6 +116,23 @@ exports.PERMISSIONS_DATA = [
             permission_actions_enum_1.PermissionActions.DELETE_RESPONSE_UNIT
         ]
     },
+    {
+        module: permissions_module_enum_1.PermissionsModule.TRACKING,
+        actions: [
+            permission_actions_enum_1.PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            permission_actions_enum_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            permission_actions_enum_1.PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            permission_actions_enum_1.PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            permission_actions_enum_1.PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            permission_actions_enum_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            permission_actions_enum_1.PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            permission_actions_enum_1.PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            permission_actions_enum_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_actions_enum_1.PermissionActions.READ_TRACKING_HISTORY,
+            permission_actions_enum_1.PermissionActions.READ_TRACKING_OPERATIONS,
+            permission_actions_enum_1.PermissionActions.MANAGE_TRACKING_OPERATIONS
+        ]
+    },
     {
         module: permissions_module_enum_1.PermissionsModule.BILLING,
         actions: [

package/dist/cjs/modules/permission/data/permissions.data.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":";;;AAAA,8EAAqE;AACrE,8EAAqE;AAGxD,QAAA,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,aAAa;YAC/B,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,kBAAkB;YAEpC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YAEvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YAEzC,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAE1C,2CAAiB,CAAC,gBAAgB;YAElC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,iBAAiB;YAEnC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,UAAU;YAC5B,2CAAiB,CAAC,aAAa;YAE/B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAEhC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,kCAAkC;YACpD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,wCAAwC;YAC1D,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,uCAAuC;YACzD,2CAAiB,CAAC,6BAA6B;YAE/C,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;CACJ,CAAC"}
1	+ {"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":";;;AAAA,8EAAqE;AACrE,8EAAqE;AAGxD,QAAA,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,aAAa;YAC/B,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,kBAAkB;YAEpC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YAEvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YAEzC,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAE1C,2CAAiB,CAAC,gBAAgB;YAElC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,iBAAiB;YAEnC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,UAAU;YAC5B,2CAAiB,CAAC,aAAa;YAE/B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAEhC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,kCAAkC;YACpD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,wCAAwC;YAC1D,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,uCAAuC;YACzD,2CAAiB,CAAC,6BAA6B;YAE/C,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;CACJ,CAAC"}

package/dist/cjs/modules/permission/enums/permission-actions.enum.js CHANGED Viewed

@@ -109,6 +109,42 @@ var PermissionActions;
     PermissionActions["READ_RESPONSE_UNIT"] = "read:response-unit";
     PermissionActions["UPDATE_RESPONSE_UNIT"] = "update:response-unit";
     PermissionActions["DELETE_RESPONSE_UNIT"] = "delete:response-unit";
+    // Module: Tracking (clarion-response-tracking)
+    //
+    // Until these existed the gateway guarded every tracking route with the
+    // RESPONSE_UNIT actions above. That tied two different things together:
+    // anybody who could read a response unit - which includes every mobile user
+    // - could also read an organization's tracking provider connections, and
+    // nobody could be trusted with tracking without being handed response units.
+    //
+    // A provider connection: the link to a third-party tracking platform (Telox,
+    // Wialon). UPDATE also covers testing, enabling, disabling and reconnecting
+    // one - they change whether, and how, the organization's fleet is tracked.
+    PermissionActions["CREATE_TRACKING_PROVIDER_CONNECTION"] = "create:tracking-provider-connection";
+    PermissionActions["READ_TRACKING_PROVIDER_CONNECTION"] = "read:tracking-provider-connection";
+    PermissionActions["UPDATE_TRACKING_PROVIDER_CONNECTION"] = "update:tracking-provider-connection";
+    PermissionActions["DELETE_TRACKING_PROVIDER_CONNECTION"] = "delete:tracking-provider-connection";
+    // A device binding: which provider unit IS which response unit. READ also
+    // covers the unmapped-units worklist (provider units reporting with no
+    // binding yet), and UPDATE marking one of those resolved or reopening it -
+    // that list exists to be worked through by whoever makes the bindings.
+    PermissionActions["CREATE_TRACKING_DEVICE_BINDING"] = "create:tracking-device-binding";
+    PermissionActions["READ_TRACKING_DEVICE_BINDING"] = "read:tracking-device-binding";
+    PermissionActions["UPDATE_TRACKING_DEVICE_BINDING"] = "update:tracking-device-binding";
+    PermissionActions["DELETE_TRACKING_DEVICE_BINDING"] = "delete:tracking-device-binding";
+    // Where units are NOW: the incident map and live tracking. Held by everybody
+    // who works an incident.
+    PermissionActions["READ_TRACKING_POSITION"] = "read:tracking-position";
+    // Where a unit HAS BEEN. Kept apart from the live position on purpose: a
+    // movement history is a record of a person's working day, which is a
+    // different thing to be allowed to read than a dot on a map.
+    PermissionActions["READ_TRACKING_HISTORY"] = "read:tracking-history";
+    // The tracking operations dashboard: connection, unit and ingestion health.
+    PermissionActions["READ_TRACKING_OPERATIONS"] = "read:tracking-operations";
+    // Reconciling the tracking service's copy of the response units against
+    // clarion-organization - the dry run as well as the run, because the dry run
+    // is the first half of that one task.
+    PermissionActions["MANAGE_TRACKING_OPERATIONS"] = "manage:tracking-operations";
     // Module: Billing
     PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
     PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";

package/dist/cjs/modules/permission/enums/permission-actions.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,~~iBA8LX~~;~~AA9LD~~,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAE/C,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;AACjD,CAAC,~~EA9LW~~,iBAAiB,iCAAjB,iBAAiB,~~QA8L5B~~"}
1	+ {"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAmOX;AAnOD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAE/C,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;AACjD,CAAC,EAnOW,iBAAiB,iCAAjB,iBAAiB,QAmO5B"}

package/dist/cjs/modules/permission/enums/permissions-module.enum.js CHANGED Viewed

@@ -6,10 +6,12 @@ var PermissionsModule;
     PermissionsModule["ORGANIZATION"] = "Organization";
     PermissionsModule["PARTNER"] = "Partner";
     PermissionsModule["CONTROL_CENTRE"] = "Control Centre";
+    PermissionsModule["ZONE"] = "Zone";
     PermissionsModule["USER"] = "User";
     PermissionsModule["ROLE"] = "Role";
     PermissionsModule["INCIDENT"] = "Grievance";
     PermissionsModule["RESPONSE_UNIT"] = "Response Unit";
+    PermissionsModule["TRACKING"] = "Tracking";
     PermissionsModule["BILLING"] = "Billing";
     PermissionsModule["NEWSFEED"] = "Newsfeed";
     PermissionsModule["SUPPORT"] = "Support";

package/dist/cjs/modules/permission/enums/permissions-module.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions-module.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-module.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,~~iBAWX~~;~~AAXD~~,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;AACvB,CAAC,~~EAXW~~,iBAAiB,iCAAjB,iBAAiB,~~QAW5B~~"}
1	+ {"version":3,"file":"permissions-module.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-module.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAaX;AAbD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;AACvB,CAAC,EAbW,iBAAiB,iCAAjB,iBAAiB,QAa5B"}

package/dist/cjs/modules/role/constants/roles-by-scope.js CHANGED Viewed

@@ -8,12 +8,14 @@ exports.ORGANIZATION_ROLES = [
     role_enum_1.Roles.ORGANIZATION_USER,
     role_enum_1.Roles.ORGANIZATION_BILLING_ADMIN,
     role_enum_1.Roles.ORGANIZATION_NEWSFEED_ADMIN,
-    role_enum_1.Roles.ORGANIZATION_PARTNERSHIPS_ADMIN
+    role_enum_1.Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
+    role_enum_1.Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN
 ];
 exports.CONTROL_CENTRE_ROLES = [
     role_enum_1.Roles.CONTROL_CENTRE_ADMIN,
     role_enum_1.Roles.CONTROL_CENTRE_USER,
-    role_enum_1.Roles.RESPONDER
+    role_enum_1.Roles.RESPONDER,
+    role_enum_1.Roles.CONTROL_CENTRE_RESPONSE_UNITS_ADMIN
 ];
 exports.MOBILE_ROLES = [
     role_enum_1.Roles.MOBILE_USER

package/dist/cjs/modules/role/constants/roles-by-scope.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;~~CACxC~~,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;~~CAClB~~,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}
1	+ {"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;IACrC,iBAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;IACf,iBAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}

package/dist/cjs/modules/role/data/roles.data.js CHANGED Viewed

@@ -3,6 +3,39 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ROLES_DATA = void 0;
 const permission_1 = require("../../permission");
 const role_enum_1 = require("../enums/role.enum");
+/**
+ * What a Response-Units-Admin may do. Shared by the organization-level and the
+ * control-centre-level role on purpose: the two differ in WHERE they may act -
+ * decided by roles-by-scope.ts and enforced by each service's tenant scoping -
+ * and never in WHAT they may do. One list means they cannot drift apart.
+ */
+const RESPONSE_UNITS_ADMIN_PERMISSIONS = [
+    //Response Unit: every action. Managing the units is half of this job.
+    permission_1.PermissionActions.CREATE_RESPONSE_UNIT,
+    permission_1.PermissionActions.READ_RESPONSE_UNIT,
+    permission_1.PermissionActions.UPDATE_RESPONSE_UNIT,
+    permission_1.PermissionActions.DELETE_RESPONSE_UNIT,
+    //Tracking: every action. Pinned by roles.spec.ts against the catalogue, so a
+    //tracking action added later has to be granted here - or deliberately withheld.
+    permission_1.PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+    permission_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+    permission_1.PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+    permission_1.PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+    permission_1.PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+    permission_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+    permission_1.PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+    permission_1.PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+    permission_1.PermissionActions.READ_TRACKING_POSITION,
+    permission_1.PermissionActions.READ_TRACKING_HISTORY,
+    permission_1.PermissionActions.READ_TRACKING_OPERATIONS,
+    permission_1.PermissionActions.MANAGE_TRACKING_OPERATIONS,
+    //Control Centre: read-only. The provider-connection form lists the control
+    //centres a connection can be confined to, and a response unit belongs to one.
+    permission_1.PermissionActions.READ_CONTROL_CENTRE,
+    //Organization: read-only. The response-unit forms read the organization for
+    //its country, which centres their map and scopes the address search.
+    permission_1.PermissionActions.READ_ORGANIZATION
+];
 exports.ROLES_DATA = [
     {
         name: role_enum_1.Roles.SUPER_ADMIN,
@@ -86,7 +119,21 @@ exports.ROLES_DATA = [
             permission_1.PermissionActions.CREATE_RESPONSE_UNIT,
             permission_1.PermissionActions.READ_RESPONSE_UNIT,
             permission_1.PermissionActions.UPDATE_RESPONSE_UNIT,
-            permission_1.PermissionActions.DELETE_RESPONSE_UNIT
+            permission_1.PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            permission_1.PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY,
+            permission_1.PermissionActions.READ_TRACKING_OPERATIONS,
+            permission_1.PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -165,7 +212,21 @@ exports.ROLES_DATA = [
             permission_1.PermissionActions.CREATE_RESPONSE_UNIT,
             permission_1.PermissionActions.READ_RESPONSE_UNIT,
             permission_1.PermissionActions.UPDATE_RESPONSE_UNIT,
-            permission_1.PermissionActions.DELETE_RESPONSE_UNIT
+            permission_1.PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            permission_1.PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY,
+            permission_1.PermissionActions.READ_TRACKING_OPERATIONS,
+            permission_1.PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -197,7 +258,13 @@ exports.ROLES_DATA = [
             //Incident Category Type
             permission_1.PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
-            permission_1.PermissionActions.READ_RESPONSE_UNIT
+            permission_1.PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: sees all of it, changes none of it - as with partnerships.
+            permission_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY,
+            permission_1.PermissionActions.READ_TRACKING_OPERATIONS
         ]
     },
     {
@@ -230,6 +297,11 @@ exports.ROLES_DATA = [
             permission_1.PermissionActions.READ_INCIDENT_CATEGORY_TYPE
         ]
     },
+    {
+        name: role_enum_1.Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
+        description: 'Organization Response Units Admin: Manage response units and their tracking - provider connections, device bindings and tracking operations - across the organization',
+        permissions: [...RESPONSE_UNITS_ADMIN_PERMISSIONS]
+    },
     {
         name: role_enum_1.Roles.CONTROL_CENTRE_ADMIN,
         description: 'Control Centre Admin: Manage Control Centre',
@@ -290,7 +362,21 @@ exports.ROLES_DATA = [
             permission_1.PermissionActions.CREATE_RESPONSE_UNIT,
             permission_1.PermissionActions.READ_RESPONSE_UNIT,
             permission_1.PermissionActions.UPDATE_RESPONSE_UNIT,
-            permission_1.PermissionActions.DELETE_RESPONSE_UNIT
+            permission_1.PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            permission_1.PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            permission_1.PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY,
+            permission_1.PermissionActions.READ_TRACKING_OPERATIONS,
+            permission_1.PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -331,9 +417,18 @@ exports.ROLES_DATA = [
             //Incident Category Type
             permission_1.PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
-            permission_1.PermissionActions.READ_RESPONSE_UNIT
+            permission_1.PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: an operator needs to see where units are and where they
+            //have been. How they come to be tracked is not the desk's business.
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY
         ]
     },
+    {
+        name: role_enum_1.Roles.CONTROL_CENTRE_RESPONSE_UNITS_ADMIN,
+        description: 'Control Centre Response Units Admin: Manage response units and their tracking - provider connections, device bindings and tracking operations - within one control centre',
+        permissions: [...RESPONSE_UNITS_ADMIN_PERMISSIONS]
+    },
     {
         name: role_enum_1.Roles.RESPONDER,
         description: 'Responder: Respond to Incidents, raise support tickets',
@@ -358,6 +453,9 @@ exports.ROLES_DATA = [
             permission_1.PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
             permission_1.PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: a responder using the console sees the map and the history.
+            permission_1.PermissionActions.READ_TRACKING_POSITION,
+            permission_1.PermissionActions.READ_TRACKING_HISTORY,
             //Support - the CUSTOMER surface only.
             //
             //These five are what the gateway's customer support controller

package/dist/cjs/modules/role/data/roles.data.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"roles.data.js","sourceRoot":"","sources":["../../../../../src/modules/role/data/roles.data.ts"],"names":[],"mappings":";;;AAAA,iDAAqD;AACrD,kDAA2C;AAG9B,QAAA,UAAU,GAAW;IAC9B;QACI,IAAI,EAAE,iBAAK,CAAC,WAAW;QACvB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,CAAC,GAAG,CAAC;KACrB;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,2BAA2B;YAC7C,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,2BAA2B;YAC7C,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,iBAAiB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,SAAS;YACT,8BAAiB,CAAC,YAAY;YAC9B,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,gDAAgD;YAChD,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,aAAa;YAC/B,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;SACvC;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,+BAA+B;QAC3C,WAAW,EAAE,sJAAsJ;QACnK,WAAW,EAAE;YACT,mEAAmE;YACnE,kEAAkE;YAClE,wEAAwE;YACxE,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,qEAAqE;YACrE,iEAAiE;YACjE,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,iEAAiE;YACjE,kEAAkE;YAClE,8BAAiB,CAAC,YAAY;YAC9B,+DAA+D;YAC/D,oEAAoE;YACpE,mDAAmD;YACnD,8BAAiB,CAAC,2BAA2B;SAChD;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,oBAAoB;QAChC,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,oEAAoE;YACpE,8DAA8D;YAC9D,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,+DAA+D;YAC/D,kEAAkE;YAClE,sEAAsE;YACtE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,mBAAmB;QAC/B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,gEAAgE;YAChE,oEAAoE;YACpE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,+DAA+D;YAC/D,oEAAoE;YACpE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;SACvC;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,SAAS;QACrB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,mEAAmE;YACnE,+BAA+B;YAC/B,8BAAiB,CAAC,qBAAqB;YACvC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,WAAW;QACvB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;SAC1C;KACJ;CACJ,CAAC"}
1	+ {"version":3,"file":"roles.data.js","sourceRoot":"","sources":["../../../../../src/modules/role/data/roles.data.ts"],"names":[],"mappings":";;;AAAA,iDAAqD;AACrD,kDAA2C;AAG3C;;;;;GAKG;AACH,MAAM,gCAAgC,GAAa;IAC/C,sEAAsE;IACtE,8BAAiB,CAAC,oBAAoB;IACtC,8BAAiB,CAAC,kBAAkB;IACpC,8BAAiB,CAAC,oBAAoB;IACtC,8BAAiB,CAAC,oBAAoB;IACtC,6EAA6E;IAC7E,gFAAgF;IAChF,8BAAiB,CAAC,mCAAmC;IACrD,8BAAiB,CAAC,iCAAiC;IACnD,8BAAiB,CAAC,mCAAmC;IACrD,8BAAiB,CAAC,mCAAmC;IACrD,8BAAiB,CAAC,8BAA8B;IAChD,8BAAiB,CAAC,4BAA4B;IAC9C,8BAAiB,CAAC,8BAA8B;IAChD,8BAAiB,CAAC,8BAA8B;IAChD,8BAAiB,CAAC,sBAAsB;IACxC,8BAAiB,CAAC,qBAAqB;IACvC,8BAAiB,CAAC,wBAAwB;IAC1C,8BAAiB,CAAC,0BAA0B;IAC5C,2EAA2E;IAC3E,8EAA8E;IAC9E,8BAAiB,CAAC,mBAAmB;IACrC,4EAA4E;IAC5E,qEAAqE;IACrE,8BAAiB,CAAC,iBAAiB;CACtC,CAAC;AAEW,QAAA,UAAU,GAAW;IAC9B;QACI,IAAI,EAAE,iBAAK,CAAC,WAAW;QACvB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,CAAC,GAAG,CAAC;KACrB;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,2BAA2B;YAC7C,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,iCAAiC;YACnD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,2BAA2B;YAC7C,8BAAiB,CAAC,6BAA6B;YAC/C,8BAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,iCAAiC;YACnD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,iBAAiB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,SAAS;YACT,8BAAiB,CAAC,YAAY;YAC9B,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,gDAAgD;YAChD,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,8BAAiB,CAAC,aAAa;YAC/B,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,sEAAsE;YACtE,8BAAiB,CAAC,iCAAiC;YACnD,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;SAC7C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,+BAA+B;QAC3C,WAAW,EAAE,sJAAsJ;QACnK,WAAW,EAAE;YACT,mEAAmE;YACnE,kEAAkE;YAClE,wEAAwE;YACxE,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,cAAc;YAChC,8BAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,qEAAqE;YACrE,iEAAiE;YACjE,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,yBAAyB;YAC3C,iEAAiE;YACjE,kEAAkE;YAClE,8BAAiB,CAAC,YAAY;YAC9B,+DAA+D;YAC/D,oEAAoE;YACpE,mDAAmD;YACnD,8BAAiB,CAAC,2BAA2B;SAChD;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,iCAAiC;QAC7C,WAAW,EAAE,uKAAuK;QACpL,WAAW,EAAE,CAAC,GAAG,gCAAgC,CAAC;KACrD;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,oBAAoB;QAChC,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,oEAAoE;YACpE,8DAA8D;YAC9D,8BAAiB,CAAC,YAAY;YAC9B,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,SAAS;YAC3B,8BAAiB,CAAC,WAAW;YAC7B,8BAAiB,CAAC,WAAW;YAC7B,+DAA+D;YAC/D,kEAAkE;YAClE,sEAAsE;YACtE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,uBAAuB;YACzC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,iBAAiB;YACnC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,kBAAkB;YACpC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,iCAAiC;YACnD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,mCAAmC;YACrD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,mBAAmB;QAC/B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,gEAAgE;YAChE,oEAAoE;YACpE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,wBAAwB;YAC1C,8BAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,+DAA+D;YAC/D,oEAAoE;YACpE,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,4BAA4B;YAC9C,8BAAiB,CAAC,8BAA8B;YAChD,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,qBAAqB;YACvC,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,mEAAmE;YACnE,oEAAoE;YACpE,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,mCAAmC;QAC/C,WAAW,EAAE,2KAA2K;QACxL,WAAW,EAAE,CAAC,GAAG,gCAAgC,CAAC;KACrD;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,SAAS;QACrB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,mEAAmE;YACnE,+BAA+B;YAC/B,8BAAiB,CAAC,qBAAqB;YACvC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,uEAAuE;YACvE,8BAAiB,CAAC,sBAAsB;YACxC,8BAAiB,CAAC,qBAAqB;YACvC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,iBAAK,CAAC,WAAW;QACvB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE;YACT,cAAc;YACd,8BAAiB,CAAC,iBAAiB;YACnC,gBAAgB;YAChB,8BAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,8BAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,8BAAiB,CAAC,eAAe;YACjC,8BAAiB,CAAC,aAAa;YAC/B,8BAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,8BAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,8BAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,8BAAiB,CAAC,qBAAqB;YACvC,8BAAiB,CAAC,mBAAmB;YACrC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,oBAAoB;YACtC,8BAAiB,CAAC,qBAAqB;SAC1C;KACJ;CACJ,CAAC"}

package/dist/cjs/modules/role/enums/role.enum.js CHANGED Viewed

@@ -10,12 +10,28 @@ var Roles;
     Roles["ORGANIZATION_BILLING_ADMIN"] = "Organization:Billing-Admin";
     Roles["ORGANIZATION_NEWSFEED_ADMIN"] = "Organization:Newsfeed-Admin";
     Roles["ORGANIZATION_PARTNERSHIPS_ADMIN"] = "Organization:Partnerships-Admin";
+    /**
+     * Manages response units and how they are tracked - provider connections,
+     * device bindings, tracking operations - across the whole organization.
+     */
+    Roles["ORGANIZATION_RESPONSE_UNITS_ADMIN"] = "Organization:Response-Units-Admin";
     Roles["CONTROL_CENTRE_ADMIN"] = "Control-Centre:Admin";
     Roles["CONTROL_CENTRE_USER"] = "Control-Centre:User";
+    /** The same job, confined to one control centre. */
+    Roles["CONTROL_CENTRE_RESPONSE_UNITS_ADMIN"] = "Control-Centre:Response-Units-Admin";
     Roles["RESPONDER"] = "Responder";
     Roles["MOBILE_USER"] = "Mobile-User";
 })(Roles || (exports.Roles = Roles = {}));
 /**
  * When defining new roles, also update the roles-by-scope.ts file and roles.data.ts file
+ *
+ * A role's SCOPE comes from which list in roles-by-scope.ts it is in, not from its
+ * name: the gateway (AccessScopeService), clarion-authentication
+ * (AuthorizationService) and clarion-socket (tracking rooms) all read those lists.
+ * A role in neither list gets no scope at all and every tenant-scoped call it
+ * makes fails closed.
+ *
+ * `users.roles` is a Postgres ENUM array, so a new value here also needs an
+ * ALTER TYPE migration in clarion-authentication before anybody can hold it.
  */
 //# sourceMappingURL=role.enum.js.map

package/dist/cjs/modules/role/enums/role.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,~~KAYX~~;~~AAZD~~,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,4EAAmE,CAAA;IACnE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,~~EAZW~~,KAAK,qBAAL,KAAK,~~QAYhB~~;AAED~~;;GAEG~~"}
1	+ {"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,KAmBX;AAnBD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,4EAAmE,CAAA;IACnE;;;OAGG;IACH,gFAAuE,CAAA;IACvE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EAnBW,KAAK,qBAAL,KAAK,QAmBhB;AAED;;;;;;;;;;;GAWG"}

package/dist/esm/modules/permission/data/permissions.data.js CHANGED Viewed

@@ -61,6 +61,18 @@ export const PERMISSIONS_DATA = [
             PermissionActions.DELETE_CONTROL_CENTRE
         ]
     },
+    {
+        // The zone actions were granted to roles long before they were listed
+        // here. They worked - the gateway matches on the string - but role
+        // management could neither show nor assign them.
+        module: PermissionsModule.ZONE,
+        actions: [
+            PermissionActions.CREATE_ZONE,
+            PermissionActions.READ_ZONE,
+            PermissionActions.UPDATE_ZONE,
+            PermissionActions.DELETE_ZONE
+        ]
+    },
     {
         module: PermissionsModule.USER,
         actions: [
@@ -101,6 +113,23 @@ export const PERMISSIONS_DATA = [
             PermissionActions.DELETE_RESPONSE_UNIT
         ]
     },
+    {
+        module: PermissionsModule.TRACKING,
+        actions: [
+            PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
+            PermissionActions.READ_TRACKING_OPERATIONS,
+            PermissionActions.MANAGE_TRACKING_OPERATIONS
+        ]
+    },
     {
         module: PermissionsModule.BILLING,
         actions: [

package/dist/esm/modules/permission/data/permissions.data.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,iBAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,gBAAgB;YAClC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,kBAAkB;YAEpC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YAEvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YAEzC,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAEhD,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAE1C,iBAAiB,CAAC,gBAAgB;YAElC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,iBAAiB;YAEnC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,UAAU;YAC5B,iBAAiB,CAAC,aAAa;YAE/B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAE9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,gBAAgB;YAClC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,cAAc;YAEhC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAE9B,iBAAiB,CAAC,kCAAkC;YACpD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,wCAAwC;YAC1D,iBAAiB,CAAC,8BAA8B;YAEhD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,uCAAuC;YACzD,iBAAiB,CAAC,6BAA6B;YAE/C,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;CACJ,CAAC"}
1	+ {"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,iBAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,iBAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,gBAAgB;YAClC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,kBAAkB;YAEpC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YAEvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YAEzC,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAEhD,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAE1C,iBAAiB,CAAC,gBAAgB;YAElC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,iBAAiB;YAEnC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,UAAU;YAC5B,iBAAiB,CAAC,aAAa;YAE/B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAE9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,gBAAgB;YAClC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,cAAc;YAEhC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAE9B,iBAAiB,CAAC,kCAAkC;YACpD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,wCAAwC;YAC1D,iBAAiB,CAAC,8BAA8B;YAEhD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,uCAAuC;YACzD,iBAAiB,CAAC,6BAA6B;YAE/C,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,iBAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;CACJ,CAAC"}

package/dist/esm/modules/permission/enums/permission-actions.enum.js CHANGED Viewed

@@ -106,6 +106,42 @@ export var PermissionActions;
     PermissionActions["READ_RESPONSE_UNIT"] = "read:response-unit";
     PermissionActions["UPDATE_RESPONSE_UNIT"] = "update:response-unit";
     PermissionActions["DELETE_RESPONSE_UNIT"] = "delete:response-unit";
+    // Module: Tracking (clarion-response-tracking)
+    //
+    // Until these existed the gateway guarded every tracking route with the
+    // RESPONSE_UNIT actions above. That tied two different things together:
+    // anybody who could read a response unit - which includes every mobile user
+    // - could also read an organization's tracking provider connections, and
+    // nobody could be trusted with tracking without being handed response units.
+    //
+    // A provider connection: the link to a third-party tracking platform (Telox,
+    // Wialon). UPDATE also covers testing, enabling, disabling and reconnecting
+    // one - they change whether, and how, the organization's fleet is tracked.
+    PermissionActions["CREATE_TRACKING_PROVIDER_CONNECTION"] = "create:tracking-provider-connection";
+    PermissionActions["READ_TRACKING_PROVIDER_CONNECTION"] = "read:tracking-provider-connection";
+    PermissionActions["UPDATE_TRACKING_PROVIDER_CONNECTION"] = "update:tracking-provider-connection";
+    PermissionActions["DELETE_TRACKING_PROVIDER_CONNECTION"] = "delete:tracking-provider-connection";
+    // A device binding: which provider unit IS which response unit. READ also
+    // covers the unmapped-units worklist (provider units reporting with no
+    // binding yet), and UPDATE marking one of those resolved or reopening it -
+    // that list exists to be worked through by whoever makes the bindings.
+    PermissionActions["CREATE_TRACKING_DEVICE_BINDING"] = "create:tracking-device-binding";
+    PermissionActions["READ_TRACKING_DEVICE_BINDING"] = "read:tracking-device-binding";
+    PermissionActions["UPDATE_TRACKING_DEVICE_BINDING"] = "update:tracking-device-binding";
+    PermissionActions["DELETE_TRACKING_DEVICE_BINDING"] = "delete:tracking-device-binding";
+    // Where units are NOW: the incident map and live tracking. Held by everybody
+    // who works an incident.
+    PermissionActions["READ_TRACKING_POSITION"] = "read:tracking-position";
+    // Where a unit HAS BEEN. Kept apart from the live position on purpose: a
+    // movement history is a record of a person's working day, which is a
+    // different thing to be allowed to read than a dot on a map.
+    PermissionActions["READ_TRACKING_HISTORY"] = "read:tracking-history";
+    // The tracking operations dashboard: connection, unit and ingestion health.
+    PermissionActions["READ_TRACKING_OPERATIONS"] = "read:tracking-operations";
+    // Reconciling the tracking service's copy of the response units against
+    // clarion-organization - the dry run as well as the run, because the dry run
+    // is the first half of that one task.
+    PermissionActions["MANAGE_TRACKING_OPERATIONS"] = "manage:tracking-operations";
     // Module: Billing
     PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
     PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";

package/dist/esm/modules/permission/enums/permission-actions.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,~~iBA8LX~~;~~AA9LD~~,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAE/C,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;AACjD,CAAC,~~EA9LW~~,iBAAiB,KAAjB,iBAAiB,~~QA8L5B~~"}
1	+ {"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAmOX;AAnOD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAE/C,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;AACjD,CAAC,EAnOW,iBAAiB,KAAjB,iBAAiB,QAmO5B"}

package/dist/esm/modules/permission/enums/permissions-module.enum.js CHANGED Viewed

@@ -3,10 +3,12 @@ export var PermissionsModule;
     PermissionsModule["ORGANIZATION"] = "Organization";
     PermissionsModule["PARTNER"] = "Partner";
     PermissionsModule["CONTROL_CENTRE"] = "Control Centre";
+    PermissionsModule["ZONE"] = "Zone";
     PermissionsModule["USER"] = "User";
     PermissionsModule["ROLE"] = "Role";
     PermissionsModule["INCIDENT"] = "Grievance";
     PermissionsModule["RESPONSE_UNIT"] = "Response Unit";
+    PermissionsModule["TRACKING"] = "Tracking";
     PermissionsModule["BILLING"] = "Billing";
     PermissionsModule["NEWSFEED"] = "Newsfeed";
     PermissionsModule["SUPPORT"] = "Support";

package/dist/esm/modules/permission/enums/permissions-module.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions-module.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-module.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,~~iBAWX~~;~~AAXD~~,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;AACvB,CAAC,~~EAXW~~,iBAAiB,KAAjB,iBAAiB,~~QAW5B~~"}
1	+ {"version":3,"file":"permissions-module.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-module.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAaX;AAbD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;AACvB,CAAC,EAbW,iBAAiB,KAAjB,iBAAiB,QAa5B"}

package/dist/esm/modules/role/constants/roles-by-scope.js CHANGED Viewed

@@ -5,12 +5,14 @@ export const ORGANIZATION_ROLES = [
     Roles.ORGANIZATION_USER,
     Roles.ORGANIZATION_BILLING_ADMIN,
     Roles.ORGANIZATION_NEWSFEED_ADMIN,
-    Roles.ORGANIZATION_PARTNERSHIPS_ADMIN
+    Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
+    Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN
 ];
 export const CONTROL_CENTRE_ROLES = [
     Roles.CONTROL_CENTRE_ADMIN,
     Roles.CONTROL_CENTRE_USER,
-    Roles.RESPONDER
+    Roles.RESPONDER,
+    Roles.CONTROL_CENTRE_RESPONSE_UNITS_ADMIN
 ];
 export const MOBILE_ROLES = [
     Roles.MOBILE_USER

package/dist/esm/modules/role/constants/roles-by-scope.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;~~CACxC~~,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;~~CAClB~~,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}
1	+ {"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;IACrC,KAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}

package/dist/esm/modules/role/data/roles.data.js CHANGED Viewed

@@ -1,5 +1,38 @@
 import { PermissionActions } from "../../permission";
 import { Roles } from "../enums/role.enum";
+/**
+ * What a Response-Units-Admin may do. Shared by the organization-level and the
+ * control-centre-level role on purpose: the two differ in WHERE they may act -
+ * decided by roles-by-scope.ts and enforced by each service's tenant scoping -
+ * and never in WHAT they may do. One list means they cannot drift apart.
+ */
+const RESPONSE_UNITS_ADMIN_PERMISSIONS = [
+    //Response Unit: every action. Managing the units is half of this job.
+    PermissionActions.CREATE_RESPONSE_UNIT,
+    PermissionActions.READ_RESPONSE_UNIT,
+    PermissionActions.UPDATE_RESPONSE_UNIT,
+    PermissionActions.DELETE_RESPONSE_UNIT,
+    //Tracking: every action. Pinned by roles.spec.ts against the catalogue, so a
+    //tracking action added later has to be granted here - or deliberately withheld.
+    PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+    PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+    PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+    PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+    PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+    PermissionActions.READ_TRACKING_DEVICE_BINDING,
+    PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+    PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+    PermissionActions.READ_TRACKING_POSITION,
+    PermissionActions.READ_TRACKING_HISTORY,
+    PermissionActions.READ_TRACKING_OPERATIONS,
+    PermissionActions.MANAGE_TRACKING_OPERATIONS,
+    //Control Centre: read-only. The provider-connection form lists the control
+    //centres a connection can be confined to, and a response unit belongs to one.
+    PermissionActions.READ_CONTROL_CENTRE,
+    //Organization: read-only. The response-unit forms read the organization for
+    //its country, which centres their map and scopes the address search.
+    PermissionActions.READ_ORGANIZATION
+];
 export const ROLES_DATA = [
     {
         name: Roles.SUPER_ADMIN,
@@ -83,7 +116,21 @@ export const ROLES_DATA = [
             PermissionActions.CREATE_RESPONSE_UNIT,
             PermissionActions.READ_RESPONSE_UNIT,
             PermissionActions.UPDATE_RESPONSE_UNIT,
-            PermissionActions.DELETE_RESPONSE_UNIT
+            PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
+            PermissionActions.READ_TRACKING_OPERATIONS,
+            PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -162,7 +209,21 @@ export const ROLES_DATA = [
             PermissionActions.CREATE_RESPONSE_UNIT,
             PermissionActions.READ_RESPONSE_UNIT,
             PermissionActions.UPDATE_RESPONSE_UNIT,
-            PermissionActions.DELETE_RESPONSE_UNIT
+            PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
+            PermissionActions.READ_TRACKING_OPERATIONS,
+            PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -194,7 +255,13 @@ export const ROLES_DATA = [
             //Incident Category Type
             PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
-            PermissionActions.READ_RESPONSE_UNIT
+            PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: sees all of it, changes none of it - as with partnerships.
+            PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
+            PermissionActions.READ_TRACKING_OPERATIONS
         ]
     },
     {
@@ -227,6 +294,11 @@ export const ROLES_DATA = [
             PermissionActions.READ_INCIDENT_CATEGORY_TYPE
         ]
     },
+    {
+        name: Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
+        description: 'Organization Response Units Admin: Manage response units and their tracking - provider connections, device bindings and tracking operations - across the organization',
+        permissions: [...RESPONSE_UNITS_ADMIN_PERMISSIONS]
+    },
     {
         name: Roles.CONTROL_CENTRE_ADMIN,
         description: 'Control Centre Admin: Manage Control Centre',
@@ -287,7 +359,21 @@ export const ROLES_DATA = [
             PermissionActions.CREATE_RESPONSE_UNIT,
             PermissionActions.READ_RESPONSE_UNIT,
             PermissionActions.UPDATE_RESPONSE_UNIT,
-            PermissionActions.DELETE_RESPONSE_UNIT
+            PermissionActions.DELETE_RESPONSE_UNIT,
+            //Tracking: provider connections, device bindings, positions, history
+            //and tracking operations - all of it.
+            PermissionActions.CREATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.READ_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.UPDATE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.DELETE_TRACKING_PROVIDER_CONNECTION,
+            PermissionActions.CREATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_DEVICE_BINDING,
+            PermissionActions.UPDATE_TRACKING_DEVICE_BINDING,
+            PermissionActions.DELETE_TRACKING_DEVICE_BINDING,
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
+            PermissionActions.READ_TRACKING_OPERATIONS,
+            PermissionActions.MANAGE_TRACKING_OPERATIONS
         ]
     },
     {
@@ -328,9 +414,18 @@ export const ROLES_DATA = [
             //Incident Category Type
             PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
-            PermissionActions.READ_RESPONSE_UNIT
+            PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: an operator needs to see where units are and where they
+            //have been. How they come to be tracked is not the desk's business.
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY
         ]
     },
+    {
+        name: Roles.CONTROL_CENTRE_RESPONSE_UNITS_ADMIN,
+        description: 'Control Centre Response Units Admin: Manage response units and their tracking - provider connections, device bindings and tracking operations - within one control centre',
+        permissions: [...RESPONSE_UNITS_ADMIN_PERMISSIONS]
+    },
     {
         name: Roles.RESPONDER,
         description: 'Responder: Respond to Incidents, raise support tickets',
@@ -355,6 +450,9 @@ export const ROLES_DATA = [
             PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
             //Response Unit
             PermissionActions.READ_RESPONSE_UNIT,
+            //Tracking: a responder using the console sees the map and the history.
+            PermissionActions.READ_TRACKING_POSITION,
+            PermissionActions.READ_TRACKING_HISTORY,
             //Support - the CUSTOMER surface only.
             //
             //These five are what the gateway's customer support controller

package/dist/esm/modules/role/data/roles.data.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"roles.data.js","sourceRoot":"","sources":["../../../../../src/modules/role/data/roles.data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,MAAM,CAAC,MAAM,UAAU,GAAW;IAC9B;QACI,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,CAAC,GAAG,CAAC;KACrB;IACD;QACI,IAAI,EAAE,KAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,iBAAiB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,SAAS;YACT,iBAAiB,CAAC,YAAY;YAC9B,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,gDAAgD;YAChD,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,aAAa;YAC/B,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;SACvC;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,+BAA+B;QAC3C,WAAW,EAAE,sJAAsJ;QACnK,WAAW,EAAE;YACT,mEAAmE;YACnE,kEAAkE;YAClE,wEAAwE;YACxE,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,qEAAqE;YACrE,iEAAiE;YACjE,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,iEAAiE;YACjE,kEAAkE;YAClE,iBAAiB,CAAC,YAAY;YAC9B,+DAA+D;YAC/D,oEAAoE;YACpE,mDAAmD;YACnD,iBAAiB,CAAC,2BAA2B;SAChD;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,oBAAoB;QAChC,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,oEAAoE;YACpE,8DAA8D;YAC9D,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,+DAA+D;YAC/D,kEAAkE;YAClE,sEAAsE;YACtE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,mBAAmB;QAC/B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,gEAAgE;YAChE,oEAAoE;YACpE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,+DAA+D;YAC/D,oEAAoE;YACpE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;SACvC;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,SAAS;QACrB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,mEAAmE;YACnE,+BAA+B;YAC/B,iBAAiB,CAAC,qBAAqB;YACvC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;CACJ,CAAC"}
1	+ {"version":3,"file":"roles.data.js","sourceRoot":"","sources":["../../../../../src/modules/role/data/roles.data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C;;;;;GAKG;AACH,MAAM,gCAAgC,GAAa;IAC/C,sEAAsE;IACtE,iBAAiB,CAAC,oBAAoB;IACtC,iBAAiB,CAAC,kBAAkB;IACpC,iBAAiB,CAAC,oBAAoB;IACtC,iBAAiB,CAAC,oBAAoB;IACtC,6EAA6E;IAC7E,gFAAgF;IAChF,iBAAiB,CAAC,mCAAmC;IACrD,iBAAiB,CAAC,iCAAiC;IACnD,iBAAiB,CAAC,mCAAmC;IACrD,iBAAiB,CAAC,mCAAmC;IACrD,iBAAiB,CAAC,8BAA8B;IAChD,iBAAiB,CAAC,4BAA4B;IAC9C,iBAAiB,CAAC,8BAA8B;IAChD,iBAAiB,CAAC,8BAA8B;IAChD,iBAAiB,CAAC,sBAAsB;IACxC,iBAAiB,CAAC,qBAAqB;IACvC,iBAAiB,CAAC,wBAAwB;IAC1C,iBAAiB,CAAC,0BAA0B;IAC5C,2EAA2E;IAC3E,8EAA8E;IAC9E,iBAAiB,CAAC,mBAAmB;IACrC,4EAA4E;IAC5E,qEAAqE;IACrE,iBAAiB,CAAC,iBAAiB;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAW;IAC9B;QACI,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,CAAC,GAAG,CAAC;KACrB;IACD;QACI,IAAI,EAAE,KAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,kBAAkB;QAC9B,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,SAAS;YACT,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,gBAAgB;YAChB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,gEAAgE;YAChE,+DAA+D;YAC/D,uCAAuC;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,2BAA2B;YAC7C,iBAAiB,CAAC,6BAA6B;YAC/C,iBAAiB,CAAC,6BAA6B;YAC/C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,iBAAiB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,SAAS;YACT,iBAAiB,CAAC,YAAY;YAC9B,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,gDAAgD;YAChD,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,UAAU;YACV,iBAAiB,CAAC,aAAa;YAC/B,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,sEAAsE;YACtE,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;SAC7C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,+BAA+B;QAC3C,WAAW,EAAE,sJAAsJ;QACnK,WAAW,EAAE;YACT,mEAAmE;YACnE,kEAAkE;YAClE,wEAAwE;YACxE,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,cAAc;YAChC,iBAAiB,CAAC,cAAc;YAChC,kBAAkB;YAClB,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,qEAAqE;YACrE,iEAAiE;YACjE,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,yBAAyB;YAC3C,iEAAiE;YACjE,kEAAkE;YAClE,iBAAiB,CAAC,YAAY;YAC9B,+DAA+D;YAC/D,oEAAoE;YACpE,mDAAmD;YACnD,iBAAiB,CAAC,2BAA2B;SAChD;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,iCAAiC;QAC7C,WAAW,EAAE,uKAAuK;QACpL,WAAW,EAAE,CAAC,GAAG,gCAAgC,CAAC;KACrD;IACD;QACI,IAAI,EAAE,KAAK,CAAC,oBAAoB;QAChC,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,oEAAoE;YACpE,8DAA8D;YAC9D,iBAAiB,CAAC,YAAY;YAC9B,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,uBAAuB;YACzC,oBAAoB;YACpB,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,SAAS;YAC3B,iBAAiB,CAAC,WAAW;YAC7B,iBAAiB,CAAC,WAAW;YAC7B,+DAA+D;YAC/D,kEAAkE;YAClE,sEAAsE;YACtE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,uBAAuB;YACzC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,iBAAiB;YACnC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,kBAAkB;YACpC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,qEAAqE;YACrE,sCAAsC;YACtC,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,iCAAiC;YACnD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,mCAAmC;YACrD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,mBAAmB;QAC/B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,gEAAgE;YAChE,oEAAoE;YACpE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,wBAAwB;YAC1C,iBAAiB,CAAC,uBAAuB;YACzC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,+DAA+D;YAC/D,oEAAoE;YACpE,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,4BAA4B;YAC9C,iBAAiB,CAAC,8BAA8B;YAChD,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,qBAAqB;YACvC,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,mEAAmE;YACnE,oEAAoE;YACpE,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,mCAAmC;QAC/C,WAAW,EAAE,2KAA2K;QACxL,WAAW,EAAE,CAAC,GAAG,gCAAgC,CAAC;KACrD;IACD;QACI,IAAI,EAAE,KAAK,CAAC,SAAS;QACrB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,mEAAmE;YACnE,+BAA+B;YAC/B,iBAAiB,CAAC,qBAAqB;YACvC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,uEAAuE;YACvE,iBAAiB,CAAC,sBAAsB;YACxC,iBAAiB,CAAC,qBAAqB;YACvC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE;YACT,cAAc;YACd,iBAAiB,CAAC,iBAAiB;YACnC,gBAAgB;YAChB,iBAAiB,CAAC,mBAAmB;YACrC,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,MAAM;YACN,iBAAiB,CAAC,SAAS;YAC3B,UAAU;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,aAAa;YAC/B,iBAAiB,CAAC,eAAe;YACjC,wBAAwB;YACxB,iBAAiB,CAAC,2BAA2B;YAC7C,eAAe;YACf,iBAAiB,CAAC,kBAAkB;YACpC,sCAAsC;YACtC,EAAE;YACF,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,+DAA+D;YAC/D,8DAA8D;YAC9D,+CAA+C;YAC/C,iBAAiB,CAAC,qBAAqB;YACvC,iBAAiB,CAAC,mBAAmB;YACrC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,oBAAoB;YACtC,iBAAiB,CAAC,qBAAqB;SAC1C;KACJ;CACJ,CAAC"}

package/dist/esm/modules/role/enums/role.enum.js CHANGED Viewed

@@ -7,12 +7,28 @@ export var Roles;
     Roles["ORGANIZATION_BILLING_ADMIN"] = "Organization:Billing-Admin";
     Roles["ORGANIZATION_NEWSFEED_ADMIN"] = "Organization:Newsfeed-Admin";
     Roles["ORGANIZATION_PARTNERSHIPS_ADMIN"] = "Organization:Partnerships-Admin";
+    /**
+     * Manages response units and how they are tracked - provider connections,
+     * device bindings, tracking operations - across the whole organization.
+     */
+    Roles["ORGANIZATION_RESPONSE_UNITS_ADMIN"] = "Organization:Response-Units-Admin";
     Roles["CONTROL_CENTRE_ADMIN"] = "Control-Centre:Admin";
     Roles["CONTROL_CENTRE_USER"] = "Control-Centre:User";
+    /** The same job, confined to one control centre. */
+    Roles["CONTROL_CENTRE_RESPONSE_UNITS_ADMIN"] = "Control-Centre:Response-Units-Admin";
     Roles["RESPONDER"] = "Responder";
     Roles["MOBILE_USER"] = "Mobile-User";
 })(Roles || (Roles = {}));
 /**
  * When defining new roles, also update the roles-by-scope.ts file and roles.data.ts file
+ *
+ * A role's SCOPE comes from which list in roles-by-scope.ts it is in, not from its
+ * name: the gateway (AccessScopeService), clarion-authentication
+ * (AuthorizationService) and clarion-socket (tracking rooms) all read those lists.
+ * A role in neither list gets no scope at all and every tenant-scoped call it
+ * makes fails closed.
+ *
+ * `users.roles` is a Postgres ENUM array, so a new value here also needs an
+ * ALTER TYPE migration in clarion-authentication before anybody can hold it.
  */
 //# sourceMappingURL=role.enum.js.map

package/dist/esm/modules/role/enums/role.enum.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,~~KAYX~~;~~AAZD~~,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,4EAAmE,CAAA;IACnE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,~~EAZW~~,KAAK,KAAL,KAAK,~~QAYhB~~;AAED~~;;GAEG~~"}
1	+ {"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,KAmBX;AAnBD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,4EAAmE,CAAA;IACnE;;;OAGG;IACH,gFAAuE,CAAA;IACvE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EAnBW,KAAK,KAAL,KAAK,QAmBhB;AAED;;;;;;;;;;;GAWG"}

package/dist/types/modules/permission/enums/permission-actions.enum.d.ts CHANGED Viewed

@@ -63,6 +63,18 @@ export declare enum PermissionActions {
     READ_RESPONSE_UNIT = "read:response-unit",
     UPDATE_RESPONSE_UNIT = "update:response-unit",
     DELETE_RESPONSE_UNIT = "delete:response-unit",
+    CREATE_TRACKING_PROVIDER_CONNECTION = "create:tracking-provider-connection",
+    READ_TRACKING_PROVIDER_CONNECTION = "read:tracking-provider-connection",
+    UPDATE_TRACKING_PROVIDER_CONNECTION = "update:tracking-provider-connection",
+    DELETE_TRACKING_PROVIDER_CONNECTION = "delete:tracking-provider-connection",
+    CREATE_TRACKING_DEVICE_BINDING = "create:tracking-device-binding",
+    READ_TRACKING_DEVICE_BINDING = "read:tracking-device-binding",
+    UPDATE_TRACKING_DEVICE_BINDING = "update:tracking-device-binding",
+    DELETE_TRACKING_DEVICE_BINDING = "delete:tracking-device-binding",
+    READ_TRACKING_POSITION = "read:tracking-position",
+    READ_TRACKING_HISTORY = "read:tracking-history",
+    READ_TRACKING_OPERATIONS = "read:tracking-operations",
+    MANAGE_TRACKING_OPERATIONS = "manage:tracking-operations",
     CREATE_BENEFICIARY = "create:beneficiary",
     READ_BENEFICIARY = "read:beneficiary",
     UPDATE_BENEFICIARY = "update:beneficiary",

package/dist/types/modules/permission/enums/permissions-module.enum.d.ts CHANGED Viewed

@@ -2,10 +2,12 @@ export declare enum PermissionsModule {
     ORGANIZATION = "Organization",
     PARTNER = "Partner",
     CONTROL_CENTRE = "Control Centre",
+    ZONE = "Zone",
     USER = "User",
     ROLE = "Role",
     INCIDENT = "Grievance",
     RESPONSE_UNIT = "Response Unit",
+    TRACKING = "Tracking",
     BILLING = "Billing",
     NEWSFEED = "Newsfeed",
     SUPPORT = "Support"

package/dist/types/modules/role/enums/role.enum.d.ts CHANGED Viewed

@@ -6,11 +6,27 @@ export declare enum Roles {
     ORGANIZATION_BILLING_ADMIN = "Organization:Billing-Admin",
     ORGANIZATION_NEWSFEED_ADMIN = "Organization:Newsfeed-Admin",
     ORGANIZATION_PARTNERSHIPS_ADMIN = "Organization:Partnerships-Admin",
+    /**
+     * Manages response units and how they are tracked - provider connections,
+     * device bindings, tracking operations - across the whole organization.
+     */
+    ORGANIZATION_RESPONSE_UNITS_ADMIN = "Organization:Response-Units-Admin",
     CONTROL_CENTRE_ADMIN = "Control-Centre:Admin",
     CONTROL_CENTRE_USER = "Control-Centre:User",
+    /** The same job, confined to one control centre. */
+    CONTROL_CENTRE_RESPONSE_UNITS_ADMIN = "Control-Centre:Response-Units-Admin",
     RESPONDER = "Responder",
     MOBILE_USER = "Mobile-User"
 }
 /**
  * When defining new roles, also update the roles-by-scope.ts file and roles.data.ts file
+ *
+ * A role's SCOPE comes from which list in roles-by-scope.ts it is in, not from its
+ * name: the gateway (AccessScopeService), clarion-authentication
+ * (AuthorizationService) and clarion-socket (tracking rooms) all read those lists.
+ * A role in neither list gets no scope at all and every tenant-scoped call it
+ * makes fails closed.
+ *
+ * `users.roles` is a Postgres ENUM array, so a new value here also needs an
+ * ALTER TYPE migration in clarion-authentication before anybody can hold it.
  */

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "grm-shared-library",
-  "version": "1.1.208",
+  "version": "1.1.210",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",