iobroker.time-tracker 0.7.1 → 0.7.3

package/build/lib/web/api.js

@@ -38,6 +38,7 @@ var import_absences = require("../db/repositories/absences");
 var import_audit = require("../db/repositories/audit");
 var import_rfid = require("../db/repositories/rfid");
 var import_auth = require("../services/auth");
+var import_calendar = require("../services/calendar");
 var import_errors = require("../errors");
 var import_seed = require("../db/seed");
 var import_punch = require("../domain/punch");
@@ -377,20 +378,16 @@ function createApi(deps) {
   const emit = (event) => {
     events.publish({ ...event, atUtc: now() });
   };
-  function requireInsideEditWindow(context, ownerId, tsUtc) {
-    const actor = context.auth;
-    if (!actor || actor.user.id !== ownerId || actor.permissions.includes("time.edit_other")) {
+  function requireActiveAdministrator(userId, next) {
+    if (next.isActive && next.roleKeys.includes("admin")) {
       return;
     }
-    const days = settings.getNumber("edit_window_days", 0);
-    if (days <= 0) {
-      return;
-    }
-    if (tsUtc < now() - days * 86400) {
+    const remaining = users.list().some((user) => user.id !== userId && users.roles(user.id).includes("admin"));
+    if (!remaining) {
       throw (0, import_problem.problem)(
-        403,
-        "edit_window_closed",
-        `own punches may only be changed within ${days} day(s) (edit_window_days)`
+        409,
+        "last_administrator",
+        "the last active administrator cannot be deactivated or lose the admin role"
       );
     }
   }
@@ -771,7 +768,6 @@ function createApi(deps) {
     if (tsUtc === null) {
       throw new import_errors.ValidationError("tsUtc is required");
     }
-    requireInsideEditWindow(context, target, tsUtc);
     const timestamp = now();
     const stored = entries.insert({
       userId: target,
@@ -805,44 +801,11 @@ function createApi(deps) {
       { location: `/entries/${stored.entry.id}` }
     );
   });
-  const ICAL_CONTENT_TYPE = "text/calendar; charset=utf-8";
-  const CALENDAR_TTL = "PT2H";
-  const icalText = (value) => value.replace(/\\/g, "\\\\").replace(/;/g, "\\;").replace(/,/g, "\\,").replace(/\r?\n/g, "\\n");
-  const icalStamp = (seconds) => new Date(seconds * 1e3).toISOString().replace(/[-:]/g, "").replace(/\.\d{3}/, "");
-  const dayAfter = (date) => {
-    const [year, month, day] = date.split("-").map(Number);
-    return new Date(Date.UTC(year, month - 1, day + 1)).toISOString().slice(0, 10);
-  };
-  const calendarDocument = (user, list, stamp) => {
-    const lines = [
-      "BEGIN:VCALENDAR",
-      "VERSION:2.0",
-      "PRODID:-//ioBroker//time-tracker//EN",
-      "CALSCALE:GREGORIAN",
-      "METHOD:PUBLISH",
-      `X-WR-CALNAME:${icalText(`Abwesenheiten ${user.displayName}`)}`,
-      `REFRESH-INTERVAL;VALUE=DURATION:${CALENDAR_TTL}`,
-      `X-PUBLISHED-TTL:${CALENDAR_TTL}`
-    ];
-    for (const absence of list) {
-      const portion = absence.dayPortion < 1 ? ` (${absence.dayPortion})` : "";
-      lines.push(
-        "BEGIN:VEVENT",
-        `UID:absence-${absence.id}@time-tracker`,
-        `DTSTAMP:${icalStamp(stamp)}`,
-        `DTSTART;VALUE=DATE:${absence.dateFrom.replace(/-/g, "")}`,
-        `DTEND;VALUE=DATE:${dayAfter(absence.dateTo).replace(/-/g, "")}`,
-        `SUMMARY:${icalText(`${absence.typeName} (${absence.typeCode})${portion}`)}`,
-        absence.approval === "approved" ? "STATUS:CONFIRMED" : "STATUS:TENTATIVE",
-        absence.note ? `DESCRIPTION:${icalText(absence.note)}` : null,
-        "TRANSP:TRANSPARENT",
-        "END:VEVENT"
-      );
-    }
-    lines.push("END:VCALENDAR");
-    return `${lines.filter((line) => line !== null).join("\r\n")}\r
-`;
-  };
+  const calendarEmployee = (user) => ({
+    id: user.id,
+    displayName: user.displayName,
+    login: user.login
+  });
   const publicAbsence = (absence) => {
     var _a2, _b2;
     const type = absences.findType(absence.typeId);
@@ -1052,18 +1015,29 @@ function createApi(deps) {
     (context) => {
       var _a2;
       const token = ((_a2 = context.query("token")) != null ? _a2 : "").trim();
-      const user = token === "" ? null : users.findByCalendarToken(token);
-      if (!user || !user.isActive) {
+      const instanceToken = settings.get("calendar_token");
+      const company = instanceToken !== null && instanceToken !== "" && token === instanceToken;
+      const user = company || token === "" ? null : users.findByCalendarToken(token);
+      if (!company && (!user || !user.isActive)) {
         throw (0, import_problem.problem)(401, "invalid_credentials", "the calendar token is not valid");
       }
       const stamp = now();
-      const today = new Date(stamp * 1e3);
-      const year = today.getUTCFullYear();
-      const list = absences.withTypesInRange(user.id, `${year - 1}-01-01`, `${year + 1}-12-31`);
-      return (0, import_router.binary)(200, Buffer.from(calendarDocument(user, list, stamp), "utf8"), ICAL_CONTENT_TYPE, {
-        "content-disposition": 'inline; filename="time-tracker.ics"',
-        "cache-control": "no-store"
-      });
+      const year = new Date(stamp * 1e3).getUTCFullYear();
+      const from = `${year - 1}-01-01`;
+      const to = `${year + 1}-12-31`;
+      const owners = user ? [user] : users.list();
+      const employees = new Map(owners.map((employee) => [employee.id, calendarEmployee(employee)]));
+      const list = user ? absences.withTypesInRange(user.id, from, to) : absences.allInRange(from, to);
+      const name = user ? `Abwesenheiten ${user.displayName}` : import_calendar.COMPANY_CALENDAR_NAME;
+      return (0, import_router.binary)(
+        200,
+        Buffer.from((0, import_calendar.calendarDocument)(name, (0, import_calendar.absenceEvents)(list, employees, !user), stamp), "utf8"),
+        import_calendar.ICAL_CONTENT_TYPE,
+        {
+          "content-disposition": 'inline; filename="time-tracker.ics"',
+          "cache-control": "no-store"
+        }
+      );
     }
   );
   route("POST", "/calendar/token", { permission: "report.view_own", csrf: true }, (context) => {
@@ -1497,10 +1471,6 @@ function createApi(deps) {
     if (wantedTs !== null && !context.auth.permissions.includes("time.edit_other")) {
       throw (0, import_problem.problem)(403, "permission_denied", "request rejected (permission_denied: time.edit_other)");
     }
-    if (wantedTs !== null) {
-      requireInsideEditWindow(context, existing.userId, existing.tsUtc);
-      requireInsideEditWindow(context, existing.userId, wantedTs);
-    }
     const target = users.findById(existing.userId);
     if (!target) {
       throw new import_errors.NotFoundError(`user ${existing.userId} not found`);
@@ -1702,12 +1672,13 @@ function createApi(deps) {
     });
   });
   route("PATCH", "/users/:id", { permission: "user.edit", csrf: true }, (context) => {
-    var _a2, _b2, _c2;
+    var _a2, _b2, _c2, _d2;
     if (!context.auth) {
       throw (0, import_problem.problem)(401, "no_session", "request rejected (no_session)");
     }
     const id = numberParam(context, "id");
-    if (!users.findById(id)) {
+    const target = users.findById(id);
+    if (!target) {
       throw new import_errors.NotFoundError(`user ${id} not found`);
     }
     const body = context.jsonBody();
@@ -1770,19 +1741,25 @@ function createApi(deps) {
         now: now()
       });
     }
+    if (patch.isActive === false || roleKeys !== null) {
+      requireActiveAdministrator(id, {
+        isActive: (_b2 = patch.isActive) != null ? _b2 : target.isActive,
+        roleKeys: roleKeys != null ? roleKeys : users.roles(id)
+      });
+    }
     const updated = users.update({
       id,
       patch,
       reason: optionalString(body, "reason"),
       actorId: context.auth.user.id,
-      actorIp: (_b2 = context.request.remoteAddress) != null ? _b2 : null,
+      actorIp: (_c2 = context.request.remoteAddress) != null ? _c2 : null,
       now: now()
     });
     const roles = roleKeys ? users.setRoles({
       userId: id,
       roleKeys,
       actorId: context.auth.user.id,
-      actorIp: (_c2 = context.request.remoteAddress) != null ? _c2 : null,
+      actorIp: (_d2 = context.request.remoteAddress) != null ? _d2 : null,
       now: now()
     }) : users.roles(id);
     return (0, import_router.json)(200, { user: { ...publicUser(updated), roles } });