kuzzle 2.19.2 → 2.19.3

package/lib/core/security/profileRepository.js

@@ -68,7 +68,7 @@ class ProfileRepository extends repository_1.default {
         });
         this.module = securityModule;
         this.profiles = new Map();
-        super.collection = 'profiles';
+        super.collection = "profiles";
         super.ObjectConstructor = profile_1.Profile;
     }
     init() {
@@ -80,7 +80,7 @@ class ProfileRepository extends repository_1.default {
          * @returns {Profile}
          * @throws If already exists or if the policies are invalid
          */
-        global.kuzzle.onAsk('core:security:profile:create', (id, policies, opts) => this.create(id, policies, opts));
+        global.kuzzle.onAsk("core:security:profile:create", (id, policies, opts) => this.create(id, policies, opts));
         /**
          * Creates a new profile, or replaces it if it already exists
          * @param  {String} id
@@ -89,7 +89,7 @@ class ProfileRepository extends repository_1.default {
          * @returns {Profile}
          * @throws If the profile policies are invalid
          */
-        global.kuzzle.onAsk('core:security:profile:createOrReplace', (id, policies, opts) => this.createOrReplace(id, policies, opts));
+        global.kuzzle.onAsk("core:security:profile:createOrReplace", (id, policies, opts) => this.createOrReplace(id, policies, opts));
         /**
          * Deletes an existing profile
          * @param  {String} id
@@ -97,35 +97,35 @@ class ProfileRepository extends repository_1.default {
          * @throws If the profile doesn't exist, if it is protected, or if it's
          *         still in use
          */
-        global.kuzzle.onAsk('core:security:profile:delete', (id, opts) => this.deleteById(id, opts));
+        global.kuzzle.onAsk("core:security:profile:delete", (id, opts) => this.deleteById(id, opts));
         /**
          * Loads and returns an existing profile
          * @param  {String} id - profile identifier
          * @returns {Profile}
          * @throws {NotFoundError} If the profile doesn't exist
          */
-        global.kuzzle.onAsk('core:security:profile:get', id => this.load(id));
+        global.kuzzle.onAsk("core:security:profile:get", (id) => this.load(id));
         /**
          * Invalidates the RAM cache from the given profile ID. If none is provided,
          * the entire cache is emptied.
          *
          * @param  {String} [id] - profile identifier
          */
-        global.kuzzle.onAsk('core:security:profile:invalidate', id => this.invalidate(id));
+        global.kuzzle.onAsk("core:security:profile:invalidate", (id) => this.invalidate(id));
         /**
          * Gets multiple profiles
          * @param  {Array} ids
          * @returns {Array.<Profile>}
          * @throws If one or more profiles don't exist
          */
-        global.kuzzle.onAsk('core:security:profile:mGet', ids => this.loadProfiles(ids));
+        global.kuzzle.onAsk("core:security:profile:mGet", (ids) => this.loadProfiles(ids));
         /**
          * Fetches the next page of search results
          * @param  {String} id - scroll identifier
          * @param  {String} [ttl] - refresh the scroll results TTL
          * @returns {Object} Search results
          */
-        global.kuzzle.onAsk('core:security:profile:scroll', (id, ttl) => this.scroll(id, ttl));
+        global.kuzzle.onAsk("core:security:profile:scroll", (id, ttl) => this.scroll(id, ttl));
         /**
          * Searches profiles
          *
@@ -134,12 +134,12 @@ class ProfileRepository extends repository_1.default {
          *
          * @returns {Object} Search results
          */
-        global.kuzzle.onAsk('core:security:profile:search', (searchBody, opts) => this.search(searchBody, opts));
+        global.kuzzle.onAsk("core:security:profile:search", (searchBody, opts) => this.search(searchBody, opts));
         /**
          * Removes all existing profiles and invalidates the RAM cache
          * @param  {Object} opts (refresh)
          */
-        global.kuzzle.onAsk('core:security:profile:truncate', opts => this.truncate(opts));
+        global.kuzzle.onAsk("core:security:profile:truncate", (opts) => this.truncate(opts));
         /**
          * Updates an existing profile using a partial content
          * @param  {String} id - profile identifier to update
@@ -147,7 +147,7 @@ class ProfileRepository extends repository_1.default {
          * @param  {Object} opts - refresh, retryOnConflict, userId (used for metadata)
          * @returns {Profile} Updated profile
          */
-        global.kuzzle.onAsk('core:security:profile:update', (id, content, opts) => this.update(id, content, opts));
+        global.kuzzle.onAsk("core:security:profile:update", (id, content, opts) => this.update(id, content, opts));
     }
     /**
      * Loads a Profile
@@ -181,14 +181,13 @@ class ProfileRepository extends repository_1.default {
      */
     async loadProfiles(profileIds = []) {
         const profiles = [];
-        if (profileIds.some(p => typeof p !== 'string')) {
-            throw kerror.get('api', 'assert', 'invalid_type', 'profileIds', 'string[]');
+        if (profileIds.some((p) => typeof p !== "string")) {
+            throw kerror.get("api", "assert", "invalid_type", "profileIds", "string[]");
         }
         for (const id of profileIds) {
             let profile = this.profiles.get(id);
             if (!profile) {
-                profile = this.loadOneFromDatabase(id)
-                    .then(p => {
+                profile = this.loadOneFromDatabase(id).then((p) => {
                     p.optimizedPolicies = this.optimizePolicies(p.policies);
                     this.profiles.set(id, p);
                     return p;
@@ -207,7 +206,7 @@ class ProfileRepository extends repository_1.default {
         }
         catch (err) {
             if (err.status === 404) {
-                throw kerror.get('security', 'profile', 'not_found', id);
+                throw kerror.get("security", "profile", "not_found", id);
             }
             throw err;
         }
@@ -220,7 +219,7 @@ class ProfileRepository extends repository_1.default {
      * @param {Object} [opts]
      * @returns {Profile}
      */
-    async _createOrReplace(id, content, { method, refresh = 'false', strict, userId = null } = {}) {
+    async _createOrReplace(id, content, { method, refresh = "false", strict, userId = null, } = {}) {
         const profile = await this.fromDTO({
             // content should be first: ignores _id and _kuzzle_info in it
             ...content,
@@ -244,7 +243,7 @@ class ProfileRepository extends repository_1.default {
      */
     async create(id, content, opts = {}) {
         return this._createOrReplace(id, content, {
-            method: 'create',
+            method: "create",
             ...opts,
         });
     }
@@ -258,7 +257,7 @@ class ProfileRepository extends repository_1.default {
      */
     async createOrReplace(id, content, opts = {}) {
         return this._createOrReplace(id, content, {
-            method: 'createOrReplace',
+            method: "createOrReplace",
             ...opts,
         });
     }
@@ -284,7 +283,7 @@ class ProfileRepository extends repository_1.default {
             },
         });
         return this.validateAndSaveProfile(updated, {
-            method: 'update',
+            method: "update",
             refresh,
             retryOnConflict,
             strict,
@@ -304,42 +303,42 @@ class ProfileRepository extends repository_1.default {
     /**
      * @override
      */
-    async delete(profile, { refresh = 'false', onAssignedUsers = 'fail', userId = '-1', } = {}) {
-        if (['admin', 'default', 'anonymous'].includes(profile._id)) {
-            throw kerror.get('security', 'profile', 'cannot_delete');
+    async delete(profile, { refresh = "false", onAssignedUsers = "fail", userId = "-1" } = {}) {
+        if (["admin", "default", "anonymous"].includes(profile._id)) {
+            throw kerror.get("security", "profile", "cannot_delete");
         }
         const query = {
             terms: {
-                'profileIds': [profile._id]
-            }
+                profileIds: [profile._id],
+            },
         };
-        if (onAssignedUsers === 'remove') {
+        if (onAssignedUsers === "remove") {
             const batch = [];
             let treated = 0;
-            let userPage = await this.module.user.search({ query }, { scroll: '1m', size: 100 });
+            let userPage = await this.module.user.search({ query }, { scroll: "1m", size: 100 });
             while (treated < userPage.total) {
                 batch.length = 0;
                 for (const user of userPage.hits) {
-                    user.profileIds = user.profileIds.filter(e => e !== profile._id);
+                    user.profileIds = user.profileIds.filter((e) => e !== profile._id);
                     if (user.profileIds.length === 0) {
-                        user.profileIds.push('anonymous');
+                        user.profileIds.push("anonymous");
                     }
                     batch.push(this.module.user.update(user._id, user.profileIds, user, {
                         refresh,
-                        userId
+                        userId,
                     }));
                 }
                 await bluebird_1.default.all(batch);
                 treated += userPage.hits.length;
                 if (treated < userPage.total) {
-                    userPage = await this.module.user.scroll(userPage.scrollId, '1m');
+                    userPage = await this.module.user.scroll(userPage.scrollId, "1m");
                 }
             }
         }
         else {
             const hits = await this.module.user.search({ query }, { from: 0, size: 1 });
             if (hits.total > 0) {
-                throw kerror.get('security', 'profile', 'in_use');
+                throw kerror.get("security", "profile", "in_use");
             }
         }
         await this.deleteFromDatabase(profile._id, { refresh });
@@ -354,7 +353,7 @@ class ProfileRepository extends repository_1.default {
      */
     serializeToDatabase(profile) {
         // avoid the profile var mutation
-        return (0, lodash_1.omit)(profile, ['_id']);
+        return (0, lodash_1.omit)(profile, ["_id"]);
     }
     /**
      * Given a Profile object, validates its definition and if OK, persist it to the database.
@@ -369,17 +368,21 @@ class ProfileRepository extends repository_1.default {
      *                                     applied on existing indexes/collections
      * @returns {Promise<Profile>}
      **/
-    async validateAndSaveProfile(profile, { method, refresh, retryOnConflict, strict } = {}) {
-        const policiesRoles = profile.policies.map(p => p.roleId);
+    async validateAndSaveProfile(profile, { method, refresh, retryOnConflict, strict, } = {}) {
+        const policiesRoles = profile.policies.map((p) => p.roleId);
         // Assert: all roles must exist
         await this.module.role.loadRoles(policiesRoles);
         await profile.validateDefinition({ strict });
-        if (profile._id === 'anonymous'
-            && policiesRoles.indexOf('anonymous') === -1) {
-            throw kerror.get('security', 'profile', 'missing_anonymous_role');
+        if (profile._id === "anonymous" &&
+            policiesRoles.indexOf("anonymous") === -1) {
+            throw kerror.get("security", "profile", "missing_anonymous_role");
         }
         profile.optimizedPolicies = undefined; // Remove optimized policies
-        await super.persistToDatabase(profile, { method, refresh, retryOnConflict });
+        await super.persistToDatabase(profile, {
+            method,
+            refresh,
+            retryOnConflict,
+        });
         const updatedProfile = await this.loadOneFromDatabase(profile._id);
         // Recompute optimized policies based on new policies
         updatedProfile.optimizedPolicies = this.optimizePolicies(updatedProfile.policies);
@@ -394,16 +397,16 @@ class ProfileRepository extends repository_1.default {
         const profile = await super.fromDTO(dto);
         // force "default" role/policy if the profile does not have any role in it
         if (!profile.policies || profile.policies.length === 0) {
-            profile.policies = [{ roleId: 'default' }];
+            profile.policies = [{ roleId: "default" }];
         }
-        if (profile.constructor._hash('') === false) {
-            profile.constructor._hash = obj => global.kuzzle.hash(obj);
+        if (profile.constructor._hash("") === false) {
+            profile.constructor._hash = (obj) => global.kuzzle.hash(obj);
         }
-        const policiesRoles = profile.policies.map(p => p.roleId);
+        const policiesRoles = profile.policies.map((p) => p.roleId);
         const roles = await this.module.role.loadRoles(policiesRoles);
         // Fail if not all roles are found
-        if (roles.some(r => r === null)) {
-            throw kerror.get('security', 'profile', 'cannot_hydrate');
+        if (roles.some((r) => r === null)) {
+            throw kerror.get("security", "profile", "cannot_hydrate");
         }
         return profile;
     }