mftsccs-browser 2.2.36-beta → 2.2.38-beta

package/dist/types/DataStructures/AccessControl/AccessControlModels.d.ts

@@ -30,9 +30,9 @@ export interface BulkAccessRequest {
     targets: BulkAccessTarget[];
 }
 export interface BulkCheckAccessRequest {
-    accessId: number;
-    permissions: string[];
-    entityIds: number[];
+    accessIds: number[];
+    permission: string;
+    entityId?: number | null;
 }
 export interface AccessInheritanceRequest {
     accessId?: number;
@@ -42,6 +42,36 @@ export interface AccessInheritanceRequest {
 export interface SuperAdminRequest {
     accessId?: number;
 }
+/**
+ * Request model for parent access inheritance operations
+ * Mirrors C# ParentAccessInheritanceRequest
+ */
+export interface ParentAccessInheritanceRequest {
+    parentAccessId: number;
+    childAccessId?: number | null;
+}
+export interface ParentAccessInheritanceWithConceptRequest {
+    parentConceptId: number;
+    childConceptId?: number | null;
+}
+export interface BulkParentAccessInheritanceWithConceptRequest {
+    parentConceptId: number;
+    childConceptIds: number[];
+}
+export interface BulkParentAccessInheritanceResult {
+    childConceptId: number;
+    accessId: number;
+    success: boolean;
+    message?: string;
+}
+export interface SuperAdminWithConceptRequest {
+    conceptId: number;
+}
+export interface AccessInheritanceWithConceptRequest {
+    conceptId: number;
+    connectionTypeId?: number;
+    enable?: boolean;
+}
 export interface ConceptAccessRequest {
     conceptIds: number;
     permission: string;

package/dist/types/Services/AccessControl/APIClientService.d.ts

@@ -6,7 +6,7 @@
  *
  * This is the TypeScript equivalent of the C# APIClientService class.
  */
-import { AccessRequest, AccessResult, AccessControlAPIResponse, BulkAccessRequest, BulkCheckAccessRequest, AccessInheritanceRequest, SuperAdminRequest, BulkConceptAccessRequest, ConceptAccessRequest } from '../../DataStructures/AccessControl/AccessControlModels';
+import { AccessRequest, AccessResult, AccessControlAPIResponse, BulkAccessRequest, BulkCheckAccessRequest, AccessInheritanceRequest, SuperAdminRequest, BulkConceptAccessRequest, ConceptAccessRequest, ParentAccessInheritanceRequest, ParentAccessInheritanceWithConceptRequest, BulkParentAccessInheritanceWithConceptRequest, BulkParentAccessInheritanceResult, SuperAdminWithConceptRequest, AccessInheritanceWithConceptRequest } from '../../DataStructures/AccessControl/AccessControlModels';
 export interface IAPIClientService {
     assignAccessAsync(request: AccessRequest): Promise<AccessControlAPIResponse<AccessResult>>;
     checkAccessAsync(request: AccessRequest): Promise<AccessControlAPIResponse<AccessResult>>;
@@ -22,6 +22,21 @@ export interface IAPIClientService {
     assignSuperAdminAccessAsync(request: SuperAdminRequest): Promise<AccessControlAPIResponse>;
     revokeSuperAdminAccessAsync(request: SuperAdminRequest): Promise<AccessControlAPIResponse>;
     checkSuperAdminStatusAsync(accessId: number): Promise<AccessControlAPIResponse>;
+    setParentAccessInheritanceAsync(request: ParentAccessInheritanceRequest): Promise<AccessControlAPIResponse>;
+    removeParentAccessInheritanceAsync(accessId: number, parentAccessId?: number): Promise<AccessControlAPIResponse>;
+    hasParentAccessInheritanceAsync(accessId: number, parentAccessId?: number): Promise<AccessControlAPIResponse>;
+    getParentAccessIdAsync(accessId: number): Promise<AccessControlAPIResponse>;
+    setParentAccessInheritanceByConceptAsync(request: ParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse>;
+    setParentAccessInheritanceBulkByConceptAsync(request: BulkParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse<BulkParentAccessInheritanceResult[]>>;
+    removeParentAccessInheritanceByConceptAsync(childConceptId: number, parentConceptId?: number): Promise<AccessControlAPIResponse>;
+    removeParentAccessInheritanceBulkByConceptAsync(request: BulkParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse<BulkParentAccessInheritanceResult[]>>;
+    hasParentAccessInheritanceByConceptAsync(childConceptId: number, parentConceptId?: number): Promise<AccessControlAPIResponse>;
+    getParentAccessIdByConceptAsync(childConceptId: number): Promise<AccessControlAPIResponse>;
+    assignSuperAdminByConceptAsync(request: SuperAdminWithConceptRequest): Promise<AccessControlAPIResponse>;
+    revokeSuperAdminByConceptAsync(request: SuperAdminWithConceptRequest): Promise<AccessControlAPIResponse>;
+    checkSuperAdminByConceptAsync(conceptId: number): Promise<AccessControlAPIResponse>;
+    setAccessInheritanceByConceptAsync(request: AccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse>;
+    getAccessInheritanceStatusByConceptAsync(conceptId: number, connectionTypeId?: number): Promise<AccessControlAPIResponse>;
 }
 export declare class APIClientService implements IAPIClientService {
     private static get baseUrl();
@@ -88,5 +103,65 @@ export declare class APIClientService implements IAPIClientService {
      * Revoke access records for multiple concepts in bulk
      */
     revokeConceptAccessBulkAsync(request: BulkConceptAccessRequest): Promise<AccessControlAPIResponse<AccessResult[]>>;
+    /**
+     * Set parent access inheritance link
+     */
+    setParentAccessInheritanceAsync(request: ParentAccessInheritanceRequest): Promise<AccessControlAPIResponse>;
+    /**
+     * Remove parent access inheritance link
+     */
+    removeParentAccessInheritanceAsync(accessId: number, parentAccessId?: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Check if parent access inheritance link exists
+     */
+    hasParentAccessInheritanceAsync(accessId: number, parentAccessId?: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Get the parent access ID for a given access ID
+     */
+    getParentAccessIdAsync(accessId: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Set parent access inheritance by concept IDs (server resolves conceptId → accessId)
+     */
+    setParentAccessInheritanceByConceptAsync(request: ParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse>;
+    /**
+     * Set parent access inheritance for multiple children with one parent (concept-based)
+     */
+    setParentAccessInheritanceBulkByConceptAsync(request: BulkParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse<BulkParentAccessInheritanceResult[]>>;
+    /**
+     * Remove parent access inheritance by concept IDs
+     */
+    removeParentAccessInheritanceByConceptAsync(childConceptId: number, parentConceptId?: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Remove parent access inheritance for multiple children (concept-based)
+     */
+    removeParentAccessInheritanceBulkByConceptAsync(request: BulkParentAccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse<BulkParentAccessInheritanceResult[]>>;
+    /**
+     * Check if parent access inheritance exists by concept IDs
+     */
+    hasParentAccessInheritanceByConceptAsync(childConceptId: number, parentConceptId?: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Get the parent access ID by child concept ID
+     */
+    getParentAccessIdByConceptAsync(childConceptId: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Assign super admin by concept ID
+     */
+    assignSuperAdminByConceptAsync(request: SuperAdminWithConceptRequest): Promise<AccessControlAPIResponse>;
+    /**
+     * Revoke super admin by concept ID
+     */
+    revokeSuperAdminByConceptAsync(request: SuperAdminWithConceptRequest): Promise<AccessControlAPIResponse>;
+    /**
+     * Check super admin status by concept ID
+     */
+    checkSuperAdminByConceptAsync(conceptId: number): Promise<AccessControlAPIResponse>;
+    /**
+     * Set access inheritance by concept ID
+     */
+    setAccessInheritanceByConceptAsync(request: AccessInheritanceWithConceptRequest): Promise<AccessControlAPIResponse>;
+    /**
+     * Get access inheritance status by concept ID
+     */
+    getAccessInheritanceStatusByConceptAsync(conceptId: number, connectionTypeId?: number): Promise<AccessControlAPIResponse>;
 }
 export default APIClientService;

package/dist/types/Services/AccessControl/AccessControl.d.ts

@@ -2,21 +2,22 @@
  * AccessControlService
  *
  * This service provides access control functionality including:
- * - Check access for concepts with complex permission logic
+ * - 5-phase bulk access check with BFS inheritance graph traversal
  * - Assign and revoke access permissions
  * - Bulk operations for access management
  * - Super admin checks
- * - Access inheritance management
+ * - Access inheritance management (including parent access inheritance)
  *
- * This is the TypeScript equivalent of the C# AccessControlService class.
+ * This is the TypeScript equivalent of the C# AccessControlService class (v3.4.0).
  */
-import { AccessResult, BulkConceptAccessRequest } from '../../DataStructures/AccessControl/AccessControlModels';
+import { AccessResult, BulkConceptAccessRequest, BulkParentAccessInheritanceResult } from '../../DataStructures/AccessControl/AccessControlModels';
 import { IAPIClientService } from './APIClientService';
 /**
  * Interface for the Access Control Service
  */
 export interface IAccessControlService {
     checkAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
+    checkAccessBulk(conceptIds: number[], permission: string, entityId?: number | null): Promise<Map<number, boolean>>;
     getConceptIdsWithPermission(permission: string, conceptIdsFilter: number[], entityId?: number | null): Promise<number[]>;
     assignAccess(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
     revokeAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
@@ -24,6 +25,12 @@ export interface IAccessControlService {
     setAccessInheritance(conceptId: number): Promise<boolean>;
     getAccessInheritanceStatus(conceptId: number, connectionTypeId?: number): Promise<boolean>;
     setAccessInheritanceStatus(conceptId: number, isEnabled: boolean, connectionTypeId?: number): Promise<boolean>;
+    setParentAccessInheritance(conceptId: number, parentConceptId: number): Promise<number>;
+    setParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId: number): Promise<BulkParentAccessInheritanceResult[]>;
+    removeParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<string>;
+    removeParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId?: number): Promise<BulkParentAccessInheritanceResult[]>;
+    hasParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<boolean>;
+    getParentAccessId(conceptId: number): Promise<number | null>;
     isSuperAdmin(entityId: number): Promise<boolean>;
     assignSuperAdmin(entityId: number): Promise<number>;
     revokeSuperAdmin(entityId: number): Promise<string>;
@@ -32,156 +39,69 @@ export declare class AccessControlService implements IAccessControlService {
     private readonly apiClient;
     constructor(apiClient?: IAPIClientService);
     /**
-     * Check whether a user/entity has the specified permission.
-     * Returns true if allowed, false otherwise.
-     *
-     * @param conceptId - The ID of the concept to check access for
-     * @param permission - The permission to check (read, write, execute, delete)
-     * @param entityId - Optional entity ID to check access for
-     * @returns Promise<boolean> - True if access is granted, false otherwise
+     * Check whether a user/entity has the specified permission on a single concept.
+     * Delegates to checkAccessBulk for full inheritance + group resolution.
      */
     checkAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
     /**
-     * Get all accessIds which have a certain permission for an entity.
-     * Optional filter by a list of accessIds.
+     * 5-phase bulk access check algorithm.
+     * Matches the C# AccessControlService.CheckAccessBulk implementation.
      *
-     * @param permission - The permission to check
-     * @param conceptIdsFilter - List of concept IDs to filter
-     * @param entityId - Optional entity ID
-     * @returns Promise<number[]> - Array of concept IDs that have the permission
+     * Phase 1: Super-admin short-circuit
+     * Phase 2: Fast-path classification (owner, public, type concepts)
+     * Phase 3: BFS inheritance graph resolution (3 sources)
+     * Phase 4: Bulk access decision resolution (API)
+     * Phase 5: Grant-only merge per concept
      */
-    getConceptIdsWithPermission(permission: string, conceptIdsFilter: number[], entityId?: number | null): Promise<number[]>;
+    checkAccessBulk(conceptIds: number[], permission: string, entityId?: number | null): Promise<Map<number, boolean>>;
     /**
-     * Assign access permissions to multiple targets in bulk
-     *
-     * @param request - Bulk access request containing targets
-     * @returns Promise<AccessResult[]> - Array of access results
+     * Get all conceptIds which have a certain permission for an entity.
+     * Delegates to checkAccessBulk for full inheritance support.
      */
-    assignAccess(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
+    getConceptIdsWithPermission(permission: string, conceptIdsFilter: number[], entityId?: number | null): Promise<number[]>;
     /**
-     * Revoke access permission from an entity
+     * Resolve inheritance graph via 3-source BFS, depth-limited to MAX_BFS_DEPTH.
      *
-     * @param conceptId - The concept ID to revoke access for
-     * @param permission - The permission to revoke
-     * @param entityId - Optional entity ID
-     * @returns Promise<boolean> - True if successfully revoked, false otherwise
+     * Source 1: FreeSchema internal connections ("the_parent_access_inheritance")
+     * Source 2: Explicit parent access links (via Access API)
+     * Source 3: Concept-connection access inheritance
      */
+    private resolveBulkInheritanceGraph;
+    private resolveBulkDecisions;
+    private resolveSubjects;
+    private hasAnyGrant;
+    assignAccess(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
     revokeAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
     revokeAccessBulk(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
-    /**
-     * Set access inheritance for a concept
-     *
-     * @param conceptId - The concept ID to set inheritance for
-     * @returns Promise<boolean> - True if successful, false otherwise
-     */
     setAccessInheritance(conceptId: number): Promise<boolean>;
-    /**
-     * Get access inheritance status for a concept
-     *
-     * @param conceptId - The concept ID to check
-     * @param connectionTypeId - The connection type ID (default: 999)
-     * @returns Promise<boolean> - True if inheritance is enabled, false otherwise
-     */
     getAccessInheritanceStatus(conceptId: number, connectionTypeId?: number): Promise<boolean>;
-    /**
-     * Set access inheritance status for a concept
-     *
-     * @param conceptId - The concept ID to set inheritance status for
-     * @param isEnabled - Whether to enable or disable inheritance
-     * @param connectionTypeId - The connection type ID (default: 999)
-     * @returns Promise<boolean> - True if successful, false otherwise
-     */
     setAccessInheritanceStatus(conceptId: number, isEnabled: boolean, connectionTypeId?: number): Promise<boolean>;
-    /**
-     * Check if an entity is a super admin
-     *
-     * @param entityId - The entity ID to check
-     * @returns Promise<boolean> - True if super admin, false otherwise
-     */
+    setParentAccessInheritance(conceptId: number, parentConceptId: number): Promise<number>;
+    setParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId: number): Promise<BulkParentAccessInheritanceResult[]>;
+    removeParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<string>;
+    removeParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId?: number): Promise<BulkParentAccessInheritanceResult[]>;
+    hasParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<boolean>;
+    getParentAccessId(conceptId: number): Promise<number | null>;
     isSuperAdmin(entityId: number): Promise<boolean>;
-    /**
-     * Assign super admin access to an entity
-     *
-     * @param entityId - The entity ID to grant super admin access to
-     * @returns Promise<number> - The entity ID if successful, 0 otherwise
-     */
     assignSuperAdmin(entityId: number): Promise<number>;
-    /**
-     * Revoke super admin access from an entity
-     *
-     * @param entityId - The entity ID to revoke super admin access from
-     * @returns Promise<string> - Success message or error message
-     */
     revokeSuperAdmin(entityId: number): Promise<string>;
-    /**
-     * Internal method to check access via API
-     *
-     * @param accessId - The access ID to check
-     * @param permission - The permission to check
-     * @param entityId - Optional entity ID
-     * @returns Promise<boolean> - True if access is granted, false otherwise
-     */
-    private checkAccessInternal;
-    /**
-     * Static method to check if an entity is a super admin
-     * Uses the default singleton instance
-     *
-     * @param entityId - The entity ID to check
-     * @returns Promise<boolean> - True if super admin, false otherwise
-     */
+    makeConceptPrivate(conceptId: number): Promise<boolean>;
+    private static parseBoolData;
+    private static parseIntData;
     static isSuperAdmin(entityId: number): Promise<boolean>;
-    /**
-     * Static method to assign super admin access
-     * Uses the default singleton instance
-     *
-     * @param entityId - The entity ID to grant super admin access to
-     * @returns Promise<number> - The entity ID if successful, 0 otherwise
-     */
     static assignSuperAdmin(entityId: number): Promise<number>;
-    /**
-     * Static method to revoke super admin access
-     * Uses the default singleton instance
-     *
-     * @param entityId - The entity ID to revoke super admin access from
-     * @returns Promise<string> - Success message or error message
-     */
     static revokeSuperAdmin(entityId: number): Promise<string>;
-    /**
-     * Static method to check access
-     * Uses the default singleton instance
-     *
-     * @param conceptId - The concept ID to check access for
-     * @param permission - The permission to check
-     * @param entityId - Optional entity ID
-     * @returns Promise<boolean> - True if access is granted, false otherwise
-     */
     static checkAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
-    /**
-     * Static method to assign access in bulk
-     * Uses the default singleton instance
-     *
-     * @param request - BulkConceptAccessRequest containing conceptIds and permissions
-     * @returns Promise<AccessResult[]> - Array of access results
-     */
+    static checkAccessBulk(conceptIds: number[], permission: string, entityId?: number | null): Promise<Map<number, boolean>>;
     static assignAccess(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
-    /**
-     * Static method to revoke access
-     * Uses the default singleton instance
-     *
-     * @param conceptId - The concept ID to revoke access for
-     * @param permission - The permission to revoke
-     * @param entityId - Optional entity ID
-     * @returns Promise<boolean> - True if successfully revoked, false otherwise
-     */
     static revokeAccess(conceptId: number, permission: string, entityId?: number | null): Promise<boolean>;
-    /**
-     * Static method to revoke concept access in bulk
-     * Uses the default singleton instance
-     *
-     * @param request - BulkConceptAccessRequest containing conceptIds and permissions
-     * @returns Promise<AccessResult[]> - Array of access results
-     */
     static revokeAccessBulk(request: BulkConceptAccessRequest): Promise<AccessResult[]>;
+    static setParentAccessInheritance(conceptId: number, parentConceptId: number): Promise<number>;
+    static setParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId: number): Promise<BulkParentAccessInheritanceResult[]>;
+    static removeParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<string>;
+    static removeParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId?: number): Promise<BulkParentAccessInheritanceResult[]>;
+    static hasParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<boolean>;
+    static getParentAccessId(conceptId: number): Promise<number | null>;
 }
 /**
  * Get the default singleton instance of AccessControlService

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mftsccs-browser",
-  "version": "2.2.36-beta",
+  "version": "2.2.38-beta",
 
   "environment": "production",
   "description": "Full Pack of concept and connection system",