mindoodb 0.0.88 → 0.0.90

package/dist/core/BaseMindooTenantDirectory.js

@@ -1444,24 +1444,52 @@ class BaseMindooTenantDirectory {
      * that grant and by the tenant admin; it may be deposited into by
      * identities whose grant lists the prefix in `depositPrefixes`; nobody
      * else gets anything. An unknown grant id leaves everyone but the admin out.
+     * `mbusy_` (free/busy) is the exception: other members read it read-only
+     * (`readOnly`, pushes refused) under the tenant's `freeBusy` setting, and
+     * the tenant admin reads it read-only as well (whatever `freeBusy` says).
      */
     async evaluatePersonalDatabaseAccess(input) {
         const head = await this.getDirectoryStateHead();
         const owner = (0, builtinDbInvariants_1.personalDatabaseOwner)(input.dbid, head.defaultPolicy?.personalDatabasePrefixes ?? []);
         if (!owner)
             return null;
-        if ((0, DirectoryStateNode_1.signingKeysEqual)(input.signingKey, this.tenant.getAdministrationPublicKey())) {
+        const isAdmin = (0, DirectoryStateNode_1.signingKeysEqual)(input.signingKey, this.tenant.getAdministrationPublicKey());
+        if (isAdmin && owner.prefix !== "mbusy_") {
             return { mode: "read", reason: "tenant admin" };
         }
         const grant = await this.loadGrantDocument(owner.grantDocId);
         if (grant && (0, grantKeys_1.extractActiveKeyPairs)(grant).some((pair) => (0, DirectoryStateNode_1.signingKeysEqual)(pair.signingPublicKey, input.signingKey))) {
             return { mode: "read", reason: "a device of the owner" };
         }
+        // Free/busy (§6.11): the tenant admin reads every person's busy times but,
+        // like every other member, does not write them (unless the admin key is a
+        // device of the owner, checked above).
+        if (isAdmin) {
+            return { mode: "read", readOnly: true, reason: "tenant admin (free/busy, read-only)" };
+        }
         const signerGrants = await this.grantsForSigningKey(input.signingKey);
         const listed = (grant, field) => Array.isArray(grant[field]) && grant[field].includes(owner.prefix);
         if (signerGrants.some((grant) => listed(grant, "accessPrefixes"))) {
             return { mode: "read", reason: `service access to ${owner.prefix}* granted` };
         }
+        // Free/busy (§6.11): other members read the owner's busy times, read-only,
+        // under the tenant's `freeBusy` setting. Nobody but the owner writes.
+        if (owner.prefix === "mbusy_" && grant && signerGrants.length > 0) {
+            const mode = head.defaultPolicy?.freeBusy ?? "members";
+            let allowed = mode === "members";
+            if (mode === "rules") {
+                const decision = await this.evaluateAccessForSigningKey({
+                    op: "doc_read",
+                    dbid: input.dbid,
+                    signingKey: input.signingKey,
+                    trustedTime: Number.MAX_SAFE_INTEGER,
+                });
+                allowed = decision.allowed && decision.matchedRuleId !== undefined;
+            }
+            if (allowed)
+                return { mode: "read", readOnly: true, reason: `free/busy (${mode})` };
+            return { mode: "none", reason: `free/busy of another person (${mode})` };
+        }
         const depositors = signerGrants.filter((grant) => listed(grant, "depositPrefixes"));
         if (depositors.length > 0) {
             // Document ids a deposit may use: the grant's `depositDocIdPrefixes`