node-type-registry 0.23.0 → 0.24.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -6,18 +6,10 @@ exports.AuthzAppMembership = {
|
|
|
6
6
|
slug: 'authz_app_membership_check',
|
|
7
7
|
category: 'authz',
|
|
8
8
|
display_name: 'App Membership Check',
|
|
9
|
-
description: 'App-level membership check (membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table.
|
|
9
|
+
description: 'App-level membership check (hardcoded membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table. For entity-scoped checks (org, channel, etc.), use AuthzEntityMembership instead.',
|
|
10
10
|
parameter_schema: {
|
|
11
11
|
type: 'object',
|
|
12
12
|
properties: {
|
|
13
|
-
membership_type: {
|
|
14
|
-
type: ['integer', 'string'],
|
|
15
|
-
description: 'Scope: 1=app, 2=org, 3+=dynamic entity types (or string name resolved via membership_types_module)',
|
|
16
|
-
},
|
|
17
|
-
entity_type: {
|
|
18
|
-
type: 'string',
|
|
19
|
-
description: "Entity type prefix (e.g. 'channel', 'department'). Resolved to membership_type integer via memberships_module lookup. Use instead of membership_type for readability.",
|
|
20
|
-
},
|
|
21
13
|
permission: {
|
|
22
14
|
type: 'string',
|
|
23
15
|
description: 'Single permission name to check (resolved to bitstring mask)',
|
|
@@ -297,10 +297,8 @@ export interface SearchVectorParams {
|
|
|
297
297
|
}
|
|
298
298
|
/** Allows all access. Generates TRUE expression. */
|
|
299
299
|
export type AuthzAllowAllParams = {};
|
|
300
|
-
/** App-level membership check (membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table.
|
|
300
|
+
/** App-level membership check (hardcoded membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table. For entity-scoped checks (org, channel, etc.), use AuthzEntityMembership instead. */
|
|
301
301
|
export interface AuthzAppMembershipParams {
|
|
302
|
-
membership_type?: number | string;
|
|
303
|
-
entity_type?: string;
|
|
304
302
|
permission?: string;
|
|
305
303
|
permissions?: string[];
|
|
306
304
|
is_admin?: boolean;
|
|
@@ -3,18 +3,10 @@ export const AuthzAppMembership = {
|
|
|
3
3
|
slug: 'authz_app_membership_check',
|
|
4
4
|
category: 'authz',
|
|
5
5
|
display_name: 'App Membership Check',
|
|
6
|
-
description: 'App-level membership check (membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table.
|
|
6
|
+
description: 'App-level membership check (hardcoded membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table. For entity-scoped checks (org, channel, etc.), use AuthzEntityMembership instead.',
|
|
7
7
|
parameter_schema: {
|
|
8
8
|
type: 'object',
|
|
9
9
|
properties: {
|
|
10
|
-
membership_type: {
|
|
11
|
-
type: ['integer', 'string'],
|
|
12
|
-
description: 'Scope: 1=app, 2=org, 3+=dynamic entity types (or string name resolved via membership_types_module)',
|
|
13
|
-
},
|
|
14
|
-
entity_type: {
|
|
15
|
-
type: 'string',
|
|
16
|
-
description: "Entity type prefix (e.g. 'channel', 'department'). Resolved to membership_type integer via memberships_module lookup. Use instead of membership_type for readability.",
|
|
17
|
-
},
|
|
18
10
|
permission: {
|
|
19
11
|
type: 'string',
|
|
20
12
|
description: 'Single permission name to check (resolved to bitstring mask)',
|
|
@@ -297,10 +297,8 @@ export interface SearchVectorParams {
|
|
|
297
297
|
}
|
|
298
298
|
/** Allows all access. Generates TRUE expression. */
|
|
299
299
|
export type AuthzAllowAllParams = {};
|
|
300
|
-
/** App-level membership check (membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table.
|
|
300
|
+
/** App-level membership check (hardcoded membership_type=1). Verifies the user has app membership (optionally with specific permission) without binding to any entity from the row. Uses EXISTS subquery against SPRT table. For entity-scoped checks (org, channel, etc.), use AuthzEntityMembership instead. */
|
|
301
301
|
export interface AuthzAppMembershipParams {
|
|
302
|
-
membership_type?: number | string;
|
|
303
|
-
entity_type?: string;
|
|
304
302
|
permission?: string;
|
|
305
303
|
permissions?: string[];
|
|
306
304
|
is_admin?: boolean;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "node-type-registry",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.24.0",
|
|
4
4
|
"description": "Node type definitions for the Constructive blueprint system. Single source of truth for all Authz*, Data*, Relation*, and View* node types.",
|
|
5
5
|
"author": "Constructive <developers@constructive.io>",
|
|
6
6
|
"main": "index.js",
|
|
@@ -47,5 +47,5 @@
|
|
|
47
47
|
"registry",
|
|
48
48
|
"graphile"
|
|
49
49
|
],
|
|
50
|
-
"gitHead": "
|
|
50
|
+
"gitHead": "04633dc47399ffc9a5cefacfb0a90451acee988d"
|
|
51
51
|
}
|