not-node 6.3.93 → 6.3.96

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "not-node",
-	"version": "6.3.93",
+	"version": "6.3.96",
 	"description": "node complimentary part for client side notFramework.",
 	"main": "index.js",
 	"scripts": {

package/src/cli/actions/entity.mjs

@@ -3,7 +3,7 @@ import { resolve } from "node:path";
 import { createEntity } from "../lib/entity.mjs";
 import Logger from "../lib/log.mjs";
 import { loadProjectConfig } from "../lib/project.mjs";
-import { getProjectSiteDir } from "../lib/fs.mjs";
+import { getProjectSiteDir, findAllFields } from "../lib/fs.mjs";
 
 export default (program, { CWD }) => {
     program
@@ -27,11 +27,12 @@ export default (program, { CWD }) => {
                 siteDir,
                 infoFromManifest.serverModulesDir
             );
+            const allFields = await findAllFields(siteDir, modulesDir);
             console.log("creating server module in", modulesDir);
             const ProjectConfig = {
                 path: opts.dir,
                 ...infoFromManifest,
             };
-            await createEntity(modulesDir, ProjectConfig);
+            await createEntity(modulesDir, ProjectConfig, allFields);
         });
 };

package/src/cli/lib/entity.mjs

@@ -1,6 +1,9 @@
 import { firstLetterToLower } from "../../../src/common.js";
 import { resolve } from "node:path";
 import inquirer from "inquirer";
+import inquirerPrompt from "inquirer-autocomplete-prompt";
+
+inquirer.registerPrompt("autocomplete", inquirerPrompt);
 import * as Readers from "../readers/index.mjs";
 import * as Renderers from "../renderers/index.mjs";
 import { renderFile, createDir } from "./fs.mjs";
@@ -33,12 +36,18 @@ async function renderEntityFiles(module_src_dir, data, config) {
     }
 }
 
-async function createEntity(modules_dir, config) {
+async function createEntity(modules_dir, config, availableFields) {
     const ModuleName = await Readers.ModuleName(inquirer);
     const moduleName = firstLetterToLower(ModuleName);
     const moduleDir = resolve(modules_dir, ModuleName);
     const moduleLayers = await Readers.moduleLayers(inquirer);
-    const moduleConfig = { ...config, moduleName, ModuleName, moduleLayers };
+    const moduleConfig = {
+        ...config,
+        moduleName,
+        ModuleName,
+        moduleLayers,
+        availableFields,
+    };
     // console.log("moduleConfig", moduleConfig);
     const entityData = await Readers.entityData(
         inquirer,

package/src/cli/lib/module.server.mjs

@@ -1,4 +1,7 @@
-import { firstLetterToLower } from "../../../src/common.js";
+import {
+    firstLetterToLower,
+    moduleNameTransformer,
+} from "../../../src/common.js";
 import { join } from "node:path";
 import inquirer from "inquirer";
 import inquirerPrompt from "inquirer-autocomplete-prompt";
@@ -75,9 +78,16 @@ async function renderServerContollersIndexes(
 async function createServerModule(modules_dir, config, availableFields) {
     //read module name
     const ModuleName = await Readers.ModuleName(inquirer);
+    const ModuleNameHumanReadable = moduleNameTransformer(ModuleName);
     const moduleName = firstLetterToLower(ModuleName);
     const moduleDir = join(modules_dir, ModuleName);
-    const moduleConfig = { ...config, moduleName, ModuleName, availableFields };
+    const moduleConfig = {
+        ...config,
+        moduleName,
+        ModuleName,
+        ModuleNameHumanReadable,
+        availableFields,
+    };
     await createDir(moduleDir);
     //console.log(JSON.stringify(moduleConfig, null, 4));
     await createDirContent(

package/src/cli/readers/fields.mjs

@@ -57,12 +57,15 @@ export default async (inquirer, config) => {
                     fieldname = answer.fieldname.trim();
                 });
             result.push([fieldname, fieldtype]);
+            const selectedFields = result.map(
+                (itm) => `${itm[1]} as ${itm[0]}`
+            );
             finished = await inquirer
                 .prompt([
                     {
                         type: "confirm",
                         name: "oneMore",
-                        message: `Add another one field to [${result.join(
+                        message: `Add another one field to [${selectedFields.join(
                             ","
                         )}] (default: true)?`,
                         default: true,

package/src/cli/renderers/controllersCommons.mjs

@@ -7,8 +7,8 @@ export default async (
     config,
     createFileContent,
     PATH_TMPL
-) => {    
-    for (let entityData of entitiesList) {        
+) => {
+    for (let entityData of entitiesList) {
         const TMPL_FILE_PATH = resolve(PATH_TMPL, TEMPLATES_DIR, `crud.ejs`);
         const DEST_FILE_PATH = resolve(
             module_layer_dir,
@@ -21,6 +21,7 @@ export default async (
     }
 
     if (entitiesList.length) {
+        //common validators
         const TMPL_FILE_PATH_VALIDATORS = resolve(
             PATH_TMPL,
             TEMPLATES_DIR,
@@ -38,5 +39,23 @@ export default async (
                 ...entitiesList[0],
             }
         );
+        //common service
+        const TMPL_FILE_PATH_COMMON_SERVICE = resolve(
+            PATH_TMPL,
+            TEMPLATES_DIR,
+            `service.ejs`
+        );
+        const DEST_FILE_PATH_COMMON_SERVICE = resolve(
+            module_layer_dir,
+            `ns${config.ModuleNameHumanReadable}Common.js`
+        );
+        await createFileContent(
+            TMPL_FILE_PATH_COMMON_SERVICE,
+            DEST_FILE_PATH_COMMON_SERVICE,
+            {
+                ...config,
+                ...entitiesList[0],
+            }
+        );
     }
 };

package/src/common.js

@@ -23,6 +23,27 @@ module.exports.firstLetterToUpper = function (string) {
     return string.charAt(0).toUpperCase() + string.slice(1);
 };
 
+/**
+ * transforms not-module-name -> ModuleName
+ * @param {string} moduleName
+ * @return {string}
+ */
+function moduleNameTransformer(moduleName) {
+    //not-module-name -> [not,module,name]
+    const ModuleNameParts = moduleName.split("-");
+    //[not,module,name] -> [module,name]
+    const moduleNameSelectedParts =
+        ModuleNameParts[0] === "not"
+            ? ModuleNameParts.splice(1)
+            : ModuleNameParts;
+    //[module,name] -> ModuleName
+    return moduleNameSelectedParts
+        .map(module.exports.firstLetterToUpper)
+        .join("");
+}
+
+module.exports.moduleNameTransformer = moduleNameTransformer;
+
 /**
  *  Validates if string is a ObjectId
  *  @param  {string|import('mongoose').Schema.Types.ObjectId}  id   ObjectId string to validate

package/src/core/fields/ID.js

@@ -8,5 +8,6 @@ module.exports = {
     model: {
         type: Number,
         required: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/_id.js

@@ -5,4 +5,7 @@ module.exports = {
         label: "_id",
         readonly: true,
     },
+    model: {
+        safe: require("../safety.protocols").systemManageable,
+    },
 };

package/src/core/fields/active.js

@@ -6,6 +6,7 @@ module.exports = {
     model: {
         type: Boolean,
         default: false,
-        required: true
+        required: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/boolean.js

@@ -6,6 +6,7 @@ module.exports = {
     model: {
         type: Boolean,
         default: false,
-        required: true
+        required: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/codeName.js

@@ -7,6 +7,7 @@ module.exports = {
     model: {
         type: String,
         required: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/createdAt.js

@@ -11,9 +11,6 @@ module.exports = {
         default: Date.now,
         searchable: true,
         sortable: true,
-        safe: {
-            create: ["@system"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: require("../safety.protocols").systemManageable,
     },
 };

package/src/core/fields/default.js

@@ -7,5 +7,6 @@ module.exports = {
         type: Boolean,
         default: false,
         required: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/description.js

@@ -9,6 +9,7 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/email.js

@@ -7,6 +7,7 @@ module.exports = {
     model: {
         type: String,
         required: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/enabled.js

@@ -7,5 +7,6 @@ module.exports = {
         type: Boolean,
         default: true,
         required: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/expiredAt.js

@@ -10,9 +10,6 @@ module.exports = {
         required: false,
         searchable: true,
         sortable: true,
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/height.js

@@ -9,5 +9,6 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/identity.js

@@ -4,9 +4,6 @@ module.exports = {
     model: {
         type: Schema.Types.Mixed,
         required: true,
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/ip.js

@@ -8,6 +8,7 @@ module.exports = {
         type: String,
         searchable: true,
         required: true,
-        transformers: ['xss']
+        safe: require("../safety.protocols").ownerRootAdmin,
+        transformers: ["xss"],
     },
 };

package/src/core/fields/objectId.js

@@ -5,9 +5,7 @@ module.exports = {
         type: ObjectId,
         required: true,
         default: {},
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        transformers: ["xss", "__CLEAR__"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/owner.js

@@ -1,13 +1,18 @@
 const Schema = require("mongoose").Schema;
+const notFieldsFilter = require("../../fields/filter");
+const { ownerRootAdmin } = require("../safety.protocols");
+const { ACTION_SIGNATURES } = require("../../auth/const");
+
 module.exports = {
     model: {
         type: Schema.Types.ObjectId,
         refPath: "ownerModel",
         required: false,
-        safe: {
-            update: ["root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: notFieldsFilter.mergeSafetyProtocols(ownerRootAdmin, {
+            [ACTION_SIGNATURES.CREATE]: ["-@owner"],
+            [ACTION_SIGNATURES.UPDATE]: ["-@owner"],
+            [ACTION_SIGNATURES.DELETE]: ["-@owner"],
+        }),
     },
     ui: {
         component: "UIHidden",

package/src/core/fields/ownerModel.js

@@ -2,11 +2,8 @@ module.exports = {
     model: {
         type: String,
         required: false,
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
-        transformers: ['xss']
+        safe: require("../safety.protocols").ownerRootAdmin,
+        transformers: ["xss"],
     },
     ui: {
         component: "UIHidden",

package/src/core/fields/price.js

@@ -9,5 +9,6 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/requiredObject.js

@@ -5,9 +5,6 @@ module.exports = {
         type: Schema.Types.Mixed,
         required: true,
         default: {},
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/session.js

@@ -8,6 +8,7 @@ module.exports = {
         type: String,
         searchable: true,
         required: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/size.js

@@ -9,5 +9,6 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/telephone.js

@@ -7,6 +7,7 @@ module.exports = {
     model: {
         type: String,
         required: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/title.js

@@ -9,10 +9,7 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
-        transformers: ['xss']
+        safe: require("../safety.protocols").ownerRootAdmin,
+        transformers: ["xss"],
     },
 };

package/src/core/fields/updatedAt.js

@@ -11,9 +11,6 @@ module.exports = {
         type: Date,
         required: true,
         default: Date.now,
-        safe: {
-            update: ["@owner", "root", "admin"],
-            read: ["@owner", "root", "admin"],
-        },
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/userId.js

@@ -10,5 +10,6 @@ module.exports = {
         type: Schema.Types.ObjectId,
         ref: "User",
         required: false,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/uuid.js

@@ -9,6 +9,7 @@ module.exports = {
         type: String,
         searchable: true,
         required: true,
-        transformers: ['xss']
+        transformers: ["xss"],
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/fields/width.js

@@ -9,5 +9,6 @@ module.exports = {
         required: true,
         searchable: true,
         sortable: true,
+        safe: require("../safety.protocols").ownerRootAdmin,
     },
 };

package/src/core/safety.protocols.js

@@ -0,0 +1,22 @@
+const { ACTION_SIGNATURES } = require("../auth/const");
+
+module.exports.ownerRootAdmin = Object.freeze({
+    [ACTION_SIGNATURES.CREATE]: ["@owner", "root", "admin"],
+    [ACTION_SIGNATURES.READ]: ["@owner", "root", "admin"],
+    [ACTION_SIGNATURES.UPDATE]: ["@owner", "root", "admin"],
+    [ACTION_SIGNATURES.DELETE]: ["@owner", "root", "admin"],
+});
+
+module.exports.systemManageable = Object.freeze({
+    [ACTION_SIGNATURES.CREATE]: ["@system"],
+    [ACTION_SIGNATURES.READ]: ["@system", "@owner", "root", "admin"],
+    [ACTION_SIGNATURES.UPDATE]: ["@system"],
+    [ACTION_SIGNATURES.DELETE]: ["@system"],
+});
+
+module.exports.publicReadable = Object.freeze({
+    [ACTION_SIGNATURES.CREATE]: [],
+    [ACTION_SIGNATURES.READ]: ["@*"],
+    [ACTION_SIGNATURES.UPDATE]: [],
+    [ACTION_SIGNATURES.DELETE]: [],
+});

package/src/fields/filter.js

@@ -5,7 +5,10 @@ const {
     isNotEmptyString,
 } = require("../common");
 const { getSafeFieldsForRoleAction } = require("../auth/fields");
-const { DEFAULT_USER_ROLE_FOR_GUEST } = require("../auth/const");
+const {
+    DEFAULT_USER_ROLE_FOR_GUEST,
+    ACTION_SIGNATURES,
+} = require("../auth/const");
 /**
  * notFieldsFilter.filter(fields, getApp().getModelSchema(MODEL_NAME), {action});
  *
@@ -125,9 +128,14 @@ class notFieldsFilter {
                     system
                 );
             },
-            [SPECIAL_SET_UNSAFE]: ["salt", "password"],
+            [SPECIAL_SET_UNSAFE]: ["salt", "password", "session"],
             [SPECIAL_SET_TIMESTAMPS]: ["createdAt", "updatedAt"],
-            [SPECIAL_SET_OWNAGE]: ["owner", "ownerId", "ownerModel"],
+            [SPECIAL_SET_OWNAGE]: (schema) => {
+                const inSchema = Object.keys(schema);
+                return ["owner", "ownerId", "ownerModel"].filter((itm) =>
+                    inSchema.includes(itm)
+                );
+            },
             [SPECIAL_SET_VERSIONING]: [
                 "__version",
                 "__versions",
@@ -302,6 +310,10 @@ class notFieldsFilter {
         return result;
     }
 
+    static clearFromDuplicated(fields) {
+        return [...new Set(fields)];
+    }
+
     /**
      * Creates plain fields list from fields list with fields, synonyms, fields sets
      * and exlude operations
@@ -320,7 +332,74 @@ class notFieldsFilter {
     static filter(fieldsSet, schema = {}, mods = { action: undefined }) {
         const fields = [...fieldsSet];
         this.specialsToPlain(fields, schema, mods);
-        return this.removeExcludedFields(fields);
+        return this.clearFromDuplicated(this.removeExcludedFields(fields));
+    }
+
+    /**
+     *
+     *
+     * @static
+     * @param {Object} base
+     * @param {Object} addition
+     * @return {Object}
+     * @memberof notFieldsFilter
+     */
+    static mergeSafetyProtocols(base, addition) {
+        const result = {
+            [ACTION_SIGNATURES.CREATE]: [
+                ...(base[ACTION_SIGNATURES.CREATE] || []),
+            ],
+            [ACTION_SIGNATURES.READ]: [...(base[ACTION_SIGNATURES.READ] || [])],
+            [ACTION_SIGNATURES.UPDATE]: [
+                ...(base[ACTION_SIGNATURES.UPDATE] || []),
+            ],
+            [ACTION_SIGNATURES.DELETE]: [
+                ...(base[ACTION_SIGNATURES.DELETE] || []),
+            ],
+        };
+        for (const type of Object.keys(addition)) {
+            if (Array.isArray(addition[type])) {
+                addition[type].forEach((rule) => {
+                    if (this.isExcludeOperation(rule)) {
+                        const ruleToDelete = this.unmarkFieldToExlude(rule);
+                        if (result[type].includes(ruleToDelete)) {
+                            result[type].splice(
+                                result[type].indexOf(ruleToDelete),
+                                1
+                            );
+                        }
+                    } else {
+                        if (!result[type].includes(rule)) {
+                            result[type].push(rule);
+                        }
+                    }
+                });
+            }
+        }
+        return Object.freeze(result);
+    }
+
+    static initSafetyProtocol(
+        create = [],
+        read = [],
+        update = [],
+        del = [],
+        all = []
+    ) {
+        return this.mergeSafetyProtocols(
+            {
+                [ACTION_SIGNATURES.CREATE]: [...all],
+                [ACTION_SIGNATURES.READ]: [...all],
+                [ACTION_SIGNATURES.UPDATE]: [...all],
+                [ACTION_SIGNATURES.DELETE]: [...all],
+            },
+            {
+                [ACTION_SIGNATURES.CREATE]: [...create],
+                [ACTION_SIGNATURES.READ]: [...read],
+                [ACTION_SIGNATURES.UPDATE]: [...update],
+                [ACTION_SIGNATURES.DELETE]: [...del],
+            }
+        );
     }
 }
 

package/src/form/transformers/__CLEAR__.js

@@ -0,0 +1,3 @@
+module.exports = (input) => {
+    return input === "__CLEAR__" ? undefined : input;
+};

package/src/form/transformers/index.js

@@ -6,4 +6,5 @@ module.exports = {
     stringToJSON: require("./stringToJSON.js"),
     xss: require("./xss.js"),
     boolean: require("./boolean.js"),
+    __CLEAR__: require("./__CLEAR__.js"),
 };

package/test/filter.js

@@ -1,7 +1,9 @@
 const mongoose = require("mongoose");
 const Schema = mongoose.Schema;
 const expect = require("chai").expect,
-    notFieldsFilter = require("../src/fields/filter");
+    notFieldsFilter = require("../src/fields/filter"),
+    { ACTION_SIGNATURES } = require("../src/auth/const"),
+    safetyProtocols = require("../src/core/safety.protocols");
 
 const SCHEMA = () => {
     return {
@@ -277,10 +279,101 @@ describe("Fields/notFieldsFilter", function () {
             expect(result).to.be.deep.equal([
                 "id",
                 "name",
-                "name",
                 "username",
                 "country",
             ]);
         });
     });
+
+    describe("mergeSafetyProtocols", () => {
+        it("ownerRootAdmin + publicReadable", () => {
+            const result = notFieldsFilter.mergeSafetyProtocols(
+                safetyProtocols.ownerRootAdmin,
+                safetyProtocols.publicReadable
+            );
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: ["@owner", "root", "admin"],
+                [ACTION_SIGNATURES.READ]: ["@owner", "root", "admin", "@*"],
+                [ACTION_SIGNATURES.UPDATE]: ["@owner", "root", "admin"],
+                [ACTION_SIGNATURES.DELETE]: ["@owner", "root", "admin"],
+            });
+        });
+
+        it("ownerRootAdmin - @owner", () => {
+            const result = notFieldsFilter.mergeSafetyProtocols(
+                safetyProtocols.ownerRootAdmin,
+                {
+                    [ACTION_SIGNATURES.CREATE]: ["-@owner"],
+                    [ACTION_SIGNATURES.READ]: ["-@owner"],
+                    [ACTION_SIGNATURES.UPDATE]: ["-@owner"],
+                    [ACTION_SIGNATURES.DELETE]: ["-@owner"],
+                }
+            );
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: ["root", "admin"],
+                [ACTION_SIGNATURES.READ]: ["root", "admin"],
+                [ACTION_SIGNATURES.UPDATE]: ["root", "admin"],
+                [ACTION_SIGNATURES.DELETE]: ["root", "admin"],
+            });
+        });
+    });
+
+    describe("initSafetyProtocol", () => {
+        it("empty", () => {
+            const result = notFieldsFilter.initSafetyProtocol();
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: [],
+                [ACTION_SIGNATURES.READ]: [],
+                [ACTION_SIGNATURES.UPDATE]: [],
+                [ACTION_SIGNATURES.DELETE]: [],
+            });
+        });
+
+        it("all = user", () => {
+            const result = notFieldsFilter.initSafetyProtocol(
+                undefined,
+                undefined,
+                undefined,
+                undefined,
+                ["user"]
+            );
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: ["user"],
+                [ACTION_SIGNATURES.READ]: ["user"],
+                [ACTION_SIGNATURES.UPDATE]: ["user"],
+                [ACTION_SIGNATURES.DELETE]: ["user"],
+            });
+        });
+
+        it("CRUD - @owner", () => {
+            const result = notFieldsFilter.initSafetyProtocol(
+                ["@owner"],
+                ["@owner"],
+                ["@owner"],
+                ["@owner"]
+            );
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: ["@owner"],
+                [ACTION_SIGNATURES.READ]: ["@owner"],
+                [ACTION_SIGNATURES.UPDATE]: ["@owner"],
+                [ACTION_SIGNATURES.DELETE]: ["@owner"],
+            });
+        });
+
+        it("D - -@owner, ALL - @owner, root, admin", () => {
+            const result = notFieldsFilter.initSafetyProtocol(
+                undefined,
+                undefined,
+                undefined,
+                ["-@owner"],
+                ["@owner", "root", "admin"]
+            );
+            expect(result).to.be.deep.equal({
+                [ACTION_SIGNATURES.CREATE]: ["@owner", "root", "admin"],
+                [ACTION_SIGNATURES.READ]: ["@owner", "root", "admin"],
+                [ACTION_SIGNATURES.UPDATE]: ["@owner", "root", "admin"],
+                [ACTION_SIGNATURES.DELETE]: ["root", "admin"],
+            });
+        });
+    });
 });

package/tmpl/files/module.server/layers/controllers/common/crud.ejs

@@ -1,15 +1,16 @@
 import { MODULE_NAME } from "../../const.js";
 import Validators from "../common/validators.js";
-import { Frame } from "not-bulma";
+import { Frame, notCommon } from "not-bulma";
 import CRUDActionList from "not-bulma/src/frame/crud/actions/list";
 
 const { notCRUD } = Frame;
 
 const MODEL_NAME = "<%- ModelName %>";
+const modelName = notCommon.lowerFirstLetter(MODEL_NAME);
 
 const LABELS = {
-    plural: `${MODULE_NAME}:${MODEL_NAME}_label_plural`,
-    single: `${MODULE_NAME}:${MODEL_NAME}_label_single`,
+    plural: `${MODULE_NAME}:${modelName}_label_plural`,
+    single: `${MODULE_NAME}:${modelName}_label_single`,
 };
 
 Object.freeze(LABELS);
@@ -32,7 +33,7 @@ class nc<%- ModelName %>Common extends notCRUD {
         this.setModuleName(MODULE_NAME);
         this.setModelName(MODEL_NAME);
         this.setOptions("names", LABELS);
-        this.setOptions("Validators", Validators);
+        this.setValidators(Validators);
         this.setOptions("params", params);
         this.setOptions("list", {
             interface: {

package/tmpl/files/module.server/layers/controllers/common/index.ejs

@@ -1,4 +1,5 @@
 import main from "../common/ws.client.main.js";
+import ns<%- ModuleNameHumanReadable %>Common from "./ns<%- ModuleNameHumanReadable %>Common.js";
 
 <% for (let {ModelName} of entities){ %>
 import nc<%- {ModelName} %> from "./nc<%- {ModelName} %>.js";
@@ -10,7 +11,7 @@ const wsc = {
 
 const uis = {};
 
-const services = {};
+const services = {ns<%- ModuleNameHumanReadable %>Common};
 
 let manifest = {
     router: {

package/tmpl/files/module.server/layers/controllers/common/service.ejs

@@ -0,0 +1,23 @@
+import { Builder } from "not-validation";
+import Validator from "validator";
+
+export default class ns<%- ModuleNameHumanReadable %>Common {
+    constructor(app) {
+        this.app = app;
+    }
+
+    destroy() {
+        delete this.app;
+    }
+
+    augmentValidators(validators) {
+        return Builder(validators, () => this.getValidatorEnv());
+    }
+
+    getValidatorEnv() {
+        return {
+            config: this.app.getConfigReaderForModule("<%- moduleName %>"),
+            validator: Validator,
+        };
+    }
+}

package/tmpl/files/module.server/layers/controllers/role/index.ejs

@@ -1,10 +1,13 @@
+import ns<%- ModuleNameHumanReadable %>Common from "../common/ns<%- ModuleNameHumanReadable %>Common.js";
 <% for (let {ModelName} of entities){ %>
 import nc<%- ModelName %> from "./nc<%- ModelName %>.js";
 <% } %>
 
 const wsc = {};
 const uis = {};
-const services = {};
+const services = {
+    ns<%- ModuleNameHumanReadable %>Common
+};
 
 let manifest = {
     router: {

package/tmpl/files/notComponent.ejs

@@ -1,57 +0,0 @@
-import UI<%- ComponentName %> from "./<%- componentName %>.svelte";
-
-class not<%- ComponentName %> extends notBase{
-
-    static UIConstructor = UI<%- ComponentName %>;
- 
-    constructor({
-      target = null,
-      name = "Default",
-      options = {},
-      working = {},
-      data = {},
-    }){
-      super({
-        working: {
-            name: `${name}<%- ComponentName %>`,
-            ...working,
-        },
-        options,
-        data,
-      });
-      if (target) {
-        this.setOptions("target", target);
-      }
-      this.render();
-    }
-  
-    render(){
-      this.remove();
-      if(this.UIConstructor){
-        this.ui = new this.UIConstructor({
-          target: this.getOptions('target'),
-          props:{
-            /* props */
-          }
-        });
-      }
-    }    
-  
-    update(){
-      if(this.ui){
-        this.ui.$set({ /* update props */ });
-      }
-    }
-  
-    remove(){
-      if (this.ui) {
-        this.ui.$destroy();
-        this.ui = null;
-      }
-      return this;
-    }
-  
-  }
-  
-  export default not<%- ComponentName %>;
-  

package/tmpl/files/notService.ejs

@@ -1,39 +0,0 @@
-  const INTERVAL = 360;
-  const INIT_UPDATE_DELAY = 5;
-  
-  class ns<%- ServiceName %> {
-    #INTERVAL = INTERVAL;
-    #INIT_UPDATE_DELAY = INIT_UPDATE_DELAY;
-  
-    constructor(app) {
-      this.app = app;      
-      <% if(modelName){ %>
-      this.interface = this.app.getInterface("<%- modelName %>"");
-      if(this.interface){
-        this.init();
-      }else{
-        app.error('no network interface');
-      }
-      <% }else{ %>
-      this.init();
-      <% } %>
-    };
-  
-    init() {
-      setTimeout(this.update.bind(this), this.#INIT_UPDATE_DELAY * 100);
-      this.int = setInterval(this.update.bind(this), this.#INTERVAL * 1000);
-      window.addEventListener('unload', () => {
-        clearInterval(this.int);
-        delete this.app;
-        <% if(modelName){ %>
-        delete this.interface;
-        <% } %>
-      });
-    }
-  
-    update() {
-      //serve
-    }}
-
-
-export default ns<%- ServiceName %>;