not-node 6.4.7 → 6.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "not-node",
-	"version": "6.4.7",
+	"version": "6.4.9",
 	"description": "node complimentary part for client side notFramework.",
 	"main": "index.js",
 	"scripts": {
@@ -55,7 +55,6 @@
 		"inquirer": "^10.1.8",
 		"inquirer-autocomplete-prompt": "^3.0.1",
 		"jsonwebtoken": "^9.0.2",
-		"lower-case": "*",
 		"method-override": "^3.0.0",
 		"mongoose-validator": "*",
 		"nconf": "*",

package/src/form/form.js

@@ -256,6 +256,11 @@ class Form {
         };
         if (this.getActionDataDataTypes(req).includes(ACTION_DATA_TYPES.DATA)) {
             result.data = this.#extractByBestInstructions(req);
+        } else if (this.getActionDataDataTypes(req).includes("record")) {
+            getApp().warn(
+                'actionData.data = record is obsolete, use data instead aka data:["data"]'
+            );
+            result.data = this.#extractByBestInstructions(req);
         }
         return result;
     }

package/src/manifest/manifest.filter.js

@@ -16,6 +16,9 @@ const DIRTY_FIELDS = [
     "actionSignature",
 ];
 
+//allow access to safe (for a specific user auth status) fields only
+const DEFAULT_FIELDS_SET = ["@safe"];
+
 module.exports = class notManifestFilter {
     static schemaLoader = (name) => getApp().getModelSchema(name);
 
@@ -310,13 +313,22 @@ module.exports = class notManifestFilter {
         //this action
         const fullModelName = this.composeFullModelName(moduleName, modelName);
         const modelSchema = this.loadSchema(fullModelName);
-        if (notManifestFilter.ruleSetHasFieldsDirective(ruleSet)) {
-            copy.fields = notFieldsFilter.filter(
-                [...ruleSet.fields],
-                modelSchema,
-                { action: actionSignature, roles: role, auth, root, modelName }
-            );
+        const fields = notManifestFilter.ruleSetHasFieldsDirective(ruleSet)
+            ? [...ruleSet.fields]
+            : DEFAULT_FIELDS_SET;
+
+        copy.fields = notFieldsFilter.filter(fields, modelSchema, {
+            action: actionSignature,
+            roles: role,
+            auth,
+            root,
+            modelName,
+        });
+        //remove fields property if list is empty
+        if (copy.fields.length == 0) {
+            delete copy.fields;
         }
+
         if (ruleSet && ruleSet.return) {
             copy.return = notManifestFilter.filterReturnSet(
                 ruleSet.return,