tenable-universal-layout 0.0.1-security → 7.20.13

package/dist/entities/EntitySession.d.ts

@@ -0,0 +1,100 @@
+import type { Session as OpenApiSession } from '../libs/openapi/session/sessionResource';
+import { UserPermissions } from '../libs/openapi/session/sessionResource';
+import type { Maybe } from '../types/helpers';
+type Session = OpenApiSession;
+export default class EntitySession {
+    private _userPermissions;
+    private _session;
+    private constructor();
+    /**
+     * Return the initials of the user's session.
+     */
+    get initials(): Maybe<string>;
+    /**
+     * Return true if the user is at least an admin.
+     */
+    get hasAdminRole(): boolean;
+    /**
+     * Return true if the user is as mssp parent.
+     */
+    get isMsspParent(): boolean;
+    /**
+     * Return true if the user has exactly the custom role.
+     */
+    get hasCustomRole(): boolean;
+    /**
+     * Return true if the user has access to users management.
+     */
+    get hasAccessToAccessControlManagement(): boolean;
+    /**
+     * Return true if the user has access to roles management.
+     */
+    get hasAccessToAccessControl(): boolean;
+    /**
+     * Return true if the user has access to the license management.
+     */
+    get hasAccessToLicense(): boolean;
+    /**
+     * Return true if the user has access to the activity logs.
+     */
+    get hasAccessToActivityLogs(): boolean;
+    /**
+     * Return true if the user has access to ExposureView.
+     */
+    get hasAccessToExposureView(): boolean;
+    /**
+     * Return true if the user has access to AssetInventory.
+     */
+    get hasAccessToAssetInventory(): boolean;
+    /**
+     * Return true if the user has access to Attack Path.
+     */
+    get hasAccessToAttackPath(): boolean;
+    /**
+     * Return true if the user has access to PCI.
+     */
+    get hasAccessToPciAsv(): boolean;
+    /**
+     * Return true if the user has access to Platform Settings.
+     */
+    get hasAccessToPlatformSettings(): boolean;
+    /**
+     * Return the name of the user.
+     */
+    get name(): string;
+    /**
+     * Return the name of the user.
+     */
+    get email(): string;
+    /**
+     * Return the user's permissions.
+     */
+    get userPermissions(): Set<UserPermissions>;
+    /**
+     * Return the raw session.
+     */
+    get rawSession(): Session;
+    /**
+     * Private
+     */
+    /**
+     * Dump sessions permissions into the set.
+     */
+    private _savePermissions;
+    /**
+     * Return true if the user has the expected role.
+     */
+    private _hasRole;
+    /**
+     * When being authed as a MSSP, session.name is not defined (!)
+     */
+    private _setMsspName;
+    /**
+     * Static
+     */
+    /**
+     * Create a new EntitySession from a Session litteral object.
+     */
+    static createFromObject(session: Session): EntitySession;
+}
+export {};

package/dist/entities/EntitySession.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const toolbox_1 = require("@productive-codebases/toolbox");
+const sessionResource_1 = require("../libs/openapi/session/sessionResource");
+const roles_1 = require("../libs/rbac/roles");
+class EntitySession {
+    constructor(session) {
+        this._userPermissions = new Set();
+        this._session = session;
+    }
+    /**
+     * Return the initials of the user's session.
+     */
+    get initials() {
+        return this.name.slice(0, 2).toLocaleUpperCase() || null;
+    }
+    /**
+     * Return true if the user is at least an admin.
+     */
+    get hasAdminRole() {
+        return this._hasRole(roles_1.RolesEnum.ADMIN);
+    }
+    /**
+     * Return true if the user is as mssp parent.
+     */
+    get isMsspParent() {
+        return this._session.containerType === 'mssp';
+    }
+    /**
+     * Return true if the user has exactly the custom role.
+     */
+    get hasCustomRole() {
+        return this._hasRole(roles_1.RolesEnum.CUSTOM, true);
+    }
+    /**
+     * Return true if the user has access to users management.
+     */
+    get hasAccessToAccessControlManagement() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this.hasCustomRole &&
+            this._userPermissions.has(sessionResource_1.UserPermissions.TioBackendAccessControlRead));
+    }
+    /**
+     * Return true if the user has access to roles management.
+     */
+    get hasAccessToAccessControl() {
+        return this.hasAccessToAccessControlManagement;
+    }
+    /**
+     * Return true if the user has access to the license management.
+     */
+    get hasAccessToLicense() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this.hasCustomRole &&
+            this._userPermissions.has(sessionResource_1.UserPermissions.TioBackendHealthAndStatusRead));
+    }
+    /**
+     * Return true if the user has access to the activity logs.
+     */
+    get hasAccessToActivityLogs() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this.hasCustomRole &&
+            this._userPermissions.has(sessionResource_1.UserPermissions.TioBackendActivityLogRead));
+    }
+    /**
+     * Return true if the user has access to ExposureView.
+     */
+    get hasAccessToExposureView() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this._userPermissions.has(sessionResource_1.UserPermissions.ToneUiToneExposureCardRead) ||
+            this._userPermissions.has(sessionResource_1.UserPermissions.LuminExposureViewExposureCardRead));
+    }
+    /**
+     * Return true if the user has access to AssetInventory.
+     */
+    get hasAccessToAssetInventory() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this._userPermissions.has(sessionResource_1.UserPermissions.ToneUiToneAssetsRead) ||
+            this._userPermissions.has(sessionResource_1.UserPermissions.AssetInventoryAssetInventoryRead));
+    }
+    /**
+     * Return true if the user has access to Attack Path.
+     */
+    get hasAccessToAttackPath() {
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this._userPermissions.has(sessionResource_1.UserPermissions.ToneUiAttackPathAnalysisRead) ||
+            this._userPermissions.has(sessionResource_1.UserPermissions.AttackPathAnalysisFindingRead));
+    }
+    /**
+     * Return true if the user has access to PCI.
+     */
+    get hasAccessToPciAsv() {
+        return this.hasCustomRole || this.hasAdminRole;
+    }
+    /**
+     * Return true if the user has access to Platform Settings.
+     */
+    get hasAccessToPlatformSettings() {
+        if (this.isMsspParent) {
+            return false;
+        }
+        if (this.hasAdminRole) {
+            return true;
+        }
+        return (this.hasAccessToLicense ||
+            this.hasAccessToAccessControl ||
+            this.hasAccessToActivityLogs);
+    }
+    /**
+     * Return the name of the user.
+     */
+    get name() {
+        var _a, _b, _c, _d;
+        return ((_d = (_c = (_b = (_a = this._session.name) !== null && _a !== void 0 ? _a : this._session.userName) !== null && _b !== void 0 ? _b : this._session.containerName) !== null && _c !== void 0 ? _c : this._session.email) !== null && _d !== void 0 ? _d : '-');
+    }
+    /**
+     * Return the name of the user.
+     */
+    get email() {
+        var _a, _b, _c, _d;
+        return ((_d = (_c = (_b = (_a = this._session.email) !== null && _a !== void 0 ? _a : this._session.userName) !== null && _b !== void 0 ? _b : this._session.username) !== null && _c !== void 0 ? _c : this._session.containerName) !== null && _d !== void 0 ? _d : '-');
+    }
+    /**
+     * Return the user's permissions.
+     */
+    get userPermissions() {
+        return this._userPermissions;
+    }
+    /**
+     * Return the raw session.
+     */
+    get rawSession() {
+        return this._session;
+    }
+    /**
+     * Private
+     */
+    /**
+     * Dump sessions permissions into the set.
+     */
+    _savePermissions() {
+        (0, toolbox_1.ensureArray)(this._session.userPermissions).forEach(permission => {
+            this._userPermissions.add(permission);
+        });
+    }
+    /**
+     * Return true if the user has the expected role.
+     */
+    _hasRole(expectedRole, checkExact = false) {
+        const userRole = this._session.permissions;
+        if (!(0, toolbox_1.isDefined)(userRole)) {
+            return false;
+        }
+        return checkExact ? userRole === expectedRole : userRole >= expectedRole;
+    }
+    /**
+     * When being authed as a MSSP, session.name is not defined (!)
+     */
+    _setMsspName() {
+        var _a;
+        if (!(0, toolbox_1.isDefined)(this._session.name)) {
+            this._session.name = (_a = this._session.containerName) !== null && _a !== void 0 ? _a : '';
+        }
+    }
+    /**
+     * Static
+     */
+    /**
+     * Create a new EntitySession from a Session litteral object.
+     */
+    static createFromObject(session) {
+        const entity = new EntitySession(session);
+        // save and computed things related to the session
+        entity._savePermissions();
+        entity._setMsspName();
+        return entity;
+    }
+}
+exports.default = EntitySession;
+//# sourceMappingURL=EntitySession.js.map

package/dist/entities/EntitySession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitySession.js","sourceRoot":"","sources":["../../src/entities/EntitySession.ts"],"names":[],"mappings":";;AAAA,2DAAsE;AAEtE,4EAAwE;AACxE,6CAA6C;AAO7C,MAAqB,aAAa;IAKhC,YAAoB,OAAgB;QAJ5B,qBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAA;QAKnD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,IAAI,CAAA;IAC1D,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAS,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,MAAM,CAAA;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC;IAED;;OAEG;IACH,IAAI,kCAAkC;QACpC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,2BAA2B,CAAC,CACvE,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,wBAAwB;QAC1B,OAAO,IAAI,CAAC,kCAAkC,CAAA;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,kBAAkB;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,6BAA6B,CAAC,CACzE,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,uBAAuB;QACzB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,yBAAyB,CAAC,CACrE,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,uBAAuB;QACzB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,0BAA0B,CAAC;YACrE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CACvB,iCAAe,CAAC,iCAAiC,CAClD,CACF,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,yBAAyB;QAC3B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,oBAAoB,CAAC;YAC/D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CACvB,iCAAe,CAAC,gCAAgC,CACjD,CACF,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,qBAAqB;QACvB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,4BAA4B,CAAC;YACvE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iCAAe,CAAC,6BAA6B,CAAC,CACzE,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,CAAA;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,2BAA2B;QAC7B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,CACL,IAAI,CAAC,kBAAkB;YACvB,IAAI,CAAC,wBAAwB;YAC7B,IAAI,CAAC,uBAAuB,CAC7B,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;;QACN,OAAO,CACL,MAAA,MAAA,MAAA,MAAA,IAAI,CAAC,QAAQ,CAAC,IAAI,mCAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,mCACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,mCAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,mCACnB,GAAG,CACJ,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;;QACP,OAAO,CACL,MAAA,MAAA,MAAA,MAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,mCACnB,IAAI,CAAC,QAAQ,CAAC,QAAQ,mCACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,mCACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,mCAC3B,GAAG,CACJ,CAAA;IACH,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAA;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;OAEG;IAEH;;OAEG;IACK,gBAAgB;QACtB,IAAA,qBAAW,EAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YAC9D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAA6B,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,YAAuB,EAAE,UAAU,GAAG,KAAK;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;QAE1C,IAAI,CAAC,IAAA,mBAAS,EAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,OAAO,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAA;IAC1E,CAAC;IAED;;OAEG;IACK,YAAY;;QAClB,IAAI,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAA,IAAI,CAAC,QAAQ,CAAC,aAAa,mCAAI,EAAE,CAAA;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IAEH;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,OAAgB;QACtC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAA;QAEzC,kDAAkD;QAClD,MAAM,CAAC,gBAAgB,EAAE,CAAA;QACzB,MAAM,CAAC,YAAY,EAAE,CAAA;QAErB,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAzPD,gCAyPC"}

package/dist/entities/consts.d.ts

@@ -0,0 +1,2 @@
+import type { AppNameOrProduct } from '../types/tul';
+export declare const APPS_REDIRECTION_URLS: Partial<Record<AppNameOrProduct | 'default', string>>;

package/dist/entities/consts.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APPS_REDIRECTION_URLS = void 0;
+exports.APPS_REDIRECTION_URLS = {
+    // Note that "tad" (instead of "ad") is not a mystake!
+    ad: '/tio/app.html#/settings/saml-redirect/tad',
+    /* Add more redirections here if there is some mismatch between appName and value used for the redirection */
+    // $1 is the appName
+    default: '/tio/app.html#/settings/saml-redirect/$1'
+};
+//# sourceMappingURL=consts.js.map

package/dist/entities/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../src/entities/consts.ts"],"names":[],"mappings":";;;AAEa,QAAA,qBAAqB,GAE9B;IACF,sDAAsD;IACtD,EAAE,EAAE,2CAA2C;IAE/C,6GAA6G;IAE7G,oBAAoB;IACpB,OAAO,EAAE,0CAA0C;CACpD,CAAA"}