zet-lib 1.2.71 → 1.2.73

package/lib/zRoleRouter.js

@@ -30,21 +30,28 @@ router.get('/', csrfProtection, async function (req, res, next) {
   })
   //find all table has tabs
   let zfields = await connection.results({ table: 'zfields' })
+  let dummies = []
   let tabs = []
   zfields.map((item) => {
     let itemTabs = item.tabs || []
     if (itemTabs.length) {
       tabs.push(item.table)
     }
+    if (item.json) {
+      if (item.json.dummy == 1) {
+        dummies.push(item.table)
+      }
+    }
   })
   const json = model[0].params
-  const routes = zRole.routes
+  const routes = zRole.routes.filter((item) => !dummies.includes(item))
   const results = await connection.results({ table: 'zrole' })
   const myLevel = zRole.myLevel(req, res, 'zrole')
   //inject to end body
   let datas = {
     model: model,
     tabs: tabs,
+    dummies: dummies,
     table: 'zrole',
     id: id,
     actions: zRole.actions,

package/lib/zRoute.js

@@ -1228,8 +1228,9 @@ zRoute.selectAllowedField = (req, res, MYMODEL, arr = []) => {
 }
 
 zRoute.excelQuery = async (req, res, MYMODEL, paramsObject = {}) => {
-  const levels = zRole.myLevel(req, res, MYMODEL.table);
-  if(!levels.export) {
+  const cacheRole = myCache.get("ROLES")[res.locals.roleId].params;
+  const levels = cacheRole[MYMODEL.table] || []
+  if(!levels.includes("export")) {
     res.json("no access")
     return false;
   }
@@ -1354,11 +1355,13 @@ zRoute.excelQuery = async (req, res, MYMODEL, paramsObject = {}) => {
 
 // for excels
 zRoute.excel = async (req, res, MYMODEL, fields, rows, callback, fileName) => {
-  const levels = zRole.myLevel(req, res, MYMODEL.table);
-  if(!levels.export) {
+  const cacheRole = myCache.get("ROLES")[res.locals.roleId].params;
+  const levels = cacheRole[MYMODEL.table] || []
+  if(!levels.includes("export")) {
     res.json("no access")
     return false;
   }
+
   //if any other custom value then callback needed
   callback = callback || function () {}
   const workbook = new Excel.Workbook()
@@ -3557,11 +3560,13 @@ zRoute.deleteSQL = async (table, id, company_id) => {
 
 //for import
 zRoute.import = async (req, res, MYMODEL) => {
-  const levels = zRole.myLevel(req, res, MYMODEL.table);
-  if(!levels.import) {
+  const cacheRole = myCache.get("ROLES")[res.locals.roleId].params;
+  const levels = cacheRole[MYMODEL.table] || []
+  if(!levels.includes("export")) {
     res.json("no access")
     return false;
   }
+
   const userId = res.locals.userId
   const room = res.locals.token
   let progress = 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zet-lib",
-  "version": "1.2.71",
+  "version": "1.2.73",
   "description": "zet is a library that part of zet generator.",
   "engines": {
     "node": ">=18"