123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371 |
- var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
- Object.defineProperty(exports, "__esModule", {
- value: true
- });
- exports.default = void 0;
- var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
- var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
- var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
- var _ParseRole = _interopRequireDefault(require("./ParseRole"));
- var _ParseUser = _interopRequireDefault(require("./ParseUser"));
- var PUBLIC_KEY = '*';
- var VALID_PERMISSIONS = new Map();
- VALID_PERMISSIONS.set('get', {});
- VALID_PERMISSIONS.set('find', {});
- VALID_PERMISSIONS.set('count', {});
- VALID_PERMISSIONS.set('create', {});
- VALID_PERMISSIONS.set('update', {});
- VALID_PERMISSIONS.set('delete', {});
- VALID_PERMISSIONS.set('addField', {});
- var VALID_PERMISSIONS_EXTENDED = new Map();
- VALID_PERMISSIONS_EXTENDED.set('protectedFields', {});
- var ParseCLP = function () {
- function ParseCLP(userId) {
- var _this = this;
- (0, _classCallCheck2.default)(this, ParseCLP);
- this.permissionsMap = {};
- var _loop = function _loop(operation) {
- _this.permissionsMap[operation] = Object.assign({}, group);
- var action = operation.charAt(0).toUpperCase() + operation.slice(1);
- _this[`get${action}RequiresAuthentication`] = function () {
- return this._getAccess(operation, 'requiresAuthentication');
- };
- _this[`set${action}RequiresAuthentication`] = function (allowed) {
- this._setAccess(operation, 'requiresAuthentication', allowed);
- };
- _this[`get${action}PointerFields`] = function () {
- return this._getAccess(operation, 'pointerFields', false);
- };
- _this[`set${action}PointerFields`] = function (pointerFields) {
- this._setArrayAccess(operation, 'pointerFields', pointerFields);
- };
- _this[`get${action}Access`] = function (entity) {
- return this._getAccess(operation, entity);
- };
- _this[`set${action}Access`] = function (entity, allowed) {
- this._setAccess(operation, entity, allowed);
- };
- _this[`getPublic${action}Access`] = function () {
- return this[`get${action}Access`](PUBLIC_KEY);
- };
- _this[`setPublic${action}Access`] = function (allowed) {
- this[`set${action}Access`](PUBLIC_KEY, allowed);
- };
- _this[`getRole${action}Access`] = function (role) {
- return this[`get${action}Access`](this._getRoleName(role));
- };
- _this[`setRole${action}Access`] = function (role, allowed) {
- this[`set${action}Access`](this._getRoleName(role), allowed);
- };
- };
- for (var _ref of VALID_PERMISSIONS.entries()) {
- var _ref2 = (0, _slicedToArray2.default)(_ref, 2);
- var operation = _ref2[0];
- var group = _ref2[1];
- _loop(operation);
- }
- for (var _ref3 of VALID_PERMISSIONS_EXTENDED.entries()) {
- var _ref4 = (0, _slicedToArray2.default)(_ref3, 2);
- var _operation = _ref4[0];
- var _group = _ref4[1];
- this.permissionsMap[_operation] = Object.assign({}, _group);
- }
- if (userId && typeof userId === 'object') {
- if (userId instanceof _ParseUser.default) {
- this.setReadAccess(userId, true);
- this.setWriteAccess(userId, true);
- } else if (userId instanceof _ParseRole.default) {
- this.setRoleReadAccess(userId, true);
- this.setRoleWriteAccess(userId, true);
- } else {
- for (var _permission in userId) {
- var users = userId[_permission];
- var isValidPermission = !!VALID_PERMISSIONS.get(_permission);
- var isValidPermissionExtended = !!VALID_PERMISSIONS_EXTENDED.get(_permission);
- var isValidGroupPermission = ['readUserFields', 'writeUserFields'].includes(_permission);
- if (typeof _permission !== 'string' || !(isValidPermission || isValidPermissionExtended || isValidGroupPermission)) {
- throw new TypeError('Tried to create an CLP with an invalid permission type.');
- }
- if (isValidGroupPermission) {
- if (users.every(function (pointer) {
- return typeof pointer === 'string';
- })) {
- this.permissionsMap[_permission] = users;
- continue;
- } else {
- throw new TypeError('Tried to create an CLP with an invalid permission value.');
- }
- }
- for (var user in users) {
- var allowed = users[user];
- if (typeof allowed !== 'boolean' && !isValidPermissionExtended && user !== 'pointerFields') {
- throw new TypeError('Tried to create an CLP with an invalid permission value.');
- }
- this.permissionsMap[_permission][user] = allowed;
- }
- }
- }
- } else if (typeof userId === 'function') {
- throw new TypeError('ParseCLP constructed with a function. Did you forget ()?');
- }
- }
- (0, _createClass2.default)(ParseCLP, [{
- key: "toJSON",
- value: function toJSON() {
- return Object.assign({}, this.permissionsMap);
- }
- }, {
- key: "equals",
- value: function equals(other) {
- if (!(other instanceof ParseCLP)) {
- return false;
- }
- var permissions = Object.keys(this.permissionsMap);
- var otherPermissions = Object.keys(other.permissionsMap);
- if (permissions.length !== otherPermissions.length) {
- return false;
- }
- for (var _permission2 in this.permissionsMap) {
- if (!other.permissionsMap[_permission2]) {
- return false;
- }
- var users = Object.keys(this.permissionsMap[_permission2]);
- var otherUsers = Object.keys(other.permissionsMap[_permission2]);
- if (users.length !== otherUsers.length) {
- return false;
- }
- for (var user in this.permissionsMap[_permission2]) {
- if (!other.permissionsMap[_permission2][user]) {
- return false;
- }
- if (this.permissionsMap[_permission2][user] !== other.permissionsMap[_permission2][user]) {
- return false;
- }
- }
- }
- return true;
- }
- }, {
- key: "_getRoleName",
- value: function _getRoleName(role) {
- var name = role;
- if (role instanceof _ParseRole.default) {
- name = role.getName();
- }
- if (typeof name !== 'string') {
- throw new TypeError('role must be a Parse.Role or a String');
- }
- return `role:${name}`;
- }
- }, {
- key: "_parseEntity",
- value: function _parseEntity(entity) {
- var userId = entity;
- if (userId instanceof _ParseUser.default) {
- userId = userId.id;
- if (!userId) {
- throw new Error('Cannot get access for a Parse.User without an id.');
- }
- } else if (userId instanceof _ParseRole.default) {
- userId = this._getRoleName(userId);
- }
- if (typeof userId !== 'string') {
- throw new TypeError('userId must be a string.');
- }
- return userId;
- }
- }, {
- key: "_setAccess",
- value: function _setAccess(permission, userId, allowed) {
- userId = this._parseEntity(userId);
- if (typeof allowed !== 'boolean') {
- throw new TypeError('allowed must be either true or false.');
- }
- var permissions = this.permissionsMap[permission][userId];
- if (!permissions) {
- if (!allowed) {
- return;
- } else {
- this.permissionsMap[permission][userId] = {};
- }
- }
- if (allowed) {
- this.permissionsMap[permission][userId] = true;
- } else {
- delete this.permissionsMap[permission][userId];
- }
- }
- }, {
- key: "_getAccess",
- value: function _getAccess(permission, userId) {
- var returnBoolean = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : true;
- userId = this._parseEntity(userId);
- var permissions = this.permissionsMap[permission][userId];
- if (returnBoolean) {
- if (!permissions) {
- return false;
- }
- return !!this.permissionsMap[permission][userId];
- }
- return permissions;
- }
- }, {
- key: "_setArrayAccess",
- value: function _setArrayAccess(permission, userId, fields) {
- userId = this._parseEntity(userId);
- var permissions = this.permissionsMap[permission][userId];
- if (!permissions) {
- this.permissionsMap[permission][userId] = [];
- }
- if (!fields || Array.isArray(fields) && fields.length === 0) {
- delete this.permissionsMap[permission][userId];
- } else if (Array.isArray(fields) && fields.every(function (field) {
- return typeof field === 'string';
- })) {
- this.permissionsMap[permission][userId] = fields;
- } else {
- throw new TypeError('fields must be an array of strings or undefined.');
- }
- }
- }, {
- key: "_setGroupPointerPermission",
- value: function _setGroupPointerPermission(operation, pointerFields) {
- var fields = this.permissionsMap[operation];
- if (!fields) {
- this.permissionsMap[operation] = [];
- }
- if (!pointerFields || Array.isArray(pointerFields) && pointerFields.length === 0) {
- delete this.permissionsMap[operation];
- } else if (Array.isArray(pointerFields) && pointerFields.every(function (field) {
- return typeof field === 'string';
- })) {
- this.permissionsMap[operation] = pointerFields;
- } else {
- throw new TypeError(`${operation}.pointerFields must be an array of strings or undefined.`);
- }
- }
- }, {
- key: "_getGroupPointerPermissions",
- value: function _getGroupPointerPermissions(operation) {
- return this.permissionsMap[operation];
- }
- }, {
- key: "setReadUserFields",
- value: function setReadUserFields(pointerFields) {
- this._setGroupPointerPermission('readUserFields', pointerFields);
- }
- }, {
- key: "getReadUserFields",
- value: function getReadUserFields() {
- return this._getGroupPointerPermissions('readUserFields');
- }
- }, {
- key: "setWriteUserFields",
- value: function setWriteUserFields(pointerFields) {
- this._setGroupPointerPermission('writeUserFields', pointerFields);
- }
- }, {
- key: "getWriteUserFields",
- value: function getWriteUserFields() {
- return this._getGroupPointerPermissions('writeUserFields');
- }
- }, {
- key: "setProtectedFields",
- value: function setProtectedFields(userId, fields) {
- this._setArrayAccess('protectedFields', userId, fields);
- }
- }, {
- key: "getProtectedFields",
- value: function getProtectedFields(userId) {
- return this._getAccess('protectedFields', userId, false);
- }
- }, {
- key: "setReadAccess",
- value: function setReadAccess(userId, allowed) {
- this._setAccess('find', userId, allowed);
- this._setAccess('get', userId, allowed);
- this._setAccess('count', userId, allowed);
- }
- }, {
- key: "getReadAccess",
- value: function getReadAccess(userId) {
- return this._getAccess('find', userId) && this._getAccess('get', userId) && this._getAccess('count', userId);
- }
- }, {
- key: "setWriteAccess",
- value: function setWriteAccess(userId, allowed) {
- this._setAccess('create', userId, allowed);
- this._setAccess('update', userId, allowed);
- this._setAccess('delete', userId, allowed);
- this._setAccess('addField', userId, allowed);
- }
- }, {
- key: "getWriteAccess",
- value: function getWriteAccess(userId) {
- return this._getAccess('create', userId) && this._getAccess('update', userId) && this._getAccess('delete', userId) && this._getAccess('addField', userId);
- }
- }, {
- key: "setPublicReadAccess",
- value: function setPublicReadAccess(allowed) {
- this.setReadAccess(PUBLIC_KEY, allowed);
- }
- }, {
- key: "getPublicReadAccess",
- value: function getPublicReadAccess() {
- return this.getReadAccess(PUBLIC_KEY);
- }
- }, {
- key: "setPublicWriteAccess",
- value: function setPublicWriteAccess(allowed) {
- this.setWriteAccess(PUBLIC_KEY, allowed);
- }
- }, {
- key: "getPublicWriteAccess",
- value: function getPublicWriteAccess() {
- return this.getWriteAccess(PUBLIC_KEY);
- }
- }, {
- key: "setPublicProtectedFields",
- value: function setPublicProtectedFields(fields) {
- this.setProtectedFields(PUBLIC_KEY, fields);
- }
- }, {
- key: "getPublicProtectedFields",
- value: function getPublicProtectedFields() {
- return this.getProtectedFields(PUBLIC_KEY);
- }
- }, {
- key: "getRoleReadAccess",
- value: function getRoleReadAccess(role) {
- return this.getReadAccess(this._getRoleName(role));
- }
- }, {
- key: "getRoleWriteAccess",
- value: function getRoleWriteAccess(role) {
- return this.getWriteAccess(this._getRoleName(role));
- }
- }, {
- key: "setRoleReadAccess",
- value: function setRoleReadAccess(role, allowed) {
- this.setReadAccess(this._getRoleName(role), allowed);
- }
- }, {
- key: "setRoleWriteAccess",
- value: function setRoleWriteAccess(role, allowed) {
- this.setWriteAccess(this._getRoleName(role), allowed);
- }
- }, {
- key: "getRoleProtectedFields",
- value: function getRoleProtectedFields(role) {
- return this.getProtectedFields(this._getRoleName(role));
- }
- }, {
- key: "setRoleProtectedFields",
- value: function setRoleProtectedFields(role, fields) {
- this.setProtectedFields(this._getRoleName(role), fields);
- }
- }]);
- return ParseCLP;
- }();
- var _default = ParseCLP;
- exports.default = _default;
|