mirror of https://github.com/Squidex/squidex.git
Sebastian Stehle
6 years ago
committed by
GitHub
GitHub
36 changed files with 421 additions and 290 deletions
@ -1,61 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex UG (haftungsbeschraenkt)
|
|
||||
// All rights reserved. Licensed under the MIT license.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using System; |
|
||||
using System.Linq; |
|
||||
using Squidex.Infrastructure.Security; |
|
||||
using Squidex.Shared; |
|
||||
|
|
||||
namespace Squidex.Domain.Apps.Entities.Apps |
|
||||
{ |
|
||||
public static class RoleExtensions |
|
||||
{ |
|
||||
public static string[] Prefix(this string[] permissions, string name) |
|
||||
{ |
|
||||
var result = new string[permissions.Length + 1]; |
|
||||
|
|
||||
result[0] = Permissions.ForApp(Permissions.AppCommon, name).Id; |
|
||||
|
|
||||
if (permissions.Length > 0) |
|
||||
{ |
|
||||
var prefix = Permissions.ForApp(Permissions.App, name).Id; |
|
||||
|
|
||||
for (var i = 0; i < permissions.Length; i++) |
|
||||
{ |
|
||||
result[i + 1] = string.Concat(prefix, ".", permissions[i]); |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
permissions = result.Distinct().ToArray(); |
|
||||
|
|
||||
return permissions; |
|
||||
} |
|
||||
|
|
||||
public static PermissionSet WithoutApp(this PermissionSet set, string name) |
|
||||
{ |
|
||||
var prefix = Permissions.ForApp(Permissions.App, name).Id; |
|
||||
|
|
||||
return new PermissionSet(set.Select(x => |
|
||||
{ |
|
||||
var id = x.Id; |
|
||||
|
|
||||
if (string.Equals(id, prefix, StringComparison.OrdinalIgnoreCase)) |
|
||||
{ |
|
||||
return Permission.Any; |
|
||||
} |
|
||||
else if (id.StartsWith(prefix, StringComparison.OrdinalIgnoreCase)) |
|
||||
{ |
|
||||
return id.Substring(prefix.Length + 1); |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
return id; |
|
||||
} |
|
||||
}).Where(x => x != "common")); |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
@ -0,0 +1,32 @@ |
|||||
|
/* |
||||
|
* Squidex Headless CMS |
||||
|
* |
||||
|
* @license |
||||
|
* Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved. |
||||
|
*/ |
||||
|
|
||||
|
import { Location } from '@angular/common'; |
||||
|
import { Component } from '@angular/core'; |
||||
|
|
||||
|
@Component({ |
||||
|
selector: 'sqx-forbidden-page', |
||||
|
template: ` |
||||
|
<sqx-title message="Not Found"></sqx-title> |
||||
|
|
||||
|
<div class="landing-page"> |
||||
|
<img class="splash-image" src="~/../squid.svg?title=FORBIDDEN&text=You%20are%20not%20allowed%20to%20view%20this%20page&background=white&small" /> |
||||
|
|
||||
|
<a href="#" (click)="back()">Back to previous page.</a> |
||||
|
</div> |
||||
|
` |
||||
|
}) |
||||
|
export class ForbiddenPageComponent { |
||||
|
constructor( |
||||
|
private readonly location: Location |
||||
|
) { |
||||
|
} |
||||
|
|
||||
|
public back() { |
||||
|
this.location.back(); |
||||
|
} |
||||
|
} |
||||
@ -1,13 +0,0 @@ |
|||||
<sqx-title message="Not Found"></sqx-title> |
|
||||
|
|
||||
<div class="landing-page"> |
|
||||
<img class="splash-image" src="~/../squid.svg?title=OH%20DAMN&text=This%20is%20not%20the%20page%20you%20are%20looking%20for!&background=white&small" /> |
|
||||
|
|
||||
<h1>Not Found</h1> |
|
||||
|
|
||||
<p> |
|
||||
Sorry, the page or resource you are looking for does not exist. |
|
||||
</p> |
|
||||
|
|
||||
<a href="#" (click)="back()">Back to previous page.</a> |
|
||||
</div> |
|
||||
@ -1,2 +0,0 @@ |
|||||
@import '_mixins'; |
|
||||
@import '_vars'; |
|
||||
@ -0,0 +1,79 @@ |
|||||
|
// ==========================================================================
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex UG (haftungsbeschraenkt)
|
||||
|
// All rights reserved. Licensed under the MIT license.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using System.Linq; |
||||
|
using Squidex.Domain.Apps.Core.Apps; |
||||
|
using Xunit; |
||||
|
|
||||
|
namespace Squidex.Domain.Apps.Core.Model.Apps |
||||
|
{ |
||||
|
public class RoleTests |
||||
|
{ |
||||
|
[Fact] |
||||
|
public void Should_be_default_role() |
||||
|
{ |
||||
|
var role = new Role("Owner"); |
||||
|
|
||||
|
Assert.True(role.IsDefault); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_not_be_default_role() |
||||
|
{ |
||||
|
var role = new Role("Custom"); |
||||
|
|
||||
|
Assert.False(role.IsDefault); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_add_common_permission() |
||||
|
{ |
||||
|
var role = new Role("Name"); |
||||
|
|
||||
|
var result = role.ForApp("my-app").Permissions.ToIds(); |
||||
|
|
||||
|
Assert.Equal(new[] { "squidex.apps.my-app.common" }, result); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_not_have_duplicate_permission() |
||||
|
{ |
||||
|
var role = new Role("Name", "common", "common", "common"); |
||||
|
|
||||
|
var result = role.ForApp("my-app").Permissions.ToIds(); |
||||
|
|
||||
|
Assert.Single(result); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_ForApp_permission() |
||||
|
{ |
||||
|
var role = new Role("Name", "clients.read"); |
||||
|
|
||||
|
var result = role.ForApp("my-app").Permissions.ToIds(); |
||||
|
|
||||
|
Assert.Equal("squidex.apps.my-app.clients.read", result.ElementAt(1)); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_check_for_name() |
||||
|
{ |
||||
|
var role = new Role("Custom"); |
||||
|
|
||||
|
Assert.True(role.Equals("Custom")); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void Should_check_for_null_name() |
||||
|
{ |
||||
|
var role = new Role("Custom"); |
||||
|
|
||||
|
Assert.False(role.Equals(null)); |
||||
|
Assert.False(role.Equals("Other")); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -1,80 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex UG (haftungsbeschraenkt)
|
|
||||
// All rights reserved. Licensed under the MIT license.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using System; |
|
||||
using System.Linq; |
|
||||
using Squidex.Infrastructure.Security; |
|
||||
using Xunit; |
|
||||
|
|
||||
namespace Squidex.Domain.Apps.Entities.Apps |
|
||||
{ |
|
||||
public class RoleExtensionsTests |
|
||||
{ |
|
||||
[Fact] |
|
||||
public void Should_add_common_permission() |
|
||||
{ |
|
||||
var source = Array.Empty<string>(); |
|
||||
var result = source.Prefix("my-app"); |
|
||||
|
|
||||
Assert.Equal(new[] { "squidex.apps.my-app.common" }, result); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_not_have_duplicate_permission() |
|
||||
{ |
|
||||
var source = new[] { "common", "common", "common" }; |
|
||||
var result = source.Prefix("my-app"); |
|
||||
|
|
||||
Assert.Single(result); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_prefix_permission() |
|
||||
{ |
|
||||
var source = new[] { "clients.read" }; |
|
||||
var result = source.Prefix("my-app"); |
|
||||
|
|
||||
Assert.Equal("squidex.apps.my-app.clients.read", result[1]); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_remove_app_prefix() |
|
||||
{ |
|
||||
var source = new PermissionSet("squidex.apps.my-app.clients"); |
|
||||
var result = source.WithoutApp("my-app"); |
|
||||
|
|
||||
Assert.Equal("clients", result.First().Id); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_not_remove_app_prefix_when_other_app() |
|
||||
{ |
|
||||
var source = new PermissionSet("squidex.apps.other-app.clients"); |
|
||||
var result = source.WithoutApp("my-app"); |
|
||||
|
|
||||
Assert.Equal("squidex.apps.other-app.clients", result.First().Id); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_set_to_wildcard_when_app_root_permission() |
|
||||
{ |
|
||||
var source = new PermissionSet("squidex.apps.my-app"); |
|
||||
var result = source.WithoutApp("my-app"); |
|
||||
|
|
||||
Assert.Equal(Permission.Any, result.First().Id); |
|
||||
} |
|
||||
|
|
||||
[Fact] |
|
||||
public void Should_remove_common_permission() |
|
||||
{ |
|
||||
var source = new PermissionSet("squidex.apps.my-app.common"); |
|
||||
var result = source.WithoutApp("my-app"); |
|
||||
|
|
||||
Assert.Empty(result); |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
Loading…
Reference in new issue