mirror of https://github.com/Squidex/squidex.git
Sebastian Stehle
7 years ago
36 changed files with 555 additions and 149 deletions
@ -0,0 +1,106 @@ |
|||||
|
/* |
||||
|
* Squidex Headless CMS |
||||
|
* |
||||
|
* @license |
||||
|
* Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved. |
||||
|
*/ |
||||
|
|
||||
|
import { Permission, permissionsAllow } from './permission'; |
||||
|
|
||||
|
describe('Permission', () => { |
||||
|
it('Should_return_true_if_given_and_requested_permission_have_wildcards', () => { |
||||
|
const g = new Permission('app.*'); |
||||
|
const r = new Permission('app.*'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_given_permission_equals_requested_permission', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
const r = new Permission('app.contents'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_given_permission_is_parent_of_requested_permission', () => { |
||||
|
const g = new Permission('app'); |
||||
|
const r = new Permission('app.contents'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_given_permission_is_alternative_of_requested_permission', () => { |
||||
|
const g = new Permission('app.contents|schemas'); |
||||
|
const r = new Permission('app.contents'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_given_permission_equals_alternative_requested_permission', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
const r = new Permission('app.contents|schemas'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_given_permission_has_wildcard_for_requested_permission', () => { |
||||
|
const g = new Permission('app.*'); |
||||
|
const r = new Permission('app.contents'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_given_permission_not_equals_requested_permission', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
const r = new Permission('app.assets'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeFalsy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_given_permission_is_child_of_requested_permission', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
const r = new Permission('app'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeFalsy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_given_permission_has_no_wildcard_but_requested_has', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
const r = new Permission('app.*'); |
||||
|
|
||||
|
expect(g.allows(r)).toBeFalsy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_given_requested_permission_is_null', () => { |
||||
|
const g = new Permission('app.contents'); |
||||
|
|
||||
|
expect(g.allows(null!)).toBeFalsy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_true_if_any_permission_gives_permission_to_request', () => { |
||||
|
const sut = [ |
||||
|
new Permission('app.contents'), |
||||
|
new Permission('app.assets') |
||||
|
]; |
||||
|
|
||||
|
expect(permissionsAllow(sut, new Permission('app.contents'))).toBeTruthy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_none_permission_gives_permission_to_request', () => { |
||||
|
const sut = [ |
||||
|
new Permission('app.contents'), |
||||
|
new Permission('app.assets') |
||||
|
]; |
||||
|
|
||||
|
expect(permissionsAllow(sut, new Permission('app.schemas'))).toBeFalsy(); |
||||
|
}); |
||||
|
|
||||
|
it('Should_return_false_if_permission_to_request_is_null', () => { |
||||
|
const sut = [ |
||||
|
new Permission('app.contents'), |
||||
|
new Permission('app.assets') |
||||
|
]; |
||||
|
|
||||
|
expect(permissionsAllow(sut, null!)).toBeFalsy(); |
||||
|
}); |
||||
|
}); |
||||
@ -0,0 +1,85 @@ |
|||||
|
/* |
||||
|
* Squidex Headless CMS |
||||
|
* |
||||
|
* @license |
||||
|
* Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved. |
||||
|
*/ |
||||
|
|
||||
|
import { Types } from './types'; |
||||
|
|
||||
|
export class Permission { |
||||
|
private readonly parts: ({ [key: string]: true } | null)[]; |
||||
|
|
||||
|
constructor( |
||||
|
public readonly id: string |
||||
|
) { |
||||
|
this.parts = id.split('.').map(x => { |
||||
|
if (x === '*') { |
||||
|
return null; |
||||
|
} else { |
||||
|
const result: { [key: string]: true } = {}; |
||||
|
|
||||
|
for (let p of x.split('|')) { |
||||
|
result[p] = true; |
||||
|
} |
||||
|
|
||||
|
return result; |
||||
|
} |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
public allows(permission?: Permission | string) { |
||||
|
if (!permission) { |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
if (Types.isString(permission)) { |
||||
|
permission = new Permission(permission); |
||||
|
} |
||||
|
|
||||
|
if (this.parts.length > permission.parts.length) { |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
for (let i = 0; i < this.parts.length; i++) { |
||||
|
let lhs = this.parts[i]; |
||||
|
let rhs = permission.parts[i]; |
||||
|
|
||||
|
if (lhs !== null && (rhs === null || !Permission.any(lhs, rhs))) { |
||||
|
return false; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return true; |
||||
|
} |
||||
|
|
||||
|
private static any(lhs: { [key: string]: true }, rhs: { [key: string]: true }) { |
||||
|
for (let key in lhs) { |
||||
|
if (rhs[key]) { |
||||
|
return true; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
for (let key in rhs) { |
||||
|
if (lhs[key]) { |
||||
|
return true; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return false; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
export function permissionsAllow(permissions: Permission[], other: Permission) { |
||||
|
if (!other) { |
||||
|
return false; |
||||
|
} |
||||
|
|
||||
|
for (let permission of permissions) { |
||||
|
if (permission.allows(other)) { |
||||
|
return true; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return false; |
||||
|
} |
||||
@ -0,0 +1,86 @@ |
|||||
|
/* |
||||
|
* Squidex Headless CMS |
||||
|
* |
||||
|
* @license |
||||
|
* Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved. |
||||
|
*/ |
||||
|
|
||||
|
import { Directive, Input, OnChanges, TemplateRef, ViewContainerRef } from '@angular/core'; |
||||
|
|
||||
|
import { |
||||
|
AppDto, |
||||
|
AppsState, |
||||
|
AuthService, |
||||
|
Permission, |
||||
|
permissionsAllow, |
||||
|
SchemaDto, |
||||
|
SchemasState |
||||
|
} from '@app/shared/internal'; |
||||
|
|
||||
|
@Directive({ |
||||
|
selector: '[sqxPermission]' |
||||
|
}) |
||||
|
export class PermissionDirective implements OnChanges { |
||||
|
private viewCreated = false; |
||||
|
|
||||
|
@Input('sqxPermissionApp') |
||||
|
public app?: AppDto; |
||||
|
|
||||
|
@Input('sqxPermissionSchema') |
||||
|
public schema?: SchemaDto; |
||||
|
|
||||
|
@Input('sqxPermission') |
||||
|
public permissions: string; |
||||
|
|
||||
|
constructor( |
||||
|
private readonly authService: AuthService, |
||||
|
private readonly appsState: AppsState, |
||||
|
private readonly schemasState: SchemasState, |
||||
|
private readonly templateRef: TemplateRef<any>, |
||||
|
private readonly viewContainer: ViewContainerRef |
||||
|
) { |
||||
|
} |
||||
|
|
||||
|
public ngOnChanges() { |
||||
|
let show = false; |
||||
|
|
||||
|
if (this.permissions) { |
||||
|
for (let id of this.permissions.split(';')) { |
||||
|
const app = this.app || this.appsState.snapshot.selectedApp; |
||||
|
|
||||
|
if (app) { |
||||
|
id = id.replace('{app}', app.name); |
||||
|
} |
||||
|
|
||||
|
const schema = this.schema || this.schemasState.snapshot.selectedSchema; |
||||
|
|
||||
|
if (schema) { |
||||
|
id = id.replace('{name}', schema.name); |
||||
|
} |
||||
|
|
||||
|
const permission = new Permission(id); |
||||
|
|
||||
|
if (app && permissionsAllow(app.permissions, permission)) { |
||||
|
show = true; |
||||
|
} |
||||
|
|
||||
|
if (!show) { |
||||
|
show = permissionsAllow(this.authService.user!.permissions, permission); |
||||
|
} |
||||
|
|
||||
|
if (show) { |
||||
|
break; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (show && !this.viewCreated) { |
||||
|
this.viewContainer.createEmbeddedView(this.templateRef); |
||||
|
this.viewCreated = true; |
||||
|
} else if (show && this.viewCreated) { |
||||
|
this.viewContainer.clear(); |
||||
|
this.viewCreated = false; |
||||
|
} |
||||
|
|
||||
|
} |
||||
|
} |
||||
Loading…
Reference in new issue