92 lines
2.1 KiB
TypeScript
92 lines
2.1 KiB
TypeScript
import Context from '../../types/express/context';
|
|
import Role from '../../models/role';
|
|
import Permission from '../../models/permission';
|
|
import permissionCatalog from '../../helpers/permission-catalog.ee';
|
|
|
|
type Params = {
|
|
input: {
|
|
id: string;
|
|
name: string;
|
|
description: string;
|
|
permissions: Permission[];
|
|
};
|
|
};
|
|
|
|
const updateRole = async (
|
|
_parent: unknown,
|
|
params: Params,
|
|
context: Context
|
|
) => {
|
|
context.currentUser.can('update', 'Role');
|
|
|
|
const {
|
|
id,
|
|
name,
|
|
description,
|
|
permissions,
|
|
} = params.input;
|
|
|
|
const role = await Role
|
|
.query()
|
|
.findById(id)
|
|
.throwIfNotFound();
|
|
|
|
try {
|
|
const updatedRole = await Role.transaction(async (trx) => {
|
|
await role.$relatedQuery('permissions', trx).delete();
|
|
|
|
if (permissions?.length) {
|
|
const sanitizedPermissions = permissions
|
|
.filter((permission) => {
|
|
const {
|
|
action,
|
|
subject,
|
|
conditions,
|
|
} = permission;
|
|
|
|
const relevantAction = permissionCatalog.actions.find(actionCatalogItem => actionCatalogItem.key === action);
|
|
const validSubject = relevantAction.subjects.includes(subject);
|
|
const validConditions = conditions.every(condition => {
|
|
return !!permissionCatalog
|
|
.conditions
|
|
.find((conditionCatalogItem) => conditionCatalogItem.key === condition);
|
|
})
|
|
|
|
return validSubject && validConditions;
|
|
})
|
|
.map((permission) => ({
|
|
...permission,
|
|
roleId: role.id,
|
|
}));
|
|
|
|
await Permission.query().insert(sanitizedPermissions);
|
|
}
|
|
|
|
await role
|
|
.$query(trx)
|
|
.patch(
|
|
{
|
|
name,
|
|
description,
|
|
}
|
|
);
|
|
|
|
return await Role
|
|
.query(trx)
|
|
.leftJoinRelated({
|
|
permissions: true
|
|
})
|
|
.withGraphFetched({
|
|
permissions: true
|
|
})
|
|
.findById(id);
|
|
});
|
|
|
|
return updatedRole;
|
|
} catch (err) {
|
|
throw new Error('The role could not be updated!');
|
|
}
|
|
};
|
|
|
|
export default updateRole;
|