egg-rbac-instance/lib/mongoose/index.js

Role Based Access Control for eggjs

'use strict';

const role = require('./model/role');
const permission = require('./model/permission');
const adpt = require('./model/adpt')
const debug = require('debug')('egg-rbac');

module.exports = exports = class mongooseStorage {

  constructor(_mongoose,db) {
    this._mongoose = _mongoose;
    this.Role = role(_mongoose,db);
    this.Permission = permission(_mongoose,db);
    this.Adpt = adpt(_mongoose,db);
  }

  newRole({ name, alias, grants, isself }) {
    return this.Role.findOne({ name })
      .then(oldRole => {
        if (oldRole === null) {
          const newRole = new this.Role();
          newRole.name = name;
          newRole.alias = alias;
          newRole.grants = grants;
          newRole.isself = isself;
          return newRole.save();
        }
        return null;
      });
  }

  newPermission({ name, alias, sort, methods }) {
    return this.Permission.findOne({alias}).then(repeat => {
      if (repeat) {
        throw new Error('[egg-rbac] newPermission: alias repeat')
      }
      return new this.Permission({ name, alias, sort, methods }).save()
    })
  }

  newPermissionCheckRepeat({ name, methods }) {
    let newUrl = name.replace(/{\w+}/, '');
    return this.Permission.find().then(list => {
      for (let i = 0; i < list.length; i++) {
        let oldUrl = list[i].name.replace(/{\w+}/, '');
        if(newUrl == oldUrl && methods == list[i].methods) return true
      }
      return false
    })
  }


  newAdpt({ name, alias, values }) {
    return this.Adpt.findOne({alias}).then(repeat => {
      if (repeat) {
        throw new Error('[egg-rbac] newAdpt: alias repeat')
      }
      return this.Adpt.findOne({name, alias}).then(repeat => {
        if (repeat) {
          throw new Error('[egg-rbac] newAdpt: name and alias repeat')
        }
        return new this.Adpt({ name, alias, values }).save()
      })
    })
  }

  modifyRoleAlias(_id, alias, isself) {
    return this.Role.updateOne({ _id }, { $set: { alias, isself } });
  }

  modifyRoleGrants(_id, grants) {
    return this.Role.updateOne({ _id }, { $set: { grants } });
  }

  modifyPermissionAlias(_id, alias, sort, methods) {
    return this.Permission.updateOne({ _id }, { $set: { alias, sort, methods } });
  }

  modifyRoleAdpt (_id, adpt) { return this.Role.updateOne({ _id }, { $set: { adpt } }) }

  removeRole(_id) {
    return this.Role.remove({ _id });
  }

  removeAdpt(alias) {
    return Promise.all([
      this.Adpt.deleteOne({ alias }),
      this.Role.update({}, { $unset: { [`adpt.${alias}`]: '' } }, { multi: true }),
    ]);
  }

  removePermission(_id) {
    return Promise.all([
      this.Permission.deleteOne({ _id }),
      this.Role.update({}, { $pull: { grants: _id } }, { multi: true }),
    ]);
  }

  addPermission(_id, permissionIds) {
    return this.Role.updateOne({ _id }, { $addToSet: { grants: { $each: permissionIds } } });
  }

  removePermissions(_id, permissionIds) {
    return this.Role.updateOne({ _id }, { $pull: { grants: { $in: permissionIds } } });
  }

  insertManyPermission(permissions) {
    return this.Permission.insertMany(permissions)
      .then(result => {
        return result.insertedIds;
      });
  }

  getRole(name) {
    return this.Role.findOne({ name }).populate('grants');
  }

  getAllRoles() {
    return this.Role.find({});
  }

  getAdpt(alias) {
    return this.Adpt.findOne({ alias })
  }

  getAllAdpt(query = {}) { return this.Adpt.find(query) }

  modifyAdpt ({name, alias, values}) {
    return this.Adpt.updateOne({ alias }, { $set: { name, values } })
  }

  getPermissions(names) {
    debug('getPermissions names = %O', names);
    return this.Permission.find({ name: { $in: names } });
  }

  getAllPermissions() {
    return this.Permission.find({});
  }

};