egg-rbac/lib/mongoose/index.js

Role Based Access Control for eggjs

'use strict';

const role = require('./model/role');
const permission = require('./model/permission');
const debug = require('debug')('egg-rbac');

module.exports = exports = class mongooseStorage {

  constructor(_mongoose) {
    this._mongoose = _mongoose;
    this.Role = role(_mongoose);
    this.Permission = permission(_mongoose);
  }

  newRole({ name, alias, grants }) {
    return this.Role.findOne({ name })
      .then(oldRole => {
        if (oldRole === null) {
          const newRole = new this.Role();
          newRole.name = name;
          newRole.alias = alias;
          newRole.grants = grants;
          return newRole.save();
        }
        return null;
      });
  }

  newPermission({ name, alias }) {
    return this.Permission.findOne({ name })
      .then(oldPermission => {
        if (oldPermission === null) {
          const newPermission = new this.Permission();
          newPermission.name = name;
          newPermission.alias = alias;
          return newPermission.save();
        }
        return null;
      });
  }

  modifyRoleAlias(_id, alias) {
    return this.Role.updateOne({ _id }, { $set: { alias } });
  }

  modifyPermissionAlias(_id, alias) {
    return this.Permission.updateOne({ _id }, { $set: { alias } });
  }

  removeRole(_id) {
    return this.Role.remove({ _id });
  }

  removePermission(_id) {
    return Promise.all([
      this.Permission.remove({ _id }),
      this.Role.update({}, { $pull: { grants: _id } }),
    ]);
  }

  addPermission(_id, permissionIds) {
    return this.Role.updateOne({ _id }, { $addToSet: { grants: { $each: permissionIds } } });
  }

  removePermissions(_id, permissionIds) {
    return this.Role.updateOne({ _id }, { $pull: { grants: { $in: permissionIds } } });
  }

  insertManyPermission(permissions) {
    return this.Permission.insertMany(permissions)
      .then(result => {
        return result.insertedIds;
      });
  }

  getRole(name) {
    return this.Role.findOne({ name }).populate('grants');
  }

  getAllRoles() {
    return this.Role.find({});
  }

  getPermissions(names) {
    debug('getPermissions names = %O', names);
    return this.Permission.find({ name: { $in: names } });
  }

  getAllPermissions() {
    return this.Permission.find({});
  }

};