WEBDIENSTE/huly-platform
1
0
Fork 0
mirror of https://github.com/hcengineering/platform.git synced 2026-09-12 04:37:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

EQMS-1650: External approvers (#9987)

Browse Source 
Signed-off-by: Alexey Zinoviev <alexey.zinoviev@xored.com>
This commit is contained in:
Alexey Zinoviev
2025-10-01 21:16:55 +04:00
committed by GitHub
parent 0f80bfd95f
commit e5b7f9cc1d
38 changed files with 372 additions and 108 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/middleware/src/spaceSecurity.ts
+26 -6
View File
@@ -26,6 +26,7 @@ import core, {
DOMAIN_MODEL,
type FindResult,
generateId,
getClassCollaborators,
type LookupData,
type MeasureContext,
type ObjQueryType,
@@ -456,12 +457,12 @@ export class SpaceSecurityMiddleware extends BaseMiddleware implements Middlewar
}
ctx.contextData.broadcast.targets.spaceSec = async (tx) => {
const cud = tx as TxCUD<Doc>
if (cud.objectClass === undefined) return undefined
// For system and main spaces broadcast to all users except guests that are not collaborators for objects with collab security enabled
if (this.systemSpaces.has(tx.objectSpace) || this.mainSpaces.has(tx.objectSpace)) {
const cud = tx as TxCUD<Doc>
if (cud.objectClass === undefined) return undefined
const collabSec = this.context.modelDb.findAllSync(core.class.ClassCollaborators, {
attachedTo: cud.objectClass
})[0]
const collabSec = getClassCollaborators(this.context.modelDb, this.context.hierarchy, cud.objectClass)
if (collabSec?.provideSecurity === true) {
const guests = new Set<AccountUuid>()
for (const val of ctx.contextData.socialStringsToUsers.values()) {
@@ -483,7 +484,26 @@ export class SpaceSecurityMiddleware extends BaseMiddleware implements Middlewar
const space = this.spacesMap.get(tx.objectSpace)
if (space === undefined) return undefined
return space.members.length === 0 ? undefined : { target: this.getTargets(space?.members) }
// For all other spaces broadcast to space members + guests that are collaborators for objects with collab security enabled
let collabTargets: AccountUuid[] = []
const collabSec = getClassCollaborators(this.context.modelDb, this.context.hierarchy, cud.objectClass)
if (collabSec?.provideSecurity === true) {
const guests = new Set<AccountUuid>()
for (const val of ctx.contextData.socialStringsToUsers.values()) {
if ([AccountRole.Guest, AccountRole.ReadOnlyGuest].includes(val.role)) {
guests.add(val.accontUuid)
}
}
const collaboratorObjs = (await this.next?.findAll(ctx, core.class.Collaborator, {
attachedTo: cud.objectId
})) as Collaborator[]
collabTargets = collaboratorObjs.map((it) => it.collaborator).filter((it) => guests.has(it))
}
const spaceTargets = space.members.length === 0 ? [] : this.getTargets(space?.members)
const target = [...collabTargets, ...spaceTargets]
return target.length === 0 ? undefined : { target }
}
await this.next?.handleBroadcast(ctx)