admin/twenty
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[FE] handle restricted objects 2 (#12437)

Browse Source 
Co-authored-by: Charles Bochet <charles@twenty.com>
This commit is contained in:
Weiko
2025-06-05 15:49:22 +02:00
committed by GitHub
parent ad804ebecd
commit 3f30964523
109 changed files with 904 additions and 306 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
packages/twenty-server/src/engine/metadata-modules/workspace-permissions-cache/workspace-permissions-cache.service.ts
View File

@ -247,15 +247,17 @@ export class WorkspacePermissionsCacheService {
relations: ['objectPermissions'],
});
const workspaceObjectMetadataIds =
await this.getWorkspaceObjectMetadataIds(workspaceId);
const workspaceObjectMetadataCollection =
await this.getWorkspaceObjectMetadataCollection(workspaceId);
const permissionsByRoleId: ObjectRecordsPermissionsByRoleId = {};
for (const role of roles) {
const objectRecordsPermissions: ObjectRecordsPermissions = {};
for (const objectMetadataId of workspaceObjectMetadataIds) {
for (const objectMetadata of workspaceObjectMetadataCollection) {
const { id: objectMetadataId, isSystem } = objectMetadata;
let canRead = role.canReadAllObjectRecords;
let canUpdate = role.canUpdateAllObjectRecords;
let canSoftDelete = role.canSoftDeleteAllObjectRecords;
@ -267,17 +269,27 @@ export class WorkspacePermissionsCacheService {
objectPermission.objectMetadataId === objectMetadataId,
);
canRead =
objectRecordPermissionsOverride?.canReadObjectRecords ?? canRead;
canUpdate =
objectRecordPermissionsOverride?.canUpdateObjectRecords ??
canUpdate;
canSoftDelete =
objectRecordPermissionsOverride?.canSoftDeleteObjectRecords ??
canSoftDelete;
canDestroy =
objectRecordPermissionsOverride?.canDestroyObjectRecords ??
canDestroy;
const getPermissionValue = (
overrideValue: boolean | undefined,
defaultValue: boolean,
) => (isSystem ? true : (overrideValue ?? defaultValue));
canRead = getPermissionValue(
objectRecordPermissionsOverride?.canReadObjectRecords,
canRead,
);
canUpdate = getPermissionValue(
objectRecordPermissionsOverride?.canUpdateObjectRecords,
canUpdate,
);
canSoftDelete = getPermissionValue(
objectRecordPermissionsOverride?.canSoftDeleteObjectRecords,
canSoftDelete,
);
canDestroy = getPermissionValue(
objectRecordPermissionsOverride?.canDestroyObjectRecords,
canDestroy,
);
}
objectRecordsPermissions[objectMetadataId] = {
@ -294,17 +306,17 @@ export class WorkspacePermissionsCacheService {
return permissionsByRoleId;
}
private async getWorkspaceObjectMetadataIds(
private async getWorkspaceObjectMetadataCollection(
workspaceId: string,
): Promise<string[]> {
): Promise<ObjectMetadataEntity[]> {
const workspaceObjectMetadata = await this.objectMetadataRepository.find({
where: {
workspaceId,
},
select: ['id'],
select: ['id', 'isSystem'],
});
return workspaceObjectMetadata.map((objectMetadata) => objectMetadata.id);
return workspaceObjectMetadata;
}
private async getUserWorkspaceRoleMapFromDatabase({