Files
twenty_crm/server/src/ability/handlers/person.ability-handler.ts
Jérémy M c4ad0171b0 feat: add missing abilities (#354)
feat: add all missing abilities rules on resolvers
2023-06-22 11:09:17 -07:00

71 lines
2.2 KiB
TypeScript

import { PrismaService } from 'src/database/prisma.service';
import { AbilityAction } from '../ability.action';
import { AppAbility } from '../ability.factory';
import { IAbilityHandler } from '../interfaces/ability-handler.interface';
import {
ExecutionContext,
Injectable,
NotFoundException,
} from '@nestjs/common';
import { PersonWhereInput } from 'src/core/@generated/person/person-where.input';
import { GqlExecutionContext } from '@nestjs/graphql';
import { assert } from 'src/utils/assert';
import { subject } from '@casl/ability';
class PersonArgs {
where?: PersonWhereInput;
}
@Injectable()
export class ManagePersonAbilityHandler implements IAbilityHandler {
async handle(ability: AppAbility) {
return ability.can(AbilityAction.Manage, 'Person');
}
}
@Injectable()
export class ReadPersonAbilityHandler implements IAbilityHandler {
handle(ability: AppAbility) {
return ability.can(AbilityAction.Read, 'Person');
}
}
@Injectable()
export class CreatePersonAbilityHandler implements IAbilityHandler {
handle(ability: AppAbility) {
return ability.can(AbilityAction.Create, 'Person');
}
}
@Injectable()
export class UpdatePersonAbilityHandler implements IAbilityHandler {
constructor(private readonly prismaService: PrismaService) {}
async handle(ability: AppAbility, context: ExecutionContext) {
const gqlContext = GqlExecutionContext.create(context);
const args = gqlContext.getArgs<PersonArgs>();
const person = await this.prismaService.person.findFirst({
where: args.where,
});
assert(person, '', NotFoundException);
return ability.can(AbilityAction.Update, subject('Person', person));
}
}
@Injectable()
export class DeletePersonAbilityHandler implements IAbilityHandler {
constructor(private readonly prismaService: PrismaService) {}
async handle(ability: AppAbility, context: ExecutionContext) {
const gqlContext = GqlExecutionContext.create(context);
const args = gqlContext.getArgs<PersonArgs>();
const person = await this.prismaService.person.findFirst({
where: args.where,
});
assert(person, '', NotFoundException);
return ability.can(AbilityAction.Delete, subject('Person', person));
}
}