dennii/dbgate
1
0
Fork 0
mirror of https://github.com/DeNNiiInc/dbgate.git synced 2026-04-17 23:45:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

better permission compiler

Browse Source
This commit is contained in:
Jan Prochazka
2022-03-21 20:37:04 +01:00
parent a1b7ad18af
commit 26881a3e39
1 changed files with 51 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

65
packages/tools/src/testPermission.ts
View File

@@ -1,10 +1,14 @@
import _escapeRegExp from 'lodash/escapeRegExp';
import _isString from 'lodash/isString';
import _compact from 'lodash/compact';
import _flatten from 'lodash/flatten';
interface CompiledPermissionLevel {
re: RegExp;
type: 'allow' | 'deny';
}
interface CompiledPermissions {
revoke: RegExp;
allow: RegExp;
levels: CompiledPermissionLevel[];
}
function compileRegexp(permissions) {
@@ -14,25 +18,58 @@ function compileRegexp(permissions) {
export function compilePermissions(permissions: string[] | string): CompiledPermissions {
if (!permissions) return null;
if (_isString(permissions)) permissions = permissions.split(',');
if (_isString(permissions)) permissions = permissions.split(/,|;|\||\s/);
else permissions = _flatten(permissions.map(x => x.split(/,|;|\||\s/)));
permissions = _compact(permissions.map(x => x.trim()));
const revoke = permissions.filter(x => x.startsWith('~')).map(x => x.substring(1));
const allow = permissions.filter(x => !x.startsWith('~'));
return {
revoke: compileRegexp(revoke),
allow: compileRegexp(allow),
let lastType = null;
let lastItems = [];
const res: CompiledPermissions = {
levels: [],
};
for (const item of permissions) {
const type = item.startsWith('~') ? 'deny' : 'allow';
const perm = item.startsWith('~') ? item.substring(1) : item;
if (lastType != null && type != lastType) {
res.levels.push({
re: compileRegexp(lastItems),
type: lastType,
});
lastItems = [];
}
lastItems.push(perm);
lastType = type;
}
if (lastItems.length > 0) {
res.levels.push({
re: compileRegexp(lastItems),
type: lastType,
});
}
return res;
}
export function testPermission(tested: string, permissions: CompiledPermissions) {
if (!permissions) return true;
if (!permissions.revoke) return true;
let allow = true;
if (tested.match(permissions.revoke)) {
if (!tested.match(permissions.allow)) {
return false;
if (!permissions) {
return true;
}
for (const level of permissions.levels) {
if (tested.match(level.re)) {
if (level.type == 'allow') allow = true;
if (level.type == 'deny') allow = false;
}
}
return true;
return allow;
}