hrms-bangkok/hrms-api-probation
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

no message

Browse source
This commit is contained in:
DESKTOP-2S5P7D1\Windows 10 2024-10-21 16:08:01 +07:00
parent 2e2dc56f87
commit 00dea2d57e
1 changed files with 201 additions and 217 deletions
Download patch file Download diff file Expand all files Collapse all files

252
src/interfaces/permission.ts
View file

@ -1,63 +1,61 @@
import axios from "axios"; import axios from "axios"
import { RequestWithUser } from "../middlewares/user"; import { RequestWithUser } from "../middlewares/user"
import CallAPI from "./call-api"; import CallAPI from "./call-api"
import HttpError from "./http-error"; import HttpError from "./http-error"
import HttpStatus from "./http-status"; import HttpStatus from "./http-status"
class CheckAuth { class CheckAuth {
public async Permission(req: RequestWithUser, system: string, action: string) { public async Permission(req: RequestWithUser, system: string, action: string) {
if ( if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
req.headers.hasOwnProperty("api_key") && return null
req.headers["api_key"] &&
req.headers["api_key"] == process.env.API_KEY
) {
return null;
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, "/org/permission") .GetData(req, "/org/permission")
.then((x) => { .then(x => {
let permission = false; let permission = false
let role = x.roles.find((x: any) => x.authSysId == system); let role = x.roles.find((x: any) => x.authSysId == system)
if (!role) throw "ไม่มีสิทธิ์เข้าระบบ"; if (!role) throw "ไม่มีสิทธิ์เข้าระบบ"
if (role.attrOwnership == "OWNER") return "OWNER"; if (role.attrOwnership == "OWNER") return "OWNER"
if (action.trim().toLocaleUpperCase() == "CREATE") permission = role.attrIsCreate; if (action.trim().toLocaleUpperCase() == "CREATE") permission = role.attrIsCreate
if (action.trim().toLocaleUpperCase() == "DELETE") permission = role.attrIsDelete; if (action.trim().toLocaleUpperCase() == "DELETE") permission = role.attrIsDelete
if (action.trim().toLocaleUpperCase() == "GET") permission = role.attrIsGet; if (action.trim().toLocaleUpperCase() == "GET") permission = role.attrIsGet
if (action.trim().toLocaleUpperCase() == "LIST") permission = role.attrIsList; if (action.trim().toLocaleUpperCase() == "LIST") permission = role.attrIsList
if (action.trim().toLocaleUpperCase() == "UPDATE") permission = role.attrIsUpdate; if (action.trim().toLocaleUpperCase() == "UPDATE") permission = role.attrIsUpdate
if (permission == false) throw "ไม่มีสิทธิ์ใช้งานระบบนี้"; if (permission == false) throw "ไม่มีสิทธิ์ใช้งานระบบนี้"
return role.attrPrivilege; return role.attrPrivilege
}) })
.catch((x) => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message); throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x); throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}); })
} }
public async PermissionOrg(req: RequestWithUser, system: string, action: string) { public async PermissionOrg(req: RequestWithUser, system: string, action: string) {
if ( if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
req.headers.hasOwnProperty("api_key") && return {
req.headers["api_key"] && root: null,
req.headers["api_key"] == process.env.API_KEY child1: null,
) { child2: null,
return null; child3: null,
child4: null,
}
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, "/org/permission/org") .GetData(req, `/org/permission/org/${system}/${action}`)
.then(async (x) => { .then(async x => {
let privilege = null; let privilege = x.privilege
if (action.trim().toLocaleUpperCase() == "CREATE") // if (action.trim().toLocaleUpperCase() == "CREATE")
privilege = await this.PermissionCreate(req, system); // privilege = await this.PermissionCreate(req, system);
if (action.trim().toLocaleUpperCase() == "DELETE") // if (action.trim().toLocaleUpperCase() == "DELETE")
privilege = await this.PermissionDelete(req, system); // privilege = await this.PermissionDelete(req, system);
if (action.trim().toLocaleUpperCase() == "GET") // if (action.trim().toLocaleUpperCase() == "GET")
privilege = await this.PermissionGet(req, system); // privilege = await this.PermissionGet(req, system);
if (action.trim().toLocaleUpperCase() == "LIST") // if (action.trim().toLocaleUpperCase() == "LIST")
privilege = await this.PermissionList(req, system); // privilege = await this.PermissionList(req, system);
if (action.trim().toLocaleUpperCase() == "UPDATE") // if (action.trim().toLocaleUpperCase() == "UPDATE")
privilege = await this.PermissionUpdate(req, system); // privilege = await this.PermissionUpdate(req, system);
let data: any = { let data: any = {
root: [null], root: [null],
@ -65,25 +63,36 @@ class CheckAuth {
child2: [null], child2: [null],
child3: [null], child3: [null],
child4: [null], child4: [null],
}; privilege: [null],
let node = 4;
if (x.orgChild1Id == null) {
node = 0;
} else if (x.orgChild2Id == null) {
node = 1;
} else if (x.orgChild3Id == null) {
node = 2;
} else if (x.orgChild4Id == null) {
node = 3;
} }
if (privilege == "ROOT") { let node = 4
if (x.orgChild1Id == null) {
node = 0
} else if (x.orgChild2Id == null) {
node = 1
} else if (x.orgChild3Id == null) {
node = 2
} else if (x.orgChild4Id == null) {
node = 3
}
if (privilege == "OWNER") {
data = {
root: null,
child1: null,
child2: null,
child3: null,
child4: null,
privilege: "OWNER",
}
} else if (privilege == "ROOT") {
data = { data = {
root: [x.orgRootId], root: [x.orgRootId],
child1: null, child1: null,
child2: null, child2: null,
child3: null, child3: null,
child4: null, child4: null,
}; privilege: "ROOT",
}
} else if (privilege == "CHILD") { } else if (privilege == "CHILD") {
data = { data = {
root: node >= 0 ? [x.orgRootId] : null, root: node >= 0 ? [x.orgRootId] : null,
@ -91,7 +100,8 @@ class CheckAuth {
child2: node >= 2 ? [x.orgChild2Id] : null, child2: node >= 2 ? [x.orgChild2Id] : null,
child3: node >= 3 ? [x.orgChild3Id] : null, child3: node >= 3 ? [x.orgChild3Id] : null,
child4: node >= 4 ? [x.orgChild4Id] : null, child4: node >= 4 ? [x.orgChild4Id] : null,
}; privilege: "CHILD",
}
} else if (privilege == "NORMAL") { } else if (privilege == "NORMAL") {
data = { data = {
root: [x.orgRootId], root: [x.orgRootId],
@ -99,129 +109,103 @@ class CheckAuth {
child2: [x.orgChild2Id], child2: [x.orgChild2Id],
child3: [x.orgChild3Id], child3: [x.orgChild3Id],
child4: [x.orgChild4Id], child4: [x.orgChild4Id],
}; privilege: "NORMAL",
}
} else if (privilege == "SPECIFIC") { } else if (privilege == "SPECIFIC") {
} else if (privilege == "OWNER") {
data = {
root: null,
child1: null,
child2: null,
child3: null,
child4: null,
};
} }
return data; return data
}) })
.catch((x) => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message); throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x); throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}); })
} }
public async PermissionOrgByUser( public async PermissionOrgByUser(req: RequestWithUser, system: string, action: string, profileId: string) {
req: RequestWithUser, if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
system: string, return true
action: string,
profileId: string,
) {
if (
req.headers.hasOwnProperty("api_key") &&
req.headers["api_key"] &&
req.headers["api_key"] == process.env.API_KEY
) {
return true;
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, `/org/permission/user/${profileId}`) .GetData(req, `/org/permission/user/${system}/${action}/${profileId}`)
.then(async (x) => { .then(async x => {
let org = { let org = x.org
root: [null], // if (action.trim().toLocaleUpperCase() == "CREATE")
child1: [null], // org = await this.PermissionOrgCreate(req, system);
child2: [null], // if (action.trim().toLocaleUpperCase() == "DELETE")
child3: [null], // org = await this.PermissionOrgDelete(req, system);
child4: [null], // if (action.trim().toLocaleUpperCase() == "GET")
}; // org = await this.PermissionOrgGet(req, system);
if (action.trim().toLocaleUpperCase() == "CREATE") // if (action.trim().toLocaleUpperCase() == "LIST")
org = await this.PermissionOrgCreate(req, system); // org = await this.PermissionOrgList(req, system);
if (action.trim().toLocaleUpperCase() == "DELETE") // if (action.trim().toLocaleUpperCase() == "UPDATE")
org = await this.PermissionOrgDelete(req, system); // org = await this.PermissionOrgUpdate(req, system);
if (action.trim().toLocaleUpperCase() == "GET")
org = await this.PermissionOrgGet(req, system);
if (action.trim().toLocaleUpperCase() == "LIST")
org = await this.PermissionOrgList(req, system);
if (action.trim().toLocaleUpperCase() == "UPDATE")
org = await this.PermissionOrgUpdate(req, system);
if (org.root != null) if (x.orgRootId != org.root[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"; if (org.root != null) if (x.orgRootId != org.root[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child1 != null) if (org.child1 != null) if (x.orgChild1Id != org.child1[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (x.orgChild1Id != org.child1[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"; if (org.child2 != null) if (x.orgChild2Id != org.child2[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child2 != null) if (org.child3 != null) if (x.orgChild3Id != org.child3[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (x.orgChild2Id != org.child2[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"; if (org.child4 != null) if (x.orgChild4Id != org.child4[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child3 != null)
if (x.orgChild3Id != org.child3[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล";
if (org.child4 != null)
if (x.orgChild4Id != org.child4[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล";
return true; return true
}) })
.catch((x) => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message); throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x); throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}); })
} }
public async PermissionCreate(req: RequestWithUser, system: string) { public async PermissionCreate(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "CREATE"); return await this.Permission(req, system, "CREATE")
} }
public async PermissionDelete(req: RequestWithUser, system: string) { public async PermissionDelete(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "DELETE"); return await this.Permission(req, system, "DELETE")
} }
public async PermissionGet(req: RequestWithUser, system: string) { public async PermissionGet(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "GET"); return await this.Permission(req, system, "GET")
} }
public async PermissionList(req: RequestWithUser, system: string) { public async PermissionList(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "LIST"); return await this.Permission(req, system, "LIST")
} }
public async PermissionUpdate(req: RequestWithUser, system: string) { public async PermissionUpdate(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "UPDATE"); return await this.Permission(req, system, "UPDATE")
} }
public async PermissionOrgCreate(req: RequestWithUser, system: string) { public async PermissionOrgCreate(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "CREATE"); return await this.PermissionOrg(req, system, "CREATE")
} }
public async PermissionOrgDelete(req: RequestWithUser, system: string) { public async PermissionOrgDelete(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "DELETE"); return await this.PermissionOrg(req, system, "DELETE")
} }
public async PermissionOrgGet(req: RequestWithUser, system: string) { public async PermissionOrgGet(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "GET"); return await this.PermissionOrg(req, system, "GET")
} }
public async PermissionOrgList(req: RequestWithUser, system: string) { public async PermissionOrgList(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "LIST"); return await this.PermissionOrg(req, system, "LIST")
} }
public async PermissionOrgUpdate(req: RequestWithUser, system: string) { public async PermissionOrgUpdate(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "UPDATE"); return await this.PermissionOrg(req, system, "UPDATE")
} }
public async PermissionOrgUserCreate(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserCreate(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "CREATE", profileId); return await this.PermissionOrgByUser(req, system, "CREATE", profileId)
} }
public async PermissionOrgUserDelete(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserDelete(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "DELETE", profileId); return await this.PermissionOrgByUser(req, system, "DELETE", profileId)
} }
public async PermissionOrgUserGet(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserGet(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "GET", profileId); return await this.PermissionOrgByUser(req, system, "GET", profileId)
} }
public async PermissionOrgUserList(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserList(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "LIST", profileId); return await this.PermissionOrgByUser(req, system, "LIST", profileId)
} }
public async PermissionOrgUserUpdate(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserUpdate(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "UPDATE", profileId); return await this.PermissionOrgByUser(req, system, "UPDATE", profileId)
} }
} }
export default CheckAuth; export default CheckAuth