sinvo/docmost
1
0
Fork 0
mirror of https://github.com/docmost/docmost.git synced 2026-05-21 17:22:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

WIP

Browse Source
This commit is contained in:
Philipinho
2026-01-07 01:37:45 +00:00
parent 077d9723aa
commit 50847be871
1 changed files with 62 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/server/src/database/repos/page/page-permission.repo.ts
+62 -21
View File
@@ -10,7 +10,7 @@ import {
} from '@docmost/db/types/entity.types'; } from '@docmost/db/types/entity.types';
import { PaginationOptions } from '@docmost/db/pagination/pagination-options'; import { PaginationOptions } from '@docmost/db/pagination/pagination-options';
import { executeWithPagination } from '@docmost/db/pagination/pagination'; import { executeWithPagination } from '@docmost/db/pagination/pagination';
import { sql } from 'kysely'; import { sql, SqlBool } from 'kysely';
import { GroupRepo } from '@docmost/db/repos/group/group.repo'; import { GroupRepo } from '@docmost/db/repos/group/group.repo';
import { GroupUserRepo } from '@docmost/db/repos/group/group-user.repo'; import { GroupUserRepo } from '@docmost/db/repos/group/group-user.repo';
@@ -46,7 +46,10 @@ export class PagePermissionRepo {
.executeTakeFirst(); .executeTakeFirst();
} }
async deletePageAccess(pageId: string, trx?: KyselyTransaction): Promise<void> { async deletePageAccess(
pageId: string,
trx?: KyselyTransaction,
): Promise<void> {
const db = dbOrTx(this.db, trx); const db = dbOrTx(this.db, trx);
await db.deleteFrom('pageAccess').where('pageId', '=', pageId).execute(); await db.deleteFrom('pageAccess').where('pageId', '=', pageId).execute();
} }
@@ -57,10 +60,7 @@ export class PagePermissionRepo {
): Promise<void> { ): Promise<void> {
if (permissions.length === 0) return; if (permissions.length === 0) return;
const db = dbOrTx(this.db, trx); const db = dbOrTx(this.db, trx);
await db await db.insertInto('pagePermissions').values(permissions).execute();
.insertInto('pagePermissions')
.values(permissions)
.execute();
} }
async findPagePermissionByUserId( async findPagePermissionByUserId(
@@ -236,15 +236,27 @@ export class PagePermissionRepo {
): Promise<{ role: string } | undefined> { ): Promise<{ role: string } | undefined> {
const result = await this.db const result = await this.db
.selectFrom('pageAccess') .selectFrom('pageAccess')
.innerJoin('pagePermissions', 'pagePermissions.pageAccessId', 'pageAccess.id') .innerJoin(
'pagePermissions',
'pagePermissions.pageAccessId',
'pageAccess.id',
)
.select(['pagePermissions.role']) .select(['pagePermissions.role'])
.where('pageAccess.pageId', '=', pageId) .where('pageAccess.pageId', '=', pageId)
.where('pagePermissions.userId', '=', userId) .where('pagePermissions.userId', '=', userId)
.unionAll( .unionAll(
this.db this.db
.selectFrom('pageAccess') .selectFrom('pageAccess')
.innerJoin('pagePermissions', 'pagePermissions.pageAccessId', 'pageAccess.id') .innerJoin(
.innerJoin('groupUsers', 'groupUsers.groupId', 'pagePermissions.groupId') 'pagePermissions',
'pagePermissions.pageAccessId',
'pageAccess.id',
)
.innerJoin(
'groupUsers',
'groupUsers.groupId',
'pagePermissions.groupId',
)
.select(['pagePermissions.role']) .select(['pagePermissions.role'])
.where('pageAccess.pageId', '=', pageId) .where('pageAccess.pageId', '=', pageId)
.where('groupUsers.userId', '=', userId), .where('groupUsers.userId', '=', userId),
@@ -256,7 +268,9 @@ export class PagePermissionRepo {
async findRestrictedAncestor( async findRestrictedAncestor(
pageId: string, pageId: string,
): Promise<{ pageId: string; accessLevel: string; depth: number } | undefined> { ): Promise<
{ pageId: string; accessLevel: string; depth: number } | undefined
> {
return this.db return this.db
.selectFrom('pageHierarchy') .selectFrom('pageHierarchy')
.innerJoin('pageAccess', 'pageAccess.pageId', 'pageHierarchy.ancestorId') .innerJoin('pageAccess', 'pageAccess.pageId', 'pageHierarchy.ancestorId')
@@ -345,7 +359,11 @@ export class PagePermissionRepo {
async getUserPageAccessLevel( async getUserPageAccessLevel(
userId: string, userId: string,
pageId: string, pageId: string,
): Promise<{ hasRestriction: boolean; canAccess: boolean; canEdit: boolean }> { ): Promise<{
hasRestriction: boolean;
canAccess: boolean;
canEdit: boolean;
}> {
const result = await this.db const result = await this.db
.selectFrom('pages') .selectFrom('pages')
.select((eb) => [ .select((eb) => [
@@ -384,7 +402,11 @@ export class PagePermissionRepo {
) )
.leftJoin('pagePermissions', (join) => .leftJoin('pagePermissions', (join) =>
join join
.onRef('pagePermissions.pageAccessId', '=', 'pageAccess.id') .onRef(
'pagePermissions.pageAccessId',
'=',
'pageAccess.id',
)
.on((eb2) => .on((eb2) =>
eb2.or([ eb2.or([
eb2('pagePermissions.userId', '=', userId), eb2('pagePermissions.userId', '=', userId),
@@ -424,7 +446,11 @@ export class PagePermissionRepo {
) )
.leftJoin('pagePermissions', (join) => .leftJoin('pagePermissions', (join) =>
join join
.onRef('pagePermissions.pageAccessId', '=', 'pageAccess.id') .onRef(
'pagePermissions.pageAccessId',
'=',
'pageAccess.id',
)
.on('pagePermissions.role', '=', 'writer') .on('pagePermissions.role', '=', 'writer')
.on((eb2) => .on((eb2) =>
eb2.or([ eb2.or([
@@ -491,7 +517,11 @@ export class PagePermissionRepo {
) )
.leftJoin('pagePermissions', (join) => .leftJoin('pagePermissions', (join) =>
join join
.onRef('pagePermissions.pageAccessId', '=', 'pageAccess.id') .onRef(
'pagePermissions.pageAccessId',
'=',
'pageAccess.id',
)
.on('pagePermissions.role', '=', 'writer') .on('pagePermissions.role', '=', 'writer')
.on((eb2) => .on((eb2) =>
eb2.or([ eb2.or([
@@ -518,7 +548,7 @@ export class PagePermissionRepo {
.end() .end()
.as('canEdit'), .as('canEdit'),
) )
.where('pages.id', 'in', pageIds) .where(sql<SqlBool>`pages.id = ANY(${pageIds}::uuid[])`)
// Filter: user must have access (any permission on all restricted ancestors) // Filter: user must have access (any permission on all restricted ancestors)
.where(({ not, exists, selectFrom }) => .where(({ not, exists, selectFrom }) =>
not( not(
@@ -578,13 +608,20 @@ export class PagePermissionRepo {
*/ */
async hasRestrictedPagesInSpace(spaceId: string): Promise<boolean> { async hasRestrictedPagesInSpace(spaceId: string): Promise<boolean> {
const result = await this.db const result = await this.db
.selectFrom('pageAccess') .selectNoFrom((eb) =>
.innerJoin('pages', 'pages.id', 'pageAccess.pageId') eb
.select('pageAccess.id') .exists(
.where('pages.spaceId', '=', spaceId) eb
.selectFrom('pageAccess')
.innerJoin('pages', 'pages.id', 'pageAccess.pageId')
.select(sql`1`.as('one'))
.where('pages.spaceId', '=', spaceId),
)
.as('exists'),
)
.executeTakeFirst(); .executeTakeFirst();
return !!result; return Boolean(result?.exists);
} }
/** /**
@@ -658,7 +695,11 @@ export class PagePermissionRepo {
.distinct() .distinct()
.as('restricted'), .as('restricted'),
(join) => (join) =>
join.onRef('restricted.restrictedDescendant', '=', 'subtree.descendantId'), join.onRef(
'restricted.restrictedDescendant',
'=',
'subtree.descendantId',
),
) )
.select('subtree.descendantId') .select('subtree.descendantId')
.distinct() .distinct()