import { DateTime } from 'luxon'; import { BaseModel, column, beforeSave, manyToMany, ManyToMany, hasMany, HasMany } from '@ioc:Adonis/Lucid/Orm'; import Hash from '@ioc:Adonis/Core/Hash'; import Role from './Role'; import Database from '@ioc:Adonis/Lucid/Database'; import Config from '@ioc:Adonis/Core/Config'; import Dataset from './Dataset'; // export default interface IUser { // id: number; // login: string; // email: string; // // password: string; // // createdAt: DateTime; // // updatedAt: DateTime; // // async (user): Promise; // } const permissionTable = Config.get('rolePermission.permission_table', 'permissions'); const rolePermissionTable = Config.get('rolePermission.role_permission_table', 'role_has_permissions'); const roleTable = Config.get('rolePermission.role_table', 'roles'); const userRoleTable = Config.get('rolePermission.user_role_table', 'link_accounts_roles'); export default class User extends BaseModel { public static table = 'accounts'; @column({ isPrimary: true }) public id: number; @column() public login: string; @column() public email: string; @column({ serializeAs: null }) public password: string; @column.dateTime({ autoCreate: true }) public createdAt: DateTime; @column.dateTime({ autoCreate: true, autoUpdate: true }) public updatedAt: DateTime; @beforeSave() public static async hashPassword(user) { if (user.$dirty.password) { user.password = await Hash.make(user.password); } } @manyToMany(() => Role, { pivotForeignKey: 'account_id', pivotRelatedForeignKey: 'role_id', pivotTable: 'link_accounts_roles', }) public roles: ManyToMany; @hasMany(() => Dataset, { foreignKey: 'account_id', }) public datasets: HasMany; // https://github.com/adonisjs/core/discussions/1872#discussioncomment-132289 public async getRoles(this: User): Promise { const test = await this.related('roles').query(); return test.map((role) => role.name); } public async can(permissionNames: Array): Promise { // const permissions = await this.getPermissions() // return Acl.check(expression, operand => _.includes(permissions, operand)) const hasPermission = await this.checkHasPermissions(this, permissionNames); return hasPermission; } private async checkHasPermissions(user: User, permissionNames: Array): Promise { let permissionPlaceHolder = '('; let placeholders = new Array(permissionNames.length).fill('?'); permissionPlaceHolder += placeholders.join(','); permissionPlaceHolder += ')'; let { rows: { 0: { permissioncount }, }, } = await Database.rawQuery( 'SELECT count("p"."name") as permissionCount FROM ' + roleTable + ' r INNER JOIN ' + userRoleTable + ' ur ON ur.role_id=r.id AND "ur"."account_id"=? ' + ' INNER JOIN ' + rolePermissionTable + ' rp ON rp.role_id=r.id ' + ' INNER JOIN ' + permissionTable + ' p ON rp.permission_id=p.id AND "p"."name" in ' + permissionPlaceHolder + ' LIMIT 1', [user.id, ...permissionNames], ); return permissioncount > 0; } } // export default User;