URCAM-10 rights management

dev/connectors/multi-cms-connector/src/cms/wordpress/collections/knowledge-base/knowledge-base.wordpress.model.ts

@@ -39,11 +39,24 @@
 import { Field, ObjectType } from '@nestjs/graphql';
 import { KnowledgeBaseTranslationsWordpress } from '@wordpress/collections/translations/translations.wordpress.model';
 import { ImageWordpress } from '@wordpress/collections/system/image.wordpress.model';
+import { RolesWordpress } from '@wordpress/collections/roles/roles.wordpress.model';
 
 @ObjectType()
-class KnowledgeBaseParentWordpress {
+class KnowledgeBaseRolesWordpress {
+  @Field(() => [RolesWordpress])
+  nodes: RolesWordpress[];
+}
+
+@ObjectType()
+export class KnowledgeBaseParentWordpress {
   @Field()
   databaseId: number;
+
+  @Field()
+  informationAccessRestriction: 'ALLOW' | 'DISALLOW' | 'NONE';
+
+  @Field(() => KnowledgeBaseRolesWordpress)
+  informationRoles: KnowledgeBaseRolesWordpress;
 }
 
 @ObjectType()
@@ -84,6 +97,12 @@ export class KnowledgeBaseWordpress {
   @Field()
   informationPosition: number;
 
+  @Field()
+  informationAccessRestriction: 'ALLOW' | 'DISALLOW' | 'NONE';
+
+  @Field(() => KnowledgeBaseRolesWordpress)
+  informationRoles: KnowledgeBaseRolesWordpress;
+
   @Field(() => [KnowledgeBaseTranslationsWordpress])
   translations: KnowledgeBaseTranslationsWordpress[];
 

dev/connectors/multi-cms-connector/src/cms/wordpress/collections/knowledge-base/knowledge-base.wordpress.service.ts

@@ -43,8 +43,12 @@ import { KnowledgeBaseTranslationsWordpress } from '@wordpress/collections/trans
 import { ValidateMapping } from '@common/decorators/validate-mapping.decorator';
 import { KnowledgeBaseSchema } from '@common/validation/schemas/knowledge-base.schema';
 import { normalizeEmptyStringToNull } from '@common/utils/normalize';
-import { KnowledgeBaseWordpress } from '@wordpress/collections/knowledge-base/knowledge-base.wordpress.model';
+import {
+  KnowledgeBaseParentWordpress,
+  KnowledgeBaseWordpress,
+} from '@wordpress/collections/knowledge-base/knowledge-base.wordpress.model';
 import { KnowledgeBase } from '@common/models/knowledge-base.model';
+import { Authorization } from '@common/models/authorization.model';
 
 // TODO: Move FRENCH_CODE to .env and rename it to DEFAULT_LANGUAGE_CODE
 const FRENCH_CODE = 'FR';
@@ -94,6 +98,7 @@ export class KnowledgeBaseWordpressService {
       childDisplay: knowledgeBase.informationChildDisplay || null,
       link: normalizeEmptyStringToNull(knowledgeBase.informationLink),
       position: knowledgeBase.informationPosition || 0,
+      authorization: this.createAuthorization(knowledgeBase),
       translations,
       parentId:
         knowledgeBase.informationParent?.node?.databaseId?.toString() || null,
@@ -106,6 +111,26 @@ export class KnowledgeBaseWordpressService {
     };
   }
 
+  // creation of authorizations based on the parents' rights if they exist, otherwise classic creation
+  private createAuthorization(
+    knowledgeBase: KnowledgeBaseWordpress,
+  ): Authorization | null {
+    const parentAuthorisation = this.getAuthorization(
+      knowledgeBase.informationParent?.node,
+    );
+    return parentAuthorisation ?? this.getAuthorization(knowledgeBase);
+  }
+
+  private getAuthorization(
+    knowledgeBase?: KnowledgeBaseWordpress | KnowledgeBaseParentWordpress,
+  ): Authorization | null {
+    const roles =
+      knowledgeBase?.informationRoles?.nodes?.map((role) => role.roleCode) ||
+      [];
+    const type = knowledgeBase?.informationAccessRestriction;
+    return type && type !== 'NONE' ? { type, roles } : null;
+  }
+
   async getKnowledgeBase(): Promise<KnowledgeBase[]> {
     const data = await this.wordpressService.executeGraphQLQuery(`
       query {
@@ -118,6 +143,14 @@ export class KnowledgeBaseWordpressService {
             informationChildDisplay
             informationLink
             informationPosition
+            informationAccessRestriction
+            informationRoles(first: 100) {
+              nodes {
+                databaseId
+                roleCode
+                roleDescription
+              }
+            }
             informationSearchKeywords
             informationPhone
             informationAddress
@@ -133,8 +166,14 @@ export class KnowledgeBaseWordpressService {
             informationParent {
               node {
                 databaseId
-                informationTitle
-                informationContent
+                informationAccessRestriction
+                informationRoles(first: 100) {
+                  nodes {
+                    databaseId
+                    roleCode
+                    roleDescription
+                  }
+                }
               }              
             }
             translations {
@@ -152,6 +191,6 @@ export class KnowledgeBaseWordpressService {
         }
       }
     `);
-    return data.knowledgeBases.nodes.map(this.mapToMultiModel);
+    return data.knowledgeBases.nodes.map(this.mapToMultiModel.bind(this));
   }
 }

dev/connectors/multi-cms-connector/src/common/models/knowledge-base.model.ts

@@ -38,6 +38,7 @@
 
 import { Field, ObjectType } from '@nestjs/graphql';
 import { KnowledgeBaseTranslations } from '@common/models/translations.model';
+import { Authorization } from '@common/models/authorization.model';
 
 @ObjectType()
 export class KnowledgeBase {
@@ -56,6 +57,9 @@ export class KnowledgeBase {
   @Field({ nullable: true })
   position: number;
 
+  @Field(() => Authorization, { nullable: true })
+  authorization: Authorization | null;
+
   @Field(() => [KnowledgeBaseTranslations], { nullable: true })
   translations: KnowledgeBaseTranslations[];
 

dev/connectors/multi-cms-connector/src/common/validation/schemas/knowledge-base.schema.ts

@@ -38,13 +38,15 @@
 import { z } from 'zod';
 import { IdSchema } from '@common/validation/schemas/base-type.schema';
 import { KnowledgeBaseTranslationsSchema } from '@common/validation/schemas/translations.schema';
+import { AuthorizationSchema } from '@common/validation/schemas/authorization.schema';
 
 export const KnowledgeBaseSchema = z.object({
   id: IdSchema,
   type: z.enum(['content', 'internal_link', 'external_link']),
   childDisplay: z.enum(['card', 'list']).nullable(),
   link: z.string().min(1, 'Information link cannot be empty string').nullable(),
   position: z.number().int().default(0),
+  authorization: AuthorizationSchema.nullable(),
   translations: z
     .array(KnowledgeBaseTranslationsSchema)
     .min(1, 'At least one translation is required for Features'),

dev/user-backend-nest/main/src/app.controller.ts

@@ -728,14 +728,32 @@ export class AppController {
       );
   }
 
-  @Get('/knowledge-base')
-  knowledgeBase() {
-    return this.knowledgeBaseClient.send(
-      {
-        cmd: 'knowledgeBase',
-      },
-      {},
-    );
+  @Post('/knowledge-base')
+  knowledgeBase(@Body() body) {
+    return this.authClient
+      .send(
+        {
+          cmd: 'getUser',
+        },
+        body,
+      )
+      .pipe(
+        concatMap((user) => {
+          const roles = user ? user.roles : ['anonymous'];
+          return this.knowledgeBaseClient
+            .send(
+              {
+                cmd: 'knowledgeBase',
+              },
+              roles,
+            )
+            .pipe(
+              map((knowledgeBase) => {
+                return new AuthorizationHelper(roles).filter(knowledgeBase);
+              }),
+            );
+        }),
+      );
   }
 
   @Get('/version')

dev/user-backend-nest/microservices/knowledge-base/src/knowledge-base/knowledge-base.dto.ts

@@ -37,6 +37,11 @@
  * termes.
  */
 
+export interface Authorization {
+  type: 'ALLOW' | 'DISALLOW';
+  roles: string[];
+}
+
 export interface KnowledgeBaseQueryDto {
   login: string;
 }
@@ -64,6 +69,7 @@ export interface KnowledgeBaseDto {
   translations?: KnowledgeBaseTranslation[];
   childDisplay?: ChildDisplay;
   position: number;
+  authorization?: Authorization;
 }
 
 export interface KnowledgeBaseTranslation {

dev/user-backend-nest/microservices/knowledge-base/src/knowledge-base/knowledge-base.service.ts

@@ -73,6 +73,10 @@ export class KnowledgeBaseService {
             link
             childDisplay
             position
+            authorization {
+                type
+                roles
+            }
             translations {
                 languagesCode
                 searchKeywords

dev/user-frontend-ionic/projects/knowledge-base/src/lib/knowledge-base.service.ts

@@ -39,9 +39,9 @@
 
 import { HttpClient } from '@angular/common/http';
 import { Injectable } from '@angular/core';
-import { MultiTenantService } from '@multi/shared';
-import { Observable } from 'rxjs';
-import {tap} from "rxjs/operators";
+import { getAuthToken, NetworkService, MultiTenantService } from '@multi/shared';
+import {from, Observable} from 'rxjs';
+import {filter, switchMap, take, tap} from "rxjs/operators";
 import {KnowledgeBaseRepository} from "./knowledge-base.repository";
 import {KnowledgeBaseItem} from "./knowledge-base.repository";
 
@@ -54,14 +54,24 @@ export class KnowledgeBaseService {
     private multiTenantService: MultiTenantService,
     private knowledgeBaseRepository: KnowledgeBaseRepository,
     private http: HttpClient,
+    private networkService: NetworkService,
   ) {}
 
   public loadAndStoreKnowledgeBase(): Observable<KnowledgeBaseItem[]> {
-    const url = `${this.multiTenantService.getApiEndpoint()}/knowledge-base`;
-
-    return this.http.get<KnowledgeBaseItem[]>(url).pipe(
+    return from(this.networkService.getConnectionStatus()).pipe(
+      filter(status => status.connected),
+      switchMap(() => getAuthToken()),
+      take(1),
+      switchMap(authToken => this.getKnowledgeBase(authToken)),
       tap(knowledgeBases => this.knowledgeBaseRepository.setKnowledgeBases(knowledgeBases)),
     );
   }
 
+  private getKnowledgeBase(authToken: string): Observable<KnowledgeBaseItem[]> {
+    const url = `${this.multiTenantService.getApiEndpoint()}/knowledge-base`;
+    const data = {
+      authToken
+    };
+    return this.http.post<KnowledgeBaseItem[]>(url, data);
+  }
 }