paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 33 Packages Projects Releases Wiki Activity

Limited the permission rule parameters to JsonPrimatives and array of

Browse Source 
Signed-off-by: Harry Hogg <hhogg@spotify.com>
This commit is contained in:
Harry Hogg
2022-10-04 11:39:46 +01:00
parent fbc636c4a5
commit 4eb0f6d23d
13 changed files with 70 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/permission-node/src/integration/createConditionExports.test.ts
+3 -3
View File
@@ -46,7 +46,7 @@ const testIntegration = () =>
description: 'Test rule 2',
resourceType: 'test-resource',
schema: z.object({
foo: z.object({}),
foo: z.string(),
}),
apply: (_resource: any) => false,
toQuery: params => ({
@@ -76,11 +76,11 @@ describe('createConditionExports', () => {
},
});
expect(conditions.testRule2({ foo: { baz: 'quux' } })).toEqual({
expect(conditions.testRule2({ foo: 'baz' })).toEqual({
rule: 'testRule2',
resourceType: 'test-resource',
params: {
foo: { baz: 'quux' },
foo: 'baz',
},
});
});
plugins/permission-node/src/integration/createConditionFactory.ts
+8 -2
View File
@@ -14,7 +14,10 @@
* limitations under the License.
*/
import { PermissionCondition } from '@backstage/plugin-permission-common';
import {
PermissionCondition,
PermissionRuleParams,
} from '@backstage/plugin-permission-common';
import { PermissionRule } from '../types';
/**
@@ -34,7 +37,10 @@ import { PermissionRule } from '../types';
* @public
*/
export const createConditionFactory =
<TResourceType extends string, TParams extends Record<string, unknown>>(
<
TResourceType extends string,
TParams extends PermissionRuleParams = PermissionRuleParams,
>(
rule: PermissionRule<unknown, unknown, TResourceType, TParams>,
) =>
(params: TParams): PermissionCondition<TResourceType, TParams> => ({
plugins/permission-node/src/integration/createConditionTransformer.test.ts
+18 -24
View File
@@ -39,10 +39,10 @@ const transformConditions = createConditionTransformer([
description: 'Test rule 2',
resourceType: 'test-resource',
schema: z.object({
foo: z.object({}),
foo: z.string(),
}),
apply: jest.fn(),
toQuery: jest.fn(({ foo }) => `test-rule-2:${JSON.stringify(foo)}`),
toQuery: jest.fn(({ foo }) => `test-rule-2:${foo}`),
}),
]);
@@ -67,10 +67,10 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: { foo: 0 },
foo: '0',
},
},
expectedResult: 'test-rule-2:{"foo":0}',
expectedResult: 'test-rule-2:0',
},
{
conditions: {
@@ -87,13 +87,13 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'b',
},
},
],
},
expectedResult: {
anyOf: ['test-rule-1:a/1', 'test-rule-2:{}'],
anyOf: ['test-rule-1:a/1', 'test-rule-2:b'],
},
},
{
@@ -111,13 +111,13 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'b',
},
},
],
},
expectedResult: {
allOf: ['test-rule-1:a/1', 'test-rule-2:{}'],
allOf: ['test-rule-1:a/1', 'test-rule-2:b'],
},
},
{
@@ -126,12 +126,12 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'a',
},
},
},
expectedResult: {
not: 'test-rule-2:{}',
not: 'test-rule-2:a',
},
},
{
@@ -151,7 +151,7 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'b',
},
},
],
@@ -171,9 +171,7 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {
c: 3,
},
foo: 'c',
},
},
],
@@ -184,11 +182,11 @@ describe('createConditionTransformer', () => {
expectedResult: {
allOf: [
{
anyOf: ['test-rule-1:a/1', 'test-rule-2:{}'],
anyOf: ['test-rule-1:a/1', 'test-rule-2:b'],
},
{
not: {
allOf: ['test-rule-1:b/2', 'test-rule-2:{"c":3}'],
allOf: ['test-rule-1:b/2', 'test-rule-2:c'],
},
},
],
@@ -211,9 +209,7 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {
b: 2,
},
foo: 'b',
},
},
],
@@ -234,9 +230,7 @@ describe('createConditionTransformer', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {
d: 4,
},
foo: 'd',
},
},
},
@@ -248,11 +242,11 @@ describe('createConditionTransformer', () => {
expectedResult: {
allOf: [
{
anyOf: ['test-rule-1:a/1', 'test-rule-2:{"b":2}'],
anyOf: ['test-rule-1:a/1', 'test-rule-2:b'],
},
{
not: {
allOf: ['test-rule-1:c/3', { not: 'test-rule-2:{"d":4}' }],
allOf: ['test-rule-1:c/3', { not: 'test-rule-2:d' }],
},
},
],
plugins/permission-node/src/integration/createPermissionIntegrationRouter.test.ts
+13 -15
View File
@@ -53,7 +53,7 @@ const testRule2 = createPermissionRule({
description: 'Test rule 2',
resourceType: 'test-resource',
schema: z.object({
foo: z.object({}).describe('foo'),
foo: z.string().describe('foo'),
}),
apply: (_resource: any, _foo) => false,
toQuery: _foo => ({}),
@@ -105,7 +105,7 @@ describe('createPermissionIntegrationRouter', () => {
{
rule: 'test-rule-2',
resourceType: 'test-resource',
params: { foo: {} },
params: { foo: 'b' },
},
],
},
@@ -114,7 +114,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'c',
},
},
},
@@ -134,7 +134,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'b',
},
},
],
@@ -154,7 +154,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: { c: 3 },
foo: 'c',
},
},
],
@@ -192,7 +192,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: { foo: 0 },
foo: 'a',
},
},
{
@@ -208,7 +208,7 @@ describe('createPermissionIntegrationRouter', () => {
{
rule: 'test-rule-2',
resourceType: 'test-resource',
params: { foo: {} },
params: { foo: 'b' },
},
],
},
@@ -228,7 +228,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: { b: 2 },
foo: 'b',
},
},
],
@@ -249,7 +249,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: { d: 4 },
foo: 'd',
},
},
},
@@ -310,7 +310,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'b',
},
},
},
@@ -338,7 +338,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'c',
},
},
},
@@ -361,7 +361,7 @@ describe('createPermissionIntegrationRouter', () => {
rule: 'test-rule-2',
resourceType: 'test-resource',
params: {
foo: {},
foo: 'd',
},
},
],
@@ -628,10 +628,8 @@ describe('createPermissionIntegrationRouter', () => {
additionalProperties: false,
properties: {
foo: {
additionalProperties: false,
description: 'foo',
properties: {},
type: 'object',
type: 'string',
},
},
required: ['foo'],
plugins/permission-node/src/integration/createPermissionIntegrationRouter.ts
+1 -1
View File
@@ -46,7 +46,7 @@ const permissionCriteriaSchema: z.ZodSchema<
z.object({
rule: z.string(),
resourceType: z.string(),
params: z.record(z.unknown()),
params: z.record(z.any()),
}),
]),
);
plugins/permission-node/src/integration/createPermissionRule.ts
+3 -2
View File
@@ -14,6 +14,7 @@
* limitations under the License.
*/
import { PermissionRuleParams } from '@backstage/plugin-permission-common';
import { PermissionRule } from '../types';
/**
@@ -25,7 +26,7 @@ export const createPermissionRule = <
TResource,
TQuery,
TResourceType extends string,
TParams extends Record<string, unknown>,
TParams extends PermissionRuleParams = PermissionRuleParams,
>(
rule: PermissionRule<TResource, TQuery, TResourceType, TParams>,
) => rule;
@@ -40,7 +41,7 @@ export const createPermissionRule = <
*/
export const makeCreatePermissionRule =
<TResource, TQuery, TResourceType extends string>() =>
<TParams extends Record<string, unknown>>(
<TParams extends PermissionRuleParams = PermissionRuleParams>(
rule: PermissionRule<TResource, TQuery, TResourceType, TParams>,
) =>
createPermissionRule(rule);
plugins/permission-node/src/types.ts
+5 -2
View File
@@ -14,7 +14,10 @@
* limitations under the License.
*/
import type { PermissionCriteria } from '@backstage/plugin-permission-common';
import type {
PermissionCriteria,
PermissionRuleParams,
} from '@backstage/plugin-permission-common';
import { z } from 'zod';
/**
@@ -45,7 +48,7 @@ export type PermissionRule<
TResource,
TQuery,
TResourceType extends string,
TParams extends Record<string, unknown> = Record<string, unknown>,
TParams extends PermissionRuleParams = PermissionRuleParams,
TSchema extends z.ZodType = z.ZodObject<{
// Parameters can be optional, however we we want to make sure that the
// parameters are always present in the schema, even if they are undefined.