mirror of https://github.com/ghostfolio/ghostfolio
Thomas Kaul
2 years ago
committed by
GitHub
GitHub
15 changed files with 272 additions and 18 deletions
@ -0,0 +1,6 @@ |
|||
import { SetMetadata } from '@nestjs/common'; |
|||
export const HAS_PERMISSION_KEY = 'has_permission'; |
|||
|
|||
export function HasPermission(permission: string) { |
|||
return SetMetadata(HAS_PERMISSION_KEY, permission); |
|||
} |
|||
@ -0,0 +1,55 @@ |
|||
import { HttpException } from '@nestjs/common'; |
|||
import { Reflector } from '@nestjs/core'; |
|||
import { ExecutionContextHost } from '@nestjs/core/helpers/execution-context-host'; |
|||
import { Test, TestingModule } from '@nestjs/testing'; |
|||
|
|||
import { HasPermissionGuard } from './has-permission.guard'; |
|||
|
|||
describe('HasPermissionGuard', () => { |
|||
let guard: HasPermissionGuard; |
|||
let reflector: Reflector; |
|||
|
|||
beforeEach(async () => { |
|||
const module: TestingModule = await Test.createTestingModule({ |
|||
providers: [HasPermissionGuard, Reflector] |
|||
}).compile(); |
|||
|
|||
guard = module.get<HasPermissionGuard>(HasPermissionGuard); |
|||
reflector = module.get<Reflector>(Reflector); |
|||
}); |
|||
|
|||
function setupReflectorSpy(returnValue: string) { |
|||
jest.spyOn(reflector, 'get').mockReturnValue(returnValue); |
|||
} |
|||
|
|||
function createMockExecutionContext(permissions: string[]) { |
|||
return new ExecutionContextHost([ |
|||
{ |
|||
user: { |
|||
permissions // Set user permissions based on the argument
|
|||
} |
|||
} |
|||
]); |
|||
} |
|||
|
|||
it('should deny access if the user does not have any permission', () => { |
|||
setupReflectorSpy('required-permission'); |
|||
const noPermissions = createMockExecutionContext([]); |
|||
|
|||
expect(() => guard.canActivate(noPermissions)).toThrow(HttpException); |
|||
}); |
|||
|
|||
it('should deny access if the user has the wrong permission', () => { |
|||
setupReflectorSpy('required-permission'); |
|||
const wrongPermission = createMockExecutionContext(['wrong-permission']); |
|||
|
|||
expect(() => guard.canActivate(wrongPermission)).toThrow(HttpException); |
|||
}); |
|||
|
|||
it('should allow access if the user has the required permission', () => { |
|||
setupReflectorSpy('required-permission'); |
|||
const rightPermission = createMockExecutionContext(['required-permission']); |
|||
|
|||
expect(guard.canActivate(rightPermission)).toBe(true); |
|||
}); |
|||
}); |
|||
@ -0,0 +1,37 @@ |
|||
import { HAS_PERMISSION_KEY } from '@ghostfolio/api/decorators/has-permission.decorator'; |
|||
import { hasPermission } from '@ghostfolio/common/permissions'; |
|||
import { |
|||
CanActivate, |
|||
ExecutionContext, |
|||
HttpException, |
|||
Injectable |
|||
} from '@nestjs/common'; |
|||
import { Reflector } from '@nestjs/core'; |
|||
import { StatusCodes, getReasonPhrase } from 'http-status-codes'; |
|||
|
|||
@Injectable() |
|||
export class HasPermissionGuard implements CanActivate { |
|||
public constructor(private reflector: Reflector) {} |
|||
|
|||
public canActivate(context: ExecutionContext): boolean { |
|||
const requiredPermission = this.reflector.get<string>( |
|||
HAS_PERMISSION_KEY, |
|||
context.getHandler() |
|||
); |
|||
|
|||
if (!requiredPermission) { |
|||
return true; // No specific permissions required
|
|||
} |
|||
|
|||
const { user } = context.switchToHttp().getRequest(); |
|||
|
|||
if (!user || !hasPermission(user.permissions, requiredPermission)) { |
|||
throw new HttpException( |
|||
getReasonPhrase(StatusCodes.FORBIDDEN), |
|||
StatusCodes.FORBIDDEN |
|||
); |
|||
} |
|||
|
|||
return true; |
|||
} |
|||
} |
|||
@ -0,0 +1,36 @@ |
|||
<table |
|||
class="gf-table w-100" |
|||
mat-table |
|||
matSort |
|||
matSortActive="date" |
|||
matSortDirection="desc" |
|||
[dataSource]="dataSource" |
|||
> |
|||
<ng-container matColumnDef="date"> |
|||
<th *matHeaderCellDef class="px-2" mat-header-cell mat-sort-header> |
|||
<ng-container i18n>Date</ng-container> |
|||
</th> |
|||
<td *matCellDef="let element" class="px-2" mat-cell> |
|||
<gf-value [isDate]="true" [locale]="locale" [value]="element?.date" /> |
|||
</td> |
|||
</ng-container> |
|||
|
|||
<ng-container matColumnDef="value"> |
|||
<th *matHeaderCellDef class="px-2 text-right" mat-header-cell> |
|||
<ng-container i18n>Value</ng-container> |
|||
</th> |
|||
<td *matCellDef="let element" class="px-2" mat-cell> |
|||
<div class="d-flex justify-content-end"> |
|||
<gf-value |
|||
[isCurrency]="true" |
|||
[locale]="locale" |
|||
[unit]="element?.Account?.currency" |
|||
[value]="element?.value" |
|||
></gf-value> |
|||
</div> |
|||
</td> |
|||
</ng-container> |
|||
|
|||
<tr *matHeaderRowDef="displayedColumns" mat-header-row></tr> |
|||
<tr *matRowDef="let row; columns: displayedColumns" mat-row></tr> |
|||
</table> |
|||
@ -0,0 +1,5 @@ |
|||
@import 'apps/client/src/styles/ghostfolio-style'; |
|||
|
|||
:host { |
|||
display: block; |
|||
} |
|||
@ -0,0 +1,63 @@ |
|||
import { |
|||
ChangeDetectionStrategy, |
|||
ChangeDetectorRef, |
|||
Component, |
|||
Input, |
|||
OnDestroy, |
|||
OnInit, |
|||
ViewChild |
|||
} from '@angular/core'; |
|||
import { MatSort } from '@angular/material/sort'; |
|||
import { MatTableDataSource } from '@angular/material/table'; |
|||
import { DataService } from '@ghostfolio/client/services/data.service'; |
|||
import { AccountBalancesResponse } from '@ghostfolio/common/interfaces'; |
|||
import { get } from 'lodash'; |
|||
import { Subject, takeUntil } from 'rxjs'; |
|||
|
|||
@Component({ |
|||
changeDetection: ChangeDetectionStrategy.OnPush, |
|||
selector: 'gf-account-balances', |
|||
styleUrls: ['./account-balances.component.scss'], |
|||
templateUrl: './account-balances.component.html' |
|||
}) |
|||
export class AccountBalancesComponent implements OnDestroy, OnInit { |
|||
@Input() accountId: string; |
|||
@Input() locale: string; |
|||
|
|||
@ViewChild(MatSort) sort: MatSort; |
|||
|
|||
public dataSource: MatTableDataSource< |
|||
AccountBalancesResponse['balances'][0] |
|||
> = new MatTableDataSource(); |
|||
public displayedColumns: string[] = ['date', 'value']; |
|||
|
|||
private unsubscribeSubject = new Subject<void>(); |
|||
|
|||
public constructor( |
|||
private changeDetectorRef: ChangeDetectorRef, |
|||
private dataService: DataService |
|||
) {} |
|||
|
|||
public ngOnInit() { |
|||
this.fetchBalances(); |
|||
} |
|||
|
|||
public ngOnDestroy() { |
|||
this.unsubscribeSubject.next(); |
|||
this.unsubscribeSubject.complete(); |
|||
} |
|||
|
|||
private fetchBalances() { |
|||
this.dataService |
|||
.fetchAccountBalances(this.accountId) |
|||
.pipe(takeUntil(this.unsubscribeSubject)) |
|||
.subscribe(({ balances }) => { |
|||
this.dataSource = new MatTableDataSource(balances); |
|||
|
|||
this.dataSource.sort = this.sort; |
|||
this.dataSource.sortingDataAccessor = get; |
|||
|
|||
this.changeDetectorRef.markForCheck(); |
|||
}); |
|||
} |
|||
} |
|||
@ -0,0 +1,15 @@ |
|||
import { CommonModule } from '@angular/common'; |
|||
import { CUSTOM_ELEMENTS_SCHEMA, NgModule } from '@angular/core'; |
|||
import { MatSortModule } from '@angular/material/sort'; |
|||
import { MatTableModule } from '@angular/material/table'; |
|||
import { GfValueModule } from '@ghostfolio/ui/value'; |
|||
|
|||
import { AccountBalancesComponent } from './account-balances.component'; |
|||
|
|||
@NgModule({ |
|||
declarations: [AccountBalancesComponent], |
|||
exports: [AccountBalancesComponent], |
|||
imports: [CommonModule, GfValueModule, MatSortModule, MatTableModule], |
|||
schemas: [CUSTOM_ELEMENTS_SCHEMA] |
|||
}) |
|||
export class GfAccountBalancesModule {} |
|||
Loading…
Reference in new issue