2024-03-21 11:59:49 +00:00
|
|
|
import { IAccessRepository } from 'src/interfaces/access.interface';
|
2024-04-16 14:44:45 +00:00
|
|
|
import { Mocked, vitest } from 'vitest';
|
2023-06-06 20:18:38 +00:00
|
|
|
|
2023-08-24 19:28:50 +00:00
|
|
|
export interface IAccessRepositoryMock {
|
2024-04-16 14:44:45 +00:00
|
|
|
activity: Mocked<IAccessRepository['activity']>;
|
|
|
|
asset: Mocked<IAccessRepository['asset']>;
|
|
|
|
album: Mocked<IAccessRepository['album']>;
|
|
|
|
authDevice: Mocked<IAccessRepository['authDevice']>;
|
|
|
|
memory: Mocked<IAccessRepository['memory']>;
|
|
|
|
person: Mocked<IAccessRepository['person']>;
|
|
|
|
partner: Mocked<IAccessRepository['partner']>;
|
2024-08-19 17:37:15 +00:00
|
|
|
stack: Mocked<IAccessRepository['stack']>;
|
|
|
|
timeline: Mocked<IAccessRepository['timeline']>;
|
2024-08-29 16:14:03 +00:00
|
|
|
tag: Mocked<IAccessRepository['tag']>;
|
2023-08-24 19:28:50 +00:00
|
|
|
}
|
2023-06-28 13:56:24 +00:00
|
|
|
|
2024-08-20 11:49:56 +00:00
|
|
|
export const newAccessRepositoryMock = (): IAccessRepositoryMock => {
|
2023-06-06 20:18:38 +00:00
|
|
|
return {
|
2023-11-01 03:13:34 +00:00
|
|
|
activity: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkAlbumOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkCreateAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-11-01 03:13:34 +00:00
|
|
|
},
|
chore(server): Check asset permissions in bulk (#5329)
Modify Access repository, to evaluate `asset` permissions in bulk.
Queries have been validated to match what they currently generate for single ids.
Queries:
* `asset` album access:
```sql
-- Before
SELECT 1 AS "row_exists" FROM (SELECT 1 AS dummy_column) "dummy_table" WHERE EXISTS (
SELECT 1
FROM "albums" "AlbumEntity"
LEFT JOIN "albums_assets_assets" "AlbumEntity_AlbumEntity__AlbumEntity_assets"
ON "AlbumEntity_AlbumEntity__AlbumEntity_assets"."albumsId"="AlbumEntity"."id"
LEFT JOIN "assets" "AlbumEntity__AlbumEntity_assets"
ON "AlbumEntity__AlbumEntity_assets"."id"="AlbumEntity_AlbumEntity__AlbumEntity_assets"."assetsId"
AND "AlbumEntity__AlbumEntity_assets"."deletedAt" IS NULL
LEFT JOIN "albums_shared_users_users" "AlbumEntity_AlbumEntity__AlbumEntity_sharedUsers"
ON "AlbumEntity_AlbumEntity__AlbumEntity_sharedUsers"."albumsId"="AlbumEntity"."id"
LEFT JOIN "users" "AlbumEntity__AlbumEntity_sharedUsers"
ON "AlbumEntity__AlbumEntity_sharedUsers"."id"="AlbumEntity_AlbumEntity__AlbumEntity_sharedUsers"."usersId"
AND "AlbumEntity__AlbumEntity_sharedUsers"."deletedAt" IS NULL
WHERE
(
("AlbumEntity"."ownerId" = $1 AND "AlbumEntity__AlbumEntity_assets"."id" = $2)
OR ("AlbumEntity__AlbumEntity_sharedUsers"."id" = $3 AND "AlbumEntity__AlbumEntity_assets"."id" = $4)
OR ("AlbumEntity"."ownerId" = $5 AND "AlbumEntity__AlbumEntity_assets"."livePhotoVideoId" = $6)
OR ("AlbumEntity__AlbumEntity_sharedUsers"."id" = $7 AND "AlbumEntity__AlbumEntity_assets"."livePhotoVideoId" = $8)
)
AND "AlbumEntity"."deletedAt" IS NULL
)
LIMIT 1
-- After
SELECT
"asset"."id" AS "assetId",
"asset"."livePhotoVideoId" AS "livePhotoVideoId"
FROM "albums" "album"
INNER JOIN "albums_assets_assets" "album_asset"
ON "album_asset"."albumsId"="album"."id"
INNER JOIN "assets" "asset"
ON "asset"."id"="album_asset"."assetsId"
AND "asset"."deletedAt" IS NULL
LEFT JOIN "albums_shared_users_users" "album_sharedUsers"
ON "album_sharedUsers"."albumsId"="album"."id"
LEFT JOIN "users" "sharedUsers"
ON "sharedUsers"."id"="album_sharedUsers"."usersId"
AND "sharedUsers"."deletedAt" IS NULL
WHERE
(
"album"."ownerId" = $1
OR "sharedUsers"."id" = $2
)
AND (
"asset"."id" IN ($3, $4)
OR "asset"."livePhotoVideoId" IN ($5, $6)
)
AND "album"."deletedAt" IS NULL
```
* `asset` owner access:
```sql
-- Before
SELECT 1 AS "row_exists" FROM (SELECT 1 AS dummy_column) "dummy_table" WHERE EXISTS (
SELECT 1
FROM "assets" "AssetEntity"
WHERE
"AssetEntity"."id" = $1
AND "AssetEntity"."ownerId" = $2
)
LIMIT 1
-- After
SELECT
"AssetEntity"."id" AS "AssetEntity_id"
FROM "assets" "AssetEntity"
WHERE
"AssetEntity"."id" IN ($1, $2)
AND "AssetEntity"."ownerId" = $3
```
* `asset` partner access:
```sql
-- Before
SELECT 1 AS "row_exists" FROM (SELECT 1 AS dummy_column) "dummy_table" WHERE EXISTS (
SELECT 1
FROM "partners" "PartnerEntity"
LEFT JOIN "users" "PartnerEntity__PartnerEntity_sharedWith"
ON "PartnerEntity__PartnerEntity_sharedWith"."id"="PartnerEntity"."sharedWithId"
AND "PartnerEntity__PartnerEntity_sharedWith"."deletedAt" IS NULL
LEFT JOIN "users" "PartnerEntity__PartnerEntity_sharedBy"
ON "PartnerEntity__PartnerEntity_sharedBy"."id"="PartnerEntity"."sharedById"
AND "PartnerEntity__PartnerEntity_sharedBy"."deletedAt" IS NULL
LEFT JOIN "assets" "0aabe9f4a62b794e2c24a074297e534f51a4ac6c"
ON "0aabe9f4a62b794e2c24a074297e534f51a4ac6c"."ownerId"="PartnerEntity__PartnerEntity_sharedBy"."id"
AND "0aabe9f4a62b794e2c24a074297e534f51a4ac6c"."deletedAt" IS NULL
LEFT JOIN "users" "PartnerEntity__sharedBy"
ON "PartnerEntity__sharedBy"."id"="PartnerEntity"."sharedById"
AND "PartnerEntity__sharedBy"."deletedAt" IS NULL
LEFT JOIN "users" "PartnerEntity__sharedWith"
ON "PartnerEntity__sharedWith"."id"="PartnerEntity"."sharedWithId"
AND "PartnerEntity__sharedWith"."deletedAt" IS NULL
WHERE
"PartnerEntity__PartnerEntity_sharedWith"."id" = $1
AND "0aabe9f4a62b794e2c24a074297e534f51a4ac6c"."id" = $2
)
LIMIT 1
-- After
SELECT
"asset"."id" AS "assetId"
FROM "partners" "partner"
INNER JOIN "users" "sharedBy"
ON "sharedBy"."id"="partner"."sharedById"
AND "sharedBy"."deletedAt" IS NULL
INNER JOIN "assets" "asset"
ON "asset"."ownerId"="sharedBy"."id"
AND "asset"."deletedAt" IS NULL
WHERE
"partner"."sharedWithId" = $1
AND "asset"."id" IN ($2, $3)
```
* `asset` shared link access:
```sql
-- Before
SELECT 1 AS "row_exists" FROM (SELECT 1 AS dummy_column) "dummy_table" WHERE EXISTS (
SELECT 1
FROM "shared_links" "SharedLinkEntity"
LEFT JOIN "albums" "SharedLinkEntity__SharedLinkEntity_album"
ON "SharedLinkEntity__SharedLinkEntity_album"."id"="SharedLinkEntity"."albumId"
AND "SharedLinkEntity__SharedLinkEntity_album"."deletedAt" IS NULL
LEFT JOIN "albums_assets_assets" "760f12c00d97bdcec1ce224d1e3bf449859942b6"
ON "760f12c00d97bdcec1ce224d1e3bf449859942b6"."albumsId"="SharedLinkEntity__SharedLinkEntity_album"."id"
LEFT JOIN "assets" "4a35f463ae8c5544ede95c4b6d9ce8c686b6bfe6"
ON "4a35f463ae8c5544ede95c4b6d9ce8c686b6bfe6"."id"="760f12c00d97bdcec1ce224d1e3bf449859942b6"."assetsId"
AND "4a35f463ae8c5544ede95c4b6d9ce8c686b6bfe6"."deletedAt" IS NULL
LEFT JOIN "shared_link__asset" "SharedLinkEntity__SharedLinkEntity_assets_SharedLinkEntity"
ON "SharedLinkEntity__SharedLinkEntity_assets_SharedLinkEntity"."sharedLinksId"="SharedLinkEntity"."id"
LEFT JOIN "assets" "SharedLinkEntity__SharedLinkEntity_assets"
ON "SharedLinkEntity__SharedLinkEntity_assets"."id"="SharedLinkEntity__SharedLinkEntity_assets_SharedLinkEntity"."assetsId"
AND "SharedLinkEntity__SharedLinkEntity_assets"."deletedAt" IS NULL
WHERE (
("SharedLinkEntity"."id" = $1 AND "4a35f463ae8c5544ede95c4b6d9ce8c686b6bfe6"."id" = $2)
OR ("SharedLinkEntity"."id" = $3 AND "SharedLinkEntity__SharedLinkEntity_assets"."id" = $4)
OR ("SharedLinkEntity"."id" = $5 AND "4a35f463ae8c5544ede95c4b6d9ce8c686b6bfe6"."livePhotoVideoId" = $6)
OR ("SharedLinkEntity"."id" = $7 AND "SharedLinkEntity__SharedLinkEntity_assets"."livePhotoVideoId" = $8)
)
)
LIMIT 1
-- After
SELECT
"assets"."id" AS "assetId",
"assets"."livePhotoVideoId" AS "assetLivePhotoVideoId",
"albumAssets"."id" AS "albumAssetId",
"albumAssets"."livePhotoVideoId" AS "albumAssetLivePhotoVideoId"
FROM "shared_links" "sharedLink"
LEFT JOIN "albums" "album"
ON "album"."id"="sharedLink"."albumId"
AND "album"."deletedAt" IS NULL
LEFT JOIN "shared_link__asset" "assets_sharedLink"
ON "assets_sharedLink"."sharedLinksId"="sharedLink"."id"
LEFT JOIN "assets" "assets"
ON "assets"."id"="assets_sharedLink"."assetsId"
AND "assets"."deletedAt" IS NULL
LEFT JOIN "albums_assets_assets" "album_albumAssets"
ON "album_albumAssets"."albumsId"="album"."id"
LEFT JOIN "assets" "albumAssets"
ON "albumAssets"."id"="album_albumAssets"."assetsId"
AND "albumAssets"."deletedAt" IS NULL
WHERE
"sharedLink"."id" = $1
AND (
"assets"."id" IN ($2, $3)
OR "albumAssets"."id" IN ($4, $5)
OR "assets"."livePhotoVideoId" IN ($6, $7)
OR "albumAssets"."livePhotoVideoId" IN ($8, $9)
)
```
2023-12-02 02:56:41 +00:00
|
|
|
|
2023-06-28 13:56:24 +00:00
|
|
|
asset: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkAlbumAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkPartnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkSharedLinkAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-06-28 13:56:24 +00:00
|
|
|
},
|
2023-06-21 01:08:43 +00:00
|
|
|
|
2023-06-28 13:56:24 +00:00
|
|
|
album: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkSharedAlbumAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkSharedLinkAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-06-28 13:56:24 +00:00
|
|
|
},
|
2023-06-21 01:08:43 +00:00
|
|
|
|
2023-10-30 15:48:38 +00:00
|
|
|
authDevice: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-10-30 15:48:38 +00:00
|
|
|
},
|
|
|
|
|
2024-04-02 14:23:17 +00:00
|
|
|
memory: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
2024-04-02 14:23:17 +00:00
|
|
|
},
|
|
|
|
|
2023-09-18 21:22:44 +00:00
|
|
|
person: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkFaceOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-09-18 21:22:44 +00:00
|
|
|
},
|
2023-11-11 21:06:19 +00:00
|
|
|
|
|
|
|
partner: {
|
2024-04-16 14:44:45 +00:00
|
|
|
checkUpdateAccess: vitest.fn().mockResolvedValue(new Set()),
|
2023-11-11 21:06:19 +00:00
|
|
|
},
|
2024-08-19 17:37:15 +00:00
|
|
|
|
|
|
|
stack: {
|
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
},
|
|
|
|
|
|
|
|
timeline: {
|
|
|
|
checkPartnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
},
|
2024-08-29 16:14:03 +00:00
|
|
|
|
|
|
|
tag: {
|
|
|
|
checkOwnerAccess: vitest.fn().mockResolvedValue(new Set()),
|
|
|
|
},
|
2023-06-06 20:18:38 +00:00
|
|
|
};
|
|
|
|
};
|