mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-16 16:30:15 +01:00
81b32e400a
refactor: organize Sharing/Agent components, improve type safety for resource types and access role ids, rename enums to PascalCase refactor: organize Sharing/Agent components, improve type safety for resource types and access role ids chore: move sharing related components to dedicated "Sharing" directory chore: remove PublicSharingToggle component and update index exports chore: move non-sidepanel agent components to `~/components/Agents` chore: move AgentCategoryDisplay component with tests chore: remove commented out code refactor: change PERMISSION_BITS from const to enum for better type safety refactor: reorganize imports in GenericGrantAccessDialog and update index exports for hooks refactor: update type definitions to use ACCESS_ROLE_IDS for improved type safety refactor: remove unused canAccessPromptResource middleware and related code refactor: remove unused prompt access roles from createAccessRoleMethods refactor: update resourceType in AclEntry type definition to remove unused 'prompt' value refactor: introduce ResourceType enum and update resourceType usage across data provider files for improved type safety refactor: update resourceType usage to ResourceType enum across sharing and permissions components for improved type safety refactor: standardize resourceType usage to ResourceType enum across agent and prompt models, permissions controller, and middleware for enhanced type safety refactor: update resourceType references from PROMPT_GROUP to PROMPTGROUP for consistency across models, middleware, and components refactor: standardize access role IDs and resource type usage across agent, file, and prompt models for improved type safety and consistency chore: add typedefs for TUpdateResourcePermissionsRequest and TUpdateResourcePermissionsResponse to enhance type definitions chore: move SearchPicker to PeoplePicker dir refactor: implement debouncing for query changes in SearchPicker for improved performance chore: fix typing, import order for agent admin settings fix: agent admin settings, prevent agent form submission refactor: rename `ACCESS_ROLE_IDS` to `AccessRoleIds` refactor: replace PermissionBits with PERMISSION_BITS refactor: replace PERMISSION_BITS with PermissionBits
55 lines
1.9 KiB
JavaScript
55 lines
1.9 KiB
JavaScript
const { ResourceType } = require('librechat-data-provider');
|
|
const { canAccessResource } = require('./canAccessResource');
|
|
const { getPrompt } = require('~/models/Prompt');
|
|
|
|
/**
|
|
* Prompt to PromptGroup ID resolver function
|
|
* Resolves prompt ID to its parent promptGroup ID
|
|
*
|
|
* @param {string} promptId - Prompt ID from route parameter
|
|
* @returns {Promise<Object|null>} Object with promptGroup's _id field, or null if not found
|
|
*/
|
|
const resolvePromptToGroupId = async (promptId) => {
|
|
const prompt = await getPrompt({ _id: promptId });
|
|
if (!prompt || !prompt.groupId) {
|
|
return null;
|
|
}
|
|
// Return an object with _id that matches the promptGroup ID
|
|
return { _id: prompt.groupId };
|
|
};
|
|
|
|
/**
|
|
* Middleware factory that checks promptGroup permissions when accessing individual prompts.
|
|
* This allows permission management at the promptGroup level while still supporting
|
|
* individual prompt access patterns.
|
|
*
|
|
* @param {Object} options - Configuration options
|
|
* @param {number} options.requiredPermission - The permission bit required (1=view, 2=edit, 4=delete, 8=share)
|
|
* @param {string} [options.resourceIdParam='promptId'] - The name of the route parameter containing the prompt ID
|
|
* @returns {Function} Express middleware function
|
|
*
|
|
* @example
|
|
* // Check promptGroup permissions when viewing a prompt
|
|
* router.get('/prompts/:promptId',
|
|
* canAccessPromptViaGroup({ requiredPermission: 1 }),
|
|
* getPrompt
|
|
* );
|
|
*/
|
|
const canAccessPromptViaGroup = (options) => {
|
|
const { requiredPermission, resourceIdParam = 'promptId' } = options;
|
|
|
|
if (!requiredPermission || typeof requiredPermission !== 'number') {
|
|
throw new Error('canAccessPromptViaGroup: requiredPermission is required and must be a number');
|
|
}
|
|
|
|
return canAccessResource({
|
|
resourceType: ResourceType.PROMPTGROUP,
|
|
requiredPermission,
|
|
resourceIdParam,
|
|
idResolver: resolvePromptToGroupId,
|
|
});
|
|
};
|
|
|
|
module.exports = {
|
|
canAccessPromptViaGroup,
|
|
};
|