34 lines
1.5 KiB
JavaScript
34 lines
1.5 KiB
JavaScript
|
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
|
||
|
|
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
|
||
|
|
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
|
||
|
|
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
|
||
|
|
return c > 3 && r && Object.defineProperty(target, key, r), r;
|
||
|
|
};
|
||
|
|
import { Injectable, computed, inject } from '@angular/core';
|
||
|
|
import { ROLE_PERMISSIONS } from './models/permission.model';
|
||
|
|
import { SessionService } from './session.service';
|
||
|
|
/**
|
||
|
|
* Derives the current admin's permission set from their JWT `role` claim.
|
||
|
|
* UI-only gate (hide/disable) - the backend must independently enforce
|
||
|
|
* every mutation server-side.
|
||
|
|
*/
|
||
|
|
let PermissionService = class PermissionService {
|
||
|
|
constructor() {
|
||
|
|
this.session = inject(SessionService);
|
||
|
|
this.permissions = computed(() => {
|
||
|
|
const role = this.session.role();
|
||
|
|
return role ? ROLE_PERMISSIONS[role] : [];
|
||
|
|
});
|
||
|
|
}
|
||
|
|
has(permission) {
|
||
|
|
return this.permissions().includes(permission);
|
||
|
|
}
|
||
|
|
hasAny(permissions) {
|
||
|
|
return permissions.some(permission => this.has(permission));
|
||
|
|
}
|
||
|
|
};
|
||
|
|
PermissionService = __decorate([
|
||
|
|
Injectable({ providedIn: 'root' })
|
||
|
|
], PermissionService);
|
||
|
|
export { PermissionService };
|