All files / libs/kernel/auth/shared/src/abilities/data-exports definitions.ts

100% Statements 58/58
100% Branches 12/12
100% Functions 8/8
100% Lines 58/58

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 591x 1x 1x 1x 1x 1x 1x 135x 1x 1x 1x 45x 1x 1x 1x 28x 1x 1x 1x 50x 50x 50x 50x 50x 1x 1x 1x 43x 43x 43x 43x 43x 1x 1x 1x 64x 64x 64x 64x 64x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 1x 28x 28x 28x 28x 28x 28x 1x  
import { SubjectsEnum, type DefinePermissions, type UserRoleForAccessControl } from '../../types';
 
import { DataExportsActions } from './actions';
import { type ViewDataExportSubject } from './subjects';
 
export const dataExportsAbilityDefinitions = {
  ADMIN(_, { can }) {
    can(DataExportsActions.view, SubjectsEnum.Data_Export);
  },
 
  READ_ONLY_ADMIN(_, { can }) {
    can(DataExportsActions.view, SubjectsEnum.Data_Export);
  },
 
  FINANCE(_, { can }) {
    can(DataExportsActions.view, SubjectsEnum.Data_Export);
  },
 
  MANAGER({ user }, { can }) {
    can(
      DataExportsActions.view,
      SubjectsEnum.Data_Export,
      ({ creator }: ViewDataExportSubject) => user.id === creator.id,
    );
  },
 
  READ_ONLY_MANAGER({ user }, { can }) {
    can(
      DataExportsActions.view,
      SubjectsEnum.Data_Export,
      ({ creator }: ViewDataExportSubject) => user.id === creator.id,
    );
  },
 
  EMPLOYEE({ user }, { can }) {
    can(
      DataExportsActions.view,
      SubjectsEnum.Data_Export,
      ({ creator }: ViewDataExportSubject) => creator.id === user.id,
    );
  },
 
  READ_ONLY_EMPLOYEE({ user }, { can }) {
    can(
      DataExportsActions.view,
      SubjectsEnum.Data_Export,
      ({ creator }: ViewDataExportSubject) => creator.id === user.id,
    );
  },
 
  DEACTIVATED_USER({ user }, { can }) {
    can(
      DataExportsActions.view,
      SubjectsEnum.Data_Export,
      ({ creator }: ViewDataExportSubject) => creator.id === user.id,
    );
  },
} as const satisfies Partial<Record<UserRoleForAccessControl, DefinePermissions>>;