Permisions updates.

This commit is contained in:
Patrick Fic
2021-03-09 12:45:20 -08:00
parent e11295d57c
commit 7a772ff2ee
11 changed files with 6030 additions and 160 deletions

View File

@@ -153,12 +153,14 @@ const { Content, Header } = Layout;
const stripePromise = new Promise((resolve, reject) => { const stripePromise = new Promise((resolve, reject) => {
client.query({ query: QUERY_STRIPE_ID }).then((resp) => { client.query({ query: QUERY_STRIPE_ID }).then((resp) => {
resolve( if (resp.data.bodyshops[0])
loadStripe(process.env.REACT_APP_STRIPE_PUBLIC_KEY, { resolve(
stripeAccount: loadStripe(process.env.REACT_APP_STRIPE_PUBLIC_KEY, {
resp.data.bodyshops[0].stripe_acct_id || "No Stripe Id Resolve", stripeAccount:
}) resp.data.bodyshops[0].stripe_acct_id || "No Stripe Id Resolve",
); })
);
reject();
}); });
}); });

View File

@@ -0,0 +1,122 @@
{
"root": true,
"parserOptions": {
// Required for certain syntax usages
"ecmaVersion": 2017
},
"plugins": ["promise"],
"extends": "eslint:recommended",
"rules": {
// Removed rule "disallow the use of console" from recommended eslint rules
"no-console": "off",
// Removed rule "disallow multiple spaces in regular expressions" from recommended eslint rules
"no-regex-spaces": "off",
// Removed rule ØØ"disallow the use of debugger" from recommended eslint rules
"no-debugger": "off",
// Removed rule "disallow unused variables" from recommended eslint rules
"no-unused-vars": "off",
// Removed rule "disallow mixed spaces and tabs for indentation" from recommended eslint rules
"no-mixed-spaces-and-tabs": "off",
// Removed rule "disallow the use of undeclared variables unless mentioned in /*global */ comments" from recommended eslint rules
"no-undef": "off",
// Warn against template literal placeholder syntax in regular strings
"no-template-curly-in-string": 1,
// Warn if return statements do not either always or never specify values
"consistent-return": 1,
// Warn if no return statements in callbacks of array methods
"array-callback-return": 1,
// Require the use of === and !==
"eqeqeq": 2,
// Disallow the use of alert, confirm, and prompt
"no-alert": 2,
// Disallow the use of arguments.caller or arguments.callee
"no-caller": 2,
// Disallow null comparisons without type-checking operators
"no-eq-null": 2,
// Disallow the use of eval()
"no-eval": 2,
// Warn against extending native types
"no-extend-native": 1,
// Warn against unnecessary calls to .bind()
"no-extra-bind": 1,
// Warn against unnecessary labels
"no-extra-label": 1,
// Disallow leading or trailing decimal points in numeric literals
"no-floating-decimal": 2,
// Warn against shorthand type conversions
"no-implicit-coercion": 1,
// Warn against function declarations and expressions inside loop statements
"no-loop-func": 1,
// Disallow new operators with the Function object
"no-new-func": 2,
// Warn against new operators with the String, Number, and Boolean objects
"no-new-wrappers": 1,
// Disallow throwing literals as exceptions
"no-throw-literal": 2,
// Require using Error objects as Promise rejection reasons
"prefer-promise-reject-errors": 2,
// Enforce “for” loop update clause moving the counter in the right direction
"for-direction": 2,
// Enforce return statements in getters
"getter-return": 2,
// Disallow await inside of loops
"no-await-in-loop": 2,
// Disallow comparing against -0
"no-compare-neg-zero": 2,
// Warn against catch clause parameters from shadowing variables in the outer scope
"no-catch-shadow": 1,
// Disallow identifiers from shadowing restricted names
"no-shadow-restricted-names": 2,
// Enforce return statements in callbacks of array methods
"callback-return": 2,
// Require error handling in callbacks
"handle-callback-err": 2,
// Warn against string concatenation with __dirname and __filename
"no-path-concat": 1,
// Prefer using arrow functions for callbacks
"prefer-arrow-callback": 1,
// Return inside each then() to create readable and reusable Promise chains.
// Forces developers to return console logs and http calls in promises.
"promise/always-return": 2,
//Enforces the use of catch() on un-returned promises
"promise/catch-or-return": 2,
// Warn against nested then() or catch() statements
"promise/no-nesting": 1
}
}

View File

@@ -1,123 +0,0 @@
// {
// "parserOptions": {
// // Required for certain syntax usages
// "ecmaVersion": 2017
// },
// "plugins": [
// "promise"
// ],
// "extends": "eslint:recommended",
// "rules": {
// // Removed rule "disallow the use of console" from recommended eslint rules
// "no-console": "off",
// // Removed rule "disallow multiple spaces in regular expressions" from recommended eslint rules
// "no-regex-spaces": "off",
// // Removed rule "disallow the use of debugger" from recommended eslint rules
// "no-debugger": "off",
// // Removed rule "disallow unused variables" from recommended eslint rules
// "no-unused-vars": "off",
// // Removed rule "disallow mixed spaces and tabs for indentation" from recommended eslint rules
// "no-mixed-spaces-and-tabs": "off",
// // Removed rule "disallow the use of undeclared variables unless mentioned in /*global */ comments" from recommended eslint rules
// "no-undef": "off",
// // Warn against template literal placeholder syntax in regular strings
// "no-template-curly-in-string": 1,
// // Warn if return statements do not either always or never specify values
// "consistent-return": 1,
// // Warn if no return statements in callbacks of array methods
// "array-callback-return": 1,
// // Require the use of === and !==
// "eqeqeq": 2,
// // Disallow the use of alert, confirm, and prompt
// "no-alert": 2,
// // Disallow the use of arguments.caller or arguments.callee
// "no-caller": 2,
// // Disallow null comparisons without type-checking operators
// "no-eq-null": 2,
// // Disallow the use of eval()
// "no-eval": 2,
// // Warn against extending native types
// "no-extend-native": 1,
// // Warn against unnecessary calls to .bind()
// "no-extra-bind": 1,
// // Warn against unnecessary labels
// "no-extra-label": 1,
// // Disallow leading or trailing decimal points in numeric literals
// "no-floating-decimal": 2,
// // Warn against shorthand type conversions
// "no-implicit-coercion": 1,
// // Warn against function declarations and expressions inside loop statements
// "no-loop-func": 1,
// // Disallow new operators with the Function object
// "no-new-func": 2,
// // Warn against new operators with the String, Number, and Boolean objects
// "no-new-wrappers": 1,
// // Disallow throwing literals as exceptions
// "no-throw-literal": 2,
// // Require using Error objects as Promise rejection reasons
// "prefer-promise-reject-errors": 2,
// // Enforce “for” loop update clause moving the counter in the right direction
// "for-direction": 2,
// // Enforce return statements in getters
// "getter-return": 2,
// // Disallow await inside of loops
// "no-await-in-loop": 2,
// // Disallow comparing against -0
// "no-compare-neg-zero": 2,
// // Warn against catch clause parameters from shadowing variables in the outer scope
// "no-catch-shadow": 1,
// // Disallow identifiers from shadowing restricted names
// "no-shadow-restricted-names": 2,
// // Enforce return statements in callbacks of array methods
// "callback-return": 2,
// // Require error handling in callbacks
// "handle-callback-err": 2,
// // Warn against string concatenation with __dirname and __filename
// "no-path-concat": 1,
// // Prefer using arrow functions for callbacks
// "prefer-arrow-callback": 1,
// // Return inside each then() to create readable and reusable Promise chains.
// // Forces developers to return console logs and http calls in promises.
// "promise/always-return": 2,
// //Enforces the use of catch() on un-returned promises
// "promise/catch-or-return": 2,
// // Warn against nested then() or catch() statements
// "promise/no-nesting": 1
// }
// }

View File

@@ -7,23 +7,23 @@ exports.processSignUp = functions.auth.user().onCreate((user) => {
// Check if user meets role criteria: // Check if user meets role criteria:
// Your custom logic here: to decide what roles and other `x-hasura-*` should the user get // Your custom logic here: to decide what roles and other `x-hasura-*` should the user get
let customClaims; let customClaims;
if (user.email && user.email.indexOf("@thinkimex.com") !== -1) { // if (user.email && user.email.indexOf("@thinkimex.com") !== -1) {
customClaims = { // customClaims = {
"https://hasura.io/jwt/claims": { // "https://hasura.io/jwt/claims": {
"x-hasura-default-role": "admin", // "x-hasura-default-role": "admin",
"x-hasura-allowed-roles": ["user", "admin"], // "x-hasura-allowed-roles": ["user", "admin"],
"x-hasura-user-id": user.uid, // "x-hasura-user-id": user.uid,
}, // },
}; // };
} else { // } else {
customClaims = { customClaims = {
"https://hasura.io/jwt/claims": { "https://hasura.io/jwt/claims": {
"x-hasura-default-role": "user", "x-hasura-default-role": "user",
"x-hasura-allowed-roles": ["user"], "x-hasura-allowed-roles": ["user"],
"x-hasura-user-id": user.uid, "x-hasura-user-id": user.uid,
}, },
}; };
} //}
//Removed for now - outbound connections are not free on firebase. //Removed for now - outbound connections are not free on firebase.
// fetch(GRAPHQL_ENDPOINT, { // fetch(GRAPHQL_ENDPOINT, {

5565
firebase/functions/package-lock.json generated Normal file

File diff suppressed because it is too large Load Diff

View File

@@ -2,7 +2,7 @@
"name": "functions", "name": "functions",
"description": "Cloud Functions for Firebase", "description": "Cloud Functions for Firebase",
"scripts": { "scripts": {
"lint": "eslint .", "lint": "eslint -c ./.eslintrc.json .",
"serve": "firebase serve --only functions", "serve": "firebase serve --only functions",
"shell": "firebase functions:shell", "shell": "firebase functions:shell",
"start": "npm run shell", "start": "npm run shell",
@@ -10,11 +10,11 @@
"logs": "firebase functions:log" "logs": "firebase functions:log"
}, },
"engines": { "engines": {
"node": "8" "node": "12"
}, },
"dependencies": { "dependencies": {
"firebase-admin": "^8.6.0", "firebase-admin": "^9.5.0",
"firebase-functions": "^3.3.0" "firebase-functions": "^3.13.2"
}, },
"devDependencies": { "devDependencies": {
"eslint": "^5.12.0", "eslint": "^5.12.0",

View File

@@ -0,0 +1,73 @@
- args:
role: user
table:
name: bodyshops
schema: public
type: drop_update_permission
- args:
permission:
columns:
- accountingconfig
- address1
- address2
- appt_alt_transport
- appt_colors
- appt_length
- bill_tax_rates
- city
- country
- created_at
- default_adjustment_rate
- deliverchecklist
- email
- enforce_class
- federal_tax_id
- id
- inhousevendorid
- insurance_vendor_id
- intakechecklist
- logo_img_path
- md_categories
- md_classes
- md_hour_split
- md_ins_cos
- md_labor_rates
- md_messaging_presets
- md_notes_presets
- md_order_statuses
- md_parts_locations
- md_payment_types
- md_rbac
- md_referral_sources
- md_responsibility_centers
- md_ro_statuses
- phone
- prodtargethrs
- production_config
- schedule_end_time
- schedule_start_time
- scoreboard_target
- shopname
- shoprates
- speedprint
- ssbuckets
- state
- state_tax_id
- target_touchtime
- updated_at
- use_fippa
- workingdays
- zip_post
filter:
associations:
bodyshop:
associations:
user:
authid:
_eq: X-Hasura-User-Id
set: {}
role: user
table:
name: bodyshops
schema: public
type: create_update_permission

View File

@@ -0,0 +1,74 @@
- args:
role: user
table:
name: bodyshops
schema: public
type: drop_update_permission
- args:
permission:
columns:
- accountingconfig
- address1
- address2
- appt_alt_transport
- appt_colors
- appt_length
- bill_tax_rates
- city
- country
- created_at
- default_adjustment_rate
- deliverchecklist
- email
- enforce_class
- federal_tax_id
- id
- inhousevendorid
- insurance_vendor_id
- intakechecklist
- logo_img_path
- md_categories
- md_classes
- md_hour_split
- md_ins_cos
- md_labor_rates
- md_messaging_presets
- md_notes_presets
- md_order_statuses
- md_parts_locations
- md_payment_types
- md_rbac
- md_referral_sources
- md_responsibility_centers
- md_ro_statuses
- phone
- prodtargethrs
- production_config
- schedule_end_time
- schedule_start_time
- scoreboard_target
- shopname
- shoprates
- speedprint
- ssbuckets
- state
- state_tax_id
- target_touchtime
- updated_at
- use_fippa
- workingdays
- zip_post
filter:
associations:
_and:
- user:
authid:
_eq: X-Hasura-User-Id
- active:
_eq: true
set: {}
role: user
table:
name: bodyshops
schema: public
type: create_update_permission

View File

@@ -0,0 +1,80 @@
- args:
role: user
table:
name: bodyshops
schema: public
type: drop_select_permission
- args:
permission:
allow_aggregations: false
columns:
- accountingconfig
- address1
- address2
- appt_alt_transport
- appt_colors
- appt_length
- bill_tax_rates
- city
- country
- created_at
- default_adjustment_rate
- deliverchecklist
- email
- enforce_class
- federal_tax_id
- id
- imexshopid
- inhousevendorid
- insurance_vendor_id
- intakechecklist
- logo_img_path
- md_categories
- md_classes
- md_hour_split
- md_ins_cos
- md_labor_rates
- md_messaging_presets
- md_notes_presets
- md_order_statuses
- md_parts_locations
- md_payment_types
- md_rbac
- md_referral_sources
- md_responsibility_centers
- md_ro_statuses
- messagingservicesid
- phone
- prodtargethrs
- production_config
- region_config
- schedule_end_time
- schedule_start_time
- scoreboard_target
- shopname
- shoprates
- speedprint
- ssbuckets
- state
- state_tax_id
- stripe_acct_id
- target_touchtime
- template_header
- textid
- updated_at
- use_fippa
- workingdays
- zip_post
computed_fields: []
filter:
associations:
bodyshop:
associations:
user:
authid:
_eq: X-Hasura-User-Id
role: user
table:
name: bodyshops
schema: public
type: create_select_permission

View File

@@ -0,0 +1,78 @@
- args:
role: user
table:
name: bodyshops
schema: public
type: drop_select_permission
- args:
permission:
allow_aggregations: false
columns:
- accountingconfig
- address1
- address2
- appt_alt_transport
- appt_colors
- appt_length
- bill_tax_rates
- city
- country
- created_at
- default_adjustment_rate
- deliverchecklist
- email
- enforce_class
- federal_tax_id
- id
- imexshopid
- inhousevendorid
- insurance_vendor_id
- intakechecklist
- logo_img_path
- md_categories
- md_classes
- md_hour_split
- md_ins_cos
- md_labor_rates
- md_messaging_presets
- md_notes_presets
- md_order_statuses
- md_parts_locations
- md_payment_types
- md_rbac
- md_referral_sources
- md_responsibility_centers
- md_ro_statuses
- messagingservicesid
- phone
- prodtargethrs
- production_config
- region_config
- schedule_end_time
- schedule_start_time
- scoreboard_target
- shopname
- shoprates
- speedprint
- ssbuckets
- state
- state_tax_id
- stripe_acct_id
- target_touchtime
- template_header
- textid
- updated_at
- use_fippa
- workingdays
- zip_post
computed_fields: []
filter:
associations:
user:
authid:
_eq: X-Hasura-User-Id
role: user
table:
name: bodyshops
schema: public
type: create_select_permission

View File

@@ -786,11 +786,9 @@ tables:
- zip_post - zip_post
filter: filter:
associations: associations:
bodyshop: user:
associations: authid:
user: _eq: X-Hasura-User-Id
authid:
_eq: X-Hasura-User-Id
update_permissions: update_permissions:
- role: user - role: user
permission: permission:
@@ -848,11 +846,12 @@ tables:
- zip_post - zip_post
filter: filter:
associations: associations:
bodyshop: _and:
associations: - user:
user: authid:
authid: _eq: X-Hasura-User-Id
_eq: X-Hasura-User-Id - active:
_eq: true
check: null check: null
- table: - table:
schema: public schema: public