ToolJet/server/src/modules/casl/abilities/global-datasource-ability.factory.ts

import { User } from 'src/entities/user.entity';
import { InferSubjects, AbilityBuilder, Ability, AbilityClass, ExtractSubjectType } from '@casl/ability';
import { Injectable } from '@nestjs/common';
import { UsersService } from 'src/services/users.service';
import { DataSource } from 'src/entities/data_source.entity';

type Actions =
  | 'createGlobalDataSource'
  | 'updateGlobalDataSource'
  | 'deleteGlobalDataSource'
  | 'authorizeOauthForSource';

type Subjects = InferSubjects<typeof User | typeof DataSource> | 'all';

export type GlobalDataSourcesAbility = Ability<[Actions, Subjects]>;

@Injectable()
export class GlobalDataSourceAbilityFactory {
  constructor(private usersService: UsersService) {}

  async globalDataSourceActions(user: User) {
    const { can, build } = new AbilityBuilder<Ability<[Actions, Subjects]>>(
      Ability as AbilityClass<GlobalDataSourcesAbility>
    );

    if (await this.usersService.userCan(user, 'create', 'GlobalDataSource')) {
      can('createGlobalDataSource', DataSource);
    }

    if (await this.usersService.userCan(user, 'update', 'GlobalDataSource')) {
      can('updateGlobalDataSource', DataSource);
    }

    if (await this.usersService.userCan(user, 'delete', 'GlobalDataSource')) {
      can('deleteGlobalDataSource', DataSource);
    }

    if (await this.usersService.userCan(user, 'create', 'GlobalDataSource')) {
      can('authorizeOauthForSource', DataSource);
    }

    return build({
      detectSubjectType: (item) => item.constructor as ExtractSubjectType<Subjects>,
    });
  }
}