@beyondessential/tupaia-access-policy

This repository is now deprecated - all code for the tupaia project now lives at https://github.com/beyondessential/tupaia

Tupaia Access Policy

Methods for parsing the access policy that is received by Tupaia projects during authentication.

hasAccess

Helper for determining whether a particular resource is accessible as defined by the access policy.

Examples

// Returns whether or not the access policy grants access to DL_North area within DL for surveys at a Donor level.
hasAccess(accessPolicy, 'surveys', ['DL', 'DL_North'], 'Donor');

// Returns whether or not the access policy grants access to Reports for DL at any level.
hasAccess(accessPolicy, 'reports', ['DL']);

JSON Structure

{
    "permissions": {
      "surveys": {
        "_items": {
          "Country": {
            "_access": {
              "Permission Group": bool
            },
            "_items": {
              "Region": {
                "_access": {
				  "Permission Group": bool
                },
                "Region": {
                  "_access": {
				    "Permission Group": bool
                  }
                },
                "_items": {
                  "Facility": {
                    "_access": {
				  	  "Permission Group": bool
	                },
                  }
				}
              }
            }
          }
        }
      },
      "reports": {
        "_items": {
          "Country": {
            "_access": {
              "Permission Group": bool
            },
            "_items": {
              "Region": {
                "_access": {
				  "Permission Group": bool
                },
                "Region": {
                  "_access": {
				    "Permission Group": bool
                  }
                },
                "_items": {
                  "Facility": {
                    "_access": {
				  	  "Permission Group": bool
	                },
                  }
				}
              }
            }
          }
        }
      }
    }
  };

Location-Permission connection

User can have permission entries for countries, regions, sub-regions and facilities. If a user has the Admin permission group for a country, they will have Admin permissions for all children of that country. A child can override a parent permission, which will also override the permission for it's own children.

Running tests

Use the command npm run test.

Editing, changing, building

Edit files in src and run npm run build to create a new version that's able to be imported by other projects. Commit files from the dist files along with source files.