make capability quersies throughout whoel project

This commit is contained in:
nek0 2020-07-31 23:01:57 +02:00
parent b3cb5114ae
commit e599e02b13
8 changed files with 110 additions and 91 deletions

View File

@ -110,6 +110,7 @@ library
, stm , stm
, mtl , mtl
, pureMD5 , pureMD5
, extra
hs-source-dirs: src hs-source-dirs: src
default-language: Haskell2010 default-language: Haskell2010
ghc-options: -Wall ghc-options: -Wall

View File

@ -6,8 +6,8 @@ let
f = { mkDerivation, aeson, base, base16-bytestring f = { mkDerivation, aeson, base, base16-bytestring
, base64-bytestring, bytestring, case-insensitive, clock , base64-bytestring, bytestring, case-insensitive, clock
, containers, HsYAML, http-api-data, http-types, iproute, mtl , containers, extra, HsYAML, http-api-data, http-types, iproute
, network, opaleye, optparse-applicative, postgresql-simple , mtl, network, opaleye, optparse-applicative, postgresql-simple
, postgresql-simple-migration, product-profunctors, profunctors , postgresql-simple-migration, product-profunctors, profunctors
, pureMD5, random-bytestring, servant, servant-rawm, servant-server , pureMD5, random-bytestring, servant, servant-rawm, servant-server
, stdenv, stm, text, time, wai, wai-logger, wai-middleware-throttle , stdenv, stm, text, time, wai, wai-logger, wai-middleware-throttle
@ -27,7 +27,7 @@ let
]; ];
executableHaskellDepends = [ executableHaskellDepends = [
base base16-bytestring bytestring case-insensitive clock containers base base16-bytestring bytestring case-insensitive clock containers
HsYAML iproute mtl network opaleye optparse-applicative extra HsYAML iproute mtl network opaleye optparse-applicative
postgresql-simple postgresql-simple-migration servant postgresql-simple postgresql-simple-migration servant
servant-server stm text time wai wai-logger wai-middleware-throttle servant-server stm text time wai wai-logger wai-middleware-throttle
warp warp

View File

@ -5,19 +5,24 @@ import Servant
import Control.Monad (void) import Control.Monad (void)
import Control.Monad.Reader (asks) import Control.Monad.Reader (asks)
import Control.Monad.Extra (anyM)
-- internal imports -- internal imports
import Types import Types
import Model.Journal import Model.Journal
import Control.Role (checkCapability)
journalShow journalShow
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> Maybe Int -> Maybe Int
-> Maybe Int -> Maybe Int
-> MateHandler [JournalEntry] -> MateHandler [JournalEntry]
journalShow (Just (_, method)) mlimit moffset = journalShow (Just (uid, method)) mlimit moffset = do
if method `elem` [PrimaryPass, ChallengeResponse] maySeeJournal <- anyM
(checkCapability uid)
[roleCanViewJournal, roleCanManageJournal]
if (method `elem` [PrimaryPass, ChallengeResponse] && maySeeJournal)
then do then do
conn <- asks rsConnection conn <- asks rsConnection
selectJournalEntries mlimit moffset conn selectJournalEntries mlimit moffset conn
@ -34,8 +39,9 @@ journalCheck
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> JournalCashCheck -> JournalCashCheck
-> MateHandler () -> MateHandler ()
journalCheck (Just (_, method)) check = journalCheck (Just (uid, method)) check = do
if method `elem` [PrimaryPass, ChallengeResponse] mayCheckJournal <- checkCapability uid roleCanManageJournal
if (method `elem` [PrimaryPass, ChallengeResponse] && mayCheckJournal)
then do then do
conn <- asks rsConnection conn <- asks rsConnection
void $ insertNewCashCheck check conn void $ insertNewCashCheck check conn

View File

@ -7,24 +7,36 @@ import Control.Monad (void)
import Control.Monad.Reader (asks) import Control.Monad.Reader (asks)
import Control.Monad.Extra (anyM)
import Data.Maybe (fromMaybe) import Data.Maybe (fromMaybe)
-- internal imports -- internal imports
import Types import Types
import Model import Model
import Control.Role (checkCapability)
productNew productNew
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> ProductSubmit -> ProductSubmit
-> MateHandler Int -> MateHandler Int
productNew (Just _) bevsub = do productNew (Just (uid, auth)) bevsub = do
conn <- asks rsConnection mayAddProduct <- checkCapability uid roleCanManageProducts
bevid <- insertProduct bevsub conn if (auth `elem` [PrimaryPass, ChallengeResponse] && mayAddProduct)
void $ insertNewEmptyAmount bevid bevsub conn then do
return bevid conn <- asks rsConnection
bevid <- insertProduct bevsub conn
void $ insertNewEmptyAmount bevid bevsub conn
return bevid
else
throwError $ err401
{ errBody = "You are not authorized for this action."
}
productNew Nothing _ = productNew Nothing _ =
throwError err401 throwError $ err401
{ errBody = "No Authentication present."
}
productOverview productOverview
:: Int :: Int
@ -37,29 +49,38 @@ productStockRefill
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> [AmountRefill] -> [AmountRefill]
-> MateHandler () -> MateHandler ()
productStockRefill (Just _) amorefs = do productStockRefill (Just (uid, auth)) amorefs = do
conn <- asks rsConnection mayRefill <- anyM
prods <- mapM (checkCapability uid)
(\refill -> productSelectSingle (amountRefillProductId refill) conn) [ roleCanRefillStock, roleCanManageProducts ]
amorefs if (auth `elem` [PrimaryPass, ChallengeResponse] && mayRefill)
if all (not . null) prods then do
then conn <- asks rsConnection
if prods <- mapM
all (\refill -> productSelectSingle (amountRefillProductId refill) conn)
(\refill -> amorefs
(>= 0) (amountRefillAmountSingles refill) && if all (not . null) prods
(>= 0) (amountRefillAmountCrates refill) then
) if
amorefs all
then do (\refill ->
void $ manualProductAmountRefill amorefs conn (>= 0) (amountRefillAmountSingles refill) &&
(>= 0) (amountRefillAmountCrates refill)
)
amorefs
then do
void $ manualProductAmountRefill amorefs conn
else
throwError $ err400
{ errBody = "Amounts less than 0 are not acceptable."
}
else else
throwError $ err400 throwError $ err400
{ errBody = "Amounts less than 0 are not acceptable." { errBody = "Non-existent Products are non-refillable."
} }
else else
throwError $ err400 throwError $ err401
{ errBody = "Non-existent Products are non-refillable." { errBody = "You are not authorized for this action."
} }
productStockRefill Nothing _ = productStockRefill Nothing _ =
throwError $ err401 throwError $ err401
@ -70,8 +91,9 @@ productStockUpdate
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> [AmountUpdate] -> [AmountUpdate]
-> MateHandler () -> MateHandler ()
productStockUpdate (Just (_, method)) amoups = productStockUpdate (Just (uid, method)) amoups = do
if method `elem` [PrimaryPass, ChallengeResponse] mayUpdateStock <- checkCapability uid roleCanManageProducts
if (method `elem` [PrimaryPass, ChallengeResponse] && mayUpdateStock)
then then
if all ((>= 0) . amountUpdateRealAmount) amoups if all ((>= 0) . amountUpdateRealAmount) amoups
then do then do

View File

@ -25,12 +25,12 @@ roleNew
:: Maybe (Int, AuthMethod) :: Maybe (Int, AuthMethod)
-> RoleSubmit -> RoleSubmit
-> MateHandler Int -> MateHandler Int
roleNew (Just (uid, auth)) (RoleSubmit name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11) = roleNew (Just (uid, auth)) (RoleSubmit name c1 c2 c3 c4 c5 c6 c7 c8 c9) =
do do
isRoleManager <- checkCapability uid roleCanManageRoles isRoleManager <- checkCapability uid roleCanManageRoles
if (auth `elem` [PrimaryPass, ChallengeResponse] && isRoleManager) if (auth `elem` [PrimaryPass, ChallengeResponse] && isRoleManager)
then then
insertRole name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 =<< asks rsConnection insertRole name c1 c2 c3 c4 c5 c6 c7 c8 c9 =<< asks rsConnection
else else
throwError $ err401 throwError $ err401
{ errBody = "You are not authorized for this action." { errBody = "You are not authorized for this action."

View File

@ -30,7 +30,7 @@ userNew (UserSubmit ident email passhash) = do
uid <- insertUser ident email (utctDay now) conn uid <- insertUser ident email (utctDay now) conn
void $ putUserAuthInfo uid PrimaryPass "Initial password" passhash conn void $ putUserAuthInfo uid PrimaryPass "Initial password" passhash conn
baseRoleId <- queryRoleIdByCapabilities baseRoleId <- queryRoleIdByCapabilities
(False, False, False, False, False, False, False, False, False, False, False) (False, False, False, False, False, False, False, False, False)
conn conn
void $ associateUserToRole uid baseRoleId conn void $ associateUserToRole uid baseRoleId conn
return uid return uid

View File

@ -6,7 +6,7 @@ module Model.Role where
import qualified Database.PostgreSQL.Simple as PGS import qualified Database.PostgreSQL.Simple as PGS
import Data.Profunctor.Product (p2, p13) import Data.Profunctor.Product (p2, p11)
import qualified Data.Text as T import qualified Data.Text as T
@ -30,13 +30,13 @@ initRole = mconcat
, "role_id SERIAL NOT NULL," , "role_id SERIAL NOT NULL,"
, "role_name TEXT NOT NULL," , "role_name TEXT NOT NULL,"
, "role_can_refill_stock BOOLEAN NOT NULL," , "role_can_refill_stock BOOLEAN NOT NULL,"
, "role_can_add_product BOOLEAN NOT NULL," -- , "role_can_add_product BOOLEAN NOT NULL,"
, "role_can_view_journal BOOLEAN NOT NULL," , "role_can_view_journal BOOLEAN NOT NULL,"
, "role_can_pay_invoice BOOLEAN NOT NULL," , "role_can_pay_invoice BOOLEAN NOT NULL,"
, "role_can_pay_out BOOLEAN NOT NULL," , "role_can_pay_out BOOLEAN NOT NULL,"
, "role_can_manage_products BOOLEAN NOT NULL," , "role_can_manage_products BOOLEAN NOT NULL,"
, "role_can_manage_journal BOOLEAN NOT NULL," , "role_can_manage_journal BOOLEAN NOT NULL,"
, "role_can_manage_users BOOLEAN NOT NULL," -- , "role_can_manage_users BOOLEAN NOT NULL,"
, "role_can_manage_roles BOOLEAN NOT NULL," , "role_can_manage_roles BOOLEAN NOT NULL,"
, "role_can_manage_suppliers BOOLEAN NOT NULL," , "role_can_manage_suppliers BOOLEAN NOT NULL,"
, "role_can_manage_settings BOOLEAN NOT NULL," , "role_can_manage_settings BOOLEAN NOT NULL,"
@ -58,13 +58,13 @@ roleTable :: Table
( Maybe (Field SqlInt4) ( Maybe (Field SqlInt4)
, Field SqlText , Field SqlText
, Field SqlBool , Field SqlBool
-- , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool -- , Field SqlBool
, Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
@ -72,29 +72,29 @@ roleTable :: Table
( Field SqlInt4 ( Field SqlInt4
, Field SqlText , Field SqlText
, Field SqlBool , Field SqlBool
-- , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool -- , Field SqlBool
, Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
, Field SqlBool , Field SqlBool
) )
roleTable = table "role" ( roleTable = table "role" (
p13 p11
( tableField "role_id" ( tableField "role_id"
, tableField "role_name" , tableField "role_name"
, tableField "role_can_refill_stock" , tableField "role_can_refill_stock"
, tableField "role_can_add_product" -- , tableField "role_can_add_product"
, tableField "role_can_view_journal" , tableField "role_can_view_journal"
, tableField "role_can_pay_invoice" , tableField "role_can_pay_invoice"
, tableField "role_can_pay_out" , tableField "role_can_pay_out"
, tableField "role_can_manage_products" , tableField "role_can_manage_products"
, tableField "role_can_manage_journal" , tableField "role_can_manage_journal"
, tableField "role_can_manage_users" -- , tableField "role_can_manage_users"
, tableField "role_can_manage_roles" , tableField "role_can_manage_roles"
, tableField "role_can_manage_suppliers" , tableField "role_can_manage_suppliers"
, tableField "role_can_manage_settings" , tableField "role_can_manage_settings"
@ -128,19 +128,19 @@ runInsertInitialRoles conn = do
( C.constant (Nothing :: Maybe Int) ( C.constant (Nothing :: Maybe Int)
, C.constant ("Administrator" :: String) , C.constant ("Administrator" :: String)
, C.constant True , C.constant True
-- , C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
, C.constant True -- , C.constant True
, C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
, C.constant True , C.constant True
) )
] ]
, iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> id_ ) , iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _) -> id_ )
, iOnConflict = Nothing , iOnConflict = Nothing
} }
b <- runInsert_ conn $ Insert b <- runInsert_ conn $ Insert
@ -150,19 +150,19 @@ runInsertInitialRoles conn = do
( C.constant (Nothing :: Maybe Int) ( C.constant (Nothing :: Maybe Int)
, C.constant ("User" :: String) , C.constant ("User" :: String)
, C.constant False , C.constant False
-- , C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
, C.constant False -- , C.constant False
, C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
, C.constant False , C.constant False
) )
] ]
, iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> id_ ) , iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _) -> id_ )
, iOnConflict = Nothing , iOnConflict = Nothing
} }
return $ a ++ b return $ a ++ b
@ -178,21 +178,21 @@ selectAllRoles conn = do
( Int ( Int
, T.Text , T.Text
, Bool , Bool
-- , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool -- , Bool
, Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
) )
] ]
return $ map return $ map
(\(id_, name, c1, c2, c3, c4, c5, c6, c7, c8, c9 ,c10, c11) -> (\(id_, name, c1, c2, c3, c4, c5, c6, c7, c8, c9) ->
Role id_ name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11) Role id_ name c1 c2 c3 c4 c5 c6 c7 c8 c9)
rawRoles rawRoles
@ -202,7 +202,7 @@ selectRoleList
-> MateHandler [Role] -> MateHandler [Role]
selectRoleList ids conn = do selectRoleList ids conn = do
rawRoles <- liftIO $ runSelect conn ( rawRoles <- liftIO $ runSelect conn (
(keepWhen (\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> (keepWhen (\(id_, _, _, _, _, _, _, _, _, _, _) ->
in_ (map C.constant ids) id_)) in_ (map C.constant ids) id_))
<<< queryTable roleTable <<< queryTable roleTable
) :: MateHandler ) :: MateHandler
@ -210,40 +210,40 @@ selectRoleList ids conn = do
( Int ( Int
, T.Text , T.Text
, Bool , Bool
-- , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool -- , Bool
, Bool
, Bool , Bool
, Bool , Bool
, Bool , Bool
) )
] ]
return $ map return $ map
(\(id_, name, c1, c2, c3, c4, c5, c6, c7, c8, c9 ,c10, c11) -> (\(id_, name, c1, c2, c3, c4, c5, c6, c7, c8, c9) ->
Role id_ name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11) Role id_ name c1 c2 c3 c4 c5 c6 c7 c8 c9)
rawRoles rawRoles
insertRole insertRole
:: T.Text :: T.Text
-> Bool -> Bool
-- -> Bool
-> Bool -> Bool
-> Bool -> Bool
-> Bool -> Bool
-> Bool -> Bool
-> Bool -> Bool
-> Bool -- -> Bool
-> Bool
-> Bool -> Bool
-> Bool -> Bool
-> Bool -> Bool
-> PGS.Connection -> PGS.Connection
-> MateHandler Int -> MateHandler Int
insertRole name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 conn = do insertRole name c1 c2 c3 c4 c5 c6 c7 c8 c9 conn = do
head <$> liftIO (runInsert_ conn $ Insert head <$> liftIO (runInsert_ conn $ Insert
{ iTable = roleTable { iTable = roleTable
, iRows = , iRows =
@ -259,11 +259,9 @@ insertRole name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 conn = do
, C.constant c7 , C.constant c7
, C.constant c8 , C.constant c8
, C.constant c9 , C.constant c9
, C.constant c10
, C.constant c11
) )
] ]
, iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> id_ ) , iReturning = rReturning (\(id_, _, _, _, _, _, _, _, _, _, _) -> id_ )
, iOnConflict = Nothing , iOnConflict = Nothing
}) })
@ -274,7 +272,7 @@ queryRoleIdByName
-> MateHandler Int -> MateHandler Int
queryRoleIdByName name conn = do queryRoleIdByName name conn = do
roles <- liftIO $ runSelect conn ( roles <- liftIO $ runSelect conn (
keepWhen (\(_, rname, _, _, _, _, _, _, _, _, _, _, _) -> keepWhen (\(_, rname, _, _, _, _, _, _, _, _, _) ->
C.constant name .== rname) <<< queryTable roleTable C.constant name .== rname) <<< queryTable roleTable
) :: MateHandler ) :: MateHandler
[ [
@ -289,20 +287,18 @@ queryRoleIdByName name conn = do
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool
, Bool
) )
] ]
return $ (\(rid, _, _, _, _, _, _, _, _, _, _, _, _) -> rid) (head roles) return $ (\(rid, _, _, _, _, _, _, _, _, _, _) -> rid) (head roles)
queryRoleIdByCapabilities queryRoleIdByCapabilities
:: (Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool) :: (Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool, Bool)
-> PGS.Connection -> PGS.Connection
-> MateHandler Int -> MateHandler Int
queryRoleIdByCapabilities (p1, p2, p3, p4, p5, p6, p7, p8, p9, p10, p11) conn = queryRoleIdByCapabilities (p1, p2, p3, p4, p5, p6, p7, p8, p9) conn =
do do
roles <- liftIO $ runSelect conn ( roles <- liftIO $ runSelect conn (
keepWhen (\(_, _, c1, c2, c3, c4, c5, c6, c7, c8, c9, c10, c11) -> keepWhen (\(_, _, c1, c2, c3, c4, c5, c6, c7, c8, c9) ->
C.constant p1 .== c1 .&& C.constant p1 .== c1 .&&
C.constant p2 .== c2 .&& C.constant p2 .== c2 .&&
C.constant p3 .== c3 .&& C.constant p3 .== c3 .&&
@ -311,9 +307,7 @@ queryRoleIdByCapabilities (p1, p2, p3, p4, p5, p6, p7, p8, p9, p10, p11) conn =
C.constant p6 .== c6 .&& C.constant p6 .== c6 .&&
C.constant p7 .== c7 .&& C.constant p7 .== c7 .&&
C.constant p8 .== c8 .&& C.constant p8 .== c8 .&&
C.constant p9 .== c9 .&& C.constant p9 .== c9
C.constant p10 .== c10 .&&
C.constant p11 .== c11
) )
<<< queryTable roleTable <<< queryTable roleTable
) :: MateHandler ) :: MateHandler
@ -329,11 +323,9 @@ queryRoleIdByCapabilities (p1, p2, p3, p4, p5, p6, p7, p8, p9, p10, p11) conn =
, Bool , Bool
, Bool , Bool
, Bool , Bool
, Bool
, Bool
) )
] ]
return $ (\(rid, _, _, _, _, _, _, _, _, _, _, _, _) -> rid) (head roles) return $ (\(rid, _, _, _, _, _, _, _, _, _, _) -> rid) (head roles)
selectAllRoleAssociations selectAllRoleAssociations
@ -408,10 +400,10 @@ updateRole
-> RoleSubmit -- The role with already updated info -> RoleSubmit -- The role with already updated info
-> PGS.Connection -> PGS.Connection
-> MateHandler Int64 -> MateHandler Int64
updateRole rid role@(RoleSubmit name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11) conn = updateRole rid role@(RoleSubmit name c1 c2 c3 c4 c5 c6 c7 c8 c9) conn =
liftIO $ runUpdate_ conn $ Update liftIO $ runUpdate_ conn $ Update
{ uTable = roleTable { uTable = roleTable
, uUpdateWith = updateEasy (\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> , uUpdateWith = updateEasy (\(id_, _, _, _, _, _, _, _, _, _, _) ->
( id_ ( id_
, C.constant name , C.constant name
, C.constant c1 , C.constant c1
@ -423,11 +415,9 @@ updateRole rid role@(RoleSubmit name c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11) conn =
, C.constant c7 , C.constant c7
, C.constant c8 , C.constant c8
, C.constant c9 , C.constant c9
, C.constant c10
, C.constant c11
) )
) )
, uWhere = \(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> , uWhere = \(id_, _, _, _, _, _, _, _, _, _, _) ->
id_ .== C.constant rid id_ .== C.constant rid
, uReturning = rCount , uReturning = rCount
} }
@ -440,6 +430,6 @@ deleteRole rid conn =
liftIO $ runDelete_ conn $ Delete liftIO $ runDelete_ conn $ Delete
{ dTable = roleTable { dTable = roleTable
, dWhere = , dWhere =
(\(id_, _, _, _, _, _, _, _, _, _, _, _, _) -> id_ .== C.constant rid) (\(id_, _, _, _, _, _, _, _, _, _, _) -> id_ .== C.constant rid)
, dReturning = rCount , dReturning = rCount
} }

View File

@ -10,13 +10,13 @@ data Role = Role
{ roleID :: Int { roleID :: Int
, roleName :: T.Text , roleName :: T.Text
, roleCanRefillStock :: Bool , roleCanRefillStock :: Bool
, roleCanAddProduct :: Bool -- , roleCanAddProduct :: Bool
, roleCanViewJournal :: Bool , roleCanViewJournal :: Bool
, roleCanPayInvoice :: Bool , roleCanPayInvoice :: Bool
, roleCanPayOut :: Bool , roleCanPayOut :: Bool
, roleCanManageProducts :: Bool , roleCanManageProducts :: Bool
, roleCanManageJournal :: Bool , roleCanManageJournal :: Bool
, roleCanManageUsers :: Bool -- , roleCanManageUsers :: Bool
, roleCanManageRoles :: Bool , roleCanManageRoles :: Bool
, roleCanManageSuppliers :: Bool , roleCanManageSuppliers :: Bool
, roleCanManageSettings :: Bool , roleCanManageSettings :: Bool
@ -31,13 +31,13 @@ instance FromJSON Role
data RoleSubmit = RoleSubmit data RoleSubmit = RoleSubmit
{ roleSubmitName :: T.Text { roleSubmitName :: T.Text
, roleSubmitCanRefillStock :: Bool , roleSubmitCanRefillStock :: Bool
, roleSubmitCanAddProduct :: Bool -- , roleSubmitCanAddProduct :: Bool
, roleSubmitCanViewJournal :: Bool , roleSubmitCanViewJournal :: Bool
, roleSubmitCanPayInvoice :: Bool , roleSubmitCanPayInvoice :: Bool
, roleSubmitCanPayOut :: Bool , roleSubmitCanPayOut :: Bool
, roleSubmitCanManageProducts :: Bool , roleSubmitCanManageProducts :: Bool
, roleSubmitCanManageJournal :: Bool , roleSubmitCanManageJournal :: Bool
, roleSubmitCanManageUsers :: Bool -- , roleSubmitCanManageUsers :: Bool
, roleSubmitCanManageRoles :: Bool , roleSubmitCanManageRoles :: Bool
, roleSubmitCanManageSuppliers :: Bool , roleSubmitCanManageSuppliers :: Bool
, roleSubmitCanManageSettings :: Bool , roleSubmitCanManageSettings :: Bool