feat: add SchemaChangeBatchOwnershipGuard and SchemaChangeOwnershipGuard for enhanced access control

Author: Artuomka

backend/src/entities/table-schema/table-schema.controller.ts

@@ -16,7 +16,11 @@ import { UseCaseType } from '../../common/data-injection.tokens.js';
 import { MasterPassword } from '../../decorators/master-password.decorator.js';
 import { SlugUuid } from '../../decorators/slug-uuid.decorator.js';
 import { UserId } from '../../decorators/user-id.decorator.js';
-import { ConnectionEditGuard } from '../../guards/index.js';
+import {
+	ConnectionEditGuard,
+	SchemaChangeBatchOwnershipGuard,
+	SchemaChangeOwnershipGuard,
+} from '../../guards/index.js';
 import { SentryInterceptor } from '../../interceptors/sentry.interceptor.js';
 import { ApproveBatchSchemaChangeDto } from './application/data-transfer-objects/approve-batch-schema-change.dto.js';
 import { ApproveSchemaChangeDto } from './application/data-transfer-objects/approve-schema-change.dto.js';
@@ -36,8 +40,6 @@ import {
 	IRollbackBatchSchemaChange,
 	IRollbackSchemaChange,
 } from './use-cases/table-schema-use-cases.interface.js';
-import { SchemaChangeBatchOwnershipGuard } from './utils/schema-change-batch-ownership.guard.js';
-import { SchemaChangeOwnershipGuard } from './utils/schema-change-ownership.guard.js';
 
 @UseInterceptors(SentryInterceptor)
 @Controller()

backend/src/entities/table-schema/table-schema.module.ts

@@ -3,6 +3,7 @@ import { TypeOrmModule } from '@nestjs/typeorm';
 import { AuthMiddleware } from '../../authorization/auth.middleware.js';
 import { GlobalDatabaseContext } from '../../common/application/global-database-context.js';
 import { BaseType, UseCaseType } from '../../common/data-injection.tokens.js';
+import { SchemaChangeBatchOwnershipGuard, SchemaChangeOwnershipGuard } from '../../guards/index.js';
 import { ConnectionEntity } from '../connection/connection.entity.js';
 import { LogOutEntity } from '../log-out/log-out.entity.js';
 import { UserEntity } from '../user/user.entity.js';
@@ -18,8 +19,6 @@ import { RejectBatchSchemaChangesUseCase } from './use-cases/reject-batch-schema
 import { RejectSchemaChangeUseCase } from './use-cases/reject-schema-change.use-case.js';
 import { RollbackBatchSchemaChangesUseCase } from './use-cases/rollback-batch-schema-changes.use-case.js';
 import { RollbackSchemaChangeUseCase } from './use-cases/rollback-schema-change.use-case.js';
-import { SchemaChangeBatchOwnershipGuard } from './utils/schema-change-batch-ownership.guard.js';
-import { SchemaChangeOwnershipGuard } from './utils/schema-change-ownership.guard.js';
 
 @Module({
 	imports: [TypeOrmModule.forFeature([TableSchemaChangeEntity, ConnectionEntity, UserEntity, LogOutEntity])],

backend/src/guards/index.ts

@@ -5,6 +5,8 @@ export { DashboardEditGuard } from './dashboard-edit.guard.js';
 export { DashboardReadGuard } from './dashboard-read.guard.js';
 export { GroupEditGuard } from './group-edit.guard.js';
 export { GroupReadGuard } from './group-read.guard.js';
+export { SchemaChangeBatchOwnershipGuard } from './schema-change-batch-ownership.guard.js';
+export { SchemaChangeOwnershipGuard } from './schema-change-ownership.guard.js';
 export { TableAddGuard } from './table-add.guard.js';
 export { TableDeleteGuard } from './table-delete.guard.js';
 export { TableEditGuard } from './table-edit.guard.js';

…s/schema-change-batch-ownership.guard.ts …s/schema-change-batch-ownership.guard.tsbackend/src/entities/table-schema/utils/schema-change-batch-ownership.guard.ts renamed to backend/src/guards/schema-change-batch-ownership.guard.ts backend/src/entities/table-schema/utils/schema-change-batch-ownership.guard.ts renamed to backend/src/guards/schema-change-batch-ownership.guard.ts

@@ -8,12 +8,12 @@ import {
 } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
-import { IRequestWithCognitoInfo } from '../../../authorization/index.js';
-import { Messages } from '../../../exceptions/text/messages.js';
-import { ValidationHelper } from '../../../helpers/validators/validation-helper.js';
-import { CedarAction } from '../../cedar-authorization/cedar-action-map.js';
-import { CedarAuthorizationService } from '../../cedar-authorization/cedar-authorization.service.js';
-import { TableSchemaChangeEntity } from '../table-schema-change.entity.js';
+import { IRequestWithCognitoInfo } from '../authorization/index.js';
+import { CedarAction } from '../entities/cedar-authorization/cedar-action-map.js';
+import { CedarAuthorizationService } from '../entities/cedar-authorization/cedar-authorization.service.js';
+import { TableSchemaChangeEntity } from '../entities/table-schema/table-schema-change.entity.js';
+import { Messages } from '../exceptions/text/messages.js';
+import { ValidationHelper } from '../helpers/validators/validation-helper.js';
 
 @Injectable()
 export class SchemaChangeBatchOwnershipGuard implements CanActivate {

…a/utils/schema-change-ownership.guard.ts …/guards/schema-change-ownership.guard.tsbackend/src/entities/table-schema/utils/schema-change-ownership.guard.ts renamed to backend/src/guards/schema-change-ownership.guard.ts backend/src/entities/table-schema/utils/schema-change-ownership.guard.ts renamed to backend/src/guards/schema-change-ownership.guard.ts

@@ -8,12 +8,12 @@ import {
 } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
-import { IRequestWithCognitoInfo } from '../../../authorization/index.js';
-import { Messages } from '../../../exceptions/text/messages.js';
-import { ValidationHelper } from '../../../helpers/validators/validation-helper.js';
-import { CedarAction } from '../../cedar-authorization/cedar-action-map.js';
-import { CedarAuthorizationService } from '../../cedar-authorization/cedar-authorization.service.js';
-import { TableSchemaChangeEntity } from '../table-schema-change.entity.js';
+import { IRequestWithCognitoInfo } from '../authorization/index.js';
+import { CedarAction } from '../entities/cedar-authorization/cedar-action-map.js';
+import { CedarAuthorizationService } from '../entities/cedar-authorization/cedar-authorization.service.js';
+import { TableSchemaChangeEntity } from '../entities/table-schema/table-schema-change.entity.js';
+import { Messages } from '../exceptions/text/messages.js';
+import { ValidationHelper } from '../helpers/validators/validation-helper.js';
 
 @Injectable()
 export class SchemaChangeOwnershipGuard implements CanActivate {