Class BankDashboardRoleAdminService

constructor

• new BankDashboardRoleAdminService(
      __namedParameters: {
          db: B2bDatabase;
          internalEventPublisher: InternalEventPublisher;
      },
  ): BankDashboardRoleAdminService

  Parameters

  • __namedParameters: { db: B2bDatabase; internalEventPublisher: InternalEventPublisher }

  Returns BankDashboardRoleAdminService

Staticinstance

create

• create(
      __namedParameters: {
          data: {
              description?: string;
              name: string;
              permissionKeys: string[];
              rank: number;
              roleSetId: string;
          };
          tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations>;
      },
  ): Promise<
      | { error: ServiceError; ok: false }
      | { ok: true; value: BankDashboardRole },
  >

  permissionKeys is the full set; an unknown key fails the whole create.

  Parameters

  • __namedParameters: {
        data: {
            description?: string;
            name: string;
            permissionKeys: string[];
            rank: number;
            roleSetId: string;
        };
        tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations>;
    }

  Returns Promise<
      | { error: ServiceError; ok: false }
      | { ok: true; value: BankDashboardRole },
  >

delete

• delete(
      __namedParameters: {
          id: string;
          tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations>;
      },
  ): Promise<
      | { error: ServiceError; ok: false }
      | { ok: true; value: BankDashboardRole },
  >

  Hard-deletes a custom role and its grants: the catalog has no deleted_at. Refused for a system or internal role, the set's default, and while any membership or invite, live or past, references it.

  Parameters

  • __namedParameters: { id: string; tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations> }

  Returns Promise<
      | { error: ServiceError; ok: false }
      | { ok: true; value: BankDashboardRole },
  >

get

• get(__namedParameters: { id: string }): Promise<BankDashboardRole | null>

  Parameters

  • __namedParameters: { id: string }

  Returns Promise<BankDashboardRole | null>

search

• search(
      filters?: SearchFilters,
  ): Promise<
      {
          ok: true;
          value: { hasNext: boolean; items: BankDashboardRole[]; total: number };
      },
  >

  Parameters

  • filters: SearchFilters = {}

  Returns Promise<
      {
          ok: true;
          value: { hasNext: boolean; items: BankDashboardRole[]; total: number };
      },
  >

update

• update(
      __namedParameters: {
          data: {
              description?: string;
              name?: string;
              permissionKeys?: string[];
              rank?: number;
          };
          id: string;
          tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations>;
      },
  ): Promise<
      { ok: true; value: BankDashboardRole }
      | { error: RoleError; ok: false },
  >

  A field left out is left alone. permissionKeys replaces the grant set. A system role keeps its name; the internal role keeps its rank.

  Parameters

  • __namedParameters: {
        data: {
            description?: string;
            name?: string;
            permissionKeys?: string[];
            rank?: number;
        };
        id: string;
        tx?: PgAsyncTransaction<NodePgQueryResultHKT, EmptyRelations>;
    }

  Returns Promise<
      { ok: true; value: BankDashboardRole }
      | { error: RoleError; ok: false },
  >