add extension api groups to account owner perms

Author: eveffer

deno.json

@@ -1,6 +1,6 @@
 {
   "name": "@inspatial/cloud",
-  "version": "0.7.20",
+  "version": "0.7.21",
   "license": "Apache-2.0",
   "exports": {
     ".": "./mod.ts",

src/api/cloud-group.ts

@@ -14,7 +14,7 @@ export class CloudAPIGroup<
   description: string;
   label?: string;
   actions: Map<string, CloudAPIAction>;
-
+  extension: string = "";
   constructor(groupName: G, config: {
     description: string;
     label?: string;

src/extension/cloud-extension.ts

@@ -140,6 +140,7 @@ export class CloudExtension<
     this.settingsTypes = options.settingsTypes || [];
     this.apiGroups = [] as any;
     for (const actionGroup of options.apiGroups || []) {
+      actionGroup.extension = extensionName;
       this.apiGroups.push(actionGroup);
     }
     this.install = options.install || (() => {});

src/in-cloud.ts

@@ -28,7 +28,7 @@ import type {
   ExtensionConfig,
   ExtractConfig,
 } from "~/cloud-config/config-types.ts";
-import { RoleManager } from "~/orm/roles/role.ts";
+import { type RoleConfig, RoleManager } from "~/orm/roles/role.ts";
 import { CacheTime, StaticFileHandler } from "~/static/staticFileHandler.ts";
 import { ExtensionManager } from "~/extension/extension-manager.ts";
 import type { CloudExtension } from "~/extension/cloud-extension.ts";
@@ -458,14 +458,16 @@ export class InCloud {
     const basicUserConfig = coreExtension?.roles.find((r) =>
       r.roleName === "basicUser"
     );
-    if (basicUserConfig) {
-      this.roles.addRole({
-        ...basicUserConfig,
-        roleName: "accountAdmin",
-        description: "Account Administrator",
-        label: "Account Admin",
-      });
-    }
+    const accountAdminConfig: RoleConfig = {
+      ...basicUserConfig,
+      roleName: "accountAdmin",
+      description: "Account Administrator",
+      label: "Account Admin",
+      apiGroups: {
+        ...basicUserConfig?.apiGroups,
+      },
+    };
+
     for (const group of this.actionGroups.values()) {
       const actionsSet = new Set<string>();
       for (const action of group.actions.values()) {
@@ -479,7 +481,11 @@ export class InCloud {
         }
       }
       adminRole.apiGroups.set(group.groupName, actionsSet);
+      if (group.extension !== "core") {
+        accountAdminConfig.apiGroups![group.groupName] = true;
+      }
     }
+    this.roles.addRole(accountAdminConfig);
   }
   #setupOrm() {
     this.orm = setupOrm({