add toggle for entity restriction

Author: skadefro

OpenFlow/src/Config.ts

@@ -30,6 +30,7 @@ export class Config {
         Config.openflow_amqp_expiration = parseInt(Config.getEnv("openflow_amqp_expiration", (60 * 1000 * 25).toString())); // 25 min
         Config.amqp_prefetch = parseInt(Config.getEnv("amqp_prefetch", "50"));
         Config.trace_dashboardauth = Config.parseBoolean(Config.getEnv("trace_dashboardauth", "true"));
+        Config.enable_entity_restriction = Config.parseBoolean(Config.getEnv("enable_entity_restriction", "false"));
 
 
         Config.getting_started_url = Config.getEnv("getting_started_url", "");
@@ -161,6 +162,7 @@ export class Config {
     public static openflow_amqp_expiration: number = parseInt(Config.getEnv("openflow_amqp_expiration", (60 * 1000 * 25).toString())); // 25 min
     public static amqp_prefetch: number = parseInt(Config.getEnv("amqp_prefetch", "50"));
     public static trace_dashboardauth: boolean = Config.parseBoolean(Config.getEnv("trace_dashboardauth", "true"));
+    public static enable_entity_restriction: boolean = Config.parseBoolean(Config.getEnv("enable_entity_restriction", "false"));
 
     public static getting_started_url: string = Config.getEnv("getting_started_url", "");
 

OpenFlow/src/DatabaseConnection.ts

@@ -2012,6 +2012,7 @@ export class DatabaseConnection {
     }
     public EntityRestrictions: EntityRestriction[] = null;
     async CheckEntityRestriction(user: TokenUser, collection: string, item: Base, parent: Span): Promise<boolean> {
+        if (!Config.enable_entity_restriction) return true;
         if (this.EntityRestrictions == null) {
             const rootjwt = Crypt.rootToken()
             this.EntityRestrictions = await this.query<EntityRestriction>({ "_type": "restriction" }, null, 1000, 0, null, "config", rootjwt, null, null, parent);

OpenFlow/src/LoginProvider.ts

@@ -417,7 +417,8 @@ export class LoginProvider {
                     supports_watch: Config.supports_watch,
                     nodered_images: Config.nodered_images,
                     amqp_enabled_exchange: Config.amqp_enabled_exchange,
-                    multi_tenant: Config.multi_tenant
+                    multi_tenant: Config.multi_tenant,
+                    enable_entity_restriction: Config.enable_entity_restriction,
                 }
                 res.end(JSON.stringify(res2));
             } catch (error) {

OpenFlow/src/public/Nodered.html

@@ -24,7 +24,8 @@ <h1 translate lib="web">nodered</h1>
           ng-class="{disabled: !(ctrl.instance!=null && ctrl.instancestatus != 'pending deletion (Running)')}">Delete
           Nodered</button>
 
-        <a ng-href="{{ctrl.noderedurl}}" class="btn" ng-show="ctrl.instance!=null" target="_blank" rel="noopener">Open
+        <a ng-href="{{ctrl.noderedurl}}" class="btn btn-success" ng-show="ctrl.instance!=null" target="_blank"
+          rel="noopener">Open
           Nodered</a>
       </div>
     </div>

OpenFlow/src/public/WebSocketClientService.ts

@@ -37,6 +37,7 @@ export class WebSocketClientService {
                 this.multi_tenant = data.multi_tenant;
 
                 this.nodered_images = data.nodered_images;
+                this.enable_entity_restriction = data.enable_entity_restriction;
 
                 if (WebSocketClient.instance == null) {
                     const cli: WebSocketClient = new WebSocketClient(this.logger, wsurl);
@@ -160,6 +161,7 @@ export class WebSocketClientService {
     public validate_user_form: string = "";
     public nodered_images: nodered_image[];
     public multi_tenant: boolean;
+    public enable_entity_restriction: boolean;
 
     getJSON(url: string, callback: any): void {
         const xhr: XMLHttpRequest = new XMLHttpRequest();

OpenFlow/src/public/index.html

@@ -58,8 +58,9 @@
                 translate lib="web">roles</span></a>
             <a class="dropdown-item" href="#/Credentials"><span translate lib="web">credentials</span></a>
             <a class="dropdown-item" href="#/Auditlogs"><span translate lib="web">auditlogs</span></a>
-            <a class="dropdown-item" href="#/EntityRestrictions" ng-show="menuctrl.hasrole('admins')"><span translate
-                lib="web">entityrestrictions</span></a>
+            <a class="dropdown-item" href="#/EntityRestrictions"
+              ng-show="menuctrl.WebSocketClientService.enable_entity_restriction && menuctrl.hasrole('admins')"><span
+                translate lib="web">entityrestrictions</span></a>
             <a class="dropdown-item" href="#/Forms"><span translate lib="web">forms</span></a>
             <a class="dropdown-item" href="#/Providers" ng-show="menuctrl.hasrole('admins')"><span translate
                 lib="web">providers</span></a>