Function computeGroupGrantMaskForUser

public/js/adminFolderAccess.js:864–961

(username, folders = [], sourceId = null)

}

function computeGroupGrantMaskForUser(username, folders = [], sourceId = null) {
  const mask = {};
  if (!username || !__groupsCache) return mask;
  const sid = normalizeSourceId(sourceId == null ? getFolderAccessSourceId() : sourceId);
  const uname = String(username).toLowerCase();

  const userGroups = Object.keys(__groupsCache || {}).map(groupName => {
    const g = __groupsCache[groupName] || {};
    const members = Array.isArray(g.members) ? g.members : [];
    const inGroup = members.some(m => String(m || "").toLowerCase() === uname);
    if (!inGroup) return null;
    return { name: groupName, grants: pickGroupGrantsForSource(g, sid) };
  }).filter(Boolean);

  if (!userGroups.length) return mask;

  const folderList = Array.isArray(folders) && folders.length
    ? folders.slice()
    : Array.from(new Set(
      userGroups.flatMap(g => Object.keys(g.grants || {}))
    ));

  const hasExplicit = (grants = {}) => {
    if (grants.__explicit || grants.explicit) return true;
    const caps = [
      'view', 'viewOwn', 'manage', 'create', 'upload', 'edit', 'rename',
      'copy', 'move', 'delete', 'extract', 'shareFile', 'shareFolder',
      'write', 'share', 'share_file', 'share_folder', 'owners', 'read', 'read_own'
    ];
    return caps.some(k => !!grants[k]);
  };

  const expandCaps = (grants = {}) => {
    const caps = {};
    const shareFile = !!(grants.shareFile || grants.share_file || grants.share);
    const shareFolder = !!(grants.shareFolder || grants.share_folder || grants.share);
    const writeMeta = !!grants.write;

    [
      'view', 'viewOwn', 'manage', 'create', 'upload', 'edit',
      'rename', 'copy', 'move', 'delete', 'extract'
    ].forEach(k => { if (grants[k]) caps[k] = true; });

    if (shareFile) caps.shareFile = true;
    if (shareFolder) caps.shareFolder = true;
    if (writeMeta) caps.write = true;
    if (grants.share) caps.share = true;
    if (grants.owners) caps.owners = true;
    if (grants.read) caps.read = true;
    if (grants.read_own) caps.read_own = true;

    return caps;
  };

  const ancestors = (folder) => {
    if (!folder || folder === 'root') return [];
    const parts = folder.split('/').filter(Boolean);
    const out = [];