Upgrading to 2024.5

@startuml
title diffInstances v2024.4.0 -o pkgroletemplate -i 997 -f puml
hide empty members
hide circle

 package pkgroletemplate {
       class 997 {
                #permissions
       }
           rectangle 997_permissions as "
{{json
<style>
.removed {
BackgroundColor pink
FontColor red
}
.added {
BackgroundColor lightgreen
FontColor darkgreen
}
</style>
#highlight "v1" / "objectdata" / "@dam.collection~wkfasset" / "changestatus" / "permissions" / "0" <<added>>
{
"v1": 
{
"objectdata": 
{
"@dam.collection~wkfasset": 
{
"changestatus": 
{
"permissions": 
[
"publish/7/$anyowner"
]
}
}
}
}
}
}}
   "
           997::permissions-->997_permissions
 }
@enduml

/* Object has appropriate tag */
(
  /* Tous */
  CONFIGHASTAG(objectname, 'pkg/security/secugroup/all')
  OR
  /* Qui ont l'action */
  CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/', LOWER(arguments.action)))
  OR
  (
    /* Les droits de create,damimport,massimport sont liés à l'insert */
    NBCOMMONELEMENTS(LOWER(arguments.action), 'create,damimport,massimport') > 0
    AND
    CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/insert'))
  )
  OR
  (
    /* Le droit de multiupdate est lié à l'update */
    LOWER(arguments.action) = 'multiupdate'
    AND
    CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/update'))
  )
)
AND
(
  /* insert/create action */
  (
    NBCOMMONELEMENTS(LOWER(arguments.action), 'create,damimport,massimport,insert') > 0
    AND
    (
        /* User has rights to create this kind of object if he has $anycreation or $newcreation (but not $copycreation) */
        NBCOMMONELEMENTS(surfer.pkgsecurity_v1_objectdata, CONCAT('insert', ':', LOWER(objectname), ':', '$anycreation'), ',') > 0
        OR
        NBCOMMONELEMENTS(surfer.pkgsecurity_v1_objectdata, CONCAT('insert', ':', LOWER(objectname), ':', '$newcreation'), ',') > 0
    )
  )
  OR
  (
    /* multiupdate/datavaluespicker action */
    NBCOMMONELEMENTS(LOWER(arguments.action), 'datavaluespicker,multiupdate,update') > 0
    AND
    /* User has rights to datavaluespicker/multiupdate if he has right to update, but regardless of modifiers */
    NBCOMMONELEMENTS(
      REPLACE(
        surfer.pkgsecurity_v1_objectdata,
        CONCAT('update:', LOWER(objectname), ':'),
        CONCAT('update:', LOWER(objectname), ',::')
      ) /* permet de passer de update:objectname:xx*/,
      CONCAT('update:', LOWER(objectname))
    ) > 0
  )
  OR
  (
    /* other actions */
    NBCOMMONELEMENTS(LOWER(arguments.action), LOWER('broadcastVideo,defineVideoPoster,delete,editPicture,editVideoChapters,editVideoSubtitles,embed,i18nFieldsTranslate,manageVideoCallToActions,manageVideoRolls,order,sliceVideo,shareSocialNetworks,view')) > 0
    AND
    /* User has rights to other actions if he has right to other actions, but regardless of modifiers */
    NBCOMMONELEMENTS(
      REPLACE(
        surfer.pkgsecurity_v1_objectdata,
        CONCAT(LOWER(arguments.action), ':', LOWER(objectname), ':'),
        CONCAT(LOWER(arguments.action), ':', objectname, ',::')
      ),
      CONCAT(LOWER(arguments.action), ':', objectname)
    ) > 0
  )
)

/* Object has appropriate tag */
(
  /* Tous */
  CONFIGHASTAG(objectname, 'pkg/security/secugroup/all')
  OR
  /* Qui ont l'action */
  CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/', LOWER(arguments.action)))
  OR
  (
    /* Les droits de create,damimport,massimport sont liés à l'insert */
    NBCOMMONELEMENTS(LOWER(arguments.action), 'create,damimport,massimport') > 0
    AND
    CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/insert'))
  )
  OR
  (
    /* Le droit de multiupdate est lié à l'update */
    LOWER(arguments.action) = 'multiupdate'
    AND
    CONFIGHASTAG(objectname, CONCAT('pkg/security/secugroup/update'))
  )
)
AND
(
  /* insert/create action */
  (
    NBCOMMONELEMENTS(LOWER(arguments.action), 'create,damimport,massimport,insert') > 0
    AND
    (
        /* User has rights to create this kind of object if he has $anycreation or $newcreation (but not $copycreation) */
        NBCOMMONELEMENTS(surfer.pkgsecurity_v1_objectdata, CONCAT('insert', ':', LOWER(objectname), ':', '$anycreation'), ',') > 0
        OR
        NBCOMMONELEMENTS(surfer.pkgsecurity_v1_objectdata, CONCAT('insert', ':', LOWER(objectname), ':', '$newcreation'), ',') > 0
    )
  )
  OR
  (
    /* multiupdate/datavaluespicker action */
    NBCOMMONELEMENTS(LOWER(arguments.action), 'datavaluespicker,multiupdate,update') > 0
    AND
    /* User has rights to datavaluespicker/multiupdate if he has right to update, but regardless of modifiers */
    NBCOMMONELEMENTS(
      REPLACE(
        surfer.pkgsecurity_v1_objectdata,
        CONCAT('update:', LOWER(objectname), ':'),
        CONCAT('update:', LOWER(objectname), ',::')
      ) /* permet de passer de update:objectname:xx*/,
      CONCAT('update:', LOWER(objectname))
    ) > 0
  )
  OR
  (
    /* other actions */
    NBCOMMONELEMENTS(LOWER(arguments.action), LOWER('broadcastVideo,changestatus,defineVideoPoster,delete,editPicture,editVideoChapters,editVideoSubtitles,embed,i18nFieldsTranslate,manageVideoCallToActions,manageVideoRolls,order,sliceVideo,shareSocialNetworks,view')) > 0
    AND
    /* User has rights to other actions if he has right to other actions, but regardless of modifiers */
    NBCOMMONELEMENTS(
      REPLACE(
        surfer.pkgsecurity_v1_objectdata,
        CONCAT(LOWER(arguments.action), ':', LOWER(objectname), ':'),
        CONCAT(LOWER(arguments.action), ':', objectname, ',::')
      ),
      CONCAT(LOWER(arguments.action), ':', objectname)
    ) > 0
  )
)