import { SessionUser } from "../../auth/SessionUser";
import { DataverseDto } from "./DataverseRepository";
/**
 * Generic User type with roles
 */
export interface SecuredUser<T extends RoleTypeEnum> extends DataverseDto {
    roles?: SecuredUserRole<T>[];
}
/**
 * Role Type enum constraint
 */
export type RoleTypeEnum = string | number;
/**
 * Generic Role type
 */
export interface SecuredUserRole<T extends RoleTypeEnum> {
    type: T;
}
/**
 * Security Policy type
 */
export type SecurityPolicy<D, U extends SecuredUser<RoleTypeEnum>, R extends RoleTypeEnum> = {
    [K in R | "default"]?: (data: D, user: U, session?: SessionUser) => Promise<boolean>;
};
/**
 * Security Policy interface
 */
export interface SecurityPolicySet<D, U extends SecuredUser<RoleTypeEnum>, R extends RoleTypeEnum> {
    create?: SecurityPolicy<D, U, R>;
    read: SecurityPolicy<D, U, R>;
    update: SecurityPolicy<D, U, R>;
    delete?: SecurityPolicy<D, U, R>;
    fetchAuthenticatedUser: (session: SessionUser) => Promise<U>;
}
export interface SecurityPolicies<D, U extends SecuredUser<RoleTypeEnum>, R extends RoleTypeEnum> {
    [key: string]: SecurityPolicySet<D, U, R>;
}
/**
 * We allow write access for applicants or representatives
 * @param lodgment
 * @param session
 * @returns
 */
export declare function hasAccessByPolicy<D, U extends SecuredUser<RoleTypeEnum>, R extends RoleTypeEnum>(policy: SecurityPolicy<D, U, R>, data: any, fetchAuthenticatedUser: (session: SessionUser) => Promise<U>, session?: SessionUser): Promise<boolean>;