Function executeDatabaseFunction

Parse-Dashboard/app.js:585–869

* Execute database function calls

(functionName, args, appContext, operationLog = [], permissions = {})

     * Execute database function calls
     */
    async function executeDatabaseFunction(functionName, args, appContext, operationLog = [], permissions = {}) {
      // Check permissions before executing write operations
      const writeOperations = ['deleteObject', 'deleteClass', 'updateObject', 'createObject', 'createClass'];

      if (writeOperations.includes(functionName)) {
        // Handle both boolean and string values for permissions
        const permissionValue = permissions && permissions[functionName];
        const hasPermission = permissionValue === true || permissionValue === 'true';

        if (!hasPermission) {
          throw new Error(`Permission denied: The "${functionName}" operation is currently disabled in the permissions settings. Please enable this permission in the Parse Dashboard Permissions menu if you want to allow this operation.`);
        }
      }

      // Configure Parse for this app context
      Parse.initialize(appContext.appId, undefined, appContext.masterKey);
      Parse.serverURL = appContext.serverURL;
      Parse.masterKey = appContext.masterKey;

      try {
        switch (functionName) {
          case 'queryClass': {
            const { className, where = {}, limit = 100, skip = 0, order, include = [], select = [] } = args;
            const query = new Parse.Query(className);

            // Apply constraints
            Object.keys(where).forEach(key => {
              const value = where[key];
              if (typeof value === 'object' && value !== null) {
                // Handle complex queries like {$gte: 18}
                Object.keys(value).forEach(op => {
                  switch (op) {
                    case '$gt': query.greaterThan(key, value[op]); break;
                    case '$gte': query.greaterThanOrEqualTo(key, value[op]); break;
                    case '$lt': query.lessThan(key, value[op]); break;
                    case '$lte': query.lessThanOrEqualTo(key, value[op]); break;
                    case '$ne': query.notEqualTo(key, value[op]); break;
                    case '$in': query.containedIn(key, value[op]); break;
                    case '$nin': query.notContainedIn(key, value[op]); break;
                    case '$exists':
                      if (value[op]) {query.exists(key);}
                      else {query.doesNotExist(key);}
                      break;
                    case '$regex': query.matches(key, new RegExp(value[op], value.$options || '')); break;
                  }
                });
              } else {
                query.equalTo(key, value);
              }
            });

            if (limit) {query.limit(Math.min(limit, 1000));}
            if (skip) {query.skip(skip);}
            if (order) {
              if (order.startsWith('-')) {
                query.descending(order.substring(1));
              } else {
                query.ascending(order);