@commercetools-frontend/permissions 22.2.0 → 22.3.0

package/dist/commercetools-frontend-permissions.cjs.dev.js

@@ -53,47 +53,52 @@ var _Object$entries__default = /*#__PURE__*/_interopDefault(_Object$entries);
 var upperFirst__default = /*#__PURE__*/_interopDefault(upperFirst);
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.2.0";
+var version = "22.3.0";
+
+// Permissions
+
+// Action rights
+
+// Data fences
+
+// Potentially a union type.
 
 // Build the permission key from the definition to match it to the format coming from the API.
 const toCanCase = permissionName => "can".concat(permissionName);
-
 const getIsViewPermission = demandedPermission => _startsWithInstanceProperty__default["default"](demandedPermission).call(demandedPermission, 'View');
+const toManageCase = permissionName => permissionName.replace('View', 'Manage');
 
-const toManageCase = permissionName => permissionName.replace('View', 'Manage'); // Check that the user permissions match EXACTLY the required permission.
+// Check that the user permissions match EXACTLY the required permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const hasExactPermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(demandedPermission)];
+const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))];
 
-const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))]; // Check that the user permissions match the required MANAGE permission.
+// Check that the user permissions match the required MANAGE permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const doesManagePermissionInferViewPermission = (demandedPermission, actualPermissions) => {
   const isDemandedPermissionViewPermission = getIsViewPermission(demandedPermission);
   const isViewPermissionInferredByManagePermission = Boolean(getInferredManagePermission(demandedPermission, actualPermissions));
   return isDemandedPermissionViewPermission && isViewPermissionInferredByManagePermission;
-}; // Check if the demanded permissions contain any unnecessary
+};
+
+// Check if the demanded permissions contain any unnecessary
 // implied permissions.
 // E.g. ViewCustomerGroup is implied by ManageCustomerGroup.
-
-
 const getImpliedPermissions = permissions => {
   const viewPermissions = _filterInstanceProperty__default["default"](permissions).call(permissions, permission => _startsWithInstanceProperty__default["default"](permission).call(permission, 'View'));
-
   const impliedPermissions = _filterInstanceProperty__default["default"](viewPermissions).call(viewPermissions, viewPermission => _includesInstanceProperty__default["default"](permissions).call(permissions, toManageCase(viewPermission)));
-
   return impliedPermissions;
-}; // Check the user permissions using one of the defined matchers.
+};
+
+// Check the user permissions using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
@@ -102,27 +107,32 @@ const getImpliedPermissions = permissions => {
 // NOTE: in case the `actualPermissions` are not defined, fall back to an empty object.
 // This might be the case when the permissions for a user/project could not be loaded
 // (e.g. project not found).
+const hasPermission = (demandedPermission, actualPermissions) =>
+// First checking the existence of the exact permission
+hasExactPermission(demandedPermission, actualPermissions || {}) ||
+// Then checking if a view permission is inferred as a manage permission
+doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {});
 
-const hasPermission = (demandedPermission, actualPermissions) => // First checking the existence of the exact permission
-hasExactPermission(demandedPermission, actualPermissions || {}) || // Then checking if a view permission is inferred as a manage permission
-doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {}); // Check the user action rights using one of the defined matchers.
+// Check the user action rights using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedActionRight:
 //     '{ group: 'products', name: 'editPrices' }'
 // - actualActionRights:
 //     { orders: { canEditPrices: false }, products: { canEditPrices: true } }
-
 const hasActionRight = (demandedActionRight, actualActionRights) => {
   const actionRightGroup = actualActionRights && actualActionRights[demandedActionRight.group];
   return Boolean(actionRightGroup && actionRightGroup[toCanCase(demandedActionRight.name)]);
-}; // Check that the user permissions match EVERY one of the required permissions.
+};
+
+// Check that the user permissions match EVERY one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
+const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
 
-const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions)); // Check that the user action rights match EVERY one of the required action rights.
+// Check that the user action rights match EVERY one of the required action rights.
 // The shapes of the arguments are:
 // - demandedActionRights:
 //     [
@@ -131,16 +141,15 @@ const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyIn
 //     ]
 // - actualActionRights:
 //     { products: { canEditPrices: true, canPublishProducts: true } }
+const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty__default["default"](demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights));
 
-const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty__default["default"](demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights)); // Check that the user permissions match SOME one of the required permissions.
+// Check that the user permissions match SOME one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
 const hasSomePermissions = (demandedPermissions, actualPermissions) => _someInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
-
 const getHasDemandedDataFence = options => {
   if (!options.selectDataFenceData) return false;
   const hasDemandedPermission = hasPermission(options.demandedDataFence.name, {
@@ -153,45 +162,38 @@ const getHasDemandedDataFence = options => {
     name: options.demandedDataFence.name,
     actualDataFenceValues: _valuesInstanceProperty__default["default"](options.actualDataFence.dataFenceValue)
   });
-
   if (!selectedDataFenceData) {
     sentry.reportErrorToSentry(new Error("missing mapper for type \"".concat(options.demandedDataFence.type, "\"")), {
       extra: options.demandedDataFence.type
     });
     return false;
-  } // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
-
+  }
 
+  // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
   return _someInstanceProperty__default["default"](selectedDataFenceData).call(selectedDataFenceData, value => {
     var _context;
-
     return _includesInstanceProperty__default["default"](_context = _valuesInstanceProperty__default["default"](options.actualDataFence.dataFenceValue)).call(_context, value);
   });
 };
-
 const getDataFenceByTypeAndGroup = (actualDataFences, demandedDataFenceType, demandedDataFenceGroup) => {
   if (!actualDataFences) return null;
-
   if (demandedDataFenceType in actualDataFences) {
     switch (demandedDataFenceType) {
       case 'store':
         {
           const actualDataFence = actualDataFences[demandedDataFenceType];
-
           if (actualDataFence && demandedDataFenceGroup in actualDataFence) {
             return actualDataFence[demandedDataFenceGroup];
           }
-
           break;
         }
     }
   }
-
   return null;
 };
-
 const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFence) => {
   if (!actualPermissions) return false;
+
   /**
    * NOTE:
    *    A data fence relates, exists in relation to a general permission.
@@ -202,20 +204,16 @@ const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFenc
    *    Given the user _does not_ have manage access on the data fence's group
    *     Then the data fence itself takes precedence
    */
-
   const demandedPermissionByDataFence = "Manage".concat(upperFirst__default["default"](demandedDataFence.group));
   if (hasExactPermission(demandedPermissionByDataFence, actualPermissions)) return true;
   return false;
 };
-
 const hasSomeDataFence = options => {
   var _context2;
-
   // Datafences applied should be combined with an OR, that is why we use
   // `some` and not `every`
   return _someInstanceProperty__default["default"](_context2 = options.demandedDataFences).call(_context2, demandedDataFence => {
     var _context3;
-
     // Given that dataFence structure on `applicationContext`, we get the value by a path
     // e.g given dataFence with { store: { orders: { canManageOrders: { values: } } } }
     // we read the dataFence by the [type] and [group]
@@ -223,26 +221,23 @@ const hasSomeDataFence = options => {
     // with value = there is a dataFence to apply, overrules `hasDemandedProjectPermissions`
     // without value = there is no dataFence to apply, overruled by `hasDemandedProjectPermissions`
     const actualDataFenceByTypeAndGroup = getDataFenceByTypeAndGroup(options.actualDataFences, demandedDataFence.type, demandedDataFence.group);
-    if (!actualDataFenceByTypeAndGroup) return false; // we try to find if the demanded dataFence is available inside the actual datafences
+    if (!actualDataFenceByTypeAndGroup) return false;
 
+    // we try to find if the demanded dataFence is available inside the actual datafences
     const specificActualDataFence = _findInstanceProperty__default["default"](_context3 = _Object$entries__default["default"](actualDataFenceByTypeAndGroup)).call(_context3, _ref => {
       let _ref2 = _slicedToArray(_ref, 2),
-          dataFenceName = _ref2[0],
-          dataFenceValue = _ref2[1];
-
+        dataFenceName = _ref2[0],
+        dataFenceValue = _ref2[1];
       // Either the manage permission matches or the
       // a demanded view permission is implied by a manage permission.
       const doesDataFenceMatchByName = dataFenceName === toCanCase(demandedDataFence.name) || dataFenceName === toCanCase(toManageCase(demandedDataFence.name));
       const doesDataFenceHaveValue = Boolean(dataFenceValue);
       return doesDataFenceMatchByName && doesDataFenceHaveValue;
     });
-
     if (!specificActualDataFence) return false;
-
     const _specificActualDataFe = _slicedToArray(specificActualDataFence, 2),
-          dataFenceName = _specificActualDataFe[0],
-          dataFenceValue = _specificActualDataFe[1];
-
+      dataFenceName = _specificActualDataFe[0],
+      dataFenceValue = _specificActualDataFe[1];
     const actualDataFence = {
       name: dataFenceName,
       // we do the type casting because at this point we are sure that
@@ -259,21 +254,27 @@ const hasSomeDataFence = options => {
   });
 };
 
+// Permissions
+
+// Action rights
+
+// Data fences
+
 // Log a warning only once, and not on each render.
 const useWarning = (condition, message) => {
   react.useEffect(() => {
-    process.env.NODE_ENV !== "production" ? warning__default["default"](condition, message) : void 0; // eslint-disable-next-line react-hooks/exhaustive-deps
+    process.env.NODE_ENV !== "production" ? warning__default["default"](condition, message) : void 0;
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 };
-
 const useIsAuthorized = _ref => {
   let demandedPermissions = _ref.demandedPermissions,
-      demandedActionRights = _ref.demandedActionRights,
-      demandedDataFences = _ref.demandedDataFences,
-      selectDataFenceData = _ref.selectDataFenceData,
-      _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
-      shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
-      projectPermissions = _ref.projectPermissions;
+    demandedActionRights = _ref.demandedActionRights,
+    demandedDataFences = _ref.demandedDataFences,
+    selectDataFenceData = _ref.selectDataFenceData,
+    _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
+    shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
+    projectPermissions = _ref.projectPermissions;
   const impliedPermissions = getImpliedPermissions(demandedPermissions);
   useWarning(!demandedActionRights || demandedActionRights.length === 1, "@commercetools-frontend/permissions: It is recommended to pass a single demanded action right while using the hook, HoC or component multiple times.");
   useWarning(!demandedPermissions || demandedPermissions.length === 1, "@commercetools-frontend/permissions: It is recommended to pass a single demanded permission while using the hook, HoC or component multiple times.");
@@ -281,28 +282,24 @@ const useIsAuthorized = _ref => {
   useWarning(!impliedPermissions || impliedPermissions.length === 0, "@commercetools-frontend/permissions: Demanded permissions contain implied permissions. These are implied: ".concat(impliedPermissions.join(', '), "."));
   const actualPermissions = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$p;
-
     return (_projectPermissions$p = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.permissions) !== null && _projectPermissions$p !== void 0 ? _projectPermissions$p : applicationContext.permissions;
   });
   const actualActionRights = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$a;
-
     return (_projectPermissions$a = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.actionRights) !== null && _projectPermissions$a !== void 0 ? _projectPermissions$a : applicationContext.actionRights;
   });
   const actualDataFences = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$d;
-
     return (_projectPermissions$d = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.dataFences) !== null && _projectPermissions$d !== void 0 ? _projectPermissions$d : applicationContext.dataFences;
-  }); // if the user has no permissions and no dataFences assigned to them, they are not authorized
+  });
 
+  // if the user has no permissions and no dataFences assigned to them, they are not authorized
   if (!actualPermissions && !actualDataFences) return false;
   let hasDemandedDataFences = false;
-
   if (demandedDataFences && demandedDataFences.length > 0) {
     if (!selectDataFenceData) {
       sentry.reportErrorToSentry(new Error("@commercetools-frontend/permissions/Authorized: Missing data fences selector \"selectDataFenceData\"."));
     }
-
     hasDemandedDataFences = hasSomeDataFence({
       actualPermissions,
       demandedDataFences,
@@ -310,7 +307,6 @@ const useIsAuthorized = _ref => {
       selectDataFenceData
     });
   }
-
   const hasDemandedPermissions = shouldMatchSomePermissions ? hasSomePermissions(demandedPermissions, actualPermissions) : hasEveryPermissions(demandedPermissions, actualPermissions);
   const hasDemandedActionRights = hasEveryActionRight(demandedActionRights || [], actualActionRights);
   return hasDemandedDataFences || hasDemandedPermissions && hasDemandedActionRights;
@@ -321,21 +317,17 @@ const getDisplayName = Component => {
   if (typeof Component === 'string') {
     return Component;
   }
-
   if (!Component) {
     return undefined;
   }
-
   return Component.displayName || Component.name || 'Component';
 };
 
 function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys$1(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys$1(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 const defaultProps = {
   shouldMatchSomePermissions: false
 };
-
 const Authorized = props => {
   const isAuthorized = useIsAuthorized({
     demandedPermissions: props.demandedPermissions,
@@ -349,7 +341,6 @@ const Authorized = props => {
     children: props.render(isAuthorized)
   });
 };
-
 Authorized.propTypes = {
   demandedPermissions: _pt__default["default"].arrayOf(_pt__default["default"].string).isRequired,
   demandedActionRights: _pt__default["default"].arrayOf(_pt__default["default"].shape({
@@ -372,7 +363,6 @@ Authorized.propTypes = {
 };
 Authorized.displayName = 'Authorized';
 Authorized.defaultProps = defaultProps;
-
 const injectAuthorized = function (demandedPermissions) {
   let options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
   let propName = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'isAuthorized';
@@ -387,14 +377,18 @@ const injectAuthorized = function (demandedPermissions) {
         [propName]: isAuthorized
       }))
     });
-
     WrappedComponent.displayName = "withUserPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };
 };
 
-const getHasChildren = children => react.Children.count(children) > 0; // Permissions
+const getHasChildren = children => react.Children.count(children) > 0;
+
+// Permissions
+
+// Action rights
 
+// Data fences
 
 const RestrictedByPermissions = props => {
   !!(typeof props.children === 'function' && !isNil__default["default"](props.unauthorizedComponent)) ? process.env.NODE_ENV !== "production" ? invariant__default["default"](false, '@commercetools-frontend/permissions/RestrictedByPermissions: You provided both `children` and `unauthorizedComponent`. Please provide only one of them.') : invariant__default["default"](false) : void 0;
@@ -412,7 +406,6 @@ const RestrictedByPermissions = props => {
       if (typeof props.render === 'function') return props.render({
         isAuthorized
       });
-
       if (isAuthorized) {
         if (props.children && getHasChildren(props.children)) return react.Children.only(props.children);
       } else if (!isAuthorized) {
@@ -420,12 +413,10 @@ const RestrictedByPermissions = props => {
           return /*#__PURE__*/react.createElement(props.unauthorizedComponent);
         }
       }
-
       return null;
     }
   });
 };
-
 RestrictedByPermissions.propTypes = process.env.NODE_ENV !== "production" ? {
   shouldMatchSomePermissions: _pt__default["default"].bool,
   permissions: _pt__default["default"].arrayOf(_pt__default["default"].string).isRequired,
@@ -451,9 +442,7 @@ RestrictedByPermissions.propTypes = process.env.NODE_ENV !== "production" ? {
 RestrictedByPermissions.displayName = 'RestrictedByPermissions';
 
 function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
-
 const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
   let options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
     shouldMatchSomePermissions: false
@@ -469,15 +458,12 @@ const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
         if (isAuthorized) {
           return jsxRuntime.jsx(Component, _objectSpread({}, props));
         }
-
         if (FallbackComponent) {
           return jsxRuntime.jsx(FallbackComponent, {});
         }
-
         return jsxRuntime.jsx(jsxRuntime.Fragment, {});
       }
     });
-
     WrappedComponent.displayName = "branchOnPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };

package/dist/commercetools-frontend-permissions.cjs.prod.js

@@ -52,47 +52,52 @@ var _Object$entries__default = /*#__PURE__*/_interopDefault(_Object$entries);
 var upperFirst__default = /*#__PURE__*/_interopDefault(upperFirst);
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.2.0";
+var version = "22.3.0";
+
+// Permissions
+
+// Action rights
+
+// Data fences
+
+// Potentially a union type.
 
 // Build the permission key from the definition to match it to the format coming from the API.
 const toCanCase = permissionName => "can".concat(permissionName);
-
 const getIsViewPermission = demandedPermission => _startsWithInstanceProperty__default["default"](demandedPermission).call(demandedPermission, 'View');
+const toManageCase = permissionName => permissionName.replace('View', 'Manage');
 
-const toManageCase = permissionName => permissionName.replace('View', 'Manage'); // Check that the user permissions match EXACTLY the required permission.
+// Check that the user permissions match EXACTLY the required permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const hasExactPermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(demandedPermission)];
+const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))];
 
-const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))]; // Check that the user permissions match the required MANAGE permission.
+// Check that the user permissions match the required MANAGE permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const doesManagePermissionInferViewPermission = (demandedPermission, actualPermissions) => {
   const isDemandedPermissionViewPermission = getIsViewPermission(demandedPermission);
   const isViewPermissionInferredByManagePermission = Boolean(getInferredManagePermission(demandedPermission, actualPermissions));
   return isDemandedPermissionViewPermission && isViewPermissionInferredByManagePermission;
-}; // Check if the demanded permissions contain any unnecessary
+};
+
+// Check if the demanded permissions contain any unnecessary
 // implied permissions.
 // E.g. ViewCustomerGroup is implied by ManageCustomerGroup.
-
-
 const getImpliedPermissions = permissions => {
   const viewPermissions = _filterInstanceProperty__default["default"](permissions).call(permissions, permission => _startsWithInstanceProperty__default["default"](permission).call(permission, 'View'));
-
   const impliedPermissions = _filterInstanceProperty__default["default"](viewPermissions).call(viewPermissions, viewPermission => _includesInstanceProperty__default["default"](permissions).call(permissions, toManageCase(viewPermission)));
-
   return impliedPermissions;
-}; // Check the user permissions using one of the defined matchers.
+};
+
+// Check the user permissions using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
@@ -101,27 +106,32 @@ const getImpliedPermissions = permissions => {
 // NOTE: in case the `actualPermissions` are not defined, fall back to an empty object.
 // This might be the case when the permissions for a user/project could not be loaded
 // (e.g. project not found).
+const hasPermission = (demandedPermission, actualPermissions) =>
+// First checking the existence of the exact permission
+hasExactPermission(demandedPermission, actualPermissions || {}) ||
+// Then checking if a view permission is inferred as a manage permission
+doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {});
 
-const hasPermission = (demandedPermission, actualPermissions) => // First checking the existence of the exact permission
-hasExactPermission(demandedPermission, actualPermissions || {}) || // Then checking if a view permission is inferred as a manage permission
-doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {}); // Check the user action rights using one of the defined matchers.
+// Check the user action rights using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedActionRight:
 //     '{ group: 'products', name: 'editPrices' }'
 // - actualActionRights:
 //     { orders: { canEditPrices: false }, products: { canEditPrices: true } }
-
 const hasActionRight = (demandedActionRight, actualActionRights) => {
   const actionRightGroup = actualActionRights && actualActionRights[demandedActionRight.group];
   return Boolean(actionRightGroup && actionRightGroup[toCanCase(demandedActionRight.name)]);
-}; // Check that the user permissions match EVERY one of the required permissions.
+};
+
+// Check that the user permissions match EVERY one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
+const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
 
-const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions)); // Check that the user action rights match EVERY one of the required action rights.
+// Check that the user action rights match EVERY one of the required action rights.
 // The shapes of the arguments are:
 // - demandedActionRights:
 //     [
@@ -130,16 +140,15 @@ const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyIn
 //     ]
 // - actualActionRights:
 //     { products: { canEditPrices: true, canPublishProducts: true } }
+const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty__default["default"](demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights));
 
-const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty__default["default"](demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights)); // Check that the user permissions match SOME one of the required permissions.
+// Check that the user permissions match SOME one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
 const hasSomePermissions = (demandedPermissions, actualPermissions) => _someInstanceProperty__default["default"](demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
-
 const getHasDemandedDataFence = options => {
   if (!options.selectDataFenceData) return false;
   const hasDemandedPermission = hasPermission(options.demandedDataFence.name, {
@@ -152,45 +161,38 @@ const getHasDemandedDataFence = options => {
     name: options.demandedDataFence.name,
     actualDataFenceValues: _valuesInstanceProperty__default["default"](options.actualDataFence.dataFenceValue)
   });
-
   if (!selectedDataFenceData) {
     sentry.reportErrorToSentry(new Error("missing mapper for type \"".concat(options.demandedDataFence.type, "\"")), {
       extra: options.demandedDataFence.type
     });
     return false;
-  } // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
-
+  }
 
+  // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
   return _someInstanceProperty__default["default"](selectedDataFenceData).call(selectedDataFenceData, value => {
     var _context;
-
     return _includesInstanceProperty__default["default"](_context = _valuesInstanceProperty__default["default"](options.actualDataFence.dataFenceValue)).call(_context, value);
   });
 };
-
 const getDataFenceByTypeAndGroup = (actualDataFences, demandedDataFenceType, demandedDataFenceGroup) => {
   if (!actualDataFences) return null;
-
   if (demandedDataFenceType in actualDataFences) {
     switch (demandedDataFenceType) {
       case 'store':
         {
           const actualDataFence = actualDataFences[demandedDataFenceType];
-
           if (actualDataFence && demandedDataFenceGroup in actualDataFence) {
             return actualDataFence[demandedDataFenceGroup];
           }
-
           break;
         }
     }
   }
-
   return null;
 };
-
 const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFence) => {
   if (!actualPermissions) return false;
+
   /**
    * NOTE:
    *    A data fence relates, exists in relation to a general permission.
@@ -201,20 +203,16 @@ const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFenc
    *    Given the user _does not_ have manage access on the data fence's group
    *     Then the data fence itself takes precedence
    */
-
   const demandedPermissionByDataFence = "Manage".concat(upperFirst__default["default"](demandedDataFence.group));
   if (hasExactPermission(demandedPermissionByDataFence, actualPermissions)) return true;
   return false;
 };
-
 const hasSomeDataFence = options => {
   var _context2;
-
   // Datafences applied should be combined with an OR, that is why we use
   // `some` and not `every`
   return _someInstanceProperty__default["default"](_context2 = options.demandedDataFences).call(_context2, demandedDataFence => {
     var _context3;
-
     // Given that dataFence structure on `applicationContext`, we get the value by a path
     // e.g given dataFence with { store: { orders: { canManageOrders: { values: } } } }
     // we read the dataFence by the [type] and [group]
@@ -222,26 +220,23 @@ const hasSomeDataFence = options => {
     // with value = there is a dataFence to apply, overrules `hasDemandedProjectPermissions`
     // without value = there is no dataFence to apply, overruled by `hasDemandedProjectPermissions`
     const actualDataFenceByTypeAndGroup = getDataFenceByTypeAndGroup(options.actualDataFences, demandedDataFence.type, demandedDataFence.group);
-    if (!actualDataFenceByTypeAndGroup) return false; // we try to find if the demanded dataFence is available inside the actual datafences
+    if (!actualDataFenceByTypeAndGroup) return false;
 
+    // we try to find if the demanded dataFence is available inside the actual datafences
     const specificActualDataFence = _findInstanceProperty__default["default"](_context3 = _Object$entries__default["default"](actualDataFenceByTypeAndGroup)).call(_context3, _ref => {
       let _ref2 = _slicedToArray(_ref, 2),
-          dataFenceName = _ref2[0],
-          dataFenceValue = _ref2[1];
-
+        dataFenceName = _ref2[0],
+        dataFenceValue = _ref2[1];
       // Either the manage permission matches or the
       // a demanded view permission is implied by a manage permission.
       const doesDataFenceMatchByName = dataFenceName === toCanCase(demandedDataFence.name) || dataFenceName === toCanCase(toManageCase(demandedDataFence.name));
       const doesDataFenceHaveValue = Boolean(dataFenceValue);
       return doesDataFenceMatchByName && doesDataFenceHaveValue;
     });
-
     if (!specificActualDataFence) return false;
-
     const _specificActualDataFe = _slicedToArray(specificActualDataFence, 2),
-          dataFenceName = _specificActualDataFe[0],
-          dataFenceValue = _specificActualDataFe[1];
-
+      dataFenceName = _specificActualDataFe[0],
+      dataFenceValue = _specificActualDataFe[1];
     const actualDataFence = {
       name: dataFenceName,
       // we do the type casting because at this point we are sure that
@@ -258,20 +253,26 @@ const hasSomeDataFence = options => {
   });
 };
 
+// Permissions
+
+// Action rights
+
+// Data fences
+
 // Log a warning only once, and not on each render.
 const useWarning = (condition, message) => {
   react.useEffect(() => {
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 };
-
 const useIsAuthorized = _ref => {
   let demandedPermissions = _ref.demandedPermissions,
-      demandedActionRights = _ref.demandedActionRights,
-      demandedDataFences = _ref.demandedDataFences,
-      selectDataFenceData = _ref.selectDataFenceData,
-      _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
-      shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
-      projectPermissions = _ref.projectPermissions;
+    demandedActionRights = _ref.demandedActionRights,
+    demandedDataFences = _ref.demandedDataFences,
+    selectDataFenceData = _ref.selectDataFenceData,
+    _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
+    shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
+    projectPermissions = _ref.projectPermissions;
   const impliedPermissions = getImpliedPermissions(demandedPermissions);
   useWarning(!demandedActionRights || demandedActionRights.length === 1);
   useWarning(!demandedPermissions || demandedPermissions.length === 1);
@@ -279,28 +280,24 @@ const useIsAuthorized = _ref => {
   useWarning(!impliedPermissions || impliedPermissions.length === 0, "@commercetools-frontend/permissions: Demanded permissions contain implied permissions. These are implied: ".concat(impliedPermissions.join(', '), "."));
   const actualPermissions = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$p;
-
     return (_projectPermissions$p = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.permissions) !== null && _projectPermissions$p !== void 0 ? _projectPermissions$p : applicationContext.permissions;
   });
   const actualActionRights = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$a;
-
     return (_projectPermissions$a = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.actionRights) !== null && _projectPermissions$a !== void 0 ? _projectPermissions$a : applicationContext.actionRights;
   });
   const actualDataFences = applicationShellConnectors.useApplicationContext(applicationContext => {
     var _projectPermissions$d;
-
     return (_projectPermissions$d = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.dataFences) !== null && _projectPermissions$d !== void 0 ? _projectPermissions$d : applicationContext.dataFences;
-  }); // if the user has no permissions and no dataFences assigned to them, they are not authorized
+  });
 
+  // if the user has no permissions and no dataFences assigned to them, they are not authorized
   if (!actualPermissions && !actualDataFences) return false;
   let hasDemandedDataFences = false;
-
   if (demandedDataFences && demandedDataFences.length > 0) {
     if (!selectDataFenceData) {
       sentry.reportErrorToSentry(new Error("@commercetools-frontend/permissions/Authorized: Missing data fences selector \"selectDataFenceData\"."));
     }
-
     hasDemandedDataFences = hasSomeDataFence({
       actualPermissions,
       demandedDataFences,
@@ -308,7 +305,6 @@ const useIsAuthorized = _ref => {
       selectDataFenceData
     });
   }
-
   const hasDemandedPermissions = shouldMatchSomePermissions ? hasSomePermissions(demandedPermissions, actualPermissions) : hasEveryPermissions(demandedPermissions, actualPermissions);
   const hasDemandedActionRights = hasEveryActionRight(demandedActionRights || [], actualActionRights);
   return hasDemandedDataFences || hasDemandedPermissions && hasDemandedActionRights;
@@ -319,21 +315,17 @@ const getDisplayName = Component => {
   if (typeof Component === 'string') {
     return Component;
   }
-
   if (!Component) {
     return undefined;
   }
-
   return Component.displayName || Component.name || 'Component';
 };
 
 function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys$1(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys$1(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
 const defaultProps = {
   shouldMatchSomePermissions: false
 };
-
 const Authorized = props => {
   const isAuthorized = useIsAuthorized({
     demandedPermissions: props.demandedPermissions,
@@ -347,7 +339,6 @@ const Authorized = props => {
     children: props.render(isAuthorized)
   });
 };
-
 Authorized.propTypes = {
   demandedPermissions: _pt__default["default"].arrayOf(_pt__default["default"].string).isRequired,
   demandedActionRights: _pt__default["default"].arrayOf(_pt__default["default"].shape({
@@ -370,7 +361,6 @@ Authorized.propTypes = {
 };
 Authorized.displayName = 'Authorized';
 Authorized.defaultProps = defaultProps;
-
 const injectAuthorized = function (demandedPermissions) {
   let options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
   let propName = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'isAuthorized';
@@ -385,14 +375,18 @@ const injectAuthorized = function (demandedPermissions) {
         [propName]: isAuthorized
       }))
     });
-
     WrappedComponent.displayName = "withUserPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };
 };
 
-const getHasChildren = children => react.Children.count(children) > 0; // Permissions
+const getHasChildren = children => react.Children.count(children) > 0;
+
+// Permissions
+
+// Action rights
 
+// Data fences
 
 const RestrictedByPermissions = props => {
   !!(typeof props.children === 'function' && !isNil__default["default"](props.unauthorizedComponent)) ? invariant__default["default"](false) : void 0;
@@ -410,7 +404,6 @@ const RestrictedByPermissions = props => {
       if (typeof props.render === 'function') return props.render({
         isAuthorized
       });
-
       if (isAuthorized) {
         if (props.children && getHasChildren(props.children)) return react.Children.only(props.children);
       } else if (!isAuthorized) {
@@ -418,19 +411,15 @@ const RestrictedByPermissions = props => {
           return /*#__PURE__*/react.createElement(props.unauthorizedComponent);
         }
       }
-
       return null;
     }
   });
 };
-
 RestrictedByPermissions.propTypes = {};
 RestrictedByPermissions.displayName = 'RestrictedByPermissions';
 
 function ownKeys(object, enumerableOnly) { var keys = _Object$keys__default["default"](object); if (_Object$getOwnPropertySymbols__default["default"]) { var symbols = _Object$getOwnPropertySymbols__default["default"](object); enumerableOnly && (symbols = _filterInstanceProperty__default["default"](symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor__default["default"](object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](target, _Object$getOwnPropertyDescriptors__default["default"](source)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty__default["default"](target, key, _Object$getOwnPropertyDescriptor__default["default"](source, key)); }); } return target; }
-
 const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
   let options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
     shouldMatchSomePermissions: false
@@ -446,15 +435,12 @@ const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
         if (isAuthorized) {
           return jsxRuntime.jsx(Component, _objectSpread({}, props));
         }
-
         if (FallbackComponent) {
           return jsxRuntime.jsx(FallbackComponent, {});
         }
-
         return jsxRuntime.jsx(jsxRuntime.Fragment, {});
       }
     });
-
     WrappedComponent.displayName = "branchOnPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };

package/dist/commercetools-frontend-permissions.esm.js

@@ -26,47 +26,52 @@ import upperFirst from 'lodash/upperFirst';
 import { jsx, Fragment } from '@emotion/react/jsx-runtime';
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.2.0";
+var version = "22.3.0";
+
+// Permissions
+
+// Action rights
+
+// Data fences
+
+// Potentially a union type.
 
 // Build the permission key from the definition to match it to the format coming from the API.
 const toCanCase = permissionName => "can".concat(permissionName);
-
 const getIsViewPermission = demandedPermission => _startsWithInstanceProperty(demandedPermission).call(demandedPermission, 'View');
+const toManageCase = permissionName => permissionName.replace('View', 'Manage');
 
-const toManageCase = permissionName => permissionName.replace('View', 'Manage'); // Check that the user permissions match EXACTLY the required permission.
+// Check that the user permissions match EXACTLY the required permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const hasExactPermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(demandedPermission)];
+const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))];
 
-const getInferredManagePermission = (demandedPermission, actualPermissions) => actualPermissions[toCanCase(toManageCase(demandedPermission))]; // Check that the user permissions match the required MANAGE permission.
+// Check that the user permissions match the required MANAGE permission.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
-
 const doesManagePermissionInferViewPermission = (demandedPermission, actualPermissions) => {
   const isDemandedPermissionViewPermission = getIsViewPermission(demandedPermission);
   const isViewPermissionInferredByManagePermission = Boolean(getInferredManagePermission(demandedPermission, actualPermissions));
   return isDemandedPermissionViewPermission && isViewPermissionInferredByManagePermission;
-}; // Check if the demanded permissions contain any unnecessary
+};
+
+// Check if the demanded permissions contain any unnecessary
 // implied permissions.
 // E.g. ViewCustomerGroup is implied by ManageCustomerGroup.
-
-
 const getImpliedPermissions = permissions => {
   const viewPermissions = _filterInstanceProperty(permissions).call(permissions, permission => _startsWithInstanceProperty(permission).call(permission, 'View'));
-
   const impliedPermissions = _filterInstanceProperty(viewPermissions).call(viewPermissions, viewPermission => _includesInstanceProperty(permissions).call(permissions, toManageCase(viewPermission)));
-
   return impliedPermissions;
-}; // Check the user permissions using one of the defined matchers.
+};
+
+// Check the user permissions using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedPermission:
 //     'ViewProducts'
@@ -75,27 +80,32 @@ const getImpliedPermissions = permissions => {
 // NOTE: in case the `actualPermissions` are not defined, fall back to an empty object.
 // This might be the case when the permissions for a user/project could not be loaded
 // (e.g. project not found).
+const hasPermission = (demandedPermission, actualPermissions) =>
+// First checking the existence of the exact permission
+hasExactPermission(demandedPermission, actualPermissions || {}) ||
+// Then checking if a view permission is inferred as a manage permission
+doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {});
 
-const hasPermission = (demandedPermission, actualPermissions) => // First checking the existence of the exact permission
-hasExactPermission(demandedPermission, actualPermissions || {}) || // Then checking if a view permission is inferred as a manage permission
-doesManagePermissionInferViewPermission(demandedPermission, actualPermissions || {}); // Check the user action rights using one of the defined matchers.
+// Check the user action rights using one of the defined matchers.
 // The shapes of the arguments are:
 // - demandedActionRight:
 //     '{ group: 'products', name: 'editPrices' }'
 // - actualActionRights:
 //     { orders: { canEditPrices: false }, products: { canEditPrices: true } }
-
 const hasActionRight = (demandedActionRight, actualActionRights) => {
   const actionRightGroup = actualActionRights && actualActionRights[demandedActionRight.group];
   return Boolean(actionRightGroup && actionRightGroup[toCanCase(demandedActionRight.name)]);
-}; // Check that the user permissions match EVERY one of the required permissions.
+};
+
+// Check that the user permissions match EVERY one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
+const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty(demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
 
-const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyInstanceProperty(demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions)); // Check that the user action rights match EVERY one of the required action rights.
+// Check that the user action rights match EVERY one of the required action rights.
 // The shapes of the arguments are:
 // - demandedActionRights:
 //     [
@@ -104,16 +114,15 @@ const hasEveryPermissions = (demandedPermissions, actualPermissions) => _everyIn
 //     ]
 // - actualActionRights:
 //     { products: { canEditPrices: true, canPublishProducts: true } }
+const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty(demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights));
 
-const hasEveryActionRight = (demandedActionRights, actualActionRights) => _everyInstanceProperty(demandedActionRights).call(demandedActionRights, actionRight => hasActionRight(actionRight, actualActionRights)); // Check that the user permissions match SOME one of the required permissions.
+// Check that the user permissions match SOME one of the required permissions.
 // The shapes of the arguments are:
 // - demandedPermissions:
 //     ['ViewProducts', 'ManageOrders']
 // - actualPermissions:
 //     { canViewProducts: true, canManageOrders: false }
-
 const hasSomePermissions = (demandedPermissions, actualPermissions) => _someInstanceProperty(demandedPermissions).call(demandedPermissions, permission => hasPermission(permission, actualPermissions));
-
 const getHasDemandedDataFence = options => {
   if (!options.selectDataFenceData) return false;
   const hasDemandedPermission = hasPermission(options.demandedDataFence.name, {
@@ -126,45 +135,38 @@ const getHasDemandedDataFence = options => {
     name: options.demandedDataFence.name,
     actualDataFenceValues: _valuesInstanceProperty(options.actualDataFence.dataFenceValue)
   });
-
   if (!selectedDataFenceData) {
     reportErrorToSentry(new Error("missing mapper for type \"".concat(options.demandedDataFence.type, "\"")), {
       extra: options.demandedDataFence.type
     });
     return false;
-  } // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
-
+  }
 
+  // it is enough to only have a subset of demanded dataFence data belonging to actual dataFence values
   return _someInstanceProperty(selectedDataFenceData).call(selectedDataFenceData, value => {
     var _context;
-
     return _includesInstanceProperty(_context = _valuesInstanceProperty(options.actualDataFence.dataFenceValue)).call(_context, value);
   });
 };
-
 const getDataFenceByTypeAndGroup = (actualDataFences, demandedDataFenceType, demandedDataFenceGroup) => {
   if (!actualDataFences) return null;
-
   if (demandedDataFenceType in actualDataFences) {
     switch (demandedDataFenceType) {
       case 'store':
         {
           const actualDataFence = actualDataFences[demandedDataFenceType];
-
           if (actualDataFence && demandedDataFenceGroup in actualDataFence) {
             return actualDataFence[demandedDataFenceGroup];
           }
-
           break;
         }
     }
   }
-
   return null;
 };
-
 const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFence) => {
   if (!actualPermissions) return false;
+
   /**
    * NOTE:
    *    A data fence relates, exists in relation to a general permission.
@@ -175,20 +177,16 @@ const getIsPermissionOverwritingDataFence = (actualPermissions, demandedDataFenc
    *    Given the user _does not_ have manage access on the data fence's group
    *     Then the data fence itself takes precedence
    */
-
   const demandedPermissionByDataFence = "Manage".concat(upperFirst(demandedDataFence.group));
   if (hasExactPermission(demandedPermissionByDataFence, actualPermissions)) return true;
   return false;
 };
-
 const hasSomeDataFence = options => {
   var _context2;
-
   // Datafences applied should be combined with an OR, that is why we use
   // `some` and not `every`
   return _someInstanceProperty(_context2 = options.demandedDataFences).call(_context2, demandedDataFence => {
     var _context3;
-
     // Given that dataFence structure on `applicationContext`, we get the value by a path
     // e.g given dataFence with { store: { orders: { canManageOrders: { values: } } } }
     // we read the dataFence by the [type] and [group]
@@ -196,26 +194,23 @@ const hasSomeDataFence = options => {
     // with value = there is a dataFence to apply, overrules `hasDemandedProjectPermissions`
     // without value = there is no dataFence to apply, overruled by `hasDemandedProjectPermissions`
     const actualDataFenceByTypeAndGroup = getDataFenceByTypeAndGroup(options.actualDataFences, demandedDataFence.type, demandedDataFence.group);
-    if (!actualDataFenceByTypeAndGroup) return false; // we try to find if the demanded dataFence is available inside the actual datafences
+    if (!actualDataFenceByTypeAndGroup) return false;
 
+    // we try to find if the demanded dataFence is available inside the actual datafences
     const specificActualDataFence = _findInstanceProperty(_context3 = _Object$entries(actualDataFenceByTypeAndGroup)).call(_context3, _ref => {
       let _ref2 = _slicedToArray(_ref, 2),
-          dataFenceName = _ref2[0],
-          dataFenceValue = _ref2[1];
-
+        dataFenceName = _ref2[0],
+        dataFenceValue = _ref2[1];
       // Either the manage permission matches or the
       // a demanded view permission is implied by a manage permission.
       const doesDataFenceMatchByName = dataFenceName === toCanCase(demandedDataFence.name) || dataFenceName === toCanCase(toManageCase(demandedDataFence.name));
       const doesDataFenceHaveValue = Boolean(dataFenceValue);
       return doesDataFenceMatchByName && doesDataFenceHaveValue;
     });
-
     if (!specificActualDataFence) return false;
-
     const _specificActualDataFe = _slicedToArray(specificActualDataFence, 2),
-          dataFenceName = _specificActualDataFe[0],
-          dataFenceValue = _specificActualDataFe[1];
-
+      dataFenceName = _specificActualDataFe[0],
+      dataFenceValue = _specificActualDataFe[1];
     const actualDataFence = {
       name: dataFenceName,
       // we do the type casting because at this point we are sure that
@@ -232,21 +227,27 @@ const hasSomeDataFence = options => {
   });
 };
 
+// Permissions
+
+// Action rights
+
+// Data fences
+
 // Log a warning only once, and not on each render.
 const useWarning = (condition, message) => {
   useEffect(() => {
-    process.env.NODE_ENV !== "production" ? warning(condition, message) : void 0; // eslint-disable-next-line react-hooks/exhaustive-deps
+    process.env.NODE_ENV !== "production" ? warning(condition, message) : void 0;
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 };
-
 const useIsAuthorized = _ref => {
   let demandedPermissions = _ref.demandedPermissions,
-      demandedActionRights = _ref.demandedActionRights,
-      demandedDataFences = _ref.demandedDataFences,
-      selectDataFenceData = _ref.selectDataFenceData,
-      _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
-      shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
-      projectPermissions = _ref.projectPermissions;
+    demandedActionRights = _ref.demandedActionRights,
+    demandedDataFences = _ref.demandedDataFences,
+    selectDataFenceData = _ref.selectDataFenceData,
+    _ref$shouldMatchSomeP = _ref.shouldMatchSomePermissions,
+    shouldMatchSomePermissions = _ref$shouldMatchSomeP === void 0 ? false : _ref$shouldMatchSomeP,
+    projectPermissions = _ref.projectPermissions;
   const impliedPermissions = getImpliedPermissions(demandedPermissions);
   useWarning(!demandedActionRights || demandedActionRights.length === 1, "@commercetools-frontend/permissions: It is recommended to pass a single demanded action right while using the hook, HoC or component multiple times.");
   useWarning(!demandedPermissions || demandedPermissions.length === 1, "@commercetools-frontend/permissions: It is recommended to pass a single demanded permission while using the hook, HoC or component multiple times.");
@@ -254,28 +255,24 @@ const useIsAuthorized = _ref => {
   useWarning(!impliedPermissions || impliedPermissions.length === 0, "@commercetools-frontend/permissions: Demanded permissions contain implied permissions. These are implied: ".concat(impliedPermissions.join(', '), "."));
   const actualPermissions = useApplicationContext(applicationContext => {
     var _projectPermissions$p;
-
     return (_projectPermissions$p = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.permissions) !== null && _projectPermissions$p !== void 0 ? _projectPermissions$p : applicationContext.permissions;
   });
   const actualActionRights = useApplicationContext(applicationContext => {
     var _projectPermissions$a;
-
     return (_projectPermissions$a = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.actionRights) !== null && _projectPermissions$a !== void 0 ? _projectPermissions$a : applicationContext.actionRights;
   });
   const actualDataFences = useApplicationContext(applicationContext => {
     var _projectPermissions$d;
-
     return (_projectPermissions$d = projectPermissions === null || projectPermissions === void 0 ? void 0 : projectPermissions.dataFences) !== null && _projectPermissions$d !== void 0 ? _projectPermissions$d : applicationContext.dataFences;
-  }); // if the user has no permissions and no dataFences assigned to them, they are not authorized
+  });
 
+  // if the user has no permissions and no dataFences assigned to them, they are not authorized
   if (!actualPermissions && !actualDataFences) return false;
   let hasDemandedDataFences = false;
-
   if (demandedDataFences && demandedDataFences.length > 0) {
     if (!selectDataFenceData) {
       reportErrorToSentry(new Error("@commercetools-frontend/permissions/Authorized: Missing data fences selector \"selectDataFenceData\"."));
     }
-
     hasDemandedDataFences = hasSomeDataFence({
       actualPermissions,
       demandedDataFences,
@@ -283,7 +280,6 @@ const useIsAuthorized = _ref => {
       selectDataFenceData
     });
   }
-
   const hasDemandedPermissions = shouldMatchSomePermissions ? hasSomePermissions(demandedPermissions, actualPermissions) : hasEveryPermissions(demandedPermissions, actualPermissions);
   const hasDemandedActionRights = hasEveryActionRight(demandedActionRights || [], actualActionRights);
   return hasDemandedDataFences || hasDemandedPermissions && hasDemandedActionRights;
@@ -294,21 +290,17 @@ const getDisplayName = Component => {
   if (typeof Component === 'string') {
     return Component;
   }
-
   if (!Component) {
     return undefined;
   }
-
   return Component.displayName || Component.name || 'Component';
 };
 
 function ownKeys$1(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread$1(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys$1(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys$1(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
 const defaultProps = {
   shouldMatchSomePermissions: false
 };
-
 const Authorized = props => {
   const isAuthorized = useIsAuthorized({
     demandedPermissions: props.demandedPermissions,
@@ -322,7 +314,6 @@ const Authorized = props => {
     children: props.render(isAuthorized)
   });
 };
-
 Authorized.propTypes = {
   demandedPermissions: _pt.arrayOf(_pt.string).isRequired,
   demandedActionRights: _pt.arrayOf(_pt.shape({
@@ -345,7 +336,6 @@ Authorized.propTypes = {
 };
 Authorized.displayName = 'Authorized';
 Authorized.defaultProps = defaultProps;
-
 const injectAuthorized = function (demandedPermissions) {
   let options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
   let propName = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'isAuthorized';
@@ -360,14 +350,18 @@ const injectAuthorized = function (demandedPermissions) {
         [propName]: isAuthorized
       }))
     });
-
     WrappedComponent.displayName = "withUserPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };
 };
 
-const getHasChildren = children => Children.count(children) > 0; // Permissions
+const getHasChildren = children => Children.count(children) > 0;
+
+// Permissions
+
+// Action rights
 
+// Data fences
 
 const RestrictedByPermissions = props => {
   !!(typeof props.children === 'function' && !isNil(props.unauthorizedComponent)) ? process.env.NODE_ENV !== "production" ? invariant(false, '@commercetools-frontend/permissions/RestrictedByPermissions: You provided both `children` and `unauthorizedComponent`. Please provide only one of them.') : invariant(false) : void 0;
@@ -385,7 +379,6 @@ const RestrictedByPermissions = props => {
       if (typeof props.render === 'function') return props.render({
         isAuthorized
       });
-
       if (isAuthorized) {
         if (props.children && getHasChildren(props.children)) return Children.only(props.children);
       } else if (!isAuthorized) {
@@ -393,12 +386,10 @@ const RestrictedByPermissions = props => {
           return /*#__PURE__*/createElement(props.unauthorizedComponent);
         }
       }
-
       return null;
     }
   });
 };
-
 RestrictedByPermissions.propTypes = process.env.NODE_ENV !== "production" ? {
   shouldMatchSomePermissions: _pt.bool,
   permissions: _pt.arrayOf(_pt.string).isRequired,
@@ -424,9 +415,7 @@ RestrictedByPermissions.propTypes = process.env.NODE_ENV !== "production" ? {
 RestrictedByPermissions.displayName = 'RestrictedByPermissions';
 
 function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
-
 const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
   let options = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {
     shouldMatchSomePermissions: false
@@ -442,15 +431,12 @@ const branchOnPermissions = function (demandedPermissions, FallbackComponent) {
         if (isAuthorized) {
           return jsx(Component, _objectSpread({}, props));
         }
-
         if (FallbackComponent) {
           return jsx(FallbackComponent, {});
         }
-
         return jsx(Fragment, {});
       }
     });
-
     WrappedComponent.displayName = "branchOnPermissions(".concat(getDisplayName(Component), ")");
     return WrappedComponent;
   };

package/dist/declarations/src/components/authorized/authorized.d.ts

@@ -31,7 +31,7 @@ type Props = {
     children?: never;
 };
 declare const Authorized: {
-    (props: Props): import("@emotion/react/jsx-runtime").JSX.Element;
+    (props: Props): import("@emotion/react/types/jsx-namespace").EmotionJSX.Element;
     displayName: string;
     defaultProps: Pick<Props, "shouldMatchSomePermissions">;
 };

package/dist/declarations/src/components/restricted-by-permissions/restricted-by-permissions.d.ts

@@ -35,7 +35,7 @@ type Props = {
     children?: TRenderProp | ReactNode;
 };
 declare const RestrictedByPermissions: {
-    (props: Props): import("@emotion/react/jsx-runtime").JSX.Element;
+    (props: Props): import("@emotion/react/types/jsx-namespace").EmotionJSX.Element;
     displayName: string;
 };
 export default RestrictedByPermissions;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercetools-frontend/permissions",
-  "version": "22.2.0",
+  "version": "22.3.0",
   "description": "React components to declaratively handle MC permissions",
   "bugs": "https://github.com/commercetools/merchant-center-application-kit/issues",
   "repository": {
@@ -9,20 +9,30 @@
     "directory": "packages/permissions"
   },
   "homepage": "https://docs.commercetools.com/custom-applications/api-reference/commercetools-frontend-permissions",
-  "keywords": ["javascript", "frontend", "react", "toolkit"],
+  "keywords": [
+    "javascript",
+    "frontend",
+    "react",
+    "toolkit"
+  ],
   "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
   "main": "dist/commercetools-frontend-permissions.cjs.js",
   "module": "dist/commercetools-frontend-permissions.esm.js",
-  "files": ["dist", "package.json", "LICENSE", "README.md"],
+  "files": [
+    "dist",
+    "package.json",
+    "LICENSE",
+    "README.md"
+  ],
   "dependencies": {
     "@babel/runtime": "^7.20.13",
     "@babel/runtime-corejs3": "^7.20.13",
-    "@commercetools-frontend/application-shell-connectors": "22.2.0",
-    "@commercetools-frontend/sentry": "22.2.0",
-    "@emotion/react": "11.10.6",
+    "@commercetools-frontend/application-shell-connectors": "22.3.0",
+    "@commercetools-frontend/sentry": "22.3.0",
+    "@emotion/react": "11.11.0",
     "@types/lodash": "^4.14.191",
     "@types/prop-types": "^15.7.5",
     "@types/react": "^17.0.53",
@@ -32,9 +42,13 @@
     "tiny-warning": "1.0.3"
   },
   "devDependencies": {
+    "@types/jest": "^29.5.1",
+    "@types/testing-library__jest-dom": "^5.14.5",
+    "jest": "29.5.0",
+    "jest-mock": "29.5.0",
     "react": "17.0.2"
   },
   "peerDependencies": {
     "react": "17.x"
   }
-}
+}