@contember/schema-definition 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/development/src/acl/builder/FieldPermissionsBuilder.cjs

@@ -0,0 +1,59 @@
+"use strict";
+const schema = require("@contember/schema");
+class FieldPermissionsBuilder {
+  constructor(entityPermissionsBuilder, fields) {
+    this.entityPermissionsBuilder = entityPermissionsBuilder;
+    this.fields = fields;
+  }
+  get builder() {
+    return this.entityPermissionsBuilder.builder;
+  }
+  get schema() {
+    return this.entityPermissionsBuilder.schema;
+  }
+  get permissions() {
+    return this.entityPermissionsBuilder.permissions;
+  }
+  allowCreate(predicate = true) {
+    return this.allow([schema.Acl.Operation.create], predicate);
+  }
+  allowRead(predicate = true) {
+    return this.allow([schema.Acl.Operation.read], predicate);
+  }
+  allowUpdate(predicate = true) {
+    return this.allow([schema.Acl.Operation.update], predicate);
+  }
+  allowAll(predicate = true) {
+    return this.allow([schema.Acl.Operation.create, schema.Acl.Operation.read, schema.Acl.Operation.update], predicate);
+  }
+  allow(operations, predicate = true) {
+    const permissions = {};
+    for (const [entity, field] of this.fields) {
+      if (!permissions[entity.name]) {
+        permissions[entity.name] = { operations: {}, predicates: {} };
+      }
+      const entityOperations = permissions[entity.name].operations;
+      for (const op of operations) {
+        entityOperations[op] = {
+          ...permissions[entity.name].operations[op] || {},
+          [field.name]: predicate
+        };
+      }
+    }
+    return new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields);
+  }
+  onEntity(entitySelector) {
+    return this.entityPermissionsBuilder.onEntity(entitySelector);
+  }
+  onEveryEntity() {
+    return this.entityPermissionsBuilder.onEveryEntity();
+  }
+  onField(fieldSelector) {
+    return this.entityPermissionsBuilder.onField(fieldSelector);
+  }
+  onEveryField() {
+    return this.entityPermissionsBuilder.onEveryField();
+  }
+}
+module.exports = FieldPermissionsBuilder;
+//# sourceMappingURL=FieldPermissionsBuilder.cjs.map

package/dist/development/src/acl/builder/FieldPermissionsBuilder.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldPermissionsBuilder.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldPermissionsBuilder.ts"],"sourcesContent":["import FieldSelector from './FieldSelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport { Acl, Model, Writable } from '@contember/schema'\nimport EntitySelector from './EntitySelector'\nimport { PermissionsBuilder } from './PermissionsBuilder'\n\nexport default class FieldPermissionsBuilder {\n\tpublic constructor(\n\t\tpublic entityPermissionsBuilder: EntityPermissionsBuilder,\n\t\tprivate readonly fields: [Model.Entity, Model.AnyField][],\n\t) {}\n\n\tget builder(): PermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.builder\n\t}\n\n\tget schema(): Model.Schema {\n\t\treturn this.entityPermissionsBuilder.schema\n\t}\n\n\tget permissions(): Acl.Permissions {\n\t\treturn this.entityPermissionsBuilder.permissions\n\t}\n\n\tpublic allowCreate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create], predicate)\n\t}\n\n\tpublic allowRead(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read], predicate)\n\t}\n\n\tpublic allowUpdate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.update], predicate)\n\t}\n\n\tpublic allowAll(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate)\n\t}\n\n\tpublic allow(\n\t\toperations: (Acl.Operation.create | Acl.Operation.read | Acl.Operation.update)[],\n\t\tpredicate: Acl.Predicate = true,\n\t): FieldPermissionsBuilder {\n\t\tconst permissions: Writable<Acl.Permissions> = {}\n\t\tfor (const [entity, field] of this.fields) {\n\t\t\tif (!permissions[entity.name]) {\n\t\t\t\tpermissions[entity.name] = { operations: {}, predicates: {} }\n\t\t\t}\n\t\t\tconst entityOperations: Writable<Acl.EntityOperations> = permissions[entity.name].operations\n\t\t\tfor (const op of operations) {\n\t\t\t\tentityOperations[op] = {\n\t\t\t\t\t...(permissions[entity.name].operations[op] || {}),\n\t\t\t\t\t[field.name]: predicate,\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields)\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEntity(entitySelector)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryEntity()\n\t}\n\n\tpublic onField(fieldSelector: FieldSelector | string | string[]) {\n\t\treturn this.entityPermissionsBuilder.onField(fieldSelector)\n\t}\n\n\tpublic onEveryField(): FieldPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryField()\n\t}\n}\n"],"names":["Acl"],"mappings":";;AAMA,MAAqB,wBAAwB;AAAA,EACrC,YACC,0BACU,QAChB;AAFM,SAAA,2BAAA;AACU,SAAA,SAAA;AAAA,EACf;AAAA,EAEH,IAAI,UAA8B;AACjC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,SAAuB;AAC1B,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,cAA+B;AAClC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,UAAU,YAA2B,MAA+B;AAC1E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,IAAI,GAAG,SAAS;AAAA,EAClD;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,SAAS,YAA2B,MAA+B;AACzE,WAAO,KAAK,MAAM,CAACA,OAAAA,IAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,MAAMA,OAAAA,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EAC9F;AAAA,EAEO,MACN,YACA,YAA2B,MACD;AAC1B,UAAM,cAAyC,CAAA;AAC/C,eAAW,CAAC,QAAQ,KAAK,KAAK,KAAK,QAAQ;AAC1C,UAAI,CAAC,YAAY,OAAO,IAAI,GAAG;AAC9B,oBAAY,OAAO,IAAI,IAAI,EAAE,YAAY,CAAA,GAAI,YAAY,GAAC;AAAA,MAC3D;AACA,YAAM,mBAAmD,YAAY,OAAO,IAAI,EAAE;AAClF,iBAAW,MAAM,YAAY;AAC5B,yBAAiB,EAAE,IAAI;AAAA,UACtB,GAAI,YAAY,OAAO,IAAI,EAAE,WAAW,EAAE,KAAK,CAAA;AAAA,UAC/C,CAAC,MAAM,IAAI,GAAG;AAAA,QAAA;AAAA,MAEhB;AAAA,IACD;AACA,WAAO,IAAI,wBAAwB,KAAK,yBAAyB,IAAI,WAAW,GAAG,KAAK,MAAM;AAAA,EAC/F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,WAAO,KAAK,yBAAyB,SAAS,cAAc;AAAA,EAC7D;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,yBAAyB,cAAA;AAAA,EACtC;AAAA,EAEO,QAAQ,eAAkD;AAChE,WAAO,KAAK,yBAAyB,QAAQ,aAAa;AAAA,EAC3D;AAAA,EAEO,eAAwC;AAC9C,WAAO,KAAK,yBAAyB,aAAA;AAAA,EACtC;AACD;;"}

package/dist/development/src/acl/builder/FieldPermissionsBuilder.js

@@ -0,0 +1,60 @@
+import { Acl } from "@contember/schema";
+class FieldPermissionsBuilder {
+  constructor(entityPermissionsBuilder, fields) {
+    this.entityPermissionsBuilder = entityPermissionsBuilder;
+    this.fields = fields;
+  }
+  get builder() {
+    return this.entityPermissionsBuilder.builder;
+  }
+  get schema() {
+    return this.entityPermissionsBuilder.schema;
+  }
+  get permissions() {
+    return this.entityPermissionsBuilder.permissions;
+  }
+  allowCreate(predicate = true) {
+    return this.allow([Acl.Operation.create], predicate);
+  }
+  allowRead(predicate = true) {
+    return this.allow([Acl.Operation.read], predicate);
+  }
+  allowUpdate(predicate = true) {
+    return this.allow([Acl.Operation.update], predicate);
+  }
+  allowAll(predicate = true) {
+    return this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate);
+  }
+  allow(operations, predicate = true) {
+    const permissions = {};
+    for (const [entity, field] of this.fields) {
+      if (!permissions[entity.name]) {
+        permissions[entity.name] = { operations: {}, predicates: {} };
+      }
+      const entityOperations = permissions[entity.name].operations;
+      for (const op of operations) {
+        entityOperations[op] = {
+          ...permissions[entity.name].operations[op] || {},
+          [field.name]: predicate
+        };
+      }
+    }
+    return new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields);
+  }
+  onEntity(entitySelector) {
+    return this.entityPermissionsBuilder.onEntity(entitySelector);
+  }
+  onEveryEntity() {
+    return this.entityPermissionsBuilder.onEveryEntity();
+  }
+  onField(fieldSelector) {
+    return this.entityPermissionsBuilder.onField(fieldSelector);
+  }
+  onEveryField() {
+    return this.entityPermissionsBuilder.onEveryField();
+  }
+}
+export {
+  FieldPermissionsBuilder as default
+};
+//# sourceMappingURL=FieldPermissionsBuilder.js.map

package/dist/development/src/acl/builder/FieldPermissionsBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldPermissionsBuilder.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldPermissionsBuilder.ts"],"sourcesContent":["import FieldSelector from './FieldSelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport { Acl, Model, Writable } from '@contember/schema'\nimport EntitySelector from './EntitySelector'\nimport { PermissionsBuilder } from './PermissionsBuilder'\n\nexport default class FieldPermissionsBuilder {\n\tpublic constructor(\n\t\tpublic entityPermissionsBuilder: EntityPermissionsBuilder,\n\t\tprivate readonly fields: [Model.Entity, Model.AnyField][],\n\t) {}\n\n\tget builder(): PermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.builder\n\t}\n\n\tget schema(): Model.Schema {\n\t\treturn this.entityPermissionsBuilder.schema\n\t}\n\n\tget permissions(): Acl.Permissions {\n\t\treturn this.entityPermissionsBuilder.permissions\n\t}\n\n\tpublic allowCreate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create], predicate)\n\t}\n\n\tpublic allowRead(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read], predicate)\n\t}\n\n\tpublic allowUpdate(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.update], predicate)\n\t}\n\n\tpublic allowAll(predicate: Acl.Predicate = true): FieldPermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.create, Acl.Operation.read, Acl.Operation.update], predicate)\n\t}\n\n\tpublic allow(\n\t\toperations: (Acl.Operation.create | Acl.Operation.read | Acl.Operation.update)[],\n\t\tpredicate: Acl.Predicate = true,\n\t): FieldPermissionsBuilder {\n\t\tconst permissions: Writable<Acl.Permissions> = {}\n\t\tfor (const [entity, field] of this.fields) {\n\t\t\tif (!permissions[entity.name]) {\n\t\t\t\tpermissions[entity.name] = { operations: {}, predicates: {} }\n\t\t\t}\n\t\t\tconst entityOperations: Writable<Acl.EntityOperations> = permissions[entity.name].operations\n\t\t\tfor (const op of operations) {\n\t\t\t\tentityOperations[op] = {\n\t\t\t\t\t...(permissions[entity.name].operations[op] || {}),\n\t\t\t\t\t[field.name]: predicate,\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn new FieldPermissionsBuilder(this.entityPermissionsBuilder.add(permissions), this.fields)\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEntity(entitySelector)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryEntity()\n\t}\n\n\tpublic onField(fieldSelector: FieldSelector | string | string[]) {\n\t\treturn this.entityPermissionsBuilder.onField(fieldSelector)\n\t}\n\n\tpublic onEveryField(): FieldPermissionsBuilder {\n\t\treturn this.entityPermissionsBuilder.onEveryField()\n\t}\n}\n"],"names":[],"mappings":";AAMA,MAAqB,wBAAwB;AAAA,EACrC,YACC,0BACU,QAChB;AAFM,SAAA,2BAAA;AACU,SAAA,SAAA;AAAA,EACf;AAAA,EAEH,IAAI,UAA8B;AACjC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,SAAuB;AAC1B,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEA,IAAI,cAA+B;AAClC,WAAO,KAAK,yBAAyB;AAAA,EACtC;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,UAAU,YAA2B,MAA+B;AAC1E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,IAAI,GAAG,SAAS;AAAA,EAClD;AAAA,EAEO,YAAY,YAA2B,MAA+B;AAC5E,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EACpD;AAAA,EAEO,SAAS,YAA2B,MAA+B;AACzE,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,IAAI,UAAU,MAAM,GAAG,SAAS;AAAA,EAC9F;AAAA,EAEO,MACN,YACA,YAA2B,MACD;AAC1B,UAAM,cAAyC,CAAA;AAC/C,eAAW,CAAC,QAAQ,KAAK,KAAK,KAAK,QAAQ;AAC1C,UAAI,CAAC,YAAY,OAAO,IAAI,GAAG;AAC9B,oBAAY,OAAO,IAAI,IAAI,EAAE,YAAY,CAAA,GAAI,YAAY,GAAC;AAAA,MAC3D;AACA,YAAM,mBAAmD,YAAY,OAAO,IAAI,EAAE;AAClF,iBAAW,MAAM,YAAY;AAC5B,yBAAiB,EAAE,IAAI;AAAA,UACtB,GAAI,YAAY,OAAO,IAAI,EAAE,WAAW,EAAE,KAAK,CAAA;AAAA,UAC/C,CAAC,MAAM,IAAI,GAAG;AAAA,QAAA;AAAA,MAEhB;AAAA,IACD;AACA,WAAO,IAAI,wBAAwB,KAAK,yBAAyB,IAAI,WAAW,GAAG,KAAK,MAAM;AAAA,EAC/F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,WAAO,KAAK,yBAAyB,SAAS,cAAc;AAAA,EAC7D;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,yBAAyB,cAAA;AAAA,EACtC;AAAA,EAEO,QAAQ,eAAkD;AAChE,WAAO,KAAK,yBAAyB,QAAQ,aAAa;AAAA,EAC3D;AAAA,EAEO,eAAwC;AAC9C,WAAO,KAAK,yBAAyB,aAAA;AAAA,EACtC;AACD;"}

package/dist/development/src/acl/builder/FieldSelector.cjs

@@ -0,0 +1,26 @@
+"use strict";
+class FieldSelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new FieldSelector([]);
+  }
+  static named(...name) {
+    return FieldSelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity, field) => name.includes(field.name));
+  }
+  except(...name) {
+    return this.matching((schema, entity, field) => !name.includes(field.name));
+  }
+  matching(matcher) {
+    return new FieldSelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity, field) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity, field), true);
+  }
+}
+module.exports = FieldSelector;
+//# sourceMappingURL=FieldSelector.cjs.map

package/dist/development/src/acl/builder/FieldSelector.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldSelector.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldSelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity, field: Model.AnyField) => boolean\n\nexport default class FieldSelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new FieldSelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn FieldSelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => name.includes(field.name))\n\t}\n\n\tpublic except(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => !name.includes(field.name))\n\t}\n\n\tpublic matching(matcher: Matcher): FieldSelector {\n\t\treturn new FieldSelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity, field: Model.AnyField): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity, field), true)\n\t}\n}\n"],"names":[],"mappings":";AAIA,MAAqB,cAAc;AAAA,EAC1B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,cAAc,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,cAAc,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC1E;AAAA,EAEO,UAAU,MAAgB;AAChC,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,CAAC,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC3E;AAAA,EAEO,SAAS,SAAiC;AAChD,WAAO,IAAI,cAAc,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACrD;AAAA,EAEO,QAAQ,QAAsB,QAAsB,OAAgC;AAC1F,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,QAAQ,KAAK,GAAG,IAAI;AAAA,EACzG;AACD;;"}

package/dist/development/src/acl/builder/FieldSelector.js

@@ -0,0 +1,27 @@
+class FieldSelector {
+  constructor(matchers) {
+    this.matchers = matchers;
+  }
+  static every() {
+    return new FieldSelector([]);
+  }
+  static named(...name) {
+    return FieldSelector.every().named(...name);
+  }
+  named(...name) {
+    return this.matching((schema, entity, field) => name.includes(field.name));
+  }
+  except(...name) {
+    return this.matching((schema, entity, field) => !name.includes(field.name));
+  }
+  matching(matcher) {
+    return new FieldSelector([...this.matchers, matcher]);
+  }
+  matches(schema, entity, field) {
+    return this.matchers.reduce((prev, predicate) => prev && predicate(schema, entity, field), true);
+  }
+}
+export {
+  FieldSelector as default
+};
+//# sourceMappingURL=FieldSelector.js.map

package/dist/development/src/acl/builder/FieldSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FieldSelector.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/FieldSelector.ts"],"sourcesContent":["import { Model } from '@contember/schema'\n\ntype Matcher = (schema: Model.Schema, entity: Model.Entity, field: Model.AnyField) => boolean\n\nexport default class FieldSelector {\n\tprivate constructor(private readonly matchers: Matcher[]) {}\n\n\tpublic static every() {\n\t\treturn new FieldSelector([])\n\t}\n\n\tpublic static named(...name: string[]) {\n\t\treturn FieldSelector.every().named(...name)\n\t}\n\n\tpublic named(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => name.includes(field.name))\n\t}\n\n\tpublic except(...name: string[]) {\n\t\treturn this.matching((schema, entity, field) => !name.includes(field.name))\n\t}\n\n\tpublic matching(matcher: Matcher): FieldSelector {\n\t\treturn new FieldSelector([...this.matchers, matcher])\n\t}\n\n\tpublic matches(schema: Model.Schema, entity: Model.Entity, field: Model.AnyField): boolean {\n\t\treturn this.matchers.reduce<boolean>((prev, predicate) => prev && predicate(schema, entity, field), true)\n\t}\n}\n"],"names":[],"mappings":"AAIA,MAAqB,cAAc;AAAA,EAC1B,YAA6B,UAAqB;AAArB,SAAA,WAAA;AAAA,EAAsB;AAAA,EAE3D,OAAc,QAAQ;AACrB,WAAO,IAAI,cAAc,EAAE;AAAA,EAC5B;AAAA,EAEA,OAAc,SAAS,MAAgB;AACtC,WAAO,cAAc,MAAA,EAAQ,MAAM,GAAG,IAAI;AAAA,EAC3C;AAAA,EAEO,SAAS,MAAgB;AAC/B,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC1E;AAAA,EAEO,UAAU,MAAgB;AAChC,WAAO,KAAK,SAAS,CAAC,QAAQ,QAAQ,UAAU,CAAC,KAAK,SAAS,MAAM,IAAI,CAAC;AAAA,EAC3E;AAAA,EAEO,SAAS,SAAiC;AAChD,WAAO,IAAI,cAAc,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,EACrD;AAAA,EAEO,QAAQ,QAAsB,QAAsB,OAAgC;AAC1F,WAAO,KAAK,SAAS,OAAgB,CAAC,MAAM,cAAc,QAAQ,UAAU,QAAQ,QAAQ,KAAK,GAAG,IAAI;AAAA,EACzG;AACD;"}

package/dist/development/src/acl/builder/PermissionOverrider.cjs

@@ -0,0 +1,37 @@
+"use strict";
+const tuple = require("../../utils/tuple.cjs");
+require("reflect-metadata");
+class PermissionOverrider {
+  override(original, overrides) {
+    return Object.entries({ ...overrides, ...original }).map(([key, value]) => {
+      if (overrides[key]) {
+        return tuple.tuple(key, this.overrideEntityPermissions(value, overrides[key]));
+      }
+      return tuple.tuple(key, value);
+    }).reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {});
+  }
+  overrideEntityPermissions(original, overrides) {
+    return {
+      predicates: { ...original.predicates, ...overrides.predicates },
+      operations: {
+        create: { ...original.operations.create || {}, ...overrides.operations.create || {} },
+        read: { ...original.operations.read || {}, ...overrides.operations.read || {} },
+        update: { ...original.operations.update || {}, ...overrides.operations.update || {} },
+        ...original.operations.delete === void 0 && overrides.operations.delete === void 0 ? {} : {
+          delete: overrides.operations.delete ?? original.operations.delete
+        },
+        ...original.operations.customPrimary === void 0 && overrides.operations.customPrimary === void 0 ? {} : {
+          customPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary
+        },
+        ...original.operations.noRoot || overrides.operations.noRoot ? {
+          noRoot: [
+            ...original.operations.noRoot || [],
+            ...overrides.operations.noRoot || []
+          ]
+        } : {}
+      }
+    };
+  }
+}
+module.exports = PermissionOverrider;
+//# sourceMappingURL=PermissionOverrider.cjs.map

package/dist/development/src/acl/builder/PermissionOverrider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionOverrider.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionOverrider.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\nimport { tuple } from '../../utils'\n\nexport default class PermissionOverrider {\n\tpublic override(original: Acl.Permissions, overrides: Acl.Permissions): Acl.Permissions {\n\t\treturn Object.entries({ ...overrides, ...original })\n\t\t\t.map(([key, value]) => {\n\t\t\t\tif (overrides[key]) {\n\t\t\t\t\treturn tuple(key, this.overrideEntityPermissions(value, overrides[key]))\n\t\t\t\t}\n\t\t\t\treturn tuple(key, value)\n\t\t\t})\n\t\t\t.reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {})\n\t}\n\n\tprivate overrideEntityPermissions(\n\t\toriginal: Acl.EntityPermissions,\n\t\toverrides: Acl.EntityPermissions,\n\t): Acl.EntityPermissions {\n\t\treturn {\n\t\t\tpredicates: { ...original.predicates, ...overrides.predicates },\n\t\t\toperations: {\n\t\t\t\tcreate: { ...(original.operations.create || {}), ...(overrides.operations.create || {}) },\n\t\t\t\tread: { ...(original.operations.read || {}), ...(overrides.operations.read || {}) },\n\t\t\t\tupdate: { ...(original.operations.update || {}), ...(overrides.operations.update || {}) },\n\t\t\t\t...(original.operations.delete === undefined && overrides.operations.delete === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tdelete: overrides.operations.delete ?? original.operations.delete,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.customPrimary === undefined && overrides.operations.customPrimary === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tcustomPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.noRoot || overrides.operations.noRoot\n\t\t\t\t\t? {\n\t\t\t\t\t\tnoRoot: [\n\t\t\t\t\t\t\t...(original.operations.noRoot || []),\n\t\t\t\t\t\t\t...(overrides.operations.noRoot || []),\n\t\t\t\t\t\t],\n\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["tuple"],"mappings":";;;AAGA,MAAqB,oBAAoB;AAAA,EACjC,SAAS,UAA2B,WAA6C;AACvF,WAAO,OAAO,QAAQ,EAAE,GAAG,WAAW,GAAG,UAAU,EACjD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACtB,UAAI,UAAU,GAAG,GAAG;AACnB,eAAOA,MAAAA,MAAM,KAAK,KAAK,0BAA0B,OAAO,UAAU,GAAG,CAAC,CAAC;AAAA,MACxE;AACA,aAAOA,MAAAA,MAAM,KAAK,KAAK;AAAA,IACxB,CAAC,EACA,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,MAAA,IAAU,CAAA,CAAE;AAAA,EAC/D;AAAA,EAEQ,0BACP,UACA,WACwB;AACxB,WAAO;AAAA,MACN,YAAY,EAAE,GAAG,SAAS,YAAY,GAAG,UAAU,WAAA;AAAA,MACnD,YAAY;AAAA,QACX,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,MAAM,EAAE,GAAI,SAAS,WAAW,QAAQ,IAAK,GAAI,UAAU,WAAW,QAAQ,GAAC;AAAA,QAC/E,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,GAAI,SAAS,WAAW,WAAW,UAAa,UAAU,WAAW,WAAW,SAC7E,KACA;AAAA,UACD,QAAQ,UAAU,WAAW,UAAU,SAAS,WAAW;AAAA,QAAA;AAAA,QAE7D,GAAI,SAAS,WAAW,kBAAkB,UAAa,UAAU,WAAW,kBAAkB,SAC3F,KACA;AAAA,UACD,eAAe,UAAU,WAAW,iBAAiB,SAAS,WAAW;AAAA,QAAA;AAAA,QAE3E,GAAI,SAAS,WAAW,UAAU,UAAU,WAAW,SACpD;AAAA,UACD,QAAQ;AAAA,YACP,GAAI,SAAS,WAAW,UAAU,CAAA;AAAA,YAClC,GAAI,UAAU,WAAW,UAAU,CAAA;AAAA,UAAC;AAAA,QACrC,IAEC,CAAA;AAAA,MAAC;AAAA,IACL;AAAA,EAEF;AACD;;"}

package/dist/development/src/acl/builder/PermissionOverrider.js

@@ -0,0 +1,38 @@
+import { tuple } from "../../utils/tuple.js";
+import "reflect-metadata";
+class PermissionOverrider {
+  override(original, overrides) {
+    return Object.entries({ ...overrides, ...original }).map(([key, value]) => {
+      if (overrides[key]) {
+        return tuple(key, this.overrideEntityPermissions(value, overrides[key]));
+      }
+      return tuple(key, value);
+    }).reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {});
+  }
+  overrideEntityPermissions(original, overrides) {
+    return {
+      predicates: { ...original.predicates, ...overrides.predicates },
+      operations: {
+        create: { ...original.operations.create || {}, ...overrides.operations.create || {} },
+        read: { ...original.operations.read || {}, ...overrides.operations.read || {} },
+        update: { ...original.operations.update || {}, ...overrides.operations.update || {} },
+        ...original.operations.delete === void 0 && overrides.operations.delete === void 0 ? {} : {
+          delete: overrides.operations.delete ?? original.operations.delete
+        },
+        ...original.operations.customPrimary === void 0 && overrides.operations.customPrimary === void 0 ? {} : {
+          customPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary
+        },
+        ...original.operations.noRoot || overrides.operations.noRoot ? {
+          noRoot: [
+            ...original.operations.noRoot || [],
+            ...overrides.operations.noRoot || []
+          ]
+        } : {}
+      }
+    };
+  }
+}
+export {
+  PermissionOverrider as default
+};
+//# sourceMappingURL=PermissionOverrider.js.map

package/dist/development/src/acl/builder/PermissionOverrider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionOverrider.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionOverrider.ts"],"sourcesContent":["import { Acl } from '@contember/schema'\nimport { tuple } from '../../utils'\n\nexport default class PermissionOverrider {\n\tpublic override(original: Acl.Permissions, overrides: Acl.Permissions): Acl.Permissions {\n\t\treturn Object.entries({ ...overrides, ...original })\n\t\t\t.map(([key, value]) => {\n\t\t\t\tif (overrides[key]) {\n\t\t\t\t\treturn tuple(key, this.overrideEntityPermissions(value, overrides[key]))\n\t\t\t\t}\n\t\t\t\treturn tuple(key, value)\n\t\t\t})\n\t\t\t.reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {})\n\t}\n\n\tprivate overrideEntityPermissions(\n\t\toriginal: Acl.EntityPermissions,\n\t\toverrides: Acl.EntityPermissions,\n\t): Acl.EntityPermissions {\n\t\treturn {\n\t\t\tpredicates: { ...original.predicates, ...overrides.predicates },\n\t\t\toperations: {\n\t\t\t\tcreate: { ...(original.operations.create || {}), ...(overrides.operations.create || {}) },\n\t\t\t\tread: { ...(original.operations.read || {}), ...(overrides.operations.read || {}) },\n\t\t\t\tupdate: { ...(original.operations.update || {}), ...(overrides.operations.update || {}) },\n\t\t\t\t...(original.operations.delete === undefined && overrides.operations.delete === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tdelete: overrides.operations.delete ?? original.operations.delete,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.customPrimary === undefined && overrides.operations.customPrimary === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\tcustomPrimary: overrides.operations.customPrimary ?? original.operations.customPrimary,\n\t\t\t\t\t}),\n\t\t\t\t...(original.operations.noRoot || overrides.operations.noRoot\n\t\t\t\t\t? {\n\t\t\t\t\t\tnoRoot: [\n\t\t\t\t\t\t\t...(original.operations.noRoot || []),\n\t\t\t\t\t\t\t...(overrides.operations.noRoot || []),\n\t\t\t\t\t\t],\n\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGA,MAAqB,oBAAoB;AAAA,EACjC,SAAS,UAA2B,WAA6C;AACvF,WAAO,OAAO,QAAQ,EAAE,GAAG,WAAW,GAAG,UAAU,EACjD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACtB,UAAI,UAAU,GAAG,GAAG;AACnB,eAAO,MAAM,KAAK,KAAK,0BAA0B,OAAO,UAAU,GAAG,CAAC,CAAC;AAAA,MACxE;AACA,aAAO,MAAM,KAAK,KAAK;AAAA,IACxB,CAAC,EACA,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,MAAA,IAAU,CAAA,CAAE;AAAA,EAC/D;AAAA,EAEQ,0BACP,UACA,WACwB;AACxB,WAAO;AAAA,MACN,YAAY,EAAE,GAAG,SAAS,YAAY,GAAG,UAAU,WAAA;AAAA,MACnD,YAAY;AAAA,QACX,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,MAAM,EAAE,GAAI,SAAS,WAAW,QAAQ,IAAK,GAAI,UAAU,WAAW,QAAQ,GAAC;AAAA,QAC/E,QAAQ,EAAE,GAAI,SAAS,WAAW,UAAU,IAAK,GAAI,UAAU,WAAW,UAAU,GAAC;AAAA,QACrF,GAAI,SAAS,WAAW,WAAW,UAAa,UAAU,WAAW,WAAW,SAC7E,KACA;AAAA,UACD,QAAQ,UAAU,WAAW,UAAU,SAAS,WAAW;AAAA,QAAA;AAAA,QAE7D,GAAI,SAAS,WAAW,kBAAkB,UAAa,UAAU,WAAW,kBAAkB,SAC3F,KACA;AAAA,UACD,eAAe,UAAU,WAAW,iBAAiB,SAAS,WAAW;AAAA,QAAA;AAAA,QAE3E,GAAI,SAAS,WAAW,UAAU,UAAU,WAAW,SACpD;AAAA,UACD,QAAQ;AAAA,YACP,GAAI,SAAS,WAAW,UAAU,CAAA;AAAA,YAClC,GAAI,UAAU,WAAW,UAAU,CAAA;AAAA,UAAC;AAAA,QACrC,IAEC,CAAA;AAAA,MAAC;AAAA,IACL;AAAA,EAEF;AACD;"}

package/dist/development/src/acl/builder/PermissionsBuilder.cjs

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schema = require("@contember/schema");
+const schemaUtils = require("@contember/schema-utils");
+const PermissionOverrider = require("./PermissionOverrider.cjs");
+const EntitySelector = require("./EntitySelector.cjs");
+const EntityPermissionsBuilder = require("./EntityPermissionsBuilder.cjs");
+const FieldSelector = require("./FieldSelector.cjs");
+const PredicateReference = require("./PredicateReference.cjs");
+class PermissionsBuilder {
+  constructor(schema2, permissions) {
+    this.schema = schema2;
+    this.permissions = permissions;
+  }
+  static create(model) {
+    return new PermissionsBuilder(model, {});
+  }
+  allowAll() {
+    return this.allow([schema.Acl.Operation.read, schema.Acl.Operation.update, schema.Acl.Operation.delete, schema.Acl.Operation.create]);
+  }
+  allow(operations) {
+    const allowAllFactory = new schemaUtils.AllowAllPermissionFactory(operations);
+    return this.add(allowAllFactory.create(this.schema));
+  }
+  allowCustomPrimary() {
+    return this.onEveryEntity().allowCustomPrimary().builder;
+  }
+  add(permissions) {
+    const overrider = new PermissionOverrider();
+    return new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions));
+  }
+  onEntity(entitySelector) {
+    if (typeof entitySelector === "string") {
+      entitySelector = EntitySelector.named(entitySelector);
+    } else if (Array.isArray(entitySelector)) {
+      entitySelector = EntitySelector.named(...entitySelector);
+    }
+    const entitySelectorWithType = entitySelector;
+    const entities = Object.values(this.schema.entities).filter((entity) => entitySelectorWithType.matches(this.schema, entity));
+    return new EntityPermissionsBuilder(this, entities);
+  }
+  onEveryEntity() {
+    return this.onEntity(EntitySelector.every());
+  }
+}
+((PermissionsBuilder2) => {
+  PermissionsBuilder2.everyEntity = () => {
+    return EntitySelector.every();
+  };
+  PermissionsBuilder2.everyField = () => {
+    return FieldSelector.every();
+  };
+  PermissionsBuilder2.predicateReference = (name) => new PredicateReference.default(name);
+})(PermissionsBuilder || (PermissionsBuilder = {}));
+exports.PermissionsBuilder = PermissionsBuilder;
+//# sourceMappingURL=PermissionsBuilder.cjs.map

package/dist/development/src/acl/builder/PermissionsBuilder.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsBuilder.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionsBuilder.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { AllowAllPermissionFactory } from '@contember/schema-utils'\nimport PermissionOverrider from './PermissionOverrider'\nimport EntitySelector from './EntitySelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport FieldSelector from './FieldSelector'\nimport Reference from './PredicateReference'\n\nclass PermissionsBuilder {\n\tconstructor(public readonly schema: Model.Schema, public readonly permissions: Acl.Permissions) {}\n\n\tpublic static create(model: Model.Schema): PermissionsBuilder {\n\t\treturn new PermissionsBuilder(model, {})\n\t}\n\n\tpublic allowAll(): PermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read, Acl.Operation.update, Acl.Operation.delete, Acl.Operation.create])\n\t}\n\n\tpublic allow(operations: Acl.Operation[]): PermissionsBuilder {\n\t\tconst allowAllFactory = new AllowAllPermissionFactory(operations)\n\t\treturn this.add(allowAllFactory.create(this.schema))\n\t}\n\n\tpublic allowCustomPrimary(): PermissionsBuilder {\n\t\treturn this.onEveryEntity().allowCustomPrimary().builder\n\t}\n\n\tpublic add(permissions: Acl.Permissions): PermissionsBuilder {\n\t\tconst overrider = new PermissionOverrider()\n\t\treturn new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions))\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\tif (typeof entitySelector === 'string') {\n\t\t\tentitySelector = EntitySelector.named(entitySelector)\n\t\t} else if (Array.isArray(entitySelector)) {\n\t\t\tentitySelector = EntitySelector.named(...entitySelector)\n\t\t}\n\t\tconst entitySelectorWithType = entitySelector\n\t\tconst entities = Object.values(this.schema.entities).filter(entity => entitySelectorWithType.matches(this.schema, entity))\n\t\treturn new EntityPermissionsBuilder(this, entities)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.onEntity(EntitySelector.every())\n\t}\n}\n\nnamespace PermissionsBuilder {\n\texport const everyEntity = () => {\n\t\treturn EntitySelector.every()\n\t}\n\texport const everyField = () => {\n\t\treturn FieldSelector.every()\n\t}\n\texport const predicateReference = (name: Acl.PredicateReference) => new Reference(name)\n}\nexport { PermissionsBuilder }\n"],"names":["schema","Acl","AllowAllPermissionFactory","PermissionsBuilder","Reference"],"mappings":";;;;;;;;;AAQA,MAAM,mBAAmB;AAAA,EACxB,YAA4BA,SAAsC,aAA8B;AAApE,SAAA,SAAAA;AAAsC,SAAA,cAAA;AAAA,EAA+B;AAAA,EAEjG,OAAc,OAAO,OAAyC;AAC7D,WAAO,IAAI,mBAAmB,OAAO,EAAE;AAAA,EACxC;AAAA,EAEO,WAA+B;AACrC,WAAO,KAAK,MAAM,CAACC,OAAAA,IAAI,UAAU,MAAMA,WAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,QAAQA,OAAAA,IAAI,UAAU,MAAM,CAAC;AAAA,EACzG;AAAA,EAEO,MAAM,YAAiD;AAC7D,UAAM,kBAAkB,IAAIC,YAAAA,0BAA0B,UAAU;AAChE,WAAO,KAAK,IAAI,gBAAgB,OAAO,KAAK,MAAM,CAAC;AAAA,EACpD;AAAA,EAEO,qBAAyC;AAC/C,WAAO,KAAK,gBAAgB,mBAAA,EAAqB;AAAA,EAClD;AAAA,EAEO,IAAI,aAAkD;AAC5D,UAAM,YAAY,IAAI,oBAAA;AACtB,WAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU,SAAS,KAAK,aAAa,WAAW,CAAC;AAAA,EAC7F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,QAAI,OAAO,mBAAmB,UAAU;AACvC,uBAAiB,eAAe,MAAM,cAAc;AAAA,IACrD,WAAW,MAAM,QAAQ,cAAc,GAAG;AACzC,uBAAiB,eAAe,MAAM,GAAG,cAAc;AAAA,IACxD;AACA,UAAM,yBAAyB;AAC/B,UAAM,WAAW,OAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,OAAO,CAAA,WAAU,uBAAuB,QAAQ,KAAK,QAAQ,MAAM,CAAC;AACzH,WAAO,IAAI,yBAAyB,MAAM,QAAQ;AAAA,EACnD;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,SAAS,eAAe,MAAA,CAAO;AAAA,EAC5C;AACD;AAAA,CAEA,CAAUC,wBAAV;AACcA,sBAAA,cAAc,MAAM;AAChC,WAAO,eAAe,MAAA;AAAA,EACvB;AACaA,sBAAA,aAAa,MAAM;AAC/B,WAAO,cAAc,MAAA;AAAA,EACtB;AACaA,sBAAA,qBAAqB,CAAC,SAAiC,IAAIC,mBAAAA,QAAU,IAAI;AAAA,GAP7E,uBAAA,qBAAA,CAAA,EAAA;;"}

package/dist/development/src/acl/builder/PermissionsBuilder.js

@@ -0,0 +1,56 @@
+import { Acl } from "@contember/schema";
+import { AllowAllPermissionFactory } from "@contember/schema-utils";
+import PermissionOverrider from "./PermissionOverrider.js";
+import EntitySelector from "./EntitySelector.js";
+import EntityPermissionsBuilder from "./EntityPermissionsBuilder.js";
+import FieldSelector from "./FieldSelector.js";
+import PredicateReference from "./PredicateReference.js";
+class PermissionsBuilder {
+  constructor(schema, permissions) {
+    this.schema = schema;
+    this.permissions = permissions;
+  }
+  static create(model) {
+    return new PermissionsBuilder(model, {});
+  }
+  allowAll() {
+    return this.allow([Acl.Operation.read, Acl.Operation.update, Acl.Operation.delete, Acl.Operation.create]);
+  }
+  allow(operations) {
+    const allowAllFactory = new AllowAllPermissionFactory(operations);
+    return this.add(allowAllFactory.create(this.schema));
+  }
+  allowCustomPrimary() {
+    return this.onEveryEntity().allowCustomPrimary().builder;
+  }
+  add(permissions) {
+    const overrider = new PermissionOverrider();
+    return new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions));
+  }
+  onEntity(entitySelector) {
+    if (typeof entitySelector === "string") {
+      entitySelector = EntitySelector.named(entitySelector);
+    } else if (Array.isArray(entitySelector)) {
+      entitySelector = EntitySelector.named(...entitySelector);
+    }
+    const entitySelectorWithType = entitySelector;
+    const entities = Object.values(this.schema.entities).filter((entity) => entitySelectorWithType.matches(this.schema, entity));
+    return new EntityPermissionsBuilder(this, entities);
+  }
+  onEveryEntity() {
+    return this.onEntity(EntitySelector.every());
+  }
+}
+((PermissionsBuilder2) => {
+  PermissionsBuilder2.everyEntity = () => {
+    return EntitySelector.every();
+  };
+  PermissionsBuilder2.everyField = () => {
+    return FieldSelector.every();
+  };
+  PermissionsBuilder2.predicateReference = (name) => new PredicateReference(name);
+})(PermissionsBuilder || (PermissionsBuilder = {}));
+export {
+  PermissionsBuilder
+};
+//# sourceMappingURL=PermissionsBuilder.js.map

package/dist/development/src/acl/builder/PermissionsBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsBuilder.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/PermissionsBuilder.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { AllowAllPermissionFactory } from '@contember/schema-utils'\nimport PermissionOverrider from './PermissionOverrider'\nimport EntitySelector from './EntitySelector'\nimport EntityPermissionsBuilder from './EntityPermissionsBuilder'\nimport FieldSelector from './FieldSelector'\nimport Reference from './PredicateReference'\n\nclass PermissionsBuilder {\n\tconstructor(public readonly schema: Model.Schema, public readonly permissions: Acl.Permissions) {}\n\n\tpublic static create(model: Model.Schema): PermissionsBuilder {\n\t\treturn new PermissionsBuilder(model, {})\n\t}\n\n\tpublic allowAll(): PermissionsBuilder {\n\t\treturn this.allow([Acl.Operation.read, Acl.Operation.update, Acl.Operation.delete, Acl.Operation.create])\n\t}\n\n\tpublic allow(operations: Acl.Operation[]): PermissionsBuilder {\n\t\tconst allowAllFactory = new AllowAllPermissionFactory(operations)\n\t\treturn this.add(allowAllFactory.create(this.schema))\n\t}\n\n\tpublic allowCustomPrimary(): PermissionsBuilder {\n\t\treturn this.onEveryEntity().allowCustomPrimary().builder\n\t}\n\n\tpublic add(permissions: Acl.Permissions): PermissionsBuilder {\n\t\tconst overrider = new PermissionOverrider()\n\t\treturn new PermissionsBuilder(this.schema, overrider.override(this.permissions, permissions))\n\t}\n\n\tpublic onEntity(entitySelector: EntitySelector | string | string[]): EntityPermissionsBuilder {\n\t\tif (typeof entitySelector === 'string') {\n\t\t\tentitySelector = EntitySelector.named(entitySelector)\n\t\t} else if (Array.isArray(entitySelector)) {\n\t\t\tentitySelector = EntitySelector.named(...entitySelector)\n\t\t}\n\t\tconst entitySelectorWithType = entitySelector\n\t\tconst entities = Object.values(this.schema.entities).filter(entity => entitySelectorWithType.matches(this.schema, entity))\n\t\treturn new EntityPermissionsBuilder(this, entities)\n\t}\n\n\tpublic onEveryEntity(): EntityPermissionsBuilder {\n\t\treturn this.onEntity(EntitySelector.every())\n\t}\n}\n\nnamespace PermissionsBuilder {\n\texport const everyEntity = () => {\n\t\treturn EntitySelector.every()\n\t}\n\texport const everyField = () => {\n\t\treturn FieldSelector.every()\n\t}\n\texport const predicateReference = (name: Acl.PredicateReference) => new Reference(name)\n}\nexport { PermissionsBuilder }\n"],"names":["PermissionsBuilder","Reference"],"mappings":";;;;;;;AAQA,MAAM,mBAAmB;AAAA,EACxB,YAA4B,QAAsC,aAA8B;AAApE,SAAA,SAAA;AAAsC,SAAA,cAAA;AAAA,EAA+B;AAAA,EAEjG,OAAc,OAAO,OAAyC;AAC7D,WAAO,IAAI,mBAAmB,OAAO,EAAE;AAAA,EACxC;AAAA,EAEO,WAA+B;AACrC,WAAO,KAAK,MAAM,CAAC,IAAI,UAAU,MAAM,IAAI,UAAU,QAAQ,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,CAAC;AAAA,EACzG;AAAA,EAEO,MAAM,YAAiD;AAC7D,UAAM,kBAAkB,IAAI,0BAA0B,UAAU;AAChE,WAAO,KAAK,IAAI,gBAAgB,OAAO,KAAK,MAAM,CAAC;AAAA,EACpD;AAAA,EAEO,qBAAyC;AAC/C,WAAO,KAAK,gBAAgB,mBAAA,EAAqB;AAAA,EAClD;AAAA,EAEO,IAAI,aAAkD;AAC5D,UAAM,YAAY,IAAI,oBAAA;AACtB,WAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU,SAAS,KAAK,aAAa,WAAW,CAAC;AAAA,EAC7F;AAAA,EAEO,SAAS,gBAA8E;AAC7F,QAAI,OAAO,mBAAmB,UAAU;AACvC,uBAAiB,eAAe,MAAM,cAAc;AAAA,IACrD,WAAW,MAAM,QAAQ,cAAc,GAAG;AACzC,uBAAiB,eAAe,MAAM,GAAG,cAAc;AAAA,IACxD;AACA,UAAM,yBAAyB;AAC/B,UAAM,WAAW,OAAO,OAAO,KAAK,OAAO,QAAQ,EAAE,OAAO,CAAA,WAAU,uBAAuB,QAAQ,KAAK,QAAQ,MAAM,CAAC;AACzH,WAAO,IAAI,yBAAyB,MAAM,QAAQ;AAAA,EACnD;AAAA,EAEO,gBAA0C;AAChD,WAAO,KAAK,SAAS,eAAe,MAAA,CAAO;AAAA,EAC5C;AACD;AAAA,CAEA,CAAUA,wBAAV;AACcA,sBAAA,cAAc,MAAM;AAChC,WAAO,eAAe,MAAA;AAAA,EACvB;AACaA,sBAAA,aAAa,MAAM;AAC/B,WAAO,cAAc,MAAA;AAAA,EACtB;AACaA,sBAAA,qBAAqB,CAAC,SAAiC,IAAIC,mBAAU,IAAI;AAAA,GAP7E,uBAAA,qBAAA,CAAA,EAAA;"}

package/dist/development/src/acl/builder/PredicateReference.cjs

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
+const schemaUtils = require("@contember/schema-utils");
+class PredicateReference {
+  constructor(name) {
+    this.name = name;
+  }
+}
+const resolvePredicateReference = (model, permissions, entity, predicate) => {
+  const predicateDefinitionProcessor = new schemaUtils.PredicateDefinitionProcessor(model);
+  return predicateDefinitionProcessor.process(
+    entity,
+    predicate,
+    {
+      handleColumn: ({ value }) => {
+        if (value instanceof PredicateReference) {
+          throw new Error();
+        }
+        return value;
+      },
+      handleRelation: ({ value, targetEntity }) => {
+        if (value instanceof PredicateReference) {
+          if (!permissions[targetEntity.name]) {
+            throw new Error(
+              `Permissions for entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`
+            );
+          }
+          const predicate2 = permissions[targetEntity.name].predicates[value.name];
+          if (!predicate2) {
+            throw new Error(
+              `Predicate ${value.name} of entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`
+            );
+          }
+          return predicate2;
+        }
+        return value;
+      }
+    }
+  );
+};
+exports.default = PredicateReference;
+exports.resolvePredicateReference = resolvePredicateReference;
+//# sourceMappingURL=PredicateReference.cjs.map

package/dist/development/src/acl/builder/PredicateReference.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PredicateReference.cjs","sources":["../../../../../../packages/schema-definition/src/acl/builder/PredicateReference.ts"],"sourcesContent":["import { Acl, Input, Model } from '@contember/schema'\nimport { PredicateDefinitionProcessor } from '@contember/schema-utils'\n\nexport default class PredicateReference {\n\tconstructor(public readonly name: Acl.PredicateReference) {}\n}\n\nexport const resolvePredicateReference = (\n\tmodel: Model.Schema,\n\tpermissions: Acl.Permissions,\n\tentity: Model.Entity,\n\tpredicate: Acl.PredicateDefinition<PredicateReference>,\n): Acl.PredicateDefinition => {\n\tconst predicateDefinitionProcessor = new PredicateDefinitionProcessor(model)\n\treturn predicateDefinitionProcessor.process<Acl.PredicateVariable | Input.Condition, PredicateReference>(\n\t\tentity,\n\t\tpredicate,\n\t\t{\n\t\t\thandleColumn: ({ value }) => {\n\t\t\t\tif (value instanceof PredicateReference) {\n\t\t\t\t\tthrow new Error()\n\t\t\t\t}\n\t\t\t\treturn value\n\t\t\t},\n\t\t\thandleRelation: ({ value, targetEntity }) => {\n\t\t\t\tif (value instanceof PredicateReference) {\n\t\t\t\t\tif (!permissions[targetEntity.name]) {\n\t\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t\t`Permissions for entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`,\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t\tconst predicate = permissions[targetEntity.name].predicates[value.name]\n\t\t\t\t\tif (!predicate) {\n\t\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t\t`Predicate ${value.name} of entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`,\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t\treturn predicate\n\t\t\t\t}\n\t\t\t\treturn value\n\t\t\t},\n\t\t},\n\t)\n}\n"],"names":["PredicateDefinitionProcessor","predicate"],"mappings":";;;AAGA,MAAqB,mBAAmB;AAAA,EACvC,YAA4B,MAA8B;AAA9B,SAAA,OAAA;AAAA,EAA+B;AAC5D;AAEO,MAAM,4BAA4B,CACxC,OACA,aACA,QACA,cAC6B;AAC7B,QAAM,+BAA+B,IAAIA,YAAAA,6BAA6B,KAAK;AAC3E,SAAO,6BAA6B;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,MACC,cAAc,CAAC,EAAE,YAAY;AAC5B,YAAI,iBAAiB,oBAAoB;AACxC,gBAAM,IAAI,MAAA;AAAA,QACX;AACA,eAAO;AAAA,MACR;AAAA,MACA,gBAAgB,CAAC,EAAE,OAAO,mBAAmB;AAC5C,YAAI,iBAAiB,oBAAoB;AACxC,cAAI,CAAC,YAAY,aAAa,IAAI,GAAG;AACpC,kBAAM,IAAI;AAAA,cACT,0BAA0B,aAAa,IAAI;AAAA,YAAA;AAAA,UAE7C;AACA,gBAAMC,aAAY,YAAY,aAAa,IAAI,EAAE,WAAW,MAAM,IAAI;AACtE,cAAI,CAACA,YAAW;AACf,kBAAM,IAAI;AAAA,cACT,aAAa,MAAM,IAAI,cAAc,aAAa,IAAI;AAAA,YAAA;AAAA,UAExD;AACA,iBAAOA;AAAAA,QACR;AACA,eAAO;AAAA,MACR;AAAA,IAAA;AAAA,EACD;AAEF;;;"}

package/dist/development/src/acl/builder/PredicateReference.js

@@ -0,0 +1,43 @@
+import { PredicateDefinitionProcessor } from "@contember/schema-utils";
+class PredicateReference {
+  constructor(name) {
+    this.name = name;
+  }
+}
+const resolvePredicateReference = (model, permissions, entity, predicate) => {
+  const predicateDefinitionProcessor = new PredicateDefinitionProcessor(model);
+  return predicateDefinitionProcessor.process(
+    entity,
+    predicate,
+    {
+      handleColumn: ({ value }) => {
+        if (value instanceof PredicateReference) {
+          throw new Error();
+        }
+        return value;
+      },
+      handleRelation: ({ value, targetEntity }) => {
+        if (value instanceof PredicateReference) {
+          if (!permissions[targetEntity.name]) {
+            throw new Error(
+              `Permissions for entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`
+            );
+          }
+          const predicate2 = permissions[targetEntity.name].predicates[value.name];
+          if (!predicate2) {
+            throw new Error(
+              `Predicate ${value.name} of entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`
+            );
+          }
+          return predicate2;
+        }
+        return value;
+      }
+    }
+  );
+};
+export {
+  PredicateReference as default,
+  resolvePredicateReference
+};
+//# sourceMappingURL=PredicateReference.js.map

package/dist/development/src/acl/builder/PredicateReference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PredicateReference.js","sources":["../../../../../../packages/schema-definition/src/acl/builder/PredicateReference.ts"],"sourcesContent":["import { Acl, Input, Model } from '@contember/schema'\nimport { PredicateDefinitionProcessor } from '@contember/schema-utils'\n\nexport default class PredicateReference {\n\tconstructor(public readonly name: Acl.PredicateReference) {}\n}\n\nexport const resolvePredicateReference = (\n\tmodel: Model.Schema,\n\tpermissions: Acl.Permissions,\n\tentity: Model.Entity,\n\tpredicate: Acl.PredicateDefinition<PredicateReference>,\n): Acl.PredicateDefinition => {\n\tconst predicateDefinitionProcessor = new PredicateDefinitionProcessor(model)\n\treturn predicateDefinitionProcessor.process<Acl.PredicateVariable | Input.Condition, PredicateReference>(\n\t\tentity,\n\t\tpredicate,\n\t\t{\n\t\t\thandleColumn: ({ value }) => {\n\t\t\t\tif (value instanceof PredicateReference) {\n\t\t\t\t\tthrow new Error()\n\t\t\t\t}\n\t\t\t\treturn value\n\t\t\t},\n\t\t\thandleRelation: ({ value, targetEntity }) => {\n\t\t\t\tif (value instanceof PredicateReference) {\n\t\t\t\t\tif (!permissions[targetEntity.name]) {\n\t\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t\t`Permissions for entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`,\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t\tconst predicate = permissions[targetEntity.name].predicates[value.name]\n\t\t\t\t\tif (!predicate) {\n\t\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t\t`Predicate ${value.name} of entity ${targetEntity.name} not found. Make sure you are defining it in a right order.`,\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t\treturn predicate\n\t\t\t\t}\n\t\t\t\treturn value\n\t\t\t},\n\t\t},\n\t)\n}\n"],"names":["predicate"],"mappings":";AAGA,MAAqB,mBAAmB;AAAA,EACvC,YAA4B,MAA8B;AAA9B,SAAA,OAAA;AAAA,EAA+B;AAC5D;AAEO,MAAM,4BAA4B,CACxC,OACA,aACA,QACA,cAC6B;AAC7B,QAAM,+BAA+B,IAAI,6BAA6B,KAAK;AAC3E,SAAO,6BAA6B;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,MACC,cAAc,CAAC,EAAE,YAAY;AAC5B,YAAI,iBAAiB,oBAAoB;AACxC,gBAAM,IAAI,MAAA;AAAA,QACX;AACA,eAAO;AAAA,MACR;AAAA,MACA,gBAAgB,CAAC,EAAE,OAAO,mBAAmB;AAC5C,YAAI,iBAAiB,oBAAoB;AACxC,cAAI,CAAC,YAAY,aAAa,IAAI,GAAG;AACpC,kBAAM,IAAI;AAAA,cACT,0BAA0B,aAAa,IAAI;AAAA,YAAA;AAAA,UAE7C;AACA,gBAAMA,aAAY,YAAY,aAAa,IAAI,EAAE,WAAW,MAAM,IAAI;AACtE,cAAI,CAACA,YAAW;AACf,kBAAM,IAAI;AAAA,cACT,aAAa,MAAM,IAAI,cAAc,aAAa,IAAI;AAAA,YAAA;AAAA,UAExD;AACA,iBAAOA;AAAAA,QACR;AACA,eAAO;AAAA,MACR;AAAA,IAAA;AAAA,EACD;AAEF;"}

package/dist/development/src/acl/definition/aclExtensions.cjs

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const MetadataStore = require("../../utils/MetadataStore.cjs");
+const entityAclExtensionsStore = MetadataStore.createMetadataStore([]);
+const extendEntityAcl = (extension) => {
+  return function(cls, context) {
+    entityAclExtensionsStore.update(cls, (current) => [...current, extension], context);
+  };
+};
+const applyEntityAclExtensions = (cls, args) => entityAclExtensionsStore.get(cls).reduce(
+  (permissions, ext) => ext({ ...args, permissions }),
+  args.permissions
+);
+exports.applyEntityAclExtensions = applyEntityAclExtensions;
+exports.extendEntityAcl = extendEntityAcl;
+//# sourceMappingURL=aclExtensions.cjs.map

package/dist/development/src/acl/definition/aclExtensions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"aclExtensions.cjs","sources":["../../../../../../packages/schema-definition/src/acl/definition/aclExtensions.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { createMetadataStore, DecoratorFunction, EntityConstructor } from '../../utils'\nimport { Role } from './roles'\n\nexport type EntityAclExtensionArgs = {\n\tentity: Model.Entity\n\trole: Role\n\tpermissions: Acl.EntityPermissions\n}\n\nconst entityAclExtensionsStore = createMetadataStore<EntityAclExtension[]>([])\n\nexport type EntityAclExtension = (args: EntityAclExtensionArgs) => Acl.EntityPermissions\nexport const extendEntityAcl = <T>(extension: EntityAclExtension): DecoratorFunction<T> => {\n\treturn function(cls: EntityConstructor, context?: ClassDecoratorContext) {\n\t\tentityAclExtensionsStore.update(cls, current => [...current, extension], context)\n\t}\n}\n\nexport const applyEntityAclExtensions = (\n\tcls: EntityConstructor,\n\targs: EntityAclExtensionArgs,\n): Acl.EntityPermissions =>\n\tentityAclExtensionsStore.get(cls).reduce(\n\t\t(permissions, ext) => ext({ ...args, permissions }),\n\t\targs.permissions,\n\t)\n"],"names":["createMetadataStore"],"mappings":";;;AAUA,MAAM,2BAA2BA,cAAAA,oBAA0C,EAAE;AAGtE,MAAM,kBAAkB,CAAI,cAAwD;AAC1F,SAAO,SAAS,KAAwB,SAAiC;AACxE,6BAAyB,OAAO,KAAK,CAAA,YAAW,CAAC,GAAG,SAAS,SAAS,GAAG,OAAO;AAAA,EACjF;AACD;AAEO,MAAM,2BAA2B,CACvC,KACA,SAEA,yBAAyB,IAAI,GAAG,EAAE;AAAA,EACjC,CAAC,aAAa,QAAQ,IAAI,EAAE,GAAG,MAAM,aAAa;AAAA,EAClD,KAAK;AACN;;;"}

package/dist/development/src/acl/definition/aclExtensions.js

@@ -0,0 +1,16 @@
+import { createMetadataStore } from "../../utils/MetadataStore.js";
+const entityAclExtensionsStore = createMetadataStore([]);
+const extendEntityAcl = (extension) => {
+  return function(cls, context) {
+    entityAclExtensionsStore.update(cls, (current) => [...current, extension], context);
+  };
+};
+const applyEntityAclExtensions = (cls, args) => entityAclExtensionsStore.get(cls).reduce(
+  (permissions, ext) => ext({ ...args, permissions }),
+  args.permissions
+);
+export {
+  applyEntityAclExtensions,
+  extendEntityAcl
+};
+//# sourceMappingURL=aclExtensions.js.map

package/dist/development/src/acl/definition/aclExtensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aclExtensions.js","sources":["../../../../../../packages/schema-definition/src/acl/definition/aclExtensions.ts"],"sourcesContent":["import { Acl, Model } from '@contember/schema'\nimport { createMetadataStore, DecoratorFunction, EntityConstructor } from '../../utils'\nimport { Role } from './roles'\n\nexport type EntityAclExtensionArgs = {\n\tentity: Model.Entity\n\trole: Role\n\tpermissions: Acl.EntityPermissions\n}\n\nconst entityAclExtensionsStore = createMetadataStore<EntityAclExtension[]>([])\n\nexport type EntityAclExtension = (args: EntityAclExtensionArgs) => Acl.EntityPermissions\nexport const extendEntityAcl = <T>(extension: EntityAclExtension): DecoratorFunction<T> => {\n\treturn function(cls: EntityConstructor, context?: ClassDecoratorContext) {\n\t\tentityAclExtensionsStore.update(cls, current => [...current, extension], context)\n\t}\n}\n\nexport const applyEntityAclExtensions = (\n\tcls: EntityConstructor,\n\targs: EntityAclExtensionArgs,\n): Acl.EntityPermissions =>\n\tentityAclExtensionsStore.get(cls).reduce(\n\t\t(permissions, ext) => ext({ ...args, permissions }),\n\t\targs.permissions,\n\t)\n"],"names":[],"mappings":";AAUA,MAAM,2BAA2B,oBAA0C,EAAE;AAGtE,MAAM,kBAAkB,CAAI,cAAwD;AAC1F,SAAO,SAAS,KAAwB,SAAiC;AACxE,6BAAyB,OAAO,KAAK,CAAA,YAAW,CAAC,GAAG,SAAS,SAAS,GAAG,OAAO;AAAA,EACjF;AACD;AAEO,MAAM,2BAA2B,CACvC,KACA,SAEA,yBAAyB,IAAI,GAAG,EAAE;AAAA,EACjC,CAAC,aAAa,QAAQ,IAAI,EAAE,GAAG,MAAM,aAAa;AAAA,EAClD,KAAK;AACN;"}

package/dist/development/src/acl/definition/customPrimary.cjs

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const aclExtensions = require("./aclExtensions.cjs");
+const allowCustomPrimary = (role) => {
+  return aclExtensions.extendEntityAcl(({ permissions, role: currentRole }) => {
+    if (!role || role === currentRole || Array.isArray(role) && role.includes(currentRole)) {
+      return { ...permissions, operations: { ...permissions.operations, customPrimary: true } };
+    }
+    return permissions;
+  });
+};
+exports.allowCustomPrimary = allowCustomPrimary;
+//# sourceMappingURL=customPrimary.cjs.map

package/dist/development/src/acl/definition/customPrimary.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"customPrimary.cjs","sources":["../../../../../../packages/schema-definition/src/acl/definition/customPrimary.ts"],"sourcesContent":["import { Role } from './roles'\nimport { DecoratorFunction } from '../../utils'\nimport { extendEntityAcl } from './aclExtensions'\n\nexport const allowCustomPrimary = (role?: Role | Role[]): DecoratorFunction<any> => {\n\treturn extendEntityAcl(({ permissions, role: currentRole }) => {\n\t\tif (!role || role === currentRole || (Array.isArray(role) && role.includes(currentRole))) {\n\t\t\treturn { ...permissions, operations: { ...permissions.operations, customPrimary: true } }\n\t\t}\n\t\treturn permissions\n\t})\n}\n"],"names":["extendEntityAcl"],"mappings":";;;AAIO,MAAM,qBAAqB,CAAC,SAAiD;AACnF,SAAOA,cAAAA,gBAAgB,CAAC,EAAE,aAAa,MAAM,kBAAkB;AAC9D,QAAI,CAAC,QAAQ,SAAS,eAAgB,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS,WAAW,GAAI;AACzF,aAAO,EAAE,GAAG,aAAa,YAAY,EAAE,GAAG,YAAY,YAAY,eAAe,OAAK;AAAA,IACvF;AACA,WAAO;AAAA,EACR,CAAC;AACF;;"}

package/dist/development/src/acl/definition/customPrimary.js

@@ -0,0 +1,13 @@
+import { extendEntityAcl } from "./aclExtensions.js";
+const allowCustomPrimary = (role) => {
+  return extendEntityAcl(({ permissions, role: currentRole }) => {
+    if (!role || role === currentRole || Array.isArray(role) && role.includes(currentRole)) {
+      return { ...permissions, operations: { ...permissions.operations, customPrimary: true } };
+    }
+    return permissions;
+  });
+};
+export {
+  allowCustomPrimary
+};
+//# sourceMappingURL=customPrimary.js.map

package/dist/development/src/acl/definition/customPrimary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customPrimary.js","sources":["../../../../../../packages/schema-definition/src/acl/definition/customPrimary.ts"],"sourcesContent":["import { Role } from './roles'\nimport { DecoratorFunction } from '../../utils'\nimport { extendEntityAcl } from './aclExtensions'\n\nexport const allowCustomPrimary = (role?: Role | Role[]): DecoratorFunction<any> => {\n\treturn extendEntityAcl(({ permissions, role: currentRole }) => {\n\t\tif (!role || role === currentRole || (Array.isArray(role) && role.includes(currentRole))) {\n\t\t\treturn { ...permissions, operations: { ...permissions.operations, customPrimary: true } }\n\t\t}\n\t\treturn permissions\n\t})\n}\n"],"names":[],"mappings":";AAIO,MAAM,qBAAqB,CAAC,SAAiD;AACnF,SAAO,gBAAgB,CAAC,EAAE,aAAa,MAAM,kBAAkB;AAC9D,QAAI,CAAC,QAAQ,SAAS,eAAgB,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS,WAAW,GAAI;AACzF,aAAO,EAAE,GAAG,aAAa,YAAY,EAAE,GAAG,YAAY,YAAY,eAAe,OAAK;AAAA,IACvF;AACA,WAAO;AAAA,EACR,CAAC;AACF;"}