@easy-cms/plugin-multi-tenant 0.47.4 → 0.48.0

package/dist/index.d.ts

@@ -42,6 +42,12 @@ interface MultiTenantOptions<S extends string = string, T extends string = strin
     readonly collections: readonly S[];
     /** Globals with a value per tenant, e.g. `['site-settings']`. Others are shared. */
     readonly globals?: readonly string[];
+    /**
+     * Shared collections and globals (not listed above) that the people of a tenant, its admins
+     * included, may change. A change applies to every tenant. Default: none; only users with
+     * access to all tenants change shared data.
+     */
+    readonly editShared?: readonly string[];
     /** Slug of the tenants collection. Default `tenants`. */
     readonly tenantsSlug?: T;
     /**

package/dist/index.js

@@ -61,7 +61,7 @@ import {
 // src/info.ts
 var INFO = {
   name: "@easy-cms/plugin-multi-tenant",
-  ...true ? { version: "0.47.4" } : {}
+  ...true ? { version: "0.48.0" } : {}
 };
 
 // src/members.ts
@@ -274,6 +274,8 @@ function multiTenantPlugin(options) {
       );
     const superUser = (user, _context) => !!user && user.member !== true && user.scoped !== true && isSuper(user);
     const everywhere = (user, context) => tenantOf(context).allTenants || superUser(user, context);
+    const editShared = new Set(options.editShared ?? []);
+    const sharedWrite = (slug, original) => async (args) => args.user?.scoped === true && !editShared.has(slug) ? false : (original ?? isLoggedIn)(args);
     const tenantFilter = (args, op) => {
       const { tenant } = tenantOf(args.context);
       if (op === "create") return tenant !== null || superUser(args.user, args.context);
@@ -516,7 +518,17 @@ function multiTenantPlugin(options) {
           access: { ...c.access, ...usersAccess(c.access) }
         });
       } else if (scoped.has(c.slug)) collections.push(scopeCollection(c, BUILTIN_ACCESS[c.slug]));
-      else collections.push({ ...c, fields: withTenantFilters(c.fields) });
+      else
+        collections.push({
+          ...c,
+          fields: withTenantFilters(c.fields),
+          access: {
+            ...c.access,
+            create: sharedWrite(c.slug, c.access?.create),
+            update: sharedWrite(c.slug, c.access?.update),
+            delete: sharedWrite(c.slug, c.access?.delete)
+          }
+        });
     }
     if (!hasUsers) collections.push({ slug: "users", fields: [memberships], access: usersAccess() });
     for (const builtin of [MEDIA, MEDIA_FOLDERS]) {
@@ -534,7 +546,11 @@ function multiTenantPlugin(options) {
     }
     const globals = (config.globals ?? []).map((g) => {
       const filtered = { ...g, fields: withTenantFilters(g.fields) };
-      if (!perTenant.has(g.slug)) return filtered;
+      if (!perTenant.has(g.slug))
+        return {
+          ...filtered,
+          access: { ...g.access, update: sharedWrite(g.slug, g.access?.update) }
+        };
       return {
         ...filtered,
         // One value per tenant; none when the request has no tenant.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easy-cms/plugin-multi-tenant",
-  "version": "0.47.4",
+  "version": "0.48.0",
   "description": "Multi-tenant Easy CMS: several sites or clients in one CMS, each with its own content, members and roles",
   "license": "MIT",
   "type": "module",
@@ -17,14 +17,14 @@
     "dist"
   ],
   "peerDependencies": {
-    "@easy-cms/core": "^0.47.4"
+    "@easy-cms/core": "^0.48.0"
   },
   "devDependencies": {
-    "@easy-cms/core": "^0.47.4",
-    "@easy-cms/db-sqlite": "^0.47.4",
-    "@easy-cms/plugin-form-builder": "^0.47.4",
-    "@easy-cms/plugin-nested-docs": "^0.47.4",
-    "@easy-cms/plugin-redirects": "^0.47.4"
+    "@easy-cms/core": "^0.48.0",
+    "@easy-cms/db-sqlite": "^0.48.0",
+    "@easy-cms/plugin-form-builder": "^0.48.0",
+    "@easy-cms/plugin-nested-docs": "^0.48.0",
+    "@easy-cms/plugin-redirects": "^0.48.0"
   },
   "engines": {
     "node": ">=22.12"