@esri/arcgis-rest-portal 4.0.1 → 4.0.4

package/dist/bundled/portal.esm.js

@@ -1,7 +1,7 @@
 /* @preserve
-* @esri/arcgis-rest-portal - v4.0.0 - Apache-2.0
+* @esri/arcgis-rest-portal - v4.0.3 - Apache-2.0
 * Copyright (c) 2017-2022 Esri, Inc.
-* Mon Apr 18 2022 19:15:20 GMT+0000 (Coordinated Universal Time)
+* Mon Aug 22 2022 19:56:33 GMT+0000 (Coordinated Universal Time)
 */
 import { cleanUrl, request, appendCustomParams, warn } from '@esri/arcgis-rest-request';
 
@@ -2422,6 +2422,8 @@ function shareItemWithGroup(requestOptions) {
         if (itemOwner !== username) {
             // need to track if the user is an admin
             let isAdmin = false;
+            // track if the admin & owner are in the same org
+            let isCrossOrgSharing = false;
             // next perform any necessary membership adjustments for
             // current user and/or item owner
             return Promise.all([
@@ -2438,6 +2440,7 @@ function shareItemWithGroup(requestOptions) {
                 .then(([currentUser, ownerUser, membership]) => {
                 const isSharedEditingGroup = !!confirmItemControl;
                 isAdmin = currentUser.role === "org_admin" && !currentUser.roleId;
+                isCrossOrgSharing = currentUser.orgId !== ownerUser.orgId;
                 return getMembershipAdjustments(currentUser, isSharedEditingGroup, membership, isAdmin, ownerUser, requestOptions);
             })
                 .then((membershipAdjustments) => {
@@ -2451,7 +2454,7 @@ function shareItemWithGroup(requestOptions) {
                 return Promise.all(membershipAdjustments.map(({ promise }) => promise))
                     .then(() => {
                     // then attempt the share
-                    return shareToGroup(requestOptions, isAdmin);
+                    return shareToGroup(requestOptions, isAdmin, isCrossOrgSharing);
                 })
                     .then((sharingResults) => {
                     // lastly, if the admin user was added to the group,
@@ -2502,7 +2505,7 @@ function getMembershipAdjustments(currentUser, isSharedEditingGroup, membership,
     }
     return membershipGuarantees;
 }
-function shareToGroup(requestOptions, isAdmin = false) {
+function shareToGroup(requestOptions, isAdmin = false, isCrossOrgSharing = false) {
     const username = requestOptions.authentication.username;
     const itemOwner = requestOptions.owner || username;
     // decide what url to use
@@ -2510,8 +2513,8 @@ function shareToGroup(requestOptions, isAdmin = false) {
     let url = `${getPortalUrl(requestOptions)}/content/items/${requestOptions.id}/share`;
     // but if they are the owner, or org_admin, use this route
     // Note: When using this end-point as an admin, apparently the admin does not need to be a member of the group (the itemOwner does)
-    // Have not validated this but came up in conversations w/ Sharing API team
-    if (itemOwner === username || isAdmin) {
+    // Note: Admin's can only use this route when the item is in the same org they are admin for
+    if (itemOwner === username || (isAdmin && !isCrossOrgSharing)) {
         url = `${getPortalUrl(requestOptions)}/content/users/${itemOwner}/items/${requestOptions.id}/share`;
     }
     // now its finally time to do the sharing
@@ -2766,7 +2769,7 @@ function getSelf(requestOptions) {
  * If you intend to request a portal by id and it is different from the portal specified by options.authentication, you must also pass options.portal.
  *
  *  ```js
- * import { getPortal } from "@esri/arcgis-rest-request";
+ * import { getPortal } from "@esri/arcgis-rest-portal";
  * //
  * getPortal()
  * getPortal("fe8")