@esri/arcgis-rest-portal 4.0.3 → 4.0.5

package/dist/bundled/portal.esm.js

@@ -1,7 +1,7 @@
 /* @preserve
-* @esri/arcgis-rest-portal - v4.0.2 - Apache-2.0
+* @esri/arcgis-rest-portal - v4.0.4 - Apache-2.0
 * Copyright (c) 2017-2022 Esri, Inc.
-* Wed May 11 2022 17:55:15 GMT+0000 (Coordinated Universal Time)
+* Thu Sep 15 2022 20:30:23 GMT+0000 (Coordinated Universal Time)
 */
 import { cleanUrl, request, appendCustomParams, warn } from '@esri/arcgis-rest-request';
 
@@ -1351,7 +1351,7 @@ function genericSearch(search, searchType) {
         };
     }
     else {
-        // searchUserAccess has one (knonw) valid value: "groupMember"
+        // searchUserAccess has one (known) valid value: "groupMember"
         options = appendCustomParams(search, [
             "q",
             "num",
@@ -1359,7 +1359,12 @@ function genericSearch(search, searchType) {
             "sortField",
             "sortOrder",
             "searchUserAccess",
-            "searchUserName"
+            "searchUserName",
+            "filter",
+            "countFields",
+            "countSize",
+            "categories",
+            "categoryFilters"
         ], {
             httpMethod: "GET"
         });
@@ -2422,6 +2427,8 @@ function shareItemWithGroup(requestOptions) {
         if (itemOwner !== username) {
             // need to track if the user is an admin
             let isAdmin = false;
+            // track if the admin & owner are in the same org
+            let isCrossOrgSharing = false;
             // next perform any necessary membership adjustments for
             // current user and/or item owner
             return Promise.all([
@@ -2438,6 +2445,7 @@ function shareItemWithGroup(requestOptions) {
                 .then(([currentUser, ownerUser, membership]) => {
                 const isSharedEditingGroup = !!confirmItemControl;
                 isAdmin = currentUser.role === "org_admin" && !currentUser.roleId;
+                isCrossOrgSharing = currentUser.orgId !== ownerUser.orgId;
                 return getMembershipAdjustments(currentUser, isSharedEditingGroup, membership, isAdmin, ownerUser, requestOptions);
             })
                 .then((membershipAdjustments) => {
@@ -2451,7 +2459,7 @@ function shareItemWithGroup(requestOptions) {
                 return Promise.all(membershipAdjustments.map(({ promise }) => promise))
                     .then(() => {
                     // then attempt the share
-                    return shareToGroup(requestOptions, isAdmin);
+                    return shareToGroup(requestOptions, isAdmin, isCrossOrgSharing);
                 })
                     .then((sharingResults) => {
                     // lastly, if the admin user was added to the group,
@@ -2502,7 +2510,7 @@ function getMembershipAdjustments(currentUser, isSharedEditingGroup, membership,
     }
     return membershipGuarantees;
 }
-function shareToGroup(requestOptions, isAdmin = false) {
+function shareToGroup(requestOptions, isAdmin = false, isCrossOrgSharing = false) {
     const username = requestOptions.authentication.username;
     const itemOwner = requestOptions.owner || username;
     // decide what url to use
@@ -2510,8 +2518,8 @@ function shareToGroup(requestOptions, isAdmin = false) {
     let url = `${getPortalUrl(requestOptions)}/content/items/${requestOptions.id}/share`;
     // but if they are the owner, or org_admin, use this route
     // Note: When using this end-point as an admin, apparently the admin does not need to be a member of the group (the itemOwner does)
-    // Have not validated this but came up in conversations w/ Sharing API team
-    if (itemOwner === username || isAdmin) {
+    // Note: Admin's can only use this route when the item is in the same org they are admin for
+    if (itemOwner === username || (isAdmin && !isCrossOrgSharing)) {
         url = `${getPortalUrl(requestOptions)}/content/users/${itemOwner}/items/${requestOptions.id}/share`;
     }
     // now its finally time to do the sharing
@@ -2766,7 +2774,7 @@ function getSelf(requestOptions) {
  * If you intend to request a portal by id and it is different from the portal specified by options.authentication, you must also pass options.portal.
  *
  *  ```js
- * import { getPortal } from "@esri/arcgis-rest-request";
+ * import { getPortal } from "@esri/arcgis-rest-portal";
  * //
  * getPortal()
  * getPortal("fe8")