@esri/hub-common 11.23.2 → 12.0.0-alpha.1

package/dist/node/permissions/_internal/checkEntityPolicy.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkEntityPolicy = void 0;
+const objects_1 = require("../../objects");
+const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
+/**
+ * Validate user meets entity policy
+ * @param policy
+ * @param context
+ * @returns
+ */
+function checkEntityPolicy(policy, context) {
+    const user = context.currentUser;
+    const userGroups = user.groups || [];
+    let response = "not-granted";
+    const type = policy.collaborationType;
+    const id = policy.collaborationId;
+    if (type === "user") {
+        if (id === user.username) {
+            response = "granted";
+        }
+        else {
+            response = "not-granted";
+        }
+    }
+    if (type === "org") {
+        if (id === user.orgId) {
+            response = "granted";
+        }
+        else {
+            response = "not-org-member";
+        }
+    }
+    if (type === "group") {
+        if (userGroups.find((g) => g.id === id)) {
+            response = "granted";
+        }
+        else {
+            response = "not-group-member";
+        }
+    }
+    if (type === "group-admin") {
+        const group = userGroups.find((g) => g.id === id);
+        if (objects_1.getProp(group, "userMembership.memberType") === "admin") {
+            response = "granted";
+        }
+        else {
+            response = "not-group-admin";
+        }
+    }
+    const check = {
+        name: "entity:policy",
+        value: `${policy.collaborationType}:${policy.collaborationId}`,
+        response,
+        code: getPolicyResponseCode_1.getPolicyResponseCode(response),
+    };
+    return check;
+}
+exports.checkEntityPolicy = checkEntityPolicy;
+//# sourceMappingURL=checkEntityPolicy.js.map

package/dist/node/permissions/_internal/checkEntityPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkEntityPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEntityPolicy.ts"],"names":[],"mappings":";;;AACA,2CAAwC;AAMxC,mEAAgE;AAGhE;;;;;GAKG;AAEH,SAAgB,iBAAiB,CAC/B,MAA+B,EAC/B,OAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAK,EAAe,CAAC;IACnD,IAAI,QAAQ,GAAmB,aAAa,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;IAElC,IAAI,IAAI,KAAK,MAAM,EAAE;QACnB,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE;YACxB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,aAAa,CAAC;SAC1B;KACF;IAED,IAAI,IAAI,KAAK,KAAK,EAAE;QAClB,IAAI,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE;YACrB,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,gBAAgB,CAAC;SAC7B;KACF;IAED,IAAI,IAAI,KAAK,OAAO,EAAE;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC/C,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,kBAAkB,CAAC;SAC/B;KACF;IAED,IAAI,IAAI,KAAK,aAAa,EAAE;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,iBAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,KAAK,OAAO,EAAE;YAC3D,QAAQ,GAAG,SAAS,CAAC;SACtB;aAAM;YACL,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;KACF;IAED,MAAM,KAAK,GAAiB;QAC1B,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,eAAe,EAAE;QAC9D,QAAQ;QACR,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;KACtC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAlDD,8CAkDC"}

package/dist/node/permissions/_internal/checkLicense.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkLicense = void 0;
+const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
+/**
+ * Validate license policy
+ * @param policy
+ * @param response
+ * @param context
+ * @returns
+ */
+function checkLicense(policy, context) {
+    let result = "granted";
+    if (!policy.licenses.includes(context.hubLicense)) {
+        result = "not-available";
+        // can we show an upgrade ux?
+        if (policy.licenses[0] === "hub-premium" &&
+            context.hubLicense === "hub-basic") {
+            result = "not-licensed"; // implies it could be licensed
+        }
+    }
+    const check = {
+        name: `license in ${policy.licenses.join(", ")}`,
+        value: context.hubLicense,
+        code: getPolicyResponseCode_1.getPolicyResponseCode(result),
+        response: result,
+    };
+    return [check];
+}
+exports.checkLicense = checkLicense;
+//# sourceMappingURL=checkLicense.js.map

package/dist/node/permissions/_internal/checkLicense.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkLicense.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkLicense.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,YAAY,CAC1B,MAAyB,EACzB,OAAuB;IAEvB,IAAI,MAAM,GAAmB,SAAS,CAAC;IAEvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QACjD,MAAM,GAAG,eAAe,CAAC;QACzB,6BAA6B;QAC7B,IACE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;YACpC,OAAO,CAAC,UAAU,KAAK,WAAW,EAClC;YACA,MAAM,GAAG,cAAc,CAAC,CAAC,+BAA+B;SACzD;KACF;IAED,MAAM,KAAK,GAAiB;QAC1B,IAAI,EAAE,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChD,KAAK,EAAE,OAAO,CAAC,UAAU;QACzB,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;QACnC,QAAQ,EAAE,MAAM;KACjB,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAzBD,oCAyBC"}

package/dist/node/permissions/_internal/checkOwner.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkOwner = void 0;
+const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
+/**
+ * Validate entityOwner policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+function checkOwner(policy, context, entity) {
+    const checks = [];
+    // Only return a check if the policy is defined
+    if (policy.entityOwner) {
+        let response = "granted";
+        let name = "entity owner required";
+        if (!entity) {
+            // fail b/c no entity
+            response = "entity-required";
+        }
+        else {
+            name = `entity owner required: ${entity.owner}`;
+            if (entity.owner !== context.currentUser.username) {
+                response = "not-owner";
+            }
+        }
+        // create the check
+        const check = {
+            name,
+            value: `current user: ${context.currentUser.username}`,
+            code: getPolicyResponseCode_1.getPolicyResponseCode(response),
+            response,
+        };
+        checks.push(check);
+    }
+    return checks;
+}
+exports.checkOwner = checkOwner;
+//# sourceMappingURL=checkOwner.js.map

package/dist/node/permissions/_internal/checkOwner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkOwner.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkOwner.ts"],"names":[],"mappings":";;;AAGA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,UAAU,CACxB,MAAyB,EACzB,OAAuB,EACvB,MAAkB;IAElB,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,WAAW,EAAE;QACtB,IAAI,QAAQ,GAAmB,SAAS,CAAC;QACzC,IAAI,IAAI,GAAG,uBAAuB,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE;YACX,qBAAqB;YACrB,QAAQ,GAAG,iBAAiB,CAAC;SAC9B;aAAM;YACL,IAAI,GAAG,0BAA0B,MAAM,CAAC,KAAK,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;gBACjD,QAAQ,GAAG,WAAW,CAAC;aACxB;SACF;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI;YACJ,KAAK,EAAE,iBAAiB,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;YACtD,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA/BD,gCA+BC"}

package/dist/node/permissions/_internal/checkPrivileges.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkPrivileges = void 0;
+const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
+/**
+ * Validate privilege policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+function checkPrivileges(policy, context, entity) {
+    const privs = policy.privileges || [];
+    const checks = privs.map((privilege) => {
+        let response = "granted";
+        let value = "privilege present";
+        if (!context.currentUser.privileges.includes(privilege)) {
+            response = "privilege-required";
+            value = "privilege missing";
+        }
+        return {
+            name: `privilege required: ${privilege}`,
+            value,
+            response,
+            code: getPolicyResponseCode_1.getPolicyResponseCode(response),
+        };
+    });
+    return checks;
+}
+exports.checkPrivileges = checkPrivileges;
+//# sourceMappingURL=checkPrivileges.js.map

package/dist/node/permissions/_internal/checkPrivileges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkPrivileges.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkPrivileges.ts"],"names":[],"mappings":";;;AAGA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,MAAyB,EACzB,OAAuB,EACvB,MAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACrC,IAAI,QAAQ,GAAmB,SAAS,CAAC;QACzC,IAAI,KAAK,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YACvD,QAAQ,GAAG,oBAAoB,CAAC;YAChC,KAAK,GAAG,mBAAmB,CAAC;SAC7B;QACD,OAAO;YACL,IAAI,EAAE,uBAAuB,SAAS,EAAE;YACxC,KAAK;YACL,QAAQ;YACR,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;SACtB,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAtBD,0CAsBC"}

package/dist/node/permissions/_internal/getPolicyResponseCode.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPolicyResponseCode = void 0;
+// TODO: Determine how to keep this in sycn with the PolicyResponse type
+const policyResponseCodes = [
+    { response: "granted", code: "PC001" },
+    { response: "org-member", code: "PC002" },
+    { response: "not-org-member", code: "PC003" },
+    { response: "group-member", code: "PC004" },
+    { response: "not-group-member", code: "PC005" },
+    { response: "is-user", code: "PC006" },
+    { response: "not-owner", code: "PC007" },
+    { response: "not-licensed", code: "PC008" },
+    { response: "not-available", code: "PC009" },
+    { response: "not-granted", code: "PC010" },
+    { response: "no-edit-access", code: "PC011" },
+    { response: "invalid-permission", code: "PC012" },
+    { response: "privilege-required", code: "PC013" },
+    { response: "system-offline", code: "PC014" },
+    { response: "system-maintenance", code: "PC015" },
+    { response: "not-licensed-available", code: "PC016" },
+];
+/**
+ * Get a code that can be used for i18n or other purposes, based on the PolicyResponse
+ * @param response
+ * @returns
+ */
+function getPolicyResponseCode(response) {
+    const entry = policyResponseCodes.find((x) => x.response === response);
+    return (entry === null || entry === void 0 ? void 0 : entry.code) || "PC000";
+}
+exports.getPolicyResponseCode = getPolicyResponseCode;
+//# sourceMappingURL=getPolicyResponseCode.js.map

package/dist/node/permissions/_internal/getPolicyResponseCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPolicyResponseCode.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/getPolicyResponseCode.ts"],"names":[],"mappings":";;;AAOA,wEAAwE;AACxE,MAAM,mBAAmB,GAAoB;IAC3C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;CACtD,CAAC;AAEF;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACvE,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,KAAI,OAAO,CAAC;AAChC,CAAC;AAHD,sDAGC"}

package/dist/node/permissions/checkPermission.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkPermission = void 0;
+const objects_1 = require("../objects");
+const checkLicense_1 = require("./_internal/checkLicense");
+const HubPermissionPolicies_1 = require("./HubPermissionPolicies");
+const types_1 = require("./types");
+const getPolicyResponseCode_1 = require("./_internal/getPolicyResponseCode");
+const checkAuthentication_1 = require("./_internal/checkAuthentication");
+const checkOwner_1 = require("./_internal/checkOwner");
+const checkEdit_1 = require("./_internal/checkEdit");
+const checkPrivileges_1 = require("./_internal/checkPrivileges");
+const checkEntityPolicy_1 = require("./_internal/checkEntityPolicy");
+/**
+ * Check a permission against the system policies, and possibly an entity policy
+ * @param permission
+ * @param context
+ * @param entity
+ * @returns
+ */
+function checkPermission(permission, context, entity) {
+    // Early Exit: Is this even a valid permission?
+    if (!types_1.isPermission(permission)) {
+        return {
+            permission,
+            access: false,
+            response: "invalid-permission",
+            code: getPolicyResponseCode_1.getPolicyResponseCode("invalid-permission"),
+            checks: [],
+        };
+    }
+    // Get the system policy for this permission
+    const systemPolicy = HubPermissionPolicies_1.getPermissionPolicy(permission);
+    // Default to granted
+    const response = {
+        permission,
+        access: true,
+        response: "granted",
+        code: getPolicyResponseCode_1.getPolicyResponseCode("granted"),
+        checks: [],
+    };
+    // reduce over the check functions and collect all the checks
+    const checks = [
+        checkAuthentication_1.checkAuthentication,
+        checkLicense_1.checkLicense,
+        checkPrivileges_1.checkPrivileges,
+        checkEdit_1.checkEdit,
+        checkOwner_1.checkOwner,
+    ].reduce((acc, fn) => {
+        acc = [...acc, ...fn(systemPolicy, context, entity)];
+        return acc;
+    }, []);
+    // For system policies, all conditions must be met, so we can
+    // iterate through the checks and set the response to the first failure
+    // while still returning all the checks for observability
+    checks.forEach((check) => {
+        if (check.response !== "granted" && response.response === "granted") {
+            response.response = check.response;
+            response.code = check.code;
+            response.access = false;
+        }
+    });
+    response.checks = checks;
+    // Entity policies are treated as "grants" so we only need to pass one
+    if (entity) {
+        const entityPolicies = objects_1.getWithDefault(entity, "permissions", []);
+        const entityPermissionPolicies = entityPolicies.filter((e) => e.permission === permission);
+        // Entity Policies are "grants" in that only one needs to pass
+        // but we still want each check returned so we can see why they
+        // got access or got denied
+        const entityChecks = entityPermissionPolicies.map((policy) => {
+            return checkEntityPolicy_1.checkEntityPolicy(policy, context);
+        });
+        // Process them to see if any grant access
+        const grantedCheck = entityChecks.find((e) => e.response === "granted");
+        // If we did not find a check that grants access, AND we've passed
+        // all the system checks, then we set the response to "not-granted"
+        // and set the access to false
+        if (entityChecks.length &&
+            !grantedCheck &&
+            response.response === "granted") {
+            response.access = false;
+            response.response = "not-granted";
+        }
+        // Merge in the entity checks...
+        response.checks = [...response.checks, ...entityChecks];
+    }
+    // return the response
+    return response;
+}
+exports.checkPermission = checkPermission;
+//# sourceMappingURL=checkPermission.js.map

package/dist/node/permissions/checkPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkPermission.js","sourceRoot":"","sources":["../../../src/permissions/checkPermission.ts"],"names":[],"mappings":";;;AAEA,wCAA4C;AAC5C,2DAAwD;AACxD,mEAA8D;AAC9D,mCAMiB;AACjB,6EAA0E;AAC1E,yEAAsE;AACtE,uDAAoD;AACpD,qDAAkD;AAClD,iEAA8D;AAC9D,qEAAkE;AAElE;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,UAAsB,EACtB,OAAuB,EACvB,MAAkB;IAElB,+CAA+C;IAC/C,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE;QAC7B,OAAO;YACL,UAAU;YACV,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,oBAAoB;YAC9B,IAAI,EAAE,6CAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,EAAE,EAAE;SACQ,CAAC;KACtB;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,2CAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,qBAAqB;IACrB,MAAM,QAAQ,GAAoB;QAChC,UAAU;QACV,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6CAAqB,CAAC,SAAS,CAAC;QACtC,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,6DAA6D;IAC7D,MAAM,MAAM,GAAG;QACb,yCAAmB;QACnB,2BAAY;QACZ,iCAAe;QACf,qBAAS;QACT,uBAAU;KACX,CAAC,MAAM,CAAC,CAAC,GAAmB,EAAE,EAAE,EAAE,EAAE;QACnC,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6DAA6D;IAC7D,uEAAuE;IACvE,yDAAyD;IACzD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE;YACnE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YACnC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IAEzB,sEAAsE;IACtE,IAAI,MAAM,EAAE;QACV,MAAM,cAAc,GAA8B,wBAAc,CAC9D,MAAM,EACN,aAAa,EACb,EAAE,CACH,CAAC;QACF,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,8DAA8D;QAC9D,+DAA+D;QAC/D,2BAA2B;QAC3B,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3D,OAAO,qCAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,0CAA0C;QAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QACxE,kEAAkE;QAClE,mEAAmE;QACnE,8BAA8B;QAC9B,IACE,YAAY,CAAC,MAAM;YACnB,CAAC,YAAY;YACb,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAC/B;YACA,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC;SACnC;QACD,gCAAgC;QAChC,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;KACzD;IACD,sBAAsB;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAvFD,0CAuFC"}

package/dist/node/permissions/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./HubPermissionPolicies"), exports);
+tslib_1.__exportStar(require("./checkPermission"), exports);
+tslib_1.__exportStar(require("./utils"), exports);
+tslib_1.__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/node/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/permissions/index.ts"],"names":[],"mappings":";;;AAAA,kEAAwC;AACxC,4DAAkC;AAClC,kDAAwB;AACxB,kDAAwB"}

package/dist/node/permissions/types/HubLicense.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=HubLicense.js.map

package/dist/node/permissions/types/HubLicense.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HubLicense.js","sourceRoot":"","sources":["../../../../src/permissions/types/HubLicense.ts"],"names":[],"mappings":""}

package/dist/node/permissions/types/IAccessResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IAccessResponse.js.map

package/dist/node/permissions/types/IAccessResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAccessResponse.js","sourceRoot":"","sources":["../../../../src/permissions/types/IAccessResponse.ts"],"names":[],"mappings":""}

package/dist/node/permissions/types/IEntityPermissionPolicy.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IEntityPermissionPolicy.js.map

package/dist/node/permissions/types/IEntityPermissionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IEntityPermissionPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/types/IEntityPermissionPolicy.ts"],"names":[],"mappings":""}

package/dist/node/permissions/types/IPermissionPolicy.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IPermissionPolicy.js.map

package/dist/node/permissions/types/IPermissionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IPermissionPolicy.js","sourceRoot":"","sources":["../../../../src/permissions/types/IPermissionPolicy.ts"],"names":[],"mappings":""}

package/dist/node/permissions/types/IPolicyCheck.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=IPolicyCheck.js.map

package/dist/node/permissions/types/IPolicyCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IPolicyCheck.js","sourceRoot":"","sources":["../../../../src/permissions/types/IPolicyCheck.ts"],"names":[],"mappings":""}

package/dist/node/permissions/types/Permission.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPermission = void 0;
+/**
+ * Defines the values for Permissions
+ * Note: This needs to be managed as a single list or typechecking does not work
+ * We use an array so we can check for valid permissions
+ */
+const validPermissions = [
+    "hub:site:create",
+    "hub:site:delete",
+    "hub:site:edit",
+    "hub:site:view",
+    "hub:project:create",
+    "hub:project:delete",
+    "hub:project:edit",
+    "hub:project:view",
+];
+/**
+ * Validate a Permission
+ * @param permission
+ * @returns
+ */
+function isPermission(maybePermission) {
+    return validPermissions.includes(maybePermission);
+}
+exports.isPermission = isPermission;
+//# sourceMappingURL=Permission.js.map

package/dist/node/permissions/types/Permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Permission.js","sourceRoot":"","sources":["../../../../src/permissions/types/Permission.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,MAAM,gBAAgB,GAAG;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAOX;;;;GAIG;AACH,SAAgB,YAAY,CAAC,eAAuB;IAClD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,eAA6B,CAAC,CAAC;AAClE,CAAC;AAFD,oCAEC"}

package/dist/node/permissions/types/PlatformPrivilege.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Type that defines Platform Privileges
+ * TODO: Ensure this is a complete list
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=PlatformPrivilege.js.map

package/dist/node/permissions/types/PlatformPrivilege.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformPrivilege.js","sourceRoot":"","sources":["../../../../src/permissions/types/PlatformPrivilege.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/node/permissions/types/PolicyResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+/**`
+ * Human readable response from a policy check
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=PolicyResponse.js.map

package/dist/node/permissions/types/PolicyResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyResponse.js","sourceRoot":"","sources":["../../../../src/permissions/types/PolicyResponse.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/node/permissions/types/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./HubLicense"), exports);
+tslib_1.__exportStar(require("./IAccessResponse"), exports);
+tslib_1.__exportStar(require("./IEntityPermissionPolicy"), exports);
+tslib_1.__exportStar(require("./IPermissionPolicy"), exports);
+tslib_1.__exportStar(require("./IPolicyCheck"), exports);
+tslib_1.__exportStar(require("./Permission"), exports);
+tslib_1.__exportStar(require("./PlatformPrivilege"), exports);
+tslib_1.__exportStar(require("./PolicyResponse"), exports);
+//# sourceMappingURL=index.js.map

package/dist/node/permissions/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/permissions/types/index.ts"],"names":[],"mappings":";;;AAAA,uDAA6B;AAC7B,4DAAkC;AAClC,oEAA0C;AAC1C,8DAAoC;AACpC,yDAA+B;AAC/B,uDAA6B;AAC7B,8DAAoC;AACpC,2DAAiC"}

package/dist/node/permissions/utils.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removePermissionPolicy = exports.addPermissionPolicy = void 0;
+const util_1 = require("../util");
+/**
+ * Add a policy to an array of entity policies
+ * Returns a new array
+ * @param permissions
+ * @param policy
+ * @returns
+ */
+function addPermissionPolicy(permissions = [], policy) {
+    const clone = removePermissionPolicy(permissions, policy.permission, policy.collaborationId);
+    clone.push(policy);
+    return clone;
+}
+exports.addPermissionPolicy = addPermissionPolicy;
+/**
+ * Remove a policy from an array of entity policies
+ * Returns a new array
+ * @param permissions
+ * @param permission
+ * @param id
+ * @returns
+ */
+function removePermissionPolicy(permissions = [], permission, id) {
+    const clone = util_1.cloneObject(permissions);
+    return clone.filter((p) => p.permission !== permission || p.collaborationId !== id);
+}
+exports.removePermissionPolicy = removePermissionPolicy;
+//# sourceMappingURL=utils.js.map

package/dist/node/permissions/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/permissions/utils.ts"],"names":[],"mappings":";;;AAAA,kCAAsC;AAGtC;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,cAAyC,EAAE,EAC3C,MAA+B;IAE/B,MAAM,KAAK,GAAG,sBAAsB,CAClC,WAAW,EACX,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,CACvB,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAXD,kDAWC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CACpC,cAAyC,EAAE,EAC3C,UAAsB,EACtB,EAAU;IAEV,MAAM,KAAK,GAAG,kBAAW,CAAC,WAAW,CAAC,CAAC;IAEvC,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,KAAK,EAAE,CAC/D,CAAC;AACJ,CAAC;AAVD,wDAUC"}

package/dist/node/projects/HubProject.js

@@ -2,7 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HubProject = void 0;
 const defaults_1 = require("./defaults");
-const core_1 = require("../core");
 const Catalog_1 = require("../search/Catalog");
 const HubItemEntity_1 = require("../core/HubItemEntity");
 // NOTE: this could be lazy-loaded just like the CUD functions
@@ -19,7 +18,6 @@ class HubProject extends HubItemEntity_1.HubItemEntity {
     constructor(project, context) {
         super(project, context);
         this._catalog = Catalog_1.Catalog.fromJson(project.catalog, this.context);
-        this._permissionManager = core_1.PermissionManager.fromJson(project.permissions, this.context);
     }
     /**
      * Catalog instance for this project. Note: Do not hold direct references to this object; always access it from the project.
@@ -28,13 +26,6 @@ class HubProject extends HubItemEntity_1.HubItemEntity {
     get catalog() {
         return this._catalog;
     }
-    /**
-     * PermissionManager instance for this project. Note: Do not hold direct references to this object; always access it from the project.
-     * @returns
-     */
-    get permissions() {
-        return this._permissionManager;
-    }
     /**
      * Create an instance from an IHubProject object
      * @param json - JSON object to create a HubProject from
@@ -122,9 +113,6 @@ class HubProject extends HubItemEntity_1.HubItemEntity {
         if (changes.catalog) {
             this._catalog = Catalog_1.Catalog.fromJson(this.entity.catalog, this.context);
         }
-        if (changes.permissions) {
-            this._permissionManager = core_1.PermissionManager.fromJson(this.entity.permissions, this.context);
-        }
     }
     /**
      * Save the HubProject to the backing store. Currently Projects are stored as Items in Portal
@@ -136,7 +124,6 @@ class HubProject extends HubItemEntity_1.HubItemEntity {
         }
         // get the catalog, and permission configs
         this.entity.catalog = this._catalog.toJson();
-        this.entity.permissions = this._permissionManager.toJson();
         const { createProject, updateProject } = await Promise.resolve().then(() => require("./edit"));
         if (this.entity.id) {
             // update it

package/dist/node/projects/HubProject.js.map

@@ -1 +1 @@
-{"version":3,"file":"HubProject.js","sourceRoot":"","sources":["../../../src/projects/HubProject.ts"],"names":[],"mappings":";;;AAAA,yCAA6C;AAE7C,kCAQiB;AAEjB,+CAA4C;AAE5C,yDAAsD;AAMtD,8DAA8D;AAC9D,mCAAuC;AAEvC;;GAEG;AACH,MAAa,UACX,SAAQ,6BAA0B;IAUlC;;;;OAIG;IACH,YAAoB,OAAoB,EAAE,OAAuB;QAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,kBAAkB,GAAG,wBAAiB,CAAC,QAAQ,CAClD,OAAO,CAAC,WAAW,EACnB,IAAI,CAAC,OAAO,CACb,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CACb,IAA0B,EAC1B,OAAuB;QAEvB,6CAA6C;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,cAAoC,EACpC,OAAuB,EACvB,OAAgB,KAAK;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,EAAE;YACR,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;SACvB;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,UAAkB,EAClB,OAAuB;QAEvB,kCAAkC;QAClC,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,oBAAY,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACvE,oDAAoD;YACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC9C;QAAC,OAAO,EAAE,EAAE;YACX,IACG,EAAY,CAAC,OAAO;gBACrB,oDAAoD,EACpD;gBACA,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;aACvC;iBAAM;gBACL,MAAM,EAAE,CAAC;aACV;SACF;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,SAAiB,EACjB,IAAsB,EACtB,UAAoC,EAAE;QAEtC,MAAM,EAAE,yBAAyB,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QAC7D,wBAAwB;QACxB,OAAO,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,cAAoC,EACpC,OAAuB;QAEvB,+BAA+B;QAC/B,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE;YAC7B,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAClD;QACD,uCAAuC;QACvC,MAAM,IAAI,GAAG,gCAAK,0BAAe,GAAK,cAAc,CAAiB,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAA6B;QAClC,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,qCAAqC;QACrC,IAAI,CAAC,MAAM,mCAAQ,IAAI,CAAC,MAAM,GAAK,OAAO,CAAE,CAAC;QAE7C,4BAA4B;QAC5B,IAAI,OAAO,CAAC,OAAO,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACrE;QACD,IAAI,OAAO,CAAC,WAAW,EAAE;YACvB,IAAI,CAAC,kBAAkB,GAAG,wBAAiB,CAAC,QAAQ,CAClD,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,OAAO,CACb,CAAC;SACH;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAE3D,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;YAClB,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;aAAM;YACL,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;QACD,yCAAyC;QACzC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAExB,OAAO;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,aAAa,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QACjD,wBAAwB;QACxB,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,CAAC;CACF;AA9MD,gCA8MC"}
+{"version":3,"file":"HubProject.js","sourceRoot":"","sources":["../../../src/projects/HubProject.ts"],"names":[],"mappings":";;;AAAA,yCAA6C;AAW7C,+CAA4C;AAE5C,yDAAsD;AAMtD,8DAA8D;AAC9D,mCAAuC;AAEvC;;GAEG;AACH,MAAa,UACX,SAAQ,6BAA0B;IASlC;;;;OAIG;IACH,YAAoB,OAAoB,EAAE,OAAuB;QAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CACb,IAA0B,EAC1B,OAAuB;QAEvB,6CAA6C;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,cAAoC,EACpC,OAAuB,EACvB,OAAgB,KAAK;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,EAAE;YACR,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;SACvB;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,UAAkB,EAClB,OAAuB;QAEvB,kCAAkC;QAClC,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,oBAAY,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACvE,oDAAoD;YACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC9C;QAAC,OAAO,EAAE,EAAE;YACX,IACG,EAAY,CAAC,OAAO;gBACrB,oDAAoD,EACpD;gBACA,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;aACvC;iBAAM;gBACL,MAAM,EAAE,CAAC;aACV;SACF;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,SAAiB,EACjB,IAAsB,EACtB,UAAoC,EAAE;QAEtC,MAAM,EAAE,yBAAyB,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QAC7D,wBAAwB;QACxB,OAAO,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,cAAoC,EACpC,OAAuB;QAEvB,+BAA+B;QAC/B,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE;YAC7B,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAClD;QACD,uCAAuC;QACvC,MAAM,IAAI,GAAG,gCAAK,0BAAe,GAAK,cAAc,CAAiB,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAA6B;QAClC,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,qCAAqC;QACrC,IAAI,CAAC,MAAM,mCAAQ,IAAI,CAAC,MAAM,GAAK,OAAO,CAAE,CAAC;QAE7C,4BAA4B;QAC5B,IAAI,OAAO,CAAC,OAAO,EAAE;YACnB,IAAI,CAAC,QAAQ,GAAG,iBAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;SACrE;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAE7C,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;YAClB,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;aAAM;YACL,YAAY;YACZ,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAC/B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAChC,CAAC;SACH;QACD,yCAAyC;QACzC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAExB,OAAO;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,aAAa,EAAE,GAAG,2CAAa,QAAQ,EAAC,CAAC;QACjD,wBAAwB;QACxB,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,CAAC;CACF;AA1LD,gCA0LC"}

package/dist/node/projects/_internal/ProjectPermissionPolicies.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectPermissionPolicies = void 0;
+/**
+ * Project Permission Policies
+ * These define the requirements any user must meet to perform related actions
+ * @private
+ */
+exports.ProjectPermissionPolicies = [
+    {
+        permission: "hub:project:create",
+        subsystems: ["projects"],
+        authenticated: true,
+        privileges: ["portal:user:createItem"],
+        licenses: ["hub-premium"],
+    },
+    {
+        permission: "hub:project:view",
+        subsystems: ["projects"],
+        authenticated: false,
+        licenses: ["hub-premium"],
+    },
+    {
+        permission: "hub:project:edit",
+        authenticated: true,
+        subsystems: ["projects"],
+        entityEdit: true,
+        licenses: ["hub-premium"],
+    },
+    {
+        permission: "hub:project:delete",
+        authenticated: true,
+        subsystems: ["projects"],
+        entityOwner: true,
+        licenses: ["hub-premium"],
+    },
+];
+//# sourceMappingURL=ProjectPermissionPolicies.js.map

package/dist/node/projects/_internal/ProjectPermissionPolicies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectPermissionPolicies.js","sourceRoot":"","sources":["../../../../src/projects/_internal/ProjectPermissionPolicies.ts"],"names":[],"mappings":";;;AAEA;;;;GAIG;AACU,QAAA,yBAAyB,GAAwB;IAC5D;QACE,UAAU,EAAE,oBAAoB;QAChC,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,UAAU,EAAE,kBAAkB;QAC9B,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,aAAa,EAAE,KAAK;QACpB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,UAAU,EAAE,kBAAkB;QAC9B,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;CACF,CAAC"}