@esri/hub-common 11.23.3 → 12.0.0-alpha.2

package/dist/types/core/types/HubEntity.d.ts

@@ -0,0 +1,5 @@
+import { IHubInitiative } from "./IHubInitiative";
+import { IHubPage } from "./IHubPage";
+import { IHubProject } from "./IHubProject";
+import { IHubSite } from "./IHubSite";
+export declare type HubEntity = IHubSite | IHubProject | IHubInitiative | IHubPage;

package/dist/types/core/types/HubEntityType.d.ts

@@ -0,0 +1 @@
+export declare type HubEntityType = "site" | "project" | "initiative" | "page";

package/dist/types/core/types/IHubContent.d.ts

@@ -15,7 +15,7 @@ export declare enum PublisherSource {
 /**
  * Data model for content
  */
-export interface IHubContent extends Omit<IHubItemEntity, "schemaVersion">, IHubContentEnrichments, IItem {
+export interface IHubContent extends Omit<IHubItemEntity, "schemaVersion" | "permissions">, IHubContentEnrichments, IItem {
     /**
      * The underlying portal item referenced by this content
      */
@@ -40,6 +40,7 @@ export interface IHubContent extends Omit<IHubItemEntity, "schemaVersion">, IHub
     identifier: string;
     /**
      * Content visibility and access control, including groups
+     * NOTE: this needs to be reconciled with Hub permission system
      */
     permissions: {
         /** Visibility of the content */

package/dist/types/core/types/IHubItemEntity.d.ts

@@ -1,11 +1,11 @@
 import { IHubEntityBase } from "./IHubEntityBase";
 import { IHubGeography } from "../../types";
 import { AccessLevel } from "./types";
-import { IWithViewSettings } from "../traits";
+import { IWithPermissions, IWithViewSettings } from "../traits";
 /**
  * Properties exposed by Entities that are backed by Items
  */
-export interface IHubItemEntity extends IHubEntityBase {
+export interface IHubItemEntity extends IHubEntityBase, IWithPermissions {
     /**
      * Access level of the item ("private" | "org" | "public")
      */
@@ -29,6 +29,11 @@ export interface IHubItemEntity extends IHubEntityBase {
      * Extent of the Entity
      */
     extent?: number[][];
+    /**
+     * Platform derived based on current user's access to the entity
+     * if defined, it means the user can edit the entity
+     */
+    itemControl: string;
     /**
      * Username of the owner of the item
      */
@@ -62,4 +67,16 @@ export interface IHubItemEntity extends IHubEntityBase {
      * Project display properties
      */
     view?: IWithViewSettings;
+    /**
+     * Can current user edit the entity
+     * Derived from `item.itemControl` = "admin" | "update"
+     * @readonly
+     */
+    canEdit: boolean;
+    /**
+     * Can current user delete the entity
+     * Derived from `item.itemControl` = "admin"
+     * @readonly
+     */
+    canDelete: boolean;
 }

package/dist/types/core/types/ISystemStatus.d.ts

@@ -0,0 +1,22 @@
+/**
+ * What is the status of a subsystem
+ */
+export declare type SystemStatus = "online" | "offline" | "maintenance" | "not-available";
+/**
+ * Hash of subsystems and their status
+ */
+export declare type HubSystemStatus = {
+    [key in HubSubsystem]: SystemStatus;
+};
+declare const validSubsystems: readonly ["discussions", "events", "initiatives", "items", "metrics", "notifications", "pages", "projects", "search", "sites"];
+/**
+ * Defines values for HubSubsystem
+ */
+export declare type HubSubsystem = typeof validSubsystems[number];
+/**
+ * Validate a Subsystem
+ * @param subsystem
+ * @returns
+ */
+export declare function isSubsystem(maybeSubsystem: string): boolean;
+export {};

package/dist/types/core/types/index.d.ts

@@ -1,3 +1,5 @@
+export * from "./HubEntity";
+export * from "./HubEntityType";
 export * from "./IHubContent";
 export * from "./IHubContentEnrichments";
 export * from "./IHubEntityBase";
@@ -13,6 +15,5 @@ export * from "./IHubSiteTheme";
 export * from "./IHubTimeline";
 export * from "./IItemEnrichments";
 export * from "./IServerEnrichments";
+export * from "./ISystemStatus";
 export * from "./types";
-export * from "./IHubPermission";
-export * from "../traits/IWithViewSettings";

package/dist/types/index.d.ts

@@ -16,6 +16,7 @@ export * from "./models";
 export * from "./objects";
 export * from "./org";
 export * from "./pages";
+export * from "./permissions";
 export * from "./projects";
 export * from "./request";
 export * from "./resources";

package/dist/types/initiatives/HubInitiative.d.ts

@@ -1,4 +1,4 @@
-import { IHubInitiative, IWithPermissionBehavior, IWithCatalogBehavior, PermissionManager, IWithStoreBehavior, IWithSharingBehavior } from "../core";
+import { IHubInitiative, IWithPermissionBehavior, IWithCatalogBehavior, IWithStoreBehavior, IWithSharingBehavior } from "../core";
 import { Catalog } from "../search/Catalog";
 import { IArcGISContext } from "../ArcGISContext";
 import { HubItemEntity } from "../core/HubItemEntity";
@@ -7,7 +7,6 @@ import { HubItemEntity } from "../core/HubItemEntity";
  */
 export declare class HubInitiative extends HubItemEntity<IHubInitiative> implements IWithStoreBehavior<IHubInitiative>, IWithPermissionBehavior, IWithCatalogBehavior, IWithSharingBehavior {
     private _catalog;
-    private _permissionManager;
     /**
      * Private constructor so we don't have `new` all over the place. Allows for
      * more flexibility in how we create the HubInitiativeManager over time.
@@ -19,11 +18,6 @@ export declare class HubInitiative extends HubItemEntity<IHubInitiative> impleme
      * @returns Catalog
      */
     get catalog(): Catalog;
-    /**
-     * PermissionManager instance for this Initiative. Note: Do not hold direct references to this object; always access it from the Initiative.
-     * @returns PermissionManager
-     */
-    get permissions(): PermissionManager;
     /**
      * Create an instance from an IHubInitiative object
      * @param json - JSON object to create a HubInitiative from

package/dist/types/permissions/HubPermissionPolicies.d.ts

@@ -0,0 +1,11 @@
+import { IPermissionPolicy, Permission } from "./types";
+/**
+ * All the permission policies for the Hub
+ */
+export declare const HubPermissionsPolicies: IPermissionPolicy[];
+/**
+ * Get the policies defined for a specific permission
+ * @param permission
+ * @returns
+ */
+export declare function getPermissionPolicy(permission: Permission): IPermissionPolicy;

package/dist/types/permissions/_internal/checkAlphaGating.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate entityOwner policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkAlphaGating(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkAssertion.d.ts

@@ -0,0 +1,11 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPolicyAssertion, IPolicyCheck } from "../types";
+/**
+ * Check a specific EntityAssertion
+ * Exported purely for testing. Not exported from the package.
+ * @param assertion
+ * @param entity
+ * @param context
+ * @returns
+ */
+export declare function checkAssertion(assertion: IPolicyAssertion, entity: Record<string, any>, context: IArcGISContext): IPolicyCheck;

package/dist/types/permissions/_internal/checkAssertions.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate entityOwner policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkAssertions(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkAuthentication.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate authentication policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkAuthentication(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkEdit.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate entityEdit policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkEdit(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkEntityPolicy.d.ts

@@ -0,0 +1,9 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPolicyCheck, IEntityPermissionPolicy } from "../types";
+/**
+ * Validate user meets entity policy
+ * @param policy
+ * @param context
+ * @returns
+ */
+export declare function checkEntityPolicy(policy: IEntityPermissionPolicy, context: IArcGISContext): IPolicyCheck;

package/dist/types/permissions/_internal/checkLicense.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate license policy
+ * @param policy
+ * @param response
+ * @param context
+ * @returns
+ */
+export declare function checkLicense(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkOwner.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate entityOwner policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkOwner(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkPrivileges.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy, IPolicyCheck } from "../types";
+/**
+ * Validate privilege policy
+ * @param policy
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkPrivileges(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/getPolicyResponseCode.d.ts

@@ -0,0 +1,7 @@
+import { PolicyResponse } from "../types";
+/**
+ * Get a code that can be used for i18n or other purposes, based on the PolicyResponse
+ * @param response
+ * @returns
+ */
+export declare function getPolicyResponseCode(response: PolicyResponse): string;

package/dist/types/permissions/checkPermission.d.ts

@@ -0,0 +1,10 @@
+import { IArcGISContext } from "../ArcGISContext";
+import { IAccessResponse, Permission } from "./types";
+/**
+ * Check a permission against the system policies, and possibly an entity policy
+ * @param permission
+ * @param context
+ * @param entity
+ * @returns
+ */
+export declare function checkPermission(permission: Permission, context: IArcGISContext, entity?: Record<string, any>): IAccessResponse;

package/dist/types/permissions/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./HubPermissionPolicies";
+export * from "./checkPermission";
+export * from "./utils";
+export * from "./types";

package/dist/types/permissions/types/HubLicense.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Defines the values for hub license types
+ */
+export declare type HubLicense = "hub-basic" | "hub-premium" | "enterprise-sites";

package/dist/types/permissions/types/IAccessResponse.d.ts

@@ -0,0 +1,34 @@
+import { Permission } from "./Permission";
+import { IPolicyCheck } from "./IPolicyCheck";
+import { PolicyResponse } from "./PolicyResponse";
+/**
+ * Response from a permission check
+ */
+export interface IAccessResponse {
+    /**
+     * Permission being checked
+     */
+    permission: Permission;
+    /**
+     * Is the user allowed to perform the action
+     */
+    access: boolean;
+    /**
+     * Code for the access response. Used for i18n and UX level messages
+     */
+    code: string;
+    /**
+     * Reason for the access response
+     */
+    response: PolicyResponse;
+    /**
+     * Message with details access response. Typically used to return additional
+     * information about assertion failures
+     */
+    message?: string;
+    /**
+     * List of all the policies that were checked, and their responses
+     * For debugging / observability
+     */
+    checks: IPolicyCheck[];
+}

package/dist/types/permissions/types/IEntityPermissionPolicy.d.ts

@@ -0,0 +1,22 @@
+import { Permission } from "./Permission";
+/**
+ * Association of a Permission with a set of collaborators
+ */
+export interface IEntityPermissionPolicy {
+    /**
+     * Permission being granted
+     */
+    permission: Permission;
+    /**
+     * Type of the collaboration - org, group, group-admin or user
+     */
+    collaborationType: CollaborationType;
+    /**
+     * Id of the collaboration set
+     */
+    collaborationId: string;
+}
+/**
+ * Type of collaboration set. Used when associating a permission with a set of collaborators
+ */
+export declare type CollaborationType = "user" | "group" | "group-admin" | "org" | "authenticated" | "anonymous";

package/dist/types/permissions/types/IPermissionPolicy.d.ts

@@ -0,0 +1,57 @@
+import { HubLicense } from "./HubLicense";
+import { HubSubsystem } from "../../core/types/ISystemStatus";
+import { Permission } from "./Permission";
+import { PlatformPrivilege } from "./PlatformPrivilege";
+/**
+ * Defines a system level policy for a specific permission.
+ * All conditions must be met for the permission to be granted. Additinonal conditions may be added by an entity to further
+ * limit access when the permission is checed in the contex to the entity.
+ * e.g. "hub:project:create" in the context of an Initiative, may further restrict to members of a specfic group
+ */
+export interface IPermissionPolicy {
+    /**
+     * Permission being defined
+     */
+    permission: Permission;
+    /**
+     * What subsystems are required to be online for this permission to be granted
+     */
+    subsystems: HubSubsystem[];
+    /**
+     * Must the user authenticated?
+     */
+    authenticated?: boolean;
+    /**
+     * What licenses are required for this permission to be granted.
+     * This is checking the licese of the current user's org. It is not transitive to the entity being accessed.
+     * e.g. If a user is in a Partner "hub-basic" org, they can not create "premium" entities (e.g. Projects)
+     */
+    licenses?: HubLicense[];
+    /**
+     * Any platform level privileges required for this permission to be granted
+     * e.g. "portal:user:createItem"
+     */
+    privileges?: PlatformPrivilege[];
+    /**
+     * Is the user an owner of the entity being accessed?
+     */
+    entityEdit?: boolean;
+    /**
+     * Must the user be the owner of the entity being accessed?
+     */
+    entityOwner?: boolean;
+    /**
+     * Is this gated to alpha orgs?
+     */
+    alpha?: boolean;
+    /**
+     * More complex policies can be defined with a set of assertions
+     */
+    assertions?: IPolicyAssertion[];
+}
+export interface IPolicyAssertion {
+    property: string;
+    type: AssertionType;
+    value: any;
+}
+export declare type AssertionType = "eq" | "neq" | "gt" | "lt" | "contains" | "contains-all" | "without" | "included-in" | "is-group-admin" | "is-group-member" | "is-group-owner";

package/dist/types/permissions/types/IPolicyCheck.d.ts

@@ -0,0 +1,25 @@
+import { PolicyResponse } from "./PolicyResponse";
+/**
+ * Information about a specific policy check, and its response
+ * Used for debugging / observability
+ */
+export interface IPolicyCheck {
+    /**
+     * Description of the policy being checked
+     * e.g. License Required: "hub-premium"
+     */
+    name: string;
+    /**
+     * Value determined for the current user
+     * e.g. "hub-basic"
+     */
+    value: string;
+    /**
+     * Policy Response code, for i18n
+     */
+    code: string;
+    /**
+     * Policy Response string
+     */
+    response: PolicyResponse;
+}

package/dist/types/permissions/types/Permission.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Defines the values for Permissions
+ * It's critical that the arrays defined in the modules use `as const`
+ * otherwise Permission devolves into just a string type
+ */
+declare const validPermissions: readonly ["hub:site:create", "hub:site:delete", "hub:site:edit", "hub:site:view", "hub:project:create", "hub:project:delete", "hub:project:edit", "hub:project:view"];
+/**
+ * Defines the possible values for Permissions
+ */
+export declare type Permission = typeof validPermissions[number];
+/**
+ * Validate a Permission
+ * @param permission
+ * @returns
+ */
+export declare function isPermission(maybePermission: string): boolean;
+export {};

package/dist/types/permissions/types/PlatformPrivilege.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Type that defines Platform Privileges
+ * TODO: Ensure this is a complete list
+ */
+export declare type PlatformPrivilege = "opendata:user:designateGroup" | "opendata:user:openDataAdmin" | "portal:admin:assignToGroups" | "portal:admin:categorizeItems" | "portal:admin:changeUserRoles" | "portal:admin:createGPWebhook" | "portal:admin:createUpdateCapableGroup" | "portal:admin:deleteGroups" | "portal:admin:deleteItems" | "portal:admin:deleteUsers" | "portal:admin:disableUsers" | "portal:admin:inviteUsers" | "portal:admin:manageCollaborations" | "portal:admin:manageCredits" | "portal:admin:manageEnterpriseGroups" | "portal:admin:manageLicenses" | "portal:admin:manageRoles" | "portal:admin:manageSecurity" | "portal:admin:manageServers" | "portal:admin:manageUtilityServices" | "portal:admin:manageWebhooks" | "portal:admin:manageWebsite" | "portal:admin:reassignGroups" | "portal:admin:reassignItems" | "portal:admin:reassignUsers" | "portal:admin:shareToGroup" | "portal:admin:shareToOrg" | "portal:admin:shareToPublic" | "portal:admin:updateGroups" | "portal:admin:updateItemCategorySchema" | "portal:admin:updateItems" | "portal:admin:updateMemberCategorySchema" | "portal:admin:updateUsers" | "portal:admin:viewGroups" | "portal:admin:viewItems" | "portal:admin:viewUsers" | "portal:publisher:bulkPublishFromDataStores" | "portal:publisher:createFeatureWebhook" | "portal:publisher:publishBigDataAnalytics" | "portal:publisher:publishDynamicImagery" | "portal:publisher:publishFeatures" | "portal:publisher:publishFeeds" | "portal:publisher:publishKnowledgeGraph" | "portal:publisher:publishRealTimeAnalytics" | "portal:publisher:publishScenes" | "portal:publisher:publishServerGPServices" | "portal:publisher:publishServerServices" | "portal:publisher:publishTiledImagery" | "portal:publisher:publishTiles" | "portal:publisher:registerDataStores" | "portal:user:addExternalMembersToGroup" | "portal:user:categorizeItems" | "portal:user:createGroup" | "portal:user:createItem" | "portal:user:invitePartneredCollaborationMembers" | "portal:user:joinGroup" | "portal:user:joinNonOrgGroup" | "portal:user:reassignItems" | "portal:user:receiveItems" | "portal:user:runWebTool" | "portal:user:shareGroupToOrg" | "portal:user:shareGroupToPublic" | "portal:user:shareToGroup" | "portal:user:shareToOrg" | "portal:user:shareToPublic" | "portal:user:viewHostedFeatureServices" | "portal:user:viewHostedTileServices" | "portal:user:viewOrgGroups" | "portal:user:viewOrgItems" | "portal:user:viewOrgUsers" | "portal:user:viewTracks";

package/dist/types/permissions/types/PolicyResponse.d.ts

@@ -0,0 +1,4 @@
+/**`
+ * Human readable response from a policy check
+ */
+export declare type PolicyResponse = "granted" | "org-member" | "not-org-member" | "group-member" | "not-group-member" | "not-group-admin" | "is-user" | "not-owner" | "not-licensed" | "not-licensed-available" | "not-available" | "not-granted" | "no-edit-access" | "edit-access" | "invalid-permission" | "privilege-required" | "system-offline" | "system-maintenance" | "entity-required" | "not-authenticated" | "not-alpha-org" | "property-missing" | "property-not-array" | "array-contains-invalid-value" | "array-missing-required-value" | "property-mismatch" | "user-not-group-member" | "user-not-group-manager" | "user-not-group-owner" | "assertion-property-not-found" | "assertion-failed" | "assertion-requires-numeric-values" | "property-match";

package/dist/types/permissions/types/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./HubLicense";
+export * from "./IAccessResponse";
+export * from "./IEntityPermissionPolicy";
+export * from "./IPermissionPolicy";
+export * from "./IPolicyCheck";
+export * from "./Permission";
+export * from "./PlatformPrivilege";
+export * from "./PolicyResponse";

package/dist/types/permissions/utils.d.ts

@@ -0,0 +1,18 @@
+import { IEntityPermissionPolicy, Permission } from "./types";
+/**
+ * Add a policy to an array of entity policies
+ * Returns a new array
+ * @param permissions
+ * @param policy
+ * @returns
+ */
+export declare function addPermissionPolicy(permissions: IEntityPermissionPolicy[], policy: IEntityPermissionPolicy): IEntityPermissionPolicy[];
+/**
+ * Remove a policy from an array of entity policies
+ * Returns a new array
+ * @param permissions
+ * @param permission
+ * @param id
+ * @returns
+ */
+export declare function removePermissionPolicy(permissions: IEntityPermissionPolicy[], permission: Permission, id: string): IEntityPermissionPolicy[];

package/dist/types/projects/HubProject.d.ts

@@ -1,4 +1,4 @@
-import { IHubProject, IWithPermissionBehavior, IWithCatalogBehavior, PermissionManager, IWithStoreBehavior, IWithSharingBehavior, UiSchemaElementOptions } from "../core";
+import { IHubProject, IWithPermissionBehavior, IWithCatalogBehavior, IWithStoreBehavior, IWithSharingBehavior, UiSchemaElementOptions } from "../core";
 import { Catalog } from "../search/Catalog";
 import { IArcGISContext } from "../ArcGISContext";
 import { HubItemEntity } from "../core/HubItemEntity";
@@ -8,7 +8,6 @@ import { EditorConfigType, IEditorConfig } from "../core/behaviors/IWithEditorBe
  */
 export declare class HubProject extends HubItemEntity<IHubProject> implements IWithStoreBehavior<IHubProject>, IWithPermissionBehavior, IWithCatalogBehavior, IWithSharingBehavior {
     private _catalog;
-    private _permissionManager;
     /**
      * Private constructor so we don't have `new` all over the place. Allows for
      * more flexibility in how we create the HubProjectManager over time.
@@ -20,11 +19,6 @@ export declare class HubProject extends HubItemEntity<IHubProject> implements IW
      * @returns
      */
     get catalog(): Catalog;
-    /**
-     * PermissionManager instance for this project. Note: Do not hold direct references to this object; always access it from the project.
-     * @returns
-     */
-    get permissions(): PermissionManager;
     /**
      * Create an instance from an IHubProject object
      * @param json - JSON object to create a HubProject from

package/dist/types/projects/_internal/ProjectPermissionPolicies.d.ts

@@ -0,0 +1,8 @@
+import { IPermissionPolicy } from "../../permissions/types";
+/**
+ * Project Permission Policies
+ * These define the requirements any user must meet to perform related actions
+ * @private
+ */
+export declare const ProjectPermissions: readonly ["hub:project:create", "hub:project:delete", "hub:project:edit", "hub:project:view"];
+export declare const ProjectPermissionPolicies: IPermissionPolicy[];

package/dist/types/sites/HubSite.d.ts

@@ -1,4 +1,4 @@
-import { IHubSite, IWithPermissionBehavior, IWithCatalogBehavior, PermissionManager, IWithStoreBehavior, IWithSharingBehavior } from "../core";
+import { IHubSite, IWithPermissionBehavior, IWithCatalogBehavior, IWithStoreBehavior, IWithSharingBehavior } from "../core";
 import { Catalog } from "../search/Catalog";
 import { IArcGISContext } from "../ArcGISContext";
 import { HubItemEntity } from "../core/HubItemEntity";
@@ -9,7 +9,6 @@ import { IContainsResponse, IDeepCatalogInfo } from "../search";
  */
 export declare class HubSite extends HubItemEntity<IHubSite> implements IWithStoreBehavior<IHubSite>, IWithPermissionBehavior, IWithCatalogBehavior, IWithSharingBehavior {
     private _catalog;
-    private _permissionManager;
     private _catalogCache;
     /**
      * Private constructor so we don't have `new` all over the place. Allows for
@@ -22,11 +21,6 @@ export declare class HubSite extends HubItemEntity<IHubSite> implements IWithSto
      * @returns
      */
     get catalog(): Catalog;
-    /**
-     * PermissionManager instance for this site. Note: Do not hold direct references to this object; always access it from the site.
-     * @returns
-     */
-    get permissions(): PermissionManager;
     /**
      * Create an instance from an IHubSite object
      * @param json - JSON object to create a HubSite from

package/dist/types/sites/HubSites.d.ts

@@ -57,7 +57,7 @@ export declare function fetchSite(identifier: string, requestOptions: IHubReques
  * @param requestOptions
  * @returns
  */
-export declare function convertModelToSite(model: IModel, requestOptions: IHubRequestOptions): IHubSite;
+export declare function convertModelToSite(model: IModel, requestOptions: IRequestOptions): IHubSite;
 /**
  * Convert a Hub Site Application item into a Hub Site, fetching any
  * additional information that may be required

package/dist/types/sites/_internal/SitesPermissionPolicies.d.ts

@@ -0,0 +1,11 @@
+import { IPermissionPolicy } from "../../permissions/types";
+/**
+ * Site Permissions
+ * This feeds into the Permissions type
+ */
+export declare const SitePermissions: readonly ["hub:site:create", "hub:site:delete", "hub:site:edit", "hub:site:view"];
+/**
+ * Site permission policies
+ * @private
+ */
+export declare const SitesPermissionPolicies: IPermissionPolicy[];

package/dist/types/sites/_internal/applyPermissionMigration.d.ts

@@ -0,0 +1,7 @@
+import { IModel } from "../../index";
+/**
+ * Informal migration that creates default permission policies based on the
+ * Content and Collaboration Groups
+ * @param model
+ */
+export declare function applyPermissionMigration(model: IModel): IModel;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esri/hub-common",
-  "version": "11.23.3",
+  "version": "12.0.0-alpha.2",
   "description": "Common TypeScript types and utility functions for @esri/hub.js.",
   "main": "dist/node/index.js",
   "module": "dist/esm/index.js",