@esri/hub-common 14.2.0 → 14.3.0

package/dist/node/permissions/_internal/checkEntityFeature.js

@@ -3,6 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkEntityFeature = void 0;
 const get_with_default_1 = require("../../objects/get-with-default");
 const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
+// NOTE: Entity Feature Flagging is handled in checkPermission directly
+// as it needs to interact with the feature flagging, and depending on
+// the outcome, possibly omit some of the checks
 function checkEntityFeature(policy, _entitycontext, entity) {
     const checks = [];
     // Only check things if the policy can be configured by the entity

package/dist/node/permissions/_internal/checkEntityFeature.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkEntityFeature.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEntityFeature.ts"],"names":[],"mappings":";;;AACA,qEAAgE;AAIhE,mEAAgE;AAEhE,SAAgB,kBAAkB,CAChC,MAAyB,EACzB,cAA8B,EAC9B,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,MAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE;QACvC,MAAM,MAAM,GAAG,iBAAmC,CAAC;QACnD,uCAAuC;QACvC,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,kBAAkB,MAAM,CAAC,UAAU,QAAQ;YAClD,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QAEF,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,iCAAc,CACrC,MAAM,EACN,YAAY,MAAM,CAAC,UAAU,EAAE,EAC/B,IAAI,CACL,CAAC;QACF,IAAI,CAAC,gBAAgB,EAAE;YACrB,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC;YACpC,KAAK,CAAC,IAAI,GAAG,6CAAqB,CAAC,kBAAkB,CAAC,CAAC;SACxD;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA/BD,gDA+BC"}
+{"version":3,"file":"checkEntityFeature.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkEntityFeature.ts"],"names":[],"mappings":";;;AACA,qEAAgE;AAIhE,mEAAgE;AAEhE,uEAAuE;AACvE,sEAAsE;AACtE,gDAAgD;AAChD,SAAgB,kBAAkB,CAChC,MAAyB,EACzB,cAA8B,EAC9B,MAA4B;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,MAAM,IAAI,MAAM,CAAC,kBAAkB,EAAE;QACvC,MAAM,MAAM,GAAG,iBAAmC,CAAC;QACnD,uCAAuC;QACvC,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,kBAAkB,MAAM,CAAC,UAAU,QAAQ;YAClD,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QAEF,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,iCAAc,CACrC,MAAM,EACN,YAAY,MAAM,CAAC,UAAU,EAAE,EAC/B,IAAI,CACL,CAAC;QACF,IAAI,CAAC,gBAAgB,EAAE;YACrB,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC;YACpC,KAAK,CAAC,IAAI,GAAG,6CAAqB,CAAC,kBAAkB,CAAC,CAAC;SACxD;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA/BD,gDA+BC"}

package/dist/node/permissions/_internal/checkLicense.js

@@ -9,7 +9,7 @@ const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
  * @param context
  * @returns
  */
-function checkLicense(policy, context, entity) {
+function checkLicense(policy, context, _entity) {
     var _a;
     const checks = [];
     // Only return a check if the policy is defined

package/dist/node/permissions/_internal/checkLicense.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkLicense.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkLicense.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,YAAY,CAC1B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;;IAE5B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,QAAQ,0CAAE,MAAM,EAAE;QAC3B,IAAI,MAAM,GAAmB,SAAS,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACjD,MAAM,GAAG,eAAe,CAAC;YACzB,6BAA6B;YAC7B,IACE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;gBACpC,OAAO,CAAC,UAAU,KAAK,WAAW,EAClC;gBACA,MAAM,GAAG,cAAc,CAAC,CAAC,+BAA+B;aACzD;SACF;QAED,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA9BD,oCA8BC"}
+{"version":3,"file":"checkLicense.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkLicense.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,YAAY,CAC1B,MAAyB,EACzB,OAAuB,EACvB,OAA6B;;IAE7B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,QAAQ,0CAAE,MAAM,EAAE;QAC3B,IAAI,MAAM,GAAmB,SAAS,CAAC;QAEvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACjD,MAAM,GAAG,eAAe,CAAC;YACzB,6BAA6B;YAC7B,IACE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;gBACpC,OAAO,CAAC,UAAU,KAAK,WAAW,EAClC;gBACA,MAAM,GAAG,cAAc,CAAC,CAAC,+BAA+B;aACzD;SACF;QAED,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA9BD,oCA8BC"}

package/dist/node/permissions/_internal/checkPrivileges.js

@@ -6,10 +6,10 @@ const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
  * Validate privilege policy
  * @param policy
  * @param context
- * @param entity
+ * @param _entity
  * @returns
  */
-function checkPrivileges(policy, context, entity) {
+function checkPrivileges(policy, context, _entity) {
     var _a;
     let checks = [];
     // Only return a check if the policy is defined

package/dist/node/permissions/_internal/checkPrivileges.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkPrivileges.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkPrivileges.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,MAAyB,EACzB,OAAuB,EACvB,MAA4B;;IAE5B,IAAI,MAAM,GAAG,EAAoB,CAAC;IAClC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,UAAU,0CAAE,MAAM,EAAE;QAC7B,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YAC3C,IAAI,QAAQ,GAAmB,SAAS,CAAC;YACzC,IAAI,KAAK,GAAG,mBAAmB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACvD,QAAQ,GAAG,oBAAoB,CAAC;gBAChC,KAAK,GAAG,mBAAmB,CAAC;aAC7B;YACD,OAAO;gBACL,IAAI,EAAE,uBAAuB,SAAS,EAAE;gBACxC,KAAK;gBACL,QAAQ;gBACR,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;aACtB,CAAC;QACpB,CAAC,CAAC,CAAC;KACJ;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAzBD,0CAyBC"}
+{"version":3,"file":"checkPrivileges.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkPrivileges.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,MAAyB,EACzB,OAAuB,EACvB,OAA6B;;IAE7B,IAAI,MAAM,GAAG,EAAoB,CAAC;IAClC,+CAA+C;IAC/C,UAAI,MAAM,CAAC,UAAU,0CAAE,MAAM,EAAE;QAC7B,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YAC3C,IAAI,QAAQ,GAAmB,SAAS,CAAC;YACzC,IAAI,KAAK,GAAG,mBAAmB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACvD,QAAQ,GAAG,oBAAoB,CAAC;gBAChC,KAAK,GAAG,mBAAmB,CAAC;aAC7B;YACD,OAAO;gBACL,IAAI,EAAE,uBAAuB,SAAS,EAAE;gBACxC,KAAK;gBACL,QAAQ;gBACR,IAAI,EAAE,6CAAqB,CAAC,QAAQ,CAAC;aACtB,CAAC;QACpB,CAAC,CAAC,CAAC;KACJ;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAzBD,0CAyBC"}

package/dist/node/permissions/_internal/getPolicyResponseCode.js

@@ -41,6 +41,9 @@ const policyResponseCodes = [
     { response: "not-in-environment", code: "PC134" },
     { response: "feature-disabled", code: "PC135" },
     { response: "feature-enabled", code: "PC136" },
+    { response: "no-policy-exists", code: "PC137" },
+    { response: "disabled-by-entity-flag", code: "PC137" },
+    { response: "disabled-by-feature-flag", code: "PC137" },
 ];
 /**
  * Get a code that can be used for i18n or other purposes, based on the PolicyResponse

package/dist/node/permissions/_internal/getPolicyResponseCode.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPolicyResponseCode.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/getPolicyResponseCode.ts"],"names":[],"mappings":";;;AAOA,wEAAwE;AACxE,+DAA+D;AAC/D,MAAM,mBAAmB,GAAoB;IAC3C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE;IACpD,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE;IACnD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;CAC/C,CAAC;AAEF;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACvE,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,KAAI,OAAO,CAAC;AAChC,CAAC;AAHD,sDAGC"}
+{"version":3,"file":"getPolicyResponseCode.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/getPolicyResponseCode.ts"],"names":[],"mappings":";;;AAOA,wEAAwE;AACxE,+DAA+D;AAC/D,MAAM,mBAAmB,GAAoB;IAC3C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IACxC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAChD,EAAE,QAAQ,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE;IACpD,EAAE,QAAQ,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,QAAQ,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE;IACnD,EAAE,QAAQ,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7C,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE;IACjD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,QAAQ,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,QAAQ,EAAE,0BAA0B,EAAE,IAAI,EAAE,OAAO,EAAE;CACxD,CAAC;AAEF;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACvE,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,KAAI,OAAO,CAAC;AAChC,CAAC;AAHD,sDAGC"}

package/dist/node/permissions/checkPermission.js

@@ -4,10 +4,9 @@ exports.checkPermission = void 0;
 const objects_1 = require("../objects");
 const checkLicense_1 = require("./_internal/checkLicense");
 const HubPermissionPolicies_1 = require("./HubPermissionPolicies");
-const types_1 = require("./types");
+const Permission_1 = require("./types/Permission");
 const getPolicyResponseCode_1 = require("./_internal/getPolicyResponseCode");
 const checkAuthentication_1 = require("./_internal/checkAuthentication");
-const checkAlphaGating_1 = require("./_internal/checkAlphaGating");
 const checkOwner_1 = require("./_internal/checkOwner");
 const checkEdit_1 = require("./_internal/checkEdit");
 const checkPrivileges_1 = require("./_internal/checkPrivileges");
@@ -16,7 +15,6 @@ const checkAssertions_1 = require("./_internal/checkAssertions");
 const checkParents_1 = require("./_internal/checkParents");
 const checkEnvironment_1 = require("./_internal/checkEnvironment");
 const checkAvailability_1 = require("./_internal/checkAvailability");
-const checkEntityFeature_1 = require("./_internal/checkEntityFeature");
 const checkServiceStatus_1 = require("./_internal/checkServiceStatus");
 /**
  * Check a permission against the system policies, and possibly an entity policy
@@ -28,93 +26,159 @@ const checkServiceStatus_1 = require("./_internal/checkServiceStatus");
  * @returns
  */
 function checkPermission(permission, context, entityOrOptions) {
+    var _a;
     const label = (entityOrOptions === null || entityOrOptions === void 0 ? void 0 : entityOrOptions.label) || "";
     const entity = (entityOrOptions === null || entityOrOptions === void 0 ? void 0 : entityOrOptions.entity) || entityOrOptions;
-    // Default to granted
-    let response = {
-        policy: permission,
-        access: true,
-        response: "granted",
-        code: getPolicyResponseCode_1.getPolicyResponseCode("granted"),
-        checks: [],
-    };
     // Is this even a valid permission?
-    if (!types_1.isPermission(permission)) {
-        response = {
+    if (!Permission_1.isPermission(permission)) {
+        const invalidPermissionResponse = {
             policy: permission,
             access: false,
             response: "invalid-permission",
             code: getPolicyResponseCode_1.getPolicyResponseCode("invalid-permission"),
             checks: [],
         };
+        logResponse(invalidPermissionResponse, label);
+        return invalidPermissionResponse;
+    }
+    // Get the system policy for this permission
+    const systemPolicy = HubPermissionPolicies_1.getPermissionPolicy(permission);
+    // handle null systemPolicy
+    if (!systemPolicy) {
+        const missingPolicyResponse = {
+            policy: permission,
+            access: false,
+            response: "no-policy-exists",
+            code: getPolicyResponseCode_1.getPolicyResponseCode("no-policy-exists"),
+            checks: [],
+        };
+        logResponse(missingPolicyResponse, label);
+        return missingPolicyResponse;
+    }
+    const flagging = {
+        hasFlag: false,
+        value: false,
+        type: "none",
+    };
+    // Entity Feature Flags
+    // aka how we disable "features" on a per-entity basis
+    // Is this policy configurable by the entity?
+    if (systemPolicy.entityConfigurable) {
+        // Has the entity provided a flag value?
+        if ((_a = entity === null || entity === void 0 ? void 0 : entity.features) === null || _a === void 0 ? void 0 : _a.hasOwnProperty(permission)) {
+            flagging.hasFlag = true;
+            flagging.value = entity.features[permission];
+            flagging.type = "entity";
+        }
+    }
+    // Feature Flags
+    // Passed in from the application when context is created,
+    // these override entity flags, so they are checked after
+    if (context.featureFlags.hasOwnProperty(permission)) {
+        flagging.hasFlag = true;
+        flagging.value = context.featureFlags[permission];
+        flagging.type = "feature";
+    }
+    // in all cases, if flag exists and false, access is denied
+    if (flagging.hasFlag && !flagging.value) {
+        const respValue = `disabled-by-${flagging.type}-flag`;
+        const disabledByFlagResponse = {
+            policy: permission,
+            access: false,
+            response: respValue,
+            code: getPolicyResponseCode_1.getPolicyResponseCode(respValue),
+            checks: [],
+        };
+        logResponse(disabledByFlagResponse, label);
+        return disabledByFlagResponse;
+    }
+    // required checks - things feature flags can not override
+    const requiredChecks = [
+        checkParents_1.checkParents,
+        checkServiceStatus_1.checkServiceStatus,
+        checkAuthentication_1.checkAuthentication,
+        checkPrivileges_1.checkPrivileges,
+        checkOwner_1.checkOwner,
+        checkEdit_1.checkEdit,
+        checkLicense_1.checkLicense,
+        checkAssertions_1.checkAssertions,
+    ];
+    // checks that feature flags can override
+    const overridableChecks = [
+        checkAvailability_1.checkAvailability,
+        checkEnvironment_1.checkEnvironment,
+    ];
+    let checkFns = [];
+    // If there is a "feature" flag, set to true, for the policy
+    // we just run the required checks
+    if (flagging.hasFlag && flagging.value && flagging.type === "feature") {
+        checkFns = [...requiredChecks];
     }
     else {
-        // Get the system policy for this permission
-        const systemPolicy = HubPermissionPolicies_1.getPermissionPolicy(permission);
-        // TODO: handle null systemPolicy
-        const checks = [
-            checkParents_1.checkParents,
-            checkServiceStatus_1.checkServiceStatus,
-            checkEntityFeature_1.checkEntityFeature,
-            checkAuthentication_1.checkAuthentication,
-            checkEnvironment_1.checkEnvironment,
-            checkAvailability_1.checkAvailability,
-            checkLicense_1.checkLicense,
-            checkPrivileges_1.checkPrivileges,
-            checkOwner_1.checkOwner,
-            checkEdit_1.checkEdit,
-            checkAssertions_1.checkAssertions,
-            checkAlphaGating_1.checkAlphaGating,
-        ].reduce((acc, fn) => {
-            acc = [...acc, ...fn(systemPolicy, context, entity)];
-            return acc;
-        }, []);
-        // For system policies, all conditions must be met, so we can
-        // iterate through the checks and set the response to the first failure
-        // while still returning all the checks for observability
-        checks.forEach((check) => {
-            if (check.response !== "granted" && response.response === "granted") {
-                response.response = check.response;
-                response.code = check.code;
-                response.access = false;
-            }
+        // otherwise we run all the checks
+        checkFns = [...overridableChecks, ...requiredChecks];
+    }
+    // execute the checks
+    const checks = checkFns.reduce((acc, fn) => {
+        acc = [...acc, ...fn(systemPolicy, context, entity)];
+        return acc;
+    }, []);
+    // Default to granted
+    const response = {
+        policy: permission,
+        access: true,
+        response: "granted",
+        code: getPolicyResponseCode_1.getPolicyResponseCode("granted"),
+        checks: [],
+    };
+    // For system policies, all conditions must be met, so we can
+    // iterate through the checks and set the response to the first failure
+    // while still returning all the checks for observability
+    checks.forEach((check) => {
+        if (check.response !== "granted" && response.response === "granted") {
+            response.response = check.response;
+            response.code = check.code;
+            response.access = false;
+        }
+    });
+    response.checks = checks;
+    // Entity policies are treated as "grants" so we only need to pass one
+    if (entity) {
+        const entityPolicies = objects_1.getWithDefault(entity, "permissions", []);
+        const entityPermissionPolicies = entityPolicies.filter((e) => e.permission === permission);
+        // Entity Policies are "grants" in that only one needs to pass
+        // but we still want each check returned so we can see why they
+        // got access or got denied
+        const entityChecks = entityPermissionPolicies.map((policy) => {
+            return checkEntityPolicy_1.checkEntityPolicy(policy, context);
         });
-        response.checks = checks;
-        // Entity policies are treated as "grants" so we only need to pass one
-        if (entity) {
-            const entityPolicies = objects_1.getWithDefault(entity, "permissions", []);
-            const entityPermissionPolicies = entityPolicies.filter((e) => e.permission === permission);
-            // Entity Policies are "grants" in that only one needs to pass
-            // but we still want each check returned so we can see why they
-            // got access or got denied
-            const entityChecks = entityPermissionPolicies.map((policy) => {
-                return checkEntityPolicy_1.checkEntityPolicy(policy, context);
-            });
-            // Process them to see if any grant access
-            const grantedCheck = entityChecks.find((e) => e.response === "granted");
-            // If we did not find a check that grants access, AND we've passed
-            // all the system checks, then we set the response to "not-granted"
-            // and set the access to false
-            if (entityChecks.length &&
-                !grantedCheck &&
-                response.response === "granted") {
-                response.access = false;
-                response.response = "not-granted";
-            }
-            // Merge in the entity checks...
-            response.checks = [...response.checks, ...entityChecks];
+        // Process them to see if any grant access
+        const grantedCheck = entityChecks.find((e) => e.response === "granted");
+        // If we did not find a check that grants access, AND we've passed
+        // all the system checks, then we set the response to "not-granted"
+        // and set the access to false
+        if (entityChecks.length &&
+            !grantedCheck &&
+            response.response === "granted") {
+            response.access = false;
+            response.response = "not-granted";
         }
+        // Merge in the entity checks...
+        response.checks = [...response.checks, ...entityChecks];
     }
-    // log denied access information
+    // log response
+    logResponse(response, label);
+    return response;
+}
+exports.checkPermission = checkPermission;
+function logResponse(response, label) {
     if (!response.access) {
         // tslint:disable-next-line:no-console
-        console.info(`checkPermission: ${label} ${permission} : ${response.response}`);
+        console.info(`checkPermission: ${label} ${response.policy} : ${response.response}`);
         // tslint:disable-next-line:no-console
         console.dir(response);
         // tslint:disable-next-line:no-console
         console.info(`-----------------------------------------`);
     }
-    return response;
 }
-exports.checkPermission = checkPermission;
 //# sourceMappingURL=checkPermission.js.map

package/dist/node/permissions/checkPermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkPermission.js","sourceRoot":"","sources":["../../../src/permissions/checkPermission.ts"],"names":[],"mappings":";;;AACA,wCAA4C;AAC5C,2DAAwD;AACxD,mEAA8D;AAC9D,mCAMiB;AACjB,6EAA0E;AAC1E,yEAAsE;AACtE,mEAAgE;AAChE,uDAAoD;AACpD,qDAAkD;AAClD,iEAA8D;AAC9D,qEAAkE;AAClE,iEAA8D;AAC9D,2DAAwD;AACxD,mEAAgE;AAChE,qEAAkE;AAClE,uEAAoE;AACpE,uEAAoE;AAapE;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC7B,UAAsB,EACtB,OAAuB,EACvB,eAAiC;IAEjC,MAAM,KAAK,GAAG,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,KAAK,KAAI,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,MAAM,KAAI,eAAe,CAAC;IAC1D,qBAAqB;IACrB,IAAI,QAAQ,GAA8B;QACxC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6CAAqB,CAAC,SAAS,CAAC;QACtC,MAAM,EAAE,EAAE;KACX,CAAC;IACF,mCAAmC;IACnC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE;QAC7B,QAAQ,GAAG;YACT,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,oBAAoB;YAC9B,IAAI,EAAE,6CAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,EAAE,EAAE;SACkB,CAAC;KAChC;SAAM;QACL,4CAA4C;QAC5C,MAAM,YAAY,GAAG,2CAAmB,CAAC,UAAU,CAAC,CAAC;QAErD,iCAAiC;QAEjC,MAAM,MAAM,GAAG;YACb,2BAAY;YACZ,uCAAkB;YAClB,uCAAkB;YAClB,yCAAmB;YACnB,mCAAgB;YAChB,qCAAiB;YACjB,2BAAY;YACZ,iCAAe;YACf,uBAAU;YACV,qBAAS;YACT,iCAAe;YACf,mCAAgB;SACjB,CAAC,MAAM,CAAC,CAAC,GAAmB,EAAE,EAAE,EAAE,EAAE;YACnC,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACrD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,6DAA6D;QAC7D,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE;gBACnE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACnC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAC3B,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;aACzB;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QAEzB,sEAAsE;QACtE,IAAI,MAAM,EAAE;YACV,MAAM,cAAc,GAA8B,wBAAc,CAC9D,MAAM,EACN,aAAa,EACb,EAAE,CACH,CAAC;YAEF,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;YACF,8DAA8D;YAC9D,+DAA+D;YAC/D,2BAA2B;YAC3B,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC3D,OAAO,qCAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YACH,0CAA0C;YAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;YACxE,kEAAkE;YAClE,mEAAmE;YACnE,8BAA8B;YAC9B,IACE,YAAY,CAAC,MAAM;gBACnB,CAAC,YAAY;gBACb,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAC/B;gBACA,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBACxB,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC;aACnC;YACD,gCAAgC;YAChC,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;SACzD;KACF;IAED,gCAAgC;IAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QACpB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,oBAAoB,KAAK,IAAI,UAAU,MAAM,QAAQ,CAAC,QAAQ,EAAE,CACjE,CAAC;QACF,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;KAC3D;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA5GD,0CA4GC"}
+{"version":3,"file":"checkPermission.js","sourceRoot":"","sources":["../../../src/permissions/checkPermission.ts"],"names":[],"mappings":";;;AACA,wCAA4C;AAC5C,2DAAwD;AACxD,mEAA8D;AAC9D,mDAA8D;AAC9D,6EAA0E;AAC1E,yEAAsE;AACtE,uDAAoD;AACpD,qDAAkD;AAClD,iEAA8D;AAC9D,qEAAkE;AAClE,iEAA8D;AAC9D,2DAAwD;AACxD,mEAAgE;AAChE,qEAAkE;AAClE,uEAAoE;AAkBpE;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC7B,UAAsB,EACtB,OAAuB,EACvB,eAAiC;;IAEjC,MAAM,KAAK,GAAG,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,KAAK,KAAI,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,MAAM,KAAI,eAAe,CAAC;IAE1D,mCAAmC;IACnC,IAAI,CAAC,yBAAY,CAAC,UAAU,CAAC,EAAE;QAC7B,MAAM,yBAAyB,GAAG;YAChC,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,oBAAoB;YAC9B,IAAI,EAAE,6CAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,EAAE,EAAE;SACkB,CAAC;QAC/B,WAAW,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,yBAAyB,CAAC;KAClC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,2CAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,2BAA2B;IAC3B,IAAI,CAAC,YAAY,EAAE;QACjB,MAAM,qBAAqB,GAAG;YAC5B,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,6CAAqB,CAAC,kBAAkB,CAAC;YAC/C,MAAM,EAAE,EAAE;SACkB,CAAC;QAC/B,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,qBAAqB,CAAC;KAC9B;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;KACb,CAAC;IAEF,uBAAuB;IACvB,sDAAsD;IAEtD,6CAA6C;IAC7C,IAAI,YAAY,CAAC,kBAAkB,EAAE;QACnC,wCAAwC;QACxC,UAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,0CAAE,cAAc,CAAC,UAAU,GAAG;YAChD,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;SAC1B;KACF;IAED,gBAAgB;IAChB,0DAA0D;IAC1D,yDAAyD;IACzD,IAAI,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE;QACnD,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC;KAC3B;IAED,2DAA2D;IAC3D,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE;QACvC,MAAM,SAAS,GAAG,eAAe,QAAQ,CAAC,IAAI,OAAyB,CAAC;QACxE,MAAM,sBAAsB,GAAG;YAC7B,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,6CAAqB,CAAC,SAAS,CAAC;YACtC,MAAM,EAAE,EAAE;SACkB,CAAC;QAC/B,WAAW,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,sBAAsB,CAAC;KAC/B;IAED,0DAA0D;IAC1D,MAAM,cAAc,GAA8B;QAChD,2BAAY;QACZ,uCAAkB;QAClB,yCAAmB;QACnB,iCAAe;QACf,uBAAU;QACV,qBAAS;QACT,2BAAY;QACZ,iCAAe;KAChB,CAAC;IAEF,yCAAyC;IACzC,MAAM,iBAAiB,GAA8B;QACnD,qCAAiB;QACjB,mCAAgB;KACjB,CAAC;IAEF,IAAI,QAAQ,GAA8B,EAAE,CAAC;IAC7C,4DAA4D;IAC5D,kCAAkC;IAClC,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;QACrE,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;KAChC;SAAM;QACL,kCAAkC;QAClC,QAAQ,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,cAAc,CAAC,CAAC;KACtD;IAED,qBAAqB;IACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAmB,EAAE,EAAE,EAAE,EAAE;QACzD,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,qBAAqB;IACrB,MAAM,QAAQ,GAA8B;QAC1C,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6CAAqB,CAAC,SAAS,CAAC;QACtC,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,6DAA6D;IAC7D,uEAAuE;IACvE,yDAAyD;IACzD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE;YACnE,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YACnC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAC3B,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IAEzB,sEAAsE;IACtE,IAAI,MAAM,EAAE;QACV,MAAM,cAAc,GAA8B,wBAAc,CAC9D,MAAM,EACN,aAAa,EACb,EAAE,CACH,CAAC;QAEF,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,8DAA8D;QAC9D,+DAA+D;QAC/D,2BAA2B;QAC3B,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3D,OAAO,qCAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,0CAA0C;QAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QACxE,kEAAkE;QAClE,mEAAmE;QACnE,8BAA8B;QAC9B,IACE,YAAY,CAAC,MAAM;YACnB,CAAC,YAAY;YACb,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAC/B;YACA,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC;SACnC;QACD,gCAAgC;QAChC,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;KACzD;IAED,eAAe;IACf,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AA7KD,0CA6KC;AAED,SAAS,WAAW,CAAC,QAAmC,EAAE,KAAa;IACrE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QACpB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,oBAAoB,KAAK,IAAI,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,QAAQ,EAAE,CACtE,CAAC;QACF,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;KAC3D;AACH,CAAC"}

package/dist/node/projects/_internal/ProjectBusinessRules.js

@@ -74,6 +74,7 @@ exports.ProjectPermissionPolicies = [
     {
         permission: "hub:project:events",
         dependencies: ["hub:project:view"],
+        entityConfigurable: true,
     },
     {
         permission: "hub:project:content",

package/dist/node/projects/_internal/ProjectBusinessRules.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectBusinessRules.js","sourceRoot":"","sources":["../../../../src/projects/_internal/ProjectBusinessRules.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACU,QAAA,sBAAsB,GAAkB;IACnD,oBAAoB,EAAE,KAAK;IAC3B,qBAAqB,EAAE,IAAI;IAC3B,yBAAyB,EAAE,KAAK;CACjC,CAAC;AAEF;;;;GAIG;AACU,QAAA,kBAAkB,GAAG;IAChC,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,yBAAyB;IACzB,gCAAgC;IAChC,iCAAiC;IACjC,+BAA+B;IAC/B,gCAAgC;IAChC,qCAAqC;IACrC,+BAA+B;IAC/B,+BAA+B;CACvB,CAAC;AAEX;;;GAGG;AACU,QAAA,yBAAyB,GAAwB;IAC5D;QACE,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,UAAU,EAAE,CAAC,wBAAwB,CAAC;KACvC;IACD;QACE,4BAA4B;QAC5B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD;QACE,UAAU,EAAE,kBAAkB;QAC9B,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,IAAI;KACjB;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,yBAAyB;QACrC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,iCAAiC;QAC7C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAClC,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;CACF,CAAC"}
+{"version":3,"file":"ProjectBusinessRules.js","sourceRoot":"","sources":["../../../../src/projects/_internal/ProjectBusinessRules.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACU,QAAA,sBAAsB,GAAkB;IACnD,oBAAoB,EAAE,KAAK;IAC3B,qBAAqB,EAAE,IAAI;IAC3B,yBAAyB,EAAE,KAAK;CACjC,CAAC;AAEF;;;;GAIG;AACU,QAAA,kBAAkB,GAAG;IAChC,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,yBAAyB;IACzB,gCAAgC;IAChC,iCAAiC;IACjC,+BAA+B;IAC/B,gCAAgC;IAChC,qCAAqC;IACrC,+BAA+B;IAC/B,+BAA+B;CACvB,CAAC;AAEX;;;GAGG;AACU,QAAA,yBAAyB,GAAwB;IAC5D;QACE,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,UAAU,EAAE,CAAC,wBAAwB,CAAC;KACvC;IACD;QACE,4BAA4B;QAC5B,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD;QACE,UAAU,EAAE,kBAAkB;QAC9B,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,IAAI;KACjB;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAClC,kBAAkB,EAAE,IAAI;KACzB;IACD;QACE,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,yBAAyB;QACrC,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,iCAAiC;QAC7C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAClC,WAAW,EAAE,IAAI;KAClB;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACnC;CACF,CAAC"}

package/dist/types/ArcGISContext.d.ts

@@ -161,7 +161,7 @@ export interface IArcGISContext {
     /**
      * Hash of feature flags
      */
-    featureFlags?: IFeatureFlags;
+    featureFlags: IFeatureFlags;
 }
 /**
  * Options for the ArcGISContext constructor

package/dist/types/permissions/_internal/PermissionCheckFunction.d.ts

@@ -0,0 +1,7 @@
+import { IArcGISContext } from "../../ArcGISContext";
+import { IPermissionPolicy } from "../types/IPermissionPolicy";
+import { IPolicyCheck } from "../types/IPolicyCheck";
+/**
+ * Type signature for Permission Check Functions
+ */
+export declare type PermissionCheckFunction = (policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>) => IPolicyCheck[];

package/dist/types/permissions/_internal/checkAuthentication.d.ts

@@ -7,4 +7,4 @@ import { IPermissionPolicy, IPolicyCheck } from "../types";
  * @param entity
  * @returns
  */
-export declare function checkAuthentication(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];
+export declare function checkAuthentication(policy: IPermissionPolicy, context: IArcGISContext, _entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkLicense.d.ts

@@ -7,4 +7,4 @@ import { IPermissionPolicy, IPolicyCheck } from "../types";
  * @param context
  * @returns
  */
-export declare function checkLicense(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];
+export declare function checkLicense(policy: IPermissionPolicy, context: IArcGISContext, _entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/_internal/checkPrivileges.d.ts

@@ -4,7 +4,7 @@ import { IPermissionPolicy, IPolicyCheck } from "../types";
  * Validate privilege policy
  * @param policy
  * @param context
- * @param entity
+ * @param _entity
  * @returns
  */
-export declare function checkPrivileges(policy: IPermissionPolicy, context: IArcGISContext, entity?: Record<string, any>): IPolicyCheck[];
+export declare function checkPrivileges(policy: IPermissionPolicy, context: IArcGISContext, _entity?: Record<string, any>): IPolicyCheck[];

package/dist/types/permissions/checkPermission.d.ts

@@ -1,5 +1,6 @@
 import { IArcGISContext } from "../ArcGISContext";
-import { IPermissionAccessResponse, Permission } from "./types";
+import { Permission } from "./types/Permission";
+import { IPermissionAccessResponse } from "./types/IPermissionAccessResponse";
 /**
  * Type to allow either an entity or and entity and label to be
  * passed into `checkPermission`

package/dist/types/permissions/types/IPermissionPolicy.d.ts

@@ -58,10 +58,6 @@ export interface IPermissionPolicy {
      * Must the user be the owner of the entity being accessed?
      */
     entityOwner?: boolean;
-    /**
-     * DEPRECATED: Use `gatedAvailability: "alpha"` instead
-     */
-    alpha?: boolean;
     /**
      * More complex policies can be defined with a set of assertions
      */

package/dist/types/permissions/types/PolicyResponse.d.ts

@@ -1,4 +1,4 @@
 /**`
  * Human readable response from a policy check
  */
-export declare type PolicyResponse = "granted" | "org-member" | "not-org-member" | "group-member" | "not-group-member" | "not-group-admin" | "is-user" | "not-owner" | "not-licensed" | "not-licensed-available" | "not-available" | "not-granted" | "no-edit-access" | "edit-access" | "invalid-permission" | "invalid-capability" | "privilege-required" | "service-offline" | "service-maintenance" | "service-not-available" | "entity-required" | "not-authenticated" | "not-alpha-org" | "not-beta-org" | "property-missing" | "property-not-array" | "array-contains-invalid-value" | "array-missing-required-value" | "property-mismatch" | "user-not-group-member" | "user-not-group-manager" | "user-not-group-owner" | "assertion-property-not-found" | "assertion-failed" | "assertion-requires-numeric-values" | "property-match" | "feature-disabled" | "feature-enabled" | "not-in-environment";
+export declare type PolicyResponse = "granted" | "disabled-by-feature-flag" | "disabled-by-entity-flag" | "org-member" | "not-org-member" | "group-member" | "not-group-member" | "not-group-admin" | "is-user" | "not-owner" | "not-licensed" | "not-licensed-available" | "not-available" | "not-granted" | "no-edit-access" | "edit-access" | "invalid-permission" | "invalid-capability" | "privilege-required" | "service-offline" | "service-maintenance" | "service-not-available" | "entity-required" | "not-authenticated" | "not-alpha-org" | "not-beta-org" | "property-missing" | "property-not-array" | "array-contains-invalid-value" | "array-missing-required-value" | "property-mismatch" | "user-not-group-member" | "user-not-group-manager" | "user-not-group-owner" | "assertion-property-not-found" | "assertion-failed" | "assertion-requires-numeric-values" | "property-match" | "feature-disabled" | "feature-enabled" | "not-in-environment" | "no-policy-exists";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esri/hub-common",
-  "version": "14.2.0",
+  "version": "14.3.0",
   "description": "Common TypeScript types and utility functions for @esri/hub.js.",
   "main": "dist/node/index.js",
   "module": "dist/esm/index.js",

package/dist/esm/permissions/_internal/checkAlphaGating.js

@@ -1,29 +0,0 @@
-import { getPolicyResponseCode } from "./getPolicyResponseCode";
-/**
- * Validate entityOwner policy
- * @param policy
- * @param context
- * @param entity
- * @returns
- */
-export function checkAlphaGating(policy, context, _entity) {
-    const checks = [];
-    // Only return a check if the policy is defined
-    if (policy.alpha) {
-        /* tslint:disable-next-line: no-console */
-        console.log("DEPRECATED: alpha policy is deprecated, please use gatedAvailability: alpha instead");
-        const result = context.isAlphaOrg
-            ? "granted"
-            : "not-alpha-org";
-        // create the check
-        const check = {
-            name: `user in alpha org`,
-            value: context.hubLicense,
-            code: getPolicyResponseCode(result),
-            response: result,
-        };
-        checks.push(check);
-    }
-    return checks;
-}
-//# sourceMappingURL=checkAlphaGating.js.map

package/dist/esm/permissions/_internal/checkAlphaGating.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkAlphaGating.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAlphaGating.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAyB,EACzB,OAAuB,EACvB,OAA6B;IAE7B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,KAAK,EAAE;QAChB,0CAA0C;QAC1C,OAAO,CAAC,GAAG,CACT,qFAAqF,CACtF,CAAC;QAEF,MAAM,MAAM,GAAmB,OAAO,CAAC,UAAU;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,eAAe,CAAC;QAEpB,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/node/permissions/_internal/checkAlphaGating.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkAlphaGating = void 0;
-const getPolicyResponseCode_1 = require("./getPolicyResponseCode");
-/**
- * Validate entityOwner policy
- * @param policy
- * @param context
- * @param entity
- * @returns
- */
-function checkAlphaGating(policy, context, _entity) {
-    const checks = [];
-    // Only return a check if the policy is defined
-    if (policy.alpha) {
-        /* tslint:disable-next-line: no-console */
-        console.log("DEPRECATED: alpha policy is deprecated, please use gatedAvailability: alpha instead");
-        const result = context.isAlphaOrg
-            ? "granted"
-            : "not-alpha-org";
-        // create the check
-        const check = {
-            name: `user in alpha org`,
-            value: context.hubLicense,
-            code: getPolicyResponseCode_1.getPolicyResponseCode(result),
-            response: result,
-        };
-        checks.push(check);
-    }
-    return checks;
-}
-exports.checkAlphaGating = checkAlphaGating;
-//# sourceMappingURL=checkAlphaGating.js.map

package/dist/node/permissions/_internal/checkAlphaGating.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkAlphaGating.js","sourceRoot":"","sources":["../../../../src/permissions/_internal/checkAlphaGating.ts"],"names":[],"mappings":";;;AAEA,mEAAgE;AAEhE;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,MAAyB,EACzB,OAAuB,EACvB,OAA6B;IAE7B,MAAM,MAAM,GAAG,EAAoB,CAAC;IACpC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,KAAK,EAAE;QAChB,0CAA0C;QAC1C,OAAO,CAAC,GAAG,CACT,qFAAqF,CACtF,CAAC;QAEF,MAAM,MAAM,GAAmB,OAAO,CAAC,UAAU;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,eAAe,CAAC;QAEpB,mBAAmB;QACnB,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,OAAO,CAAC,UAAU;YACzB,IAAI,EAAE,6CAAqB,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACpB;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA5BD,4CA4BC"}

package/dist/types/permissions/_internal/checkAlphaGating.d.ts

@@ -1,10 +0,0 @@
-import { IArcGISContext } from "../../ArcGISContext";
-import { IPermissionPolicy, IPolicyCheck } from "../types";
-/**
- * Validate entityOwner policy
- * @param policy
- * @param context
- * @param entity
- * @returns
- */
-export declare function checkAlphaGating(policy: IPermissionPolicy, context: IArcGISContext, _entity?: Record<string, any>): IPolicyCheck[];