@nocobase/client 0.8.1-alpha.4 → 0.9.0-alpha.2

package/lib/acl/ACLProvider.js

@@ -5,7 +5,9 @@ function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" =
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.useRoleRecheck = exports.useACLRoleContext = exports.useACLContext = exports.default = exports.ACLRolesCheckProvider = exports.ACLProvider = exports.ACLMenuItemProvider = exports.ACLContext = exports.ACLCollectionProvider = exports.ACLCollectionFieldProvider = exports.ACLAllowConfigure = exports.ACLActionProvider = void 0;
+exports.useACLFieldWhitelist = exports.useACLContext = exports.useACLActionParamsContext = exports.default = exports.ACLRolesCheckProvider = exports.ACLProvider = exports.ACLMenuItemProvider = exports.ACLContext = exports.ACLCollectionProvider = exports.ACLCollectionFieldProvider = exports.ACLActionProvider = exports.ACLActionParamsContext = void 0;
+exports.useACLRoleContext = useACLRoleContext;
+exports.useRoleRecheck = exports.useRecordPkValue = exports.useACLRolesCheck = void 0;
 
 var _react = require("@formily/react");
 
@@ -17,8 +19,12 @@ var _reactRouterDom = require("react-router-dom");
 
 var _apiClient = require("../api-client");
 
+var _BlockProvider = require("../block-provider/BlockProvider");
+
 var _collectionManager = require("../collection-manager");
 
+var _ResourceActionProvider = require("../collection-manager/ResourceActionProvider");
+
 var _recordProvider = require("../record-provider");
 
 var _schemaComponent = require("../schema-component");
@@ -27,6 +33,16 @@ function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "functio
 
 function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || _typeof(obj) !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
 
+function _toArray(arr) { return _arrayWithHoles(arr) || _iterableToArray(arr) || _unsupportedIterableToArray(arr) || _nonIterableRest(); }
+
+function _iterableToArray(iter) { if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter); }
+
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+
+function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
+
 function _slicedToArray(arr, i) { return _arrayWithHoles(arr) || _iterableToArrayLimit(arr, i) || _unsupportedIterableToArray(arr, i) || _nonIterableRest(); }
 
 function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
@@ -39,13 +55,7 @@ function _iterableToArrayLimit(arr, i) { var _i = arr == null ? null : typeof Sy
 
 function _arrayWithHoles(arr) { if (Array.isArray(arr)) return arr; }
 
-function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
-
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
-var ACLContext = /*#__PURE__*/(0, _react2.createContext)(null);
+var ACLContext = /*#__PURE__*/(0, _react2.createContext)({});
 exports.ACLContext = ACLContext;
 
 var ACLProvider = function ACLProvider(props) {
@@ -61,7 +71,39 @@ var ACLProvider = function ACLProvider(props) {
 
 exports.ACLProvider = ACLProvider;
 
+var getRouteUrl = function getRouteUrl(props) {
+  var _props$children;
+
+  if (props === null || props === void 0 ? void 0 : props.match) {
+    return props.match;
+  }
+
+  return props && getRouteUrl(props === null || props === void 0 ? void 0 : (_props$children = props.children) === null || _props$children === void 0 ? void 0 : _props$children.props);
+};
+
+var getRouteAclCheck = function getRouteAclCheck(match, snippets) {
+  var _params$name;
+
+  var url = match.url,
+      params = match.params;
+
+  if (url === '/admin/pm/list' || (params === null || params === void 0 ? void 0 : params.pluginName) || (params === null || params === void 0 ? void 0 : (_params$name = params.name) === null || _params$name === void 0 ? void 0 : _params$name.includes('settings'))) {
+    var pmAclCheck = url === '/admin/pm/list' && snippets.includes('pm');
+    var pluginTabByName = params === null || params === void 0 ? void 0 : params.name.split('/');
+    pluginTabByName.shift();
+    var pluginName = params.pluginName || pluginTabByName[0];
+    var tabName = params.tabName || pluginTabByName[1];
+    var pluginTabSnippet = pluginName && tabName && "!pm.".concat(pluginName, ".").concat(tabName);
+    var pluginTabAclCheck = pluginTabSnippet && !snippets.includes(pluginTabSnippet);
+    return pmAclCheck || pluginTabAclCheck;
+  }
+
+  return true;
+};
+
 var ACLRolesCheckProvider = function ACLRolesCheckProvider(props) {
+  var route = getRouteUrl(props.children.props);
+
   var _useDesignable = (0, _schemaComponent.useDesignable)(),
       setDesignable = _useDesignable.setDesignable;
 
@@ -70,16 +112,16 @@ var ACLRolesCheckProvider = function ACLRolesCheckProvider(props) {
     url: 'roles:check'
   }, {
     onSuccess: function onSuccess(data) {
-      var _data$data, _data$data2, _data$data3;
+      var _data$data, _data$data2;
 
-      if (!(data === null || data === void 0 ? void 0 : (_data$data = data.data) === null || _data$data === void 0 ? void 0 : _data$data.allowConfigure) && !(data === null || data === void 0 ? void 0 : (_data$data2 = data.data) === null || _data$data2 === void 0 ? void 0 : _data$data2.allowAll)) {
+      if (!(data === null || data === void 0 ? void 0 : (_data$data = data.data) === null || _data$data === void 0 ? void 0 : _data$data.snippets.includes('ui.*'))) {
         setDesignable(false);
       }
 
-      if ((data === null || data === void 0 ? void 0 : (_data$data3 = data.data) === null || _data$data3 === void 0 ? void 0 : _data$data3.role) !== api.auth.role) {
-        var _data$data4;
+      if ((data === null || data === void 0 ? void 0 : (_data$data2 = data.data) === null || _data$data2 === void 0 ? void 0 : _data$data2.role) !== api.auth.role) {
+        var _data$data3;
 
-        api.auth.setRole(data === null || data === void 0 ? void 0 : (_data$data4 = data.data) === null || _data$data4 === void 0 ? void 0 : _data$data4.role);
+        api.auth.setRole(data === null || data === void 0 ? void 0 : (_data$data3 = data.data) === null || _data$data3 === void 0 ? void 0 : _data$data3.role);
       }
     }
   });
@@ -105,11 +147,10 @@ var useRoleRecheck = function useRoleRecheck() {
   var ctx = (0, _react2.useContext)(ACLContext);
 
   var _useACLRoleContext = useACLRoleContext(),
-      allowAll = _useACLRoleContext.allowAll,
-      allowConfigure = _useACLRoleContext.allowConfigure;
+      allowAll = _useACLRoleContext.allowAll;
 
   return function () {
-    if (allowAll || allowConfigure) {
+    if (allowAll) {
       return;
     }
 
@@ -124,108 +165,172 @@ var useACLContext = function useACLContext() {
 };
 
 exports.useACLContext = useACLContext;
+var ACLActionParamsContext = /*#__PURE__*/(0, _react2.createContext)({});
+exports.ACLActionParamsContext = ACLActionParamsContext;
 
-var useACLRoleContext = function useACLRoleContext() {
+var useACLRolesCheck = function useACLRolesCheck() {
   var _ctx$data;
 
   var ctx = (0, _react2.useContext)(ACLContext);
-  var data = (_ctx$data = ctx.data) === null || _ctx$data === void 0 ? void 0 : _ctx$data.data;
-  return _objectSpread(_objectSpread({}, data), {}, {
-    getActionParams: function getActionParams(path, _ref) {
-      var _data$actionAlias, _data$resources, _data$actions, _data$strategy;
+  var data = ctx === null || ctx === void 0 ? void 0 : (_ctx$data = ctx.data) === null || _ctx$data === void 0 ? void 0 : _ctx$data.data;
 
-      var skipOwnCheck = _ref.skipOwnCheck,
-          isOwn = _ref.isOwn;
-
-      var _path$split = path.split(':'),
-          _path$split2 = _slicedToArray(_path$split, 2),
-          resourceName = _path$split2[0],
-          act = _path$split2[1];
-
-      var currentAction = (data === null || data === void 0 ? void 0 : (_data$actionAlias = data.actionAlias) === null || _data$actionAlias === void 0 ? void 0 : _data$actionAlias[act]) || act;
-      var hasResource = data === null || data === void 0 ? void 0 : (_data$resources = data.resources) === null || _data$resources === void 0 ? void 0 : _data$resources.includes(resourceName);
-      var params = data === null || data === void 0 ? void 0 : (_data$actions = data.actions) === null || _data$actions === void 0 ? void 0 : _data$actions["".concat(resourceName, ":").concat(currentAction)];
-
-      if (hasResource) {
-        if (!skipOwnCheck && (params === null || params === void 0 ? void 0 : params.own)) {
-          return isOwn ? params : null;
-        }
+  var getActionAlias = function getActionAlias(actionPath) {
+    var _data$actionAlias;
 
-        return params;
-      }
+    var actionName = actionPath.split(':').pop();
+    return (data === null || data === void 0 ? void 0 : (_data$actionAlias = data.actionAlias) === null || _data$actionAlias === void 0 ? void 0 : _data$actionAlias[actionName]) || actionName;
+  };
 
-      var strategyActions = (data === null || data === void 0 ? void 0 : (_data$strategy = data.strategy) === null || _data$strategy === void 0 ? void 0 : _data$strategy.actions) || [];
-      var strategyAction = strategyActions === null || strategyActions === void 0 ? void 0 : strategyActions.find(function (action) {
+  return {
+    data: data,
+    getActionAlias: getActionAlias,
+    inResources: function inResources(resourceName) {
+      var _data$resources, _data$resources$inclu;
+
+      return data === null || data === void 0 ? void 0 : (_data$resources = data.resources) === null || _data$resources === void 0 ? void 0 : (_data$resources$inclu = _data$resources.includes) === null || _data$resources$inclu === void 0 ? void 0 : _data$resources$inclu.call(_data$resources, resourceName);
+    },
+    getResourceActionParams: function getResourceActionParams(actionPath) {
+      var _data$actions, _data$actions2;
+
+      var _actionPath$split = actionPath.split(':'),
+          _actionPath$split2 = _slicedToArray(_actionPath$split, 1),
+          resourceName = _actionPath$split2[0];
+
+      var actionAlias = getActionAlias(actionPath);
+      return (data === null || data === void 0 ? void 0 : (_data$actions = data.actions) === null || _data$actions === void 0 ? void 0 : _data$actions["".concat(resourceName, ":").concat(actionAlias)]) || (data === null || data === void 0 ? void 0 : (_data$actions2 = data.actions) === null || _data$actions2 === void 0 ? void 0 : _data$actions2[actionPath]);
+    },
+    getStrategyActionParams: function getStrategyActionParams(actionPath) {
+      var _data$strategy, _data$strategy$action;
+
+      var actionAlias = getActionAlias(actionPath);
+      var strategyAction = data === null || data === void 0 ? void 0 : (_data$strategy = data.strategy) === null || _data$strategy === void 0 ? void 0 : (_data$strategy$action = _data$strategy.actions) === null || _data$strategy$action === void 0 ? void 0 : _data$strategy$action.find(function (action) {
         var _action$split = action.split(':'),
             _action$split2 = _slicedToArray(_action$split, 1),
             value = _action$split2[0];
 
-        return value === currentAction;
+        return value === actionAlias;
       });
+      return strategyAction ? {} : null;
+    }
+  };
+};
 
-      if (!strategyAction) {
-        return;
-      }
+exports.useACLRolesCheck = useACLRolesCheck;
 
-      if (skipOwnCheck) {
-        return {};
-      }
+var getIgnoreScope = function getIgnoreScope() {
+  var _schema$xAclAction;
 
-      var _strategyAction$split = strategyAction.split(':'),
-          _strategyAction$split2 = _slicedToArray(_strategyAction$split, 2),
-          actionScope = _strategyAction$split2[1];
+  var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  var schema = options.schema,
+      recordPkValue = options.recordPkValue;
+  var ignoreScope = false;
 
-      if (actionScope === 'own') {
-        return isOwn;
-      }
+  if (options.ignoreScope) {
+    ignoreScope = true;
+  }
 
-      return {};
-    }
-  });
+  if (schema === null || schema === void 0 ? void 0 : schema['x-acl-ignore-scope']) {
+    ignoreScope = true;
+  }
+
+  if (schema === null || schema === void 0 ? void 0 : (_schema$xAclAction = schema['x-acl-action-props']) === null || _schema$xAclAction === void 0 ? void 0 : _schema$xAclAction['skipScopeCheck']) {
+    ignoreScope = true;
+  }
+
+  if (!recordPkValue) {
+    ignoreScope = true;
+  }
+
+  return ignoreScope;
 };
 
-exports.useACLRoleContext = useACLRoleContext;
+var useAllowedActions = function useAllowedActions() {
+  var _result$service, _result$service$data, _result$service$data$;
 
-var ACLAllowConfigure = function ACLAllowConfigure(props) {
-  var _useACLRoleContext2 = useACLRoleContext(),
-      allowAll = _useACLRoleContext2.allowAll,
-      allowConfigure = _useACLRoleContext2.allowConfigure;
+  var result = (0, _BlockProvider.useBlockRequestContext)() || {
+    service: (0, _ResourceActionProvider.useResourceActionContext)()
+  };
+  return result === null || result === void 0 ? void 0 : (_result$service = result.service) === null || _result$service === void 0 ? void 0 : (_result$service$data = _result$service.data) === null || _result$service$data === void 0 ? void 0 : (_result$service$data$ = _result$service$data.meta) === null || _result$service$data$ === void 0 ? void 0 : _result$service$data$.allowedActions;
+};
 
-  if (allowAll || allowConfigure) {
-    return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
-  }
+var useResourceName = function useResourceName() {
+  var _result$props, _result$service2, _result$service2$defa;
 
-  return null;
+  var result = (0, _BlockProvider.useBlockRequestContext)() || {
+    service: (0, _ResourceActionProvider.useResourceActionContext)()
+  };
+  return (result === null || result === void 0 ? void 0 : (_result$props = result.props) === null || _result$props === void 0 ? void 0 : _result$props.resource) || (result === null || result === void 0 ? void 0 : (_result$service2 = result.service) === null || _result$service2 === void 0 ? void 0 : (_result$service2$defa = _result$service2.defaultRequest) === null || _result$service2$defa === void 0 ? void 0 : _result$service2$defa.resource);
 };
 
-exports.ACLAllowConfigure = ACLAllowConfigure;
-var ACLActionParamsContext = /*#__PURE__*/(0, _react2.createContext)({});
+function useACLRoleContext() {
+  var _useACLRolesCheck = useACLRolesCheck(),
+      data = _useACLRolesCheck.data,
+      getActionAlias = _useACLRolesCheck.getActionAlias,
+      inResources = _useACLRolesCheck.inResources,
+      getResourceActionParams = _useACLRolesCheck.getResourceActionParams,
+      getStrategyActionParams = _useACLRolesCheck.getStrategyActionParams;
 
-var ACLCollectionProvider = function ACLCollectionProvider(props) {
-  var _fieldSchema$xAclAc;
+  var allowedActions = useAllowedActions();
 
-  var _useACLRoleContext3 = useACLRoleContext(),
-      allowAll = _useACLRoleContext3.allowAll,
-      allowConfigure = _useACLRoleContext3.allowConfigure,
-      getActionParams = _useACLRoleContext3.getActionParams;
+  var verifyScope = function verifyScope(actionName, recordPkValue) {
+    var actionAlias = getActionAlias(actionName);
 
-  var fieldSchema = (0, _react.useFieldSchema)();
-  var isOwn = (0, _recordProvider.useRecordIsOwn)();
+    if (!Array.isArray(allowedActions === null || allowedActions === void 0 ? void 0 : allowedActions[actionAlias])) {
+      return null;
+    }
 
-  if (allowAll || allowConfigure) {
+    return allowedActions[actionAlias].includes(recordPkValue);
+  };
+
+  return _objectSpread(_objectSpread({}, data), {}, {
+    parseAction: function parseAction(actionPath) {
+      var options = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+
+      var _actionPath$split3 = actionPath.split(':'),
+          _actionPath$split4 = _slicedToArray(_actionPath$split3, 2),
+          resourceName = _actionPath$split4[0],
+          actionName = _actionPath$split4[1];
+
+      if (!getIgnoreScope(options)) {
+        var r = verifyScope(actionName, options.recordPkValue);
+
+        if (r !== null) {
+          return r ? {} : null;
+        }
+      }
+
+      if (data === null || data === void 0 ? void 0 : data.allowAll) {
+        return {};
+      }
+
+      if (inResources(resourceName)) {
+        return getResourceActionParams(actionPath);
+      }
+
+      return getStrategyActionParams(actionPath);
+    }
+  });
+}
+
+var ACLCollectionProvider = function ACLCollectionProvider(props) {
+  var _useACLRoleContext2 = useACLRoleContext(),
+      allowAll = _useACLRoleContext2.allowAll,
+      parseAction = _useACLRoleContext2.parseAction;
+
+  var schema = (0, _react.useFieldSchema)();
+
+  if (allowAll) {
     return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
   }
 
-  var path = fieldSchema['x-acl-action'];
-  var skipScopeCheck = (_fieldSchema$xAclAc = fieldSchema['x-acl-action-props']) === null || _fieldSchema$xAclAc === void 0 ? void 0 : _fieldSchema$xAclAc.skipScopeCheck;
+  var actionPath = schema['x-acl-action'];
 
-  if (!path) {
+  if (!actionPath) {
     return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
   }
 
-  var params = getActionParams(path, {
-    isOwn: isOwn,
-    skipOwnCheck: skipScopeCheck === false ? false : true
+  var params = parseAction(actionPath, {
+    schema: schema
   });
 
   if (!params) {
@@ -239,30 +344,48 @@ var ACLCollectionProvider = function ACLCollectionProvider(props) {
 
 exports.ACLCollectionProvider = ACLCollectionProvider;
 
-var ACLActionProvider = function ACLActionProvider(props) {
-  var _fieldSchema$xAclAc2;
+var useACLActionParamsContext = function useACLActionParamsContext() {
+  return (0, _react2.useContext)(ACLActionParamsContext);
+};
+
+exports.useACLActionParamsContext = useACLActionParamsContext;
 
+var useRecordPkValue = function useRecordPkValue() {
   var _useCollection = (0, _collectionManager.useCollection)(),
-      name = _useCollection.name;
+      getPrimaryKey = _useCollection.getPrimaryKey;
 
-  var fieldSchema = (0, _react.useFieldSchema)();
-  var isOwn = (0, _recordProvider.useRecordIsOwn)();
+  var record = (0, _recordProvider.useRecord)();
+  var primaryKey = getPrimaryKey();
+  return record === null || record === void 0 ? void 0 : record[primaryKey];
+};
 
-  var _useACLRoleContext4 = useACLRoleContext(),
-      allowAll = _useACLRoleContext4.allowAll,
-      allowConfigure = _useACLRoleContext4.allowConfigure,
-      getActionParams = _useACLRoleContext4.getActionParams;
+exports.useRecordPkValue = useRecordPkValue;
+
+var ACLActionProvider = function ACLActionProvider(props) {
+  var recordPkValue = useRecordPkValue();
+  var resource = useResourceName();
+
+  var _useACLRoleContext3 = useACLRoleContext(),
+      parseAction = _useACLRoleContext3.parseAction;
+
+  var schema = (0, _react.useFieldSchema)();
+  var actionPath = schema['x-acl-action'];
 
-  if (!name || allowAll || allowConfigure) {
+  if (!actionPath && resource && schema['x-action']) {
+    actionPath = "".concat(resource, ":").concat(schema['x-action']);
+  }
+
+  if (!actionPath.includes(':')) {
+    actionPath = "".concat(resource, ":").concat(actionPath);
+  }
+
+  if (!actionPath) {
     return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
   }
 
-  var actionName = fieldSchema['x-action'];
-  var path = fieldSchema['x-acl-action'] || "".concat(name, ":").concat(actionName);
-  var skipScopeCheck = (_fieldSchema$xAclAc2 = fieldSchema['x-acl-action-props']) === null || _fieldSchema$xAclAc2 === void 0 ? void 0 : _fieldSchema$xAclAc2.skipScopeCheck;
-  var params = getActionParams(path, {
-    skipOwnCheck: skipScopeCheck,
-    isOwn: isOwn
+  var params = parseAction(actionPath, {
+    schema: schema,
+    recordPkValue: recordPkValue
   });
 
   if (!params) {
@@ -276,7 +399,65 @@ var ACLActionProvider = function ACLActionProvider(props) {
 
 exports.ACLActionProvider = ACLActionProvider;
 
+var useACLFieldWhitelist = function useACLFieldWhitelist() {
+  var params = (0, _react2.useContext)(ACLActionParamsContext);
+  var whitelist = [].concat((params === null || params === void 0 ? void 0 : params.whitelist) || []).concat((params === null || params === void 0 ? void 0 : params.fields) || []).concat((params === null || params === void 0 ? void 0 : params.appends) || []);
+  return {
+    whitelist: whitelist,
+    schemaInWhitelist: function schemaInWhitelist(fieldSchema) {
+      if (whitelist.length === 0) {
+        return true;
+      }
+
+      if (!fieldSchema) {
+        return true;
+      }
+
+      if (!fieldSchema['x-collection-field']) {
+        return true;
+      }
+
+      var _fieldSchema$xCollec = fieldSchema['x-collection-field'].split('.'),
+          _fieldSchema$xCollec2 = _toArray(_fieldSchema$xCollec),
+          keys = _fieldSchema$xCollec2.slice(1);
+
+      return whitelist === null || whitelist === void 0 ? void 0 : whitelist.includes(keys.join('.'));
+    }
+  };
+};
+
+exports.useACLFieldWhitelist = useACLFieldWhitelist;
+
 var ACLCollectionFieldProvider = function ACLCollectionFieldProvider(props) {
+  var fieldSchema = (0, _react.useFieldSchema)();
+  var field = (0, _react.useField)();
+
+  var _useACLRoleContext4 = useACLRoleContext(),
+      allowAll = _useACLRoleContext4.allowAll;
+
+  if (allowAll) {
+    return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
+  }
+
+  if (!fieldSchema['x-collection-field']) {
+    return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
+  }
+
+  var _useACLFieldWhitelist = useACLFieldWhitelist(),
+      whitelist = _useACLFieldWhitelist.whitelist;
+
+  var allowed = whitelist.length > 0 ? whitelist.includes(fieldSchema.name) : true;
+  (0, _react2.useEffect)(function () {
+    if (!allowed) {
+      field.required = false;
+      field.display = 'hidden';
+    }
+  }, [allowed]);
+
+  if (!allowed) {
+    return null;
+  }
+
   return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
 };
 
@@ -285,13 +466,13 @@ exports.ACLCollectionFieldProvider = ACLCollectionFieldProvider;
 var ACLMenuItemProvider = function ACLMenuItemProvider(props) {
   var _useACLRoleContext5 = useACLRoleContext(),
       allowAll = _useACLRoleContext5.allowAll,
-      allowConfigure = _useACLRoleContext5.allowConfigure,
       _useACLRoleContext5$a = _useACLRoleContext5.allowMenuItemIds,
-      allowMenuItemIds = _useACLRoleContext5$a === void 0 ? [] : _useACLRoleContext5$a;
+      allowMenuItemIds = _useACLRoleContext5$a === void 0 ? [] : _useACLRoleContext5$a,
+      snippets = _useACLRoleContext5.snippets;
 
   var fieldSchema = (0, _react.useFieldSchema)();
 
-  if (allowAll || allowConfigure) {
+  if (allowAll || snippets.includes('ui.*')) {
     return /*#__PURE__*/_react2.default.createElement(_react2.default.Fragment, null, props.children);
   }
 

package/lib/acl/Configuration/ConfigureCenter.d.ts

@@ -0,0 +1,2 @@
+export declare const SettingCenterProvider: (props: any) => JSX.Element;
+export declare const SettingsCenterConfigure: () => JSX.Element;