@payloadcms/plugin-multi-tenant 4.0.0-canary.27 → 4.0.0-canary.28

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAczD,eAAO,MAAM,iBAAiB,gEA4a5B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAczD,eAAO,MAAM,iBAAiB,gEA+a5B,CAAA"}

package/dist/index.js

@@ -24,6 +24,7 @@ export const multiTenantPlugin = definePlugin({
         const tenantFieldName = pluginConfig?.tenantField?.name || defaults.tenantFieldName;
         const tenantsArrayFieldName = pluginConfig?.tenantsArrayField?.arrayFieldName || defaults.tenantsArrayFieldName;
         const tenantsArrayTenantFieldName = pluginConfig?.tenantsArrayField?.arrayTenantFieldName || defaults.tenantsArrayTenantFieldName;
+        const tenantAccessScopes = [];
         /**
      * Add defaults for admin properties
      */ if (!incomingConfig.admin) {
@@ -75,7 +76,7 @@ export const multiTenantPlugin = definePlugin({
                 tenantsCollectionSlug
             }));
         }
-        addCollectionAccess({
+        tenantAccessScopes.push({
             accessResultCallback: pluginConfig.usersAccessResultOverride,
             adminUsersSlug: adminUsersCollection.slug,
             collection: adminUsersCollection,
@@ -131,7 +132,7 @@ export const multiTenantPlugin = definePlugin({
                     /**
            * Add access control constraint to tenants collection
            * - constrains access a users assigned tenants
-           */ addCollectionAccess({
+           */ tenantAccessScopes.push({
                         adminUsersSlug: adminUsersCollection.slug,
                         collection,
                         fieldName: 'id',
@@ -274,7 +275,7 @@ export const multiTenantPlugin = definePlugin({
                 if (pluginConfig.collections[collection.slug]?.useTenantAccess !== false) {
                     /**
            * Add access control constraint to tenant enabled collection
-           */ addCollectionAccess({
+           */ tenantAccessScopes.push({
                         accessResultCallback: pluginConfig.collections[collection.slug]?.accessResultOverride,
                         adminUsersSlug: adminUsersCollection.slug,
                         collection,
@@ -297,6 +298,10 @@ export const multiTenantPlugin = definePlugin({
             // eslint-disable-next-line no-console
             console.error(miniChalk.yellowBold('WARNING (plugin-multi-tenant)'), 'missing collections', missingSlugs, 'try placing the multi-tenant plugin after other plugins.');
         }
+        addCollectionAccess({
+            config: incomingConfig,
+            scopes: tenantAccessScopes
+        });
         /**
      * Add TenantSelectionProvider to admin providers
      */ incomingConfig.admin.components.providers.push({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\nimport type { CollectionConfig } from 'payload'\n\nimport { definePlugin } from 'payload'\nimport { hasAutosaveEnabled } from 'payload/shared'\n\nimport type { PluginDefaultTranslationsObject } from './translations/types.js'\nimport type { MultiTenantPluginConfig } from './types.js'\n\nimport { defaults } from './defaults.js'\nimport { getTenantOptionsEndpoint } from './endpoints/getTenantOptionsEndpoint.js'\nimport { tenantField } from './fields/tenantField/index.js'\nimport { tenantsArrayField } from './fields/tenantsArrayField/index.js'\nimport { filterDocumentsByTenants } from './filters/filterDocumentsByTenants.js'\nimport { addTenantCleanup } from './hooks/afterTenantDelete.js'\nimport { translations } from './translations/index.js'\nimport { addCollectionAccess } from './utilities/addCollectionAccess.js'\nimport { addFilterOptionsToFields } from './utilities/addFilterOptionsToFields.js'\nimport { combineFilters } from './utilities/combineFilters.js'\nimport { miniChalk } from './utilities/miniChalk.js'\n\nexport const multiTenantPlugin = definePlugin<MultiTenantPluginConfig>({\n  slug: '@payloadcms/plugin-multi-tenant',\n  plugin: ({ config: incomingConfig, options: pluginConfig }) => {\n    if (pluginConfig.enabled === false) {\n      return incomingConfig\n    }\n\n    /**\n     * Set defaults\n     */\n    const userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'] =\n      typeof pluginConfig.userHasAccessToAllTenants === 'function'\n        ? pluginConfig.userHasAccessToAllTenants\n        : () => false\n    const tenantsCollectionSlug = (pluginConfig.tenantsSlug =\n      pluginConfig.tenantsSlug || defaults.tenantCollectionSlug)\n    const tenantFieldName = pluginConfig?.tenantField?.name || defaults.tenantFieldName\n    const tenantsArrayFieldName =\n      pluginConfig?.tenantsArrayField?.arrayFieldName || defaults.tenantsArrayFieldName\n    const tenantsArrayTenantFieldName =\n      pluginConfig?.tenantsArrayField?.arrayTenantFieldName || defaults.tenantsArrayTenantFieldName\n\n    /**\n     * Add defaults for admin properties\n     */\n    if (!incomingConfig.admin) {\n      incomingConfig.admin = {}\n    }\n    if (!incomingConfig.admin?.components) {\n      incomingConfig.admin.components = {\n        actions: [],\n        beforeNav: [],\n        providers: [],\n      }\n    }\n    if (!incomingConfig.admin.components?.providers) {\n      incomingConfig.admin.components.providers = []\n    }\n    if (!incomingConfig.admin.components?.actions) {\n      incomingConfig.admin.components.actions = []\n    }\n    if (!incomingConfig.admin.components?.beforeNav) {\n      incomingConfig.admin.components.beforeNav = []\n    }\n    if (!incomingConfig.collections) {\n      incomingConfig.collections = []\n    }\n\n    /**\n     * Add tenants array field to users collection\n     */\n    const adminUsersCollection = incomingConfig.collections.find(({ slug, auth }) => {\n      if (incomingConfig.admin?.user) {\n        return slug === incomingConfig.admin.user\n      } else if (auth) {\n        return true\n      }\n    })\n\n    if (!adminUsersCollection) {\n      throw Error('An auth enabled collection was not found')\n    }\n\n    /**\n     * Add tenants array field to users collection\n     */\n    if (pluginConfig?.tenantsArrayField?.includeDefaultField !== false) {\n      adminUsersCollection.fields.push(\n        tenantsArrayField({\n          ...(pluginConfig?.tenantsArrayField || {}),\n          arrayFieldAccess: {\n            create: ({ req }) => Boolean(req.user && userHasAccessToAllTenants(req.user)),\n            update: ({ req }) => Boolean(req.user && userHasAccessToAllTenants(req.user)),\n            ...(pluginConfig?.tenantsArrayField?.arrayFieldAccess || {}),\n          },\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n        }),\n      )\n    }\n\n    addCollectionAccess({\n      accessResultCallback: pluginConfig.usersAccessResultOverride,\n      adminUsersSlug: adminUsersCollection.slug,\n      collection: adminUsersCollection,\n      fieldName: `${tenantsArrayFieldName}.${tenantsArrayTenantFieldName}`,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      userHasAccessToAllTenants,\n    })\n\n    if (pluginConfig.useUsersTenantFilter !== false) {\n      if (!adminUsersCollection.admin) {\n        adminUsersCollection.admin = {}\n      }\n\n      const baseFilter =\n        adminUsersCollection.admin?.baseFilter ?? adminUsersCollection.admin?.baseListFilter\n      adminUsersCollection.admin.baseFilter = combineFilters({\n        baseFilter,\n        customFilter: (args) =>\n          filterDocumentsByTenants({\n            filterFieldName: `${tenantsArrayFieldName}.${tenantsArrayTenantFieldName}`,\n            req: args.req,\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            tenantsCollectionSlug,\n            userHasAccessToAllTenants,\n          }),\n      })\n    }\n\n    let tenantCollection: CollectionConfig | undefined\n\n    const [collectionSlugs, globalCollectionSlugs] = Object.keys(pluginConfig.collections).reduce<\n      [string[], string[]]\n    >(\n      (acc, slug) => {\n        if (slug === adminUsersCollection.slug) {\n          return acc\n        }\n        if (pluginConfig?.collections?.[slug]?.isGlobal) {\n          acc[1].push(slug)\n        } else {\n          acc[0].push(slug)\n        }\n\n        return acc\n      },\n      [[], []],\n    )\n\n    // used to track and not duplicate filterOptions on referenced blocks\n    const blockReferencesWithFilters: string[] = []\n\n    // used to validate enabled collection slugs\n    const multiTenantCollectionsFound: string[] = []\n\n    /**\n     * Modify collections\n     */\n    incomingConfig.collections.forEach((collection) => {\n      /**\n       * Modify tenants collection\n       */\n      if (collection.slug === tenantsCollectionSlug) {\n        tenantCollection = collection\n\n        if (pluginConfig.useTenantsCollectionAccess !== false) {\n          /**\n           * Add access control constraint to tenants collection\n           * - constrains access a users assigned tenants\n           */\n          addCollectionAccess({\n            adminUsersSlug: adminUsersCollection.slug,\n            collection,\n            fieldName: 'id',\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            userHasAccessToAllTenants,\n          })\n        }\n\n        if (pluginConfig.useTenantsListFilter !== false) {\n          /**\n           * Add list filter to tenants collection\n           * - filter by selected tenant\n           */\n          if (!collection.admin) {\n            collection.admin = {}\n          }\n\n          const baseFilter = collection.admin?.baseFilter ?? collection.admin?.baseListFilter\n          collection.admin.baseFilter = combineFilters({\n            baseFilter,\n            customFilter: (args) =>\n              filterDocumentsByTenants({\n                filterFieldName: 'id',\n                req: args.req,\n                tenantsArrayFieldName,\n                tenantsArrayTenantFieldName,\n                tenantsCollectionSlug,\n                userHasAccessToAllTenants,\n              }),\n          })\n        }\n\n        if (pluginConfig.cleanupAfterTenantDelete !== false) {\n          /**\n           * Add cleanup logic when tenant is deleted\n           * - delete documents related to tenant\n           * - remove tenant from users\n           */\n          addTenantCleanup({\n            collection,\n            enabledSlugs: [...collectionSlugs, ...globalCollectionSlugs],\n            tenantFieldName,\n            tenantsCollectionSlug,\n            usersSlug: adminUsersCollection.slug,\n            usersTenantsArrayFieldName: tenantsArrayFieldName,\n            usersTenantsArrayTenantFieldName: tenantsArrayTenantFieldName,\n          })\n        }\n\n        /**\n         * Add custom tenant field that watches and dispatches updates to the selector\n         */\n        collection.fields.push({\n          name: '_watchTenant',\n          type: 'ui',\n          admin: {\n            components: {\n              Field: {\n                path: '@payloadcms/plugin-multi-tenant/client#WatchTenantCollection',\n              },\n            },\n            disabled: { bulkEdit: true, column: true },\n          },\n        })\n\n        collection.endpoints = [\n          ...(collection.endpoints || []),\n          getTenantOptionsEndpoint({\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            tenantsCollectionSlug,\n            useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n            userHasAccessToAllTenants,\n          }),\n        ]\n      } else if (pluginConfig.collections?.[collection.slug]) {\n        if (collection.slug === adminUsersCollection.slug) {\n          // eslint-disable-next-line no-console\n          console.warn(\n            `[plugin-multi-tenant] The admin users collection \"${collection.slug}\" should not be listed in pluginConfig.collections — it is already handled by the plugin. Skipping tenant-field processing for this collection to avoid double access control and validation errors.`,\n          )\n          return\n        }\n        multiTenantCollectionsFound.push(collection.slug)\n        const isGlobal = Boolean(pluginConfig.collections[collection.slug]?.isGlobal)\n\n        if (isGlobal) {\n          collection.disableDuplicate = true\n        }\n\n        if (!pluginConfig.debug && !isGlobal) {\n          collection.admin ??= {}\n          collection.admin.components ??= {}\n          collection.admin.components.edit ??= {}\n          collection.admin.components.edit.editMenuItems ??= []\n          collection.admin.components.edit.editMenuItems.push({\n            path: '@payloadcms/plugin-multi-tenant/client#AssignTenantFieldTrigger',\n          })\n        }\n\n        /**\n         * Add filter options to all relationship fields\n         */\n        collection.fields = addFilterOptionsToFields({\n          blockReferencesWithFilters,\n          config: incomingConfig,\n          fields: collection.fields,\n          tenantEnabledCollectionSlugs: collectionSlugs,\n          tenantEnabledGlobalSlugs: globalCollectionSlugs,\n          tenantFieldName,\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n          userHasAccessToAllTenants,\n        })\n\n        if (pluginConfig.collections[collection.slug]?.customTenantField !== true) {\n          /**\n           * Add tenant field to enabled collections\n           */\n          collection.fields.unshift(\n            tenantField({\n              name: tenantFieldName,\n              debug: pluginConfig.debug,\n              isAutosaveEnabled: hasAutosaveEnabled(collection),\n              overrides: pluginConfig.collections[collection.slug]?.tenantFieldOverrides\n                ? pluginConfig.collections[collection.slug]?.tenantFieldOverrides\n                : pluginConfig.tenantField || {},\n              tenantsArrayFieldName,\n              tenantsArrayTenantFieldName,\n              tenantsCollectionSlug,\n              unique: isGlobal,\n            }),\n          )\n        }\n\n        const { useBaseFilter, useBaseListFilter } = pluginConfig.collections[collection.slug] || {}\n        if (useBaseFilter ?? useBaseListFilter ?? true) {\n          /**\n           * Add list filter to enabled collections\n           * - filters results by selected tenant\n           */\n          collection.admin = collection.admin || {}\n          collection.admin.baseFilter = combineFilters({\n            baseFilter: collection.admin?.baseFilter ?? collection.admin?.baseListFilter,\n            customFilter: (args) =>\n              filterDocumentsByTenants({\n                filterFieldName: tenantFieldName,\n                req: args.req,\n                tenantsArrayFieldName,\n                tenantsArrayTenantFieldName,\n                tenantsCollectionSlug,\n                userHasAccessToAllTenants,\n              }),\n          })\n        }\n\n        if (pluginConfig.collections[collection.slug]?.useTenantAccess !== false) {\n          /**\n           * Add access control constraint to tenant enabled collection\n           */\n          addCollectionAccess({\n            accessResultCallback: pluginConfig.collections[collection.slug]?.accessResultOverride,\n            adminUsersSlug: adminUsersCollection.slug,\n            collection,\n            fieldName: tenantFieldName,\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            userHasAccessToAllTenants,\n          })\n        }\n      }\n    })\n\n    if (!tenantCollection) {\n      throw new Error(`Tenants collection not found with slug: ${tenantsCollectionSlug}`)\n    }\n\n    if (\n      multiTenantCollectionsFound.length !==\n      collectionSlugs.length + globalCollectionSlugs.length\n    ) {\n      const missingSlugs = [...collectionSlugs, ...globalCollectionSlugs].filter(\n        (slug) => !multiTenantCollectionsFound.includes(slug),\n      )\n      // eslint-disable-next-line no-console\n      console.error(\n        miniChalk.yellowBold('WARNING (plugin-multi-tenant)'),\n        'missing collections',\n        missingSlugs,\n        'try placing the multi-tenant plugin after other plugins.',\n      )\n    }\n\n    /**\n     * Add TenantSelectionProvider to admin providers\n     */\n    incomingConfig.admin.components.providers.push({\n      clientProps: {\n        tenantsArrayFieldName,\n        tenantsArrayTenantFieldName,\n        tenantsCollectionSlug: tenantCollection.slug,\n        useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n        userHasAccessToAllTenants,\n      },\n      path: '@payloadcms/plugin-multi-tenant/rsc#TenantSelectionProvider',\n    })\n\n    /**\n     * Add global redirect action\n     */\n    if (globalCollectionSlugs.length) {\n      incomingConfig.admin.components.actions.push({\n        path: '@payloadcms/plugin-multi-tenant/rsc#GlobalViewRedirect',\n        serverProps: {\n          globalSlugs: globalCollectionSlugs,\n          tenantFieldName,\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n          useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n          userHasAccessToAllTenants,\n        },\n      })\n    }\n\n    /**\n     * Add tenant selector to admin UI\n     */\n    incomingConfig.admin.components.beforeNav.push({\n      clientProps: {\n        enabledSlugs: [\n          ...collectionSlugs,\n          ...globalCollectionSlugs,\n          adminUsersCollection.slug,\n          tenantCollection.slug,\n        ],\n        label: pluginConfig.tenantSelectorLabel || undefined,\n      },\n      path: '@payloadcms/plugin-multi-tenant/rsc#TenantSelector',\n    })\n\n    /**\n     * Merge plugin translations\n     */\n    if (!incomingConfig.i18n) {\n      incomingConfig.i18n = {}\n    }\n    Object.entries(translations).forEach(([locale, pluginI18nObject]) => {\n      const typedLocale = locale as AcceptedLanguages\n      if (!incomingConfig.i18n!.translations) {\n        incomingConfig.i18n!.translations = {}\n      }\n      if (!(typedLocale in incomingConfig.i18n!.translations)) {\n        incomingConfig.i18n!.translations[typedLocale] = {}\n      }\n      if (!('plugin-multi-tenant' in incomingConfig.i18n!.translations[typedLocale]!)) {\n        ;(incomingConfig.i18n!.translations[typedLocale] as PluginDefaultTranslationsObject)[\n          'plugin-multi-tenant'\n        ] = {} as PluginDefaultTranslationsObject['plugin-multi-tenant']\n      }\n\n      ;(incomingConfig.i18n!.translations[typedLocale] as PluginDefaultTranslationsObject)[\n        'plugin-multi-tenant'\n      ] = {\n        ...pluginI18nObject.translations['plugin-multi-tenant'],\n        ...(pluginConfig.i18n?.translations?.[typedLocale] || {}),\n      }\n    })\n\n    return incomingConfig\n  },\n})\n"],"names":["definePlugin","hasAutosaveEnabled","defaults","getTenantOptionsEndpoint","tenantField","tenantsArrayField","filterDocumentsByTenants","addTenantCleanup","translations","addCollectionAccess","addFilterOptionsToFields","combineFilters","miniChalk","multiTenantPlugin","slug","plugin","config","incomingConfig","options","pluginConfig","enabled","userHasAccessToAllTenants","tenantsCollectionSlug","tenantsSlug","tenantCollectionSlug","tenantFieldName","name","tenantsArrayFieldName","arrayFieldName","tenantsArrayTenantFieldName","arrayTenantFieldName","admin","components","actions","beforeNav","providers","collections","adminUsersCollection","find","auth","user","Error","includeDefaultField","fields","push","arrayFieldAccess","create","req","Boolean","update","accessResultCallback","usersAccessResultOverride","adminUsersSlug","collection","fieldName","useUsersTenantFilter","baseFilter","baseListFilter","customFilter","args","filterFieldName","tenantCollection","collectionSlugs","globalCollectionSlugs","Object","keys","reduce","acc","isGlobal","blockReferencesWithFilters","multiTenantCollectionsFound","forEach","useTenantsCollectionAccess","useTenantsListFilter","cleanupAfterTenantDelete","enabledSlugs","usersSlug","usersTenantsArrayFieldName","usersTenantsArrayTenantFieldName","type","Field","path","disabled","bulkEdit","column","endpoints","useAsTitle","console","warn","disableDuplicate","debug","edit","editMenuItems","tenantEnabledCollectionSlugs","tenantEnabledGlobalSlugs","customTenantField","unshift","isAutosaveEnabled","overrides","tenantFieldOverrides","unique","useBaseFilter","useBaseListFilter","useTenantAccess","accessResultOverride","length","missingSlugs","filter","includes","error","yellowBold","clientProps","serverProps","globalSlugs","label","tenantSelectorLabel","undefined","i18n","entries","locale","pluginI18nObject","typedLocale"],"mappings":"AAGA,SAASA,YAAY,QAAQ,UAAS;AACtC,SAASC,kBAAkB,QAAQ,iBAAgB;AAKnD,SAASC,QAAQ,QAAQ,gBAAe;AACxC,SAASC,wBAAwB,QAAQ,0CAAyC;AAClF,SAASC,WAAW,QAAQ,gCAA+B;AAC3D,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SAASC,wBAAwB,QAAQ,wCAAuC;AAChF,SAASC,gBAAgB,QAAQ,+BAA8B;AAC/D,SAASC,YAAY,QAAQ,0BAAyB;AACtD,SAASC,mBAAmB,QAAQ,qCAAoC;AACxE,SAASC,wBAAwB,QAAQ,0CAAyC;AAClF,SAASC,cAAc,QAAQ,gCAA+B;AAC9D,SAASC,SAAS,QAAQ,2BAA0B;AAEpD,OAAO,MAAMC,oBAAoBb,aAAsC;IACrEc,MAAM;IACNC,QAAQ,CAAC,EAAEC,QAAQC,cAAc,EAAEC,SAASC,YAAY,EAAE;QACxD,IAAIA,aAAaC,OAAO,KAAK,OAAO;YAClC,OAAOH;QACT;QAEA;;KAEC,GACD,MAAMI,4BACJ,OAAOF,aAAaE,yBAAyB,KAAK,aAC9CF,aAAaE,yBAAyB,GACtC,IAAM;QACZ,MAAMC,wBAAyBH,aAAaI,WAAW,GACrDJ,aAAaI,WAAW,IAAIrB,SAASsB,oBAAoB;QAC3D,MAAMC,kBAAkBN,cAAcf,aAAasB,QAAQxB,SAASuB,eAAe;QACnF,MAAME,wBACJR,cAAcd,mBAAmBuB,kBAAkB1B,SAASyB,qBAAqB;QACnF,MAAME,8BACJV,cAAcd,mBAAmByB,wBAAwB5B,SAAS2B,2BAA2B;QAE/F;;KAEC,GACD,IAAI,CAACZ,eAAec,KAAK,EAAE;YACzBd,eAAec,KAAK,GAAG,CAAC;QAC1B;QACA,IAAI,CAACd,eAAec,KAAK,EAAEC,YAAY;YACrCf,eAAec,KAAK,CAACC,UAAU,GAAG;gBAChCC,SAAS,EAAE;gBACXC,WAAW,EAAE;gBACbC,WAAW,EAAE;YACf;QACF;QACA,IAAI,CAAClB,eAAec,KAAK,CAACC,UAAU,EAAEG,WAAW;YAC/ClB,eAAec,KAAK,CAACC,UAAU,CAACG,SAAS,GAAG,EAAE;QAChD;QACA,IAAI,CAAClB,eAAec,KAAK,CAACC,UAAU,EAAEC,SAAS;YAC7ChB,eAAec,KAAK,CAACC,UAAU,CAACC,OAAO,GAAG,EAAE;QAC9C;QACA,IAAI,CAAChB,eAAec,KAAK,CAACC,UAAU,EAAEE,WAAW;YAC/CjB,eAAec,KAAK,CAACC,UAAU,CAACE,SAAS,GAAG,EAAE;QAChD;QACA,IAAI,CAACjB,eAAemB,WAAW,EAAE;YAC/BnB,eAAemB,WAAW,GAAG,EAAE;QACjC;QAEA;;KAEC,GACD,MAAMC,uBAAuBpB,eAAemB,WAAW,CAACE,IAAI,CAAC,CAAC,EAAExB,IAAI,EAAEyB,IAAI,EAAE;YAC1E,IAAItB,eAAec,KAAK,EAAES,MAAM;gBAC9B,OAAO1B,SAASG,eAAec,KAAK,CAACS,IAAI;YAC3C,OAAO,IAAID,MAAM;gBACf,OAAO;YACT;QACF;QAEA,IAAI,CAACF,sBAAsB;YACzB,MAAMI,MAAM;QACd;QAEA;;KAEC,GACD,IAAItB,cAAcd,mBAAmBqC,wBAAwB,OAAO;YAClEL,qBAAqBM,MAAM,CAACC,IAAI,CAC9BvC,kBAAkB;gBAChB,GAAIc,cAAcd,qBAAqB,CAAC,CAAC;gBACzCwC,kBAAkB;oBAChBC,QAAQ,CAAC,EAAEC,GAAG,EAAE,GAAKC,QAAQD,IAAIP,IAAI,IAAInB,0BAA0B0B,IAAIP,IAAI;oBAC3ES,QAAQ,CAAC,EAAEF,GAAG,EAAE,GAAKC,QAAQD,IAAIP,IAAI,IAAInB,0BAA0B0B,IAAIP,IAAI;oBAC3E,GAAIrB,cAAcd,mBAAmBwC,oBAAoB,CAAC,CAAC;gBAC7D;gBACAlB;gBACAE;gBACAP;YACF;QAEJ;QAEAb,oBAAoB;YAClByC,sBAAsB/B,aAAagC,yBAAyB;YAC5DC,gBAAgBf,qBAAqBvB,IAAI;YACzCuC,YAAYhB;YACZiB,WAAW,GAAG3B,sBAAsB,CAAC,EAAEE,6BAA6B;YACpEF;YACAE;YACAR;QACF;QAEA,IAAIF,aAAaoC,oBAAoB,KAAK,OAAO;YAC/C,IAAI,CAAClB,qBAAqBN,KAAK,EAAE;gBAC/BM,qBAAqBN,KAAK,GAAG,CAAC;YAChC;YAEA,MAAMyB,aACJnB,qBAAqBN,KAAK,EAAEyB,cAAcnB,qBAAqBN,KAAK,EAAE0B;YACxEpB,qBAAqBN,KAAK,CAACyB,UAAU,GAAG7C,eAAe;gBACrD6C;gBACAE,cAAc,CAACC,OACbrD,yBAAyB;wBACvBsD,iBAAiB,GAAGjC,sBAAsB,CAAC,EAAEE,6BAA6B;wBAC1EkB,KAAKY,KAAKZ,GAAG;wBACbpB;wBACAE;wBACAP;wBACAD;oBACF;YACJ;QACF;QAEA,IAAIwC;QAEJ,MAAM,CAACC,iBAAiBC,sBAAsB,GAAGC,OAAOC,IAAI,CAAC9C,aAAaiB,WAAW,EAAE8B,MAAM,CAG3F,CAACC,KAAKrD;YACJ,IAAIA,SAASuB,qBAAqBvB,IAAI,EAAE;gBACtC,OAAOqD;YACT;YACA,IAAIhD,cAAciB,aAAa,CAACtB,KAAK,EAAEsD,UAAU;gBAC/CD,GAAG,CAAC,EAAE,CAACvB,IAAI,CAAC9B;YACd,OAAO;gBACLqD,GAAG,CAAC,EAAE,CAACvB,IAAI,CAAC9B;YACd;YAEA,OAAOqD;QACT,GACA;YAAC,EAAE;YAAE,EAAE;SAAC;QAGV,qEAAqE;QACrE,MAAME,6BAAuC,EAAE;QAE/C,4CAA4C;QAC5C,MAAMC,8BAAwC,EAAE;QAEhD;;KAEC,GACDrD,eAAemB,WAAW,CAACmC,OAAO,CAAC,CAAClB;YAClC;;OAEC,GACD,IAAIA,WAAWvC,IAAI,KAAKQ,uBAAuB;gBAC7CuC,mBAAmBR;gBAEnB,IAAIlC,aAAaqD,0BAA0B,KAAK,OAAO;oBACrD;;;WAGC,GACD/D,oBAAoB;wBAClB2C,gBAAgBf,qBAAqBvB,IAAI;wBACzCuC;wBACAC,WAAW;wBACX3B;wBACAE;wBACAR;oBACF;gBACF;gBAEA,IAAIF,aAAasD,oBAAoB,KAAK,OAAO;oBAC/C;;;WAGC,GACD,IAAI,CAACpB,WAAWtB,KAAK,EAAE;wBACrBsB,WAAWtB,KAAK,GAAG,CAAC;oBACtB;oBAEA,MAAMyB,aAAaH,WAAWtB,KAAK,EAAEyB,cAAcH,WAAWtB,KAAK,EAAE0B;oBACrEJ,WAAWtB,KAAK,CAACyB,UAAU,GAAG7C,eAAe;wBAC3C6C;wBACAE,cAAc,CAACC,OACbrD,yBAAyB;gCACvBsD,iBAAiB;gCACjBb,KAAKY,KAAKZ,GAAG;gCACbpB;gCACAE;gCACAP;gCACAD;4BACF;oBACJ;gBACF;gBAEA,IAAIF,aAAauD,wBAAwB,KAAK,OAAO;oBACnD;;;;WAIC,GACDnE,iBAAiB;wBACf8C;wBACAsB,cAAc;+BAAIb;+BAAoBC;yBAAsB;wBAC5DtC;wBACAH;wBACAsD,WAAWvC,qBAAqBvB,IAAI;wBACpC+D,4BAA4BlD;wBAC5BmD,kCAAkCjD;oBACpC;gBACF;gBAEA;;SAEC,GACDwB,WAAWV,MAAM,CAACC,IAAI,CAAC;oBACrBlB,MAAM;oBACNqD,MAAM;oBACNhD,OAAO;wBACLC,YAAY;4BACVgD,OAAO;gCACLC,MAAM;4BACR;wBACF;wBACAC,UAAU;4BAAEC,UAAU;4BAAMC,QAAQ;wBAAK;oBAC3C;gBACF;gBAEA/B,WAAWgC,SAAS,GAAG;uBACjBhC,WAAWgC,SAAS,IAAI,EAAE;oBAC9BlF,yBAAyB;wBACvBwB;wBACAE;wBACAP;wBACAgE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;wBAClDjE;oBACF;iBACD;YACH,OAAO,IAAIF,aAAaiB,WAAW,EAAE,CAACiB,WAAWvC,IAAI,CAAC,EAAE;gBACtD,IAAIuC,WAAWvC,IAAI,KAAKuB,qBAAqBvB,IAAI,EAAE;oBACjD,sCAAsC;oBACtCyE,QAAQC,IAAI,CACV,CAAC,kDAAkD,EAAEnC,WAAWvC,IAAI,CAAC,oMAAoM,CAAC;oBAE5Q;gBACF;gBACAwD,4BAA4B1B,IAAI,CAACS,WAAWvC,IAAI;gBAChD,MAAMsD,WAAWpB,QAAQ7B,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAEsD;gBAEpE,IAAIA,UAAU;oBACZf,WAAWoC,gBAAgB,GAAG;gBAChC;gBAEA,IAAI,CAACtE,aAAauE,KAAK,IAAI,CAACtB,UAAU;oBACpCf,WAAWtB,KAAK,KAAK,CAAC;oBACtBsB,WAAWtB,KAAK,CAACC,UAAU,KAAK,CAAC;oBACjCqB,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,KAAK,CAAC;oBACtCtC,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,CAACC,aAAa,KAAK,EAAE;oBACrDvC,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,CAACC,aAAa,CAAChD,IAAI,CAAC;wBAClDqC,MAAM;oBACR;gBACF;gBAEA;;SAEC,GACD5B,WAAWV,MAAM,GAAGjC,yBAAyB;oBAC3C2D;oBACArD,QAAQC;oBACR0B,QAAQU,WAAWV,MAAM;oBACzBkD,8BAA8B/B;oBAC9BgC,0BAA0B/B;oBAC1BtC;oBACAE;oBACAE;oBACAP;oBACAD;gBACF;gBAEA,IAAIF,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAEiF,sBAAsB,MAAM;oBACzE;;WAEC,GACD1C,WAAWV,MAAM,CAACqD,OAAO,CACvB5F,YAAY;wBACVsB,MAAMD;wBACNiE,OAAOvE,aAAauE,KAAK;wBACzBO,mBAAmBhG,mBAAmBoD;wBACtC6C,WAAW/E,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAEqF,uBAClDhF,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAEqF,uBAC3ChF,aAAaf,WAAW,IAAI,CAAC;wBACjCuB;wBACAE;wBACAP;wBACA8E,QAAQhC;oBACV;gBAEJ;gBAEA,MAAM,EAAEiC,aAAa,EAAEC,iBAAiB,EAAE,GAAGnF,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,IAAI,CAAC;gBAC3F,IAAIuF,iBAAiBC,qBAAqB,MAAM;oBAC9C;;;WAGC,GACDjD,WAAWtB,KAAK,GAAGsB,WAAWtB,KAAK,IAAI,CAAC;oBACxCsB,WAAWtB,KAAK,CAACyB,UAAU,GAAG7C,eAAe;wBAC3C6C,YAAYH,WAAWtB,KAAK,EAAEyB,cAAcH,WAAWtB,KAAK,EAAE0B;wBAC9DC,cAAc,CAACC,OACbrD,yBAAyB;gCACvBsD,iBAAiBnC;gCACjBsB,KAAKY,KAAKZ,GAAG;gCACbpB;gCACAE;gCACAP;gCACAD;4BACF;oBACJ;gBACF;gBAEA,IAAIF,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAEyF,oBAAoB,OAAO;oBACxE;;WAEC,GACD9F,oBAAoB;wBAClByC,sBAAsB/B,aAAaiB,WAAW,CAACiB,WAAWvC,IAAI,CAAC,EAAE0F;wBACjEpD,gBAAgBf,qBAAqBvB,IAAI;wBACzCuC;wBACAC,WAAW7B;wBACXE;wBACAE;wBACAR;oBACF;gBACF;YACF;QACF;QAEA,IAAI,CAACwC,kBAAkB;YACrB,MAAM,IAAIpB,MAAM,CAAC,wCAAwC,EAAEnB,uBAAuB;QACpF;QAEA,IACEgD,4BAA4BmC,MAAM,KAClC3C,gBAAgB2C,MAAM,GAAG1C,sBAAsB0C,MAAM,EACrD;YACA,MAAMC,eAAe;mBAAI5C;mBAAoBC;aAAsB,CAAC4C,MAAM,CACxE,CAAC7F,OAAS,CAACwD,4BAA4BsC,QAAQ,CAAC9F;YAElD,sCAAsC;YACtCyE,QAAQsB,KAAK,CACXjG,UAAUkG,UAAU,CAAC,kCACrB,uBACAJ,cACA;QAEJ;QAEA;;KAEC,GACDzF,eAAec,KAAK,CAACC,UAAU,CAACG,SAAS,CAACS,IAAI,CAAC;YAC7CmE,aAAa;gBACXpF;gBACAE;gBACAP,uBAAuBuC,iBAAiB/C,IAAI;gBAC5CwE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;gBAClDjE;YACF;YACA4D,MAAM;QACR;QAEA;;KAEC,GACD,IAAIlB,sBAAsB0C,MAAM,EAAE;YAChCxF,eAAec,KAAK,CAACC,UAAU,CAACC,OAAO,CAACW,IAAI,CAAC;gBAC3CqC,MAAM;gBACN+B,aAAa;oBACXC,aAAalD;oBACbtC;oBACAE;oBACAE;oBACAP;oBACAgE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;oBAClDjE;gBACF;YACF;QACF;QAEA;;KAEC,GACDJ,eAAec,KAAK,CAACC,UAAU,CAACE,SAAS,CAACU,IAAI,CAAC;YAC7CmE,aAAa;gBACXpC,cAAc;uBACTb;uBACAC;oBACH1B,qBAAqBvB,IAAI;oBACzB+C,iBAAiB/C,IAAI;iBACtB;gBACDoG,OAAO/F,aAAagG,mBAAmB,IAAIC;YAC7C;YACAnC,MAAM;QACR;QAEA;;KAEC,GACD,IAAI,CAAChE,eAAeoG,IAAI,EAAE;YACxBpG,eAAeoG,IAAI,GAAG,CAAC;QACzB;QACArD,OAAOsD,OAAO,CAAC9G,cAAc+D,OAAO,CAAC,CAAC,CAACgD,QAAQC,iBAAiB;YAC9D,MAAMC,cAAcF;YACpB,IAAI,CAACtG,eAAeoG,IAAI,CAAE7G,YAAY,EAAE;gBACtCS,eAAeoG,IAAI,CAAE7G,YAAY,GAAG,CAAC;YACvC;YACA,IAAI,CAAEiH,CAAAA,eAAexG,eAAeoG,IAAI,CAAE7G,YAAY,AAAD,GAAI;gBACvDS,eAAeoG,IAAI,CAAE7G,YAAY,CAACiH,YAAY,GAAG,CAAC;YACpD;YACA,IAAI,CAAE,CAAA,yBAAyBxG,eAAeoG,IAAI,CAAE7G,YAAY,CAACiH,YAAY,GAAI;;gBAC7ExG,eAAeoG,IAAI,CAAE7G,YAAY,CAACiH,YAAY,AAAoC,CAClF,sBACD,GAAG,CAAC;YACP;;YAEExG,eAAeoG,IAAI,CAAE7G,YAAY,CAACiH,YAAY,AAAoC,CAClF,sBACD,GAAG;gBACF,GAAGD,iBAAiBhH,YAAY,CAAC,sBAAsB;gBACvD,GAAIW,aAAakG,IAAI,EAAE7G,cAAc,CAACiH,YAAY,IAAI,CAAC,CAAC;YAC1D;QACF;QAEA,OAAOxG;IACT;AACF,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\nimport type { CollectionConfig } from 'payload'\n\nimport { definePlugin } from 'payload'\nimport { hasAutosaveEnabled } from 'payload/shared'\n\nimport type { PluginDefaultTranslationsObject } from './translations/types.js'\nimport type { MultiTenantPluginConfig } from './types.js'\n\nimport { defaults } from './defaults.js'\nimport { getTenantOptionsEndpoint } from './endpoints/getTenantOptionsEndpoint.js'\nimport { tenantField } from './fields/tenantField/index.js'\nimport { tenantsArrayField } from './fields/tenantsArrayField/index.js'\nimport { filterDocumentsByTenants } from './filters/filterDocumentsByTenants.js'\nimport { addTenantCleanup } from './hooks/afterTenantDelete.js'\nimport { translations } from './translations/index.js'\nimport { addCollectionAccess, type TenantAccessConfig } from './utilities/addCollectionAccess.js'\nimport { addFilterOptionsToFields } from './utilities/addFilterOptionsToFields.js'\nimport { combineFilters } from './utilities/combineFilters.js'\nimport { miniChalk } from './utilities/miniChalk.js'\n\nexport const multiTenantPlugin = definePlugin<MultiTenantPluginConfig>({\n  slug: '@payloadcms/plugin-multi-tenant',\n  plugin: ({ config: incomingConfig, options: pluginConfig }) => {\n    if (pluginConfig.enabled === false) {\n      return incomingConfig\n    }\n\n    /**\n     * Set defaults\n     */\n    const userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'] =\n      typeof pluginConfig.userHasAccessToAllTenants === 'function'\n        ? pluginConfig.userHasAccessToAllTenants\n        : () => false\n    const tenantsCollectionSlug = (pluginConfig.tenantsSlug =\n      pluginConfig.tenantsSlug || defaults.tenantCollectionSlug)\n    const tenantFieldName = pluginConfig?.tenantField?.name || defaults.tenantFieldName\n    const tenantsArrayFieldName =\n      pluginConfig?.tenantsArrayField?.arrayFieldName || defaults.tenantsArrayFieldName\n    const tenantsArrayTenantFieldName =\n      pluginConfig?.tenantsArrayField?.arrayTenantFieldName || defaults.tenantsArrayTenantFieldName\n    const tenantAccessScopes: TenantAccessConfig[] = []\n\n    /**\n     * Add defaults for admin properties\n     */\n    if (!incomingConfig.admin) {\n      incomingConfig.admin = {}\n    }\n    if (!incomingConfig.admin?.components) {\n      incomingConfig.admin.components = {\n        actions: [],\n        beforeNav: [],\n        providers: [],\n      }\n    }\n    if (!incomingConfig.admin.components?.providers) {\n      incomingConfig.admin.components.providers = []\n    }\n    if (!incomingConfig.admin.components?.actions) {\n      incomingConfig.admin.components.actions = []\n    }\n    if (!incomingConfig.admin.components?.beforeNav) {\n      incomingConfig.admin.components.beforeNav = []\n    }\n    if (!incomingConfig.collections) {\n      incomingConfig.collections = []\n    }\n\n    /**\n     * Add tenants array field to users collection\n     */\n    const adminUsersCollection = incomingConfig.collections.find(({ slug, auth }) => {\n      if (incomingConfig.admin?.user) {\n        return slug === incomingConfig.admin.user\n      } else if (auth) {\n        return true\n      }\n    })\n\n    if (!adminUsersCollection) {\n      throw Error('An auth enabled collection was not found')\n    }\n\n    /**\n     * Add tenants array field to users collection\n     */\n    if (pluginConfig?.tenantsArrayField?.includeDefaultField !== false) {\n      adminUsersCollection.fields.push(\n        tenantsArrayField({\n          ...(pluginConfig?.tenantsArrayField || {}),\n          arrayFieldAccess: {\n            create: ({ req }) => Boolean(req.user && userHasAccessToAllTenants(req.user)),\n            update: ({ req }) => Boolean(req.user && userHasAccessToAllTenants(req.user)),\n            ...(pluginConfig?.tenantsArrayField?.arrayFieldAccess || {}),\n          },\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n        }),\n      )\n    }\n\n    tenantAccessScopes.push({\n      accessResultCallback: pluginConfig.usersAccessResultOverride,\n      adminUsersSlug: adminUsersCollection.slug,\n      collection: adminUsersCollection,\n      fieldName: `${tenantsArrayFieldName}.${tenantsArrayTenantFieldName}`,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      userHasAccessToAllTenants,\n    })\n\n    if (pluginConfig.useUsersTenantFilter !== false) {\n      if (!adminUsersCollection.admin) {\n        adminUsersCollection.admin = {}\n      }\n\n      const baseFilter =\n        adminUsersCollection.admin?.baseFilter ?? adminUsersCollection.admin?.baseListFilter\n      adminUsersCollection.admin.baseFilter = combineFilters({\n        baseFilter,\n        customFilter: (args) =>\n          filterDocumentsByTenants({\n            filterFieldName: `${tenantsArrayFieldName}.${tenantsArrayTenantFieldName}`,\n            req: args.req,\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            tenantsCollectionSlug,\n            userHasAccessToAllTenants,\n          }),\n      })\n    }\n\n    let tenantCollection: CollectionConfig | undefined\n\n    const [collectionSlugs, globalCollectionSlugs] = Object.keys(pluginConfig.collections).reduce<\n      [string[], string[]]\n    >(\n      (acc, slug) => {\n        if (slug === adminUsersCollection.slug) {\n          return acc\n        }\n        if (pluginConfig?.collections?.[slug]?.isGlobal) {\n          acc[1].push(slug)\n        } else {\n          acc[0].push(slug)\n        }\n\n        return acc\n      },\n      [[], []],\n    )\n\n    // used to track and not duplicate filterOptions on referenced blocks\n    const blockReferencesWithFilters: string[] = []\n\n    // used to validate enabled collection slugs\n    const multiTenantCollectionsFound: string[] = []\n\n    /**\n     * Modify collections\n     */\n    incomingConfig.collections.forEach((collection) => {\n      /**\n       * Modify tenants collection\n       */\n      if (collection.slug === tenantsCollectionSlug) {\n        tenantCollection = collection\n\n        if (pluginConfig.useTenantsCollectionAccess !== false) {\n          /**\n           * Add access control constraint to tenants collection\n           * - constrains access a users assigned tenants\n           */\n          tenantAccessScopes.push({\n            adminUsersSlug: adminUsersCollection.slug,\n            collection,\n            fieldName: 'id',\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            userHasAccessToAllTenants,\n          })\n        }\n\n        if (pluginConfig.useTenantsListFilter !== false) {\n          /**\n           * Add list filter to tenants collection\n           * - filter by selected tenant\n           */\n          if (!collection.admin) {\n            collection.admin = {}\n          }\n\n          const baseFilter = collection.admin?.baseFilter ?? collection.admin?.baseListFilter\n          collection.admin.baseFilter = combineFilters({\n            baseFilter,\n            customFilter: (args) =>\n              filterDocumentsByTenants({\n                filterFieldName: 'id',\n                req: args.req,\n                tenantsArrayFieldName,\n                tenantsArrayTenantFieldName,\n                tenantsCollectionSlug,\n                userHasAccessToAllTenants,\n              }),\n          })\n        }\n\n        if (pluginConfig.cleanupAfterTenantDelete !== false) {\n          /**\n           * Add cleanup logic when tenant is deleted\n           * - delete documents related to tenant\n           * - remove tenant from users\n           */\n          addTenantCleanup({\n            collection,\n            enabledSlugs: [...collectionSlugs, ...globalCollectionSlugs],\n            tenantFieldName,\n            tenantsCollectionSlug,\n            usersSlug: adminUsersCollection.slug,\n            usersTenantsArrayFieldName: tenantsArrayFieldName,\n            usersTenantsArrayTenantFieldName: tenantsArrayTenantFieldName,\n          })\n        }\n\n        /**\n         * Add custom tenant field that watches and dispatches updates to the selector\n         */\n        collection.fields.push({\n          name: '_watchTenant',\n          type: 'ui',\n          admin: {\n            components: {\n              Field: {\n                path: '@payloadcms/plugin-multi-tenant/client#WatchTenantCollection',\n              },\n            },\n            disabled: { bulkEdit: true, column: true },\n          },\n        })\n\n        collection.endpoints = [\n          ...(collection.endpoints || []),\n          getTenantOptionsEndpoint({\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            tenantsCollectionSlug,\n            useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n            userHasAccessToAllTenants,\n          }),\n        ]\n      } else if (pluginConfig.collections?.[collection.slug]) {\n        if (collection.slug === adminUsersCollection.slug) {\n          // eslint-disable-next-line no-console\n          console.warn(\n            `[plugin-multi-tenant] The admin users collection \"${collection.slug}\" should not be listed in pluginConfig.collections — it is already handled by the plugin. Skipping tenant-field processing for this collection to avoid double access control and validation errors.`,\n          )\n          return\n        }\n        multiTenantCollectionsFound.push(collection.slug)\n        const isGlobal = Boolean(pluginConfig.collections[collection.slug]?.isGlobal)\n\n        if (isGlobal) {\n          collection.disableDuplicate = true\n        }\n\n        if (!pluginConfig.debug && !isGlobal) {\n          collection.admin ??= {}\n          collection.admin.components ??= {}\n          collection.admin.components.edit ??= {}\n          collection.admin.components.edit.editMenuItems ??= []\n          collection.admin.components.edit.editMenuItems.push({\n            path: '@payloadcms/plugin-multi-tenant/client#AssignTenantFieldTrigger',\n          })\n        }\n\n        /**\n         * Add filter options to all relationship fields\n         */\n        collection.fields = addFilterOptionsToFields({\n          blockReferencesWithFilters,\n          config: incomingConfig,\n          fields: collection.fields,\n          tenantEnabledCollectionSlugs: collectionSlugs,\n          tenantEnabledGlobalSlugs: globalCollectionSlugs,\n          tenantFieldName,\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n          userHasAccessToAllTenants,\n        })\n\n        if (pluginConfig.collections[collection.slug]?.customTenantField !== true) {\n          /**\n           * Add tenant field to enabled collections\n           */\n          collection.fields.unshift(\n            tenantField({\n              name: tenantFieldName,\n              debug: pluginConfig.debug,\n              isAutosaveEnabled: hasAutosaveEnabled(collection),\n              overrides: pluginConfig.collections[collection.slug]?.tenantFieldOverrides\n                ? pluginConfig.collections[collection.slug]?.tenantFieldOverrides\n                : pluginConfig.tenantField || {},\n              tenantsArrayFieldName,\n              tenantsArrayTenantFieldName,\n              tenantsCollectionSlug,\n              unique: isGlobal,\n            }),\n          )\n        }\n\n        const { useBaseFilter, useBaseListFilter } = pluginConfig.collections[collection.slug] || {}\n        if (useBaseFilter ?? useBaseListFilter ?? true) {\n          /**\n           * Add list filter to enabled collections\n           * - filters results by selected tenant\n           */\n          collection.admin = collection.admin || {}\n          collection.admin.baseFilter = combineFilters({\n            baseFilter: collection.admin?.baseFilter ?? collection.admin?.baseListFilter,\n            customFilter: (args) =>\n              filterDocumentsByTenants({\n                filterFieldName: tenantFieldName,\n                req: args.req,\n                tenantsArrayFieldName,\n                tenantsArrayTenantFieldName,\n                tenantsCollectionSlug,\n                userHasAccessToAllTenants,\n              }),\n          })\n        }\n\n        if (pluginConfig.collections[collection.slug]?.useTenantAccess !== false) {\n          /**\n           * Add access control constraint to tenant enabled collection\n           */\n          tenantAccessScopes.push({\n            accessResultCallback: pluginConfig.collections[collection.slug]?.accessResultOverride,\n            adminUsersSlug: adminUsersCollection.slug,\n            collection,\n            fieldName: tenantFieldName,\n            tenantsArrayFieldName,\n            tenantsArrayTenantFieldName,\n            userHasAccessToAllTenants,\n          })\n        }\n      }\n    })\n\n    if (!tenantCollection) {\n      throw new Error(`Tenants collection not found with slug: ${tenantsCollectionSlug}`)\n    }\n\n    if (\n      multiTenantCollectionsFound.length !==\n      collectionSlugs.length + globalCollectionSlugs.length\n    ) {\n      const missingSlugs = [...collectionSlugs, ...globalCollectionSlugs].filter(\n        (slug) => !multiTenantCollectionsFound.includes(slug),\n      )\n      // eslint-disable-next-line no-console\n      console.error(\n        miniChalk.yellowBold('WARNING (plugin-multi-tenant)'),\n        'missing collections',\n        missingSlugs,\n        'try placing the multi-tenant plugin after other plugins.',\n      )\n    }\n\n    addCollectionAccess({ config: incomingConfig, scopes: tenantAccessScopes })\n\n    /**\n     * Add TenantSelectionProvider to admin providers\n     */\n    incomingConfig.admin.components.providers.push({\n      clientProps: {\n        tenantsArrayFieldName,\n        tenantsArrayTenantFieldName,\n        tenantsCollectionSlug: tenantCollection.slug,\n        useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n        userHasAccessToAllTenants,\n      },\n      path: '@payloadcms/plugin-multi-tenant/rsc#TenantSelectionProvider',\n    })\n\n    /**\n     * Add global redirect action\n     */\n    if (globalCollectionSlugs.length) {\n      incomingConfig.admin.components.actions.push({\n        path: '@payloadcms/plugin-multi-tenant/rsc#GlobalViewRedirect',\n        serverProps: {\n          globalSlugs: globalCollectionSlugs,\n          tenantFieldName,\n          tenantsArrayFieldName,\n          tenantsArrayTenantFieldName,\n          tenantsCollectionSlug,\n          useAsTitle: tenantCollection.admin?.useAsTitle || 'id',\n          userHasAccessToAllTenants,\n        },\n      })\n    }\n\n    /**\n     * Add tenant selector to admin UI\n     */\n    incomingConfig.admin.components.beforeNav.push({\n      clientProps: {\n        enabledSlugs: [\n          ...collectionSlugs,\n          ...globalCollectionSlugs,\n          adminUsersCollection.slug,\n          tenantCollection.slug,\n        ],\n        label: pluginConfig.tenantSelectorLabel || undefined,\n      },\n      path: '@payloadcms/plugin-multi-tenant/rsc#TenantSelector',\n    })\n\n    /**\n     * Merge plugin translations\n     */\n    if (!incomingConfig.i18n) {\n      incomingConfig.i18n = {}\n    }\n    Object.entries(translations).forEach(([locale, pluginI18nObject]) => {\n      const typedLocale = locale as AcceptedLanguages\n      if (!incomingConfig.i18n!.translations) {\n        incomingConfig.i18n!.translations = {}\n      }\n      if (!(typedLocale in incomingConfig.i18n!.translations)) {\n        incomingConfig.i18n!.translations[typedLocale] = {}\n      }\n      if (!('plugin-multi-tenant' in incomingConfig.i18n!.translations[typedLocale]!)) {\n        ;(incomingConfig.i18n!.translations[typedLocale] as PluginDefaultTranslationsObject)[\n          'plugin-multi-tenant'\n        ] = {} as PluginDefaultTranslationsObject['plugin-multi-tenant']\n      }\n\n      ;(incomingConfig.i18n!.translations[typedLocale] as PluginDefaultTranslationsObject)[\n        'plugin-multi-tenant'\n      ] = {\n        ...pluginI18nObject.translations['plugin-multi-tenant'],\n        ...(pluginConfig.i18n?.translations?.[typedLocale] || {}),\n      }\n    })\n\n    return incomingConfig\n  },\n})\n"],"names":["definePlugin","hasAutosaveEnabled","defaults","getTenantOptionsEndpoint","tenantField","tenantsArrayField","filterDocumentsByTenants","addTenantCleanup","translations","addCollectionAccess","addFilterOptionsToFields","combineFilters","miniChalk","multiTenantPlugin","slug","plugin","config","incomingConfig","options","pluginConfig","enabled","userHasAccessToAllTenants","tenantsCollectionSlug","tenantsSlug","tenantCollectionSlug","tenantFieldName","name","tenantsArrayFieldName","arrayFieldName","tenantsArrayTenantFieldName","arrayTenantFieldName","tenantAccessScopes","admin","components","actions","beforeNav","providers","collections","adminUsersCollection","find","auth","user","Error","includeDefaultField","fields","push","arrayFieldAccess","create","req","Boolean","update","accessResultCallback","usersAccessResultOverride","adminUsersSlug","collection","fieldName","useUsersTenantFilter","baseFilter","baseListFilter","customFilter","args","filterFieldName","tenantCollection","collectionSlugs","globalCollectionSlugs","Object","keys","reduce","acc","isGlobal","blockReferencesWithFilters","multiTenantCollectionsFound","forEach","useTenantsCollectionAccess","useTenantsListFilter","cleanupAfterTenantDelete","enabledSlugs","usersSlug","usersTenantsArrayFieldName","usersTenantsArrayTenantFieldName","type","Field","path","disabled","bulkEdit","column","endpoints","useAsTitle","console","warn","disableDuplicate","debug","edit","editMenuItems","tenantEnabledCollectionSlugs","tenantEnabledGlobalSlugs","customTenantField","unshift","isAutosaveEnabled","overrides","tenantFieldOverrides","unique","useBaseFilter","useBaseListFilter","useTenantAccess","accessResultOverride","length","missingSlugs","filter","includes","error","yellowBold","scopes","clientProps","serverProps","globalSlugs","label","tenantSelectorLabel","undefined","i18n","entries","locale","pluginI18nObject","typedLocale"],"mappings":"AAGA,SAASA,YAAY,QAAQ,UAAS;AACtC,SAASC,kBAAkB,QAAQ,iBAAgB;AAKnD,SAASC,QAAQ,QAAQ,gBAAe;AACxC,SAASC,wBAAwB,QAAQ,0CAAyC;AAClF,SAASC,WAAW,QAAQ,gCAA+B;AAC3D,SAASC,iBAAiB,QAAQ,sCAAqC;AACvE,SAASC,wBAAwB,QAAQ,wCAAuC;AAChF,SAASC,gBAAgB,QAAQ,+BAA8B;AAC/D,SAASC,YAAY,QAAQ,0BAAyB;AACtD,SAASC,mBAAmB,QAAiC,qCAAoC;AACjG,SAASC,wBAAwB,QAAQ,0CAAyC;AAClF,SAASC,cAAc,QAAQ,gCAA+B;AAC9D,SAASC,SAAS,QAAQ,2BAA0B;AAEpD,OAAO,MAAMC,oBAAoBb,aAAsC;IACrEc,MAAM;IACNC,QAAQ,CAAC,EAAEC,QAAQC,cAAc,EAAEC,SAASC,YAAY,EAAE;QACxD,IAAIA,aAAaC,OAAO,KAAK,OAAO;YAClC,OAAOH;QACT;QAEA;;KAEC,GACD,MAAMI,4BACJ,OAAOF,aAAaE,yBAAyB,KAAK,aAC9CF,aAAaE,yBAAyB,GACtC,IAAM;QACZ,MAAMC,wBAAyBH,aAAaI,WAAW,GACrDJ,aAAaI,WAAW,IAAIrB,SAASsB,oBAAoB;QAC3D,MAAMC,kBAAkBN,cAAcf,aAAasB,QAAQxB,SAASuB,eAAe;QACnF,MAAME,wBACJR,cAAcd,mBAAmBuB,kBAAkB1B,SAASyB,qBAAqB;QACnF,MAAME,8BACJV,cAAcd,mBAAmByB,wBAAwB5B,SAAS2B,2BAA2B;QAC/F,MAAME,qBAA2C,EAAE;QAEnD;;KAEC,GACD,IAAI,CAACd,eAAee,KAAK,EAAE;YACzBf,eAAee,KAAK,GAAG,CAAC;QAC1B;QACA,IAAI,CAACf,eAAee,KAAK,EAAEC,YAAY;YACrChB,eAAee,KAAK,CAACC,UAAU,GAAG;gBAChCC,SAAS,EAAE;gBACXC,WAAW,EAAE;gBACbC,WAAW,EAAE;YACf;QACF;QACA,IAAI,CAACnB,eAAee,KAAK,CAACC,UAAU,EAAEG,WAAW;YAC/CnB,eAAee,KAAK,CAACC,UAAU,CAACG,SAAS,GAAG,EAAE;QAChD;QACA,IAAI,CAACnB,eAAee,KAAK,CAACC,UAAU,EAAEC,SAAS;YAC7CjB,eAAee,KAAK,CAACC,UAAU,CAACC,OAAO,GAAG,EAAE;QAC9C;QACA,IAAI,CAACjB,eAAee,KAAK,CAACC,UAAU,EAAEE,WAAW;YAC/ClB,eAAee,KAAK,CAACC,UAAU,CAACE,SAAS,GAAG,EAAE;QAChD;QACA,IAAI,CAAClB,eAAeoB,WAAW,EAAE;YAC/BpB,eAAeoB,WAAW,GAAG,EAAE;QACjC;QAEA;;KAEC,GACD,MAAMC,uBAAuBrB,eAAeoB,WAAW,CAACE,IAAI,CAAC,CAAC,EAAEzB,IAAI,EAAE0B,IAAI,EAAE;YAC1E,IAAIvB,eAAee,KAAK,EAAES,MAAM;gBAC9B,OAAO3B,SAASG,eAAee,KAAK,CAACS,IAAI;YAC3C,OAAO,IAAID,MAAM;gBACf,OAAO;YACT;QACF;QAEA,IAAI,CAACF,sBAAsB;YACzB,MAAMI,MAAM;QACd;QAEA;;KAEC,GACD,IAAIvB,cAAcd,mBAAmBsC,wBAAwB,OAAO;YAClEL,qBAAqBM,MAAM,CAACC,IAAI,CAC9BxC,kBAAkB;gBAChB,GAAIc,cAAcd,qBAAqB,CAAC,CAAC;gBACzCyC,kBAAkB;oBAChBC,QAAQ,CAAC,EAAEC,GAAG,EAAE,GAAKC,QAAQD,IAAIP,IAAI,IAAIpB,0BAA0B2B,IAAIP,IAAI;oBAC3ES,QAAQ,CAAC,EAAEF,GAAG,EAAE,GAAKC,QAAQD,IAAIP,IAAI,IAAIpB,0BAA0B2B,IAAIP,IAAI;oBAC3E,GAAItB,cAAcd,mBAAmByC,oBAAoB,CAAC,CAAC;gBAC7D;gBACAnB;gBACAE;gBACAP;YACF;QAEJ;QAEAS,mBAAmBc,IAAI,CAAC;YACtBM,sBAAsBhC,aAAaiC,yBAAyB;YAC5DC,gBAAgBf,qBAAqBxB,IAAI;YACzCwC,YAAYhB;YACZiB,WAAW,GAAG5B,sBAAsB,CAAC,EAAEE,6BAA6B;YACpEF;YACAE;YACAR;QACF;QAEA,IAAIF,aAAaqC,oBAAoB,KAAK,OAAO;YAC/C,IAAI,CAAClB,qBAAqBN,KAAK,EAAE;gBAC/BM,qBAAqBN,KAAK,GAAG,CAAC;YAChC;YAEA,MAAMyB,aACJnB,qBAAqBN,KAAK,EAAEyB,cAAcnB,qBAAqBN,KAAK,EAAE0B;YACxEpB,qBAAqBN,KAAK,CAACyB,UAAU,GAAG9C,eAAe;gBACrD8C;gBACAE,cAAc,CAACC,OACbtD,yBAAyB;wBACvBuD,iBAAiB,GAAGlC,sBAAsB,CAAC,EAAEE,6BAA6B;wBAC1EmB,KAAKY,KAAKZ,GAAG;wBACbrB;wBACAE;wBACAP;wBACAD;oBACF;YACJ;QACF;QAEA,IAAIyC;QAEJ,MAAM,CAACC,iBAAiBC,sBAAsB,GAAGC,OAAOC,IAAI,CAAC/C,aAAakB,WAAW,EAAE8B,MAAM,CAG3F,CAACC,KAAKtD;YACJ,IAAIA,SAASwB,qBAAqBxB,IAAI,EAAE;gBACtC,OAAOsD;YACT;YACA,IAAIjD,cAAckB,aAAa,CAACvB,KAAK,EAAEuD,UAAU;gBAC/CD,GAAG,CAAC,EAAE,CAACvB,IAAI,CAAC/B;YACd,OAAO;gBACLsD,GAAG,CAAC,EAAE,CAACvB,IAAI,CAAC/B;YACd;YAEA,OAAOsD;QACT,GACA;YAAC,EAAE;YAAE,EAAE;SAAC;QAGV,qEAAqE;QACrE,MAAME,6BAAuC,EAAE;QAE/C,4CAA4C;QAC5C,MAAMC,8BAAwC,EAAE;QAEhD;;KAEC,GACDtD,eAAeoB,WAAW,CAACmC,OAAO,CAAC,CAAClB;YAClC;;OAEC,GACD,IAAIA,WAAWxC,IAAI,KAAKQ,uBAAuB;gBAC7CwC,mBAAmBR;gBAEnB,IAAInC,aAAasD,0BAA0B,KAAK,OAAO;oBACrD;;;WAGC,GACD1C,mBAAmBc,IAAI,CAAC;wBACtBQ,gBAAgBf,qBAAqBxB,IAAI;wBACzCwC;wBACAC,WAAW;wBACX5B;wBACAE;wBACAR;oBACF;gBACF;gBAEA,IAAIF,aAAauD,oBAAoB,KAAK,OAAO;oBAC/C;;;WAGC,GACD,IAAI,CAACpB,WAAWtB,KAAK,EAAE;wBACrBsB,WAAWtB,KAAK,GAAG,CAAC;oBACtB;oBAEA,MAAMyB,aAAaH,WAAWtB,KAAK,EAAEyB,cAAcH,WAAWtB,KAAK,EAAE0B;oBACrEJ,WAAWtB,KAAK,CAACyB,UAAU,GAAG9C,eAAe;wBAC3C8C;wBACAE,cAAc,CAACC,OACbtD,yBAAyB;gCACvBuD,iBAAiB;gCACjBb,KAAKY,KAAKZ,GAAG;gCACbrB;gCACAE;gCACAP;gCACAD;4BACF;oBACJ;gBACF;gBAEA,IAAIF,aAAawD,wBAAwB,KAAK,OAAO;oBACnD;;;;WAIC,GACDpE,iBAAiB;wBACf+C;wBACAsB,cAAc;+BAAIb;+BAAoBC;yBAAsB;wBAC5DvC;wBACAH;wBACAuD,WAAWvC,qBAAqBxB,IAAI;wBACpCgE,4BAA4BnD;wBAC5BoD,kCAAkClD;oBACpC;gBACF;gBAEA;;SAEC,GACDyB,WAAWV,MAAM,CAACC,IAAI,CAAC;oBACrBnB,MAAM;oBACNsD,MAAM;oBACNhD,OAAO;wBACLC,YAAY;4BACVgD,OAAO;gCACLC,MAAM;4BACR;wBACF;wBACAC,UAAU;4BAAEC,UAAU;4BAAMC,QAAQ;wBAAK;oBAC3C;gBACF;gBAEA/B,WAAWgC,SAAS,GAAG;uBACjBhC,WAAWgC,SAAS,IAAI,EAAE;oBAC9BnF,yBAAyB;wBACvBwB;wBACAE;wBACAP;wBACAiE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;wBAClDlE;oBACF;iBACD;YACH,OAAO,IAAIF,aAAakB,WAAW,EAAE,CAACiB,WAAWxC,IAAI,CAAC,EAAE;gBACtD,IAAIwC,WAAWxC,IAAI,KAAKwB,qBAAqBxB,IAAI,EAAE;oBACjD,sCAAsC;oBACtC0E,QAAQC,IAAI,CACV,CAAC,kDAAkD,EAAEnC,WAAWxC,IAAI,CAAC,oMAAoM,CAAC;oBAE5Q;gBACF;gBACAyD,4BAA4B1B,IAAI,CAACS,WAAWxC,IAAI;gBAChD,MAAMuD,WAAWpB,QAAQ9B,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAEuD;gBAEpE,IAAIA,UAAU;oBACZf,WAAWoC,gBAAgB,GAAG;gBAChC;gBAEA,IAAI,CAACvE,aAAawE,KAAK,IAAI,CAACtB,UAAU;oBACpCf,WAAWtB,KAAK,KAAK,CAAC;oBACtBsB,WAAWtB,KAAK,CAACC,UAAU,KAAK,CAAC;oBACjCqB,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,KAAK,CAAC;oBACtCtC,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,CAACC,aAAa,KAAK,EAAE;oBACrDvC,WAAWtB,KAAK,CAACC,UAAU,CAAC2D,IAAI,CAACC,aAAa,CAAChD,IAAI,CAAC;wBAClDqC,MAAM;oBACR;gBACF;gBAEA;;SAEC,GACD5B,WAAWV,MAAM,GAAGlC,yBAAyB;oBAC3C4D;oBACAtD,QAAQC;oBACR2B,QAAQU,WAAWV,MAAM;oBACzBkD,8BAA8B/B;oBAC9BgC,0BAA0B/B;oBAC1BvC;oBACAE;oBACAE;oBACAP;oBACAD;gBACF;gBAEA,IAAIF,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAEkF,sBAAsB,MAAM;oBACzE;;WAEC,GACD1C,WAAWV,MAAM,CAACqD,OAAO,CACvB7F,YAAY;wBACVsB,MAAMD;wBACNkE,OAAOxE,aAAawE,KAAK;wBACzBO,mBAAmBjG,mBAAmBqD;wBACtC6C,WAAWhF,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAEsF,uBAClDjF,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAEsF,uBAC3CjF,aAAaf,WAAW,IAAI,CAAC;wBACjCuB;wBACAE;wBACAP;wBACA+E,QAAQhC;oBACV;gBAEJ;gBAEA,MAAM,EAAEiC,aAAa,EAAEC,iBAAiB,EAAE,GAAGpF,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,IAAI,CAAC;gBAC3F,IAAIwF,iBAAiBC,qBAAqB,MAAM;oBAC9C;;;WAGC,GACDjD,WAAWtB,KAAK,GAAGsB,WAAWtB,KAAK,IAAI,CAAC;oBACxCsB,WAAWtB,KAAK,CAACyB,UAAU,GAAG9C,eAAe;wBAC3C8C,YAAYH,WAAWtB,KAAK,EAAEyB,cAAcH,WAAWtB,KAAK,EAAE0B;wBAC9DC,cAAc,CAACC,OACbtD,yBAAyB;gCACvBuD,iBAAiBpC;gCACjBuB,KAAKY,KAAKZ,GAAG;gCACbrB;gCACAE;gCACAP;gCACAD;4BACF;oBACJ;gBACF;gBAEA,IAAIF,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAE0F,oBAAoB,OAAO;oBACxE;;WAEC,GACDzE,mBAAmBc,IAAI,CAAC;wBACtBM,sBAAsBhC,aAAakB,WAAW,CAACiB,WAAWxC,IAAI,CAAC,EAAE2F;wBACjEpD,gBAAgBf,qBAAqBxB,IAAI;wBACzCwC;wBACAC,WAAW9B;wBACXE;wBACAE;wBACAR;oBACF;gBACF;YACF;QACF;QAEA,IAAI,CAACyC,kBAAkB;YACrB,MAAM,IAAIpB,MAAM,CAAC,wCAAwC,EAAEpB,uBAAuB;QACpF;QAEA,IACEiD,4BAA4BmC,MAAM,KAClC3C,gBAAgB2C,MAAM,GAAG1C,sBAAsB0C,MAAM,EACrD;YACA,MAAMC,eAAe;mBAAI5C;mBAAoBC;aAAsB,CAAC4C,MAAM,CACxE,CAAC9F,OAAS,CAACyD,4BAA4BsC,QAAQ,CAAC/F;YAElD,sCAAsC;YACtC0E,QAAQsB,KAAK,CACXlG,UAAUmG,UAAU,CAAC,kCACrB,uBACAJ,cACA;QAEJ;QAEAlG,oBAAoB;YAAEO,QAAQC;YAAgB+F,QAAQjF;QAAmB;QAEzE;;KAEC,GACDd,eAAee,KAAK,CAACC,UAAU,CAACG,SAAS,CAACS,IAAI,CAAC;YAC7CoE,aAAa;gBACXtF;gBACAE;gBACAP,uBAAuBwC,iBAAiBhD,IAAI;gBAC5CyE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;gBAClDlE;YACF;YACA6D,MAAM;QACR;QAEA;;KAEC,GACD,IAAIlB,sBAAsB0C,MAAM,EAAE;YAChCzF,eAAee,KAAK,CAACC,UAAU,CAACC,OAAO,CAACW,IAAI,CAAC;gBAC3CqC,MAAM;gBACNgC,aAAa;oBACXC,aAAanD;oBACbvC;oBACAE;oBACAE;oBACAP;oBACAiE,YAAYzB,iBAAiB9B,KAAK,EAAEuD,cAAc;oBAClDlE;gBACF;YACF;QACF;QAEA;;KAEC,GACDJ,eAAee,KAAK,CAACC,UAAU,CAACE,SAAS,CAACU,IAAI,CAAC;YAC7CoE,aAAa;gBACXrC,cAAc;uBACTb;uBACAC;oBACH1B,qBAAqBxB,IAAI;oBACzBgD,iBAAiBhD,IAAI;iBACtB;gBACDsG,OAAOjG,aAAakG,mBAAmB,IAAIC;YAC7C;YACApC,MAAM;QACR;QAEA;;KAEC,GACD,IAAI,CAACjE,eAAesG,IAAI,EAAE;YACxBtG,eAAesG,IAAI,GAAG,CAAC;QACzB;QACAtD,OAAOuD,OAAO,CAAChH,cAAcgE,OAAO,CAAC,CAAC,CAACiD,QAAQC,iBAAiB;YAC9D,MAAMC,cAAcF;YACpB,IAAI,CAACxG,eAAesG,IAAI,CAAE/G,YAAY,EAAE;gBACtCS,eAAesG,IAAI,CAAE/G,YAAY,GAAG,CAAC;YACvC;YACA,IAAI,CAAEmH,CAAAA,eAAe1G,eAAesG,IAAI,CAAE/G,YAAY,AAAD,GAAI;gBACvDS,eAAesG,IAAI,CAAE/G,YAAY,CAACmH,YAAY,GAAG,CAAC;YACpD;YACA,IAAI,CAAE,CAAA,yBAAyB1G,eAAesG,IAAI,CAAE/G,YAAY,CAACmH,YAAY,GAAI;;gBAC7E1G,eAAesG,IAAI,CAAE/G,YAAY,CAACmH,YAAY,AAAoC,CAClF,sBACD,GAAG,CAAC;YACP;;YAEE1G,eAAesG,IAAI,CAAE/G,YAAY,CAACmH,YAAY,AAAoC,CAClF,sBACD,GAAG;gBACF,GAAGD,iBAAiBlH,YAAY,CAAC,sBAAsB;gBACvD,GAAIW,aAAaoG,IAAI,EAAE/G,cAAc,CAACmH,YAAY,IAAI,CAAC,CAAC;YAC1D;QACF;QAEA,OAAO1G;IACT;AACF,GAAE"}

package/dist/utilities/addCollectionAccess.d.ts

@@ -1,7 +1,7 @@
-import type { CollectionConfig } from 'payload';
+import type { CollectionConfig, Config } from 'payload';
 import type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js';
 export declare const collectionAccessKeys: AllAccessKeys;
-type Args = {
+export type TenantAccessConfig = {
     accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride'];
     adminUsersSlug: string;
     collection: CollectionConfig;
@@ -10,10 +10,8 @@ type Args = {
     tenantsArrayTenantFieldName?: string;
     userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'];
 };
-/**
- * Adds tenant access constraint to collection
- * - constrains access a users assigned tenants
- */
-export declare const addCollectionAccess: ({ accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, }: Args) => void;
-export {};
+export declare const addCollectionAccess: ({ config, scopes, }: {
+    config: Config;
+    scopes: TenantAccessConfig[];
+}) => void;
 //# sourceMappingURL=addCollectionAccess.d.ts.map

package/dist/utilities/addCollectionAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addCollectionAccess.d.ts","sourceRoot":"","sources":["../../src/utilities/addCollectionAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAIzE,eAAO,MAAM,oBAAoB,EAAE,aAOzB,CAAA;AAEV,KAAK,IAAI,GAAG;IACV,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,oJAQ7B,IAAI,KAAG,IAiBT,CAAA"}
+{"version":3,"file":"addCollectionAccess.d.ts","sourceRoot":"","sources":["../../src/utilities/addCollectionAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA4B,gBAAgB,EAAE,MAAM,EAAe,MAAM,SAAS,CAAA;AAE9F,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAIzE,eAAO,MAAM,oBAAoB,EAAE,aAOzB,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG;IAC/B,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,CAAA;AAsED,eAAO,MAAM,mBAAmB,wBAG7B;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,kBAAkB,EAAE,CAAA;CAC7B,KAAG,IA4CH,CAAA"}

package/dist/utilities/addCollectionAccess.js

@@ -1,4 +1,4 @@
-import { withTenantAccess } from './withTenantAccess.js';
+import { getTenantAccess } from './getTenantAccess.js';
 export const collectionAccessKeys = [
     'create',
     'read',
@@ -7,26 +7,97 @@ export const collectionAccessKeys = [
     'readVersions',
     'unlock'
 ];
-/**
- * Adds tenant access constraint to collection
- * - constrains access a users assigned tenants
- */ export const addCollectionAccess = ({ accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants })=>{
-    collectionAccessKeys.forEach((key)=>{
-        if (!collection.access) {
-            collection.access = {};
-        }
-        collection.access[key] = withTenantAccess({
-            accessFunction: collection.access?.[key],
-            accessKey: key,
-            accessResultCallback,
-            adminUsersSlug,
-            collection,
-            fieldName: key === 'readVersions' ? `version.${fieldName}` : fieldName,
-            tenantsArrayFieldName,
-            tenantsArrayTenantFieldName,
-            userHasAccessToAllTenants
-        });
+const getTenantAccessResult = ({ accessKey, accessResult, accessResultCallback, adminUsersSlug, args, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants })=>{
+    const finish = (result)=>accessResultCallback ? accessResultCallback({
+            accessKey,
+            accessResult: result,
+            ...args
+        }) : result;
+    if (!accessResult) {
+        return finish(false);
+    }
+    const user = args.req.user;
+    if (!user || user.collection !== adminUsersSlug || userHasAccessToAllTenants(user)) {
+        return finish(accessResult);
+    }
+    const tenantConstraint = getTenantAccess({
+        fieldName,
+        tenantsArrayFieldName,
+        tenantsArrayTenantFieldName,
+        user
+    });
+    if (tenantConstraint[fieldName]?.in.length === 0) {
+        return finish(collection.slug === user.collection ? {
+            id: {
+                equals: user.id
+            }
+        } : false);
+    }
+    const tenantResult = collection.slug === user.collection ? {
+        or: [
+            {
+                id: {
+                    equals: user.id
+                }
+            },
+            tenantConstraint
+        ]
+    } : tenantConstraint;
+    return finish(accessResult === true ? tenantResult : {
+        and: [
+            accessResult,
+            tenantResult
+        ]
     });
 };
+const wrapCollectionAccess = (scope)=>{
+    scope.collection.access ??= {};
+    for (const accessKey of collectionAccessKeys){
+        const accessFunction = scope.collection.access[accessKey] ?? (({ req })=>Boolean(req.user));
+        scope.collection.access[accessKey] = async (args)=>getTenantAccessResult({
+                ...scope,
+                accessKey,
+                accessResult: await accessFunction(args),
+                args,
+                fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName
+            });
+    }
+};
+export const addCollectionAccess = ({ config, scopes })=>{
+    const baseAccessScopes = new Map();
+    for (const scope of scopes){
+        if (scope.accessResultCallback) {
+            wrapCollectionAccess(scope);
+        } else {
+            baseAccessScopes.set(scope.collection.slug, scope);
+        }
+    }
+    if (!baseAccessScopes.size) {
+        return;
+    }
+    config.baseAccess ??= {};
+    config.baseAccess.collections ??= {};
+    for (const accessKey of collectionAccessKeys){
+        const baseAccessFunction = config.baseAccess.collections[accessKey];
+        config.baseAccess.collections[accessKey] = async (args)=>{
+            const baseResult = baseAccessFunction ? await baseAccessFunction(args) : true;
+            const scope = baseAccessScopes.get(args.slug);
+            if (!baseResult || !scope) {
+                return baseResult;
+            }
+            if (accessKey === 'create' && typeof baseResult === 'object') {
+                return baseResult;
+            }
+            const tenantResult = await getTenantAccessResult({
+                ...scope,
+                accessKey,
+                accessResult: baseResult,
+                args,
+                fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName
+            });
+            return accessKey === 'create' ? Boolean(tenantResult) : tenantResult;
+        };
+    }
+};
 
 //# sourceMappingURL=addCollectionAccess.js.map

package/dist/utilities/addCollectionAccess.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/addCollectionAccess.ts"],"sourcesContent":["import type { CollectionConfig } from 'payload'\n\nimport type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js'\n\nimport { withTenantAccess } from './withTenantAccess.js'\n\nexport const collectionAccessKeys: AllAccessKeys = [\n  'create',\n  'read',\n  'update',\n  'delete',\n  'readVersions',\n  'unlock',\n] as const\n\ntype Args = {\n  accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride']\n  adminUsersSlug: string\n  collection: CollectionConfig\n  fieldName: string\n  tenantsArrayFieldName?: string\n  tenantsArrayTenantFieldName?: string\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n}\n\n/**\n * Adds tenant access constraint to collection\n * - constrains access a users assigned tenants\n */\nexport const addCollectionAccess = ({\n  accessResultCallback,\n  adminUsersSlug,\n  collection,\n  fieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  userHasAccessToAllTenants,\n}: Args): void => {\n  collectionAccessKeys.forEach((key) => {\n    if (!collection.access) {\n      collection.access = {}\n    }\n    collection.access[key] = withTenantAccess({\n      accessFunction: collection.access?.[key],\n      accessKey: key,\n      accessResultCallback,\n      adminUsersSlug,\n      collection,\n      fieldName: key === 'readVersions' ? `version.${fieldName}` : fieldName,\n      tenantsArrayFieldName,\n      tenantsArrayTenantFieldName,\n      userHasAccessToAllTenants,\n    })\n  })\n}\n"],"names":["withTenantAccess","collectionAccessKeys","addCollectionAccess","accessResultCallback","adminUsersSlug","collection","fieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","forEach","key","access","accessFunction","accessKey"],"mappings":"AAIA,SAASA,gBAAgB,QAAQ,wBAAuB;AAExD,OAAO,MAAMC,uBAAsC;IACjD;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV;;;CAGC,GACD,OAAO,MAAMC,sBAAsB,CAAC,EAClCC,oBAAoB,EACpBC,cAAc,EACdC,UAAU,EACVC,SAAS,EACTC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EACpB;IACLR,qBAAqBS,OAAO,CAAC,CAACC;QAC5B,IAAI,CAACN,WAAWO,MAAM,EAAE;YACtBP,WAAWO,MAAM,GAAG,CAAC;QACvB;QACAP,WAAWO,MAAM,CAACD,IAAI,GAAGX,iBAAiB;YACxCa,gBAAgBR,WAAWO,MAAM,EAAE,CAACD,IAAI;YACxCG,WAAWH;YACXR;YACAC;YACAC;YACAC,WAAWK,QAAQ,iBAAiB,CAAC,QAAQ,EAAEL,WAAW,GAAGA;YAC7DC;YACAC;YACAC;QACF;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/utilities/addCollectionAccess.ts"],"sourcesContent":["import type { AccessArgs, AccessResult, CollectionConfig, Config, User, Where } from 'payload'\n\nimport type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js'\n\nimport { getTenantAccess } from './getTenantAccess.js'\n\nexport const collectionAccessKeys: AllAccessKeys = [\n  'create',\n  'read',\n  'update',\n  'delete',\n  'readVersions',\n  'unlock',\n] as const\n\nexport type TenantAccessConfig = {\n  accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride']\n  adminUsersSlug: string\n  collection: CollectionConfig\n  fieldName: string\n  tenantsArrayFieldName?: string\n  tenantsArrayTenantFieldName?: string\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n}\n\nconst getTenantAccessResult = ({\n  accessKey,\n  accessResult,\n  accessResultCallback,\n  adminUsersSlug,\n  args,\n  collection,\n  fieldName,\n  tenantsArrayFieldName,\n  tenantsArrayTenantFieldName,\n  userHasAccessToAllTenants,\n}: {\n  accessKey: AllAccessKeys[number]\n  accessResult: AccessResult\n  args: AccessArgs\n} & TenantAccessConfig): AccessResult | Promise<AccessResult> => {\n  const finish = (result: AccessResult): AccessResult | Promise<AccessResult> =>\n    accessResultCallback\n      ? accessResultCallback({ accessKey, accessResult: result, ...args })\n      : result\n\n  if (!accessResult) {\n    return finish(false)\n  }\n\n  const user = args.req.user\n\n  if (!user || user.collection !== adminUsersSlug || userHasAccessToAllTenants(user as User)) {\n    return finish(accessResult)\n  }\n\n  const tenantConstraint = getTenantAccess({\n    fieldName,\n    tenantsArrayFieldName,\n    tenantsArrayTenantFieldName,\n    user,\n  })\n\n  if (tenantConstraint[fieldName]?.in.length === 0) {\n    return finish(collection.slug === user.collection ? { id: { equals: user.id } } : false)\n  }\n\n  const tenantResult: Where =\n    collection.slug === user.collection\n      ? { or: [{ id: { equals: user.id } }, tenantConstraint] }\n      : tenantConstraint\n\n  return finish(accessResult === true ? tenantResult : { and: [accessResult, tenantResult] })\n}\n\nconst wrapCollectionAccess = (scope: TenantAccessConfig): void => {\n  scope.collection.access ??= {}\n\n  for (const accessKey of collectionAccessKeys) {\n    const accessFunction =\n      scope.collection.access[accessKey] ?? (({ req }: AccessArgs) => Boolean(req.user))\n\n    scope.collection.access[accessKey] = async (args) =>\n      getTenantAccessResult({\n        ...scope,\n        accessKey,\n        accessResult: await accessFunction(args),\n        args,\n        fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName,\n      })\n  }\n}\n\nexport const addCollectionAccess = ({\n  config,\n  scopes,\n}: {\n  config: Config\n  scopes: TenantAccessConfig[]\n}): void => {\n  const baseAccessScopes = new Map<string, TenantAccessConfig>()\n\n  for (const scope of scopes) {\n    if (scope.accessResultCallback) {\n      wrapCollectionAccess(scope)\n    } else {\n      baseAccessScopes.set(scope.collection.slug, scope)\n    }\n  }\n\n  if (!baseAccessScopes.size) {\n    return\n  }\n\n  config.baseAccess ??= {}\n  config.baseAccess.collections ??= {}\n\n  for (const accessKey of collectionAccessKeys) {\n    const baseAccessFunction = config.baseAccess.collections[accessKey]\n\n    config.baseAccess.collections[accessKey] = async (args) => {\n      const baseResult = baseAccessFunction ? await baseAccessFunction(args) : true\n      const scope = baseAccessScopes.get(args.slug)\n\n      if (!baseResult || !scope) {\n        return baseResult\n      }\n\n      if (accessKey === 'create' && typeof baseResult === 'object') {\n        return baseResult\n      }\n\n      const tenantResult = await getTenantAccessResult({\n        ...scope,\n        accessKey,\n        accessResult: baseResult,\n        args,\n        fieldName: accessKey === 'readVersions' ? `version.${scope.fieldName}` : scope.fieldName,\n      })\n\n      return accessKey === 'create' ? Boolean(tenantResult) : tenantResult\n    }\n  }\n}\n"],"names":["getTenantAccess","collectionAccessKeys","getTenantAccessResult","accessKey","accessResult","accessResultCallback","adminUsersSlug","args","collection","fieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","finish","result","user","req","tenantConstraint","in","length","slug","id","equals","tenantResult","or","and","wrapCollectionAccess","scope","access","accessFunction","Boolean","addCollectionAccess","config","scopes","baseAccessScopes","Map","set","size","baseAccess","collections","baseAccessFunction","baseResult","get"],"mappings":"AAIA,SAASA,eAAe,QAAQ,uBAAsB;AAEtD,OAAO,MAAMC,uBAAsC;IACjD;IACA;IACA;IACA;IACA;IACA;CACD,CAAS;AAYV,MAAMC,wBAAwB,CAAC,EAC7BC,SAAS,EACTC,YAAY,EACZC,oBAAoB,EACpBC,cAAc,EACdC,IAAI,EACJC,UAAU,EACVC,SAAS,EACTC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EAKL;IACpB,MAAMC,SAAS,CAACC,SACdT,uBACIA,qBAAqB;YAAEF;YAAWC,cAAcU;YAAQ,GAAGP,IAAI;QAAC,KAChEO;IAEN,IAAI,CAACV,cAAc;QACjB,OAAOS,OAAO;IAChB;IAEA,MAAME,OAAOR,KAAKS,GAAG,CAACD,IAAI;IAE1B,IAAI,CAACA,QAAQA,KAAKP,UAAU,KAAKF,kBAAkBM,0BAA0BG,OAAe;QAC1F,OAAOF,OAAOT;IAChB;IAEA,MAAMa,mBAAmBjB,gBAAgB;QACvCS;QACAC;QACAC;QACAI;IACF;IAEA,IAAIE,gBAAgB,CAACR,UAAU,EAAES,GAAGC,WAAW,GAAG;QAChD,OAAON,OAAOL,WAAWY,IAAI,KAAKL,KAAKP,UAAU,GAAG;YAAEa,IAAI;gBAAEC,QAAQP,KAAKM,EAAE;YAAC;QAAE,IAAI;IACpF;IAEA,MAAME,eACJf,WAAWY,IAAI,KAAKL,KAAKP,UAAU,GAC/B;QAAEgB,IAAI;YAAC;gBAAEH,IAAI;oBAAEC,QAAQP,KAAKM,EAAE;gBAAC;YAAE;YAAGJ;SAAiB;IAAC,IACtDA;IAEN,OAAOJ,OAAOT,iBAAiB,OAAOmB,eAAe;QAAEE,KAAK;YAACrB;YAAcmB;SAAa;IAAC;AAC3F;AAEA,MAAMG,uBAAuB,CAACC;IAC5BA,MAAMnB,UAAU,CAACoB,MAAM,KAAK,CAAC;IAE7B,KAAK,MAAMzB,aAAaF,qBAAsB;QAC5C,MAAM4B,iBACJF,MAAMnB,UAAU,CAACoB,MAAM,CAACzB,UAAU,IAAK,CAAA,CAAC,EAAEa,GAAG,EAAc,GAAKc,QAAQd,IAAID,IAAI,CAAA;QAElFY,MAAMnB,UAAU,CAACoB,MAAM,CAACzB,UAAU,GAAG,OAAOI,OAC1CL,sBAAsB;gBACpB,GAAGyB,KAAK;gBACRxB;gBACAC,cAAc,MAAMyB,eAAetB;gBACnCA;gBACAE,WAAWN,cAAc,iBAAiB,CAAC,QAAQ,EAAEwB,MAAMlB,SAAS,EAAE,GAAGkB,MAAMlB,SAAS;YAC1F;IACJ;AACF;AAEA,OAAO,MAAMsB,sBAAsB,CAAC,EAClCC,MAAM,EACNC,MAAM,EAIP;IACC,MAAMC,mBAAmB,IAAIC;IAE7B,KAAK,MAAMR,SAASM,OAAQ;QAC1B,IAAIN,MAAMtB,oBAAoB,EAAE;YAC9BqB,qBAAqBC;QACvB,OAAO;YACLO,iBAAiBE,GAAG,CAACT,MAAMnB,UAAU,CAACY,IAAI,EAAEO;QAC9C;IACF;IAEA,IAAI,CAACO,iBAAiBG,IAAI,EAAE;QAC1B;IACF;IAEAL,OAAOM,UAAU,KAAK,CAAC;IACvBN,OAAOM,UAAU,CAACC,WAAW,KAAK,CAAC;IAEnC,KAAK,MAAMpC,aAAaF,qBAAsB;QAC5C,MAAMuC,qBAAqBR,OAAOM,UAAU,CAACC,WAAW,CAACpC,UAAU;QAEnE6B,OAAOM,UAAU,CAACC,WAAW,CAACpC,UAAU,GAAG,OAAOI;YAChD,MAAMkC,aAAaD,qBAAqB,MAAMA,mBAAmBjC,QAAQ;YACzE,MAAMoB,QAAQO,iBAAiBQ,GAAG,CAACnC,KAAKa,IAAI;YAE5C,IAAI,CAACqB,cAAc,CAACd,OAAO;gBACzB,OAAOc;YACT;YAEA,IAAItC,cAAc,YAAY,OAAOsC,eAAe,UAAU;gBAC5D,OAAOA;YACT;YAEA,MAAMlB,eAAe,MAAMrB,sBAAsB;gBAC/C,GAAGyB,KAAK;gBACRxB;gBACAC,cAAcqC;gBACdlC;gBACAE,WAAWN,cAAc,iBAAiB,CAAC,QAAQ,EAAEwB,MAAMlB,SAAS,EAAE,GAAGkB,MAAMlB,SAAS;YAC1F;YAEA,OAAON,cAAc,WAAW2B,QAAQP,gBAAgBA;QAC1D;IACF;AACF,EAAC"}

package/dist/utilities/addCollectionAccess.spec.js

@@ -0,0 +1,134 @@
+import { describe, expect, it, vi } from 'vitest';
+import { addCollectionAccess } from './addCollectionAccess.js';
+const createScope = (collection, accessResultCallback)=>({
+        accessResultCallback,
+        adminUsersSlug: 'users',
+        collection,
+        fieldName: 'tenant',
+        userHasAccessToAllTenants: ()=>false
+    });
+const createArgs = (slug = 'posts')=>({
+        req: {
+            user: {
+                collection: 'users',
+                id: 'user-1',
+                tenants: [
+                    {
+                        tenant: 'tenant-1'
+                    }
+                ]
+            }
+        },
+        slug
+    });
+describe('addCollectionAccess', ()=>{
+    it('adds tenant constraints through base access without replacing collection access', async ()=>{
+        const documentRead = vi.fn(()=>({
+                published: {
+                    equals: true
+                }
+            }));
+        const collection = {
+            slug: 'posts',
+            access: {
+                read: documentRead
+            },
+            fields: []
+        };
+        const config = {
+            baseAccess: {
+                collections: {
+                    read: ()=>({
+                            archived: {
+                                not_equals: true
+                            }
+                        })
+                }
+            }
+        };
+        addCollectionAccess({
+            config,
+            scopes: [
+                createScope(collection)
+            ]
+        });
+        expect(collection.access?.read).toBe(documentRead);
+        await expect(config.baseAccess?.collections?.read?.(createArgs())).resolves.toEqual({
+            and: [
+                {
+                    archived: {
+                        not_equals: true
+                    }
+                },
+                {
+                    tenant: {
+                        in: [
+                            'tenant-1'
+                        ]
+                    }
+                }
+            ]
+        });
+        await expect(config.baseAccess?.collections?.read?.(createArgs('pages'))).resolves.toEqual({
+            archived: {
+                not_equals: true
+            }
+        });
+        expect(documentRead).not.toHaveBeenCalled();
+    });
+    it('returns a boolean tenant result for collection create access', async ()=>{
+        const collection = {
+            slug: 'posts',
+            fields: []
+        };
+        const config = {};
+        addCollectionAccess({
+            config,
+            scopes: [
+                createScope(collection)
+            ]
+        });
+        await expect(config.baseAccess?.collections?.create?.(createArgs())).resolves.toBe(true);
+    });
+    it('keeps callback wrapping when an access result override is configured', async ()=>{
+        const documentResult = {
+            published: {
+                equals: true
+            }
+        };
+        const documentRead = vi.fn(()=>documentResult);
+        const accessResultCallback = vi.fn(({ accessResult })=>accessResult);
+        const collection = {
+            slug: 'posts',
+            access: {
+                read: documentRead
+            },
+            fields: []
+        };
+        const config = {};
+        addCollectionAccess({
+            config,
+            scopes: [
+                createScope(collection, accessResultCallback)
+            ]
+        });
+        expect(config.baseAccess).toBeUndefined();
+        await expect(collection.access?.read?.(createArgs())).resolves.toEqual({
+            and: [
+                documentResult,
+                {
+                    tenant: {
+                        in: [
+                            'tenant-1'
+                        ]
+                    }
+                }
+            ]
+        });
+        expect(accessResultCallback).toHaveBeenCalledWith(expect.objectContaining({
+            accessKey: 'read'
+        }));
+    });
+});
+
+//# sourceMappingURL=addCollectionAccess.spec.js.map

package/dist/utilities/addCollectionAccess.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/addCollectionAccess.spec.ts"],"sourcesContent":["import type { AccessArgs, CollectionConfig, Config } from 'payload'\n\nimport { describe, expect, it, vi } from 'vitest'\n\nimport type { TenantAccessConfig } from './addCollectionAccess.js'\n\nimport { addCollectionAccess } from './addCollectionAccess.js'\n\nconst createScope = (\n  collection: CollectionConfig,\n  accessResultCallback?: TenantAccessConfig['accessResultCallback'],\n): TenantAccessConfig => ({\n  accessResultCallback,\n  adminUsersSlug: 'users',\n  collection,\n  fieldName: 'tenant',\n  userHasAccessToAllTenants: () => false,\n})\n\nconst createArgs = (slug = 'posts'): AccessArgs => ({\n  req: {\n    user: {\n      collection: 'users',\n      id: 'user-1',\n      tenants: [{ tenant: 'tenant-1' }],\n    },\n  } as unknown as AccessArgs['req'],\n  slug,\n})\n\ndescribe('addCollectionAccess', () => {\n  it('adds tenant constraints through base access without replacing collection access', async () => {\n    const documentRead = vi.fn(() => ({ published: { equals: true } }))\n    const collection: CollectionConfig = {\n      slug: 'posts',\n      access: { read: documentRead },\n      fields: [],\n    }\n    const config = {\n      baseAccess: {\n        collections: {\n          read: () => ({ archived: { not_equals: true } }),\n        },\n      },\n    } as Config\n\n    addCollectionAccess({ config, scopes: [createScope(collection)] })\n\n    expect(collection.access?.read).toBe(documentRead)\n    await expect(config.baseAccess?.collections?.read?.(createArgs())).resolves.toEqual({\n      and: [{ archived: { not_equals: true } }, { tenant: { in: ['tenant-1'] } }],\n    })\n    await expect(config.baseAccess?.collections?.read?.(createArgs('pages'))).resolves.toEqual({\n      archived: { not_equals: true },\n    })\n    expect(documentRead).not.toHaveBeenCalled()\n  })\n\n  it('returns a boolean tenant result for collection create access', async () => {\n    const collection: CollectionConfig = { slug: 'posts', fields: [] }\n    const config = {} as Config\n\n    addCollectionAccess({ config, scopes: [createScope(collection)] })\n\n    await expect(config.baseAccess?.collections?.create?.(createArgs())).resolves.toBe(true)\n  })\n\n  it('keeps callback wrapping when an access result override is configured', async () => {\n    const documentResult = { published: { equals: true } }\n    const documentRead = vi.fn(() => documentResult)\n    const accessResultCallback = vi.fn(({ accessResult }) => accessResult)\n    const collection: CollectionConfig = {\n      slug: 'posts',\n      access: { read: documentRead },\n      fields: [],\n    }\n    const config = {} as Config\n\n    addCollectionAccess({\n      config,\n      scopes: [createScope(collection, accessResultCallback)],\n    })\n\n    expect(config.baseAccess).toBeUndefined()\n    await expect(collection.access?.read?.(createArgs())).resolves.toEqual({\n      and: [documentResult, { tenant: { in: ['tenant-1'] } }],\n    })\n    expect(accessResultCallback).toHaveBeenCalledWith(\n      expect.objectContaining({ accessKey: 'read' }),\n    )\n  })\n})\n"],"names":["describe","expect","it","vi","addCollectionAccess","createScope","collection","accessResultCallback","adminUsersSlug","fieldName","userHasAccessToAllTenants","createArgs","slug","req","user","id","tenants","tenant","documentRead","fn","published","equals","access","read","fields","config","baseAccess","collections","archived","not_equals","scopes","toBe","resolves","toEqual","and","in","not","toHaveBeenCalled","create","documentResult","accessResult","toBeUndefined","toHaveBeenCalledWith","objectContaining","accessKey"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAIjD,SAASC,mBAAmB,QAAQ,2BAA0B;AAE9D,MAAMC,cAAc,CAClBC,YACAC,uBACwB,CAAA;QACxBA;QACAC,gBAAgB;QAChBF;QACAG,WAAW;QACXC,2BAA2B,IAAM;IACnC,CAAA;AAEA,MAAMC,aAAa,CAACC,OAAO,OAAO,GAAkB,CAAA;QAClDC,KAAK;YACHC,MAAM;gBACJR,YAAY;gBACZS,IAAI;gBACJC,SAAS;oBAAC;wBAAEC,QAAQ;oBAAW;iBAAE;YACnC;QACF;QACAL;IACF,CAAA;AAEAZ,SAAS,uBAAuB;IAC9BE,GAAG,mFAAmF;QACpF,MAAMgB,eAAef,GAAGgB,EAAE,CAAC,IAAO,CAAA;gBAAEC,WAAW;oBAAEC,QAAQ;gBAAK;YAAE,CAAA;QAChE,MAAMf,aAA+B;YACnCM,MAAM;YACNU,QAAQ;gBAAEC,MAAML;YAAa;YAC7BM,QAAQ,EAAE;QACZ;QACA,MAAMC,SAAS;YACbC,YAAY;gBACVC,aAAa;oBACXJ,MAAM,IAAO,CAAA;4BAAEK,UAAU;gCAAEC,YAAY;4BAAK;wBAAE,CAAA;gBAChD;YACF;QACF;QAEAzB,oBAAoB;YAAEqB;YAAQK,QAAQ;gBAACzB,YAAYC;aAAY;QAAC;QAEhEL,OAAOK,WAAWgB,MAAM,EAAEC,MAAMQ,IAAI,CAACb;QACrC,MAAMjB,OAAOwB,OAAOC,UAAU,EAAEC,aAAaJ,OAAOZ,eAAeqB,QAAQ,CAACC,OAAO,CAAC;YAClFC,KAAK;gBAAC;oBAAEN,UAAU;wBAAEC,YAAY;oBAAK;gBAAE;gBAAG;oBAAEZ,QAAQ;wBAAEkB,IAAI;4BAAC;yBAAW;oBAAC;gBAAE;aAAE;QAC7E;QACA,MAAMlC,OAAOwB,OAAOC,UAAU,EAAEC,aAAaJ,OAAOZ,WAAW,WAAWqB,QAAQ,CAACC,OAAO,CAAC;YACzFL,UAAU;gBAAEC,YAAY;YAAK;QAC/B;QACA5B,OAAOiB,cAAckB,GAAG,CAACC,gBAAgB;IAC3C;IAEAnC,GAAG,gEAAgE;QACjE,MAAMI,aAA+B;YAAEM,MAAM;YAASY,QAAQ,EAAE;QAAC;QACjE,MAAMC,SAAS,CAAC;QAEhBrB,oBAAoB;YAAEqB;YAAQK,QAAQ;gBAACzB,YAAYC;aAAY;QAAC;QAEhE,MAAML,OAAOwB,OAAOC,UAAU,EAAEC,aAAaW,SAAS3B,eAAeqB,QAAQ,CAACD,IAAI,CAAC;IACrF;IAEA7B,GAAG,wEAAwE;QACzE,MAAMqC,iBAAiB;YAAEnB,WAAW;gBAAEC,QAAQ;YAAK;QAAE;QACrD,MAAMH,eAAef,GAAGgB,EAAE,CAAC,IAAMoB;QACjC,MAAMhC,uBAAuBJ,GAAGgB,EAAE,CAAC,CAAC,EAAEqB,YAAY,EAAE,GAAKA;QACzD,MAAMlC,aAA+B;YACnCM,MAAM;YACNU,QAAQ;gBAAEC,MAAML;YAAa;YAC7BM,QAAQ,EAAE;QACZ;QACA,MAAMC,SAAS,CAAC;QAEhBrB,oBAAoB;YAClBqB;YACAK,QAAQ;gBAACzB,YAAYC,YAAYC;aAAsB;QACzD;QAEAN,OAAOwB,OAAOC,UAAU,EAAEe,aAAa;QACvC,MAAMxC,OAAOK,WAAWgB,MAAM,EAAEC,OAAOZ,eAAeqB,QAAQ,CAACC,OAAO,CAAC;YACrEC,KAAK;gBAACK;gBAAgB;oBAAEtB,QAAQ;wBAAEkB,IAAI;4BAAC;yBAAW;oBAAC;gBAAE;aAAE;QACzD;QACAlC,OAAOM,sBAAsBmC,oBAAoB,CAC/CzC,OAAO0C,gBAAgB,CAAC;YAAEC,WAAW;QAAO;IAEhD;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-multi-tenant",
-  "version": "4.0.0-canary.27",
+  "version": "4.0.0-canary.28",
   "description": "Multi Tenant plugin for Payload",
   "keywords": [
     "payload",
@@ -80,13 +80,13 @@
   ],
   "devDependencies": {
     "@payloadcms/eslint-config": "3.28.0",
-    "@payloadcms/ui": "4.0.0-canary.27",
-    "payload": "4.0.0-canary.27",
-    "@payloadcms/translations": "4.0.0-canary.27"
+    "@payloadcms/translations": "4.0.0-canary.28",
+    "@payloadcms/ui": "4.0.0-canary.28",
+    "payload": "4.0.0-canary.28"
   },
   "peerDependencies": {
-    "@payloadcms/ui": "4.0.0-canary.27",
-    "payload": "4.0.0-canary.27"
+    "@payloadcms/ui": "4.0.0-canary.28",
+    "payload": "4.0.0-canary.28"
   },
   "homepage:": "https://payloadcms.com",
   "scripts": {

package/dist/utilities/combineWhereConstraints.d.ts

@@ -1,3 +0,0 @@
-import type { Where } from 'payload';
-export declare function combineWhereConstraints(constraints: Array<Where>): Where;
-//# sourceMappingURL=combineWhereConstraints.d.ts.map

package/dist/utilities/combineWhereConstraints.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"combineWhereConstraints.d.ts","sourceRoot":"","sources":["../../src/utilities/combineWhereConstraints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAEpC,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAgBxE"}

package/dist/utilities/combineWhereConstraints.js

@@ -1,19 +0,0 @@
-export function combineWhereConstraints(constraints) {
-    if (constraints.length === 0) {
-        return {};
-    }
-    if (constraints.length === 1 && constraints[0]) {
-        return constraints[0];
-    }
-    const andConstraint = {
-        and: []
-    };
-    constraints.forEach((constraint)=>{
-        if (andConstraint.and && constraint && typeof constraint === 'object') {
-            andConstraint.and.push(constraint);
-        }
-    });
-    return andConstraint;
-}
-
-//# sourceMappingURL=combineWhereConstraints.js.map

package/dist/utilities/combineWhereConstraints.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/combineWhereConstraints.ts"],"sourcesContent":["import type { Where } from 'payload'\n\nexport function combineWhereConstraints(constraints: Array<Where>): Where {\n  if (constraints.length === 0) {\n    return {}\n  }\n  if (constraints.length === 1 && constraints[0]) {\n    return constraints[0]\n  }\n  const andConstraint: Where = {\n    and: [],\n  }\n  constraints.forEach((constraint) => {\n    if (andConstraint.and && constraint && typeof constraint === 'object') {\n      andConstraint.and.push(constraint)\n    }\n  })\n  return andConstraint\n}\n"],"names":["combineWhereConstraints","constraints","length","andConstraint","and","forEach","constraint","push"],"mappings":"AAEA,OAAO,SAASA,wBAAwBC,WAAyB;IAC/D,IAAIA,YAAYC,MAAM,KAAK,GAAG;QAC5B,OAAO,CAAC;IACV;IACA,IAAID,YAAYC,MAAM,KAAK,KAAKD,WAAW,CAAC,EAAE,EAAE;QAC9C,OAAOA,WAAW,CAAC,EAAE;IACvB;IACA,MAAME,gBAAuB;QAC3BC,KAAK,EAAE;IACT;IACAH,YAAYI,OAAO,CAAC,CAACC;QACnB,IAAIH,cAAcC,GAAG,IAAIE,cAAc,OAAOA,eAAe,UAAU;YACrEH,cAAcC,GAAG,CAACG,IAAI,CAACD;QACzB;IACF;IACA,OAAOH;AACT"}

package/dist/utilities/withTenantAccess.d.ts

@@ -1,16 +0,0 @@
-import type { Access, AccessArgs, AccessResult, CollectionConfig } from 'payload';
-import type { AllAccessKeys, MultiTenantPluginConfig } from '../types.js';
-type Args = {
-    accessFunction?: Access;
-    accessKey: AllAccessKeys[number];
-    accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride'];
-    adminUsersSlug: string;
-    collection: CollectionConfig;
-    fieldName: string;
-    tenantsArrayFieldName?: string;
-    tenantsArrayTenantFieldName?: string;
-    userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants'];
-};
-export declare const withTenantAccess: ({ accessFunction, accessKey, accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, }: Args) => (args: AccessArgs) => Promise<AccessResult>;
-export {};
-//# sourceMappingURL=withTenantAccess.d.ts.map

package/dist/utilities/withTenantAccess.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"withTenantAccess.d.ts","sourceRoot":"","sources":["../../src/utilities/withTenantAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAe,MAAM,SAAS,CAAA;AAE9F,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAwB,MAAM,aAAa,CAAA;AAK/F,KAAK,IAAI,GAAG;IACV,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAChC,oBAAoB,CAAC,EAAE,uBAAuB,CAAC,2BAA2B,CAAC,CAAA;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC,2BAA2B,CAAC,CAAA;CAC1F,CAAA;AACD,eAAO,MAAM,gBAAgB,+KAWxB,IAAI,YACM,UAAU,KAAG,OAAO,CAAC,YAAY,CAkF7C,CAAA"}

package/dist/utilities/withTenantAccess.js

@@ -1,76 +0,0 @@
-import { combineWhereConstraints } from './combineWhereConstraints.js';
-import { getTenantAccess } from './getTenantAccess.js';
-export const withTenantAccess = ({ accessFunction, accessKey, accessResultCallback, adminUsersSlug, collection, fieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants })=>async (args)=>{
-        const constraints = [];
-        const accessFn = typeof accessFunction === 'function' ? accessFunction : ({ req })=>Boolean(req.user);
-        const accessResult = await accessFn(args);
-        if (accessResult === false) {
-            if (accessResultCallback) {
-                return accessResultCallback({
-                    accessKey,
-                    accessResult: false,
-                    ...args
-                });
-            } else {
-                return false;
-            }
-        } else if (accessResult && typeof accessResult === 'object') {
-            constraints.push(accessResult);
-        }
-        if (args.req.user && args.req.user.collection === adminUsersSlug && !userHasAccessToAllTenants(args.req.user)) {
-            const tenantConstraint = getTenantAccess({
-                fieldName,
-                tenantsArrayFieldName,
-                tenantsArrayTenantFieldName,
-                user: args.req.user
-            });
-            // User with no tenants should have no access to tenant-scoped documents
-            // except for their own user document
-            if (tenantConstraint[fieldName]?.in.length === 0) {
-                const result = collection.slug === args.req.user.collection ? {
-                    id: {
-                        equals: args.req.user.id
-                    }
-                } : false;
-                return accessResultCallback ? accessResultCallback({
-                    accessKey,
-                    accessResult: result,
-                    ...args
-                }) : result;
-            }
-            if (collection.slug === args.req.user.collection) {
-                constraints.push({
-                    or: [
-                        {
-                            id: {
-                                equals: args.req.user.id
-                            }
-                        },
-                        tenantConstraint
-                    ]
-                });
-            } else {
-                constraints.push(tenantConstraint);
-            }
-            if (accessResultCallback) {
-                return accessResultCallback({
-                    accessKey,
-                    accessResult: combineWhereConstraints(constraints),
-                    ...args
-                });
-            } else {
-                return combineWhereConstraints(constraints);
-            }
-        }
-        if (accessResultCallback) {
-            return accessResultCallback({
-                accessKey,
-                accessResult,
-                ...args
-            });
-        } else {
-            return accessResult;
-        }
-    };
-
-//# sourceMappingURL=withTenantAccess.js.map

package/dist/utilities/withTenantAccess.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/withTenantAccess.ts"],"sourcesContent":["import type { Access, AccessArgs, AccessResult, CollectionConfig, User, Where } from 'payload'\n\nimport type { AllAccessKeys, MultiTenantPluginConfig, UserWithTenantsField } from '../types.js'\n\nimport { combineWhereConstraints } from './combineWhereConstraints.js'\nimport { getTenantAccess } from './getTenantAccess.js'\n\ntype Args = {\n  accessFunction?: Access\n  accessKey: AllAccessKeys[number]\n  accessResultCallback?: MultiTenantPluginConfig['usersAccessResultOverride']\n  adminUsersSlug: string\n  collection: CollectionConfig\n  fieldName: string\n  tenantsArrayFieldName?: string\n  tenantsArrayTenantFieldName?: string\n  userHasAccessToAllTenants: Required<MultiTenantPluginConfig>['userHasAccessToAllTenants']\n}\nexport const withTenantAccess =\n  ({\n    accessFunction,\n    accessKey,\n    accessResultCallback,\n    adminUsersSlug,\n    collection,\n    fieldName,\n    tenantsArrayFieldName,\n    tenantsArrayTenantFieldName,\n    userHasAccessToAllTenants,\n  }: Args) =>\n  async (args: AccessArgs): Promise<AccessResult> => {\n    const constraints: Where[] = []\n    const accessFn =\n      typeof accessFunction === 'function'\n        ? accessFunction\n        : ({ req }: AccessArgs): AccessResult => Boolean(req.user)\n    const accessResult: AccessResult = await accessFn(args)\n\n    if (accessResult === false) {\n      if (accessResultCallback) {\n        return accessResultCallback({\n          accessKey,\n          accessResult: false,\n          ...args,\n        })\n      } else {\n        return false\n      }\n    } else if (accessResult && typeof accessResult === 'object') {\n      constraints.push(accessResult)\n    }\n\n    if (\n      args.req.user &&\n      args.req.user.collection === adminUsersSlug &&\n      !userHasAccessToAllTenants(args.req.user as User)\n    ) {\n      const tenantConstraint = getTenantAccess({\n        fieldName,\n        tenantsArrayFieldName,\n        tenantsArrayTenantFieldName,\n        user: args.req.user as UserWithTenantsField,\n      })\n\n      // User with no tenants should have no access to tenant-scoped documents\n      // except for their own user document\n      if (tenantConstraint[fieldName]?.in.length === 0) {\n        const result: AccessResult =\n          collection.slug === args.req.user.collection\n            ? { id: { equals: args.req.user.id } }\n            : false\n\n        return accessResultCallback\n          ? accessResultCallback({ accessKey, accessResult: result, ...args })\n          : result\n      }\n\n      if (collection.slug === args.req.user.collection) {\n        constraints.push({\n          or: [\n            {\n              id: {\n                equals: args.req.user.id,\n              },\n            },\n            tenantConstraint,\n          ],\n        })\n      } else {\n        constraints.push(tenantConstraint)\n      }\n\n      if (accessResultCallback) {\n        return accessResultCallback({\n          accessKey,\n          accessResult: combineWhereConstraints(constraints),\n          ...args,\n        })\n      } else {\n        return combineWhereConstraints(constraints)\n      }\n    }\n\n    if (accessResultCallback) {\n      return accessResultCallback({\n        accessKey,\n        accessResult,\n        ...args,\n      })\n    } else {\n      return accessResult\n    }\n  }\n"],"names":["combineWhereConstraints","getTenantAccess","withTenantAccess","accessFunction","accessKey","accessResultCallback","adminUsersSlug","collection","fieldName","tenantsArrayFieldName","tenantsArrayTenantFieldName","userHasAccessToAllTenants","args","constraints","accessFn","req","Boolean","user","accessResult","push","tenantConstraint","in","length","result","slug","id","equals","or"],"mappings":"AAIA,SAASA,uBAAuB,QAAQ,+BAA8B;AACtE,SAASC,eAAe,QAAQ,uBAAsB;AAatD,OAAO,MAAMC,mBACX,CAAC,EACCC,cAAc,EACdC,SAAS,EACTC,oBAAoB,EACpBC,cAAc,EACdC,UAAU,EACVC,SAAS,EACTC,qBAAqB,EACrBC,2BAA2B,EAC3BC,yBAAyB,EACpB,GACP,OAAOC;QACL,MAAMC,cAAuB,EAAE;QAC/B,MAAMC,WACJ,OAAOX,mBAAmB,aACtBA,iBACA,CAAC,EAAEY,GAAG,EAAc,GAAmBC,QAAQD,IAAIE,IAAI;QAC7D,MAAMC,eAA6B,MAAMJ,SAASF;QAElD,IAAIM,iBAAiB,OAAO;YAC1B,IAAIb,sBAAsB;gBACxB,OAAOA,qBAAqB;oBAC1BD;oBACAc,cAAc;oBACd,GAAGN,IAAI;gBACT;YACF,OAAO;gBACL,OAAO;YACT;QACF,OAAO,IAAIM,gBAAgB,OAAOA,iBAAiB,UAAU;YAC3DL,YAAYM,IAAI,CAACD;QACnB;QAEA,IACEN,KAAKG,GAAG,CAACE,IAAI,IACbL,KAAKG,GAAG,CAACE,IAAI,CAACV,UAAU,KAAKD,kBAC7B,CAACK,0BAA0BC,KAAKG,GAAG,CAACE,IAAI,GACxC;YACA,MAAMG,mBAAmBnB,gBAAgB;gBACvCO;gBACAC;gBACAC;gBACAO,MAAML,KAAKG,GAAG,CAACE,IAAI;YACrB;YAEA,wEAAwE;YACxE,qCAAqC;YACrC,IAAIG,gBAAgB,CAACZ,UAAU,EAAEa,GAAGC,WAAW,GAAG;gBAChD,MAAMC,SACJhB,WAAWiB,IAAI,KAAKZ,KAAKG,GAAG,CAACE,IAAI,CAACV,UAAU,GACxC;oBAAEkB,IAAI;wBAAEC,QAAQd,KAAKG,GAAG,CAACE,IAAI,CAACQ,EAAE;oBAAC;gBAAE,IACnC;gBAEN,OAAOpB,uBACHA,qBAAqB;oBAAED;oBAAWc,cAAcK;oBAAQ,GAAGX,IAAI;gBAAC,KAChEW;YACN;YAEA,IAAIhB,WAAWiB,IAAI,KAAKZ,KAAKG,GAAG,CAACE,IAAI,CAACV,UAAU,EAAE;gBAChDM,YAAYM,IAAI,CAAC;oBACfQ,IAAI;wBACF;4BACEF,IAAI;gCACFC,QAAQd,KAAKG,GAAG,CAACE,IAAI,CAACQ,EAAE;4BAC1B;wBACF;wBACAL;qBACD;gBACH;YACF,OAAO;gBACLP,YAAYM,IAAI,CAACC;YACnB;YAEA,IAAIf,sBAAsB;gBACxB,OAAOA,qBAAqB;oBAC1BD;oBACAc,cAAclB,wBAAwBa;oBACtC,GAAGD,IAAI;gBACT;YACF,OAAO;gBACL,OAAOZ,wBAAwBa;YACjC;QACF;QAEA,IAAIR,sBAAsB;YACxB,OAAOA,qBAAqB;gBAC1BD;gBACAc;gBACA,GAAGN,IAAI;YACT;QACF,OAAO;YACL,OAAOM;QACT;IACF,EAAC"}