@webiny/api-aco 0.0.0-unstable.2af142b57e → 0.0.0-unstable.3bc8100a7f

package/utils/createOperationsWrapper.js

@@ -0,0 +1,27 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createOperationsWrapper = void 0;
+var _error = _interopRequireDefault(require("@webiny/error"));
+const createOperationsWrapper = params => {
+  const {
+    cms,
+    modelName
+  } = params;
+  const withModel = async cb => {
+    const model = await cms.getModel(modelName);
+    if (!model) {
+      throw new _error.default(`Could not find "${modelName}" model.`, "MODEL_NOT_FOUND_ERROR");
+    }
+    return cb(model);
+  };
+  return {
+    withModel
+  };
+};
+exports.createOperationsWrapper = createOperationsWrapper;
+
+//# sourceMappingURL=createOperationsWrapper.js.map

package/utils/createOperationsWrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_error","_interopRequireDefault","require","createOperationsWrapper","params","cms","modelName","withModel","cb","model","getModel","WebinyError","exports"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import type { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { cms, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        const model = await cms.getModel(modelName);\n\n        if (!model) {\n            throw new WebinyError(`Could not find \"${modelName}\" model.`, \"MODEL_NOT_FOUND_ERROR\");\n        }\n\n        return cb(model);\n    };\n\n    return { withModel };\n};\n"],"mappings":";;;;;;;AAEA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAMO,MAAMC,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,GAAG;IAAEC;EAAU,CAAC,GAAGF,MAAM;EAEjC,MAAMG,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,MAAMC,KAAK,GAAG,MAAMJ,GAAG,CAACK,QAAQ,CAACJ,SAAS,CAAC;IAE3C,IAAI,CAACG,KAAK,EAAE;MACR,MAAM,IAAIE,cAAW,CAAC,mBAAmBL,SAAS,UAAU,EAAE,uBAAuB,CAAC;IAC1F;IAEA,OAAOE,EAAE,CAACC,KAAK,CAAC;EACpB,CAAC;EAED,OAAO;IAAEF;EAAU,CAAC;AACxB,CAAC;AAACK,OAAA,CAAAT,uBAAA,GAAAA,uBAAA","ignoreList":[]}

package/utils/decorators/CmsEntriesCrudDecorators.d.ts

@@ -0,0 +1,11 @@
+import type { AcoContext } from "../../types";
+type Context = Pick<AcoContext, "aco" | "cms">;
+interface EntryManagerCrudDecoratorsParams {
+    context: Context;
+}
+export declare class CmsEntriesCrudDecorators {
+    private readonly context;
+    constructor({ context }: EntryManagerCrudDecoratorsParams);
+    decorate(): void;
+}
+export {};

package/utils/decorators/CmsEntriesCrudDecorators.js

@@ -0,0 +1,210 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.CmsEntriesCrudDecorators = void 0;
+var _constants = require("../../constants");
+var _ListEntriesFactory = require("./ListEntriesFactory");
+var _FilterEntriesByFolderFactory = require("./FilterEntriesByFolderFactory");
+var _decorateIfModelAuthorizationEnabled = require("./decorateIfModelAuthorizationEnabled");
+class CmsEntriesCrudDecorators {
+  constructor({
+    context
+  }) {
+    this.context = context;
+  }
+  decorate() {
+    const context = this.context;
+    const folderLevelPermissions = context.aco.folderLevelPermissions;
+    const filterEntriesByFolder = new _FilterEntriesByFolderFactory.FilterEntriesByFolderFactory(folderLevelPermissions);
+    const listEntriesHandler = new _ListEntriesFactory.ListEntriesFactory(folderLevelPermissions);
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "listEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "listLatestEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "listPublishedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "listDeletedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getEntry", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return entry;
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getEntryById", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return entry;
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getLatestEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getPublishedEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "createEntry", async (...allParams) => {
+      const [decoratee, model, params, options] = allParams;
+      const folderId = params.wbyAco_location?.folderId || params.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return decoratee(model, params, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, params, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "createEntryRevisionFrom", async (...allParams) => {
+      const [decoratee, model, id, input, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return decoratee(model, id, input, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, id, input, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "updateEntry", async (...allParams) => {
+      const [decoratee, model, id, input, meta, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return decoratee(model, id, input, meta, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, id, input, meta, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "deleteEntry", async (...allParams) => {
+      const [decoratee, model, id, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return decoratee(model, id, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "d"
+      });
+      return decoratee(model, id, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "deleteEntryRevision", async (...allParams) => {
+      const [decoratee, model, id] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return decoratee(model, id);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "d"
+      });
+      return decoratee(model, id);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "moveEntry", async (...allParams) => {
+      const [decoratee, model, id, targetFolderId] = allParams;
+
+      /**
+       * First we need to check if user has access to the entries existing folder.
+       */
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId || _constants.ROOT_FOLDER;
+      /**
+       * If the entry is in the same folder we are trying to move it to, just continue.
+       */
+      if (folderId === targetFolderId) {
+        return decoratee(model, id, targetFolderId);
+      } else if (folderId !== _constants.ROOT_FOLDER) {
+        /**
+         * If entry current folder is not a root, check for access
+         */
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+        await folderLevelPermissions.ensureCanAccessFolderContent({
+          permissions,
+          rwd: "w"
+        });
+      }
+      /**
+       * If target folder is not a ROOT_FOLDER, check for access.
+       */
+      if (targetFolderId !== _constants.ROOT_FOLDER) {
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+        await folderLevelPermissions.ensureCanAccessFolderContent({
+          permissions,
+          rwd: "w"
+        });
+      }
+      return decoratee(model, id, targetFolderId);
+    });
+  }
+}
+exports.CmsEntriesCrudDecorators = CmsEntriesCrudDecorators;
+
+//# sourceMappingURL=CmsEntriesCrudDecorators.js.map

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_constants","require","_ListEntriesFactory","_FilterEntriesByFolderFactory","_decorateIfModelAuthorizationEnabled","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","FilterEntriesByFolderFactory","listEntriesHandler","ListEntriesFactory","decorateIfModelAuthorizationEnabled","cms","allParams","decoratee","model","initialParams","execute","params","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import type { AcoContext } from \"~/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listLatestEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listDeletedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,mBAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,oCAAA,GAAAH,OAAA;AAQO,MAAMI,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAIC,0DAA4B,CAACH,sBAAsB,CAAC;IACtF,MAAMI,kBAAkB,GAAG,IAAIC,sCAAkB,CAACL,sBAAsB,CAAC;IAEzE,IAAAM,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEF,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,mBAAmB,EACnB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,sBAAsB,EACtB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,oBAAoB,EACpB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,UAAU,EAAE,OAAO,GAAGC,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,cAAc,EAAE,OAAO,GAAGC,SAAS,KAAK;MACrF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,uBAAuB,EACvB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAE3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,0BAA0B,EAC1B,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAC3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC,GAAGhB,SAAS;MACrD,MAAMO,QAAQ,GAAGF,MAAM,CAACY,eAAe,EAAEV,QAAQ,IAAIF,MAAM,CAACG,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;MAC5C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,yBAAyB,EACzB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGhB,SAAS;MAExD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC,GAAGhB,SAAS;MAC9D,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;MACrD;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC,GAAGhB,SAAS;MAEjD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACQ,0BAA0B,CAChFrB,KAAK,EACL;QACIgB;MACJ,CACJ,CAAC;MAED,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,qBAAqB,EACrB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,CAAC,GAAGlB,SAAS;MAExC,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;MAC/B;MAEA,MAAMR,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED,IAAApB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,WAAW,EAAE,OAAO,GAAGC,SAAS,KAAK;MAClF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC,GAAGxB,SAAS;;MAExD;AACZ;AACA;MACY,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAOvB,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIW,cAAc,KAAKf,sBAAW,EAAE;QAChC,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAArC,wBAAA,GAAAA,wBAAA","ignoreList":[]}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import type { FolderLevelPermissions } from "../../flp";
+import type { CmsEntry } from "@webiny/api-headless-cms/types";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,30 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FilterEntriesByFolderFactory = void 0;
+var _constants = require("../../constants");
+class FilterEntriesByFolderFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+  }
+  async execute(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccessFolderContent ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+exports.FilterEntriesByFolderFactory = FilterEntriesByFolderFactory;
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_constants","require","FilterEntriesByFolderFactory","constructor","folderLevelPermissions","execute","entries","results","Promise","all","map","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","filter","exports"],"sources":["FilterEntriesByFolderFactory.ts"],"sourcesContent":["import type { FolderLevelPermissions } from \"~/flp\";\nimport type { CmsEntry } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"mappings":";;;;;;AAEA,IAAAA,UAAA,GAAAC,OAAA;AAEO,MAAMC,4BAA4B,CAAC;EAGtCC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;EACxD;EAEA,MAAaC,OAAOA,CAACC,OAAmB,EAAuB;IAC3D,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,OAAO,CAACI,GAAG,CAAC,MAAMC,KAAK,IAAI;MACvB,MAAMC,QAAQ,GAAGD,KAAK,CAACE,QAAQ,EAAED,QAAQ;MACzC,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAACX,sBAAsB,CAACY,yBAAyB,CAC3EJ,QACJ,CAAC;MACD,MAAMK,sBAAsB,GACxB,MAAM,IAAI,CAACb,sBAAsB,CAACa,sBAAsB,CAAC;QACrDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACN,OAAOD,sBAAsB,GAAGN,KAAK,GAAG,IAAI;IAChD,CAAC,CACL,CAAC;IAED,OAAOJ,OAAO,CAACY,MAAM,CAAER,KAAK,IAAwB,CAAC,CAACA,KAAK,CAAC;EAChE;AACJ;AAACS,OAAA,CAAAlB,4BAAA,GAAAA,4BAAA","ignoreList":[]}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,16 @@
+import type { FolderLevelPermissions } from "../../flp";
+import type { CmsEntry, CmsEntryListParams, CmsEntryMeta, CmsEntryValues } from "@webiny/api-headless-cms/types";
+import { type CmsModel } from "@webiny/api-headless-cms/types";
+interface ListEntriesFactoryCallbackParams {
+    decoratee: <T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, params: CmsEntryListParams) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;
+    model: CmsModel;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute({ decoratee, model, initialParams }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,107 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ListEntriesFactory = void 0;
+var _hasRootFolderId = require("./hasRootFolderId");
+class ListEntriesFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.permissionsCache = new Map();
+  }
+  async execute({
+    decoratee,
+    model,
+    initialParams = {}
+  }) {
+    const limit = initialParams?.limit || 50;
+    const where = initialParams?.where;
+    const params = {
+      ...initialParams,
+      limit
+    };
+    const hasRootFolder = (0, _hasRootFolderId.hasRootFolderId)({
+      model,
+      where
+    });
+
+    // If we're querying the root folder, skip permission checks
+    if (hasRootFolder) {
+      return await decoratee(model, params);
+    }
+    const resultEntries = [];
+    let totalCount = 0;
+    let hasMoreItems = true;
+    let cursor = null;
+    let fetchedAll = false;
+    let afterCursor = params.after;
+
+    // Process entries in batches until we have enough results or reach the end
+    while (!fetchedAll) {
+      const queryParams = {
+        ...params,
+        after: afterCursor
+      };
+      const [entries, currentMeta] = await decoratee(model, queryParams);
+      if (totalCount === 0) {
+        totalCount = currentMeta.totalCount;
+      }
+
+      // Process each entry and check folder permissions
+      for (const entry of entries) {
+        const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+
+        // If entry has no folderId, it's not using ACO folders system
+        // Include it in results as it's not subject to folder permissions
+        if (!folderId) {
+          resultEntries.push(entry);
+          continue;
+        }
+        const permissions = await this.getPermissions(folderId);
+
+        // If no FLP exists for the folder, the entry is accessible
+        // This means the folder doesn't have any permission restrictions
+        if (!permissions.length) {
+          resultEntries.push(entry);
+          continue;
+        }
+
+        // Check if user has read permission for the folder
+        if (await this.folderLevelPermissions.canAccessFolderContent({
+          permissions,
+          rwd: "r"
+        })) {
+          resultEntries.push(entry);
+        } else {
+          totalCount--;
+        }
+      }
+
+      // Determine if we need to fetch more entries
+      if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {
+        fetchedAll = true;
+        hasMoreItems = currentMeta.hasMoreItems;
+        cursor = currentMeta.cursor;
+      } else {
+        afterCursor = currentMeta.cursor;
+      }
+    }
+    return [resultEntries, {
+      totalCount,
+      hasMoreItems,
+      cursor
+    }];
+  }
+  async getPermissions(folderId) {
+    if (this.permissionsCache.has(folderId)) {
+      return this.permissionsCache.get(folderId) ?? [];
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    this.permissionsCache.set(folderId, permissions);
+    return permissions;
+  }
+}
+exports.ListEntriesFactory = ListEntriesFactory;
+
+//# sourceMappingURL=ListEntriesFactory.js.map

package/utils/decorators/ListEntriesFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_hasRootFolderId","require","ListEntriesFactory","constructor","folderLevelPermissions","permissionsCache","Map","execute","decoratee","model","initialParams","limit","where","params","hasRootFolder","hasRootFolderId","resultEntries","totalCount","hasMoreItems","cursor","fetchedAll","afterCursor","after","queryParams","entries","currentMeta","entry","folderId","values","location","push","permissions","getPermissions","length","canAccessFolderContent","rwd","has","get","getFolderLevelPermissions","set","exports"],"sources":["ListEntriesFactory.ts"],"sourcesContent":["import type { FolderLevelPermissions } from \"~/flp\";\nimport type {\n    CmsEntry,\n    CmsEntryListParams,\n    CmsEntryMeta,\n    CmsEntryValues\n} from \"@webiny/api-headless-cms/types\";\nimport { type CmsModel } from \"@webiny/api-headless-cms/types\";\nimport { hasRootFolderId } from \"~/utils/decorators/hasRootFolderId\";\nimport type { FolderPermission } from \"~/flp/flp.types\";\n\ninterface ListEntriesFactoryCallbackParams {\n    decoratee: <T extends CmsEntryValues = CmsEntryValues>(\n        model: CmsModel,\n        params: CmsEntryListParams\n    ) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;\n    model: CmsModel;\n    initialParams?: CmsEntryListParams;\n}\n\nexport class ListEntriesFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n    private readonly permissionsCache: Map<string, FolderPermission[]>;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n        this.permissionsCache = new Map();\n    }\n\n    public async execute({\n        decoratee,\n        model,\n        initialParams = {}\n    }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]> {\n        const limit = initialParams?.limit || 50;\n        const where = initialParams?.where;\n        const params = { ...initialParams, limit };\n        const hasRootFolder = hasRootFolderId({ model, where });\n\n        // If we're querying the root folder, skip permission checks\n        if (hasRootFolder) {\n            return await decoratee(model, params);\n        }\n\n        const resultEntries: CmsEntry[] = [];\n        let totalCount = 0;\n        let hasMoreItems = true;\n        let cursor: string | null = null;\n        let fetchedAll = false;\n        let afterCursor = params.after;\n\n        // Process entries in batches until we have enough results or reach the end\n        while (!fetchedAll) {\n            const queryParams: CmsEntryListParams = { ...params, after: afterCursor };\n            const [entries, currentMeta] = await decoratee(model, queryParams);\n\n            if (totalCount === 0) {\n                totalCount = currentMeta.totalCount;\n            }\n\n            // Process each entry and check folder permissions\n            for (const entry of entries) {\n                const folderId = entry.values?.location?.folderId || entry.location?.folderId;\n\n                // If entry has no folderId, it's not using ACO folders system\n                // Include it in results as it's not subject to folder permissions\n                if (!folderId) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                const permissions = await this.getPermissions(folderId);\n\n                // If no FLP exists for the folder, the entry is accessible\n                // This means the folder doesn't have any permission restrictions\n                if (!permissions.length) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                // Check if user has read permission for the folder\n                if (\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    })\n                ) {\n                    resultEntries.push(entry);\n                } else {\n                    totalCount--;\n                }\n            }\n\n            // Determine if we need to fetch more entries\n            if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {\n                fetchedAll = true;\n                hasMoreItems = currentMeta.hasMoreItems;\n                cursor = currentMeta.cursor;\n            } else {\n                afterCursor = currentMeta.cursor;\n            }\n        }\n\n        return [resultEntries, { totalCount, hasMoreItems, cursor } as CmsEntryMeta];\n    }\n\n    private async getPermissions(folderId: string): Promise<FolderPermission[]> {\n        if (this.permissionsCache.has(folderId)) {\n            return this.permissionsCache.get(folderId) ?? [];\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        this.permissionsCache.set(folderId, permissions);\n        return permissions;\n    }\n}\n"],"mappings":";;;;;;AAQA,IAAAA,gBAAA,GAAAC,OAAA;AAYO,MAAMC,kBAAkB,CAAC;EAI5BC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;IACpD,IAAI,CAACC,gBAAgB,GAAG,IAAIC,GAAG,CAAC,CAAC;EACrC;EAEA,MAAaC,OAAOA,CAAC;IACjBC,SAAS;IACTC,KAAK;IACLC,aAAa,GAAG,CAAC;EACa,CAAC,EAAuC;IACtE,MAAMC,KAAK,GAAGD,aAAa,EAAEC,KAAK,IAAI,EAAE;IACxC,MAAMC,KAAK,GAAGF,aAAa,EAAEE,KAAK;IAClC,MAAMC,MAAM,GAAG;MAAE,GAAGH,aAAa;MAAEC;IAAM,CAAC;IAC1C,MAAMG,aAAa,GAAG,IAAAC,gCAAe,EAAC;MAAEN,KAAK;MAAEG;IAAM,CAAC,CAAC;;IAEvD;IACA,IAAIE,aAAa,EAAE;MACf,OAAO,MAAMN,SAAS,CAACC,KAAK,EAAEI,MAAM,CAAC;IACzC;IAEA,MAAMG,aAAyB,GAAG,EAAE;IACpC,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,YAAY,GAAG,IAAI;IACvB,IAAIC,MAAqB,GAAG,IAAI;IAChC,IAAIC,UAAU,GAAG,KAAK;IACtB,IAAIC,WAAW,GAAGR,MAAM,CAACS,KAAK;;IAE9B;IACA,OAAO,CAACF,UAAU,EAAE;MAChB,MAAMG,WAA+B,GAAG;QAAE,GAAGV,MAAM;QAAES,KAAK,EAAED;MAAY,CAAC;MACzE,MAAM,CAACG,OAAO,EAAEC,WAAW,CAAC,GAAG,MAAMjB,SAAS,CAACC,KAAK,EAAEc,WAAW,CAAC;MAElE,IAAIN,UAAU,KAAK,CAAC,EAAE;QAClBA,UAAU,GAAGQ,WAAW,CAACR,UAAU;MACvC;;MAEA;MACA,KAAK,MAAMS,KAAK,IAAIF,OAAO,EAAE;QACzB,MAAMG,QAAQ,GAAGD,KAAK,CAACE,MAAM,EAAEC,QAAQ,EAAEF,QAAQ,IAAID,KAAK,CAACG,QAAQ,EAAEF,QAAQ;;QAE7E;QACA;QACA,IAAI,CAACA,QAAQ,EAAE;UACXX,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;QAEA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAACL,QAAQ,CAAC;;QAEvD;QACA;QACA,IAAI,CAACI,WAAW,CAACE,MAAM,EAAE;UACrBjB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;;QAEA;QACA,IACI,MAAM,IAAI,CAACtB,sBAAsB,CAAC8B,sBAAsB,CAAC;UACrDH,WAAW;UACXI,GAAG,EAAE;QACT,CAAC,CAAC,EACJ;UACEnB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;QAC7B,CAAC,MAAM;UACHT,UAAU,EAAE;QAChB;MACJ;;MAEA;MACA,IAAI,CAACQ,WAAW,CAACP,YAAY,IAAIF,aAAa,CAACiB,MAAM,IAAItB,KAAK,EAAE;QAC5DS,UAAU,GAAG,IAAI;QACjBF,YAAY,GAAGO,WAAW,CAACP,YAAY;QACvCC,MAAM,GAAGM,WAAW,CAACN,MAAM;MAC/B,CAAC,MAAM;QACHE,WAAW,GAAGI,WAAW,CAACN,MAAM;MACpC;IACJ;IAEA,OAAO,CAACH,aAAa,EAAE;MAAEC,UAAU;MAAEC,YAAY;MAAEC;IAAO,CAAC,CAAiB;EAChF;EAEA,MAAca,cAAcA,CAACL,QAAgB,EAA+B;IACxE,IAAI,IAAI,CAACtB,gBAAgB,CAAC+B,GAAG,CAACT,QAAQ,CAAC,EAAE;MACrC,OAAO,IAAI,CAACtB,gBAAgB,CAACgC,GAAG,CAACV,QAAQ,CAAC,IAAI,EAAE;IACpD;IAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAAC3B,sBAAsB,CAACkC,yBAAyB,CAACX,QAAQ,CAAC;IACzF,IAAI,CAACtB,gBAAgB,CAACkC,GAAG,CAACZ,QAAQ,EAAEI,WAAW,CAAC;IAChD,OAAOA,WAAW;EACtB;AACJ;AAACS,OAAA,CAAAtC,kBAAA,GAAAA,kBAAA","ignoreList":[]}

package/utils/decorators/decorateIfModelAuthorizationEnabled.d.ts

@@ -0,0 +1,23 @@
+import type { CmsModel, HeadlessCms } from "@webiny/api-headless-cms/types";
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+type ModelCallable = (model: CmsModel, ...params: any[]) => any;
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+type FilterModelMethods<T> = {
+    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];
+};
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+type ModelMethods<T> = Omit<FilterModelMethods<T>, "getEntryManager" | "getSingletonEntryManager">;
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+type Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;
+export declare const decorateIfModelAuthorizationEnabled: <M extends "getEntry" | "getEntriesByIds" | "getEntryById" | "listEntries" | "listLatestEntries" | "listPublishedEntries" | "listDeletedEntries" | "getPublishedEntriesByIds" | "getLatestEntriesByIds" | "createEntry" | "createEntryRevisionFrom" | "updateEntry" | "validateEntry" | "moveEntry" | "republishEntry" | "deleteEntryRevision" | "deleteEntry" | "restoreEntryFromBin" | "deleteMultipleEntries" | "publishEntry" | "unpublishEntry" | "getEntryRevisions" | "getUniqueFieldValues", D extends Decorator<ModelMethods<HeadlessCms>[M]>>(root: ModelMethods<HeadlessCms>, method: M, decorator: D) => void;
+export {};

package/utils/decorators/decorateIfModelAuthorizationEnabled.js

@@ -0,0 +1,54 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.decorateIfModelAuthorizationEnabled = void 0;
+var _folder = require("../../folder/folder.model");
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+
+const modelAuthorizationDisabled = model => {
+  if (typeof model.authorization === "object") {
+    return model?.authorization?.flp === false;
+  }
+  return model.authorization === false;
+};
+const isFolderModel = model => {
+  return model.modelId === _folder.FOLDER_MODEL_ID;
+};
+const decorateIfModelAuthorizationEnabled = (root, method, decorator) => {
+  /**
+   * We cast to `ModelCallable` because within the generic function, we only know that the first
+   * parameter is a `CmsModel`, and we forward the rest.
+   */
+  const decoratee = root[method].bind(root);
+  root[method] = (...params) => {
+    const [model, ...rest] = params;
+    if (isFolderModel(model)) {
+      return decoratee(model, ...rest);
+    }
+    if (modelAuthorizationDisabled(model)) {
+      return decoratee(model, ...rest);
+    }
+    return decorator(decoratee, ...params);
+  };
+};
+exports.decorateIfModelAuthorizationEnabled = decorateIfModelAuthorizationEnabled;
+
+//# sourceMappingURL=decorateIfModelAuthorizationEnabled.js.map

package/utils/decorators/decorateIfModelAuthorizationEnabled.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_folder","require","modelAuthorizationDisabled","model","authorization","flp","isFolderModel","modelId","FOLDER_MODEL_ID","decorateIfModelAuthorizationEnabled","root","method","decorator","decoratee","bind","params","rest","exports"],"sources":["decorateIfModelAuthorizationEnabled.ts"],"sourcesContent":["import type { CmsModel, HeadlessCms } from \"@webiny/api-headless-cms/types\";\nimport { FOLDER_MODEL_ID } from \"~/folder/folder.model\";\n\n/**\n * This type matches any function that has a CmsModel as the first parameter.\n */\ntype ModelCallable = (model: CmsModel, ...params: any[]) => any;\n\n/**\n * This type filters only `ModelCallable` methods.\n */\ntype FilterModelMethods<T> = {\n    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];\n};\n\n/**\n * This type omits methods that have a more complex `model` type.\n * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.\n * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.\n */\ntype ModelMethods<T> = Omit<FilterModelMethods<T>, \"getEntryManager\" | \"getSingletonEntryManager\">;\n\n/**\n * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.\n */\ntype Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;\n\nconst modelAuthorizationDisabled = (model: CmsModel) => {\n    if (typeof model.authorization === \"object\") {\n        return model?.authorization?.flp === false;\n    }\n\n    return model.authorization === false;\n};\n\nconst isFolderModel = (model: CmsModel) => {\n    return model.modelId === FOLDER_MODEL_ID;\n};\n\nexport const decorateIfModelAuthorizationEnabled = <\n    /**\n     * This allows us to only have an auto-complete of `ModelCallable` methods.\n     */\n    M extends keyof ModelMethods<HeadlessCms>,\n    D extends Decorator<ModelMethods<HeadlessCms>[M]>\n>(\n    root: ModelMethods<HeadlessCms>,\n    method: M,\n    decorator: D\n) => {\n    /**\n     * We cast to `ModelCallable` because within the generic function, we only know that the first\n     * parameter is a `CmsModel`, and we forward the rest.\n     */\n    const decoratee = root[method].bind(root) as ModelCallable;\n    root[method] = ((...params: Parameters<ModelMethods<HeadlessCms>[M]>) => {\n        const [model, ...rest] = params;\n        if (isFolderModel(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        if (modelAuthorizationDisabled(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        return decorator(decoratee, ...params);\n    }) as ModelCallable;\n};\n"],"mappings":";;;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAEA;AACA;AACA;;AAGA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;;AAGA,MAAMC,0BAA0B,GAAIC,KAAe,IAAK;EACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;IACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;EAC9C;EAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;AACxC,CAAC;AAED,MAAME,aAAa,GAAIH,KAAe,IAAK;EACvC,OAAOA,KAAK,CAACI,OAAO,KAAKC,uBAAe;AAC5C,CAAC;AAEM,MAAMC,mCAAmC,GAAGA,CAO/CC,IAA+B,EAC/BC,MAAS,EACTC,SAAY,KACX;EACD;AACJ;AACA;AACA;EACI,MAAMC,SAAS,GAAGH,IAAI,CAACC,MAAM,CAAC,CAACG,IAAI,CAACJ,IAAI,CAAkB;EAC1DA,IAAI,CAACC,MAAM,CAAC,GAAI,CAAC,GAAGI,MAAgD,KAAK;IACrE,MAAM,CAACZ,KAAK,EAAE,GAAGa,IAAI,CAAC,GAAGD,MAAM;IAC/B,IAAIT,aAAa,CAACH,KAAK,CAAC,EAAE;MACtB,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,IAAId,0BAA0B,CAACC,KAAK,CAAC,EAAE;MACnC,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,OAAOJ,SAAS,CAACC,SAAS,EAAE,GAAGE,MAAM,CAAC;EAC1C,CAAmB;AACvB,CAAC;AAACE,OAAA,CAAAR,mCAAA,GAAAA,mCAAA","ignoreList":[]}

package/utils/decorators/hasRootFolderId.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntryListWhere, CmsModel } from "@webiny/api-headless-cms/types";
+interface Params {
+    model: CmsModel;
+    where: CmsEntryListWhere | undefined;
+}
+export declare const hasRootFolderId: ({ model, where }: Params) => boolean;
+export {};

package/utils/decorators/hasRootFolderId.js

@@ -0,0 +1,27 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.hasRootFolderId = void 0;
+var _isPlainObject = _interopRequireDefault(require("lodash/isPlainObject"));
+var _isPageModel = require("./isPageModel");
+var _constants = require("../../constants");
+const hasRootFolderId = ({
+  model,
+  where
+}) => {
+  if (!where) {
+    return false;
+  }
+  const key = (0, _isPageModel.isPageModel)(model) ? "location" : "wbyAco_location";
+  const location = where[key];
+  if (typeof location === "object" && location !== null && (0, _isPlainObject.default)(location)) {
+    return location.folderId === _constants.ROOT_FOLDER;
+  }
+  return false;
+};
+exports.hasRootFolderId = hasRootFolderId;
+
+//# sourceMappingURL=hasRootFolderId.js.map

package/utils/decorators/hasRootFolderId.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_isPlainObject","_interopRequireDefault","require","_isPageModel","_constants","hasRootFolderId","model","where","key","isPageModel","location","isPlainObject","folderId","ROOT_FOLDER","exports"],"sources":["hasRootFolderId.ts"],"sourcesContent":["import isPlainObject from \"lodash/isPlainObject\";\nimport { isPageModel } from \"~/utils/decorators/isPageModel\";\nimport type { CmsEntryListWhere, CmsModel } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\ninterface Params {\n    model: CmsModel;\n    where: CmsEntryListWhere | undefined;\n}\n\nexport const hasRootFolderId = ({ model, where }: Params): boolean => {\n    if (!where) {\n        return false;\n    }\n\n    const key = isPageModel(model) ? \"location\" : \"wbyAco_location\";\n    const location = where[key];\n\n    if (typeof location === \"object\" && location !== null && isPlainObject(location)) {\n        return (location as Record<string, any>).folderId === ROOT_FOLDER;\n    }\n\n    return false;\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,cAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AAOO,MAAMG,eAAe,GAAGA,CAAC;EAAEC,KAAK;EAAEC;AAAc,CAAC,KAAc;EAClE,IAAI,CAACA,KAAK,EAAE;IACR,OAAO,KAAK;EAChB;EAEA,MAAMC,GAAG,GAAG,IAAAC,wBAAW,EAACH,KAAK,CAAC,GAAG,UAAU,GAAG,iBAAiB;EAC/D,MAAMI,QAAQ,GAAGH,KAAK,CAACC,GAAG,CAAC;EAE3B,IAAI,OAAOE,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,IAAI,IAAAC,sBAAa,EAACD,QAAQ,CAAC,EAAE;IAC9E,OAAQA,QAAQ,CAAyBE,QAAQ,KAAKC,sBAAW;EACrE;EAEA,OAAO,KAAK;AAChB,CAAC;AAACC,OAAA,CAAAT,eAAA,GAAAA,eAAA","ignoreList":[]}

package/utils/decorators/isPageModel.d.ts

@@ -0,0 +1,5 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types";
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+export declare const isPageModel: (model: CmsModel) => boolean;