@webiny/api-aco 0.0.0-unstable.aa00eecd97 → 0.0.0-unstable.ac6ebf63c6

package/utils/decorators/CmsEntriesCrudDecorators.js

@@ -0,0 +1,206 @@
+// @ts-nocheck Being removed
+
+import { ROOT_FOLDER } from "../../constants.js";
+import { ListEntriesFactory } from "./ListEntriesFactory.js";
+import { FilterEntriesByFolderFactory } from "./FilterEntriesByFolderFactory.js";
+import { decorateIfModelAuthorizationEnabled } from "./decorateIfModelAuthorizationEnabled.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+export class CmsEntriesCrudDecorators {
+  constructor({
+    context
+  }) {
+    this.context = context;
+  }
+  decorate() {
+    const context = this.context;
+    const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);
+    const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);
+    const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);
+    decorateIfModelAuthorizationEnabled(context, "listEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "listLatestEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "listPublishedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "listDeletedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "getEntry", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return entry;
+    });
+    decorateIfModelAuthorizationEnabled(context, "getEntryById", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return entry;
+    });
+    decorateIfModelAuthorizationEnabled(context, "getLatestEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    decorateIfModelAuthorizationEnabled(context, "getPublishedEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    decorateIfModelAuthorizationEnabled(context, "createEntry", async (...allParams) => {
+      const [decoratee, model, params, options] = allParams;
+      const folderId = params.wbyAco_location?.folderId || params.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, params, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, params, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "createEntryRevisionFrom", async (...allParams) => {
+      const [decoratee, model, id, input, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, input, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, id, input, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "updateEntry", async (...allParams) => {
+      const [decoratee, model, id, input, meta, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, input, meta, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "w"
+      });
+      return decoratee(model, id, input, meta, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "deleteEntry", async (...allParams) => {
+      const [decoratee, model, id, options] = allParams;
+      const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, options);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "d"
+      });
+      return decoratee(model, id, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "deleteEntryRevision", async (...allParams) => {
+      const [decoratee, model, id] = allParams;
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id);
+      }
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+      await folderLevelPermissions.ensureCanAccessFolderContent({
+        permissions,
+        rwd: "d"
+      });
+      return decoratee(model, id);
+    });
+    decorateIfModelAuthorizationEnabled(context, "moveEntry", async (...allParams) => {
+      const [decoratee, model, id, targetFolderId] = allParams;
+
+      /**
+       * First we need to check if user has access to the entries existing folder.
+       */
+      const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+        id
+      });
+      const folderId = entry?.location?.folderId || ROOT_FOLDER;
+      /**
+       * If the entry is in the same folder we are trying to move it to, just continue.
+       */
+      if (folderId === targetFolderId) {
+        return decoratee(model, id, targetFolderId);
+      } else if (folderId !== ROOT_FOLDER) {
+        /**
+         * If entry current folder is not a root, check for access
+         */
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+        await folderLevelPermissions.ensureCanAccessFolderContent({
+          permissions,
+          rwd: "w"
+        });
+      }
+      /**
+       * If target folder is not a ROOT_FOLDER, check for access.
+       */
+      if (targetFolderId !== ROOT_FOLDER) {
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+        await folderLevelPermissions.ensureCanAccessFolderContent({
+          permissions,
+          rwd: "w"
+        });
+      }
+      return decoratee(model, id, targetFolderId);
+    });
+  }
+}
+
+//# sourceMappingURL=CmsEntriesCrudDecorators.js.map

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ROOT_FOLDER","ListEntriesFactory","FilterEntriesByFolderFactory","decorateIfModelAuthorizationEnabled","FolderLevelPermissions","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","container","resolve","filterEntriesByFolder","listEntriesHandler","allParams","decoratee","model","initialParams","execute","params","entry","folderId","location","permissions","getFolderLevelPermissions","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","cms","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["// @ts-nocheck Being removed\nimport type { AcoContext } from \"~/types.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory.js\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory.js\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\ntype Context = AcoContext;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"listLatestEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"listDeletedEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":"AAAA;;AAEA,SAASA,WAAW;AACpB,SAASC,kBAAkB;AAC3B,SAASC,4BAA4B;AACrC,SAASC,mCAAmC;AAC5C,SAASC,sBAAsB;AAQ/B,OAAO,MAAMC,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,SAAS,CAACC,OAAO,CAACP,sBAAsB,CAAC;IAEhF,MAAMQ,qBAAqB,GAAG,IAAIV,4BAA4B,CAACO,sBAAsB,CAAC;IACtF,MAAMI,kBAAkB,GAAG,IAAIZ,kBAAkB,CAACQ,sBAAsB,CAAC;IAEzEN,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAACI,OAAO,EAAE,mBAAmB,EAAE,OAAO,GAAGO,SAAS,KAAK;MACtF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAC/BI,OAAO,EACP,sBAAsB,EACtB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAEDd,mCAAmC,CAACI,OAAO,EAAE,oBAAoB,EAAE,OAAO,GAAGO,SAAS,KAAK;MACvF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAACI,OAAO,EAAE,UAAU,EAAE,OAAO,GAAGO,SAAS,KAAK;MAC7E,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOoB,KAAK;MAChB;MAEA,MAAMG,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAON,KAAK;IAChB,CAAC,CAAC;IAEFjB,mCAAmC,CAACI,OAAO,EAAE,cAAc,EAAE,OAAO,GAAGO,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOoB,KAAK;MAChB;MACA,MAAMG,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAON,KAAK;IAChB,CAAC,CAAC;IAEFjB,mCAAmC,CAC/BI,OAAO,EACP,uBAAuB,EACvB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEW,GAAG,CAAC,GAAGb,SAAS;MAEzC,MAAMc,OAAO,GAAG,MAAMb,SAAS,CAACC,KAAK,EAAEW,GAAG,CAAC;MAE3C,OAAOf,qBAAqB,CAACM,OAAO,CAACU,OAAO,CAAC;IACjD,CACJ,CAAC;IAEDzB,mCAAmC,CAC/BI,OAAO,EACP,0BAA0B,EAC1B,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEW,GAAG,CAAC,GAAGb,SAAS;MAEzC,MAAMc,OAAO,GAAG,MAAMb,SAAS,CAACC,KAAK,EAAEW,GAAG,CAAC;MAC3C,OAAOf,qBAAqB,CAACM,OAAO,CAACU,OAAO,CAAC;IACjD,CACJ,CAAC;IAEDzB,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC,GAAGf,SAAS;MACrD,MAAMO,QAAQ,GAAGF,MAAM,CAACW,eAAe,EAAET,QAAQ,IAAIF,MAAM,CAACG,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC;MAC5C;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF1B,mCAAmC,CAC/BI,OAAO,EACP,yBAAyB,EACzB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGf,SAAS;MAExD,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED1B,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC,GAAGf,SAAS;MAC9D,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC;MACrD;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF1B,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC,GAAGf,SAAS;MAEjD,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACS,0BAA0B,CAChFrB,KAAK,EACL;QACIe;MACJ,CACJ,CAAC;MAED,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF1B,mCAAmC,CAC/BI,OAAO,EACP,qBAAqB,EACrB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,CAAC,GAAGjB,SAAS;MAExC,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,CAAC;MAC/B;MAEA,MAAMR,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED5B,mCAAmC,CAACI,OAAO,EAAE,WAAW,EAAE,OAAO,GAAGO,SAAS,KAAK;MAC9E,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC,GAAGxB,SAAS;;MAExD;AACZ;AACA;MACY,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIrB,WAAW;MACzD;AACZ;AACA;MACY,IAAIqB,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAOvB,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKrB,WAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMuB,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;QACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIY,cAAc,KAAKtC,WAAW,EAAE;QAChC,MAAMuB,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;QACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,23 @@
+import { ROOT_FOLDER } from "../../constants.js";
+export class FilterEntriesByFolderFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+  }
+  async execute(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccessFolderContent ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ROOT_FOLDER","FilterEntriesByFolderFactory","constructor","folderLevelPermissions","execute","entries","results","Promise","all","map","entry","folderId","location","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","filter"],"sources":["FilterEntriesByFolderFactory.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions.Interface;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions.Interface) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions =\n                    await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"mappings":"AACA,SAASA,WAAW;AAGpB,OAAO,MAAMC,4BAA4B,CAAC;EAGtCC,WAAWA,CAACC,sBAAwD,EAAE;IAClE,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;EACxD;EAEA,MAAaC,OAAOA,CAACC,OAAmB,EAAuB;IAC3D,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,OAAO,CAACI,GAAG,CAAC,MAAMC,KAAK,IAAI;MACvB,MAAMC,QAAQ,GAAGD,KAAK,CAACE,QAAQ,EAAED,QAAQ;MACzC,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKX,WAAW,EAAE;QACvC,OAAOU,KAAK;MAChB;MAEA,MAAMG,WAAW,GACb,MAAM,IAAI,CAACV,sBAAsB,CAACW,yBAAyB,CAACH,QAAQ,CAAC;MACzE,MAAMI,sBAAsB,GACxB,MAAM,IAAI,CAACZ,sBAAsB,CAACY,sBAAsB,CAAC;QACrDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACN,OAAOD,sBAAsB,GAAGL,KAAK,GAAG,IAAI;IAChD,CAAC,CACL,CAAC;IAED,OAAOJ,OAAO,CAACW,MAAM,CAAEP,KAAK,IAAwB,CAAC,CAACA,KAAK,CAAC;EAChE;AACJ","ignoreList":[]}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,17 @@
+import type { CmsEntryListParams, CmsEntryValues } from "@webiny/api-headless-cms/types/index.js";
+import { type CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import type { IListEntriesResult } from "@webiny/api-headless-cms/features/contentEntry/ListEntries/abstractions.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+interface ListEntriesFactoryCallbackParams<T extends CmsEntryValues> {
+    model: CmsModel;
+    dataLoader: (params?: CmsEntryListParams) => Promise<IListEntriesResult<T>>;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute<T extends CmsEntryValues = CmsEntryValues>({ model, dataLoader, initialParams }: ListEntriesFactoryCallbackParams<T>): Promise<IListEntriesResult<T>>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,106 @@
+import { hasRootFolderId } from "./hasRootFolderId.js";
+export class ListEntriesFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.permissionsCache = new Map();
+  }
+  async execute({
+    model,
+    dataLoader,
+    initialParams = {}
+  }) {
+    const limit = initialParams?.limit || 50;
+    const where = initialParams?.where;
+    const params = {
+      ...initialParams,
+      limit
+    };
+    const hasRootFolder = hasRootFolderId({
+      model,
+      where
+    });
+
+    // If FLP should be skipped, or we're querying the root folder, skip permission checks
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) {
+      return dataLoader(params);
+    }
+    const resultEntries = [];
+    let totalCount = 0;
+    let hasMoreItems = true;
+    let cursor = null;
+    let fetchedAll = false;
+    let afterCursor = params.after;
+
+    // Process entries in batches until we have enough results or reach the end
+    while (!fetchedAll) {
+      const queryParams = {
+        ...params,
+        after: afterCursor
+      };
+      const {
+        entries,
+        meta
+      } = await dataLoader(queryParams);
+      if (totalCount === 0) {
+        totalCount = meta.totalCount;
+      }
+
+      // Process each entry and check folder permissions
+      for (const entry of entries) {
+        const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+
+        // If entry has no folderId, it's not using ACO folders system
+        // Include it in results as it's not subject to folder permissions
+        if (!folderId) {
+          resultEntries.push(entry);
+          continue;
+        }
+        const permissions = await this.getPermissions(folderId);
+
+        // If no FLP exists for the folder, the entry is accessible
+        // This means the folder doesn't have any permission restrictions
+        if (!permissions.length) {
+          resultEntries.push(entry);
+          continue;
+        }
+
+        // Check if user has read permission for the folder
+        if (await this.folderLevelPermissions.canAccessFolderContent({
+          permissions,
+          rwd: "r"
+        })) {
+          resultEntries.push(entry);
+        } else {
+          totalCount--;
+        }
+      }
+
+      // Determine if we need to fetch more entries
+      if (!meta.hasMoreItems || resultEntries.length >= limit) {
+        fetchedAll = true;
+        hasMoreItems = meta.hasMoreItems;
+        cursor = meta.cursor;
+      } else {
+        afterCursor = meta.cursor;
+      }
+    }
+    return {
+      entries: resultEntries,
+      meta: {
+        totalCount,
+        hasMoreItems,
+        cursor
+      }
+    };
+  }
+  async getPermissions(folderId) {
+    if (this.permissionsCache.has(folderId)) {
+      return this.permissionsCache.get(folderId) ?? [];
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    this.permissionsCache.set(folderId, permissions);
+    return permissions;
+  }
+}
+
+//# sourceMappingURL=ListEntriesFactory.js.map

package/utils/decorators/ListEntriesFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["hasRootFolderId","ListEntriesFactory","constructor","folderLevelPermissions","permissionsCache","Map","execute","model","dataLoader","initialParams","limit","where","params","hasRootFolder","canUseFolderLevelPermissions","resultEntries","totalCount","hasMoreItems","cursor","fetchedAll","afterCursor","after","queryParams","entries","meta","entry","folderId","values","location","push","permissions","getPermissions","length","canAccessFolderContent","rwd","has","get","getFolderLevelPermissions","set"],"sources":["ListEntriesFactory.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryListParams,\n    CmsEntryValues\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport { type CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { IListEntriesResult } from \"@webiny/api-headless-cms/features/contentEntry/ListEntries/abstractions.js\";\nimport { hasRootFolderId } from \"~/utils/decorators/hasRootFolderId.js\";\nimport type { FolderPermission } from \"~/flp/flp.types.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\ninterface ListEntriesFactoryCallbackParams<T extends CmsEntryValues> {\n    model: CmsModel;\n    dataLoader: (params?: CmsEntryListParams) => Promise<IListEntriesResult<T>>;\n    initialParams?: CmsEntryListParams;\n}\n\nexport class ListEntriesFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions.Interface;\n    private readonly permissionsCache: Map<string, FolderPermission[]>;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions.Interface) {\n        this.folderLevelPermissions = folderLevelPermissions;\n        this.permissionsCache = new Map();\n    }\n\n    public async execute<T extends CmsEntryValues = CmsEntryValues>({\n        model,\n        dataLoader,\n        initialParams = {}\n    }: ListEntriesFactoryCallbackParams<T>): Promise<IListEntriesResult<T>> {\n        const limit = initialParams?.limit || 50;\n        const where = initialParams?.where;\n        const params = { ...initialParams, limit };\n        const hasRootFolder = hasRootFolderId({ model, where });\n\n        // If FLP should be skipped, or we're querying the root folder, skip permission checks\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) {\n            return dataLoader(params);\n        }\n\n        const resultEntries: CmsEntry<T>[] = [];\n        let totalCount = 0;\n        let hasMoreItems = true;\n        let cursor: string | null = null;\n        let fetchedAll = false;\n        let afterCursor = params.after;\n\n        // Process entries in batches until we have enough results or reach the end\n        while (!fetchedAll) {\n            const queryParams: CmsEntryListParams = { ...params, after: afterCursor };\n            const { entries, meta } = await dataLoader(queryParams);\n\n            if (totalCount === 0) {\n                totalCount = meta.totalCount;\n            }\n\n            // Process each entry and check folder permissions\n            for (const entry of entries) {\n                const folderId = entry.values?.location?.folderId || entry.location?.folderId;\n\n                // If entry has no folderId, it's not using ACO folders system\n                // Include it in results as it's not subject to folder permissions\n                if (!folderId) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                const permissions = await this.getPermissions(folderId);\n\n                // If no FLP exists for the folder, the entry is accessible\n                // This means the folder doesn't have any permission restrictions\n                if (!permissions.length) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                // Check if user has read permission for the folder\n                if (\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    })\n                ) {\n                    resultEntries.push(entry);\n                } else {\n                    totalCount--;\n                }\n            }\n\n            // Determine if we need to fetch more entries\n            if (!meta.hasMoreItems || resultEntries.length >= limit) {\n                fetchedAll = true;\n                hasMoreItems = meta.hasMoreItems;\n                cursor = meta.cursor;\n            } else {\n                afterCursor = meta.cursor;\n            }\n        }\n\n        return { entries: resultEntries, meta: { totalCount, hasMoreItems, cursor } };\n    }\n\n    private async getPermissions(folderId: string): Promise<FolderPermission[]> {\n        if (this.permissionsCache.has(folderId)) {\n            return this.permissionsCache.get(folderId) ?? [];\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        this.permissionsCache.set(folderId, permissions);\n        return permissions;\n    }\n}\n"],"mappings":"AAOA,SAASA,eAAe;AAUxB,OAAO,MAAMC,kBAAkB,CAAC;EAI5BC,WAAWA,CAACC,sBAAwD,EAAE;IAClE,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;IACpD,IAAI,CAACC,gBAAgB,GAAG,IAAIC,GAAG,CAAC,CAAC;EACrC;EAEA,MAAaC,OAAOA,CAA4C;IAC5DC,KAAK;IACLC,UAAU;IACVC,aAAa,GAAG,CAAC;EACgB,CAAC,EAAkC;IACpE,MAAMC,KAAK,GAAGD,aAAa,EAAEC,KAAK,IAAI,EAAE;IACxC,MAAMC,KAAK,GAAGF,aAAa,EAAEE,KAAK;IAClC,MAAMC,MAAM,GAAG;MAAE,GAAGH,aAAa;MAAEC;IAAM,CAAC;IAC1C,MAAMG,aAAa,GAAGb,eAAe,CAAC;MAAEO,KAAK;MAAEI;IAAM,CAAC,CAAC;;IAEvD;IACA,IAAI,CAAC,IAAI,CAACR,sBAAsB,CAACW,4BAA4B,CAAC,CAAC,IAAID,aAAa,EAAE;MAC9E,OAAOL,UAAU,CAACI,MAAM,CAAC;IAC7B;IAEA,MAAMG,aAA4B,GAAG,EAAE;IACvC,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,YAAY,GAAG,IAAI;IACvB,IAAIC,MAAqB,GAAG,IAAI;IAChC,IAAIC,UAAU,GAAG,KAAK;IACtB,IAAIC,WAAW,GAAGR,MAAM,CAACS,KAAK;;IAE9B;IACA,OAAO,CAACF,UAAU,EAAE;MAChB,MAAMG,WAA+B,GAAG;QAAE,GAAGV,MAAM;QAAES,KAAK,EAAED;MAAY,CAAC;MACzE,MAAM;QAAEG,OAAO;QAAEC;MAAK,CAAC,GAAG,MAAMhB,UAAU,CAACc,WAAW,CAAC;MAEvD,IAAIN,UAAU,KAAK,CAAC,EAAE;QAClBA,UAAU,GAAGQ,IAAI,CAACR,UAAU;MAChC;;MAEA;MACA,KAAK,MAAMS,KAAK,IAAIF,OAAO,EAAE;QACzB,MAAMG,QAAQ,GAAGD,KAAK,CAACE,MAAM,EAAEC,QAAQ,EAAEF,QAAQ,IAAID,KAAK,CAACG,QAAQ,EAAEF,QAAQ;;QAE7E;QACA;QACA,IAAI,CAACA,QAAQ,EAAE;UACXX,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;QAEA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAACL,QAAQ,CAAC;;QAEvD;QACA;QACA,IAAI,CAACI,WAAW,CAACE,MAAM,EAAE;UACrBjB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;;QAEA;QACA,IACI,MAAM,IAAI,CAACtB,sBAAsB,CAAC8B,sBAAsB,CAAC;UACrDH,WAAW;UACXI,GAAG,EAAE;QACT,CAAC,CAAC,EACJ;UACEnB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;QAC7B,CAAC,MAAM;UACHT,UAAU,EAAE;QAChB;MACJ;;MAEA;MACA,IAAI,CAACQ,IAAI,CAACP,YAAY,IAAIF,aAAa,CAACiB,MAAM,IAAItB,KAAK,EAAE;QACrDS,UAAU,GAAG,IAAI;QACjBF,YAAY,GAAGO,IAAI,CAACP,YAAY;QAChCC,MAAM,GAAGM,IAAI,CAACN,MAAM;MACxB,CAAC,MAAM;QACHE,WAAW,GAAGI,IAAI,CAACN,MAAM;MAC7B;IACJ;IAEA,OAAO;MAAEK,OAAO,EAAER,aAAa;MAAES,IAAI,EAAE;QAAER,UAAU;QAAEC,YAAY;QAAEC;MAAO;IAAE,CAAC;EACjF;EAEA,MAAca,cAAcA,CAACL,QAAgB,EAA+B;IACxE,IAAI,IAAI,CAACtB,gBAAgB,CAAC+B,GAAG,CAACT,QAAQ,CAAC,EAAE;MACrC,OAAO,IAAI,CAACtB,gBAAgB,CAACgC,GAAG,CAACV,QAAQ,CAAC,IAAI,EAAE;IACpD;IAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAAC3B,sBAAsB,CAACkC,yBAAyB,CAACX,QAAQ,CAAC;IACzF,IAAI,CAACtB,gBAAgB,CAACkC,GAAG,CAACZ,QAAQ,EAAEI,WAAW,CAAC;IAChD,OAAOA,WAAW;EACtB;AACJ","ignoreList":[]}

package/utils/decorators/hasRootFolderId.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntryListWhere, CmsModel } from "@webiny/api-headless-cms/types/index.js";
+interface Params {
+    model: CmsModel;
+    where: CmsEntryListWhere | undefined;
+}
+export declare const hasRootFolderId: ({ model, where }: Params) => boolean;
+export {};

package/utils/decorators/hasRootFolderId.js

@@ -0,0 +1,19 @@
+import isPlainObject from "lodash/isPlainObject.js";
+import { isPageModel } from "./isPageModel.js";
+import { ROOT_FOLDER } from "../../constants.js";
+export const hasRootFolderId = ({
+  model,
+  where
+}) => {
+  if (!where) {
+    return false;
+  }
+  const key = isPageModel(model) ? "location" : "wbyAco_location";
+  const location = where[key];
+  if (typeof location === "object" && location !== null && isPlainObject(location)) {
+    return location.folderId === ROOT_FOLDER;
+  }
+  return false;
+};
+
+//# sourceMappingURL=hasRootFolderId.js.map

package/utils/decorators/hasRootFolderId.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isPlainObject","isPageModel","ROOT_FOLDER","hasRootFolderId","model","where","key","location","folderId"],"sources":["hasRootFolderId.ts"],"sourcesContent":["import isPlainObject from \"lodash/isPlainObject.js\";\nimport { isPageModel } from \"~/utils/decorators/isPageModel.js\";\nimport type { CmsEntryListWhere, CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\n\ninterface Params {\n    model: CmsModel;\n    where: CmsEntryListWhere | undefined;\n}\n\nexport const hasRootFolderId = ({ model, where }: Params): boolean => {\n    if (!where) {\n        return false;\n    }\n\n    const key = isPageModel(model) ? \"location\" : \"wbyAco_location\";\n    const location = where[key];\n\n    if (typeof location === \"object\" && location !== null && isPlainObject(location)) {\n        return (location as Record<string, any>).folderId === ROOT_FOLDER;\n    }\n\n    return false;\n};\n"],"mappings":"AAAA,OAAOA,aAAa,MAAM,yBAAyB;AACnD,SAASC,WAAW;AAEpB,SAASC,WAAW;AAOpB,OAAO,MAAMC,eAAe,GAAGA,CAAC;EAAEC,KAAK;EAAEC;AAAc,CAAC,KAAc;EAClE,IAAI,CAACA,KAAK,EAAE;IACR,OAAO,KAAK;EAChB;EAEA,MAAMC,GAAG,GAAGL,WAAW,CAACG,KAAK,CAAC,GAAG,UAAU,GAAG,iBAAiB;EAC/D,MAAMG,QAAQ,GAAGF,KAAK,CAACC,GAAG,CAAC;EAE3B,IAAI,OAAOC,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,IAAIP,aAAa,CAACO,QAAQ,CAAC,EAAE;IAC9E,OAAQA,QAAQ,CAAyBC,QAAQ,KAAKN,WAAW;EACrE;EAEA,OAAO,KAAK;AAChB,CAAC","ignoreList":[]}

package/utils/decorators/isPageModel.d.ts

@@ -0,0 +1,5 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+export declare const isPageModel: (model: CmsModel) => boolean;

package/utils/decorators/isPageModel.js

@@ -0,0 +1,13 @@
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+export const isPageModel = model => {
+  if (model.modelId === "pbPage") {
+    return true;
+  } else if (model.modelId === "acoSearchRecord-pbpage") {
+    return true;
+  }
+  return false;
+};
+
+//# sourceMappingURL=isPageModel.js.map

package/utils/decorators/isPageModel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isPageModel","model","modelId"],"sources":["isPageModel.ts"],"sourcesContent":["import type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\n\n/**\n * Keep this until we figure out how to fetch the folders.\n */\nexport const isPageModel = (model: CmsModel): boolean => {\n    if (model.modelId === \"pbPage\") {\n        return true;\n    } else if (model.modelId === \"acoSearchRecord-pbpage\") {\n        return true;\n    }\n    return false;\n};\n"],"mappings":"AAEA;AACA;AACA;AACA,OAAO,MAAMA,WAAW,GAAIC,KAAe,IAAc;EACrD,IAAIA,KAAK,CAACC,OAAO,KAAK,QAAQ,EAAE;IAC5B,OAAO,IAAI;EACf,CAAC,MAAM,IAAID,KAAK,CAACC,OAAO,KAAK,wBAAwB,EAAE;IACnD,OAAO,IAAI;EACf;EACA,OAAO,KAAK;AAChB,CAAC","ignoreList":[]}

package/utils/ensureAuthentication.d.ts

@@ -0,0 +1,2 @@
+import type { ApiCoreContext } from "@webiny/api-core/types/core.js";
+export declare const ensureAuthentication: (context: ApiCoreContext) => void;

package/utils/ensureAuthentication.js

@@ -0,0 +1,12 @@
+import { NotAuthorizedError } from "@webiny/api-core/features/security/shared/errors.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+export const ensureAuthentication = context => {
+  const identityContext = context.container.resolve(IdentityContext);
+  const identity = identityContext.getIdentity();
+  if (identity.isAdmin()) {
+    return;
+  }
+  throw new NotAuthorizedError();
+};
+
+//# sourceMappingURL=ensureAuthentication.js.map

package/utils/ensureAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NotAuthorizedError","IdentityContext","ensureAuthentication","context","identityContext","container","resolve","identity","getIdentity","isAdmin"],"sources":["ensureAuthentication.ts"],"sourcesContent":["import { NotAuthorizedError } from \"@webiny/api-core/features/security/shared/errors.js\";\nimport type { ApiCoreContext } from \"@webiny/api-core/types/core.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\n\nexport const ensureAuthentication = (context: ApiCoreContext) => {\n    const identityContext = context.container.resolve(IdentityContext);\n    const identity = identityContext.getIdentity();\n\n    if (identity.isAdmin()) {\n        return;\n    }\n    throw new NotAuthorizedError();\n};\n"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,qDAAqD;AAExF,SAASC,eAAe,QAAQ,6DAA6D;AAE7F,OAAO,MAAMC,oBAAoB,GAAIC,OAAuB,IAAK;EAC7D,MAAMC,eAAe,GAAGD,OAAO,CAACE,SAAS,CAACC,OAAO,CAACL,eAAe,CAAC;EAClE,MAAMM,QAAQ,GAAGH,eAAe,CAACI,WAAW,CAAC,CAAC;EAE9C,IAAID,QAAQ,CAACE,OAAO,CAAC,CAAC,EAAE;IACpB;EACJ;EACA,MAAM,IAAIT,kBAAkB,CAAC,CAAC;AAClC,CAAC","ignoreList":[]}

package/utils/pickEntryFieldValues.d.ts

@@ -0,0 +1,3 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+export declare const baseFields: string[];
+export declare function pickEntryFieldValues<T>(entry: CmsEntry): T;

package/utils/pickEntryFieldValues.js

@@ -0,0 +1,23 @@
+export const baseFields = [
+// Entry ID is mapped to "id" (we don't use revisions with ACO entities).
+"id", "tenant", "createdOn", "modifiedOn", "savedOn", "createdBy", "modifiedBy", "savedBy"];
+const pickBaseEntryFieldValues = entry => {
+  const pickedValues = {};
+  for (const fieldName of baseFields) {
+    const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(":");
+    if (srcFieldName in entry) {
+      Object.assign(pickedValues, {
+        [targetFieldName]: entry[srcFieldName]
+      });
+    }
+  }
+  return pickedValues;
+};
+export function pickEntryFieldValues(entry) {
+  return {
+    ...pickBaseEntryFieldValues(entry),
+    ...entry.values
+  };
+}
+
+//# sourceMappingURL=pickEntryFieldValues.js.map

package/utils/pickEntryFieldValues.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["baseFields","pickBaseEntryFieldValues","entry","pickedValues","fieldName","srcFieldName","targetFieldName","split","Object","assign","pickEntryFieldValues","values"],"sources":["pickEntryFieldValues.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport const baseFields = [\n    // Entry ID is mapped to \"id\" (we don't use revisions with ACO entities).\n    \"id\",\n    \"tenant\",\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\"\n];\n\nconst pickBaseEntryFieldValues = (entry: CmsEntry) => {\n    const pickedValues: Partial<CmsEntry> = {};\n    for (const fieldName of baseFields) {\n        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(\":\");\n        if (srcFieldName in entry) {\n            Object.assign(pickedValues, {\n                [targetFieldName]: entry[srcFieldName as keyof CmsEntry]\n            });\n        }\n    }\n\n    return pickedValues;\n};\n\nexport function pickEntryFieldValues<T>(entry: CmsEntry): T {\n    return {\n        ...pickBaseEntryFieldValues(entry),\n        ...entry.values\n    } as T;\n}\n"],"mappings":"AAEA,OAAO,MAAMA,UAAU,GAAG;AACtB;AACA,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,SAAS,CACZ;AAED,MAAMC,wBAAwB,GAAIC,KAAe,IAAK;EAClD,MAAMC,YAA+B,GAAG,CAAC,CAAC;EAC1C,KAAK,MAAMC,SAAS,IAAIJ,UAAU,EAAE;IAChC,MAAM,CAACK,YAAY,EAAEC,eAAe,GAAGD,YAAY,CAAC,GAAGD,SAAS,CAACG,KAAK,CAAC,GAAG,CAAC;IAC3E,IAAIF,YAAY,IAAIH,KAAK,EAAE;MACvBM,MAAM,CAACC,MAAM,CAACN,YAAY,EAAE;QACxB,CAACG,eAAe,GAAGJ,KAAK,CAACG,YAAY;MACzC,CAAC,CAAC;IACN;EACJ;EAEA,OAAOF,YAAY;AACvB,CAAC;AAED,OAAO,SAASO,oBAAoBA,CAAIR,KAAe,EAAK;EACxD,OAAO;IACH,GAAGD,wBAAwB,CAACC,KAAK,CAAC;IAClC,GAAGA,KAAK,CAACS;EACb,CAAC;AACL","ignoreList":[]}

package/utils/resolve.d.ts

@@ -1,2 +1,2 @@
-import { Response, ErrorResponse } from "@webiny/handler-graphql";
+import { ErrorResponse, Response } from "@webiny/handler-graphql";
 export declare const resolve: (fn: () => Promise<any>) => Promise<Response<any> | ErrorResponse>;

package/utils/resolve.js

@@ -1,15 +1,10 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.resolve = void 0;
-var _handlerGraphql = require("@webiny/handler-graphql");
-const resolve = async fn => {
+import { ErrorResponse, Response } from "@webiny/handler-graphql";
+export const resolve = async fn => {
   try {
-    return new _handlerGraphql.Response(await fn());
+    return new Response(await fn());
   } catch (e) {
-    return new _handlerGraphql.ErrorResponse(e);
+    return new ErrorResponse(e);
   }
 };
-exports.resolve = resolve;
+
+//# sourceMappingURL=resolve.js.map

package/utils/resolve.js.map

@@ -1 +1 @@
-{"version":3,"names":["resolve","fn","Response","e","ErrorResponse"],"sources":["resolve.ts"],"sourcesContent":["import { Response, ErrorResponse } from \"@webiny/handler-graphql\";\n\nexport const resolve = async (fn: () => Promise<any>) => {\n    try {\n        return new Response(await fn());\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\n"],"mappings":";;;;;;AAAA;AAEO,MAAMA,OAAO,GAAG,MAAOC,EAAsB,IAAK;EACrD,IAAI;IACA,OAAO,IAAIC,wBAAQ,CAAC,MAAMD,EAAE,EAAE,CAAC;EACnC,CAAC,CAAC,OAAOE,CAAC,EAAE;IACR,OAAO,IAAIC,6BAAa,CAACD,CAAC,CAAC;EAC/B;AACJ,CAAC;AAAC"}
+{"version":3,"names":["ErrorResponse","Response","resolve","fn","e"],"sources":["resolve.ts"],"sourcesContent":["import { ErrorResponse, Response } from \"@webiny/handler-graphql\";\n\nexport const resolve = async (fn: () => Promise<any>) => {\n    try {\n        return new Response(await fn());\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\n"],"mappings":"AAAA,SAASA,aAAa,EAAEC,QAAQ,QAAQ,yBAAyB;AAEjE,OAAO,MAAMC,OAAO,GAAG,MAAOC,EAAsB,IAAK;EACrD,IAAI;IACA,OAAO,IAAIF,QAAQ,CAAC,MAAME,EAAE,CAAC,CAAC,CAAC;EACnC,CAAC,CAAC,OAAOC,CAAC,EAAE;IACR,OAAO,IAAIJ,aAAa,CAACI,CAAC,CAAC;EAC/B;AACJ,CAAC","ignoreList":[]}

package/createAcoCrud.d.ts

@@ -1,2 +0,0 @@
-import { AdvancedContentOrganisation, CreateAcoParams } from "./types";
-export declare const createAcoCrud: (params: CreateAcoParams) => AdvancedContentOrganisation;

package/createAcoCrud.js

@@ -1,17 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createAcoCrud = void 0;
-var _folder = require("./folder/folder.crud");
-var _record = require("./record/record.crud");
-const createAcoCrud = params => {
-  const folderMethods = (0, _folder.createFolderCrudMethods)(params);
-  const searchRecordMethods = (0, _record.createSearchRecordCrudMethods)(params);
-  return {
-    folder: folderMethods,
-    search: searchRecordMethods
-  };
-};
-exports.createAcoCrud = createAcoCrud;

package/createAcoCrud.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["createAcoCrud","params","folderMethods","createFolderCrudMethods","searchRecordMethods","createSearchRecordCrudMethods","folder","search"],"sources":["createAcoCrud.ts"],"sourcesContent":["import { createFolderCrudMethods } from \"~/folder/folder.crud\";\nimport { createSearchRecordCrudMethods } from \"~/record/record.crud\";\n\nimport { AdvancedContentOrganisation, CreateAcoParams } from \"~/types\";\n\nexport const createAcoCrud = (params: CreateAcoParams): AdvancedContentOrganisation => {\n    const folderMethods = createFolderCrudMethods(params);\n    const searchRecordMethods = createSearchRecordCrudMethods(params);\n\n    return {\n        folder: folderMethods,\n        search: searchRecordMethods\n    };\n};\n"],"mappings":";;;;;;AAAA;AACA;AAIO,MAAMA,aAAa,GAAIC,MAAuB,IAAkC;EACnF,MAAMC,aAAa,GAAG,IAAAC,+BAAuB,EAACF,MAAM,CAAC;EACrD,MAAMG,mBAAmB,GAAG,IAAAC,qCAA6B,EAACJ,MAAM,CAAC;EAEjE,OAAO;IACHK,MAAM,EAAEJ,aAAa;IACrBK,MAAM,EAAEH;EACZ,CAAC;AACL,CAAC;AAAC"}

package/createAcoFields.d.ts

@@ -1,2 +0,0 @@
-import { CmsModelFieldToGraphQLPlugin } from "@webiny/api-headless-cms/types";
-export declare const createAcoFields: () => CmsModelFieldToGraphQLPlugin[];