@webiny/api-aco 0.0.0-unstable.aad28a72ae → 0.0.0-unstable.ac6ebf63c6

package/features/flp/CreateFlpOnFolderCreated/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { CreateFlpOnFolderCreatedHandler } from "./CreateFlpOnFolderCreatedHandler.js";
+export const CreateFlpOnFolderCreatedFeature = createFeature({
+  name: "CreateFlpOnFolderCreated",
+  register(container) {
+    container.register(CreateFlpOnFolderCreatedHandler);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/flp/CreateFlpOnFolderCreated/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","CreateFlpOnFolderCreatedHandler","CreateFlpOnFolderCreatedFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { CreateFlpOnFolderCreatedHandler } from \"./CreateFlpOnFolderCreatedHandler.js\";\n\nexport const CreateFlpOnFolderCreatedFeature = createFeature({\n    name: \"CreateFlpOnFolderCreated\",\n    register(container) {\n        container.register(CreateFlpOnFolderCreatedHandler);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,+BAA+B;AAExC,OAAO,MAAMC,+BAA+B,GAAGF,aAAa,CAAC;EACzDG,IAAI,EAAE,0BAA0B;EAChCC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,+BAA+B,CAAC;EACvD;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/flp/CreateFlpOnFolderCreated/index.d.ts

@@ -0,0 +1 @@
+export { CreateFlpOnFolderCreatedFeature } from "./feature.js";

package/features/flp/CreateFlpOnFolderCreated/index.js

@@ -0,0 +1,3 @@
+export { CreateFlpOnFolderCreatedFeature } from "./feature.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/CreateFlpOnFolderCreated/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CreateFlpOnFolderCreatedFeature"],"sources":["index.ts"],"sourcesContent":["export { CreateFlpOnFolderCreatedFeature } from \"./feature.js\";\n"],"mappings":"AAAA,SAASA,+BAA+B","ignoreList":[]}

package/features/flp/DeleteFlp/DeleteFlpUseCase.d.ts

@@ -0,0 +1,8 @@
+import type { DeleteFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
+import type { Folder } from "../../../folder/folder.types.js";
+import type { AcoContext } from "../../../types.js";
+export declare class DeleteFlpUseCase implements UseCaseAbstraction.Interface {
+    private context;
+    constructor(context: AcoContext);
+    execute(folder: Folder): Promise<void>;
+}

package/features/flp/DeleteFlp/DeleteFlpUseCase.js

@@ -0,0 +1,23 @@
+import { WebinyError } from "@webiny/error";
+export class DeleteFlpUseCase {
+  constructor(context) {
+    this.context = context;
+  }
+  async execute(folder) {
+    try {
+      if (!folder) {
+        throw new WebinyError("Missing `folder` from the task input, I can't delete the record from the FLP catalog.", "ERROR_DELETE_FLP_USE_CASE_FOLDER_NOT_PROVIDED", {
+          folder
+        });
+      }
+      await this.context.aco.flp.delete(folder.id);
+    } catch (error) {
+      throw WebinyError.from(error, {
+        message: "Error while deleting FLP",
+        code: "ERROR_DELETE_FLP_USE_CASE"
+      });
+    }
+  }
+}
+
+//# sourceMappingURL=DeleteFlpUseCase.js.map

package/features/flp/DeleteFlp/DeleteFlpUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["WebinyError","DeleteFlpUseCase","constructor","context","execute","folder","aco","flp","delete","id","error","from","message","code"],"sources":["DeleteFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport type { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { Folder } from \"~/folder/folder.types.js\";\nimport type { AcoContext } from \"~/types.js\";\n\nexport class DeleteFlpUseCase implements UseCaseAbstraction.Interface {\n    constructor(private context: AcoContext) {}\n\n    async execute(folder: Folder): Promise<void> {\n        try {\n            if (!folder) {\n                throw new WebinyError(\n                    \"Missing `folder` from the task input, I can't delete the record from the FLP catalog.\",\n                    \"ERROR_DELETE_FLP_USE_CASE_FOLDER_NOT_PROVIDED\",\n                    { folder }\n                );\n            }\n            await this.context.aco.flp.delete(folder.id);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while deleting FLP\",\n                code: \"ERROR_DELETE_FLP_USE_CASE\"\n            });\n        }\n    }\n}\n"],"mappings":"AAAA,SAASA,WAAW,QAAQ,eAAe;AAK3C,OAAO,MAAMC,gBAAgB,CAAyC;EAClEC,WAAWA,CAASC,OAAmB,EAAE;IAAA,KAArBA,OAAmB,GAAnBA,OAAmB;EAAG;EAE1C,MAAMC,OAAOA,CAACC,MAAc,EAAiB;IACzC,IAAI;MACA,IAAI,CAACA,MAAM,EAAE;QACT,MAAM,IAAIL,WAAW,CACjB,uFAAuF,EACvF,+CAA+C,EAC/C;UAAEK;QAAO,CACb,CAAC;MACL;MACA,MAAM,IAAI,CAACF,OAAO,CAACG,GAAG,CAACC,GAAG,CAACC,MAAM,CAACH,MAAM,CAACI,EAAE,CAAC;IAChD,CAAC,CAAC,OAAOC,KAAK,EAAE;MACZ,MAAMV,WAAW,CAACW,IAAI,CAACD,KAAK,EAAE;QAC1BE,OAAO,EAAE,0BAA0B;QACnCC,IAAI,EAAE;MACV,CAAC,CAAC;IACN;EACJ;AACJ","ignoreList":[]}

package/features/flp/DeleteFlp/abstractions.d.ts

@@ -0,0 +1,8 @@
+import type { Folder } from "../../../folder/folder.types.js";
+export interface IDeleteFlpUseCase {
+    execute: (folder: Folder) => Promise<void>;
+}
+export declare const DeleteFlpUseCase: import("@webiny/di").Abstraction<IDeleteFlpUseCase>;
+export declare namespace DeleteFlpUseCase {
+    type Interface = IDeleteFlpUseCase;
+}

package/features/flp/DeleteFlp/abstractions.js

@@ -0,0 +1,7 @@
+import { createAbstraction } from "@webiny/feature/api";
+
+// Use Case Abstraction
+
+export const DeleteFlpUseCase = createAbstraction("DeleteFlpUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/features/flp/DeleteFlp/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DeleteFlpUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Folder } from \"~/folder/folder.types.js\";\n\n// Use Case Abstraction\nexport interface IDeleteFlpUseCase {\n    execute: (folder: Folder) => Promise<void>;\n}\n\nexport const DeleteFlpUseCase = createAbstraction<IDeleteFlpUseCase>(\"DeleteFlpUseCase\");\n\nexport namespace DeleteFlpUseCase {\n    export type Interface = IDeleteFlpUseCase;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAGvD;;AAKA,OAAO,MAAMC,gBAAgB,GAAGD,iBAAiB,CAAoB,kBAAkB,CAAC","ignoreList":[]}

package/features/flp/DeleteFlp/feature.d.ts

@@ -0,0 +1,6 @@
+import type { AcoContext } from "../../../types.js";
+interface LegacyDeps {
+    context: AcoContext;
+}
+export declare const DeleteFlpFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<LegacyDeps>;
+export {};

package/features/flp/DeleteFlp/feature.js

@@ -0,0 +1,13 @@
+import { createFeature } from "@webiny/feature/api";
+import { DeleteFlpUseCase } from "./DeleteFlpUseCase.js";
+import { DeleteFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
+export const DeleteFlpFeature = createFeature({
+  name: "DeleteFlp",
+  register(container, deps) {
+    container.registerFactory(UseCaseAbstraction, () => {
+      return new DeleteFlpUseCase(deps.context);
+    });
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/flp/DeleteFlp/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","DeleteFlpUseCase","UseCaseAbstraction","DeleteFlpFeature","name","register","container","deps","registerFactory","context"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { DeleteFlpUseCase } from \"./DeleteFlpUseCase.js\";\nimport { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { AcoContext } from \"~/types.js\";\n\ninterface LegacyDeps {\n    context: AcoContext;\n}\n\nexport const DeleteFlpFeature = createFeature({\n    name: \"DeleteFlp\",\n    register(container: Container, deps: LegacyDeps) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new DeleteFlpUseCase(deps.context);\n        });\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AAEnD,SAASC,gBAAgB;AACzB,SAASA,gBAAgB,IAAIC,kBAAkB;AAO/C,OAAO,MAAMC,gBAAgB,GAAGH,aAAa,CAAC;EAC1CI,IAAI,EAAE,WAAW;EACjBC,QAAQA,CAACC,SAAoB,EAAEC,IAAgB,EAAE;IAC7CD,SAAS,CAACE,eAAe,CAACN,kBAAkB,EAAE,MAAM;MAChD,OAAO,IAAID,gBAAgB,CAACM,IAAI,CAACE,OAAO,CAAC;IAC7C,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/flp/DeleteFlp/index.d.ts

@@ -0,0 +1,2 @@
+export { DeleteFlpFeature } from "./feature.js";
+export { DeleteFlpUseCase } from "./abstractions.js";

package/features/flp/DeleteFlp/index.js

@@ -0,0 +1,4 @@
+export { DeleteFlpFeature } from "./feature.js";
+export { DeleteFlpUseCase } from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/DeleteFlp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DeleteFlpFeature","DeleteFlpUseCase"],"sources":["index.ts"],"sourcesContent":["export { DeleteFlpFeature } from \"./feature.js\";\nexport { DeleteFlpUseCase } from \"./abstractions.js\";\n"],"mappings":"AAAA,SAASA,gBAAgB;AACzB,SAASC,gBAAgB","ignoreList":[]}

package/features/flp/DeleteFlpOnFolderDeleted/DeleteFlpOnFolderDeletedHandler.d.ts

@@ -0,0 +1,14 @@
+import { DeleteFlpUseCase } from "../DeleteFlp/abstractions.js";
+import { FolderAfterDeleteHandler } from "../../../features/folder/DeleteFolder/abstractions.js";
+import type { FolderAfterDeleteEvent } from "../../../features/folder/DeleteFolder/events.js";
+import { TaskService } from "@webiny/api-core/features/task/TaskService/index.js";
+declare class DeleteFlpOnFolderDeletedHandlerImpl implements FolderAfterDeleteHandler.Interface {
+    private deleteFlpUseCase;
+    private tasks?;
+    constructor(deleteFlpUseCase: DeleteFlpUseCase.Interface, tasks?: TaskService.Interface | undefined);
+    handle(event: FolderAfterDeleteEvent): Promise<void>;
+}
+export declare const DeleteFlpOnFolderDeletedHandler: typeof DeleteFlpOnFolderDeletedHandlerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/EventPublisher").IEventHandler<import("@webiny/api-core/features/EventPublisher").DomainEvent<import("~/features/folder/DeleteFolder/abstractions.js").FolderAfterDeletePayload>>>;
+};
+export {};

package/features/flp/DeleteFlpOnFolderDeleted/DeleteFlpOnFolderDeletedHandler.js

@@ -0,0 +1,37 @@
+import { DeleteFlpUseCase } from "../DeleteFlp/abstractions.js";
+import { FolderAfterDeleteHandler } from "../../folder/DeleteFolder/abstractions.js";
+import { DELETE_FLP_TASK_ID } from "../../../flp/tasks/index.js";
+import { TaskService } from "@webiny/api-core/features/task/TaskService/index.js";
+class DeleteFlpOnFolderDeletedHandlerImpl {
+  constructor(deleteFlpUseCase, tasks) {
+    this.deleteFlpUseCase = deleteFlpUseCase;
+    this.tasks = tasks;
+  }
+  async handle(event) {
+    const {
+      folder
+    } = event.payload;
+    try {
+      if (this.tasks) {
+        await this.tasks.trigger({
+          definition: DELETE_FLP_TASK_ID,
+          input: {
+            folder
+          }
+        });
+      } else {
+        await this.deleteFlpUseCase.execute(folder);
+      }
+    } catch {
+      // Ignore errors
+    }
+  }
+}
+export const DeleteFlpOnFolderDeletedHandler = FolderAfterDeleteHandler.createImplementation({
+  implementation: DeleteFlpOnFolderDeletedHandlerImpl,
+  dependencies: [DeleteFlpUseCase, [TaskService, {
+    optional: true
+  }]]
+});
+
+//# sourceMappingURL=DeleteFlpOnFolderDeletedHandler.js.map

package/features/flp/DeleteFlpOnFolderDeleted/DeleteFlpOnFolderDeletedHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DeleteFlpUseCase","FolderAfterDeleteHandler","DELETE_FLP_TASK_ID","TaskService","DeleteFlpOnFolderDeletedHandlerImpl","constructor","deleteFlpUseCase","tasks","handle","event","folder","payload","trigger","definition","input","execute","DeleteFlpOnFolderDeletedHandler","createImplementation","implementation","dependencies","optional"],"sources":["DeleteFlpOnFolderDeletedHandler.ts"],"sourcesContent":["import { DeleteFlpUseCase } from \"../DeleteFlp/abstractions.js\";\nimport { FolderAfterDeleteHandler } from \"~/features/folder/DeleteFolder/abstractions.js\";\nimport type { FolderAfterDeleteEvent } from \"~/features/folder/DeleteFolder/events.js\";\nimport type { IDeleteFlpTaskInput } from \"~/types.js\";\nimport { DELETE_FLP_TASK_ID } from \"~/flp/tasks/index.js\";\nimport { TaskService } from \"@webiny/api-core/features/task/TaskService/index.js\";\n\nclass DeleteFlpOnFolderDeletedHandlerImpl implements FolderAfterDeleteHandler.Interface {\n    constructor(\n        private deleteFlpUseCase: DeleteFlpUseCase.Interface,\n        private tasks?: TaskService.Interface\n    ) {}\n\n    async handle(event: FolderAfterDeleteEvent): Promise<void> {\n        const { folder } = event.payload;\n\n        try {\n            if (this.tasks) {\n                await this.tasks.trigger<IDeleteFlpTaskInput>({\n                    definition: DELETE_FLP_TASK_ID,\n                    input: { folder }\n                });\n            } else {\n                await this.deleteFlpUseCase.execute(folder);\n            }\n        } catch {\n            // Ignore errors\n        }\n    }\n}\n\nexport const DeleteFlpOnFolderDeletedHandler = FolderAfterDeleteHandler.createImplementation({\n    implementation: DeleteFlpOnFolderDeletedHandlerImpl,\n    dependencies: [DeleteFlpUseCase, [TaskService, { optional: true }]]\n});\n"],"mappings":"AAAA,SAASA,gBAAgB;AACzB,SAASC,wBAAwB;AAGjC,SAASC,kBAAkB;AAC3B,SAASC,WAAW,QAAQ,qDAAqD;AAEjF,MAAMC,mCAAmC,CAA+C;EACpFC,WAAWA,CACCC,gBAA4C,EAC5CC,KAA6B,EACvC;IAAA,KAFUD,gBAA4C,GAA5CA,gBAA4C;IAAA,KAC5CC,KAA6B,GAA7BA,KAA6B;EACtC;EAEH,MAAMC,MAAMA,CAACC,KAA6B,EAAiB;IACvD,MAAM;MAAEC;IAAO,CAAC,GAAGD,KAAK,CAACE,OAAO;IAEhC,IAAI;MACA,IAAI,IAAI,CAACJ,KAAK,EAAE;QACZ,MAAM,IAAI,CAACA,KAAK,CAACK,OAAO,CAAsB;UAC1CC,UAAU,EAAEX,kBAAkB;UAC9BY,KAAK,EAAE;YAAEJ;UAAO;QACpB,CAAC,CAAC;MACN,CAAC,MAAM;QACH,MAAM,IAAI,CAACJ,gBAAgB,CAACS,OAAO,CAACL,MAAM,CAAC;MAC/C;IACJ,CAAC,CAAC,MAAM;MACJ;IAAA;EAER;AACJ;AAEA,OAAO,MAAMM,+BAA+B,GAAGf,wBAAwB,CAACgB,oBAAoB,CAAC;EACzFC,cAAc,EAAEd,mCAAmC;EACnDe,YAAY,EAAE,CAACnB,gBAAgB,EAAE,CAACG,WAAW,EAAE;IAAEiB,QAAQ,EAAE;EAAK,CAAC,CAAC;AACtE,CAAC,CAAC","ignoreList":[]}

package/features/flp/DeleteFlpOnFolderDeleted/feature.d.ts

@@ -0,0 +1 @@
+export declare const DeleteFlpOnFolderDeletedFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/flp/DeleteFlpOnFolderDeleted/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { DeleteFlpOnFolderDeletedHandler } from "./DeleteFlpOnFolderDeletedHandler.js";
+export const DeleteFlpOnFolderDeletedFeature = createFeature({
+  name: "DeleteFlpOnFolderDeleted",
+  register(container) {
+    container.register(DeleteFlpOnFolderDeletedHandler);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/flp/DeleteFlpOnFolderDeleted/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","DeleteFlpOnFolderDeletedHandler","DeleteFlpOnFolderDeletedFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DeleteFlpOnFolderDeletedHandler } from \"./DeleteFlpOnFolderDeletedHandler.js\";\n\nexport const DeleteFlpOnFolderDeletedFeature = createFeature({\n    name: \"DeleteFlpOnFolderDeleted\",\n    register(container) {\n        container.register(DeleteFlpOnFolderDeletedHandler);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,+BAA+B;AAExC,OAAO,MAAMC,+BAA+B,GAAGF,aAAa,CAAC;EACzDG,IAAI,EAAE,0BAA0B;EAChCC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,+BAA+B,CAAC;EACvD;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/flp/DeleteFlpOnFolderDeleted/index.d.ts

@@ -0,0 +1 @@
+export { DeleteFlpOnFolderDeletedFeature } from "./feature.js";

package/features/flp/DeleteFlpOnFolderDeleted/index.js

@@ -0,0 +1,3 @@
+export { DeleteFlpOnFolderDeletedFeature } from "./feature.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/DeleteFlpOnFolderDeleted/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DeleteFlpOnFolderDeletedFeature"],"sources":["index.ts"],"sourcesContent":["export { DeleteFlpOnFolderDeletedFeature } from \"./feature.js\";\n"],"mappings":"AAAA,SAASA,+BAA+B","ignoreList":[]}

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.d.ts

@@ -0,0 +1,35 @@
+import { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import { WcpContext } from "@webiny/api-core/features/WcpContext";
+import { ListUserTeamsUseCase } from "@webiny/api-core/features/ListUserTeams";
+import { type CanAccessFolderContentParams, type CanAccessFolderParams } from "./useCases/index.js";
+import { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from "./abstractions.js";
+import type { FolderLevelPermission, FolderPermission, ListFlpsParams } from "../../../types.js";
+import { ListFlpsUseCase } from "../../../features/flp/ListFlps/index.js";
+import { GetFlpUseCase } from "../../../features/flp/GetFlp/index.js";
+declare class FolderLevelPermissionsImpl implements FolderLevelPermissionsAbstraction.Interface {
+    private identityContext;
+    private wcpContext;
+    private listUserTeamsUseCase;
+    private getFlpUseCase;
+    private listFlpsUseCase;
+    constructor(identityContext: IdentityContext.Interface, wcpContext: WcpContext.Interface, listUserTeamsUseCase: ListUserTeamsUseCase.Interface, getFlpUseCase: GetFlpUseCase.Interface, listFlpsUseCase: ListFlpsUseCase.Interface);
+    canUseFolderLevelPermissions(enabled?: boolean): boolean;
+    canUseTeams(): boolean;
+    canCreateFolderInRoot(): boolean;
+    permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean;
+    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;
+    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;
+    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;
+    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;
+    canManageFolderContent(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean>;
+    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;
+    listFolderLevelPermissions(params: ListFlpsParams): Promise<Array<{
+        id: string;
+        permissions: FolderPermission[];
+    }>>;
+    getFolderLevelPermissions(id: string): Promise<FolderPermission[]>;
+}
+export declare const FolderLevelPermissions: import("@webiny/di").Implementation<typeof FolderLevelPermissionsImpl>;
+export {};

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.js

@@ -0,0 +1,133 @@
+import { createImplementation } from "@webiny/di";
+import { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import { WcpContext } from "@webiny/api-core/features/WcpContext";
+import { ListUserTeamsUseCase } from "@webiny/api-core/features/ListUserTeams";
+import { NotAuthorizedError } from "@webiny/api-core/features/security/shared/index.js";
+import { CanAccessFolder, CanAccessFolderContent, CanCreateFolderInRoot, CheckNotInheritedPermissions, GetDefaultPermissions, GetDefaultPermissionsWithTeams } from "./useCases/index.js";
+import { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from "./abstractions.js";
+import { ListFlpsUseCase } from "../ListFlps/index.js";
+import { GetFlpUseCase } from "../GetFlp/index.js";
+class FolderLevelPermissionsImpl {
+  constructor(identityContext, wcpContext, listUserTeamsUseCase, getFlpUseCase, listFlpsUseCase) {
+    this.identityContext = identityContext;
+    this.wcpContext = wcpContext;
+    this.listUserTeamsUseCase = listUserTeamsUseCase;
+    this.getFlpUseCase = getFlpUseCase;
+    this.listFlpsUseCase = listFlpsUseCase;
+  }
+  canUseFolderLevelPermissions(enabled) {
+    if (enabled === false) {
+      return false;
+    }
+    const identity = this.identityContext.getIdentity();
+
+    // FLPs only work with authenticated identities (logged-in users).
+    if (!identity) {
+      return false;
+    }
+
+    // At the moment, we only want FLP to be used with identities of type "admin".
+    // This temporarily addresses the issue of API keys not being able to access content, because
+    // FLPs doesn't work with them. Once we start adding FLPs to API keys, we can remove this check.
+    if (identity.type !== "admin") {
+      return false;
+    }
+    return this.wcpContext.canUseFolderLevelPermissions();
+  }
+  canUseTeams() {
+    return this.wcpContext.canUseTeams();
+  }
+  canCreateFolderInRoot() {
+    const canCreateFolderInRootUseCase = new CanCreateFolderInRoot();
+    return canCreateFolderInRootUseCase.execute();
+  }
+  permissionsIncludeNonInheritedPermissions(permissions) {
+    const checkNotInheritedPermissionsUseCase = new CheckNotInheritedPermissions();
+    return checkNotInheritedPermissionsUseCase.execute(permissions);
+  }
+  async canAccessFolder(params) {
+    if (!this.canUseFolderLevelPermissions() || !this.identityContext.isAuthorizationEnabled()) {
+      return true;
+    }
+    const canAccessFolderUseCase = new CanAccessFolder(this.identityContext);
+    return await canAccessFolderUseCase.execute(params);
+  }
+  async canAccessFolderContent(params) {
+    const canUseFlp = this.canUseFolderLevelPermissions();
+    const authEnabled = this.identityContext.isAuthorizationEnabled();
+    if (!canUseFlp || !authEnabled) {
+      return true;
+    }
+    const canAccessFolderContentUseCase = new CanAccessFolderContent(this.identityContext);
+    return await canAccessFolderContentUseCase.execute(params);
+  }
+  async ensureCanAccessFolder(params) {
+    const result = await this.canAccessFolder(params);
+    if (!result) {
+      throw new NotAuthorizedError();
+    }
+  }
+  async ensureCanAccessFolderContent(params) {
+    const result = await this.canAccessFolderContent(params);
+    if (!result) {
+      throw new NotAuthorizedError();
+    }
+  }
+  async canManageFolderContent(flp) {
+    if (!this.canUseFolderLevelPermissions() || !this.identityContext.isAuthorizationEnabled()) {
+      return true;
+    }
+    return await this.canAccessFolderContent({
+      permissions: flp.permissions,
+      rwd: "w"
+    });
+  }
+  async canManageFolderStructure(flp) {
+    if (!this.canUseFolderLevelPermissions() || !this.identityContext.isAuthorizationEnabled()) {
+      return true;
+    }
+    return await this.canAccessFolder({
+      permissions: flp.permissions,
+      rwd: "w"
+    });
+  }
+  async canManageFolderPermissions(flp) {
+    if (!this.canUseFolderLevelPermissions()) {
+      return false;
+    }
+    if (!this.identityContext.isAuthorizationEnabled()) {
+      return true;
+    }
+    return await this.canAccessFolder({
+      permissions: flp.permissions,
+      rwd: "w",
+      managePermissions: true
+    });
+  }
+  getDefaultPermissions(permissions) {
+    const getDefaultPermissionsUseCase = new GetDefaultPermissions(this.identityContext);
+    if (this.canUseTeams()) {
+      const getDefaultPermissionsWithTeams = new GetDefaultPermissionsWithTeams(this.identityContext, this.listUserTeamsUseCase, getDefaultPermissionsUseCase);
+      return getDefaultPermissionsWithTeams.execute(permissions);
+    }
+    return getDefaultPermissionsUseCase.execute(permissions);
+  }
+  async listFolderLevelPermissions(params) {
+    const flps = await this.listFlpsUseCase.execute(params);
+    return Promise.all(flps.map(async flp => ({
+      id: flp.id,
+      permissions: await this.getDefaultPermissions(flp.permissions)
+    })));
+  }
+  async getFolderLevelPermissions(id) {
+    const flp = await this.getFlpUseCase.execute(id);
+    return await this.getDefaultPermissions(flp?.permissions ?? []);
+  }
+}
+export const FolderLevelPermissions = createImplementation({
+  abstraction: FolderLevelPermissionsAbstraction,
+  implementation: FolderLevelPermissionsImpl,
+  dependencies: [IdentityContext, WcpContext, ListUserTeamsUseCase, GetFlpUseCase, ListFlpsUseCase]
+});
+
+//# sourceMappingURL=FolderLevelPermissions.js.map

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","IdentityContext","WcpContext","ListUserTeamsUseCase","NotAuthorizedError","CanAccessFolder","CanAccessFolderContent","CanCreateFolderInRoot","CheckNotInheritedPermissions","GetDefaultPermissions","GetDefaultPermissionsWithTeams","FolderLevelPermissions","FolderLevelPermissionsAbstraction","ListFlpsUseCase","GetFlpUseCase","FolderLevelPermissionsImpl","constructor","identityContext","wcpContext","listUserTeamsUseCase","getFlpUseCase","listFlpsUseCase","canUseFolderLevelPermissions","enabled","identity","getIdentity","type","canUseTeams","canCreateFolderInRoot","canCreateFolderInRootUseCase","execute","permissionsIncludeNonInheritedPermissions","permissions","checkNotInheritedPermissionsUseCase","canAccessFolder","params","isAuthorizationEnabled","canAccessFolderUseCase","canAccessFolderContent","canUseFlp","authEnabled","canAccessFolderContentUseCase","ensureCanAccessFolder","result","ensureCanAccessFolderContent","canManageFolderContent","flp","rwd","canManageFolderStructure","canManageFolderPermissions","managePermissions","getDefaultPermissions","getDefaultPermissionsUseCase","getDefaultPermissionsWithTeams","listFolderLevelPermissions","flps","Promise","all","map","id","getFolderLevelPermissions","abstraction","implementation","dependencies"],"sources":["FolderLevelPermissions.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport { WcpContext } from \"@webiny/api-core/features/WcpContext\";\nimport { ListUserTeamsUseCase } from \"@webiny/api-core/features/ListUserTeams\";\nimport { NotAuthorizedError } from \"@webiny/api-core/features/security/shared/index.js\";\nimport {\n    CanAccessFolder,\n    CanAccessFolderContent,\n    type CanAccessFolderContentParams,\n    type CanAccessFolderParams,\n    CanCreateFolderInRoot,\n    CheckNotInheritedPermissions,\n    GetDefaultPermissions,\n    GetDefaultPermissionsWithTeams\n} from \"./useCases/index.js\";\nimport { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from \"./abstractions.js\";\nimport type { FolderLevelPermission, FolderPermission, ListFlpsParams } from \"~/types.js\";\nimport { ListFlpsUseCase } from \"~/features/flp/ListFlps/index.js\";\nimport { GetFlpUseCase } from \"~/features/flp/GetFlp/index.js\";\n\nclass FolderLevelPermissionsImpl implements FolderLevelPermissionsAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private wcpContext: WcpContext.Interface,\n        private listUserTeamsUseCase: ListUserTeamsUseCase.Interface,\n        private getFlpUseCase: GetFlpUseCase.Interface,\n        private listFlpsUseCase: ListFlpsUseCase.Interface\n    ) {}\n\n    public canUseFolderLevelPermissions(enabled?: boolean): boolean {\n        if (enabled === false) {\n            return false;\n        }\n\n        const identity = this.identityContext.getIdentity();\n\n        // FLPs only work with authenticated identities (logged-in users).\n        if (!identity) {\n            return false;\n        }\n\n        // At the moment, we only want FLP to be used with identities of type \"admin\".\n        // This temporarily addresses the issue of API keys not being able to access content, because\n        // FLPs doesn't work with them. Once we start adding FLPs to API keys, we can remove this check.\n        if (identity.type !== \"admin\") {\n            return false;\n        }\n\n        return this.wcpContext.canUseFolderLevelPermissions();\n    }\n\n    public canUseTeams(): boolean {\n        return this.wcpContext.canUseTeams();\n    }\n\n    public canCreateFolderInRoot(): boolean {\n        const canCreateFolderInRootUseCase = new CanCreateFolderInRoot();\n        return canCreateFolderInRootUseCase.execute();\n    }\n\n    public permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean {\n        const checkNotInheritedPermissionsUseCase = new CheckNotInheritedPermissions();\n        return checkNotInheritedPermissionsUseCase.execute(permissions);\n    }\n\n    public async canAccessFolder(params: CanAccessFolderParams): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        const canAccessFolderUseCase = new CanAccessFolder(this.identityContext);\n        return await canAccessFolderUseCase.execute(params);\n    }\n\n    public async canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean> {\n        const canUseFlp = this.canUseFolderLevelPermissions();\n        const authEnabled = this.identityContext.isAuthorizationEnabled();\n\n        if (!canUseFlp || !authEnabled) {\n            return true;\n        }\n\n        const canAccessFolderContentUseCase = new CanAccessFolderContent(this.identityContext);\n        return await canAccessFolderContentUseCase.execute(params);\n    }\n\n    public async ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void> {\n        const result = await this.canAccessFolder(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void> {\n        const result = await this.canAccessFolderContent(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async canManageFolderContent(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolderContent({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolder({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean> {\n        if (!this.canUseFolderLevelPermissions()) {\n            return false;\n        }\n\n        if (!this.identityContext.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return await this.canAccessFolder({\n            permissions: flp.permissions,\n            rwd: \"w\",\n            managePermissions: true\n        });\n    }\n\n    public getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]> {\n        const getDefaultPermissionsUseCase = new GetDefaultPermissions(this.identityContext);\n\n        if (this.canUseTeams()) {\n            const getDefaultPermissionsWithTeams = new GetDefaultPermissionsWithTeams(\n                this.identityContext,\n                this.listUserTeamsUseCase,\n                getDefaultPermissionsUseCase\n            );\n\n            return getDefaultPermissionsWithTeams.execute(permissions);\n        }\n\n        return getDefaultPermissionsUseCase.execute(permissions);\n    }\n\n    public async listFolderLevelPermissions(params: ListFlpsParams): Promise<\n        Array<{\n            id: string;\n            permissions: FolderPermission[];\n        }>\n    > {\n        const flps = await this.listFlpsUseCase.execute(params);\n\n        return Promise.all(\n            flps.map(async flp => ({\n                id: flp.id,\n                permissions: await this.getDefaultPermissions(flp.permissions)\n            }))\n        );\n    }\n\n    public async getFolderLevelPermissions(id: string): Promise<FolderPermission[]> {\n        const flp = await this.getFlpUseCase.execute(id);\n        return await this.getDefaultPermissions(flp?.permissions ?? []);\n    }\n}\n\nexport const FolderLevelPermissions = createImplementation({\n    abstraction: FolderLevelPermissionsAbstraction,\n    implementation: FolderLevelPermissionsImpl,\n    dependencies: [\n        IdentityContext,\n        WcpContext,\n        ListUserTeamsUseCase,\n        GetFlpUseCase,\n        ListFlpsUseCase\n    ]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,YAAY;AACjD,SAASC,eAAe,QAAQ,2CAA2C;AAC3E,SAASC,UAAU,QAAQ,sCAAsC;AACjE,SAASC,oBAAoB,QAAQ,yCAAyC;AAC9E,SAASC,kBAAkB,QAAQ,oDAAoD;AACvF,SACIC,eAAe,EACfC,sBAAsB,EAGtBC,qBAAqB,EACrBC,4BAA4B,EAC5BC,qBAAqB,EACrBC,8BAA8B;AAElC,SAASC,sBAAsB,IAAIC,iCAAiC;AAEpE,SAASC,eAAe;AACxB,SAASC,aAAa;AAEtB,MAAMC,0BAA0B,CAAwD;EACpFC,WAAWA,CACCC,eAA0C,EAC1CC,UAAgC,EAChCC,oBAAoD,EACpDC,aAAsC,EACtCC,eAA0C,EACpD;IAAA,KALUJ,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,UAAgC,GAAhCA,UAAgC;IAAA,KAChCC,oBAAoD,GAApDA,oBAAoD;IAAA,KACpDC,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,eAA0C,GAA1CA,eAA0C;EACnD;EAEIC,4BAA4BA,CAACC,OAAiB,EAAW;IAC5D,IAAIA,OAAO,KAAK,KAAK,EAAE;MACnB,OAAO,KAAK;IAChB;IAEA,MAAMC,QAAQ,GAAG,IAAI,CAACP,eAAe,CAACQ,WAAW,CAAC,CAAC;;IAEnD;IACA,IAAI,CAACD,QAAQ,EAAE;MACX,OAAO,KAAK;IAChB;;IAEA;IACA;IACA;IACA,IAAIA,QAAQ,CAACE,IAAI,KAAK,OAAO,EAAE;MAC3B,OAAO,KAAK;IAChB;IAEA,OAAO,IAAI,CAACR,UAAU,CAACI,4BAA4B,CAAC,CAAC;EACzD;EAEOK,WAAWA,CAAA,EAAY;IAC1B,OAAO,IAAI,CAACT,UAAU,CAACS,WAAW,CAAC,CAAC;EACxC;EAEOC,qBAAqBA,CAAA,EAAY;IACpC,MAAMC,4BAA4B,GAAG,IAAItB,qBAAqB,CAAC,CAAC;IAChE,OAAOsB,4BAA4B,CAACC,OAAO,CAAC,CAAC;EACjD;EAEOC,yCAAyCA,CAACC,WAA+B,EAAW;IACvF,MAAMC,mCAAmC,GAAG,IAAIzB,4BAA4B,CAAC,CAAC;IAC9E,OAAOyB,mCAAmC,CAACH,OAAO,CAACE,WAAW,CAAC;EACnE;EAEA,MAAaE,eAAeA,CAACC,MAA6B,EAAoB;IAC1E,IACI,CAAC,IAAI,CAACb,4BAA4B,CAAC,CAAC,IACpC,CAAC,IAAI,CAACL,eAAe,CAACmB,sBAAsB,CAAC,CAAC,EAChD;MACE,OAAO,IAAI;IACf;IAEA,MAAMC,sBAAsB,GAAG,IAAIhC,eAAe,CAAC,IAAI,CAACY,eAAe,CAAC;IACxE,OAAO,MAAMoB,sBAAsB,CAACP,OAAO,CAACK,MAAM,CAAC;EACvD;EAEA,MAAaG,sBAAsBA,CAACH,MAAoC,EAAoB;IACxF,MAAMI,SAAS,GAAG,IAAI,CAACjB,4BAA4B,CAAC,CAAC;IACrD,MAAMkB,WAAW,GAAG,IAAI,CAACvB,eAAe,CAACmB,sBAAsB,CAAC,CAAC;IAEjE,IAAI,CAACG,SAAS,IAAI,CAACC,WAAW,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMC,6BAA6B,GAAG,IAAInC,sBAAsB,CAAC,IAAI,CAACW,eAAe,CAAC;IACtF,OAAO,MAAMwB,6BAA6B,CAACX,OAAO,CAACK,MAAM,CAAC;EAC9D;EAEA,MAAaO,qBAAqBA,CAACP,MAA6B,EAAiB;IAC7E,MAAMQ,MAAM,GAAG,MAAM,IAAI,CAACT,eAAe,CAACC,MAAM,CAAC;IACjD,IAAI,CAACQ,MAAM,EAAE;MACT,MAAM,IAAIvC,kBAAkB,CAAC,CAAC;IAClC;EACJ;EAEA,MAAawC,4BAA4BA,CAACT,MAAoC,EAAiB;IAC3F,MAAMQ,MAAM,GAAG,MAAM,IAAI,CAACL,sBAAsB,CAACH,MAAM,CAAC;IACxD,IAAI,CAACQ,MAAM,EAAE;MACT,MAAM,IAAIvC,kBAAkB,CAAC,CAAC;IAClC;EACJ;EAEA,MAAayC,sBAAsBA,CAACC,GAA0B,EAAoB;IAC9E,IACI,CAAC,IAAI,CAACxB,4BAA4B,CAAC,CAAC,IACpC,CAAC,IAAI,CAACL,eAAe,CAACmB,sBAAsB,CAAC,CAAC,EAChD;MACE,OAAO,IAAI;IACf;IAEA,OAAO,MAAM,IAAI,CAACE,sBAAsB,CAAC;MAAEN,WAAW,EAAEc,GAAG,CAACd,WAAW;MAAEe,GAAG,EAAE;IAAI,CAAC,CAAC;EACxF;EAEA,MAAaC,wBAAwBA,CAACF,GAA0B,EAAoB;IAChF,IACI,CAAC,IAAI,CAACxB,4BAA4B,CAAC,CAAC,IACpC,CAAC,IAAI,CAACL,eAAe,CAACmB,sBAAsB,CAAC,CAAC,EAChD;MACE,OAAO,IAAI;IACf;IAEA,OAAO,MAAM,IAAI,CAACF,eAAe,CAAC;MAAEF,WAAW,EAAEc,GAAG,CAACd,WAAW;MAAEe,GAAG,EAAE;IAAI,CAAC,CAAC;EACjF;EAEA,MAAaE,0BAA0BA,CAACH,GAA0B,EAAoB;IAClF,IAAI,CAAC,IAAI,CAACxB,4BAA4B,CAAC,CAAC,EAAE;MACtC,OAAO,KAAK;IAChB;IAEA,IAAI,CAAC,IAAI,CAACL,eAAe,CAACmB,sBAAsB,CAAC,CAAC,EAAE;MAChD,OAAO,IAAI;IACf;IAEA,OAAO,MAAM,IAAI,CAACF,eAAe,CAAC;MAC9BF,WAAW,EAAEc,GAAG,CAACd,WAAW;MAC5Be,GAAG,EAAE,GAAG;MACRG,iBAAiB,EAAE;IACvB,CAAC,CAAC;EACN;EAEOC,qBAAqBA,CAACnB,WAA+B,EAA+B;IACvF,MAAMoB,4BAA4B,GAAG,IAAI3C,qBAAqB,CAAC,IAAI,CAACQ,eAAe,CAAC;IAEpF,IAAI,IAAI,CAACU,WAAW,CAAC,CAAC,EAAE;MACpB,MAAM0B,8BAA8B,GAAG,IAAI3C,8BAA8B,CACrE,IAAI,CAACO,eAAe,EACpB,IAAI,CAACE,oBAAoB,EACzBiC,4BACJ,CAAC;MAED,OAAOC,8BAA8B,CAACvB,OAAO,CAACE,WAAW,CAAC;IAC9D;IAEA,OAAOoB,4BAA4B,CAACtB,OAAO,CAACE,WAAW,CAAC;EAC5D;EAEA,MAAasB,0BAA0BA,CAACnB,MAAsB,EAK5D;IACE,MAAMoB,IAAI,GAAG,MAAM,IAAI,CAAClC,eAAe,CAACS,OAAO,CAACK,MAAM,CAAC;IAEvD,OAAOqB,OAAO,CAACC,GAAG,CACdF,IAAI,CAACG,GAAG,CAAC,MAAMZ,GAAG,KAAK;MACnBa,EAAE,EAAEb,GAAG,CAACa,EAAE;MACV3B,WAAW,EAAE,MAAM,IAAI,CAACmB,qBAAqB,CAACL,GAAG,CAACd,WAAW;IACjE,CAAC,CAAC,CACN,CAAC;EACL;EAEA,MAAa4B,yBAAyBA,CAACD,EAAU,EAA+B;IAC5E,MAAMb,GAAG,GAAG,MAAM,IAAI,CAAC1B,aAAa,CAACU,OAAO,CAAC6B,EAAE,CAAC;IAChD,OAAO,MAAM,IAAI,CAACR,qBAAqB,CAACL,GAAG,EAAEd,WAAW,IAAI,EAAE,CAAC;EACnE;AACJ;AAEA,OAAO,MAAMrB,sBAAsB,GAAGX,oBAAoB,CAAC;EACvD6D,WAAW,EAAEjD,iCAAiC;EAC9CkD,cAAc,EAAE/C,0BAA0B;EAC1CgD,YAAY,EAAE,CACV9D,eAAe,EACfC,UAAU,EACVC,oBAAoB,EACpBW,aAAa,EACbD,eAAe;AAEvB,CAAC,CAAC","ignoreList":[]}

package/features/flp/FolderLevelPermissions/abstractions.d.ts

@@ -0,0 +1,25 @@
+import type { CanAccessFolderContentParams, CanAccessFolderParams } from "./useCases/index.js";
+import type { FolderLevelPermission, FolderPermission, ListFlpsParams } from "../../../types.js";
+export interface IFolderLevelPermissions {
+    canUseFolderLevelPermissions(enabled?: boolean): boolean;
+    canUseTeams(): boolean;
+    canCreateFolderInRoot(): boolean;
+    permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean;
+    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;
+    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;
+    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;
+    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;
+    canManageFolderContent(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean>;
+    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;
+    listFolderLevelPermissions(params: ListFlpsParams): Promise<Array<{
+        id: string;
+        permissions: FolderPermission[];
+    }>>;
+    getFolderLevelPermissions(id: string): Promise<FolderPermission[]>;
+}
+export declare const FolderLevelPermissions: import("@webiny/di").Abstraction<IFolderLevelPermissions>;
+export declare namespace FolderLevelPermissions {
+    type Interface = IFolderLevelPermissions;
+}

package/features/flp/FolderLevelPermissions/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const FolderLevelPermissions = createAbstraction("FolderLevelPermissions");
+
+//# sourceMappingURL=abstractions.js.map

package/features/flp/FolderLevelPermissions/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","FolderLevelPermissions"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { CanAccessFolderContentParams, CanAccessFolderParams } from \"./useCases/index.js\";\nimport type { FolderLevelPermission, FolderPermission, ListFlpsParams } from \"~/types.js\";\n\nexport interface IFolderLevelPermissions {\n    canUseFolderLevelPermissions(enabled?: boolean): boolean;\n    canUseTeams(): boolean;\n    canCreateFolderInRoot(): boolean;\n    permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean;\n    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;\n    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;\n    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;\n    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;\n    canManageFolderContent(flp: FolderLevelPermission): Promise<boolean>;\n    canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean>;\n    canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean>;\n    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;\n    listFolderLevelPermissions(params: ListFlpsParams): Promise<\n        Array<{\n            id: string;\n            permissions: FolderPermission[];\n        }>\n    >;\n    getFolderLevelPermissions(id: string): Promise<FolderPermission[]>;\n}\n\nexport const FolderLevelPermissions =\n    createAbstraction<IFolderLevelPermissions>(\"FolderLevelPermissions\");\n\nexport namespace FolderLevelPermissions {\n    export type Interface = IFolderLevelPermissions;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA0BvD,OAAO,MAAMC,sBAAsB,GAC/BD,iBAAiB,CAA0B,wBAAwB,CAAC","ignoreList":[]}

package/features/flp/FolderLevelPermissions/feature.d.ts

@@ -0,0 +1 @@
+export declare const FolderLevelPermissionsFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/flp/FolderLevelPermissions/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { FolderLevelPermissions } from "./FolderLevelPermissions.js";
+export const FolderLevelPermissionsFeature = createFeature({
+  name: "FolderLevelPermissions",
+  register(container) {
+    container.register(FolderLevelPermissions);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/flp/FolderLevelPermissions/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","FolderLevelPermissions","FolderLevelPermissionsFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { FolderLevelPermissions } from \"./FolderLevelPermissions.js\";\n\nexport const FolderLevelPermissionsFeature = createFeature({\n    name: \"FolderLevelPermissions\",\n    register(container: Container) {\n        container.register(FolderLevelPermissions);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AAEnD,SAASC,sBAAsB;AAE/B,OAAO,MAAMC,6BAA6B,GAAGF,aAAa,CAAC;EACvDG,IAAI,EAAE,wBAAwB;EAC9BC,QAAQA,CAACC,SAAoB,EAAE;IAC3BA,SAAS,CAACD,QAAQ,CAACH,sBAAsB,CAAC;EAC9C;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/flp/FolderLevelPermissions/index.d.ts

@@ -0,0 +1,2 @@
+export { FolderLevelPermissionsFeature } from "./feature.js";
+export { FolderLevelPermissions } from "./abstractions.js";

package/features/flp/FolderLevelPermissions/index.js

@@ -0,0 +1,4 @@
+export { FolderLevelPermissionsFeature } from "./feature.js";
+export { FolderLevelPermissions } from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["FolderLevelPermissionsFeature","FolderLevelPermissions"],"sources":["index.ts"],"sourcesContent":["export { FolderLevelPermissionsFeature } from \"./feature.js\";\nexport { FolderLevelPermissions } from \"./abstractions.js\";\n"],"mappings":"AAAA,SAASA,6BAA6B;AACtC,SAASC,sBAAsB","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.d.ts

@@ -0,0 +1,7 @@
+import { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import type { CanAccessFolderParams, ICanAccessFolder } from "./ICanAccessFolder.js";
+export declare class CanAccessFolder implements ICanAccessFolder {
+    private identityContext;
+    constructor(identityContext: IdentityContext.Interface);
+    execute({ permissions, rwd, managePermissions }: CanAccessFolderParams): Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.js

@@ -0,0 +1,41 @@
+export class CanAccessFolder {
+  constructor(identityContext) {
+    this.identityContext = identityContext;
+  }
+  async execute({
+    permissions = [],
+    rwd,
+    managePermissions
+  }) {
+    if (!permissions.length) {
+      return true;
+    }
+    const identity = this.identityContext.getIdentity();
+    const currentIdentityPermission = permissions.find(p => {
+      return p.target === `admin:${identity.id}`;
+    });
+    if (!currentIdentityPermission) {
+      return false;
+    }
+    const {
+      level
+    } = currentIdentityPermission;
+    if (managePermissions) {
+      return level === "owner";
+    }
+
+    // If the user has a `no-access` level, they are explicitly denied access to the current folder.
+    if (level === "no-access") {
+      return false;
+    }
+
+    // Checking for "write" or "delete" access. Allow only if the
+    // user is has `owner` or `editor` level or the folder is public (no FLP assigned).
+    if (rwd !== "r") {
+      return level === "owner" || level === "editor" || level === "public";
+    }
+    return true;
+  }
+}
+
+//# sourceMappingURL=CanAccessFolder.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CanAccessFolder","constructor","identityContext","execute","permissions","rwd","managePermissions","length","identity","getIdentity","currentIdentityPermission","find","p","target","id","level"],"sources":["CanAccessFolder.ts"],"sourcesContent":["import { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport type { CanAccessFolderParams, ICanAccessFolder } from \"./ICanAccessFolder.js\";\n\nexport class CanAccessFolder implements ICanAccessFolder {\n    constructor(private identityContext: IdentityContext.Interface) {}\n\n    async execute({ permissions = [], rwd, managePermissions }: CanAccessFolderParams) {\n        if (!permissions.length) {\n            return true;\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const currentIdentityPermission = permissions.find(p => {\n            return p.target === `admin:${identity.id}`;\n        });\n\n        if (!currentIdentityPermission) {\n            return false;\n        }\n\n        const { level } = currentIdentityPermission;\n\n        if (managePermissions) {\n            return level === \"owner\";\n        }\n\n        // If the user has a `no-access` level, they are explicitly denied access to the current folder.\n        if (level === \"no-access\") {\n            return false;\n        }\n\n        // Checking for \"write\" or \"delete\" access. Allow only if the\n        // user is has `owner` or `editor` level or the folder is public (no FLP assigned).\n        if (rwd !== \"r\") {\n            return level === \"owner\" || level === \"editor\" || level === \"public\";\n        }\n\n        return true;\n    }\n}\n"],"mappings":"AAGA,OAAO,MAAMA,eAAe,CAA6B;EACrDC,WAAWA,CAASC,eAA0C,EAAE;IAAA,KAA5CA,eAA0C,GAA1CA,eAA0C;EAAG;EAEjE,MAAMC,OAAOA,CAAC;IAAEC,WAAW,GAAG,EAAE;IAAEC,GAAG;IAAEC;EAAyC,CAAC,EAAE;IAC/E,IAAI,CAACF,WAAW,CAACG,MAAM,EAAE;MACrB,OAAO,IAAI;IACf;IAEA,MAAMC,QAAQ,GAAG,IAAI,CAACN,eAAe,CAACO,WAAW,CAAC,CAAC;IACnD,MAAMC,yBAAyB,GAAGN,WAAW,CAACO,IAAI,CAACC,CAAC,IAAI;MACpD,OAAOA,CAAC,CAACC,MAAM,KAAK,SAASL,QAAQ,CAACM,EAAE,EAAE;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACJ,yBAAyB,EAAE;MAC5B,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEK;IAAM,CAAC,GAAGL,yBAAyB;IAE3C,IAAIJ,iBAAiB,EAAE;MACnB,OAAOS,KAAK,KAAK,OAAO;IAC5B;;IAEA;IACA,IAAIA,KAAK,KAAK,WAAW,EAAE;MACvB,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,IAAIV,GAAG,KAAK,GAAG,EAAE;MACb,OAAOU,KAAK,KAAK,OAAO,IAAIA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,QAAQ;IACxE;IAEA,OAAO,IAAI;EACf;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.d.ts

@@ -0,0 +1,9 @@
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export interface CanAccessFolderParams {
+    permissions?: FolderPermission[];
+    rwd?: "r" | "w" | "d";
+    managePermissions?: boolean;
+}
+export interface ICanAccessFolder {
+    execute: (params: CanAccessFolderParams) => Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=ICanAccessFolder.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["ICanAccessFolder.ts"],"sourcesContent":["import type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport interface CanAccessFolderParams {\n    permissions?: FolderPermission[];\n    rwd?: \"r\" | \"w\" | \"d\";\n    managePermissions?: boolean;\n}\n\nexport interface ICanAccessFolder {\n    execute: (params: CanAccessFolderParams) => Promise<boolean>;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./CanAccessFolder.js";
+export type * from "./ICanAccessFolder.js";

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.js

@@ -0,0 +1,3 @@
+export * from "./CanAccessFolder.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./CanAccessFolder.js\";\nexport type * from \"./ICanAccessFolder.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/CanAccessFolderContent.d.ts

@@ -0,0 +1,7 @@
+import type { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import type { CanAccessFolderContentParams, ICanAccessFolderContent } from "./ICanAccessFolderContent.js";
+export declare class CanAccessFolderContent implements ICanAccessFolderContent {
+    private identityContext;
+    constructor(identityContext: IdentityContext.Interface);
+    execute({ permissions, rwd }: CanAccessFolderContentParams): Promise<boolean>;
+}