@webiny/api-aco 0.0.0-unstable.b14eaecf38 → 0.0.0-unstable.b6d7105cee

package/utils/createOperationsWrapper.js

@@ -1,29 +1,15 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createOperationsWrapper = void 0;
-var _error = _interopRequireDefault(require("@webiny/error"));
-const createOperationsWrapper = params => {
-  const {
-    cms,
-    security,
-    modelName
-  } = params;
-  const withModel = async cb => {
-    return security.withoutAuthorization(async () => {
-      const model = await cms.getModel(modelName);
-      if (!model) {
-        throw new _error.default(`Could not find "${modelName}" model.`, "MODEL_NOT_FOUND_ERROR");
-      }
-      const result = await cb(model);
-      return result;
-    });
-  };
-  return {
-    withModel
-  };
+import error from "@webiny/error";
+const createOperationsWrapper = (params)=>{
+    const { security, cms, modelName } = params;
+    const withModel = async (cb)=>{
+        const model = await security.withoutAuthorization(()=>cms.getModel(modelName));
+        if (!model) throw new error(`Could not find "${modelName}" model.`, "MODEL_NOT_FOUND_ERROR");
+        return cb(model);
+    };
+    return {
+        withModel
+    };
 };
-exports.createOperationsWrapper = createOperationsWrapper;
+export { createOperationsWrapper };
+
+//# sourceMappingURL=createOperationsWrapper.js.map

package/utils/createOperationsWrapper.js.map

@@ -1 +1 @@
-{"version":3,"names":["createOperationsWrapper","params","cms","security","modelName","withModel","cb","withoutAuthorization","model","getModel","WebinyError","result"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations\";\nimport { CmsModel } from \"@webiny/api-headless-cms/types\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { cms, security, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        return security.withoutAuthorization(async () => {\n            const model = await cms.getModel(modelName);\n\n            if (!model) {\n                throw new WebinyError(\n                    `Could not find \"${modelName}\" model.`,\n                    \"MODEL_NOT_FOUND_ERROR\"\n                );\n            }\n\n            const result = await cb(model);\n\n            return result;\n        });\n    };\n\n    return {\n        withModel\n    };\n};\n"],"mappings":";;;;;;;AAEA;AAMO,MAAMA,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,GAAG;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGH,MAAM;EAE3C,MAAMI,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,OAAOH,QAAQ,CAACI,oBAAoB,CAAC,YAAY;MAC7C,MAAMC,KAAK,GAAG,MAAMN,GAAG,CAACO,QAAQ,CAACL,SAAS,CAAC;MAE3C,IAAI,CAACI,KAAK,EAAE;QACR,MAAM,IAAIE,cAAW,CAChB,mBAAkBN,SAAU,UAAS,EACtC,uBAAuB,CAC1B;MACL;MAEA,MAAMO,MAAM,GAAG,MAAML,EAAE,CAACE,KAAK,CAAC;MAE9B,OAAOG,MAAM;IACjB,CAAC,CAAC;EACN,CAAC;EAED,OAAO;IACHN;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"file":"utils/createOperationsWrapper.js","sources":["../../src/utils/createOperationsWrapper.ts"],"sourcesContent":["import type { HeadlessCms } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { Security } from \"@webiny/api-core/types/security.js\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams {\n    cms: HeadlessCms;\n    security: Security;\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { security, cms, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        const model = await security.withoutAuthorization(() => {\n            return cms.getModel(modelName);\n        });\n\n        if (!model) {\n            throw new WebinyError(`Could not find \"${modelName}\" model.`, \"MODEL_NOT_FOUND_ERROR\");\n        }\n\n        return cb(model);\n    };\n\n    return { withModel };\n};\n"],"names":["createOperationsWrapper","params","security","cms","modelName","withModel","cb","model","WebinyError"],"mappings":";AAWO,MAAMA,0BAA0B,CAACC;IACpC,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAEC,SAAS,EAAE,GAAGH;IAErC,MAAMI,YAAY,OACdC;QAEA,MAAMC,QAAQ,MAAML,SAAS,oBAAoB,CAAC,IACvCC,IAAI,QAAQ,CAACC;QAGxB,IAAI,CAACG,OACD,MAAM,IAAIC,MAAY,CAAC,gBAAgB,EAAEJ,UAAU,QAAQ,CAAC,EAAE;QAGlE,OAAOE,GAAGC;IACd;IAEA,OAAO;QAAEF;IAAU;AACvB"}

package/utils/decorators/CmsEntriesCrudDecorators.d.ts

@@ -0,0 +1,11 @@
+import type { AcoContext } from "../../types.js";
+type Context = AcoContext;
+interface EntryManagerCrudDecoratorsParams {
+    context: Context;
+}
+export declare class CmsEntriesCrudDecorators {
+    private readonly context;
+    constructor({ context }: EntryManagerCrudDecoratorsParams);
+    decorate(): void;
+}
+export {};

package/utils/decorators/CmsEntriesCrudDecorators.js

@@ -0,0 +1,175 @@
+import { ROOT_FOLDER } from "../../constants.js";
+import { ListEntriesFactory } from "./ListEntriesFactory.js";
+import { FilterEntriesByFolderFactory } from "./FilterEntriesByFolderFactory.js";
+import { decorateIfModelAuthorizationEnabled } from "./decorateIfModelAuthorizationEnabled.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+class CmsEntriesCrudDecorators {
+    constructor({ context }){
+        this.context = context;
+    }
+    decorate() {
+        const context = this.context;
+        const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);
+        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);
+        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);
+        decorateIfModelAuthorizationEnabled(context, "listEntries", async (...allParams)=>{
+            const [decoratee, model, initialParams] = allParams;
+            return await listEntriesHandler.execute({
+                decoratee,
+                model,
+                initialParams
+            });
+        });
+        decorateIfModelAuthorizationEnabled(context, "listLatestEntries", async (...allParams)=>{
+            const [decoratee, model, initialParams] = allParams;
+            return await listEntriesHandler.execute({
+                decoratee,
+                model,
+                initialParams
+            });
+        });
+        decorateIfModelAuthorizationEnabled(context, "listPublishedEntries", async (...allParams)=>{
+            const [decoratee, model, initialParams] = allParams;
+            return await listEntriesHandler.execute({
+                decoratee,
+                model,
+                initialParams
+            });
+        });
+        decorateIfModelAuthorizationEnabled(context, "listDeletedEntries", async (...allParams)=>{
+            const [decoratee, model, initialParams] = allParams;
+            return await listEntriesHandler.execute({
+                decoratee,
+                model,
+                initialParams
+            });
+        });
+        decorateIfModelAuthorizationEnabled(context, "getEntry", async (...allParams)=>{
+            const [decoratee, model, params] = allParams;
+            const entry = await decoratee(model, params);
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return entry;
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "r"
+            });
+            return entry;
+        });
+        decorateIfModelAuthorizationEnabled(context, "getEntryById", async (...allParams)=>{
+            const [decoratee, model, params] = allParams;
+            const entry = await decoratee(model, params);
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return entry;
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "r"
+            });
+            return entry;
+        });
+        decorateIfModelAuthorizationEnabled(context, "getLatestEntriesByIds", async (...allParams)=>{
+            const [decoratee, model, ids] = allParams;
+            const entries = await decoratee(model, ids);
+            return filterEntriesByFolder.execute(entries);
+        });
+        decorateIfModelAuthorizationEnabled(context, "getPublishedEntriesByIds", async (...allParams)=>{
+            const [decoratee, model, ids] = allParams;
+            const entries = await decoratee(model, ids);
+            return filterEntriesByFolder.execute(entries);
+        });
+        decorateIfModelAuthorizationEnabled(context, "createEntry", async (...allParams)=>{
+            const [decoratee, model, params, options] = allParams;
+            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return decoratee(model, params, options);
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "w"
+            });
+            return decoratee(model, params, options);
+        });
+        decorateIfModelAuthorizationEnabled(context, "createEntryRevisionFrom", async (...allParams)=>{
+            const [decoratee, model, id, input, options] = allParams;
+            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+                id
+            });
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return decoratee(model, id, input, options);
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "w"
+            });
+            return decoratee(model, id, input, options);
+        });
+        decorateIfModelAuthorizationEnabled(context, "updateEntry", async (...allParams)=>{
+            const [decoratee, model, id, input, meta, options] = allParams;
+            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+                id
+            });
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return decoratee(model, id, input, meta, options);
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "w"
+            });
+            return decoratee(model, id, input, meta, options);
+        });
+        decorateIfModelAuthorizationEnabled(context, "deleteEntry", async (...allParams)=>{
+            const [decoratee, model, id, options] = allParams;
+            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(model, {
+                id
+            });
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return decoratee(model, id, options);
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "d"
+            });
+            return decoratee(model, id, options);
+        });
+        decorateIfModelAuthorizationEnabled(context, "deleteEntryRevision", async (...allParams)=>{
+            const [decoratee, model, id] = allParams;
+            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+                id
+            });
+            const folderId = entry?.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return decoratee(model, id);
+            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+            await folderLevelPermissions.ensureCanAccessFolderContent({
+                permissions,
+                rwd: "d"
+            });
+            return decoratee(model, id);
+        });
+        decorateIfModelAuthorizationEnabled(context, "moveEntry", async (...allParams)=>{
+            const [decoratee, model, id, targetFolderId] = allParams;
+            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
+                id
+            });
+            const folderId = entry?.location?.folderId || ROOT_FOLDER;
+            if (folderId === targetFolderId) return decoratee(model, id, targetFolderId);
+            if (folderId !== ROOT_FOLDER) {
+                const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+                await folderLevelPermissions.ensureCanAccessFolderContent({
+                    permissions,
+                    rwd: "w"
+                });
+            }
+            if (targetFolderId !== ROOT_FOLDER) {
+                const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
+                await folderLevelPermissions.ensureCanAccessFolderContent({
+                    permissions,
+                    rwd: "w"
+                });
+            }
+            return decoratee(model, id, targetFolderId);
+        });
+    }
+}
+export { CmsEntriesCrudDecorators };
+
+//# sourceMappingURL=CmsEntriesCrudDecorators.js.map

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/decorators/CmsEntriesCrudDecorators.js","sources":["../../../src/utils/decorators/CmsEntriesCrudDecorators.ts"],"sourcesContent":["// @ts-nocheck Being removed\nimport type { AcoContext } from \"~/types.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory.js\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory.js\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\ntype Context = AcoContext;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"listLatestEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"listDeletedEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"names":["CmsEntriesCrudDecorators","context","folderLevelPermissions","FolderLevelPermissions","filterEntriesByFolder","FilterEntriesByFolderFactory","listEntriesHandler","ListEntriesFactory","decorateIfModelAuthorizationEnabled","allParams","decoratee","model","initialParams","params","entry","folderId","ROOT_FOLDER","permissions","ids","entries","options","id","input","meta","targetFolderId"],"mappings":";;;;;AAcO,MAAMA;IAGT,YAAmB,EAAEC,OAAO,EAAoC,CAAE;QAC9D,IAAI,CAAC,OAAO,GAAGA;IACnB;IAEO,WAAW;QACd,MAAMA,UAAU,IAAI,CAAC,OAAO;QAC5B,MAAMC,yBAAyBD,QAAQ,SAAS,CAAC,OAAO,CAACE;QAEzD,MAAMC,wBAAwB,IAAIC,6BAA6BH;QAC/D,MAAMI,qBAAqB,IAAIC,mBAAmBL;QAElDM,oCAAoCP,SAAS,eAAe,OAAO,GAAGQ;YAClE,MAAM,CAACC,WAAWC,OAAOC,cAAc,GAAGH;YAC1C,OAAO,MAAMH,mBAAmB,OAAO,CAAC;gBAAEI;gBAAWC;gBAAOC;YAAc;QAC9E;QAEAJ,oCAAoCP,SAAS,qBAAqB,OAAO,GAAGQ;YACxE,MAAM,CAACC,WAAWC,OAAOC,cAAc,GAAGH;YAC1C,OAAO,MAAMH,mBAAmB,OAAO,CAAC;gBAAEI;gBAAWC;gBAAOC;YAAc;QAC9E;QAEAJ,oCACIP,SACA,wBACA,OAAO,GAAGQ;YACN,MAAM,CAACC,WAAWC,OAAOC,cAAc,GAAGH;YAC1C,OAAO,MAAMH,mBAAmB,OAAO,CAAC;gBAAEI;gBAAWC;gBAAOC;YAAc;QAC9E;QAGJJ,oCAAoCP,SAAS,sBAAsB,OAAO,GAAGQ;YACzE,MAAM,CAACC,WAAWC,OAAOC,cAAc,GAAGH;YAC1C,OAAO,MAAMH,mBAAmB,OAAO,CAAC;gBAAEI;gBAAWC;gBAAOC;YAAc;QAC9E;QAEAJ,oCAAoCP,SAAS,YAAY,OAAO,GAAGQ;YAC/D,MAAM,CAACC,WAAWC,OAAOE,OAAO,GAAGJ;YACnC,MAAMK,QAAQ,MAAMJ,UAAUC,OAAOE;YAErC,MAAME,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAOF;YAGX,MAAMG,cAAc,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3E,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOH;QACX;QAEAN,oCAAoCP,SAAS,gBAAgB,OAAO,GAAGQ;YACnE,MAAM,CAACC,WAAWC,OAAOE,OAAO,GAAGJ;YACnC,MAAMK,QAAQ,MAAMJ,UAAUC,OAAOE;YAErC,MAAME,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAOF;YAEX,MAAMG,cAAc,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3E,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YACA,OAAOH;QACX;QAEAN,oCACIP,SACA,yBACA,OAAO,GAAGQ;YACN,MAAM,CAACC,WAAWC,OAAOO,IAAI,GAAGT;YAEhC,MAAMU,UAAU,MAAMT,UAAUC,OAAOO;YAEvC,OAAOd,sBAAsB,OAAO,CAACe;QACzC;QAGJX,oCACIP,SACA,4BACA,OAAO,GAAGQ;YACN,MAAM,CAACC,WAAWC,OAAOO,IAAI,GAAGT;YAEhC,MAAMU,UAAU,MAAMT,UAAUC,OAAOO;YACvC,OAAOd,sBAAsB,OAAO,CAACe;QACzC;QAGJX,oCAAoCP,SAAS,eAAe,OAAO,GAAGQ;YAClE,MAAM,CAACC,WAAWC,OAAOE,QAAQO,QAAQ,GAAGX;YAC5C,MAAMM,WAAWF,OAAO,eAAe,EAAE,YAAYA,OAAO,QAAQ,EAAE;YAEtE,IAAI,CAACE,YAAYA,aAAaC,aAC1B,OAAON,UAAUC,OAAOE,QAAQO;YAGpC,MAAMH,cAAc,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3E,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOP,UAAUC,OAAOE,QAAQO;QACpC;QAEAZ,oCACIP,SACA,2BACA,OAAO,GAAGQ;YACN,MAAM,CAACC,WAAWC,OAAOU,IAAIC,OAAOF,QAAQ,GAAGX;YAE/C,MAAMK,QAAQ,MAAMb,QAAQ,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAACU,OAAO;gBAC7EU;YACJ;YAEA,MAAMN,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAON,UAAUC,OAAOU,IAAIC,OAAOF;YAGvC,MAAMH,cACF,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3D,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOP,UAAUC,OAAOU,IAAIC,OAAOF;QACvC;QAGJZ,oCAAoCP,SAAS,eAAe,OAAO,GAAGQ;YAClE,MAAM,CAACC,WAAWC,OAAOU,IAAIC,OAAOC,MAAMH,QAAQ,GAAGX;YACrD,MAAMK,QAAQ,MAAMb,QAAQ,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAACU,OAAO;gBAC7EU;YACJ;YAEA,MAAMN,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAON,UAAUC,OAAOU,IAAIC,OAAOC,MAAMH;YAG7C,MAAMH,cAAc,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3E,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOP,UAAUC,OAAOU,IAAIC,OAAOC,MAAMH;QAC7C;QAEAZ,oCAAoCP,SAAS,eAAe,OAAO,GAAGQ;YAClE,MAAM,CAACC,WAAWC,OAAOU,IAAID,QAAQ,GAAGX;YAExC,MAAMK,QAAQ,MAAMb,QAAQ,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,0BAA0B,CAChFU,OACA;gBACIU;YACJ;YAGJ,MAAMN,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAON,UAAUC,OAAOU,IAAID;YAGhC,MAAMH,cAAc,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3E,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOP,UAAUC,OAAOU,IAAID;QAChC;QAEAZ,oCACIP,SACA,uBACA,OAAO,GAAGQ;YACN,MAAM,CAACC,WAAWC,OAAOU,GAAG,GAAGZ;YAE/B,MAAMK,QAAQ,MAAMb,QAAQ,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAACU,OAAO;gBAC7EU;YACJ;YAEA,MAAMN,WAAWD,OAAO,UAAU;YAClC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAON,UAAUC,OAAOU;YAG5B,MAAMJ,cACF,MAAMf,uBAAuB,yBAAyB,CAACa;YAC3D,MAAMb,uBAAuB,4BAA4B,CAAC;gBACtDe;gBACA,KAAK;YACT;YAEA,OAAOP,UAAUC,OAAOU;QAC5B;QAGJb,oCAAoCP,SAAS,aAAa,OAAO,GAAGQ;YAChE,MAAM,CAACC,WAAWC,OAAOU,IAAIG,eAAe,GAAGf;YAK/C,MAAMK,QAAQ,MAAMb,QAAQ,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAACU,OAAO;gBAC7EU;YACJ;YAEA,MAAMN,WAAWD,OAAO,UAAU,YAAYE;YAI9C,IAAID,aAAaS,gBACb,OAAOd,UAAUC,OAAOU,IAAIG;YACzB,IAAIT,aAAaC,aAAa;gBAIjC,MAAMC,cACF,MAAMf,uBAAuB,yBAAyB,CAACa;gBAC3D,MAAMb,uBAAuB,4BAA4B,CAAC;oBACtDe;oBACA,KAAK;gBACT;YACJ;YAIA,IAAIO,mBAAmBR,aAAa;gBAChC,MAAMC,cACF,MAAMf,uBAAuB,yBAAyB,CAACa;gBAC3D,MAAMb,uBAAuB,4BAA4B,CAAC;oBACtDe;oBACA,KAAK;gBACT;YACJ;YAEA,OAAOP,UAAUC,OAAOU,IAAIG;QAChC;IACJ;AACJ"}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,22 @@
+import { ROOT_FOLDER } from "../../constants.js";
+class FilterEntriesByFolderFactory {
+    constructor(folderLevelPermissions){
+        this.folderLevelPermissions = folderLevelPermissions;
+    }
+    async execute(entries) {
+        const results = await Promise.all(entries.map(async (entry)=>{
+            const folderId = entry.location?.folderId;
+            if (!folderId || folderId === ROOT_FOLDER) return entry;
+            const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+            const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+                permissions,
+                rwd: "r"
+            });
+            return canAccessFolderContent ? entry : null;
+        }));
+        return results.filter((entry)=>!!entry);
+    }
+}
+export { FilterEntriesByFolderFactory };
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/decorators/FilterEntriesByFolderFactory.js","sources":["../../../src/utils/decorators/FilterEntriesByFolderFactory.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions.Interface;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions.Interface) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions =\n                    await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"names":["FilterEntriesByFolderFactory","folderLevelPermissions","entries","results","Promise","entry","folderId","ROOT_FOLDER","permissions","canAccessFolderContent"],"mappings":";AAIO,MAAMA;IAGT,YAAYC,sBAAwD,CAAE;QAClE,IAAI,CAAC,sBAAsB,GAAGA;IAClC;IAEA,MAAa,QAAQC,OAAmB,EAAuB;QAC3D,MAAMC,UAAU,MAAMC,QAAQ,GAAG,CAC7BF,QAAQ,GAAG,CAAC,OAAMG;YACd,MAAMC,WAAWD,MAAM,QAAQ,EAAE;YACjC,IAAI,CAACC,YAAYA,aAAaC,aAC1B,OAAOF;YAGX,MAAMG,cACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,CAACF;YAChE,MAAMG,yBACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,sBAAsB,CAAC;gBACrDD;gBACA,KAAK;YACT;YACJ,OAAOC,yBAAyBJ,QAAQ;QAC5C;QAGJ,OAAOF,QAAQ,MAAM,CAAC,CAACE,QAA6B,CAAC,CAACA;IAC1D;AACJ"}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,17 @@
+import type { CmsEntryListParams, CmsEntryValues } from "@webiny/api-headless-cms/types/index.js";
+import { type CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import type { IListEntriesResult } from "@webiny/api-headless-cms/features/contentEntry/ListEntries/abstractions.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+interface ListEntriesFactoryCallbackParams<T extends CmsEntryValues> {
+    model: CmsModel;
+    dataLoader: (params?: CmsEntryListParams) => Promise<IListEntriesResult<T>>;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute<T extends CmsEntryValues = CmsEntryValues>({ model, dataLoader, initialParams }: ListEntriesFactoryCallbackParams<T>): Promise<IListEntriesResult<T>>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,73 @@
+import { hasRootFolderId } from "./hasRootFolderId.js";
+class ListEntriesFactory {
+    constructor(folderLevelPermissions){
+        this.folderLevelPermissions = folderLevelPermissions;
+        this.permissionsCache = new Map();
+    }
+    async execute({ model, dataLoader, initialParams = {} }) {
+        const limit = initialParams?.limit || 50;
+        const where = initialParams?.where;
+        const params = {
+            ...initialParams,
+            limit
+        };
+        const hasRootFolder = hasRootFolderId({
+            model,
+            where
+        });
+        if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) return dataLoader(params);
+        const resultEntries = [];
+        let totalCount = 0;
+        let hasMoreItems = true;
+        let cursor = null;
+        let fetchedAll = false;
+        let afterCursor = params.after;
+        while(!fetchedAll){
+            const queryParams = {
+                ...params,
+                after: afterCursor
+            };
+            const { entries, meta } = await dataLoader(queryParams);
+            if (0 === totalCount) totalCount = meta.totalCount;
+            for (const entry of entries){
+                const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+                if (!folderId) {
+                    resultEntries.push(entry);
+                    continue;
+                }
+                const permissions = await this.getPermissions(folderId);
+                if (!permissions.length) {
+                    resultEntries.push(entry);
+                    continue;
+                }
+                if (await this.folderLevelPermissions.canAccessFolderContent({
+                    permissions,
+                    rwd: "r"
+                })) resultEntries.push(entry);
+                else totalCount--;
+            }
+            if (!meta.hasMoreItems || resultEntries.length >= limit) {
+                fetchedAll = true;
+                hasMoreItems = meta.hasMoreItems;
+                cursor = meta.cursor;
+            } else afterCursor = meta.cursor;
+        }
+        return {
+            entries: resultEntries,
+            meta: {
+                totalCount,
+                hasMoreItems,
+                cursor
+            }
+        };
+    }
+    async getPermissions(folderId) {
+        if (this.permissionsCache.has(folderId)) return this.permissionsCache.get(folderId) ?? [];
+        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+        this.permissionsCache.set(folderId, permissions);
+        return permissions;
+    }
+}
+export { ListEntriesFactory };
+
+//# sourceMappingURL=ListEntriesFactory.js.map

package/utils/decorators/ListEntriesFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/decorators/ListEntriesFactory.js","sources":["../../../src/utils/decorators/ListEntriesFactory.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryListParams,\n    CmsEntryValues\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport { type CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { IListEntriesResult } from \"@webiny/api-headless-cms/features/contentEntry/ListEntries/abstractions.js\";\nimport { hasRootFolderId } from \"~/utils/decorators/hasRootFolderId.js\";\nimport type { FolderPermission } from \"~/flp/flp.types.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\ninterface ListEntriesFactoryCallbackParams<T extends CmsEntryValues> {\n    model: CmsModel;\n    dataLoader: (params?: CmsEntryListParams) => Promise<IListEntriesResult<T>>;\n    initialParams?: CmsEntryListParams;\n}\n\nexport class ListEntriesFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions.Interface;\n    private readonly permissionsCache: Map<string, FolderPermission[]>;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions.Interface) {\n        this.folderLevelPermissions = folderLevelPermissions;\n        this.permissionsCache = new Map();\n    }\n\n    public async execute<T extends CmsEntryValues = CmsEntryValues>({\n        model,\n        dataLoader,\n        initialParams = {}\n    }: ListEntriesFactoryCallbackParams<T>): Promise<IListEntriesResult<T>> {\n        const limit = initialParams?.limit || 50;\n        const where = initialParams?.where;\n        const params = { ...initialParams, limit };\n        const hasRootFolder = hasRootFolderId({ model, where });\n\n        // If FLP should be skipped, or we're querying the root folder, skip permission checks\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) {\n            return dataLoader(params);\n        }\n\n        const resultEntries: CmsEntry<T>[] = [];\n        let totalCount = 0;\n        let hasMoreItems = true;\n        let cursor: string | null = null;\n        let fetchedAll = false;\n        let afterCursor = params.after;\n\n        // Process entries in batches until we have enough results or reach the end\n        while (!fetchedAll) {\n            const queryParams: CmsEntryListParams = { ...params, after: afterCursor };\n            const { entries, meta } = await dataLoader(queryParams);\n\n            if (totalCount === 0) {\n                totalCount = meta.totalCount;\n            }\n\n            // Process each entry and check folder permissions\n            for (const entry of entries) {\n                const folderId = entry.values?.location?.folderId || entry.location?.folderId;\n\n                // If entry has no folderId, it's not using ACO folders system\n                // Include it in results as it's not subject to folder permissions\n                if (!folderId) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                const permissions = await this.getPermissions(folderId);\n\n                // If no FLP exists for the folder, the entry is accessible\n                // This means the folder doesn't have any permission restrictions\n                if (!permissions.length) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                // Check if user has read permission for the folder\n                if (\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    })\n                ) {\n                    resultEntries.push(entry);\n                } else {\n                    totalCount--;\n                }\n            }\n\n            // Determine if we need to fetch more entries\n            if (!meta.hasMoreItems || resultEntries.length >= limit) {\n                fetchedAll = true;\n                hasMoreItems = meta.hasMoreItems;\n                cursor = meta.cursor;\n            } else {\n                afterCursor = meta.cursor;\n            }\n        }\n\n        return { entries: resultEntries, meta: { totalCount, hasMoreItems, cursor } };\n    }\n\n    private async getPermissions(folderId: string): Promise<FolderPermission[]> {\n        if (this.permissionsCache.has(folderId)) {\n            return this.permissionsCache.get(folderId) ?? [];\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        this.permissionsCache.set(folderId, permissions);\n        return permissions;\n    }\n}\n"],"names":["ListEntriesFactory","folderLevelPermissions","Map","model","dataLoader","initialParams","limit","where","params","hasRootFolder","hasRootFolderId","resultEntries","totalCount","hasMoreItems","cursor","fetchedAll","afterCursor","queryParams","entries","meta","entry","folderId","permissions"],"mappings":";AAiBO,MAAMA;IAIT,YAAYC,sBAAwD,CAAE;QAClE,IAAI,CAAC,sBAAsB,GAAGA;QAC9B,IAAI,CAAC,gBAAgB,GAAG,IAAIC;IAChC;IAEA,MAAa,QAAmD,EAC5DC,KAAK,EACLC,UAAU,EACVC,gBAAgB,CAAC,CAAC,EACgB,EAAkC;QACpE,MAAMC,QAAQD,eAAe,SAAS;QACtC,MAAME,QAAQF,eAAe;QAC7B,MAAMG,SAAS;YAAE,GAAGH,aAAa;YAAEC;QAAM;QACzC,MAAMG,gBAAgBC,gBAAgB;YAAEP;YAAOI;QAAM;QAGrD,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,4BAA4B,MAAME,eAC/D,OAAOL,WAAWI;QAGtB,MAAMG,gBAA+B,EAAE;QACvC,IAAIC,aAAa;QACjB,IAAIC,eAAe;QACnB,IAAIC,SAAwB;QAC5B,IAAIC,aAAa;QACjB,IAAIC,cAAcR,OAAO,KAAK;QAG9B,MAAO,CAACO,WAAY;YAChB,MAAME,cAAkC;gBAAE,GAAGT,MAAM;gBAAE,OAAOQ;YAAY;YACxE,MAAM,EAAEE,OAAO,EAAEC,IAAI,EAAE,GAAG,MAAMf,WAAWa;YAE3C,IAAIL,AAAe,MAAfA,YACAA,aAAaO,KAAK,UAAU;YAIhC,KAAK,MAAMC,SAASF,QAAS;gBACzB,MAAMG,WAAWD,MAAM,MAAM,EAAE,UAAU,YAAYA,MAAM,QAAQ,EAAE;gBAIrE,IAAI,CAACC,UAAU;oBACXV,cAAc,IAAI,CAACS;oBACnB;gBACJ;gBAEA,MAAME,cAAc,MAAM,IAAI,CAAC,cAAc,CAACD;gBAI9C,IAAI,CAACC,YAAY,MAAM,EAAE;oBACrBX,cAAc,IAAI,CAACS;oBACnB;gBACJ;gBAGA,IACI,MAAM,IAAI,CAAC,sBAAsB,CAAC,sBAAsB,CAAC;oBACrDE;oBACA,KAAK;gBACT,IAEAX,cAAc,IAAI,CAACS;qBAEnBR;YAER;YAGA,IAAI,CAACO,KAAK,YAAY,IAAIR,cAAc,MAAM,IAAIL,OAAO;gBACrDS,aAAa;gBACbF,eAAeM,KAAK,YAAY;gBAChCL,SAASK,KAAK,MAAM;YACxB,OACIH,cAAcG,KAAK,MAAM;QAEjC;QAEA,OAAO;YAAE,SAASR;YAAe,MAAM;gBAAEC;gBAAYC;gBAAcC;YAAO;QAAE;IAChF;IAEA,MAAc,eAAeO,QAAgB,EAA+B;QACxE,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAACA,WAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAACA,aAAa,EAAE;QAGpD,MAAMC,cAAc,MAAM,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,CAACD;QAChF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAACA,UAAUC;QACpC,OAAOA;IACX;AACJ"}

package/utils/decorators/hasRootFolderId.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntryListWhere, CmsModel } from "@webiny/api-headless-cms/types/index.js";
+interface Params {
+    model: CmsModel;
+    where: CmsEntryListWhere | undefined;
+}
+export declare const hasRootFolderId: ({ model, where }: Params) => boolean;
+export {};

package/utils/decorators/hasRootFolderId.js

@@ -0,0 +1,13 @@
+import isPlainObject from "lodash/isPlainObject.js";
+import { isPageModel } from "./isPageModel.js";
+import { ROOT_FOLDER } from "../../constants.js";
+const hasRootFolderId = ({ model, where })=>{
+    if (!where) return false;
+    const key = isPageModel(model) ? "location" : "wbyAco_location";
+    const location = where[key];
+    if ("object" == typeof location && null !== location && isPlainObject(location)) return location.folderId === ROOT_FOLDER;
+    return false;
+};
+export { hasRootFolderId };
+
+//# sourceMappingURL=hasRootFolderId.js.map

package/utils/decorators/hasRootFolderId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/decorators/hasRootFolderId.js","sources":["../../../src/utils/decorators/hasRootFolderId.ts"],"sourcesContent":["import isPlainObject from \"lodash/isPlainObject.js\";\nimport { isPageModel } from \"~/utils/decorators/isPageModel.js\";\nimport type { CmsEntryListWhere, CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\n\ninterface Params {\n    model: CmsModel;\n    where: CmsEntryListWhere | undefined;\n}\n\nexport const hasRootFolderId = ({ model, where }: Params): boolean => {\n    if (!where) {\n        return false;\n    }\n\n    const key = isPageModel(model) ? \"location\" : \"wbyAco_location\";\n    const location = where[key];\n\n    if (typeof location === \"object\" && location !== null && isPlainObject(location)) {\n        return (location as Record<string, any>).folderId === ROOT_FOLDER;\n    }\n\n    return false;\n};\n"],"names":["hasRootFolderId","model","where","key","isPageModel","location","isPlainObject","ROOT_FOLDER"],"mappings":";;;AAUO,MAAMA,kBAAkB,CAAC,EAAEC,KAAK,EAAEC,KAAK,EAAU;IACpD,IAAI,CAACA,OACD,OAAO;IAGX,MAAMC,MAAMC,YAAYH,SAAS,aAAa;IAC9C,MAAMI,WAAWH,KAAK,CAACC,IAAI;IAE3B,IAAI,AAAoB,YAApB,OAAOE,YAAyBA,AAAa,SAAbA,YAAqBC,cAAcD,WACnE,OAAQA,SAAiC,QAAQ,KAAKE;IAG1D,OAAO;AACX"}

package/utils/decorators/isPageModel.d.ts

@@ -0,0 +1,5 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+export declare const isPageModel: (model: CmsModel) => boolean;

package/utils/decorators/isPageModel.js

@@ -0,0 +1,8 @@
+const isPageModel = (model)=>{
+    if ("pbPage" === model.modelId) return true;
+    if ("acoSearchRecord-pbpage" === model.modelId) return true;
+    return false;
+};
+export { isPageModel };
+
+//# sourceMappingURL=isPageModel.js.map

package/utils/decorators/isPageModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/decorators/isPageModel.js","sources":["../../../src/utils/decorators/isPageModel.ts"],"sourcesContent":["import type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\n\n/**\n * Keep this until we figure out how to fetch the folders.\n */\nexport const isPageModel = (model: CmsModel): boolean => {\n    if (model.modelId === \"pbPage\") {\n        return true;\n    } else if (model.modelId === \"acoSearchRecord-pbpage\") {\n        return true;\n    }\n    return false;\n};\n"],"names":["isPageModel","model"],"mappings":"AAKO,MAAMA,cAAc,CAACC;IACxB,IAAIA,AAAkB,aAAlBA,MAAM,OAAO,EACb,OAAO;IACJ,IAAIA,AAAkB,6BAAlBA,MAAM,OAAO,EACpB,OAAO;IAEX,OAAO;AACX"}

package/utils/ensureAuthentication.d.ts

@@ -0,0 +1,2 @@
+import type { ApiCoreContext } from "@webiny/api-core/types/core.js";
+export declare const ensureAuthentication: (context: ApiCoreContext) => void;

package/utils/ensureAuthentication.js

@@ -0,0 +1,11 @@
+import { NotAuthorizedError } from "@webiny/api-core/features/security/shared/errors.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+const ensureAuthentication = (context)=>{
+    const identityContext = context.container.resolve(IdentityContext);
+    const identity = identityContext.getIdentity();
+    if (!identity.isAnonymous()) return;
+    throw new NotAuthorizedError();
+};
+export { ensureAuthentication };
+
+//# sourceMappingURL=ensureAuthentication.js.map

package/utils/ensureAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/ensureAuthentication.js","sources":["../../src/utils/ensureAuthentication.ts"],"sourcesContent":["import { NotAuthorizedError } from \"@webiny/api-core/features/security/shared/errors.js\";\nimport type { ApiCoreContext } from \"@webiny/api-core/types/core.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\n\nexport const ensureAuthentication = (context: ApiCoreContext) => {\n    const identityContext = context.container.resolve(IdentityContext);\n    const identity = identityContext.getIdentity();\n\n    if (!identity.isAnonymous()) {\n        return;\n    }\n    throw new NotAuthorizedError();\n};\n"],"names":["ensureAuthentication","context","identityContext","IdentityContext","identity","NotAuthorizedError"],"mappings":";;AAIO,MAAMA,uBAAuB,CAACC;IACjC,MAAMC,kBAAkBD,QAAQ,SAAS,CAAC,OAAO,CAACE;IAClD,MAAMC,WAAWF,gBAAgB,WAAW;IAE5C,IAAI,CAACE,SAAS,WAAW,IACrB;IAEJ,MAAM,IAAIC;AACd"}

package/utils/pickEntryFieldValues.d.ts

@@ -0,0 +1,3 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+export declare const baseFields: string[];
+export declare function pickEntryFieldValues<T>(entry: CmsEntry): T;

package/utils/pickEntryFieldValues.js

@@ -0,0 +1,29 @@
+const baseFields = [
+    "id",
+    "tenant",
+    "createdOn",
+    "modifiedOn",
+    "savedOn",
+    "createdBy",
+    "modifiedBy",
+    "savedBy"
+];
+const pickBaseEntryFieldValues = (entry)=>{
+    const pickedValues = {};
+    for (const fieldName of baseFields){
+        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(":");
+        if (srcFieldName in entry) Object.assign(pickedValues, {
+            [targetFieldName]: entry[srcFieldName]
+        });
+    }
+    return pickedValues;
+};
+function pickEntryFieldValues(entry) {
+    return {
+        ...pickBaseEntryFieldValues(entry),
+        ...entry.values
+    };
+}
+export { baseFields, pickEntryFieldValues };
+
+//# sourceMappingURL=pickEntryFieldValues.js.map

package/utils/pickEntryFieldValues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils/pickEntryFieldValues.js","sources":["../../src/utils/pickEntryFieldValues.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport const baseFields = [\n    // Entry ID is mapped to \"id\" (we don't use revisions with ACO entities).\n    \"id\",\n    \"tenant\",\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\"\n];\n\nconst pickBaseEntryFieldValues = (entry: CmsEntry) => {\n    const pickedValues: Partial<CmsEntry> = {};\n    for (const fieldName of baseFields) {\n        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(\":\");\n        if (srcFieldName in entry) {\n            Object.assign(pickedValues, {\n                [targetFieldName]: entry[srcFieldName as keyof CmsEntry]\n            });\n        }\n    }\n\n    return pickedValues;\n};\n\nexport function pickEntryFieldValues<T>(entry: CmsEntry): T {\n    return {\n        ...pickBaseEntryFieldValues(entry),\n        ...entry.values\n    } as T;\n}\n"],"names":["baseFields","pickBaseEntryFieldValues","entry","pickedValues","fieldName","srcFieldName","targetFieldName","Object","pickEntryFieldValues"],"mappings":"AAEO,MAAMA,aAAa;IAEtB;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACH;AAED,MAAMC,2BAA2B,CAACC;IAC9B,MAAMC,eAAkC,CAAC;IACzC,KAAK,MAAMC,aAAaJ,WAAY;QAChC,MAAM,CAACK,cAAcC,kBAAkBD,YAAY,CAAC,GAAGD,UAAU,KAAK,CAAC;QACvE,IAAIC,gBAAgBH,OAChBK,OAAO,MAAM,CAACJ,cAAc;YACxB,CAACG,gBAAgB,EAAEJ,KAAK,CAACG,aAA+B;QAC5D;IAER;IAEA,OAAOF;AACX;AAEO,SAASK,qBAAwBN,KAAe;IACnD,OAAO;QACH,GAAGD,yBAAyBC,MAAM;QAClC,GAAGA,MAAM,MAAM;IACnB;AACJ"}

package/utils/resolve.d.ts

@@ -1,2 +1,2 @@
-import { Response, ErrorResponse } from "@webiny/handler-graphql";
-export declare const resolve: (fn: () => Promise<any>) => Promise<Response<any> | ErrorResponse>;
+import { ErrorResponse, Response } from "@webiny/handler-graphql";
+export declare const resolve: (fn: () => Promise<any>) => Promise<ErrorResponse | Response<any>>;

package/utils/resolve.js

@@ -1,15 +1,11 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.resolve = void 0;
-var _handlerGraphql = require("@webiny/handler-graphql");
-const resolve = async fn => {
-  try {
-    return new _handlerGraphql.Response(await fn());
-  } catch (e) {
-    return new _handlerGraphql.ErrorResponse(e);
-  }
+import { ErrorResponse, Response } from "@webiny/handler-graphql";
+const resolve = async (fn)=>{
+    try {
+        return new Response(await fn());
+    } catch (e) {
+        return new ErrorResponse(e);
+    }
 };
-exports.resolve = resolve;
+export { resolve };
+
+//# sourceMappingURL=resolve.js.map

package/utils/resolve.js.map

@@ -1 +1 @@
-{"version":3,"names":["resolve","fn","Response","e","ErrorResponse"],"sources":["resolve.ts"],"sourcesContent":["import { Response, ErrorResponse } from \"@webiny/handler-graphql\";\n\nexport const resolve = async (fn: () => Promise<any>) => {\n    try {\n        return new Response(await fn());\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\n"],"mappings":";;;;;;AAAA;AAEO,MAAMA,OAAO,GAAG,MAAOC,EAAsB,IAAK;EACrD,IAAI;IACA,OAAO,IAAIC,wBAAQ,CAAC,MAAMD,EAAE,EAAE,CAAC;EACnC,CAAC,CAAC,OAAOE,CAAC,EAAE;IACR,OAAO,IAAIC,6BAAa,CAACD,CAAC,CAAC;EAC/B;AACJ,CAAC;AAAC"}
+{"version":3,"file":"utils/resolve.js","sources":["../../src/utils/resolve.ts"],"sourcesContent":["import { ErrorResponse, Response } from \"@webiny/handler-graphql\";\n\nexport const resolve = async (fn: () => Promise<any>) => {\n    try {\n        return new Response(await fn());\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\n"],"names":["resolve","fn","Response","e","ErrorResponse"],"mappings":";AAEO,MAAMA,UAAU,OAAOC;IAC1B,IAAI;QACA,OAAO,IAAIC,SAAS,MAAMD;IAC9B,EAAE,OAAOE,GAAG;QACR,OAAO,IAAIC,cAAcD;IAC7B;AACJ"}

package/context/folders.d.ts

@@ -1,2 +0,0 @@
-import { FoldersConfig, IFolders } from "../types";
-export declare const createFoldersContext: ({ getTenantId, getLocaleCode, getIdentity, storageOperations }: FoldersConfig) => Promise<IFolders>;