@webiny/api-aco 0.0.0-unstable.bca7b3e350 → 0.0.0-unstable.c27f4d8a31

package/domain/folder/errors.js

@@ -0,0 +1,56 @@
+import { BaseError } from "@webiny/feature/api";
+export class FolderNotFoundError extends BaseError {
+  code = "Aco/Folder/NotFound";
+  constructor(id) {
+    super({
+      message: "Folder not found!",
+      data: {
+        folder: {
+          id
+        }
+      }
+    });
+  }
+}
+export class FolderNotAuthorizedError extends BaseError {
+  code = "Aco/Folder/NotAuthorizedError";
+  constructor() {
+    super({
+      message: `Not authorized.`
+    });
+  }
+}
+export class FolderPersistenceError extends BaseError {
+  code = "Aco/Folder/PersistenceError";
+  constructor(error) {
+    super({
+      message: error.message
+    });
+  }
+}
+export class FolderValidationError extends BaseError {
+  code = "Aco/Folder/ValidationError";
+  constructor(message) {
+    super({
+      message
+    });
+  }
+}
+export class FolderCannotMoveToNewParent extends BaseError {
+  code = "Aco/Folder/CannotMoveToNewParent";
+  constructor() {
+    super({
+      message: `Cannot move folder to a new parent because you don't have access to the new parent.`
+    });
+  }
+}
+export class FolderNotEmptyError extends BaseError {
+  code = "Aco/Folder/NotEmpty";
+  constructor() {
+    super({
+      message: `Folder is not empty.`
+    });
+  }
+}
+
+//# sourceMappingURL=errors.js.map

package/domain/folder/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BaseError","FolderNotFoundError","code","constructor","id","message","data","folder","FolderNotAuthorizedError","FolderPersistenceError","error","FolderValidationError","FolderCannotMoveToNewParent","FolderNotEmptyError"],"sources":["errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class FolderNotFoundError extends BaseError<{ folder: { id: string } }> {\n    override readonly code = \"Aco/Folder/NotFound\" as const;\n\n    constructor(id: string) {\n        super({\n            message: \"Folder not found!\",\n            data: {\n                folder: {\n                    id\n                }\n            }\n        });\n    }\n}\n\nexport class FolderNotAuthorizedError extends BaseError {\n    override readonly code = \"Aco/Folder/NotAuthorizedError\" as const;\n\n    constructor() {\n        super({\n            message: `Not authorized.`\n        });\n    }\n}\n\nexport class FolderPersistenceError extends BaseError {\n    override readonly code = \"Aco/Folder/PersistenceError\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class FolderValidationError extends BaseError {\n    override readonly code = \"Aco/Folder/ValidationError\" as const;\n\n    constructor(message: string) {\n        super({\n            message\n        });\n    }\n}\n\nexport class FolderCannotMoveToNewParent extends BaseError {\n    override readonly code = \"Aco/Folder/CannotMoveToNewParent\" as const;\n\n    constructor() {\n        super({\n            message: `Cannot move folder to a new parent because you don't have access to the new parent.`\n        });\n    }\n}\n\nexport class FolderNotEmptyError extends BaseError {\n    override readonly code = \"Aco/Folder/NotEmpty\" as const;\n\n    constructor() {\n        super({\n            message: `Folder is not empty.`\n        });\n    }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ,qBAAqB;AAE/C,OAAO,MAAMC,mBAAmB,SAASD,SAAS,CAA6B;EACzDE,IAAI,GAAG,qBAAqB;EAE9CC,WAAWA,CAACC,EAAU,EAAE;IACpB,KAAK,CAAC;MACFC,OAAO,EAAE,mBAAmB;MAC5BC,IAAI,EAAE;QACFC,MAAM,EAAE;UACJH;QACJ;MACJ;IACJ,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMI,wBAAwB,SAASR,SAAS,CAAC;EAClCE,IAAI,GAAG,+BAA+B;EAExDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMI,sBAAsB,SAAST,SAAS,CAAC;EAChCE,IAAI,GAAG,6BAA6B;EAEtDC,WAAWA,CAACO,KAAY,EAAE;IACtB,KAAK,CAAC;MACFL,OAAO,EAAEK,KAAK,CAACL;IACnB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMM,qBAAqB,SAASX,SAAS,CAAC;EAC/BE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAACE,OAAe,EAAE;IACzB,KAAK,CAAC;MACFA;IACJ,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMO,2BAA2B,SAASZ,SAAS,CAAC;EACrCE,IAAI,GAAG,kCAAkC;EAE3DC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMQ,mBAAmB,SAASb,SAAS,CAAC;EAC7BE,IAAI,GAAG,qBAAqB;EAE9CC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/domain/folder/folder.model.d.ts

@@ -0,0 +1,9 @@
+import { ModelFactory } from "@webiny/api-headless-cms/features/modelBuilder/index.js";
+export declare const FOLDER_MODEL_ID: string;
+declare class FolderPrivateModelImpl implements ModelFactory.Interface {
+    execute(builder: ModelFactory.Builder): Promise<import("@webiny/api-headless-cms/features/modelBuilder/index.js").PrivateModelBuilder[]>;
+}
+export declare const FolderModel: typeof FolderPrivateModelImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-headless-cms/features/modelBuilder/abstractions").IModelFactory>;
+};
+export {};

package/domain/folder/folder.model.js

@@ -0,0 +1,42 @@
+import { ModelFactory } from "@webiny/api-headless-cms/features/modelBuilder/index.js";
+export const FOLDER_MODEL_ID = process.env.WEBINY_API_LEGACY_MODELS ? "acoFolder" : "wbyAcoFolder";
+class FolderPrivateModelImpl {
+  async execute(builder) {
+    return [builder.private({
+      modelId: FOLDER_MODEL_ID,
+      name: "ACO - Folder"
+    }).fields(fields => ({
+      title: fields.text().label("Title").required("Value is required."),
+      slug: fields.text().label("Slug").required("Value is required.").pattern("^[a-z0-9]+(-[a-z0-9]+)*$", "g", "Value must consist of only 'a-z', '0-9' and '-'."),
+      type: fields.text().label("Type").required("Value is required."),
+      parentId: fields.text().label("Parent Id"),
+      path: fields.text().label("Path"),
+      permissions: fields.object().label("Permissions").list().fields(fields => ({
+        target: fields.text().label("Target").required("Value is required."),
+        level: fields.text().label("Level").required("Value is required.").predefinedValues([{
+          label: "Viewer",
+          value: "viewer"
+        }, {
+          label: "Editor",
+          value: "editor"
+        }, {
+          label: "Owner",
+          value: "owner"
+        }, {
+          label: "Public",
+          value: "public"
+        }, {
+          label: "No Access",
+          value: "no-access"
+        }])
+      })).layout([["target"], ["level"]]),
+      extensions: fields.object().label("Extensions")
+    }))];
+  }
+}
+export const FolderModel = ModelFactory.createImplementation({
+  implementation: FolderPrivateModelImpl,
+  dependencies: []
+});
+
+//# sourceMappingURL=folder.model.js.map

package/domain/folder/folder.model.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ModelFactory","FOLDER_MODEL_ID","process","env","WEBINY_API_LEGACY_MODELS","FolderPrivateModelImpl","execute","builder","private","modelId","name","fields","title","text","label","required","slug","pattern","type","parentId","path","permissions","object","list","target","level","predefinedValues","value","layout","extensions","FolderModel","createImplementation","implementation","dependencies"],"sources":["folder.model.ts"],"sourcesContent":["import { ModelFactory } from \"@webiny/api-headless-cms/features/modelBuilder/index.js\";\n\nexport const FOLDER_MODEL_ID = process.env.WEBINY_API_LEGACY_MODELS ? \"acoFolder\" : \"wbyAcoFolder\";\n\nclass FolderPrivateModelImpl implements ModelFactory.Interface {\n    public async execute(builder: ModelFactory.Builder) {\n        return [\n            builder\n                .private({\n                    modelId: FOLDER_MODEL_ID,\n                    name: \"ACO - Folder\"\n                })\n                .fields(fields => ({\n                    title: fields.text().label(\"Title\").required(\"Value is required.\"),\n                    slug: fields\n                        .text()\n                        .label(\"Slug\")\n                        .required(\"Value is required.\")\n                        .pattern(\n                            \"^[a-z0-9]+(-[a-z0-9]+)*$\",\n                            \"g\",\n                            \"Value must consist of only 'a-z', '0-9' and '-'.\"\n                        ),\n                    type: fields.text().label(\"Type\").required(\"Value is required.\"),\n                    parentId: fields.text().label(\"Parent Id\"),\n                    path: fields.text().label(\"Path\"),\n                    permissions: fields\n                        .object()\n                        .label(\"Permissions\")\n                        .list()\n                        .fields(fields => ({\n                            target: fields.text().label(\"Target\").required(\"Value is required.\"),\n                            level: fields\n                                .text()\n                                .label(\"Level\")\n                                .required(\"Value is required.\")\n                                .predefinedValues([\n                                    {\n                                        label: \"Viewer\",\n                                        value: \"viewer\"\n                                    },\n                                    {\n                                        label: \"Editor\",\n                                        value: \"editor\"\n                                    },\n                                    {\n                                        label: \"Owner\",\n                                        value: \"owner\"\n                                    },\n                                    {\n                                        label: \"Public\",\n                                        value: \"public\"\n                                    },\n                                    {\n                                        label: \"No Access\",\n                                        value: \"no-access\"\n                                    }\n                                ])\n                        }))\n                        .layout([[\"target\"], [\"level\"]]),\n                    extensions: fields.object().label(\"Extensions\")\n                }))\n        ];\n    }\n}\n\nexport const FolderModel = ModelFactory.createImplementation({\n    implementation: FolderPrivateModelImpl,\n    dependencies: []\n});\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,yDAAyD;AAEtF,OAAO,MAAMC,eAAe,GAAGC,OAAO,CAACC,GAAG,CAACC,wBAAwB,GAAG,WAAW,GAAG,cAAc;AAElG,MAAMC,sBAAsB,CAAmC;EAC3D,MAAaC,OAAOA,CAACC,OAA6B,EAAE;IAChD,OAAO,CACHA,OAAO,CACFC,OAAO,CAAC;MACLC,OAAO,EAAER,eAAe;MACxBS,IAAI,EAAE;IACV,CAAC,CAAC,CACDC,MAAM,CAACA,MAAM,KAAK;MACfC,KAAK,EAAED,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,OAAO,CAAC,CAACC,QAAQ,CAAC,oBAAoB,CAAC;MAClEC,IAAI,EAAEL,MAAM,CACPE,IAAI,CAAC,CAAC,CACNC,KAAK,CAAC,MAAM,CAAC,CACbC,QAAQ,CAAC,oBAAoB,CAAC,CAC9BE,OAAO,CACJ,0BAA0B,EAC1B,GAAG,EACH,kDACJ,CAAC;MACLC,IAAI,EAAEP,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC,CAACC,QAAQ,CAAC,oBAAoB,CAAC;MAChEI,QAAQ,EAAER,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,WAAW,CAAC;MAC1CM,IAAI,EAAET,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,CAAC;MACjCO,WAAW,EAAEV,MAAM,CACdW,MAAM,CAAC,CAAC,CACRR,KAAK,CAAC,aAAa,CAAC,CACpBS,IAAI,CAAC,CAAC,CACNZ,MAAM,CAACA,MAAM,KAAK;QACfa,MAAM,EAAEb,MAAM,CAACE,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,QAAQ,CAAC,CAACC,QAAQ,CAAC,oBAAoB,CAAC;QACpEU,KAAK,EAAEd,MAAM,CACRE,IAAI,CAAC,CAAC,CACNC,KAAK,CAAC,OAAO,CAAC,CACdC,QAAQ,CAAC,oBAAoB,CAAC,CAC9BW,gBAAgB,CAAC,CACd;UACIZ,KAAK,EAAE,QAAQ;UACfa,KAAK,EAAE;QACX,CAAC,EACD;UACIb,KAAK,EAAE,QAAQ;UACfa,KAAK,EAAE;QACX,CAAC,EACD;UACIb,KAAK,EAAE,OAAO;UACda,KAAK,EAAE;QACX,CAAC,EACD;UACIb,KAAK,EAAE,QAAQ;UACfa,KAAK,EAAE;QACX,CAAC,EACD;UACIb,KAAK,EAAE,WAAW;UAClBa,KAAK,EAAE;QACX,CAAC,CACJ;MACT,CAAC,CAAC,CAAC,CACFC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;MACpCC,UAAU,EAAElB,MAAM,CAACW,MAAM,CAAC,CAAC,CAACR,KAAK,CAAC,YAAY;IAClD,CAAC,CAAC,CAAC,CACV;EACL;AACJ;AAEA,OAAO,MAAMgB,WAAW,GAAG9B,YAAY,CAAC+B,oBAAoB,CAAC;EACzDC,cAAc,EAAE3B,sBAAsB;EACtC4B,YAAY,EAAE;AAClB,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/CreateEntryRevisionFromWithFlpDecorator.d.ts

@@ -0,0 +1,13 @@
+import { CreateEntryRevisionFromUseCase } from "@webiny/api-headless-cms/features/contentEntry/CreateEntryRevisionFrom/abstractions.js";
+import { GetRevisionByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js";
+import type { CmsEntryValues, CmsModel, CreateCmsEntryInput, CreateCmsEntryOptionsInput } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class CreateEntryRevisionFromWithFlpDecoratorImpl implements CreateEntryRevisionFromUseCase.Interface {
+    private folderLevelPermissions;
+    private getRevisionById;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, getRevisionById: GetRevisionByIdUseCase.Interface, decoratee: CreateEntryRevisionFromUseCase.Interface);
+    execute<T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, sourceId: string, input: CreateCmsEntryInput<T>, options?: CreateCmsEntryOptionsInput): CreateEntryRevisionFromUseCase.Return<T>;
+}
+export declare const CreateEntryRevisionFromWithFlpDecorator: typeof CreateEntryRevisionFromWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/CreateEntryRevisionFromWithFlpDecorator.js

@@ -0,0 +1,43 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { CreateEntryRevisionFromUseCase } from "@webiny/api-headless-cms/features/contentEntry/CreateEntryRevisionFrom/abstractions.js";
+import { GetRevisionByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors.js";
+class CreateEntryRevisionFromWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, getRevisionById, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.getRevisionById = getRevisionById;
+    this.decoratee = decoratee;
+  }
+  async execute(model, sourceId, input, options) {
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return this.decoratee.execute(model, sourceId, input, options);
+    }
+    const entryResult = await this.getRevisionById.execute(model, sourceId);
+    if (entryResult.isFail()) {
+      return this.decoratee.execute(model, sourceId, input, options);
+    }
+    const entry = entryResult.value;
+    const folderId = entry?.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return this.decoratee.execute(model, sourceId, input, options);
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "w"
+    });
+    if (!canAccessFolderContent) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return this.decoratee.execute(model, sourceId, input, options);
+  }
+}
+export const CreateEntryRevisionFromWithFlpDecorator = createDecorator({
+  abstraction: CreateEntryRevisionFromUseCase,
+  decorator: CreateEntryRevisionFromWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions, GetRevisionByIdUseCase]
+});
+
+//# sourceMappingURL=CreateEntryRevisionFromWithFlpDecorator.js.map

package/features/cms/decorators/CreateEntryRevisionFromWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","CreateEntryRevisionFromUseCase","GetRevisionByIdUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","CreateEntryRevisionFromWithFlpDecoratorImpl","constructor","folderLevelPermissions","getRevisionById","decoratee","execute","model","sourceId","input","options","canUseFolderLevelPermissions","entryResult","isFail","entry","value","folderId","location","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","fail","CreateEntryRevisionFromWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["CreateEntryRevisionFromWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { CreateEntryRevisionFromUseCase } from \"@webiny/api-headless-cms/features/contentEntry/CreateEntryRevisionFrom/abstractions.js\";\nimport { GetRevisionByIdUseCase } from \"@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js\";\nimport type {\n    CmsEntryValues,\n    CmsModel,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors.js\";\n\nclass CreateEntryRevisionFromWithFlpDecoratorImpl\n    implements CreateEntryRevisionFromUseCase.Interface\n{\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private getRevisionById: GetRevisionByIdUseCase.Interface,\n        private decoratee: CreateEntryRevisionFromUseCase.Interface\n    ) {}\n\n    async execute<T extends CmsEntryValues = CmsEntryValues>(\n        model: CmsModel,\n        sourceId: string,\n        input: CreateCmsEntryInput<T>,\n        options?: CreateCmsEntryOptionsInput\n    ): CreateEntryRevisionFromUseCase.Return<T> {\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return this.decoratee.execute(model, sourceId, input, options);\n        }\n\n        const entryResult = await this.getRevisionById.execute(model, sourceId);\n        if (entryResult.isFail()) {\n            return this.decoratee.execute(model, sourceId, input, options);\n        }\n\n        const entry = entryResult.value;\n        const folderId = entry?.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return this.decoratee.execute(model, sourceId, input, options);\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"w\"\n        });\n\n        if (!canAccessFolderContent) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return this.decoratee.execute(model, sourceId, input, options);\n    }\n}\n\nexport const CreateEntryRevisionFromWithFlpDecorator = createDecorator({\n    abstraction: CreateEntryRevisionFromUseCase,\n    decorator: CreateEntryRevisionFromWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions, GetRevisionByIdUseCase]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,8BAA8B,QAAQ,wFAAwF;AACvI,SAASC,sBAAsB,QAAQ,gFAAgF;AAOvH,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,wDAAwD;AAEhG,MAAMC,2CAA2C,CAEjD;EACIC,WAAWA,CACCC,sBAAwD,EACxDC,eAAiD,EACjDC,SAAmD,EAC7D;IAAA,KAHUF,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,eAAiD,GAAjDA,eAAiD;IAAA,KACjDC,SAAmD,GAAnDA,SAAmD;EAC5D;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,QAAgB,EAChBC,KAA6B,EAC7BC,OAAoC,EACI;IACxC,IAAI,CAAC,IAAI,CAACP,sBAAsB,CAACQ,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAO,IAAI,CAACN,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,OAAO,CAAC;IAClE;IAEA,MAAME,WAAW,GAAG,MAAM,IAAI,CAACR,eAAe,CAACE,OAAO,CAACC,KAAK,EAAEC,QAAQ,CAAC;IACvE,IAAII,WAAW,CAACC,MAAM,CAAC,CAAC,EAAE;MACtB,OAAO,IAAI,CAACR,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,OAAO,CAAC;IAClE;IAEA,MAAMI,KAAK,GAAGF,WAAW,CAACG,KAAK;IAC/B,MAAMC,QAAQ,GAAGF,KAAK,EAAEG,QAAQ,EAAED,QAAQ;IAE1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKjB,WAAW,EAAE;MACvC,OAAO,IAAI,CAACM,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,OAAO,CAAC;IAClE;IAEA,MAAMQ,WAAW,GAAG,MAAM,IAAI,CAACf,sBAAsB,CAACgB,yBAAyB,CAACH,QAAQ,CAAC;IACzF,MAAMI,sBAAsB,GAAG,MAAM,IAAI,CAACjB,sBAAsB,CAACiB,sBAAsB,CAAC;MACpFF,WAAW;MACXG,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACD,sBAAsB,EAAE;MACzB,OAAOzB,MAAM,CAAC2B,IAAI,CAAC,IAAItB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAO,IAAI,CAACK,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,OAAO,CAAC;EAClE;AACJ;AAEA,OAAO,MAAMa,uCAAuC,GAAG7B,eAAe,CAAC;EACnE8B,WAAW,EAAE5B,8BAA8B;EAC3C6B,SAAS,EAAExB,2CAA2C;EACtDyB,YAAY,EAAE,CAAC5B,sBAAsB,EAAED,sBAAsB;AACjE,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/CreateEntryWithFlpDecorator.d.ts

@@ -0,0 +1,12 @@
+import { Result } from "@webiny/feature/api";
+import { CreateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/CreateEntry/abstractions.js";
+import type { CmsEntry, CmsEntryValues, CmsModel, CreateCmsEntryInput, CreateCmsEntryOptionsInput } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class CreateEntryWithFlpDecoratorImpl implements CreateEntryUseCase.Interface {
+    private folderLevelPermissions;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, decoratee: CreateEntryUseCase.Interface);
+    execute<T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, input: CreateCmsEntryInput<T>, options?: CreateCmsEntryOptionsInput): Promise<Result<CmsEntry<T>, CreateEntryUseCase.Error>>;
+}
+export declare const CreateEntryWithFlpDecorator: typeof CreateEntryWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/CreateEntryWithFlpDecorator.js

@@ -0,0 +1,36 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { CreateEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/CreateEntry/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors.js";
+class CreateEntryWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.decoratee = decoratee;
+  }
+  async execute(model, input, options) {
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return this.decoratee.execute(model, input, options);
+    }
+    const folderId = input.wbyAco_location?.folderId || input.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return this.decoratee.execute(model, input, options);
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "w"
+    });
+    if (!canAccessFolder) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return this.decoratee.execute(model, input, options);
+  }
+}
+export const CreateEntryWithFlpDecorator = createDecorator({
+  abstraction: CreateEntryUseCase,
+  decorator: CreateEntryWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions]
+});
+
+//# sourceMappingURL=CreateEntryWithFlpDecorator.js.map

package/features/cms/decorators/CreateEntryWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","CreateEntryUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","CreateEntryWithFlpDecoratorImpl","constructor","folderLevelPermissions","decoratee","execute","model","input","options","canUseFolderLevelPermissions","folderId","wbyAco_location","location","permissions","getFolderLevelPermissions","canAccessFolder","canAccessFolderContent","rwd","fail","CreateEntryWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["CreateEntryWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { CreateEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/CreateEntry/abstractions.js\";\nimport type {\n    CmsEntry,\n    CmsEntryValues,\n    CmsModel,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors.js\";\n\nclass CreateEntryWithFlpDecoratorImpl implements CreateEntryUseCase.Interface {\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private decoratee: CreateEntryUseCase.Interface\n    ) {}\n\n    async execute<T extends CmsEntryValues = CmsEntryValues>(\n        model: CmsModel,\n        input: CreateCmsEntryInput<T>,\n        options?: CreateCmsEntryOptionsInput\n    ): Promise<Result<CmsEntry<T>, CreateEntryUseCase.Error>> {\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return this.decoratee.execute(model, input, options);\n        }\n\n        const folderId = input.wbyAco_location?.folderId || input.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return this.decoratee.execute(model, input, options);\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"w\"\n        });\n\n        if (!canAccessFolder) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return this.decoratee.execute(model, input, options);\n    }\n}\n\nexport const CreateEntryWithFlpDecorator = createDecorator({\n    abstraction: CreateEntryUseCase,\n    decorator: CreateEntryWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,kBAAkB,QAAQ,4EAA4E;AAQ/G,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,wDAAwD;AAEhG,MAAMC,+BAA+B,CAAyC;EAC1EC,WAAWA,CACCC,sBAAwD,EACxDC,SAAuC,EACjD;IAAA,KAFUD,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,SAAuC,GAAvCA,SAAuC;EAChD;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,KAA6B,EAC7BC,OAAoC,EACkB;IACtD,IAAI,CAAC,IAAI,CAACL,sBAAsB,CAACM,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAO,IAAI,CAACL,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,KAAK,EAAEC,OAAO,CAAC;IACxD;IAEA,MAAME,QAAQ,GAAGH,KAAK,CAACI,eAAe,EAAED,QAAQ,IAAIH,KAAK,CAACK,QAAQ,EAAEF,QAAQ;IAE5E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKX,WAAW,EAAE;MACvC,OAAO,IAAI,CAACK,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,KAAK,EAAEC,OAAO,CAAC;IACxD;IAEA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACV,sBAAsB,CAACW,yBAAyB,CAACJ,QAAQ,CAAC;IACzF,MAAMK,eAAe,GAAG,MAAM,IAAI,CAACZ,sBAAsB,CAACa,sBAAsB,CAAC;MAC7EH,WAAW;MACXI,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACF,eAAe,EAAE;MAClB,OAAOnB,MAAM,CAACsB,IAAI,CAAC,IAAIlB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAO,IAAI,CAACI,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,KAAK,EAAEC,OAAO,CAAC;EACxD;AACJ;AAEA,OAAO,MAAMW,2BAA2B,GAAGxB,eAAe,CAAC;EACvDyB,WAAW,EAAEvB,kBAAkB;EAC/BwB,SAAS,EAAEpB,+BAA+B;EAC1CqB,YAAY,EAAE,CAACxB,sBAAsB;AACzC,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/DeleteEntryRevisionWithFlpDecorator.d.ts

@@ -0,0 +1,13 @@
+import { DeleteEntryRevisionUseCase } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntryRevision/abstractions.js";
+import { GetRevisionByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js";
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class DeleteEntryRevisionWithFlpDecoratorImpl implements DeleteEntryRevisionUseCase.Interface {
+    private folderLevelPermissions;
+    private getRevisionById;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, getRevisionById: GetRevisionByIdUseCase.Interface, decoratee: DeleteEntryRevisionUseCase.Interface);
+    execute(model: CmsModel, revisionId: string): ReturnType<DeleteEntryRevisionUseCase.Interface["execute"]>;
+}
+export declare const DeleteEntryRevisionWithFlpDecorator: typeof DeleteEntryRevisionWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/DeleteEntryRevisionWithFlpDecorator.js

@@ -0,0 +1,43 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { DeleteEntryRevisionUseCase } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntryRevision/abstractions.js";
+import { GetRevisionByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors.js";
+class DeleteEntryRevisionWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, getRevisionById, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.getRevisionById = getRevisionById;
+    this.decoratee = decoratee;
+  }
+  async execute(model, revisionId) {
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return this.decoratee.execute(model, revisionId);
+    }
+    const entryResult = await this.getRevisionById.execute(model, revisionId);
+    if (entryResult.isFail()) {
+      return this.decoratee.execute(model, revisionId);
+    }
+    const entry = entryResult.value;
+    const folderId = entry?.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return this.decoratee.execute(model, revisionId);
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "d"
+    });
+    if (!canAccessFolder) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return this.decoratee.execute(model, revisionId);
+  }
+}
+export const DeleteEntryRevisionWithFlpDecorator = createDecorator({
+  abstraction: DeleteEntryRevisionUseCase,
+  decorator: DeleteEntryRevisionWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions, GetRevisionByIdUseCase]
+});
+
+//# sourceMappingURL=DeleteEntryRevisionWithFlpDecorator.js.map

package/features/cms/decorators/DeleteEntryRevisionWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","DeleteEntryRevisionUseCase","GetRevisionByIdUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","DeleteEntryRevisionWithFlpDecoratorImpl","constructor","folderLevelPermissions","getRevisionById","decoratee","execute","model","revisionId","canUseFolderLevelPermissions","entryResult","isFail","entry","value","folderId","location","permissions","getFolderLevelPermissions","canAccessFolder","canAccessFolderContent","rwd","fail","DeleteEntryRevisionWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["DeleteEntryRevisionWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { DeleteEntryRevisionUseCase } from \"@webiny/api-headless-cms/features/contentEntry/DeleteEntryRevision/abstractions.js\";\nimport { GetRevisionByIdUseCase } from \"@webiny/api-headless-cms/features/contentEntry/GetRevisionById/abstractions.js\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors.js\";\n\nclass DeleteEntryRevisionWithFlpDecoratorImpl implements DeleteEntryRevisionUseCase.Interface {\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private getRevisionById: GetRevisionByIdUseCase.Interface,\n        private decoratee: DeleteEntryRevisionUseCase.Interface\n    ) {}\n\n    async execute(\n        model: CmsModel,\n        revisionId: string\n    ): ReturnType<DeleteEntryRevisionUseCase.Interface[\"execute\"]> {\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return this.decoratee.execute(model, revisionId);\n        }\n\n        const entryResult = await this.getRevisionById.execute(model, revisionId);\n        if (entryResult.isFail()) {\n            return this.decoratee.execute(model, revisionId);\n        }\n\n        const entry = entryResult.value;\n        const folderId = entry?.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return this.decoratee.execute(model, revisionId);\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"d\"\n        });\n\n        if (!canAccessFolder) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return this.decoratee.execute(model, revisionId);\n    }\n}\n\nexport const DeleteEntryRevisionWithFlpDecorator = createDecorator({\n    abstraction: DeleteEntryRevisionUseCase,\n    decorator: DeleteEntryRevisionWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions, GetRevisionByIdUseCase]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,0BAA0B,QAAQ,oFAAoF;AAC/H,SAASC,sBAAsB,QAAQ,gFAAgF;AAEvH,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,wDAAwD;AAEhG,MAAMC,uCAAuC,CAAiD;EAC1FC,WAAWA,CACCC,sBAAwD,EACxDC,eAAiD,EACjDC,SAA+C,EACzD;IAAA,KAHUF,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,eAAiD,GAAjDA,eAAiD;IAAA,KACjDC,SAA+C,GAA/CA,SAA+C;EACxD;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,UAAkB,EACyC;IAC3D,IAAI,CAAC,IAAI,CAACL,sBAAsB,CAACM,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAO,IAAI,CAACJ,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,UAAU,CAAC;IACpD;IAEA,MAAME,WAAW,GAAG,MAAM,IAAI,CAACN,eAAe,CAACE,OAAO,CAACC,KAAK,EAAEC,UAAU,CAAC;IACzE,IAAIE,WAAW,CAACC,MAAM,CAAC,CAAC,EAAE;MACtB,OAAO,IAAI,CAACN,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,UAAU,CAAC;IACpD;IAEA,MAAMI,KAAK,GAAGF,WAAW,CAACG,KAAK;IAC/B,MAAMC,QAAQ,GAAGF,KAAK,EAAEG,QAAQ,EAAED,QAAQ;IAE1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKf,WAAW,EAAE;MACvC,OAAO,IAAI,CAACM,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,UAAU,CAAC;IACpD;IAEA,MAAMQ,WAAW,GAAG,MAAM,IAAI,CAACb,sBAAsB,CAACc,yBAAyB,CAACH,QAAQ,CAAC;IACzF,MAAMI,eAAe,GAAG,MAAM,IAAI,CAACf,sBAAsB,CAACgB,sBAAsB,CAAC;MAC7EH,WAAW;MACXI,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACF,eAAe,EAAE;MAClB,OAAOvB,MAAM,CAAC0B,IAAI,CAAC,IAAIrB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAO,IAAI,CAACK,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,UAAU,CAAC;EACpD;AACJ;AAEA,OAAO,MAAMc,mCAAmC,GAAG5B,eAAe,CAAC;EAC/D6B,WAAW,EAAE3B,0BAA0B;EACvC4B,SAAS,EAAEvB,uCAAuC;EAClDwB,YAAY,EAAE,CAAC3B,sBAAsB,EAAED,sBAAsB;AACjE,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/DeleteEntryWithFlpDecorator.d.ts

@@ -0,0 +1,13 @@
+import { DeleteEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntry/abstractions.js";
+import { GetLatestRevisionByEntryIdBaseUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetLatestRevisionByEntryId/abstractions.js";
+import type { CmsModel, CmsDeleteEntryOptions } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class DeleteEntryWithFlpDecoratorImpl implements DeleteEntryUseCase.Interface {
+    private folderLevelPermissions;
+    private getLatestRevisionByEntryId;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, getLatestRevisionByEntryId: GetLatestRevisionByEntryIdBaseUseCase.Interface, decoratee: DeleteEntryUseCase.Interface);
+    execute(model: CmsModel, id: string, options?: CmsDeleteEntryOptions): ReturnType<DeleteEntryUseCase.Interface["execute"]>;
+}
+export declare const DeleteEntryWithFlpDecorator: typeof DeleteEntryWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/DeleteEntryWithFlpDecorator.js

@@ -0,0 +1,45 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { DeleteEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/DeleteEntry/abstractions.js";
+import { GetLatestRevisionByEntryIdBaseUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetLatestRevisionByEntryId/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors.js";
+class DeleteEntryWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, getLatestRevisionByEntryId, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.getLatestRevisionByEntryId = getLatestRevisionByEntryId;
+    this.decoratee = decoratee;
+  }
+  async execute(model, id, options) {
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return this.decoratee.execute(model, id, options);
+    }
+    const entryResult = await this.getLatestRevisionByEntryId.execute(model, {
+      id
+    });
+    if (entryResult.isFail()) {
+      return this.decoratee.execute(model, id, options);
+    }
+    const entry = entryResult.value;
+    const folderId = entry?.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return this.decoratee.execute(model, id, options);
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "d"
+    });
+    if (!canAccessFolder) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return this.decoratee.execute(model, id, options);
+  }
+}
+export const DeleteEntryWithFlpDecorator = createDecorator({
+  abstraction: DeleteEntryUseCase,
+  decorator: DeleteEntryWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions, GetLatestRevisionByEntryIdBaseUseCase]
+});
+
+//# sourceMappingURL=DeleteEntryWithFlpDecorator.js.map

package/features/cms/decorators/DeleteEntryWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","DeleteEntryUseCase","GetLatestRevisionByEntryIdBaseUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","DeleteEntryWithFlpDecoratorImpl","constructor","folderLevelPermissions","getLatestRevisionByEntryId","decoratee","execute","model","id","options","canUseFolderLevelPermissions","entryResult","isFail","entry","value","folderId","location","permissions","getFolderLevelPermissions","canAccessFolder","canAccessFolderContent","rwd","fail","DeleteEntryWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["DeleteEntryWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { DeleteEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/DeleteEntry/abstractions.js\";\nimport { GetLatestRevisionByEntryIdBaseUseCase } from \"@webiny/api-headless-cms/features/contentEntry/GetLatestRevisionByEntryId/abstractions.js\";\nimport type { CmsModel, CmsDeleteEntryOptions } from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors.js\";\n\nclass DeleteEntryWithFlpDecoratorImpl implements DeleteEntryUseCase.Interface {\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private getLatestRevisionByEntryId: GetLatestRevisionByEntryIdBaseUseCase.Interface,\n        private decoratee: DeleteEntryUseCase.Interface\n    ) {}\n\n    async execute(\n        model: CmsModel,\n        id: string,\n        options?: CmsDeleteEntryOptions\n    ): ReturnType<DeleteEntryUseCase.Interface[\"execute\"]> {\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return this.decoratee.execute(model, id, options);\n        }\n\n        const entryResult = await this.getLatestRevisionByEntryId.execute(model, { id });\n        if (entryResult.isFail()) {\n            return this.decoratee.execute(model, id, options);\n        }\n\n        const entry = entryResult.value;\n        const folderId = entry?.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return this.decoratee.execute(model, id, options);\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"d\"\n        });\n\n        if (!canAccessFolder) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return this.decoratee.execute(model, id, options);\n    }\n}\n\nexport const DeleteEntryWithFlpDecorator = createDecorator({\n    abstraction: DeleteEntryUseCase,\n    decorator: DeleteEntryWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions, GetLatestRevisionByEntryIdBaseUseCase]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,kBAAkB,QAAQ,4EAA4E;AAC/G,SAASC,qCAAqC,QAAQ,2FAA2F;AAEjJ,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,wDAAwD;AAEhG,MAAMC,+BAA+B,CAAyC;EAC1EC,WAAWA,CACCC,sBAAwD,EACxDC,0BAA2E,EAC3EC,SAAuC,EACjD;IAAA,KAHUF,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,0BAA2E,GAA3EA,0BAA2E;IAAA,KAC3EC,SAAuC,GAAvCA,SAAuC;EAChD;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,EAAU,EACVC,OAA+B,EACoB;IACnD,IAAI,CAAC,IAAI,CAACN,sBAAsB,CAACO,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAO,IAAI,CAACL,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,EAAE,EAAEC,OAAO,CAAC;IACrD;IAEA,MAAME,WAAW,GAAG,MAAM,IAAI,CAACP,0BAA0B,CAACE,OAAO,CAACC,KAAK,EAAE;MAAEC;IAAG,CAAC,CAAC;IAChF,IAAIG,WAAW,CAACC,MAAM,CAAC,CAAC,EAAE;MACtB,OAAO,IAAI,CAACP,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,EAAE,EAAEC,OAAO,CAAC;IACrD;IAEA,MAAMI,KAAK,GAAGF,WAAW,CAACG,KAAK;IAC/B,MAAMC,QAAQ,GAAGF,KAAK,EAAEG,QAAQ,EAAED,QAAQ;IAE1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKhB,WAAW,EAAE;MACvC,OAAO,IAAI,CAACM,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,EAAE,EAAEC,OAAO,CAAC;IACrD;IAEA,MAAMQ,WAAW,GAAG,MAAM,IAAI,CAACd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;IACzF,MAAMI,eAAe,GAAG,MAAM,IAAI,CAAChB,sBAAsB,CAACiB,sBAAsB,CAAC;MAC7EH,WAAW;MACXI,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACF,eAAe,EAAE;MAClB,OAAOxB,MAAM,CAAC2B,IAAI,CAAC,IAAItB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAO,IAAI,CAACK,SAAS,CAACC,OAAO,CAACC,KAAK,EAAEC,EAAE,EAAEC,OAAO,CAAC;EACrD;AACJ;AAEA,OAAO,MAAMc,2BAA2B,GAAG7B,eAAe,CAAC;EACvD8B,WAAW,EAAE5B,kBAAkB;EAC/B6B,SAAS,EAAExB,+BAA+B;EAC1CyB,YAAY,EAAE,CAAC5B,sBAAsB,EAAED,qCAAqC;AAChF,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/GetEntryByIdWithFlpDecorator.d.ts

@@ -0,0 +1,12 @@
+import { Result } from "@webiny/feature/api";
+import { GetEntryByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetEntryById/abstractions.js";
+import type { CmsModel, CmsEntryValues, CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class GetEntryByIdWithFlpDecoratorImpl implements GetEntryByIdUseCase.Interface {
+    private folderLevelPermissions;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, decoratee: GetEntryByIdUseCase.Interface);
+    execute<T extends CmsEntryValues>(model: CmsModel, id: string): Promise<Result<CmsEntry<T>, GetEntryByIdUseCase.Error>>;
+}
+export declare const GetEntryByIdWithFlpDecorator: typeof GetEntryByIdWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/GetEntryByIdWithFlpDecorator.js

@@ -0,0 +1,41 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { GetEntryByIdUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetEntryById/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors.js";
+class GetEntryByIdWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.decoratee = decoratee;
+  }
+  async execute(model, id) {
+    const result = await this.decoratee.execute(model, id);
+    if (result.isFail()) {
+      return result;
+    }
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return result;
+    }
+    const entry = result.value;
+    const folderId = entry?.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return result;
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "r"
+    });
+    if (!canAccessFolder) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return result;
+  }
+}
+export const GetEntryByIdWithFlpDecorator = createDecorator({
+  abstraction: GetEntryByIdUseCase,
+  decorator: GetEntryByIdWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions]
+});
+
+//# sourceMappingURL=GetEntryByIdWithFlpDecorator.js.map

package/features/cms/decorators/GetEntryByIdWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","GetEntryByIdUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","GetEntryByIdWithFlpDecoratorImpl","constructor","folderLevelPermissions","decoratee","execute","model","id","result","isFail","canUseFolderLevelPermissions","entry","value","folderId","location","permissions","getFolderLevelPermissions","canAccessFolder","canAccessFolderContent","rwd","fail","GetEntryByIdWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["GetEntryByIdWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { GetEntryByIdUseCase } from \"@webiny/api-headless-cms/features/contentEntry/GetEntryById/abstractions.js\";\nimport type { CmsModel, CmsEntryValues, CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors.js\";\n\nclass GetEntryByIdWithFlpDecoratorImpl implements GetEntryByIdUseCase.Interface {\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private decoratee: GetEntryByIdUseCase.Interface\n    ) {}\n\n    async execute<T extends CmsEntryValues>(\n        model: CmsModel,\n        id: string\n    ): Promise<Result<CmsEntry<T>, GetEntryByIdUseCase.Error>> {\n        const result = await this.decoratee.execute<T>(model, id);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return result;\n        }\n\n        const entry = result.value;\n        const folderId = entry?.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return result;\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"r\"\n        });\n\n        if (!canAccessFolder) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return result;\n    }\n}\n\nexport const GetEntryByIdWithFlpDecorator = createDecorator({\n    abstraction: GetEntryByIdUseCase,\n    decorator: GetEntryByIdWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,mBAAmB,QAAQ,6EAA6E;AAEjH,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,wDAAwD;AAEhG,MAAMC,gCAAgC,CAA0C;EAC5EC,WAAWA,CACCC,sBAAwD,EACxDC,SAAwC,EAClD;IAAA,KAFUD,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,SAAwC,GAAxCA,SAAwC;EACjD;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,EAAU,EAC6C;IACvD,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACJ,SAAS,CAACC,OAAO,CAAIC,KAAK,EAAEC,EAAE,CAAC;IAEzD,IAAIC,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,IAAI,CAAC,IAAI,CAACL,sBAAsB,CAACO,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAOF,MAAM;IACjB;IAEA,MAAMG,KAAK,GAAGH,MAAM,CAACI,KAAK;IAC1B,MAAMC,QAAQ,GAAGF,KAAK,EAAEG,QAAQ,EAAED,QAAQ;IAE1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKd,WAAW,EAAE;MACvC,OAAOS,MAAM;IACjB;IAEA,MAAMO,WAAW,GAAG,MAAM,IAAI,CAACZ,sBAAsB,CAACa,yBAAyB,CAACH,QAAQ,CAAC;IACzF,MAAMI,eAAe,GAAG,MAAM,IAAI,CAACd,sBAAsB,CAACe,sBAAsB,CAAC;MAC7EH,WAAW;MACXI,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACF,eAAe,EAAE;MAClB,OAAOrB,MAAM,CAACwB,IAAI,CAAC,IAAIpB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAOQ,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMa,4BAA4B,GAAG1B,eAAe,CAAC;EACxD2B,WAAW,EAAEzB,mBAAmB;EAChC0B,SAAS,EAAEtB,gCAAgC;EAC3CuB,YAAY,EAAE,CAAC1B,sBAAsB;AACzC,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/GetEntryWithFlpDecorator.d.ts

@@ -0,0 +1,12 @@
+import { Result } from "@webiny/feature/api";
+import { GetEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetEntry/abstractions.js";
+import type { CmsModel, CmsEntryGetParams, CmsEntryValues, CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class GetEntryWithFlpDecoratorImpl implements GetEntryUseCase.Interface {
+    private folderLevelPermissions;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, decoratee: GetEntryUseCase.Interface);
+    execute<T extends CmsEntryValues>(model: CmsModel, params: CmsEntryGetParams): Promise<Result<CmsEntry<T>, GetEntryUseCase.Error>>;
+}
+export declare const GetEntryWithFlpDecorator: typeof GetEntryWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/GetEntryWithFlpDecorator.js

@@ -0,0 +1,41 @@
+import { createDecorator, Result } from "@webiny/feature/api";
+import { GetEntryUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetEntry/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+import { EntryNotAuthorizedError } from "@webiny/api-headless-cms/domain/contentEntry/errors";
+class GetEntryWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.decoratee = decoratee;
+  }
+  async execute(model, params) {
+    const result = await this.decoratee.execute(model, params);
+    if (result.isFail()) {
+      return result;
+    }
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return result;
+    }
+    const entry = result.value;
+    const folderId = entry?.location?.folderId;
+    if (!folderId || folderId === ROOT_FOLDER) {
+      return result;
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({
+      permissions,
+      rwd: "r"
+    });
+    if (!canAccessFolder) {
+      return Result.fail(new EntryNotAuthorizedError());
+    }
+    return result;
+  }
+}
+export const GetEntryWithFlpDecorator = createDecorator({
+  abstraction: GetEntryUseCase,
+  decorator: GetEntryWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions]
+});
+
+//# sourceMappingURL=GetEntryWithFlpDecorator.js.map

package/features/cms/decorators/GetEntryWithFlpDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","Result","GetEntryUseCase","FolderLevelPermissions","ROOT_FOLDER","EntryNotAuthorizedError","GetEntryWithFlpDecoratorImpl","constructor","folderLevelPermissions","decoratee","execute","model","params","result","isFail","canUseFolderLevelPermissions","entry","value","folderId","location","permissions","getFolderLevelPermissions","canAccessFolder","canAccessFolderContent","rwd","fail","GetEntryWithFlpDecorator","abstraction","decorator","dependencies"],"sources":["GetEntryWithFlpDecorator.ts"],"sourcesContent":["import { createDecorator, Result } from \"@webiny/feature/api\";\nimport { GetEntryUseCase } from \"@webiny/api-headless-cms/features/contentEntry/GetEntry/abstractions.js\";\nimport type {\n    CmsModel,\n    CmsEntryGetParams,\n    CmsEntryValues,\n    CmsEntry\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { EntryNotAuthorizedError } from \"@webiny/api-headless-cms/domain/contentEntry/errors\";\n\nclass GetEntryWithFlpDecoratorImpl implements GetEntryUseCase.Interface {\n    constructor(\n        private folderLevelPermissions: FolderLevelPermissions.Interface,\n        private decoratee: GetEntryUseCase.Interface\n    ) {}\n\n    async execute<T extends CmsEntryValues>(\n        model: CmsModel,\n        params: CmsEntryGetParams\n    ): Promise<Result<CmsEntry<T>, GetEntryUseCase.Error>> {\n        const result = await this.decoratee.execute<T>(model, params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {\n            return result;\n        }\n\n        const entry = result.value;\n        const folderId = entry?.location?.folderId;\n\n        if (!folderId || folderId === ROOT_FOLDER) {\n            return result;\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        const canAccessFolder = await this.folderLevelPermissions.canAccessFolderContent({\n            permissions,\n            rwd: \"r\"\n        });\n\n        if (!canAccessFolder) {\n            return Result.fail(new EntryNotAuthorizedError());\n        }\n\n        return result;\n    }\n}\n\nexport const GetEntryWithFlpDecorator = createDecorator({\n    abstraction: GetEntryUseCase,\n    decorator: GetEntryWithFlpDecoratorImpl,\n    dependencies: [FolderLevelPermissions]\n});\n"],"mappings":"AAAA,SAASA,eAAe,EAAEC,MAAM,QAAQ,qBAAqB;AAC7D,SAASC,eAAe,QAAQ,yEAAyE;AAOzG,SAASC,sBAAsB;AAC/B,SAASC,WAAW;AACpB,SAASC,uBAAuB,QAAQ,qDAAqD;AAE7F,MAAMC,4BAA4B,CAAsC;EACpEC,WAAWA,CACCC,sBAAwD,EACxDC,SAAoC,EAC9C;IAAA,KAFUD,sBAAwD,GAAxDA,sBAAwD;IAAA,KACxDC,SAAoC,GAApCA,SAAoC;EAC7C;EAEH,MAAMC,OAAOA,CACTC,KAAe,EACfC,MAAyB,EAC0B;IACnD,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACJ,SAAS,CAACC,OAAO,CAAIC,KAAK,EAAEC,MAAM,CAAC;IAE7D,IAAIC,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,IAAI,CAAC,IAAI,CAACL,sBAAsB,CAACO,4BAA4B,CAAC,CAAC,EAAE;MAC7D,OAAOF,MAAM;IACjB;IAEA,MAAMG,KAAK,GAAGH,MAAM,CAACI,KAAK;IAC1B,MAAMC,QAAQ,GAAGF,KAAK,EAAEG,QAAQ,EAAED,QAAQ;IAE1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKd,WAAW,EAAE;MACvC,OAAOS,MAAM;IACjB;IAEA,MAAMO,WAAW,GAAG,MAAM,IAAI,CAACZ,sBAAsB,CAACa,yBAAyB,CAACH,QAAQ,CAAC;IACzF,MAAMI,eAAe,GAAG,MAAM,IAAI,CAACd,sBAAsB,CAACe,sBAAsB,CAAC;MAC7EH,WAAW;MACXI,GAAG,EAAE;IACT,CAAC,CAAC;IAEF,IAAI,CAACF,eAAe,EAAE;MAClB,OAAOrB,MAAM,CAACwB,IAAI,CAAC,IAAIpB,uBAAuB,CAAC,CAAC,CAAC;IACrD;IAEA,OAAOQ,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMa,wBAAwB,GAAG1B,eAAe,CAAC;EACpD2B,WAAW,EAAEzB,eAAe;EAC5B0B,SAAS,EAAEtB,4BAA4B;EACvCuB,YAAY,EAAE,CAAC1B,sBAAsB;AACzC,CAAC,CAAC","ignoreList":[]}

package/features/cms/decorators/GetLatestEntriesByIdsWithFlpDecorator.d.ts

@@ -0,0 +1,13 @@
+import { Result } from "@webiny/feature/api";
+import { GetLatestEntriesByIdsUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetLatestEntriesByIds/abstractions.js";
+import type { CmsModel, CmsEntryValues, CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../../features/flp/FolderLevelPermissions/index.js";
+declare class GetLatestEntriesByIdsWithFlpDecoratorImpl implements GetLatestEntriesByIdsUseCase.Interface {
+    private folderLevelPermissions;
+    private decoratee;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface, decoratee: GetLatestEntriesByIdsUseCase.Interface);
+    execute<T extends CmsEntryValues>(model: CmsModel, ids: string[]): Promise<Result<CmsEntry<T>[], GetLatestEntriesByIdsUseCase.Error>>;
+    private filterEntriesByFolder;
+}
+export declare const GetLatestEntriesByIdsWithFlpDecorator: typeof GetLatestEntriesByIdsWithFlpDecoratorImpl;
+export {};

package/features/cms/decorators/GetLatestEntriesByIdsWithFlpDecorator.js

@@ -0,0 +1,45 @@
+import { createDecorator } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { GetLatestEntriesByIdsUseCase } from "@webiny/api-headless-cms/features/contentEntry/GetLatestEntriesByIds/abstractions.js";
+import { FolderLevelPermissions } from "../../flp/FolderLevelPermissions/index.js";
+import { ROOT_FOLDER } from "../../../constants.js";
+class GetLatestEntriesByIdsWithFlpDecoratorImpl {
+  constructor(folderLevelPermissions, decoratee) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.decoratee = decoratee;
+  }
+  async execute(model, ids) {
+    const result = await this.decoratee.execute(model, ids);
+    if (result.isFail()) {
+      return result;
+    }
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions()) {
+      return result;
+    }
+    const entries = result.value;
+    const filteredEntries = await this.filterEntriesByFolder(entries);
+    return Result.ok(filteredEntries);
+  }
+  async filterEntriesByFolder(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccess = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccess ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+export const GetLatestEntriesByIdsWithFlpDecorator = createDecorator({
+  abstraction: GetLatestEntriesByIdsUseCase,
+  decorator: GetLatestEntriesByIdsWithFlpDecoratorImpl,
+  dependencies: [FolderLevelPermissions]
+});
+
+//# sourceMappingURL=GetLatestEntriesByIdsWithFlpDecorator.js.map