@webiny/api-aco 0.0.0-unstable.bca7b3e350 → 0.0.0-unstable.c27f4d8a31

package/features/flp/FolderLevelPermissions/abstractions.d.ts

@@ -0,0 +1,25 @@
+import type { CanAccessFolderContentParams, CanAccessFolderParams } from "./useCases/index.js";
+import type { FolderLevelPermission, FolderPermission, ListFlpsParams } from "../../../types.js";
+export interface IFolderLevelPermissions {
+    canUseFolderLevelPermissions(enabled?: boolean): boolean;
+    canUseTeams(): boolean;
+    canCreateFolderInRoot(): boolean;
+    permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean;
+    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;
+    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;
+    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;
+    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;
+    canManageFolderContent(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean>;
+    canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean>;
+    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;
+    listFolderLevelPermissions(params: ListFlpsParams): Promise<Array<{
+        id: string;
+        permissions: FolderPermission[];
+    }>>;
+    getFolderLevelPermissions(id: string): Promise<FolderPermission[]>;
+}
+export declare const FolderLevelPermissions: import("@webiny/di").Abstraction<IFolderLevelPermissions>;
+export declare namespace FolderLevelPermissions {
+    type Interface = IFolderLevelPermissions;
+}

package/features/flp/FolderLevelPermissions/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const FolderLevelPermissions = createAbstraction("FolderLevelPermissions");
+
+//# sourceMappingURL=abstractions.js.map

package/features/flp/FolderLevelPermissions/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","FolderLevelPermissions"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { CanAccessFolderContentParams, CanAccessFolderParams } from \"./useCases/index.js\";\nimport type { FolderLevelPermission, FolderPermission, ListFlpsParams } from \"~/types.js\";\n\nexport interface IFolderLevelPermissions {\n    canUseFolderLevelPermissions(enabled?: boolean): boolean;\n    canUseTeams(): boolean;\n    canCreateFolderInRoot(): boolean;\n    permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean;\n    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;\n    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;\n    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;\n    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;\n    canManageFolderContent(flp: FolderLevelPermission): Promise<boolean>;\n    canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean>;\n    canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean>;\n    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;\n    listFolderLevelPermissions(params: ListFlpsParams): Promise<\n        Array<{\n            id: string;\n            permissions: FolderPermission[];\n        }>\n    >;\n    getFolderLevelPermissions(id: string): Promise<FolderPermission[]>;\n}\n\nexport const FolderLevelPermissions =\n    createAbstraction<IFolderLevelPermissions>(\"FolderLevelPermissions\");\n\nexport namespace FolderLevelPermissions {\n    export type Interface = IFolderLevelPermissions;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA0BvD,OAAO,MAAMC,sBAAsB,GAC/BD,iBAAiB,CAA0B,wBAAwB,CAAC","ignoreList":[]}

package/features/flp/FolderLevelPermissions/feature.d.ts

@@ -0,0 +1 @@
+export declare const FolderLevelPermissionsFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/flp/FolderLevelPermissions/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { FolderLevelPermissions } from "./FolderLevelPermissions.js";
+export const FolderLevelPermissionsFeature = createFeature({
+  name: "FolderLevelPermissions",
+  register(container) {
+    container.register(FolderLevelPermissions);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/flp/FolderLevelPermissions/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","FolderLevelPermissions","FolderLevelPermissionsFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { FolderLevelPermissions } from \"./FolderLevelPermissions.js\";\n\nexport const FolderLevelPermissionsFeature = createFeature({\n    name: \"FolderLevelPermissions\",\n    register(container: Container) {\n        container.register(FolderLevelPermissions);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AAEnD,SAASC,sBAAsB;AAE/B,OAAO,MAAMC,6BAA6B,GAAGF,aAAa,CAAC;EACvDG,IAAI,EAAE,wBAAwB;EAC9BC,QAAQA,CAACC,SAAoB,EAAE;IAC3BA,SAAS,CAACD,QAAQ,CAACH,sBAAsB,CAAC;EAC9C;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/flp/FolderLevelPermissions/index.d.ts

@@ -0,0 +1,2 @@
+export { FolderLevelPermissionsFeature } from "./feature.js";
+export { FolderLevelPermissions } from "./abstractions.js";

package/features/flp/FolderLevelPermissions/index.js

@@ -0,0 +1,4 @@
+export { FolderLevelPermissionsFeature } from "./feature.js";
+export { FolderLevelPermissions } from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["FolderLevelPermissionsFeature","FolderLevelPermissions"],"sources":["index.ts"],"sourcesContent":["export { FolderLevelPermissionsFeature } from \"./feature.js\";\nexport { FolderLevelPermissions } from \"./abstractions.js\";\n"],"mappings":"AAAA,SAASA,6BAA6B;AACtC,SAASC,sBAAsB","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.d.ts

@@ -0,0 +1,7 @@
+import { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import type { CanAccessFolderParams, ICanAccessFolder } from "./ICanAccessFolder.js";
+export declare class CanAccessFolder implements ICanAccessFolder {
+    private identityContext;
+    constructor(identityContext: IdentityContext.Interface);
+    execute({ permissions, rwd, managePermissions }: CanAccessFolderParams): Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.js

@@ -0,0 +1,41 @@
+export class CanAccessFolder {
+  constructor(identityContext) {
+    this.identityContext = identityContext;
+  }
+  async execute({
+    permissions = [],
+    rwd,
+    managePermissions
+  }) {
+    if (!permissions.length) {
+      return true;
+    }
+    const identity = this.identityContext.getIdentity();
+    const currentIdentityPermission = permissions.find(p => {
+      return p.target === `admin:${identity.id}`;
+    });
+    if (!currentIdentityPermission) {
+      return false;
+    }
+    const {
+      level
+    } = currentIdentityPermission;
+    if (managePermissions) {
+      return level === "owner";
+    }
+
+    // If the user has a `no-access` level, they are explicitly denied access to the current folder.
+    if (level === "no-access") {
+      return false;
+    }
+
+    // Checking for "write" or "delete" access. Allow only if the
+    // user is has `owner` or `editor` level or the folder is public (no FLP assigned).
+    if (rwd !== "r") {
+      return level === "owner" || level === "editor" || level === "public";
+    }
+    return true;
+  }
+}
+
+//# sourceMappingURL=CanAccessFolder.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/CanAccessFolder.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CanAccessFolder","constructor","identityContext","execute","permissions","rwd","managePermissions","length","identity","getIdentity","currentIdentityPermission","find","p","target","id","level"],"sources":["CanAccessFolder.ts"],"sourcesContent":["import { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport type { CanAccessFolderParams, ICanAccessFolder } from \"./ICanAccessFolder.js\";\n\nexport class CanAccessFolder implements ICanAccessFolder {\n    constructor(private identityContext: IdentityContext.Interface) {}\n\n    async execute({ permissions = [], rwd, managePermissions }: CanAccessFolderParams) {\n        if (!permissions.length) {\n            return true;\n        }\n\n        const identity = this.identityContext.getIdentity();\n        const currentIdentityPermission = permissions.find(p => {\n            return p.target === `admin:${identity.id}`;\n        });\n\n        if (!currentIdentityPermission) {\n            return false;\n        }\n\n        const { level } = currentIdentityPermission;\n\n        if (managePermissions) {\n            return level === \"owner\";\n        }\n\n        // If the user has a `no-access` level, they are explicitly denied access to the current folder.\n        if (level === \"no-access\") {\n            return false;\n        }\n\n        // Checking for \"write\" or \"delete\" access. Allow only if the\n        // user is has `owner` or `editor` level or the folder is public (no FLP assigned).\n        if (rwd !== \"r\") {\n            return level === \"owner\" || level === \"editor\" || level === \"public\";\n        }\n\n        return true;\n    }\n}\n"],"mappings":"AAGA,OAAO,MAAMA,eAAe,CAA6B;EACrDC,WAAWA,CAASC,eAA0C,EAAE;IAAA,KAA5CA,eAA0C,GAA1CA,eAA0C;EAAG;EAEjE,MAAMC,OAAOA,CAAC;IAAEC,WAAW,GAAG,EAAE;IAAEC,GAAG;IAAEC;EAAyC,CAAC,EAAE;IAC/E,IAAI,CAACF,WAAW,CAACG,MAAM,EAAE;MACrB,OAAO,IAAI;IACf;IAEA,MAAMC,QAAQ,GAAG,IAAI,CAACN,eAAe,CAACO,WAAW,CAAC,CAAC;IACnD,MAAMC,yBAAyB,GAAGN,WAAW,CAACO,IAAI,CAACC,CAAC,IAAI;MACpD,OAAOA,CAAC,CAACC,MAAM,KAAK,SAASL,QAAQ,CAACM,EAAE,EAAE;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACJ,yBAAyB,EAAE;MAC5B,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEK;IAAM,CAAC,GAAGL,yBAAyB;IAE3C,IAAIJ,iBAAiB,EAAE;MACnB,OAAOS,KAAK,KAAK,OAAO;IAC5B;;IAEA;IACA,IAAIA,KAAK,KAAK,WAAW,EAAE;MACvB,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,IAAIV,GAAG,KAAK,GAAG,EAAE;MACb,OAAOU,KAAK,KAAK,OAAO,IAAIA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,QAAQ;IACxE;IAEA,OAAO,IAAI;EACf;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.d.ts

@@ -0,0 +1,9 @@
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export interface CanAccessFolderParams {
+    permissions?: FolderPermission[];
+    rwd?: "r" | "w" | "d";
+    managePermissions?: boolean;
+}
+export interface ICanAccessFolder {
+    execute: (params: CanAccessFolderParams) => Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=ICanAccessFolder.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/ICanAccessFolder.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["ICanAccessFolder.ts"],"sourcesContent":["import type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport interface CanAccessFolderParams {\n    permissions?: FolderPermission[];\n    rwd?: \"r\" | \"w\" | \"d\";\n    managePermissions?: boolean;\n}\n\nexport interface ICanAccessFolder {\n    execute: (params: CanAccessFolderParams) => Promise<boolean>;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./CanAccessFolder.js";
+export type * from "./ICanAccessFolder.js";

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.js

@@ -0,0 +1,3 @@
+export * from "./CanAccessFolder.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolder/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./CanAccessFolder.js\";\nexport type * from \"./ICanAccessFolder.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/CanAccessFolderContent.d.ts

@@ -0,0 +1,7 @@
+import type { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import type { CanAccessFolderContentParams, ICanAccessFolderContent } from "./ICanAccessFolderContent.js";
+export declare class CanAccessFolderContent implements ICanAccessFolderContent {
+    private identityContext;
+    constructor(identityContext: IdentityContext.Interface);
+    execute({ permissions, rwd }: CanAccessFolderContentParams): Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/CanAccessFolderContent.js

@@ -0,0 +1,34 @@
+export class CanAccessFolderContent {
+  constructor(identityContext) {
+    this.identityContext = identityContext;
+  }
+  async execute({
+    permissions = [],
+    rwd
+  }) {
+    const identity = this.identityContext.getIdentity();
+    const currentIdentityPermission = permissions.find(p => {
+      return p.target === `admin:${identity.id}`;
+    });
+    if (!currentIdentityPermission) {
+      return false;
+    }
+    const {
+      level
+    } = currentIdentityPermission;
+
+    // If the user has a `no-access` level, they are explicitly denied access to the current folder.
+    if (level === "no-access") {
+      return false;
+    }
+
+    // If the user is not an owner and we're checking for "write" or
+    // "delete" access, then we can immediately return false.
+    if (rwd !== "r") {
+      return level !== "viewer";
+    }
+    return true;
+  }
+}
+
+//# sourceMappingURL=CanAccessFolderContent.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/CanAccessFolderContent.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CanAccessFolderContent","constructor","identityContext","execute","permissions","rwd","identity","getIdentity","currentIdentityPermission","find","p","target","id","level"],"sources":["CanAccessFolderContent.ts"],"sourcesContent":["import type { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport type {\n    CanAccessFolderContentParams,\n    ICanAccessFolderContent\n} from \"./ICanAccessFolderContent.js\";\n\nexport class CanAccessFolderContent implements ICanAccessFolderContent {\n    constructor(private identityContext: IdentityContext.Interface) {}\n\n    async execute({ permissions = [], rwd }: CanAccessFolderContentParams) {\n        const identity = this.identityContext.getIdentity();\n\n        const currentIdentityPermission = permissions.find(p => {\n            return p.target === `admin:${identity.id}`;\n        });\n\n        if (!currentIdentityPermission) {\n            return false;\n        }\n\n        const { level } = currentIdentityPermission;\n\n        // If the user has a `no-access` level, they are explicitly denied access to the current folder.\n        if (level === \"no-access\") {\n            return false;\n        }\n\n        // If the user is not an owner and we're checking for \"write\" or\n        // \"delete\" access, then we can immediately return false.\n        if (rwd !== \"r\") {\n            return level !== \"viewer\";\n        }\n\n        return true;\n    }\n}\n"],"mappings":"AAMA,OAAO,MAAMA,sBAAsB,CAAoC;EACnEC,WAAWA,CAASC,eAA0C,EAAE;IAAA,KAA5CA,eAA0C,GAA1CA,eAA0C;EAAG;EAEjE,MAAMC,OAAOA,CAAC;IAAEC,WAAW,GAAG,EAAE;IAAEC;EAAkC,CAAC,EAAE;IACnE,MAAMC,QAAQ,GAAG,IAAI,CAACJ,eAAe,CAACK,WAAW,CAAC,CAAC;IAEnD,MAAMC,yBAAyB,GAAGJ,WAAW,CAACK,IAAI,CAACC,CAAC,IAAI;MACpD,OAAOA,CAAC,CAACC,MAAM,KAAK,SAASL,QAAQ,CAACM,EAAE,EAAE;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACJ,yBAAyB,EAAE;MAC5B,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEK;IAAM,CAAC,GAAGL,yBAAyB;;IAE3C;IACA,IAAIK,KAAK,KAAK,WAAW,EAAE;MACvB,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,IAAIR,GAAG,KAAK,GAAG,EAAE;MACb,OAAOQ,KAAK,KAAK,QAAQ;IAC7B;IAEA,OAAO,IAAI;EACf;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/ICanAccessFolderContent.d.ts

@@ -0,0 +1,8 @@
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export interface CanAccessFolderContentParams {
+    permissions?: FolderPermission[];
+    rwd?: "r" | "w" | "d";
+}
+export interface ICanAccessFolderContent {
+    execute: (params: CanAccessFolderContentParams) => Promise<boolean>;
+}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/ICanAccessFolderContent.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=ICanAccessFolderContent.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/ICanAccessFolderContent.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["ICanAccessFolderContent.ts"],"sourcesContent":["import type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport interface CanAccessFolderContentParams {\n    permissions?: FolderPermission[];\n    rwd?: \"r\" | \"w\" | \"d\";\n}\n\nexport interface ICanAccessFolderContent {\n    execute: (params: CanAccessFolderContentParams) => Promise<boolean>;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./CanAccessFolderContent.js";
+export type * from "./ICanAccessFolderContent.js";

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/index.js

@@ -0,0 +1,3 @@
+export * from "./CanAccessFolderContent.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/CanAccessFolderContent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./CanAccessFolderContent.js\";\nexport type * from \"./ICanAccessFolderContent.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/CanCreateFolderInRoot.d.ts

@@ -0,0 +1,4 @@
+import type { ICanCreateFolderInRoot } from "./ICanCreateFolderInRoot.js";
+export declare class CanCreateFolderInRoot implements ICanCreateFolderInRoot {
+    execute(): boolean;
+}

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/CanCreateFolderInRoot.js

@@ -0,0 +1,7 @@
+export class CanCreateFolderInRoot {
+  execute() {
+    return true;
+  }
+}
+
+//# sourceMappingURL=CanCreateFolderInRoot.js.map

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/CanCreateFolderInRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CanCreateFolderInRoot","execute"],"sources":["CanCreateFolderInRoot.ts"],"sourcesContent":["import type { ICanCreateFolderInRoot } from \"./ICanCreateFolderInRoot.js\";\n\nexport class CanCreateFolderInRoot implements ICanCreateFolderInRoot {\n    execute() {\n        return true;\n    }\n}\n"],"mappings":"AAEA,OAAO,MAAMA,qBAAqB,CAAmC;EACjEC,OAAOA,CAAA,EAAG;IACN,OAAO,IAAI;EACf;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/ICanCreateFolderInRoot.d.ts

@@ -0,0 +1,3 @@
+export interface ICanCreateFolderInRoot {
+    execute: () => boolean;
+}

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/ICanCreateFolderInRoot.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=ICanCreateFolderInRoot.js.map

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/ICanCreateFolderInRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["ICanCreateFolderInRoot.ts"],"sourcesContent":["export interface ICanCreateFolderInRoot {\n    execute: () => boolean;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./CanCreateFolderInRoot.js";
+export type * from "./ICanCreateFolderInRoot.js";

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/index.js

@@ -0,0 +1,3 @@
+export * from "./CanCreateFolderInRoot.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/CanCreateFolderInRoot/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./CanCreateFolderInRoot.js\";\nexport type * from \"./ICanCreateFolderInRoot.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/CheckNotInheritedPermissions.d.ts

@@ -0,0 +1,5 @@
+import type { ICheckNotInheritedPermissions } from "./ICheckNotInheritedPermissions.js";
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export declare class CheckNotInheritedPermissions implements ICheckNotInheritedPermissions {
+    execute(permissions: FolderPermission[]): boolean;
+}

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/CheckNotInheritedPermissions.js

@@ -0,0 +1,7 @@
+export class CheckNotInheritedPermissions {
+  execute(permissions) {
+    return permissions.some(p => !p.inheritedFrom);
+  }
+}
+
+//# sourceMappingURL=CheckNotInheritedPermissions.js.map

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/CheckNotInheritedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CheckNotInheritedPermissions","execute","permissions","some","p","inheritedFrom"],"sources":["CheckNotInheritedPermissions.ts"],"sourcesContent":["import type { ICheckNotInheritedPermissions } from \"./ICheckNotInheritedPermissions.js\";\nimport type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport class CheckNotInheritedPermissions implements ICheckNotInheritedPermissions {\n    execute(permissions: FolderPermission[]) {\n        return permissions.some(p => !p.inheritedFrom);\n    }\n}\n"],"mappings":"AAGA,OAAO,MAAMA,4BAA4B,CAA0C;EAC/EC,OAAOA,CAACC,WAA+B,EAAE;IACrC,OAAOA,WAAW,CAACC,IAAI,CAACC,CAAC,IAAI,CAACA,CAAC,CAACC,aAAa,CAAC;EAClD;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/ICheckNotInheritedPermissions.d.ts

@@ -0,0 +1,4 @@
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export interface ICheckNotInheritedPermissions {
+    execute: (permissions: FolderPermission[]) => boolean;
+}

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/ICheckNotInheritedPermissions.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=ICheckNotInheritedPermissions.js.map

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/ICheckNotInheritedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["ICheckNotInheritedPermissions.ts"],"sourcesContent":["import type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport interface ICheckNotInheritedPermissions {\n    execute: (permissions: FolderPermission[]) => boolean;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/index.d.ts

@@ -0,0 +1,2 @@
+export type * from "./ICheckNotInheritedPermissions.js";
+export * from "./CheckNotInheritedPermissions.js";

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/index.js

@@ -0,0 +1,3 @@
+export * from "./CheckNotInheritedPermissions.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/CheckNotInheritedPermissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export type * from \"./ICheckNotInheritedPermissions.js\";\nexport * from \"./CheckNotInheritedPermissions.js\";\n"],"mappings":"AACA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/DefaultPermissionsMerger.d.ts

@@ -0,0 +1,5 @@
+import { SecurityIdentity, SecurityPermission } from "@webiny/api-core/types/security.js";
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export declare class DefaultPermissionsMerger {
+    static merge(identity: SecurityIdentity, identityPermissions: SecurityPermission[], folderPermissions: FolderPermission[]): FolderPermission[];
+}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/DefaultPermissionsMerger.js

@@ -0,0 +1,70 @@
+export class DefaultPermissionsMerger {
+  static merge(identity, identityPermissions, folderPermissions) {
+    // If the user has full access permission, add a specific "owner" permission to the list.
+    // This ensures the user has complete control over the folder.
+    const hasFullAccess = identityPermissions.some(p => p.name === "*");
+    if (hasFullAccess) {
+      return [{
+        target: `admin:${identity.id}`,
+        level: "owner",
+        inheritedFrom: "role:full-access"
+      },
+      // Remove any permissions related to the full access user,
+      // as these are always superseded by the "owner" permission defined above.
+      ...folderPermissions.filter(p => p.target !== `admin:${identity.id}`)];
+    }
+    if (folderPermissions.length === 0) {
+      // No permissions provided. This means the folder is public.
+      // Add a specific "public" permission to the list to ensure the folder is accessible to everyone.
+      return [{
+        target: `admin:${identity.id}`,
+        level: "public",
+        inheritedFrom: "public"
+      }];
+    }
+
+    // If there are multiple `admin:${identity.id}` permissions in the array,
+    // we need to pick the one with the highest access level. We also remove
+    // other permissions for the same identity.
+
+    // Get permissions related to the current identity (admin).
+    const currentAdminPermissions = folderPermissions.filter(p => p.target === `admin:${identity.id}`);
+    if (currentAdminPermissions.length === 0) {
+      return folderPermissions;
+    }
+    const noAccessPermission = currentAdminPermissions.find(p => p.level === "no-access" && p.target === `admin:${identity.id}`);
+    if (noAccessPermission) {
+      // If one of the permissions is `no-access`, then we can immediately return it. This is
+      // because `no-access` is the ultimate level of access, and no other permission can override it.
+      // Remove all permissions for the current identity and add the winning one.
+      const filteredPermissions = folderPermissions.filter(p => p.target !== `admin:${identity.id}`);
+      return [...filteredPermissions, noAccessPermission];
+    }
+    const [firstAdminPermission, ...restAdminPermissions] = currentAdminPermissions;
+    const resultPermission = restAdminPermissions.reduce((winner, current) => {
+      const winnerInherits = winner.inheritedFrom?.startsWith("parent:");
+      const currentInherits = current.inheritedFrom?.startsWith("parent:");
+      if (winnerInherits && !currentInherits) {
+        return current;
+      }
+      if (currentInherits && !winnerInherits) {
+        return winner;
+      }
+
+      // At this point, we're either comparing two permissions with `inheritedFrom` or two without it.
+      // In other words, we're now at a point where we start comparing the levels (owner > editor > viewer).
+      if (current.level === "owner") {
+        return current;
+      }
+      if (current.level === "editor" && winner.level === "viewer") {
+        return current;
+      }
+      return winner;
+    }, firstAdminPermission);
+
+    // Remove all permissions for the current identity and add the winning one.
+    return [resultPermission, ...folderPermissions.filter(p => p.target !== `admin:${identity.id}`)];
+  }
+}
+
+//# sourceMappingURL=DefaultPermissionsMerger.js.map

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/DefaultPermissionsMerger.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DefaultPermissionsMerger","merge","identity","identityPermissions","folderPermissions","hasFullAccess","some","p","name","target","id","level","inheritedFrom","filter","length","currentAdminPermissions","noAccessPermission","find","filteredPermissions","firstAdminPermission","restAdminPermissions","resultPermission","reduce","winner","current","winnerInherits","startsWith","currentInherits"],"sources":["DefaultPermissionsMerger.ts"],"sourcesContent":["import { SecurityIdentity, SecurityPermission } from \"@webiny/api-core/types/security.js\";\nimport type { FolderAccessLevel, FolderPermission } from \"~/flp/flp.types.js\";\n\nexport class DefaultPermissionsMerger {\n    static merge(\n        identity: SecurityIdentity,\n        identityPermissions: SecurityPermission[],\n        folderPermissions: FolderPermission[]\n    ): FolderPermission[] {\n        // If the user has full access permission, add a specific \"owner\" permission to the list.\n        // This ensures the user has complete control over the folder.\n        const hasFullAccess = identityPermissions.some(p => p.name === \"*\");\n        if (hasFullAccess) {\n            return [\n                {\n                    target: `admin:${identity.id}`,\n                    level: \"owner\" as FolderAccessLevel,\n                    inheritedFrom: \"role:full-access\"\n                },\n\n                // Remove any permissions related to the full access user,\n                // as these are always superseded by the \"owner\" permission defined above.\n                ...folderPermissions.filter(p => p.target !== `admin:${identity.id}`)\n            ];\n        }\n\n        if (folderPermissions.length === 0) {\n            // No permissions provided. This means the folder is public.\n            // Add a specific \"public\" permission to the list to ensure the folder is accessible to everyone.\n            return [\n                {\n                    target: `admin:${identity.id}`,\n                    level: \"public\" as FolderAccessLevel,\n                    inheritedFrom: \"public\"\n                }\n            ];\n        }\n\n        // If there are multiple `admin:${identity.id}` permissions in the array,\n        // we need to pick the one with the highest access level. We also remove\n        // other permissions for the same identity.\n\n        // Get permissions related to the current identity (admin).\n        const currentAdminPermissions = folderPermissions.filter(\n            p => p.target === `admin:${identity.id}`\n        );\n\n        if (currentAdminPermissions.length === 0) {\n            return folderPermissions;\n        }\n\n        const noAccessPermission = currentAdminPermissions.find(\n            p => p.level === \"no-access\" && p.target === `admin:${identity.id}`\n        );\n\n        if (noAccessPermission) {\n            // If one of the permissions is `no-access`, then we can immediately return it. This is\n            // because `no-access` is the ultimate level of access, and no other permission can override it.\n            // Remove all permissions for the current identity and add the winning one.\n            const filteredPermissions = folderPermissions.filter(\n                p => p.target !== `admin:${identity.id}`\n            );\n\n            return [...filteredPermissions, noAccessPermission];\n        }\n\n        const [firstAdminPermission, ...restAdminPermissions] = currentAdminPermissions;\n\n        const resultPermission = restAdminPermissions.reduce((winner, current) => {\n            const winnerInherits = winner.inheritedFrom?.startsWith(\"parent:\");\n            const currentInherits = current.inheritedFrom?.startsWith(\"parent:\");\n\n            if (winnerInherits && !currentInherits) {\n                return current;\n            }\n            if (currentInherits && !winnerInherits) {\n                return winner;\n            }\n\n            // At this point, we're either comparing two permissions with `inheritedFrom` or two without it.\n            // In other words, we're now at a point where we start comparing the levels (owner > editor > viewer).\n            if (current.level === \"owner\") {\n                return current;\n            }\n\n            if (current.level === \"editor\" && winner.level === \"viewer\") {\n                return current;\n            }\n\n            return winner;\n        }, firstAdminPermission);\n\n        // Remove all permissions for the current identity and add the winning one.\n        return [\n            resultPermission,\n            ...folderPermissions.filter(p => p.target !== `admin:${identity.id}`)\n        ];\n    }\n}\n"],"mappings":"AAGA,OAAO,MAAMA,wBAAwB,CAAC;EAClC,OAAOC,KAAKA,CACRC,QAA0B,EAC1BC,mBAAyC,EACzCC,iBAAqC,EACnB;IAClB;IACA;IACA,MAAMC,aAAa,GAAGF,mBAAmB,CAACG,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,KAAK,GAAG,CAAC;IACnE,IAAIH,aAAa,EAAE;MACf,OAAO,CACH;QACII,MAAM,EAAE,SAASP,QAAQ,CAACQ,EAAE,EAAE;QAC9BC,KAAK,EAAE,OAA4B;QACnCC,aAAa,EAAE;MACnB,CAAC;MAED;MACA;MACA,GAAGR,iBAAiB,CAACS,MAAM,CAACN,CAAC,IAAIA,CAAC,CAACE,MAAM,KAAK,SAASP,QAAQ,CAACQ,EAAE,EAAE,CAAC,CACxE;IACL;IAEA,IAAIN,iBAAiB,CAACU,MAAM,KAAK,CAAC,EAAE;MAChC;MACA;MACA,OAAO,CACH;QACIL,MAAM,EAAE,SAASP,QAAQ,CAACQ,EAAE,EAAE;QAC9BC,KAAK,EAAE,QAA6B;QACpCC,aAAa,EAAE;MACnB,CAAC,CACJ;IACL;;IAEA;IACA;IACA;;IAEA;IACA,MAAMG,uBAAuB,GAAGX,iBAAiB,CAACS,MAAM,CACpDN,CAAC,IAAIA,CAAC,CAACE,MAAM,KAAK,SAASP,QAAQ,CAACQ,EAAE,EAC1C,CAAC;IAED,IAAIK,uBAAuB,CAACD,MAAM,KAAK,CAAC,EAAE;MACtC,OAAOV,iBAAiB;IAC5B;IAEA,MAAMY,kBAAkB,GAAGD,uBAAuB,CAACE,IAAI,CACnDV,CAAC,IAAIA,CAAC,CAACI,KAAK,KAAK,WAAW,IAAIJ,CAAC,CAACE,MAAM,KAAK,SAASP,QAAQ,CAACQ,EAAE,EACrE,CAAC;IAED,IAAIM,kBAAkB,EAAE;MACpB;MACA;MACA;MACA,MAAME,mBAAmB,GAAGd,iBAAiB,CAACS,MAAM,CAChDN,CAAC,IAAIA,CAAC,CAACE,MAAM,KAAK,SAASP,QAAQ,CAACQ,EAAE,EAC1C,CAAC;MAED,OAAO,CAAC,GAAGQ,mBAAmB,EAAEF,kBAAkB,CAAC;IACvD;IAEA,MAAM,CAACG,oBAAoB,EAAE,GAAGC,oBAAoB,CAAC,GAAGL,uBAAuB;IAE/E,MAAMM,gBAAgB,GAAGD,oBAAoB,CAACE,MAAM,CAAC,CAACC,MAAM,EAAEC,OAAO,KAAK;MACtE,MAAMC,cAAc,GAAGF,MAAM,CAACX,aAAa,EAAEc,UAAU,CAAC,SAAS,CAAC;MAClE,MAAMC,eAAe,GAAGH,OAAO,CAACZ,aAAa,EAAEc,UAAU,CAAC,SAAS,CAAC;MAEpE,IAAID,cAAc,IAAI,CAACE,eAAe,EAAE;QACpC,OAAOH,OAAO;MAClB;MACA,IAAIG,eAAe,IAAI,CAACF,cAAc,EAAE;QACpC,OAAOF,MAAM;MACjB;;MAEA;MACA;MACA,IAAIC,OAAO,CAACb,KAAK,KAAK,OAAO,EAAE;QAC3B,OAAOa,OAAO;MAClB;MAEA,IAAIA,OAAO,CAACb,KAAK,KAAK,QAAQ,IAAIY,MAAM,CAACZ,KAAK,KAAK,QAAQ,EAAE;QACzD,OAAOa,OAAO;MAClB;MAEA,OAAOD,MAAM;IACjB,CAAC,EAAEJ,oBAAoB,CAAC;;IAExB;IACA,OAAO,CACHE,gBAAgB,EAChB,GAAGjB,iBAAiB,CAACS,MAAM,CAACN,CAAC,IAAIA,CAAC,CAACE,MAAM,KAAK,SAASP,QAAQ,CAACQ,EAAE,EAAE,CAAC,CACxE;EACL;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissions.d.ts

@@ -0,0 +1,8 @@
+import type { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import type { IGetDefaultPermissions } from "./IGetDefaultPermissions.js";
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export declare class GetDefaultPermissions implements IGetDefaultPermissions {
+    private identityContext;
+    constructor(identityContext: IdentityContext.Interface);
+    execute(permissions: FolderPermission[]): Promise<FolderPermission[]>;
+}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissions.js

@@ -0,0 +1,13 @@
+import { DefaultPermissionsMerger } from "./DefaultPermissionsMerger.js";
+export class GetDefaultPermissions {
+  constructor(identityContext) {
+    this.identityContext = identityContext;
+  }
+  async execute(permissions) {
+    const identity = this.identityContext.getIdentity();
+    const identityPermissions = await this.identityContext.listPermissions();
+    return DefaultPermissionsMerger.merge(identity, identityPermissions, permissions);
+  }
+}
+
+//# sourceMappingURL=GetDefaultPermissions.js.map

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DefaultPermissionsMerger","GetDefaultPermissions","constructor","identityContext","execute","permissions","identity","getIdentity","identityPermissions","listPermissions","merge"],"sources":["GetDefaultPermissions.ts"],"sourcesContent":["import type { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport type { IGetDefaultPermissions } from \"./IGetDefaultPermissions.js\";\nimport type { FolderPermission } from \"~/flp/flp.types.js\";\nimport { DefaultPermissionsMerger } from \"./DefaultPermissionsMerger.js\";\n\nexport class GetDefaultPermissions implements IGetDefaultPermissions {\n    constructor(private identityContext: IdentityContext.Interface) {}\n\n    async execute(permissions: FolderPermission[]) {\n        const identity = this.identityContext.getIdentity();\n        const identityPermissions = await this.identityContext.listPermissions();\n\n        return DefaultPermissionsMerger.merge(identity, identityPermissions, permissions);\n    }\n}\n"],"mappings":"AAGA,SAASA,wBAAwB;AAEjC,OAAO,MAAMC,qBAAqB,CAAmC;EACjEC,WAAWA,CAASC,eAA0C,EAAE;IAAA,KAA5CA,eAA0C,GAA1CA,eAA0C;EAAG;EAEjE,MAAMC,OAAOA,CAACC,WAA+B,EAAE;IAC3C,MAAMC,QAAQ,GAAG,IAAI,CAACH,eAAe,CAACI,WAAW,CAAC,CAAC;IACnD,MAAMC,mBAAmB,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,eAAe,CAAC,CAAC;IAExE,OAAOT,wBAAwB,CAACU,KAAK,CAACJ,QAAQ,EAAEE,mBAAmB,EAAEH,WAAW,CAAC;EACrF;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissionsWithTeams.d.ts

@@ -0,0 +1,11 @@
+import type { IGetDefaultPermissions } from "./IGetDefaultPermissions.js";
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+import type { IdentityContext } from "@webiny/api-core/features/IdentityContext";
+import { ListUserTeamsUseCase } from "@webiny/api-core/features/ListUserTeams";
+export declare class GetDefaultPermissionsWithTeams implements IGetDefaultPermissions {
+    private identityContext;
+    private listUserTeamsUseCase;
+    private decoretee;
+    constructor(identityContext: IdentityContext.Interface, listUserTeamsUseCase: ListUserTeamsUseCase.Interface, decoretee: IGetDefaultPermissions);
+    execute(originalPermissions: FolderPermission[]): Promise<FolderPermission[]>;
+}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissionsWithTeams.js

@@ -0,0 +1,38 @@
+export class GetDefaultPermissionsWithTeams {
+  constructor(identityContext, listUserTeamsUseCase, decoretee) {
+    this.identityContext = identityContext;
+    this.listUserTeamsUseCase = listUserTeamsUseCase;
+    this.decoretee = decoretee;
+  }
+  async execute(originalPermissions) {
+    /**
+     * Retrieves the list of teams the current identity belongs to and checks if any of these teams
+     * have permissions for the folder. If a team has permissions, the current identity is granted
+     * the same permissions, inheriting them from the team.
+     */
+    const identity = this.identityContext.getIdentity();
+
+    // Get teams for current identity
+    const listTeamsResult = await this.listUserTeamsUseCase.execute(identity.id);
+    const identityTeams = listTeamsResult.isOk() ? listTeamsResult.value : [];
+    const permissions = [...originalPermissions]; // Clone the original permissions to avoid mutation.
+
+    if (identity && identityTeams.length) {
+      for (const identityTeam of identityTeams) {
+        // Check if the team has permissions for the folder.
+        const teamPermission = permissions.find(p => p.target === `team:${identityTeam.slug}`);
+        if (teamPermission) {
+          // Grant the current identity the same permissions as the team, marking them as inherited.
+          permissions.push({
+            target: `admin:${identity.id}`,
+            level: teamPermission.level,
+            inheritedFrom: "team:" + identityTeam.slug
+          });
+        }
+      }
+    }
+    return await this.decoretee.execute(permissions);
+  }
+}
+
+//# sourceMappingURL=GetDefaultPermissionsWithTeams.js.map

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissionsWithTeams.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["GetDefaultPermissionsWithTeams","constructor","identityContext","listUserTeamsUseCase","decoretee","execute","originalPermissions","identity","getIdentity","listTeamsResult","id","identityTeams","isOk","value","permissions","length","identityTeam","teamPermission","find","p","target","slug","push","level","inheritedFrom"],"sources":["GetDefaultPermissionsWithTeams.ts"],"sourcesContent":["import type { IGetDefaultPermissions } from \"./IGetDefaultPermissions.js\";\nimport type { FolderPermission } from \"~/flp/flp.types.js\";\nimport type { IdentityContext } from \"@webiny/api-core/features/IdentityContext\";\nimport { ListUserTeamsUseCase } from \"@webiny/api-core/features/ListUserTeams\";\nimport type { Team } from \"@webiny/api-core/types/security.js\";\n\nexport class GetDefaultPermissionsWithTeams implements IGetDefaultPermissions {\n    private identityContext: IdentityContext.Interface;\n    private listUserTeamsUseCase: ListUserTeamsUseCase.Interface;\n    private decoretee: IGetDefaultPermissions;\n\n    constructor(\n        identityContext: IdentityContext.Interface,\n        listUserTeamsUseCase: ListUserTeamsUseCase.Interface,\n        decoretee: IGetDefaultPermissions\n    ) {\n        this.identityContext = identityContext;\n        this.listUserTeamsUseCase = listUserTeamsUseCase;\n        this.decoretee = decoretee;\n    }\n\n    async execute(originalPermissions: FolderPermission[]) {\n        /**\n         * Retrieves the list of teams the current identity belongs to and checks if any of these teams\n         * have permissions for the folder. If a team has permissions, the current identity is granted\n         * the same permissions, inheriting them from the team.\n         */\n        const identity = this.identityContext.getIdentity();\n\n        // Get teams for current identity\n        const listTeamsResult = await this.listUserTeamsUseCase.execute(identity.id);\n        const identityTeams: Team[] = listTeamsResult.isOk() ? listTeamsResult.value : [];\n\n        const permissions = [...originalPermissions]; // Clone the original permissions to avoid mutation.\n\n        if (identity && identityTeams.length) {\n            for (const identityTeam of identityTeams) {\n                // Check if the team has permissions for the folder.\n                const teamPermission = permissions.find(\n                    p => p.target === `team:${identityTeam.slug}`\n                );\n\n                if (teamPermission) {\n                    // Grant the current identity the same permissions as the team, marking them as inherited.\n                    permissions.push({\n                        target: `admin:${identity.id}`,\n                        level: teamPermission.level,\n                        inheritedFrom: \"team:\" + identityTeam.slug\n                    });\n                }\n            }\n        }\n\n        return await this.decoretee.execute(permissions);\n    }\n}\n"],"mappings":"AAMA,OAAO,MAAMA,8BAA8B,CAAmC;EAK1EC,WAAWA,CACPC,eAA0C,EAC1CC,oBAAoD,EACpDC,SAAiC,EACnC;IACE,IAAI,CAACF,eAAe,GAAGA,eAAe;IACtC,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,SAAS,GAAGA,SAAS;EAC9B;EAEA,MAAMC,OAAOA,CAACC,mBAAuC,EAAE;IACnD;AACR;AACA;AACA;AACA;IACQ,MAAMC,QAAQ,GAAG,IAAI,CAACL,eAAe,CAACM,WAAW,CAAC,CAAC;;IAEnD;IACA,MAAMC,eAAe,GAAG,MAAM,IAAI,CAACN,oBAAoB,CAACE,OAAO,CAACE,QAAQ,CAACG,EAAE,CAAC;IAC5E,MAAMC,aAAqB,GAAGF,eAAe,CAACG,IAAI,CAAC,CAAC,GAAGH,eAAe,CAACI,KAAK,GAAG,EAAE;IAEjF,MAAMC,WAAW,GAAG,CAAC,GAAGR,mBAAmB,CAAC,CAAC,CAAC;;IAE9C,IAAIC,QAAQ,IAAII,aAAa,CAACI,MAAM,EAAE;MAClC,KAAK,MAAMC,YAAY,IAAIL,aAAa,EAAE;QACtC;QACA,MAAMM,cAAc,GAAGH,WAAW,CAACI,IAAI,CACnCC,CAAC,IAAIA,CAAC,CAACC,MAAM,KAAK,QAAQJ,YAAY,CAACK,IAAI,EAC/C,CAAC;QAED,IAAIJ,cAAc,EAAE;UAChB;UACAH,WAAW,CAACQ,IAAI,CAAC;YACbF,MAAM,EAAE,SAASb,QAAQ,CAACG,EAAE,EAAE;YAC9Ba,KAAK,EAAEN,cAAc,CAACM,KAAK;YAC3BC,aAAa,EAAE,OAAO,GAAGR,YAAY,CAACK;UAC1C,CAAC,CAAC;QACN;MACJ;IACJ;IAEA,OAAO,MAAM,IAAI,CAACjB,SAAS,CAACC,OAAO,CAACS,WAAW,CAAC;EACpD;AACJ","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/IGetDefaultPermissions.d.ts

@@ -0,0 +1,4 @@
+import type { FolderPermission } from "../../../../../flp/flp.types.js";
+export interface IGetDefaultPermissions {
+    execute: (permissions: FolderPermission[]) => Promise<FolderPermission[]>;
+}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/IGetDefaultPermissions.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=IGetDefaultPermissions.js.map

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/IGetDefaultPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["IGetDefaultPermissions.ts"],"sourcesContent":["import type { FolderPermission } from \"~/flp/flp.types.js\";\n\nexport interface IGetDefaultPermissions {\n    execute: (permissions: FolderPermission[]) => Promise<FolderPermission[]>;\n}\n"],"mappings":"","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/index.d.ts

@@ -0,0 +1,3 @@
+export type * from "./IGetDefaultPermissions.js";
+export * from "./GetDefaultPermissions.js";
+export * from "./GetDefaultPermissionsWithTeams.js";

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/index.js

@@ -0,0 +1,4 @@
+export * from "./GetDefaultPermissions.js";
+export * from "./GetDefaultPermissionsWithTeams.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export type * from \"./IGetDefaultPermissions.js\";\nexport * from \"./GetDefaultPermissions.js\";\nexport * from \"./GetDefaultPermissionsWithTeams.js\";\n"],"mappings":"AACA;AACA","ignoreList":[]}

package/features/flp/FolderLevelPermissions/useCases/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./CanAccessFolder/index.js";
+export * from "./CanAccessFolderContent/index.js";
+export * from "./CanCreateFolderInRoot/index.js";
+export * from "./CheckNotInheritedPermissions/index.js";
+export * from "./GetDefaultPermissions/index.js";

package/features/flp/FolderLevelPermissions/useCases/index.js

@@ -0,0 +1,7 @@
+export * from "./CanAccessFolder/index.js";
+export * from "./CanAccessFolderContent/index.js";
+export * from "./CanCreateFolderInRoot/index.js";
+export * from "./CheckNotInheritedPermissions/index.js";
+export * from "./GetDefaultPermissions/index.js";
+
+//# sourceMappingURL=index.js.map

package/features/flp/FolderLevelPermissions/useCases/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./CanAccessFolder/index.js\";\nexport * from \"./CanAccessFolderContent/index.js\";\nexport * from \"./CanCreateFolderInRoot/index.js\";\nexport * from \"./CheckNotInheritedPermissions/index.js\";\nexport * from \"./GetDefaultPermissions/index.js\";\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA","ignoreList":[]}

package/features/flp/GetFlp/GetFlpUseCase.d.ts

@@ -0,0 +1,7 @@
+import type { GetFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
+import type { AcoFolderLevelPermissionsCrud, FolderLevelPermission } from "../../../flp/flp.types.js";
+export declare class GetFlpUseCase implements UseCaseAbstraction.Interface {
+    private readonly get;
+    constructor(get: AcoFolderLevelPermissionsCrud["get"]);
+    execute(id: string): Promise<FolderLevelPermission | null>;
+}