@webiny/api-aco 0.0.0-unstable.de38392959 → 0.0.0-unstable.df7a8bb475

package/utils/createOperationsWrapper.d.ts

@@ -1,5 +1,5 @@
-import { CreateAcoStorageOperationsParams } from "../createAcoStorageOperations";
-import { CmsModel } from "@webiny/api-headless-cms/types";
+import type { CreateAcoStorageOperationsParams } from "../createAcoStorageOperations.js";
+import type { CmsModel } from "@webiny/api-headless-cms/types/index.js";
 interface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {
     modelName: string;
 }

package/utils/createOperationsWrapper.js

@@ -1,31 +1,22 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createOperationsWrapper = void 0;
-var _error = _interopRequireDefault(require("@webiny/error"));
-const createOperationsWrapper = params => {
+import WebinyError from "@webiny/error";
+export const createOperationsWrapper = params => {
   const {
-    cms,
     security,
+    cms,
     modelName
   } = params;
   const withModel = async cb => {
-    return security.withoutAuthorization(async () => {
-      const model = await cms.getModel(modelName);
-      if (!model) {
-        throw new _error.default(`Could not find "${modelName}" model.`, "MODEL_NOT_FOUND_ERROR");
-      }
-      const result = await cb(model);
-      return result;
+    const model = await security.withoutAuthorization(() => {
+      return cms.getModel(modelName);
     });
+    if (!model) {
+      throw new WebinyError(`Could not find "${modelName}" model.`, "MODEL_NOT_FOUND_ERROR");
+    }
+    return cb(model);
   };
   return {
     withModel
   };
 };
-exports.createOperationsWrapper = createOperationsWrapper;
 
 //# sourceMappingURL=createOperationsWrapper.js.map

package/utils/createOperationsWrapper.js.map

@@ -1 +1 @@
-{"version":3,"names":["_error","_interopRequireDefault","require","createOperationsWrapper","params","cms","security","modelName","withModel","cb","withoutAuthorization","model","getModel","WebinyError","result","exports"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations\";\nimport { CmsModel } from \"@webiny/api-headless-cms/types\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { cms, security, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        return security.withoutAuthorization(async () => {\n            const model = await cms.getModel(modelName);\n\n            if (!model) {\n                throw new WebinyError(\n                    `Could not find \"${modelName}\" model.`,\n                    \"MODEL_NOT_FOUND_ERROR\"\n                );\n            }\n\n            const result = await cb(model);\n\n            return result;\n        });\n    };\n\n    return {\n        withModel\n    };\n};\n"],"mappings":";;;;;;;AAEA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAMO,MAAMC,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,GAAG;IAAEC,QAAQ;IAAEC;EAAU,CAAC,GAAGH,MAAM;EAE3C,MAAMI,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,OAAOH,QAAQ,CAACI,oBAAoB,CAAC,YAAY;MAC7C,MAAMC,KAAK,GAAG,MAAMN,GAAG,CAACO,QAAQ,CAACL,SAAS,CAAC;MAE3C,IAAI,CAACI,KAAK,EAAE;QACR,MAAM,IAAIE,cAAW,CAChB,mBAAkBN,SAAU,UAAS,EACtC,uBACJ,CAAC;MACL;MAEA,MAAMO,MAAM,GAAG,MAAML,EAAE,CAACE,KAAK,CAAC;MAE9B,OAAOG,MAAM;IACjB,CAAC,CAAC;EACN,CAAC;EAED,OAAO;IACHN;EACJ,CAAC;AACL,CAAC;AAACO,OAAA,CAAAZ,uBAAA,GAAAA,uBAAA"}
+{"version":3,"names":["WebinyError","createOperationsWrapper","params","security","cms","modelName","withModel","cb","model","withoutAuthorization","getModel"],"sources":["createOperationsWrapper.ts"],"sourcesContent":["import type { CreateAcoStorageOperationsParams } from \"~/createAcoStorageOperations.js\";\nimport type { CmsModel } from \"@webiny/api-headless-cms/types/index.js\";\nimport WebinyError from \"@webiny/error\";\n\ninterface CreateOperationsWrapperParams extends CreateAcoStorageOperationsParams {\n    modelName: string;\n}\n\nexport const createOperationsWrapper = (params: CreateOperationsWrapperParams) => {\n    const { security, cms, modelName } = params;\n\n    const withModel = async <TResult>(\n        cb: (model: CmsModel) => Promise<TResult>\n    ): Promise<TResult> => {\n        const model = await security.withoutAuthorization(() => {\n            return cms.getModel(modelName);\n        });\n\n        if (!model) {\n            throw new WebinyError(`Could not find \"${modelName}\" model.`, \"MODEL_NOT_FOUND_ERROR\");\n        }\n\n        return cb(model);\n    };\n\n    return { withModel };\n};\n"],"mappings":"AAEA,OAAOA,WAAW,MAAM,eAAe;AAMvC,OAAO,MAAMC,uBAAuB,GAAIC,MAAqC,IAAK;EAC9E,MAAM;IAAEC,QAAQ;IAAEC,GAAG;IAAEC;EAAU,CAAC,GAAGH,MAAM;EAE3C,MAAMI,SAAS,GAAG,MACdC,EAAyC,IACtB;IACnB,MAAMC,KAAK,GAAG,MAAML,QAAQ,CAACM,oBAAoB,CAAC,MAAM;MACpD,OAAOL,GAAG,CAACM,QAAQ,CAACL,SAAS,CAAC;IAClC,CAAC,CAAC;IAEF,IAAI,CAACG,KAAK,EAAE;MACR,MAAM,IAAIR,WAAW,CAAC,mBAAmBK,SAAS,UAAU,EAAE,uBAAuB,CAAC;IAC1F;IAEA,OAAOE,EAAE,CAACC,KAAK,CAAC;EACpB,CAAC;EAED,OAAO;IAAEF;EAAU,CAAC;AACxB,CAAC","ignoreList":[]}

package/utils/decorators/CmsEntriesCrudDecorators.d.ts

@@ -1,5 +1,5 @@
-import { AcoContext } from "../../types";
-declare type Context = Pick<AcoContext, "aco" | "cms">;
+import type { AcoContext } from "../../types.js";
+type Context = AcoContext;
 interface EntryManagerCrudDecoratorsParams {
     context: Context;
 }

package/utils/decorators/CmsEntriesCrudDecorators.js

@@ -1,14 +1,11 @@
-"use strict";
+// @ts-nocheck Being removed
 
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.CmsEntriesCrudDecorators = void 0;
-var _where = require("./where");
-var _constants = require("./constants");
-var _filterEntriesByFolderFactory = require("./filterEntriesByFolderFactory");
-var _createFolderType = require("./createFolderType");
-class CmsEntriesCrudDecorators {
+import { ROOT_FOLDER } from "../../constants.js";
+import { ListEntriesFactory } from "./ListEntriesFactory.js";
+import { FilterEntriesByFolderFactory } from "./FilterEntriesByFolderFactory.js";
+import { decorateIfModelAuthorizationEnabled } from "./decorateIfModelAuthorizationEnabled.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+export class CmsEntriesCrudDecorators {
   constructor({
     context
   }) {
@@ -16,175 +13,194 @@ class CmsEntriesCrudDecorators {
   }
   decorate() {
     const context = this.context;
-    const folderLevelPermissions = context.aco.folderLevelPermissions;
-    const filterEntriesByFolder = (0, _filterEntriesByFolderFactory.filterEntriesByFolderFactory)(context, folderLevelPermissions);
-    const originalCmsListEntries = context.cms.listEntries.bind(context.cms);
-    context.cms.listEntries = async (model, params) => {
-      const folderType = (0, _createFolderType.createFolderType)(model);
-      const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);
-      const where = (0, _where.createWhere)({
+    const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);
+    const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);
+    const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);
+    decorateIfModelAuthorizationEnabled(context, "listEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
         model,
-        where: params.where,
-        folders
+        initialParams
       });
-      return originalCmsListEntries(model, {
-        ...params,
-        where
+    });
+    decorateIfModelAuthorizationEnabled(context, "listLatestEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "listPublishedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
       });
-    };
-    const originalCmsGetEntry = context.cms.getEntry.bind(context.cms);
-    context.cms.getEntry = async (model, params) => {
-      const entry = await originalCmsGetEntry(model, params);
+    });
+    decorateIfModelAuthorizationEnabled(context, "listDeletedEntries", async (...allParams) => {
+      const [decoratee, model, initialParams] = allParams;
+      return await listEntriesHandler.execute({
+        decoratee,
+        model,
+        initialParams
+      });
+    });
+    decorateIfModelAuthorizationEnabled(context, "getEntry", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+      if (!folderId || folderId === ROOT_FOLDER) {
         return entry;
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "r"
       });
       return entry;
-    };
-    const originalCmsGetEntryById = context.cms.getEntryById.bind(context.cms);
-    context.cms.getEntryById = async (model, params) => {
-      const entry = await originalCmsGetEntryById(model, params);
+    });
+    decorateIfModelAuthorizationEnabled(context, "getEntryById", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+      if (!folderId || folderId === ROOT_FOLDER) {
         return entry;
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "r"
       });
       return entry;
-    };
-    const originalGetLatestEntriesByIds = context.cms.getLatestEntriesByIds.bind(context.cms);
-    context.cms.getLatestEntriesByIds = async (model, ids) => {
-      const entries = await originalGetLatestEntriesByIds(model, ids);
-      return filterEntriesByFolder(model, entries);
-    };
-    const originalGetPublishedEntriesByIds = context.cms.getPublishedEntriesByIds.bind(context.cms);
-    context.cms.getPublishedEntriesByIds = async (model, ids) => {
-      const entries = await originalGetPublishedEntriesByIds(model, ids);
-      return filterEntriesByFolder(model, entries);
-    };
-    const originalCmsCreateEntry = context.cms.createEntry.bind(context.cms);
-    context.cms.createEntry = async (model, params, options) => {
+    });
+    decorateIfModelAuthorizationEnabled(context, "getLatestEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    decorateIfModelAuthorizationEnabled(context, "getPublishedEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
+      return filterEntriesByFolder.execute(entries);
+    });
+    decorateIfModelAuthorizationEnabled(context, "createEntry", async (...allParams) => {
+      const [decoratee, model, params, options] = allParams;
       const folderId = params.wbyAco_location?.folderId || params.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsCreateEntry(model, params, options);
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, params, options);
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "w"
       });
-      return originalCmsCreateEntry(model, params, options);
-    };
-    const originalCmsCreateFromEntry = context.cms.createEntryRevisionFrom.bind(context.cms);
-    context.cms.createEntryRevisionFrom = async (model, id, input, options) => {
+      return decoratee(model, params, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "createEntryRevisionFrom", async (...allParams) => {
+      const [decoratee, model, id, input, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsCreateFromEntry(model, id, input, options);
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, input, options);
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "w"
       });
-      return originalCmsCreateFromEntry(model, id, input, options);
-    };
-    const originalCmsUpdateEntry = context.cms.updateEntry.bind(context.cms);
-    context.cms.updateEntry = async (model, id, input, meta, options) => {
+      return decoratee(model, id, input, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "updateEntry", async (...allParams) => {
+      const [decoratee, model, id, input, meta, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsUpdateEntry(model, id, input, meta, options);
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, input, meta, options);
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "w"
       });
-      return originalCmsUpdateEntry(model, id, input, meta, options);
-    };
-    const originalCmsDeleteEntry = context.cms.deleteEntry.bind(context.cms);
-    context.cms.deleteEntry = async (model, id, options) => {
+      return decoratee(model, id, input, meta, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "deleteEntry", async (...allParams) => {
+      const [decoratee, model, id, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(model, {
         id
       });
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsDeleteEntry(model, id, options);
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id, options);
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "d"
       });
-      return originalCmsDeleteEntry(model, id, options);
-    };
-    const originalCmsDeleteEntryRevision = context.cms.deleteEntryRevision.bind(context.cms);
-    context.cms.deleteEntryRevision = async (model, id) => {
+      return decoratee(model, id, options);
+    });
+    decorateIfModelAuthorizationEnabled(context, "deleteEntryRevision", async (...allParams) => {
+      const [decoratee, model, id] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
-      if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsDeleteEntryRevision(model, id);
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return decoratee(model, id);
       }
-      const folder = await context.aco.folder.get(folderId);
+      const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
-        folder,
+        permissions,
         rwd: "d"
       });
-      return originalCmsDeleteEntryRevision(model, id);
-    };
-    const originalCmsMoveEntry = context.cms.moveEntry.bind(context.cms);
-    context.cms.moveEntry = async (model, id, targetFolderId) => {
+      return decoratee(model, id);
+    });
+    decorateIfModelAuthorizationEnabled(context, "moveEntry", async (...allParams) => {
+      const [decoratee, model, id, targetFolderId] = allParams;
+
       /**
        * First we need to check if user has access to the entries existing folder.
        */
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
-      const folderId = entry?.location?.folderId || _constants.ROOT_FOLDER;
+      const folderId = entry?.location?.folderId || ROOT_FOLDER;
       /**
        * If the entry is in the same folder we are trying to move it to, just continue.
        */
       if (folderId === targetFolderId) {
-        return originalCmsMoveEntry(model, id, targetFolderId);
-      } else if (folderId !== _constants.ROOT_FOLDER) {
+        return decoratee(model, id, targetFolderId);
+      } else if (folderId !== ROOT_FOLDER) {
         /**
          * If entry current folder is not a root, check for access
          */
-        const folder = await context.aco.folder.get(folderId);
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
         await folderLevelPermissions.ensureCanAccessFolderContent({
-          folder,
+          permissions,
           rwd: "w"
         });
       }
       /**
        * If target folder is not a ROOT_FOLDER, check for access.
        */
-      if (targetFolderId !== _constants.ROOT_FOLDER) {
-        const folder = await context.aco.folder.get(targetFolderId);
+      if (targetFolderId !== ROOT_FOLDER) {
+        const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);
         await folderLevelPermissions.ensureCanAccessFolderContent({
-          folder,
+          permissions,
           rwd: "w"
         });
       }
-      return originalCmsMoveEntry(model, id, targetFolderId);
-    };
+      return decoratee(model, id, targetFolderId);
+    });
   }
 }
-exports.CmsEntriesCrudDecorators = CmsEntriesCrudDecorators;
 
 //# sourceMappingURL=CmsEntriesCrudDecorators.js.map

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -1 +1 @@
-{"version":3,"names":["_where","require","_constants","_filterEntriesByFolderFactory","_createFolderType","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","filterEntriesByFolderFactory","originalCmsListEntries","cms","listEntries","bind","model","params","folderType","createFolderType","folders","listAllFoldersWithPermissions","where","createWhere","originalCmsGetEntry","getEntry","entry","folderId","location","ROOT_FOLDER","folder","get","ensureCanAccessFolderContent","rwd","originalCmsGetEntryById","getEntryById","originalGetLatestEntriesByIds","getLatestEntriesByIds","ids","entries","originalGetPublishedEntriesByIds","getPublishedEntriesByIds","originalCmsCreateEntry","createEntry","options","wbyAco_location","originalCmsCreateFromEntry","createEntryRevisionFrom","id","input","storageOperations","getRevisionById","originalCmsUpdateEntry","updateEntry","meta","originalCmsDeleteEntry","deleteEntry","getLatestRevisionByEntryId","originalCmsDeleteEntryRevision","deleteEntryRevision","originalCmsMoveEntry","moveEntry","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import { AcoContext } from \"~/types\";\nimport { createWhere } from \"./where\";\nimport { ROOT_FOLDER } from \"./constants\";\nimport { filterEntriesByFolderFactory } from \"./filterEntriesByFolderFactory\";\nimport { createFolderType } from \"./createFolderType\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = filterEntriesByFolderFactory(context, folderLevelPermissions);\n\n        const originalCmsListEntries = context.cms.listEntries.bind(context.cms);\n        context.cms.listEntries = async (model, params) => {\n            const folderType = createFolderType(model);\n            const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);\n\n            const where = createWhere({\n                model,\n                where: params.where,\n                folders\n            });\n            return originalCmsListEntries(model, {\n                ...params,\n                where\n            });\n        };\n\n        const originalCmsGetEntry = context.cms.getEntry.bind(context.cms);\n        context.cms.getEntry = async (model, params) => {\n            const entry = await originalCmsGetEntry(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n\n            return entry;\n        };\n\n        const originalCmsGetEntryById = context.cms.getEntryById.bind(context.cms);\n        context.cms.getEntryById = async (model, params) => {\n            const entry = await originalCmsGetEntryById(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n            return entry;\n        };\n\n        const originalGetLatestEntriesByIds = context.cms.getLatestEntriesByIds.bind(context.cms);\n        context.cms.getLatestEntriesByIds = async (model, ids) => {\n            const entries = await originalGetLatestEntriesByIds(model, ids);\n\n            return filterEntriesByFolder(model, entries);\n        };\n\n        const originalGetPublishedEntriesByIds = context.cms.getPublishedEntriesByIds.bind(\n            context.cms\n        );\n        context.cms.getPublishedEntriesByIds = async (model, ids) => {\n            const entries = await originalGetPublishedEntriesByIds(model, ids);\n            return filterEntriesByFolder(model, entries);\n        };\n\n        const originalCmsCreateEntry = context.cms.createEntry.bind(context.cms);\n        context.cms.createEntry = async (model, params, options) => {\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsCreateEntry(model, params, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsCreateEntry(model, params, options);\n        };\n\n        const originalCmsCreateFromEntry = context.cms.createEntryRevisionFrom.bind(context.cms);\n        context.cms.createEntryRevisionFrom = async (model, id, input, options) => {\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsCreateFromEntry(model, id, input, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsCreateFromEntry(model, id, input, options);\n        };\n\n        const originalCmsUpdateEntry = context.cms.updateEntry.bind(context.cms);\n        context.cms.updateEntry = async (model, id, input, meta, options) => {\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsUpdateEntry(model, id, input, meta, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsUpdateEntry(model, id, input, meta, options);\n        };\n\n        const originalCmsDeleteEntry = context.cms.deleteEntry.bind(context.cms);\n        context.cms.deleteEntry = async (model, id, options) => {\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsDeleteEntry(model, id, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return originalCmsDeleteEntry(model, id, options);\n        };\n\n        const originalCmsDeleteEntryRevision = context.cms.deleteEntryRevision.bind(context.cms);\n        context.cms.deleteEntryRevision = async (model, id) => {\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsDeleteEntryRevision(model, id);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return originalCmsDeleteEntryRevision(model, id);\n        };\n\n        const originalCmsMoveEntry = context.cms.moveEntry.bind(context.cms);\n        context.cms.moveEntry = async (model, id, targetFolderId) => {\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return originalCmsMoveEntry(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const folder = await context.aco.folder.get(targetFolderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n\n            return originalCmsMoveEntry(model, id, targetFolderId);\n        };\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,iBAAA,GAAAH,OAAA;AAQO,MAAMI,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAAC,0DAA4B,EAACL,OAAO,EAAEE,sBAAsB,CAAC;IAE3F,MAAMI,sBAAsB,GAAGN,OAAO,CAACO,GAAG,CAACC,WAAW,CAACC,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxEP,OAAO,CAACO,GAAG,CAACC,WAAW,GAAG,OAAOE,KAAK,EAAEC,MAAM,KAAK;MAC/C,MAAMC,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CAACH,UAAU,CAAC;MAEtF,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,CAACK,KAAK;QACnBF;MACJ,CAAC,CAAC;MACF,OAAOR,sBAAsB,CAACI,KAAK,EAAE;QACjC,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CAAC;IAED,MAAME,mBAAmB,GAAGlB,OAAO,CAACO,GAAG,CAACY,QAAQ,CAACV,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IAClEP,OAAO,CAACO,GAAG,CAACY,QAAQ,GAAG,OAAOT,KAAK,EAAEC,MAAM,KAAK;MAC5C,MAAMS,KAAK,GAAG,MAAMF,mBAAmB,CAACR,KAAK,EAAEC,MAAM,CAAC;MAEtD,MAAMU,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC;IAED,MAAMQ,uBAAuB,GAAG5B,OAAO,CAACO,GAAG,CAACsB,YAAY,CAACpB,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IAC1EP,OAAO,CAACO,GAAG,CAACsB,YAAY,GAAG,OAAOnB,KAAK,EAAEC,MAAM,KAAK;MAChD,MAAMS,KAAK,GAAG,MAAMQ,uBAAuB,CAAClB,KAAK,EAAEC,MAAM,CAAC;MAE1D,MAAMU,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC;IAED,MAAMU,6BAA6B,GAAG9B,OAAO,CAACO,GAAG,CAACwB,qBAAqB,CAACtB,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACzFP,OAAO,CAACO,GAAG,CAACwB,qBAAqB,GAAG,OAAOrB,KAAK,EAAEsB,GAAG,KAAK;MACtD,MAAMC,OAAO,GAAG,MAAMH,6BAA6B,CAACpB,KAAK,EAAEsB,GAAG,CAAC;MAE/D,OAAO5B,qBAAqB,CAACM,KAAK,EAAEuB,OAAO,CAAC;IAChD,CAAC;IAED,MAAMC,gCAAgC,GAAGlC,OAAO,CAACO,GAAG,CAAC4B,wBAAwB,CAAC1B,IAAI,CAC9ET,OAAO,CAACO,GACZ,CAAC;IACDP,OAAO,CAACO,GAAG,CAAC4B,wBAAwB,GAAG,OAAOzB,KAAK,EAAEsB,GAAG,KAAK;MACzD,MAAMC,OAAO,GAAG,MAAMC,gCAAgC,CAACxB,KAAK,EAAEsB,GAAG,CAAC;MAClE,OAAO5B,qBAAqB,CAACM,KAAK,EAAEuB,OAAO,CAAC;IAChD,CAAC;IAED,MAAMG,sBAAsB,GAAGpC,OAAO,CAACO,GAAG,CAAC8B,WAAW,CAAC5B,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxEP,OAAO,CAACO,GAAG,CAAC8B,WAAW,GAAG,OAAO3B,KAAK,EAAEC,MAAM,EAAE2B,OAAO,KAAK;MACxD,MAAMjB,QAAQ,GAAGV,MAAM,CAAC4B,eAAe,EAAElB,QAAQ,IAAIV,MAAM,CAACW,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOa,sBAAsB,CAAC1B,KAAK,EAAEC,MAAM,EAAE2B,OAAO,CAAC;MACzD;MAEA,MAAMd,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOS,sBAAsB,CAAC1B,KAAK,EAAEC,MAAM,EAAE2B,OAAO,CAAC;IACzD,CAAC;IAED,MAAME,0BAA0B,GAAGxC,OAAO,CAACO,GAAG,CAACkC,uBAAuB,CAAChC,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxFP,OAAO,CAACO,GAAG,CAACkC,uBAAuB,GAAG,OAAO/B,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEL,OAAO,KAAK;MACvE,MAAMlB,KAAK,GAAG,MAAMpB,OAAO,CAACO,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAACnC,KAAK,EAAE;QAC7EgC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOiB,0BAA0B,CAAC9B,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEL,OAAO,CAAC;MAChE;MAEA,MAAMd,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOa,0BAA0B,CAAC9B,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEL,OAAO,CAAC;IAChE,CAAC;IAED,MAAMQ,sBAAsB,GAAG9C,OAAO,CAACO,GAAG,CAACwC,WAAW,CAACtC,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxEP,OAAO,CAACO,GAAG,CAACwC,WAAW,GAAG,OAAOrC,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,KAAK;MACjE,MAAMlB,KAAK,GAAG,MAAMpB,OAAO,CAACO,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAACnC,KAAK,EAAE;QAC7EgC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOuB,sBAAsB,CAACpC,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,CAAC;MAClE;MAEA,MAAMd,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOmB,sBAAsB,CAACpC,KAAK,EAAEgC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,CAAC;IAClE,CAAC;IAED,MAAMW,sBAAsB,GAAGjD,OAAO,CAACO,GAAG,CAAC2C,WAAW,CAACzC,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxEP,OAAO,CAACO,GAAG,CAAC2C,WAAW,GAAG,OAAOxC,KAAK,EAAEgC,EAAE,EAAEJ,OAAO,KAAK;MACpD,MAAMlB,KAAK,GAAG,MAAMpB,OAAO,CAACO,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACkB,0BAA0B,CAChFzC,KAAK,EACL;QACIgC;MACJ,CACJ,CAAC;MAED,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAO0B,sBAAsB,CAACvC,KAAK,EAAEgC,EAAE,EAAEJ,OAAO,CAAC;MACrD;MAEA,MAAMd,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOsB,sBAAsB,CAACvC,KAAK,EAAEgC,EAAE,EAAEJ,OAAO,CAAC;IACrD,CAAC;IAED,MAAMc,8BAA8B,GAAGpD,OAAO,CAACO,GAAG,CAAC8C,mBAAmB,CAAC5C,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACxFP,OAAO,CAACO,GAAG,CAAC8C,mBAAmB,GAAG,OAAO3C,KAAK,EAAEgC,EAAE,KAAK;MACnD,MAAMtB,KAAK,GAAG,MAAMpB,OAAO,CAACO,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAACnC,KAAK,EAAE;QAC7EgC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAO6B,8BAA8B,CAAC1C,KAAK,EAAEgC,EAAE,CAAC;MACpD;MAEA,MAAMlB,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOyB,8BAA8B,CAAC1C,KAAK,EAAEgC,EAAE,CAAC;IACpD,CAAC;IAED,MAAMY,oBAAoB,GAAGtD,OAAO,CAACO,GAAG,CAACgD,SAAS,CAAC9C,IAAI,CAACT,OAAO,CAACO,GAAG,CAAC;IACpEP,OAAO,CAACO,GAAG,CAACgD,SAAS,GAAG,OAAO7C,KAAK,EAAEgC,EAAE,EAAEc,cAAc,KAAK;MACzD;AACZ;AACA;MACY,MAAMpC,KAAK,GAAG,MAAMpB,OAAO,CAACO,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAACnC,KAAK,EAAE;QAC7EgC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKmC,cAAc,EAAE;QAC7B,OAAOF,oBAAoB,CAAC5C,KAAK,EAAEgC,EAAE,EAAEc,cAAc,CAAC;MAC1D,CAAC,MAAM,IAAInC,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;QACrD,MAAMnB,sBAAsB,CAACwB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAI6B,cAAc,KAAKjC,sBAAW,EAAE;QAChC,MAAMC,MAAM,GAAG,MAAMxB,OAAO,CAACG,GAAG,CAACqB,MAAM,CAACC,GAAG,CAAC+B,cAAc,CAAC;QAC3D,MAAMtD,sBAAsB,CAACwB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAO2B,oBAAoB,CAAC5C,KAAK,EAAEgC,EAAE,EAAEc,cAAc,CAAC;IAC1D,CAAC;EACL;AACJ;AAACC,OAAA,CAAA3D,wBAAA,GAAAA,wBAAA"}
+{"version":3,"names":["ROOT_FOLDER","ListEntriesFactory","FilterEntriesByFolderFactory","decorateIfModelAuthorizationEnabled","FolderLevelPermissions","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","container","resolve","filterEntriesByFolder","listEntriesHandler","allParams","decoratee","model","initialParams","execute","params","entry","folderId","location","permissions","getFolderLevelPermissions","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","cms","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["// @ts-nocheck Being removed\nimport type { AcoContext } from \"~/types.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory.js\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory.js\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\ntype Context = AcoContext;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.container.resolve(FolderLevelPermissions);\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"listLatestEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"listDeletedEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions =\n                    await folderLevelPermissions.getFolderLevelPermissions(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":"AAAA;;AAEA,SAASA,WAAW;AACpB,SAASC,kBAAkB;AAC3B,SAASC,4BAA4B;AACrC,SAASC,mCAAmC;AAC5C,SAASC,sBAAsB;AAQ/B,OAAO,MAAMC,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,SAAS,CAACC,OAAO,CAACP,sBAAsB,CAAC;IAEhF,MAAMQ,qBAAqB,GAAG,IAAIV,4BAA4B,CAACO,sBAAsB,CAAC;IACtF,MAAMI,kBAAkB,GAAG,IAAIZ,kBAAkB,CAACQ,sBAAsB,CAAC;IAEzEN,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAACI,OAAO,EAAE,mBAAmB,EAAE,OAAO,GAAGO,SAAS,KAAK;MACtF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAC/BI,OAAO,EACP,sBAAsB,EACtB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAEDd,mCAAmC,CAACI,OAAO,EAAE,oBAAoB,EAAE,OAAO,GAAGO,SAAS,KAAK;MACvF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMD,kBAAkB,CAACK,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEFd,mCAAmC,CAACI,OAAO,EAAE,UAAU,EAAE,OAAO,GAAGO,SAAS,KAAK;MAC7E,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOoB,KAAK;MAChB;MAEA,MAAMG,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAON,KAAK;IAChB,CAAC,CAAC;IAEFjB,mCAAmC,CAACI,OAAO,EAAE,cAAc,EAAE,OAAO,GAAGO,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOoB,KAAK;MAChB;MACA,MAAMG,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAON,KAAK;IAChB,CAAC,CAAC;IAEFjB,mCAAmC,CAC/BI,OAAO,EACP,uBAAuB,EACvB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEW,GAAG,CAAC,GAAGb,SAAS;MAEzC,MAAMc,OAAO,GAAG,MAAMb,SAAS,CAACC,KAAK,EAAEW,GAAG,CAAC;MAE3C,OAAOf,qBAAqB,CAACM,OAAO,CAACU,OAAO,CAAC;IACjD,CACJ,CAAC;IAEDzB,mCAAmC,CAC/BI,OAAO,EACP,0BAA0B,EAC1B,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEW,GAAG,CAAC,GAAGb,SAAS;MAEzC,MAAMc,OAAO,GAAG,MAAMb,SAAS,CAACC,KAAK,EAAEW,GAAG,CAAC;MAC3C,OAAOf,qBAAqB,CAACM,OAAO,CAACU,OAAO,CAAC;IACjD,CACJ,CAAC;IAEDzB,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC,GAAGf,SAAS;MACrD,MAAMO,QAAQ,GAAGF,MAAM,CAACW,eAAe,EAAET,QAAQ,IAAIF,MAAM,CAACG,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC;MAC5C;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEU,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF1B,mCAAmC,CAC/BI,OAAO,EACP,yBAAyB,EACzB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGf,SAAS;MAExD,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED1B,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC,GAAGf,SAAS;MAC9D,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC;MACrD;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEC,KAAK,EAAEI,IAAI,EAAEP,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF1B,mCAAmC,CAACI,OAAO,EAAE,aAAa,EAAE,OAAO,GAAGO,SAAS,KAAK;MAChF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC,GAAGf,SAAS;MAEjD,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACS,0BAA0B,CAChFrB,KAAK,EACL;QACIe;MACJ,CACJ,CAAC;MAED,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,WAAW,GAAG,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpF,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF1B,mCAAmC,CAC/BI,OAAO,EACP,qBAAqB,EACrB,OAAO,GAAGO,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,CAAC,GAAGjB,SAAS;MAExC,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKrB,WAAW,EAAE;QACvC,OAAOe,SAAS,CAACC,KAAK,EAAEe,EAAE,CAAC;MAC/B;MAEA,MAAMR,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;MACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED5B,mCAAmC,CAACI,OAAO,EAAE,WAAW,EAAE,OAAO,GAAGO,SAAS,KAAK;MAC9E,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC,GAAGxB,SAAS;;MAExD;AACZ;AACA;MACY,MAAMM,KAAK,GAAG,MAAMb,OAAO,CAAC0B,GAAG,CAACC,iBAAiB,CAACN,OAAO,CAACO,eAAe,CAACnB,KAAK,EAAE;QAC7Ee;MACJ,CAAC,CAAC;MAEF,MAAMV,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIrB,WAAW;MACzD;AACZ;AACA;MACY,IAAIqB,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAOvB,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKrB,WAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMuB,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;QACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIY,cAAc,KAAKtC,WAAW,EAAE;QAChC,MAAMuB,WAAW,GACb,MAAMd,sBAAsB,CAACe,yBAAyB,CAACH,QAAQ,CAAC;QACpE,MAAMZ,sBAAsB,CAACgB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOX,SAAS,CAACC,KAAK,EAAEe,EAAE,EAAEO,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,23 @@
+import { ROOT_FOLDER } from "../../constants.js";
+export class FilterEntriesByFolderFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+  }
+  async execute(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccessFolderContent ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ROOT_FOLDER","FilterEntriesByFolderFactory","constructor","folderLevelPermissions","execute","entries","results","Promise","all","map","entry","folderId","location","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","filter"],"sources":["FilterEntriesByFolderFactory.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types/index.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport { FolderLevelPermissions } from \"~/features/flp/FolderLevelPermissions/index.js\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions.Interface;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions.Interface) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions =\n                    await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"mappings":"AACA,SAASA,WAAW;AAGpB,OAAO,MAAMC,4BAA4B,CAAC;EAGtCC,WAAWA,CAACC,sBAAwD,EAAE;IAClE,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;EACxD;EAEA,MAAaC,OAAOA,CAACC,OAAmB,EAAuB;IAC3D,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,OAAO,CAACI,GAAG,CAAC,MAAMC,KAAK,IAAI;MACvB,MAAMC,QAAQ,GAAGD,KAAK,CAACE,QAAQ,EAAED,QAAQ;MACzC,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKX,WAAW,EAAE;QACvC,OAAOU,KAAK;MAChB;MAEA,MAAMG,WAAW,GACb,MAAM,IAAI,CAACV,sBAAsB,CAACW,yBAAyB,CAACH,QAAQ,CAAC;MACzE,MAAMI,sBAAsB,GACxB,MAAM,IAAI,CAACZ,sBAAsB,CAACY,sBAAsB,CAAC;QACrDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACN,OAAOD,sBAAsB,GAAGL,KAAK,GAAG,IAAI;IAChD,CAAC,CACL,CAAC;IAED,OAAOJ,OAAO,CAACW,MAAM,CAAEP,KAAK,IAAwB,CAAC,CAACA,KAAK,CAAC;EAChE;AACJ","ignoreList":[]}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,17 @@
+import type { CmsEntryListParams, CmsEntryValues } from "@webiny/api-headless-cms/types/index.js";
+import { type CmsModel } from "@webiny/api-headless-cms/types/index.js";
+import type { IListEntriesResult } from "@webiny/api-headless-cms/features/contentEntry/ListEntries/abstractions.js";
+import { FolderLevelPermissions } from "../../features/flp/FolderLevelPermissions/index.js";
+interface ListEntriesFactoryCallbackParams<T extends CmsEntryValues> {
+    model: CmsModel;
+    dataLoader: (params?: CmsEntryListParams) => Promise<IListEntriesResult<T>>;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions.Interface);
+    execute<T extends CmsEntryValues = CmsEntryValues>({ model, dataLoader, initialParams }: ListEntriesFactoryCallbackParams<T>): Promise<IListEntriesResult<T>>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,106 @@
+import { hasRootFolderId } from "./hasRootFolderId.js";
+export class ListEntriesFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.permissionsCache = new Map();
+  }
+  async execute({
+    model,
+    dataLoader,
+    initialParams = {}
+  }) {
+    const limit = initialParams?.limit || 50;
+    const where = initialParams?.where;
+    const params = {
+      ...initialParams,
+      limit
+    };
+    const hasRootFolder = hasRootFolderId({
+      model,
+      where
+    });
+
+    // If FLP should be skipped, or we're querying the root folder, skip permission checks
+    if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) {
+      return dataLoader(params);
+    }
+    const resultEntries = [];
+    let totalCount = 0;
+    let hasMoreItems = true;
+    let cursor = null;
+    let fetchedAll = false;
+    let afterCursor = params.after;
+
+    // Process entries in batches until we have enough results or reach the end
+    while (!fetchedAll) {
+      const queryParams = {
+        ...params,
+        after: afterCursor
+      };
+      const {
+        entries,
+        meta
+      } = await dataLoader(queryParams);
+      if (totalCount === 0) {
+        totalCount = meta.totalCount;
+      }
+
+      // Process each entry and check folder permissions
+      for (const entry of entries) {
+        const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+
+        // If entry has no folderId, it's not using ACO folders system
+        // Include it in results as it's not subject to folder permissions
+        if (!folderId) {
+          resultEntries.push(entry);
+          continue;
+        }
+        const permissions = await this.getPermissions(folderId);
+
+        // If no FLP exists for the folder, the entry is accessible
+        // This means the folder doesn't have any permission restrictions
+        if (!permissions.length) {
+          resultEntries.push(entry);
+          continue;
+        }
+
+        // Check if user has read permission for the folder
+        if (await this.folderLevelPermissions.canAccessFolderContent({
+          permissions,
+          rwd: "r"
+        })) {
+          resultEntries.push(entry);
+        } else {
+          totalCount--;
+        }
+      }
+
+      // Determine if we need to fetch more entries
+      if (!meta.hasMoreItems || resultEntries.length >= limit) {
+        fetchedAll = true;
+        hasMoreItems = meta.hasMoreItems;
+        cursor = meta.cursor;
+      } else {
+        afterCursor = meta.cursor;
+      }
+    }
+    return {
+      entries: resultEntries,
+      meta: {
+        totalCount,
+        hasMoreItems,
+        cursor
+      }
+    };
+  }
+  async getPermissions(folderId) {
+    if (this.permissionsCache.has(folderId)) {
+      return this.permissionsCache.get(folderId) ?? [];
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    this.permissionsCache.set(folderId, permissions);
+    return permissions;
+  }
+}
+
+//# sourceMappingURL=ListEntriesFactory.js.map