@webiny/api-aco 5.39.2-beta.0 → 5.39.2-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@webiny/api-aco",
-	"version": "5.39.2-beta.0",
+	"version": "5.39.2-beta.1",
 	"main": "index.js",
 	"keywords": [
 		"aco:base"
@@ -22,18 +22,18 @@
 		"directory": "dist"
 	},
 	"dependencies": {
-		"@webiny/api": "5.39.2-beta.0",
-		"@webiny/api-authentication": "5.39.2-beta.0",
-		"@webiny/api-headless-cms": "5.39.2-beta.0",
-		"@webiny/api-i18n": "5.39.2-beta.0",
-		"@webiny/api-security": "5.39.2-beta.0",
-		"@webiny/api-tenancy": "5.39.2-beta.0",
-		"@webiny/error": "5.39.2-beta.0",
-		"@webiny/handler": "5.39.2-beta.0",
-		"@webiny/handler-graphql": "5.39.2-beta.0",
-		"@webiny/pubsub": "5.39.2-beta.0",
-		"@webiny/utils": "5.39.2-beta.0",
-		"@webiny/validation": "5.39.2-beta.0",
+		"@webiny/api": "5.39.2-beta.1",
+		"@webiny/api-authentication": "5.39.2-beta.1",
+		"@webiny/api-headless-cms": "5.39.2-beta.1",
+		"@webiny/api-i18n": "5.39.2-beta.1",
+		"@webiny/api-security": "5.39.2-beta.1",
+		"@webiny/api-tenancy": "5.39.2-beta.1",
+		"@webiny/error": "5.39.2-beta.1",
+		"@webiny/handler": "5.39.2-beta.1",
+		"@webiny/handler-graphql": "5.39.2-beta.1",
+		"@webiny/pubsub": "5.39.2-beta.1",
+		"@webiny/utils": "5.39.2-beta.1",
+		"@webiny/validation": "5.39.2-beta.1",
 		"lodash": "4.17.21"
 	},
 	"devDependencies": {
@@ -43,22 +43,22 @@
 		"@babel/preset-typescript": "7.22.5",
 		"@babel/runtime": "7.22.6",
 		"@types/ungap__structured-clone": "0.3.0",
-		"@webiny/api-admin-users": "5.39.2-beta.0",
-		"@webiny/api-file-manager": "5.39.2-beta.0",
-		"@webiny/api-i18n-ddb": "5.39.2-beta.0",
-		"@webiny/api-security-so-ddb": "5.39.2-beta.0",
-		"@webiny/api-tenancy-so-ddb": "5.39.2-beta.0",
-		"@webiny/api-wcp": "5.39.2-beta.0",
-		"@webiny/cli": "5.39.2-beta.0",
-		"@webiny/handler-aws": "5.39.2-beta.0",
-		"@webiny/plugins": "5.39.2-beta.0",
-		"@webiny/project-utils": "5.39.2-beta.0",
-		"@webiny/wcp": "5.39.2-beta.0",
+		"@webiny/api-admin-users": "5.39.2-beta.1",
+		"@webiny/api-file-manager": "5.39.2-beta.1",
+		"@webiny/api-i18n-ddb": "5.39.2-beta.1",
+		"@webiny/api-security-so-ddb": "5.39.2-beta.1",
+		"@webiny/api-tenancy-so-ddb": "5.39.2-beta.1",
+		"@webiny/api-wcp": "5.39.2-beta.1",
+		"@webiny/cli": "5.39.2-beta.1",
+		"@webiny/handler-aws": "5.39.2-beta.1",
+		"@webiny/plugins": "5.39.2-beta.1",
+		"@webiny/project-utils": "5.39.2-beta.1",
+		"@webiny/wcp": "5.39.2-beta.1",
 		"graphql": "15.8.0",
 		"prettier": "2.8.8",
 		"rimraf": "3.0.2",
 		"ttypescript": "1.5.15",
 		"typescript": "4.7.4"
 	},
-	"gitHead": "3ceff3406ff490e6d7503b35733a09c1cee8ff12"
+	"gitHead": "8fd4124689259202d8d9a61e8e77b5b28381e100"
 }

package/utils/decorators/CmsEntriesCrudDecorators.js

@@ -8,6 +8,7 @@ var _where = require("./where");
 var _constants = require("./constants");
 var _filterEntriesByFolderFactory = require("./filterEntriesByFolderFactory");
 var _createFolderType = require("./createFolderType");
+var _decorateIfModelAuthorizationEnabled = require("./decorateIfModelAuthorizationEnabled");
 class CmsEntriesCrudDecorators {
   constructor({
     context
@@ -18,18 +19,8 @@ class CmsEntriesCrudDecorators {
     const context = this.context;
     const folderLevelPermissions = context.aco.folderLevelPermissions;
     const filterEntriesByFolder = (0, _filterEntriesByFolderFactory.filterEntriesByFolderFactory)(context, folderLevelPermissions);
-    const modelAuthorizationDisabled = model => {
-      if (typeof model.authorization === "object") {
-        return model?.authorization?.flp === false;
-      }
-      return model.authorization === false;
-    };
-    const originalCmsListEntries = context.cms.listEntries.bind(context.cms);
-    context.cms.listEntries = async (...allParams) => {
-      const [model, params] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsListEntries(...allParams);
-      }
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "listEntries", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
       const folderType = (0, _createFolderType.createFolderType)(model);
       const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);
       const where = (0, _where.createWhere)({
@@ -37,18 +28,14 @@ class CmsEntriesCrudDecorators {
         where: params.where,
         folders
       });
-      return originalCmsListEntries(model, {
+      return decoratee(model, {
         ...params,
         where
       });
-    };
-    const originalCmsGetEntry = context.cms.getEntry.bind(context.cms);
-    context.cms.getEntry = async (...allParams) => {
-      const [model, params] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsGetEntry(...allParams);
-      }
-      const entry = await originalCmsGetEntry(model, params);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getEntry", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
         return entry;
@@ -59,14 +46,10 @@ class CmsEntriesCrudDecorators {
         rwd: "r"
       });
       return entry;
-    };
-    const originalCmsGetEntryById = context.cms.getEntryById.bind(context.cms);
-    context.cms.getEntryById = async (...allParams) => {
-      const [model, params] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsGetEntryById(...allParams);
-      }
-      const entry = await originalCmsGetEntryById(model, params);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getEntryById", async (...allParams) => {
+      const [decoratee, model, params] = allParams;
+      const entry = await decoratee(model, params);
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
         return entry;
@@ -77,128 +60,96 @@ class CmsEntriesCrudDecorators {
         rwd: "r"
       });
       return entry;
-    };
-    const originalGetLatestEntriesByIds = context.cms.getLatestEntriesByIds.bind(context.cms);
-    context.cms.getLatestEntriesByIds = async (...allParams) => {
-      const [model, ids] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalGetLatestEntriesByIds(...allParams);
-      }
-      const entries = await originalGetLatestEntriesByIds(model, ids);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getLatestEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
       return filterEntriesByFolder(model, entries);
-    };
-    const originalGetPublishedEntriesByIds = context.cms.getPublishedEntriesByIds.bind(context.cms);
-    context.cms.getPublishedEntriesByIds = async (...allParams) => {
-      const [model, ids] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalGetPublishedEntriesByIds(...allParams);
-      }
-      const entries = await originalGetPublishedEntriesByIds(model, ids);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "getPublishedEntriesByIds", async (...allParams) => {
+      const [decoratee, model, ids] = allParams;
+      const entries = await decoratee(model, ids);
       return filterEntriesByFolder(model, entries);
-    };
-    const originalCmsCreateEntry = context.cms.createEntry.bind(context.cms);
-    context.cms.createEntry = async (...allParams) => {
-      const [model, params, options] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsCreateEntry(...allParams);
-      }
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "createEntry", async (...allParams) => {
+      const [decoratee, model, params, options] = allParams;
       const folderId = params.wbyAco_location?.folderId || params.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsCreateEntry(model, params, options);
+        return decoratee(model, params, options);
       }
       const folder = await context.aco.folder.get(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
         folder,
         rwd: "w"
       });
-      return originalCmsCreateEntry(model, params, options);
-    };
-    const originalCmsCreateFromEntry = context.cms.createEntryRevisionFrom.bind(context.cms);
-    context.cms.createEntryRevisionFrom = async (...allParams) => {
-      const [model, id, input, options] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsCreateFromEntry(...allParams);
-      }
+      return decoratee(model, params, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "createEntryRevisionFrom", async (...allParams) => {
+      const [decoratee, model, id, input, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsCreateFromEntry(model, id, input, options);
+        return decoratee(model, id, input, options);
       }
       const folder = await context.aco.folder.get(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
         folder,
         rwd: "w"
       });
-      return originalCmsCreateFromEntry(model, id, input, options);
-    };
-    const originalCmsUpdateEntry = context.cms.updateEntry.bind(context.cms);
-    context.cms.updateEntry = async (...allParams) => {
-      const [model, id, input, meta, options] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsUpdateEntry(...allParams);
-      }
+      return decoratee(model, id, input, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "updateEntry", async (...allParams) => {
+      const [decoratee, model, id, input, meta, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsUpdateEntry(model, id, input, meta, options);
+        return decoratee(model, id, input, meta, options);
       }
       const folder = await context.aco.folder.get(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
         folder,
         rwd: "w"
       });
-      return originalCmsUpdateEntry(model, id, input, meta, options);
-    };
-    const originalCmsDeleteEntry = context.cms.deleteEntry.bind(context.cms);
-    context.cms.deleteEntry = async (...allParams) => {
-      const [model, id, options] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsDeleteEntry(...allParams);
-      }
+      return decoratee(model, id, input, meta, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "deleteEntry", async (...allParams) => {
+      const [decoratee, model, id, options] = allParams;
       const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(model, {
         id
       });
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsDeleteEntry(model, id, options);
+        return decoratee(model, id, options);
       }
       const folder = await context.aco.folder.get(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
         folder,
         rwd: "d"
       });
-      return originalCmsDeleteEntry(model, id, options);
-    };
-    const originalCmsDeleteEntryRevision = context.cms.deleteEntryRevision.bind(context.cms);
-    context.cms.deleteEntryRevision = async (...allParams) => {
-      const [model, id] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsDeleteEntryRevision(...allParams);
-      }
+      return decoratee(model, id, options);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "deleteEntryRevision", async (...allParams) => {
+      const [decoratee, model, id] = allParams;
       const entry = await context.cms.storageOperations.entries.getRevisionById(model, {
         id
       });
       const folderId = entry?.location?.folderId;
       if (!folderId || folderId === _constants.ROOT_FOLDER) {
-        return originalCmsDeleteEntryRevision(model, id);
+        return decoratee(model, id);
       }
       const folder = await context.aco.folder.get(folderId);
       await folderLevelPermissions.ensureCanAccessFolderContent({
         folder,
         rwd: "d"
       });
-      return originalCmsDeleteEntryRevision(model, id);
-    };
-    const originalCmsMoveEntry = context.cms.moveEntry.bind(context.cms);
-    context.cms.moveEntry = async (...allParams) => {
-      const [model, id, targetFolderId] = allParams;
-      if (modelAuthorizationDisabled(model)) {
-        return originalCmsMoveEntry(...allParams);
-      }
+      return decoratee(model, id);
+    });
+    (0, _decorateIfModelAuthorizationEnabled.decorateIfModelAuthorizationEnabled)(context.cms, "moveEntry", async (...allParams) => {
+      const [decoratee, model, id, targetFolderId] = allParams;
 
       /**
        * First we need to check if user has access to the entries existing folder.
@@ -211,7 +162,7 @@ class CmsEntriesCrudDecorators {
        * If the entry is in the same folder we are trying to move it to, just continue.
        */
       if (folderId === targetFolderId) {
-        return originalCmsMoveEntry(model, id, targetFolderId);
+        return decoratee(model, id, targetFolderId);
       } else if (folderId !== _constants.ROOT_FOLDER) {
         /**
          * If entry current folder is not a root, check for access
@@ -232,8 +183,8 @@ class CmsEntriesCrudDecorators {
           rwd: "w"
         });
       }
-      return originalCmsMoveEntry(model, id, targetFolderId);
-    };
+      return decoratee(model, id, targetFolderId);
+    });
   }
 }
 exports.CmsEntriesCrudDecorators = CmsEntriesCrudDecorators;

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -1 +1 @@
-{"version":3,"names":["_where","require","_constants","_filterEntriesByFolderFactory","_createFolderType","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","filterEntriesByFolderFactory","modelAuthorizationDisabled","model","authorization","flp","originalCmsListEntries","cms","listEntries","bind","allParams","params","folderType","createFolderType","folders","listAllFoldersWithPermissions","where","createWhere","originalCmsGetEntry","getEntry","entry","folderId","location","ROOT_FOLDER","folder","get","ensureCanAccessFolderContent","rwd","originalCmsGetEntryById","getEntryById","originalGetLatestEntriesByIds","getLatestEntriesByIds","ids","entries","originalGetPublishedEntriesByIds","getPublishedEntriesByIds","originalCmsCreateEntry","createEntry","options","wbyAco_location","originalCmsCreateFromEntry","createEntryRevisionFrom","id","input","storageOperations","getRevisionById","originalCmsUpdateEntry","updateEntry","meta","originalCmsDeleteEntry","deleteEntry","getLatestRevisionByEntryId","originalCmsDeleteEntryRevision","deleteEntryRevision","originalCmsMoveEntry","moveEntry","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import { AcoContext } from \"~/types\";\nimport { createWhere } from \"./where\";\nimport { ROOT_FOLDER } from \"./constants\";\nimport { filterEntriesByFolderFactory } from \"./filterEntriesByFolderFactory\";\nimport { createFolderType } from \"./createFolderType\";\nimport { CmsModel } from \"@webiny/api-headless-cms/types\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = filterEntriesByFolderFactory(context, folderLevelPermissions);\n\n        const modelAuthorizationDisabled = (model: CmsModel) => {\n            if (typeof model.authorization === \"object\") {\n                return model?.authorization?.flp === false;\n            }\n\n            return model.authorization === false;\n        };\n\n        const originalCmsListEntries = context.cms.listEntries.bind(context.cms);\n        context.cms.listEntries = async (...allParams) => {\n            const [model, params] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsListEntries(...allParams);\n            }\n\n            const folderType = createFolderType(model);\n            const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);\n\n            const where = createWhere({\n                model,\n                where: params.where,\n                folders\n            });\n            return originalCmsListEntries(model, {\n                ...params,\n                where\n            });\n        };\n\n        const originalCmsGetEntry = context.cms.getEntry.bind(context.cms);\n        context.cms.getEntry = async (...allParams) => {\n            const [model, params] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsGetEntry(...allParams);\n            }\n\n            const entry = await originalCmsGetEntry(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n\n            return entry;\n        };\n\n        const originalCmsGetEntryById = context.cms.getEntryById.bind(context.cms);\n        context.cms.getEntryById = async (...allParams) => {\n            const [model, params] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsGetEntryById(...allParams);\n            }\n\n            const entry = await originalCmsGetEntryById(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n            return entry;\n        };\n\n        const originalGetLatestEntriesByIds = context.cms.getLatestEntriesByIds.bind(context.cms);\n        context.cms.getLatestEntriesByIds = async (...allParams) => {\n            const [model, ids] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalGetLatestEntriesByIds(...allParams);\n            }\n\n            const entries = await originalGetLatestEntriesByIds(model, ids);\n\n            return filterEntriesByFolder(model, entries);\n        };\n\n        const originalGetPublishedEntriesByIds = context.cms.getPublishedEntriesByIds.bind(\n            context.cms\n        );\n        context.cms.getPublishedEntriesByIds = async (...allParams) => {\n            const [model, ids] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalGetPublishedEntriesByIds(...allParams);\n            }\n\n            const entries = await originalGetPublishedEntriesByIds(model, ids);\n            return filterEntriesByFolder(model, entries);\n        };\n\n        const originalCmsCreateEntry = context.cms.createEntry.bind(context.cms);\n        context.cms.createEntry = async (...allParams) => {\n            const [model, params, options] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsCreateEntry(...allParams);\n            }\n\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsCreateEntry(model, params, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsCreateEntry(model, params, options);\n        };\n\n        const originalCmsCreateFromEntry = context.cms.createEntryRevisionFrom.bind(context.cms);\n        context.cms.createEntryRevisionFrom = async (...allParams) => {\n            const [model, id, input, options] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsCreateFromEntry(...allParams);\n            }\n\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsCreateFromEntry(model, id, input, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsCreateFromEntry(model, id, input, options);\n        };\n\n        const originalCmsUpdateEntry = context.cms.updateEntry.bind(context.cms);\n        context.cms.updateEntry = async (...allParams) => {\n            const [model, id, input, meta, options] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsUpdateEntry(...allParams);\n            }\n\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsUpdateEntry(model, id, input, meta, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return originalCmsUpdateEntry(model, id, input, meta, options);\n        };\n\n        const originalCmsDeleteEntry = context.cms.deleteEntry.bind(context.cms);\n        context.cms.deleteEntry = async (...allParams) => {\n            const [model, id, options] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsDeleteEntry(...allParams);\n            }\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsDeleteEntry(model, id, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return originalCmsDeleteEntry(model, id, options);\n        };\n\n        const originalCmsDeleteEntryRevision = context.cms.deleteEntryRevision.bind(context.cms);\n        context.cms.deleteEntryRevision = async (...allParams) => {\n            const [model, id] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsDeleteEntryRevision(...allParams);\n            }\n\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return originalCmsDeleteEntryRevision(model, id);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return originalCmsDeleteEntryRevision(model, id);\n        };\n\n        const originalCmsMoveEntry = context.cms.moveEntry.bind(context.cms);\n        context.cms.moveEntry = async (...allParams) => {\n            const [model, id, targetFolderId] = allParams;\n            if (modelAuthorizationDisabled(model)) {\n                return originalCmsMoveEntry(...allParams);\n            }\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return originalCmsMoveEntry(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const folder = await context.aco.folder.get(targetFolderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n\n            return originalCmsMoveEntry(model, id, targetFolderId);\n        };\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,iBAAA,GAAAH,OAAA;AASO,MAAMI,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAAC,0DAA4B,EAACL,OAAO,EAAEE,sBAAsB,CAAC;IAE3F,MAAMI,0BAA0B,GAAIC,KAAe,IAAK;MACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;QACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;MAC9C;MAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;IACxC,CAAC;IAED,MAAME,sBAAsB,GAAGV,OAAO,CAACW,GAAG,CAACC,WAAW,CAACC,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxEX,OAAO,CAACW,GAAG,CAACC,WAAW,GAAG,OAAO,GAAGE,SAAS,KAAK;MAC9C,MAAM,CAACP,KAAK,EAAEQ,MAAM,CAAC,GAAGD,SAAS;MACjC,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOG,sBAAsB,CAAC,GAAGI,SAAS,CAAC;MAC/C;MAEA,MAAME,UAAU,GAAG,IAAAC,kCAAgB,EAACV,KAAK,CAAC;MAC1C,MAAMW,OAAO,GAAG,MAAMhB,sBAAsB,CAACiB,6BAA6B,CAACH,UAAU,CAAC;MAEtF,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBd,KAAK;QACLa,KAAK,EAAEL,MAAM,CAACK,KAAK;QACnBF;MACJ,CAAC,CAAC;MACF,OAAOR,sBAAsB,CAACH,KAAK,EAAE;QACjC,GAAGQ,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CAAC;IAED,MAAME,mBAAmB,GAAGtB,OAAO,CAACW,GAAG,CAACY,QAAQ,CAACV,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IAClEX,OAAO,CAACW,GAAG,CAACY,QAAQ,GAAG,OAAO,GAAGT,SAAS,KAAK;MAC3C,MAAM,CAACP,KAAK,EAAEQ,MAAM,CAAC,GAAGD,SAAS;MACjC,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOe,mBAAmB,CAAC,GAAGR,SAAS,CAAC;MAC5C;MAEA,MAAMU,KAAK,GAAG,MAAMF,mBAAmB,CAACf,KAAK,EAAEQ,MAAM,CAAC;MAEtD,MAAMU,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC;IAED,MAAMQ,uBAAuB,GAAGhC,OAAO,CAACW,GAAG,CAACsB,YAAY,CAACpB,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IAC1EX,OAAO,CAACW,GAAG,CAACsB,YAAY,GAAG,OAAO,GAAGnB,SAAS,KAAK;MAC/C,MAAM,CAACP,KAAK,EAAEQ,MAAM,CAAC,GAAGD,SAAS;MACjC,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOyB,uBAAuB,CAAC,GAAGlB,SAAS,CAAC;MAChD;MAEA,MAAMU,KAAK,GAAG,MAAMQ,uBAAuB,CAACzB,KAAK,EAAEQ,MAAM,CAAC;MAE1D,MAAMU,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC;IAED,MAAMU,6BAA6B,GAAGlC,OAAO,CAACW,GAAG,CAACwB,qBAAqB,CAACtB,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACzFX,OAAO,CAACW,GAAG,CAACwB,qBAAqB,GAAG,OAAO,GAAGrB,SAAS,KAAK;MACxD,MAAM,CAACP,KAAK,EAAE6B,GAAG,CAAC,GAAGtB,SAAS;MAC9B,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAO2B,6BAA6B,CAAC,GAAGpB,SAAS,CAAC;MACtD;MAEA,MAAMuB,OAAO,GAAG,MAAMH,6BAA6B,CAAC3B,KAAK,EAAE6B,GAAG,CAAC;MAE/D,OAAOhC,qBAAqB,CAACG,KAAK,EAAE8B,OAAO,CAAC;IAChD,CAAC;IAED,MAAMC,gCAAgC,GAAGtC,OAAO,CAACW,GAAG,CAAC4B,wBAAwB,CAAC1B,IAAI,CAC9Eb,OAAO,CAACW,GACZ,CAAC;IACDX,OAAO,CAACW,GAAG,CAAC4B,wBAAwB,GAAG,OAAO,GAAGzB,SAAS,KAAK;MAC3D,MAAM,CAACP,KAAK,EAAE6B,GAAG,CAAC,GAAGtB,SAAS;MAC9B,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAO+B,gCAAgC,CAAC,GAAGxB,SAAS,CAAC;MACzD;MAEA,MAAMuB,OAAO,GAAG,MAAMC,gCAAgC,CAAC/B,KAAK,EAAE6B,GAAG,CAAC;MAClE,OAAOhC,qBAAqB,CAACG,KAAK,EAAE8B,OAAO,CAAC;IAChD,CAAC;IAED,MAAMG,sBAAsB,GAAGxC,OAAO,CAACW,GAAG,CAAC8B,WAAW,CAAC5B,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxEX,OAAO,CAACW,GAAG,CAAC8B,WAAW,GAAG,OAAO,GAAG3B,SAAS,KAAK;MAC9C,MAAM,CAACP,KAAK,EAAEQ,MAAM,EAAE2B,OAAO,CAAC,GAAG5B,SAAS;MAC1C,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOiC,sBAAsB,CAAC,GAAG1B,SAAS,CAAC;MAC/C;MAEA,MAAMW,QAAQ,GAAGV,MAAM,CAAC4B,eAAe,EAAElB,QAAQ,IAAIV,MAAM,CAACW,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOa,sBAAsB,CAACjC,KAAK,EAAEQ,MAAM,EAAE2B,OAAO,CAAC;MACzD;MAEA,MAAMd,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOS,sBAAsB,CAACjC,KAAK,EAAEQ,MAAM,EAAE2B,OAAO,CAAC;IACzD,CAAC;IAED,MAAME,0BAA0B,GAAG5C,OAAO,CAACW,GAAG,CAACkC,uBAAuB,CAAChC,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxFX,OAAO,CAACW,GAAG,CAACkC,uBAAuB,GAAG,OAAO,GAAG/B,SAAS,KAAK;MAC1D,MAAM,CAACP,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEL,OAAO,CAAC,GAAG5B,SAAS;MAC7C,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOqC,0BAA0B,CAAC,GAAG9B,SAAS,CAAC;MACnD;MAEA,MAAMU,KAAK,GAAG,MAAMxB,OAAO,CAACW,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAAC1C,KAAK,EAAE;QAC7EuC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOiB,0BAA0B,CAACrC,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEL,OAAO,CAAC;MAChE;MAEA,MAAMd,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOa,0BAA0B,CAACrC,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEL,OAAO,CAAC;IAChE,CAAC;IAED,MAAMQ,sBAAsB,GAAGlD,OAAO,CAACW,GAAG,CAACwC,WAAW,CAACtC,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxEX,OAAO,CAACW,GAAG,CAACwC,WAAW,GAAG,OAAO,GAAGrC,SAAS,KAAK;MAC9C,MAAM,CAACP,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,CAAC,GAAG5B,SAAS;MACnD,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAO2C,sBAAsB,CAAC,GAAGpC,SAAS,CAAC;MAC/C;MAEA,MAAMU,KAAK,GAAG,MAAMxB,OAAO,CAACW,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAAC1C,KAAK,EAAE;QAC7EuC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOuB,sBAAsB,CAAC3C,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,CAAC;MAClE;MAEA,MAAMd,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOmB,sBAAsB,CAAC3C,KAAK,EAAEuC,EAAE,EAAEC,KAAK,EAAEK,IAAI,EAAEV,OAAO,CAAC;IAClE,CAAC;IAED,MAAMW,sBAAsB,GAAGrD,OAAO,CAACW,GAAG,CAAC2C,WAAW,CAACzC,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxEX,OAAO,CAACW,GAAG,CAAC2C,WAAW,GAAG,OAAO,GAAGxC,SAAS,KAAK;MAC9C,MAAM,CAACP,KAAK,EAAEuC,EAAE,EAAEJ,OAAO,CAAC,GAAG5B,SAAS;MACtC,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAO8C,sBAAsB,CAAC,GAAGvC,SAAS,CAAC;MAC/C;MAEA,MAAMU,KAAK,GAAG,MAAMxB,OAAO,CAACW,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACkB,0BAA0B,CAChFhD,KAAK,EACL;QACIuC;MACJ,CACJ,CAAC;MAED,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAO0B,sBAAsB,CAAC9C,KAAK,EAAEuC,EAAE,EAAEJ,OAAO,CAAC;MACrD;MAEA,MAAMd,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOsB,sBAAsB,CAAC9C,KAAK,EAAEuC,EAAE,EAAEJ,OAAO,CAAC;IACrD,CAAC;IAED,MAAMc,8BAA8B,GAAGxD,OAAO,CAACW,GAAG,CAAC8C,mBAAmB,CAAC5C,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACxFX,OAAO,CAACW,GAAG,CAAC8C,mBAAmB,GAAG,OAAO,GAAG3C,SAAS,KAAK;MACtD,MAAM,CAACP,KAAK,EAAEuC,EAAE,CAAC,GAAGhC,SAAS;MAC7B,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOiD,8BAA8B,CAAC,GAAG1C,SAAS,CAAC;MACvD;MAEA,MAAMU,KAAK,GAAG,MAAMxB,OAAO,CAACW,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAAC1C,KAAK,EAAE;QAC7EuC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAO6B,8BAA8B,CAACjD,KAAK,EAAEuC,EAAE,CAAC;MACpD;MAEA,MAAMlB,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOyB,8BAA8B,CAACjD,KAAK,EAAEuC,EAAE,CAAC;IACpD,CAAC;IAED,MAAMY,oBAAoB,GAAG1D,OAAO,CAACW,GAAG,CAACgD,SAAS,CAAC9C,IAAI,CAACb,OAAO,CAACW,GAAG,CAAC;IACpEX,OAAO,CAACW,GAAG,CAACgD,SAAS,GAAG,OAAO,GAAG7C,SAAS,KAAK;MAC5C,MAAM,CAACP,KAAK,EAAEuC,EAAE,EAAEc,cAAc,CAAC,GAAG9C,SAAS;MAC7C,IAAIR,0BAA0B,CAACC,KAAK,CAAC,EAAE;QACnC,OAAOmD,oBAAoB,CAAC,GAAG5C,SAAS,CAAC;MAC7C;;MAEA;AACZ;AACA;MACY,MAAMU,KAAK,GAAG,MAAMxB,OAAO,CAACW,GAAG,CAACqC,iBAAiB,CAACX,OAAO,CAACY,eAAe,CAAC1C,KAAK,EAAE;QAC7EuC;MACJ,CAAC,CAAC;MAEF,MAAMrB,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKmC,cAAc,EAAE;QAC7B,OAAOF,oBAAoB,CAACnD,KAAK,EAAEuC,EAAE,EAAEc,cAAc,CAAC;MAC1D,CAAC,MAAM,IAAInC,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;QACrD,MAAMvB,sBAAsB,CAAC4B,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAI6B,cAAc,KAAKjC,sBAAW,EAAE;QAChC,MAAMC,MAAM,GAAG,MAAM5B,OAAO,CAACG,GAAG,CAACyB,MAAM,CAACC,GAAG,CAAC+B,cAAc,CAAC;QAC3D,MAAM1D,sBAAsB,CAAC4B,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAO2B,oBAAoB,CAACnD,KAAK,EAAEuC,EAAE,EAAEc,cAAc,CAAC;IAC1D,CAAC;EACL;AACJ;AAACC,OAAA,CAAA/D,wBAAA,GAAAA,wBAAA"}
+{"version":3,"names":["_where","require","_constants","_filterEntriesByFolderFactory","_createFolderType","_decorateIfModelAuthorizationEnabled","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","filterEntriesByFolderFactory","decorateIfModelAuthorizationEnabled","cms","allParams","decoratee","model","params","folderType","createFolderType","folders","listAllFoldersWithPermissions","where","createWhere","entry","folderId","location","ROOT_FOLDER","folder","get","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import { AcoContext } from \"~/types\";\nimport { createWhere } from \"./where\";\nimport { ROOT_FOLDER } from \"./constants\";\nimport { filterEntriesByFolderFactory } from \"./filterEntriesByFolderFactory\";\nimport { createFolderType } from \"./createFolderType\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = filterEntriesByFolderFactory(context, folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const folderType = createFolderType(model);\n            const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);\n\n            const where = createWhere({\n                model,\n                where: params.where,\n                folders\n            });\n            return decoratee(model, {\n                ...params,\n                where\n            });\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder(model, entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder(model, entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const folder = await context.aco.folder.get(targetFolderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,iBAAA,GAAAH,OAAA;AACA,IAAAI,oCAAA,GAAAJ,OAAA;AAQO,MAAMK,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAAC,0DAA4B,EAACL,OAAO,EAAEE,sBAAsB,CAAC;IAE3F,IAAAI,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMI,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CAACH,UAAU,CAAC;MAEtF,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,CAACK,KAAK;QACnBF;MACJ,CAAC,CAAC;MACF,OAAOL,SAAS,CAACC,KAAK,EAAE;QACpB,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,IAAAV,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,UAAU,EAAE,OAAO,GAAGC,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMU,KAAK,GAAG,MAAMT,SAAS,CAACC,KAAK,EAAEC,MAAM,CAAC;MAE5C,MAAMQ,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAZ,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,cAAc,EAAE,OAAO,GAAGC,SAAS,KAAK;MACrF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMU,KAAK,GAAG,MAAMT,SAAS,CAACC,KAAK,EAAEC,MAAM,CAAC;MAE5C,MAAMQ,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAZ,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,uBAAuB,EACvB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,GAAG,CAAC,GAAGlB,SAAS;MAEzC,MAAMmB,OAAO,GAAG,MAAMlB,SAAS,CAACC,KAAK,EAAEgB,GAAG,CAAC;MAE3C,OAAOtB,qBAAqB,CAACM,KAAK,EAAEiB,OAAO,CAAC;IAChD,CACJ,CAAC;IAED,IAAArB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,0BAA0B,EAC1B,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,GAAG,CAAC,GAAGlB,SAAS;MAEzC,MAAMmB,OAAO,GAAG,MAAMlB,SAAS,CAACC,KAAK,EAAEgB,GAAG,CAAC;MAC3C,OAAOtB,qBAAqB,CAACM,KAAK,EAAEiB,OAAO,CAAC;IAChD,CACJ,CAAC;IAED,IAAArB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC,GAAGpB,SAAS;MAErD,MAAMW,QAAQ,GAAGR,MAAM,CAACkB,eAAe,EAAEV,QAAQ,IAAIR,MAAM,CAACS,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC;MAC5C;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,yBAAyB,EACzB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGpB,SAAS;MAExD,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED,IAAAtB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC,GAAGpB,SAAS;MAC9D,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;MACrD;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC,GAAGpB,SAAS;MAEjD,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACQ,0BAA0B,CAChFzB,KAAK,EACL;QACIoB;MACJ,CACJ,CAAC;MAED,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,qBAAqB,EACrB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,CAAC,GAAGtB,SAAS;MAExC,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,CAAC;MAC/B;MAEA,MAAMR,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED,IAAAxB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,WAAW,EAAE,OAAO,GAAGC,SAAS,KAAK;MAClF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC,GAAG5B,SAAS;;MAExD;AACZ;AACA;MACY,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAO3B,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;QACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIW,cAAc,KAAKf,sBAAW,EAAE;QAChC,MAAMC,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACa,cAAc,CAAC;QAC3D,MAAMlC,sBAAsB,CAACsB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAAvC,wBAAA,GAAAA,wBAAA"}

package/utils/decorators/decorateIfModelAuthorizationEnabled.d.ts

@@ -0,0 +1,23 @@
+import { CmsModel, HeadlessCms } from "@webiny/api-headless-cms/types";
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+declare type ModelCallable = (model: CmsModel, ...params: any[]) => any;
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+declare type FilterModelMethods<T> = {
+    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];
+};
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+declare type ModelMethods<T> = Omit<FilterModelMethods<T>, "getEntryManager">;
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+declare type Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;
+export declare const decorateIfModelAuthorizationEnabled: <M extends "getEntry" | "getEntriesByIds" | "getEntryById" | "listEntries" | "listLatestEntries" | "listPublishedEntries" | "getPublishedEntriesByIds" | "getLatestEntriesByIds" | "createEntry" | "createEntryRevisionFrom" | "updateEntry" | "validateEntry" | "moveEntry" | "republishEntry" | "deleteEntryRevision" | "deleteEntry" | "deleteMultipleEntries" | "publishEntry" | "unpublishEntry" | "getEntryRevisions" | "getUniqueFieldValues", D extends Decorator<ModelMethods<HeadlessCms>[M]>>(root: ModelMethods<HeadlessCms>, method: M, decorator: D) => void;
+export {};

package/utils/decorators/decorateIfModelAuthorizationEnabled.js

@@ -0,0 +1,47 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.decorateIfModelAuthorizationEnabled = void 0;
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+
+const modelAuthorizationDisabled = model => {
+  if (typeof model.authorization === "object") {
+    return model?.authorization?.flp === false;
+  }
+  return model.authorization === false;
+};
+const decorateIfModelAuthorizationEnabled = (root, method, decorator) => {
+  /**
+   * We cast to `ModelCallable` because within the generic function, we only know that the first
+   * parameter is a `CmsModel`, and we forward the rest.
+   */
+  const decoratee = root[method].bind(root);
+  root[method] = (...params) => {
+    const [model, ...rest] = params;
+    if (modelAuthorizationDisabled(model)) {
+      return decoratee(model, ...rest);
+    }
+    return decorator(decoratee, ...params);
+  };
+};
+exports.decorateIfModelAuthorizationEnabled = decorateIfModelAuthorizationEnabled;
+
+//# sourceMappingURL=decorateIfModelAuthorizationEnabled.js.map

package/utils/decorators/decorateIfModelAuthorizationEnabled.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["modelAuthorizationDisabled","model","authorization","flp","decorateIfModelAuthorizationEnabled","root","method","decorator","decoratee","bind","params","rest","exports"],"sources":["decorateIfModelAuthorizationEnabled.ts"],"sourcesContent":["import { CmsModel, HeadlessCms } from \"@webiny/api-headless-cms/types\";\n\n/**\n * This type matches any function that has a CmsModel as the first parameter.\n */\ntype ModelCallable = (model: CmsModel, ...params: any[]) => any;\n\n/**\n * This type filters only `ModelCallable` methods.\n */\ntype FilterModelMethods<T> = {\n    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];\n};\n\n/**\n * This type omits methods that have a more complex `model` type.\n * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.\n * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.\n */\ntype ModelMethods<T> = Omit<FilterModelMethods<T>, \"getEntryManager\">;\n\n/**\n * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.\n */\ntype Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;\n\nconst modelAuthorizationDisabled = (model: CmsModel) => {\n    if (typeof model.authorization === \"object\") {\n        return model?.authorization?.flp === false;\n    }\n\n    return model.authorization === false;\n};\n\nexport const decorateIfModelAuthorizationEnabled = <\n    /**\n     * This allows us to only have an auto-complete of `ModelCallable` methods.\n     */\n    M extends keyof ModelMethods<HeadlessCms>,\n    D extends Decorator<ModelMethods<HeadlessCms>[M]>\n>(\n    root: ModelMethods<HeadlessCms>,\n    method: M,\n    decorator: D\n) => {\n    /**\n     * We cast to `ModelCallable` because within the generic function, we only know that the first\n     * parameter is a `CmsModel`, and we forward the rest.\n     */\n    const decoratee = root[method].bind(root) as ModelCallable;\n    root[method] = ((...params: Parameters<ModelMethods<HeadlessCms>[M]>) => {\n        const [model, ...rest] = params;\n        if (modelAuthorizationDisabled(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        return decorator(decoratee, ...params);\n    }) as ModelCallable;\n};\n"],"mappings":";;;;;;AAEA;AACA;AACA;;AAGA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;;AAGA,MAAMA,0BAA0B,GAAIC,KAAe,IAAK;EACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;IACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;EAC9C;EAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;AACxC,CAAC;AAEM,MAAME,mCAAmC,GAAGA,CAO/CC,IAA+B,EAC/BC,MAAS,EACTC,SAAY,KACX;EACD;AACJ;AACA;AACA;EACI,MAAMC,SAAS,GAAGH,IAAI,CAACC,MAAM,CAAC,CAACG,IAAI,CAACJ,IAAI,CAAkB;EAC1DA,IAAI,CAACC,MAAM,CAAC,GAAI,CAAC,GAAGI,MAAgD,KAAK;IACrE,MAAM,CAACT,KAAK,EAAE,GAAGU,IAAI,CAAC,GAAGD,MAAM;IAC/B,IAAIV,0BAA0B,CAACC,KAAK,CAAC,EAAE;MACnC,OAAOO,SAAS,CAACP,KAAK,EAAE,GAAGU,IAAI,CAAC;IACpC;IAEA,OAAOJ,SAAS,CAACC,SAAS,EAAE,GAAGE,MAAM,CAAC;EAC1C,CAAmB;AACvB,CAAC;AAACE,OAAA,CAAAR,mCAAA,GAAAA,mCAAA"}