@webiny/api-aco 5.43.0-beta.0 → 5.43.0-beta.1

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -1 +1 @@
-{"version":3,"names":["_where","require","_constants","_filterEntriesByFolderFactory","_createFolderType","_decorateIfModelAuthorizationEnabled","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","filterEntriesByFolderFactory","decorateIfModelAuthorizationEnabled","cms","allParams","decoratee","model","params","folderType","createFolderType","folders","listAllFoldersWithPermissions","where","createWhere","entry","folderId","location","ROOT_FOLDER","folder","get","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import { AcoContext } from \"~/types\";\nimport { createWhere } from \"./where\";\nimport { ROOT_FOLDER } from \"./constants\";\nimport { filterEntriesByFolderFactory } from \"./filterEntriesByFolderFactory\";\nimport { createFolderType } from \"./createFolderType\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = filterEntriesByFolderFactory(context, folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const folderType = createFolderType(model);\n            const folders = await folderLevelPermissions.listAllFoldersWithPermissions(folderType);\n\n            const where = createWhere({\n                model,\n                where: params.where,\n                folders\n            });\n            return decoratee(model, {\n                ...params,\n                where\n            });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listLatestEntries\",\n            async (...allParams) => {\n                const [decoratee, model, params] = allParams;\n                const folderType = createFolderType(model);\n                const folders = await folderLevelPermissions.listAllFoldersWithPermissions(\n                    folderType\n                );\n\n                const where = createWhere({\n                    model,\n                    where: params?.where || {},\n                    folders\n                });\n                return decoratee(model, {\n                    ...params,\n                    where\n                });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, params] = allParams;\n                const folderType = createFolderType(model);\n                const folders = await folderLevelPermissions.listAllFoldersWithPermissions(\n                    folderType\n                );\n\n                const where = createWhere({\n                    model,\n                    where: params?.where || {},\n                    folders\n                });\n                return decoratee(model, {\n                    ...params,\n                    where\n                });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listDeletedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, params] = allParams;\n                const folderType = createFolderType(model);\n                const folders = await folderLevelPermissions.listAllFoldersWithPermissions(\n                    folderType\n                );\n\n                const where = createWhere({\n                    model,\n                    where: params?.where || {},\n                    folders\n                });\n                return decoratee(model, {\n                    ...params,\n                    where\n                });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder(model, entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder(model, entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const folder = await context.aco.folder.get(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                folder,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const folder = await context.aco.folder.get(folderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const folder = await context.aco.folder.get(targetFolderId);\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    folder,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,iBAAA,GAAAH,OAAA;AACA,IAAAI,oCAAA,GAAAJ,OAAA;AAQO,MAAMK,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAAC,0DAA4B,EAACL,OAAO,EAAEE,sBAAsB,CAAC;IAE3F,IAAAI,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMI,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CAACH,UAAU,CAAC;MAEtF,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,CAACK,KAAK;QACnBF;MACJ,CAAC,CAAC;MACF,OAAOL,SAAS,CAACC,KAAK,EAAE;QACpB,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,IAAAV,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,mBAAmB,EACnB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMI,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CACtEH,UACJ,CAAC;MAED,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,EAAEK,KAAK,IAAI,CAAC,CAAC;QAC1BF;MACJ,CAAC,CAAC;MACF,OAAOL,SAAS,CAACC,KAAK,EAAE;QACpB,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CACJ,CAAC;IAED,IAAAV,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,sBAAsB,EACtB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMI,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CACtEH,UACJ,CAAC;MAED,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,EAAEK,KAAK,IAAI,CAAC,CAAC;QAC1BF;MACJ,CAAC,CAAC;MACF,OAAOL,SAAS,CAACC,KAAK,EAAE;QACpB,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CACJ,CAAC;IAED,IAAAV,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,oBAAoB,EACpB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMI,UAAU,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;MAC1C,MAAMI,OAAO,GAAG,MAAMZ,sBAAsB,CAACa,6BAA6B,CACtEH,UACJ,CAAC;MAED,MAAMI,KAAK,GAAG,IAAAC,kBAAW,EAAC;QACtBP,KAAK;QACLM,KAAK,EAAEL,MAAM,EAAEK,KAAK,IAAI,CAAC,CAAC;QAC1BF;MACJ,CAAC,CAAC;MACF,OAAOL,SAAS,CAACC,KAAK,EAAE;QACpB,GAAGC,MAAM;QACTK;MACJ,CAAC,CAAC;IACN,CACJ,CAAC;IAED,IAAAV,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,UAAU,EAAE,OAAO,GAAGC,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMU,KAAK,GAAG,MAAMT,SAAS,CAACC,KAAK,EAAEC,MAAM,CAAC;MAE5C,MAAMQ,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAZ,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,cAAc,EAAE,OAAO,GAAGC,SAAS,KAAK;MACrF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,CAAC,GAAGH,SAAS;MAC5C,MAAMU,KAAK,GAAG,MAAMT,SAAS,CAACC,KAAK,EAAEC,MAAM,CAAC;MAE5C,MAAMQ,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAZ,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,uBAAuB,EACvB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,GAAG,CAAC,GAAGlB,SAAS;MAEzC,MAAMmB,OAAO,GAAG,MAAMlB,SAAS,CAACC,KAAK,EAAEgB,GAAG,CAAC;MAE3C,OAAOtB,qBAAqB,CAACM,KAAK,EAAEiB,OAAO,CAAC;IAChD,CACJ,CAAC;IAED,IAAArB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,0BAA0B,EAC1B,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,GAAG,CAAC,GAAGlB,SAAS;MAEzC,MAAMmB,OAAO,GAAG,MAAMlB,SAAS,CAACC,KAAK,EAAEgB,GAAG,CAAC;MAC3C,OAAOtB,qBAAqB,CAACM,KAAK,EAAEiB,OAAO,CAAC;IAChD,CACJ,CAAC;IAED,IAAArB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC,GAAGpB,SAAS;MAErD,MAAMW,QAAQ,GAAGR,MAAM,CAACkB,eAAe,EAAEV,QAAQ,IAAIR,MAAM,CAACS,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC;MAC5C;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEC,MAAM,EAAEiB,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,yBAAyB,EACzB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGpB,SAAS;MAExD,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED,IAAAtB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC,GAAGpB,SAAS;MAC9D,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;MACrD;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC,GAAGpB,SAAS;MAEjD,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACQ,0BAA0B,CAChFzB,KAAK,EACL;QACIoB;MACJ,CACJ,CAAC;MAED,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF,IAAAtB,wEAAmC,EAC/BN,OAAO,CAACO,GAAG,EACX,qBAAqB,EACrB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,CAAC,GAAGtB,SAAS;MAExC,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOZ,SAAS,CAACC,KAAK,EAAEoB,EAAE,CAAC;MAC/B;MAEA,MAAMR,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;MACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;QACtDF,MAAM;QACNG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED,IAAAxB,wEAAmC,EAACN,OAAO,CAACO,GAAG,EAAE,WAAW,EAAE,OAAO,GAAGC,SAAS,KAAK;MAClF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC,GAAG5B,SAAS;;MAExD;AACZ;AACA;MACY,MAAMU,KAAK,GAAG,MAAMlB,OAAO,CAACO,GAAG,CAACyB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACvB,KAAK,EAAE;QAC7EoB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAO3B,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACJ,QAAQ,CAAC;QACrD,MAAMjB,sBAAsB,CAACsB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIW,cAAc,KAAKf,sBAAW,EAAE;QAChC,MAAMC,MAAM,GAAG,MAAMtB,OAAO,CAACG,GAAG,CAACmB,MAAM,CAACC,GAAG,CAACa,cAAc,CAAC;QAC3D,MAAMlC,sBAAsB,CAACsB,4BAA4B,CAAC;UACtDF,MAAM;UACNG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOhB,SAAS,CAACC,KAAK,EAAEoB,EAAE,EAAEM,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAAvC,wBAAA,GAAAA,wBAAA","ignoreList":[]}
+{"version":3,"names":["_constants","require","_ListEntriesFactory","_FilterEntriesByFolderFactory","_decorateIfModelAuthorizationEnabled","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","FilterEntriesByFolderFactory","listEntriesHandler","ListEntriesFactory","decorateIfModelAuthorizationEnabled","cms","allParams","decoratee","model","initialParams","execute","params","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import { AcoContext } from \"~/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listLatestEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listDeletedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,mBAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,oCAAA,GAAAH,OAAA;AAQO,MAAMI,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAIC,0DAA4B,CAACH,sBAAsB,CAAC;IACtF,MAAMI,kBAAkB,GAAG,IAAIC,sCAAkB,CAACL,sBAAsB,CAAC;IAEzE,IAAAM,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEF,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,mBAAmB,EACnB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,sBAAsB,EACtB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,oBAAoB,EACpB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,UAAU,EAAE,OAAO,GAAGC,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,cAAc,EAAE,OAAO,GAAGC,SAAS,KAAK;MACrF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,uBAAuB,EACvB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAE3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,0BAA0B,EAC1B,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAC3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC,GAAGhB,SAAS;MACrD,MAAMO,QAAQ,GAAGF,MAAM,CAACY,eAAe,EAAEV,QAAQ,IAAIF,MAAM,CAACG,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;MAC5C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,yBAAyB,EACzB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGhB,SAAS;MAExD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC,GAAGhB,SAAS;MAC9D,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;MACrD;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC,GAAGhB,SAAS;MAEjD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACQ,0BAA0B,CAChFrB,KAAK,EACL;QACIgB;MACJ,CACJ,CAAC;MAED,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,qBAAqB,EACrB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,CAAC,GAAGlB,SAAS;MAExC,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;MAC/B;MAEA,MAAMR,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED,IAAApB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,WAAW,EAAE,OAAO,GAAGC,SAAS,KAAK;MAClF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC,GAAGxB,SAAS;;MAExD;AACZ;AACA;MACY,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAOvB,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIW,cAAc,KAAKf,sBAAW,EAAE;QAChC,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAArC,wBAAA,GAAAA,wBAAA","ignoreList":[]}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import { FolderLevelPermissions } from "../../flp";
+import { CmsEntry } from "@webiny/api-headless-cms/types";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,30 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FilterEntriesByFolderFactory = void 0;
+var _constants = require("../../constants");
+class FilterEntriesByFolderFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+  }
+  async execute(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccessFolderContent ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+exports.FilterEntriesByFolderFactory = FilterEntriesByFolderFactory;
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_constants","require","FilterEntriesByFolderFactory","constructor","folderLevelPermissions","execute","entries","results","Promise","all","map","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","filter","exports"],"sources":["FilterEntriesByFolderFactory.ts"],"sourcesContent":["import { FolderLevelPermissions } from \"~/flp\";\nimport { CmsEntry } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"mappings":";;;;;;AAEA,IAAAA,UAAA,GAAAC,OAAA;AAEO,MAAMC,4BAA4B,CAAC;EAGtCC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;EACxD;EAEA,MAAaC,OAAOA,CAACC,OAAmB,EAAuB;IAC3D,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,OAAO,CAACI,GAAG,CAAC,MAAMC,KAAK,IAAI;MACvB,MAAMC,QAAQ,GAAGD,KAAK,CAACE,QAAQ,EAAED,QAAQ;MACzC,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAACX,sBAAsB,CAACY,yBAAyB,CAC3EJ,QACJ,CAAC;MACD,MAAMK,sBAAsB,GACxB,MAAM,IAAI,CAACb,sBAAsB,CAACa,sBAAsB,CAAC;QACrDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACN,OAAOD,sBAAsB,GAAGN,KAAK,GAAG,IAAI;IAChD,CAAC,CACL,CAAC;IAED,OAAOJ,OAAO,CAACY,MAAM,CAAER,KAAK,IAAwB,CAAC,CAACA,KAAK,CAAC;EAChE;AACJ;AAACS,OAAA,CAAAlB,4BAAA,GAAAA,4BAAA","ignoreList":[]}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,15 @@
+import { FolderLevelPermissions } from "../../flp";
+import { CmsEntry, CmsEntryListParams, CmsEntryMeta, CmsEntryValues, type CmsModel } from "@webiny/api-headless-cms/types";
+interface ListEntriesFactoryCallbackParams {
+    decoratee: <T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, params: CmsEntryListParams) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;
+    model: CmsModel;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute({ decoratee, model, initialParams }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,107 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ListEntriesFactory = void 0;
+var _hasRootFolderId = require("./hasRootFolderId");
+class ListEntriesFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.permissionsCache = new Map();
+  }
+  async execute({
+    decoratee,
+    model,
+    initialParams = {}
+  }) {
+    const limit = initialParams?.limit || 50;
+    const where = initialParams?.where;
+    const params = {
+      ...initialParams,
+      limit
+    };
+    const hasRootFolder = (0, _hasRootFolderId.hasRootFolderId)({
+      model,
+      where
+    });
+
+    // If we're querying the root folder, skip permission checks
+    if (hasRootFolder) {
+      return await decoratee(model, params);
+    }
+    const resultEntries = [];
+    let totalCount = 0;
+    let hasMoreItems = true;
+    let cursor = null;
+    let fetchedAll = false;
+    let afterCursor = params.after;
+
+    // Process entries in batches until we have enough results or reach the end
+    while (!fetchedAll) {
+      const queryParams = {
+        ...params,
+        after: afterCursor
+      };
+      const [entries, currentMeta] = await decoratee(model, queryParams);
+      if (totalCount === 0) {
+        totalCount = currentMeta.totalCount;
+      }
+
+      // Process each entry and check folder permissions
+      for (const entry of entries) {
+        const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+
+        // If entry has no folderId, it's not using ACO folders system
+        // Include it in results as it's not subject to folder permissions
+        if (!folderId) {
+          resultEntries.push(entry);
+          continue;
+        }
+        const permissions = await this.getPermissions(folderId);
+
+        // If no FLP exists for the folder, the entry is accessible
+        // This means the folder doesn't have any permission restrictions
+        if (!permissions.length) {
+          resultEntries.push(entry);
+          continue;
+        }
+
+        // Check if user has read permission for the folder
+        if (await this.folderLevelPermissions.canAccessFolderContent({
+          permissions,
+          rwd: "r"
+        })) {
+          resultEntries.push(entry);
+        } else {
+          totalCount--;
+        }
+      }
+
+      // Determine if we need to fetch more entries
+      if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {
+        fetchedAll = true;
+        hasMoreItems = currentMeta.hasMoreItems;
+        cursor = currentMeta.cursor;
+      } else {
+        afterCursor = currentMeta.cursor;
+      }
+    }
+    return [resultEntries, {
+      totalCount,
+      hasMoreItems,
+      cursor
+    }];
+  }
+  async getPermissions(folderId) {
+    if (this.permissionsCache.has(folderId)) {
+      return this.permissionsCache.get(folderId) ?? [];
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    this.permissionsCache.set(folderId, permissions);
+    return permissions;
+  }
+}
+exports.ListEntriesFactory = ListEntriesFactory;
+
+//# sourceMappingURL=ListEntriesFactory.js.map

package/utils/decorators/ListEntriesFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_hasRootFolderId","require","ListEntriesFactory","constructor","folderLevelPermissions","permissionsCache","Map","execute","decoratee","model","initialParams","limit","where","params","hasRootFolder","hasRootFolderId","resultEntries","totalCount","hasMoreItems","cursor","fetchedAll","afterCursor","after","queryParams","entries","currentMeta","entry","folderId","values","location","push","permissions","getPermissions","length","canAccessFolderContent","rwd","has","get","getFolderLevelPermissions","set","exports"],"sources":["ListEntriesFactory.ts"],"sourcesContent":["import { FolderLevelPermissions } from \"~/flp\";\nimport {\n    CmsEntry,\n    CmsEntryListParams,\n    CmsEntryMeta,\n    CmsEntryValues,\n    type CmsModel\n} from \"@webiny/api-headless-cms/types\";\nimport { hasRootFolderId } from \"~/utils/decorators/hasRootFolderId\";\nimport type { FolderPermission } from \"~/flp/flp.types\";\n\ninterface ListEntriesFactoryCallbackParams {\n    decoratee: <T extends CmsEntryValues = CmsEntryValues>(\n        model: CmsModel,\n        params: CmsEntryListParams\n    ) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;\n    model: CmsModel;\n    initialParams?: CmsEntryListParams;\n}\n\nexport class ListEntriesFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n    private readonly permissionsCache: Map<string, FolderPermission[]>;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n        this.permissionsCache = new Map();\n    }\n\n    public async execute({\n        decoratee,\n        model,\n        initialParams = {}\n    }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]> {\n        const limit = initialParams?.limit || 50;\n        const where = initialParams?.where;\n        const params = { ...initialParams, limit };\n        const hasRootFolder = hasRootFolderId({ model, where });\n\n        // If we're querying the root folder, skip permission checks\n        if (hasRootFolder) {\n            return await decoratee(model, params);\n        }\n\n        const resultEntries: CmsEntry[] = [];\n        let totalCount = 0;\n        let hasMoreItems = true;\n        let cursor: string | null = null;\n        let fetchedAll = false;\n        let afterCursor = params.after;\n\n        // Process entries in batches until we have enough results or reach the end\n        while (!fetchedAll) {\n            const queryParams: CmsEntryListParams = { ...params, after: afterCursor };\n            const [entries, currentMeta] = await decoratee(model, queryParams);\n\n            if (totalCount === 0) {\n                totalCount = currentMeta.totalCount;\n            }\n\n            // Process each entry and check folder permissions\n            for (const entry of entries) {\n                const folderId = entry.values?.location?.folderId || entry.location?.folderId;\n\n                // If entry has no folderId, it's not using ACO folders system\n                // Include it in results as it's not subject to folder permissions\n                if (!folderId) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                const permissions = await this.getPermissions(folderId);\n\n                // If no FLP exists for the folder, the entry is accessible\n                // This means the folder doesn't have any permission restrictions\n                if (!permissions.length) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                // Check if user has read permission for the folder\n                if (\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    })\n                ) {\n                    resultEntries.push(entry);\n                } else {\n                    totalCount--;\n                }\n            }\n\n            // Determine if we need to fetch more entries\n            if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {\n                fetchedAll = true;\n                hasMoreItems = currentMeta.hasMoreItems;\n                cursor = currentMeta.cursor;\n            } else {\n                afterCursor = currentMeta.cursor;\n            }\n        }\n\n        return [resultEntries, { totalCount, hasMoreItems, cursor } as CmsEntryMeta];\n    }\n\n    private async getPermissions(folderId: string): Promise<FolderPermission[]> {\n        if (this.permissionsCache.has(folderId)) {\n            return this.permissionsCache.get(folderId) ?? [];\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        this.permissionsCache.set(folderId, permissions);\n        return permissions;\n    }\n}\n"],"mappings":";;;;;;AAQA,IAAAA,gBAAA,GAAAC,OAAA;AAYO,MAAMC,kBAAkB,CAAC;EAI5BC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;IACpD,IAAI,CAACC,gBAAgB,GAAG,IAAIC,GAAG,CAAC,CAAC;EACrC;EAEA,MAAaC,OAAOA,CAAC;IACjBC,SAAS;IACTC,KAAK;IACLC,aAAa,GAAG,CAAC;EACa,CAAC,EAAuC;IACtE,MAAMC,KAAK,GAAGD,aAAa,EAAEC,KAAK,IAAI,EAAE;IACxC,MAAMC,KAAK,GAAGF,aAAa,EAAEE,KAAK;IAClC,MAAMC,MAAM,GAAG;MAAE,GAAGH,aAAa;MAAEC;IAAM,CAAC;IAC1C,MAAMG,aAAa,GAAG,IAAAC,gCAAe,EAAC;MAAEN,KAAK;MAAEG;IAAM,CAAC,CAAC;;IAEvD;IACA,IAAIE,aAAa,EAAE;MACf,OAAO,MAAMN,SAAS,CAACC,KAAK,EAAEI,MAAM,CAAC;IACzC;IAEA,MAAMG,aAAyB,GAAG,EAAE;IACpC,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,YAAY,GAAG,IAAI;IACvB,IAAIC,MAAqB,GAAG,IAAI;IAChC,IAAIC,UAAU,GAAG,KAAK;IACtB,IAAIC,WAAW,GAAGR,MAAM,CAACS,KAAK;;IAE9B;IACA,OAAO,CAACF,UAAU,EAAE;MAChB,MAAMG,WAA+B,GAAG;QAAE,GAAGV,MAAM;QAAES,KAAK,EAAED;MAAY,CAAC;MACzE,MAAM,CAACG,OAAO,EAAEC,WAAW,CAAC,GAAG,MAAMjB,SAAS,CAACC,KAAK,EAAEc,WAAW,CAAC;MAElE,IAAIN,UAAU,KAAK,CAAC,EAAE;QAClBA,UAAU,GAAGQ,WAAW,CAACR,UAAU;MACvC;;MAEA;MACA,KAAK,MAAMS,KAAK,IAAIF,OAAO,EAAE;QACzB,MAAMG,QAAQ,GAAGD,KAAK,CAACE,MAAM,EAAEC,QAAQ,EAAEF,QAAQ,IAAID,KAAK,CAACG,QAAQ,EAAEF,QAAQ;;QAE7E;QACA;QACA,IAAI,CAACA,QAAQ,EAAE;UACXX,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;QAEA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAACL,QAAQ,CAAC;;QAEvD;QACA;QACA,IAAI,CAACI,WAAW,CAACE,MAAM,EAAE;UACrBjB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;;QAEA;QACA,IACI,MAAM,IAAI,CAACtB,sBAAsB,CAAC8B,sBAAsB,CAAC;UACrDH,WAAW;UACXI,GAAG,EAAE;QACT,CAAC,CAAC,EACJ;UACEnB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;QAC7B,CAAC,MAAM;UACHT,UAAU,EAAE;QAChB;MACJ;;MAEA;MACA,IAAI,CAACQ,WAAW,CAACP,YAAY,IAAIF,aAAa,CAACiB,MAAM,IAAItB,KAAK,EAAE;QAC5DS,UAAU,GAAG,IAAI;QACjBF,YAAY,GAAGO,WAAW,CAACP,YAAY;QACvCC,MAAM,GAAGM,WAAW,CAACN,MAAM;MAC/B,CAAC,MAAM;QACHE,WAAW,GAAGI,WAAW,CAACN,MAAM;MACpC;IACJ;IAEA,OAAO,CAACH,aAAa,EAAE;MAAEC,UAAU;MAAEC,YAAY;MAAEC;IAAO,CAAC,CAAiB;EAChF;EAEA,MAAca,cAAcA,CAACL,QAAgB,EAA+B;IACxE,IAAI,IAAI,CAACtB,gBAAgB,CAAC+B,GAAG,CAACT,QAAQ,CAAC,EAAE;MACrC,OAAO,IAAI,CAACtB,gBAAgB,CAACgC,GAAG,CAACV,QAAQ,CAAC,IAAI,EAAE;IACpD;IAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAAC3B,sBAAsB,CAACkC,yBAAyB,CAACX,QAAQ,CAAC;IACzF,IAAI,CAACtB,gBAAgB,CAACkC,GAAG,CAACZ,QAAQ,EAAEI,WAAW,CAAC;IAChD,OAAOA,WAAW;EACtB;AACJ;AAACS,OAAA,CAAAtC,kBAAA,GAAAA,kBAAA","ignoreList":[]}

package/utils/decorators/decorateIfModelAuthorizationEnabled.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.decorateIfModelAuthorizationEnabled = void 0;
+var _folder = require("../../folder/folder.model");
 /**
  * This type matches any function that has a CmsModel as the first parameter.
  */
@@ -28,6 +29,9 @@ const modelAuthorizationDisabled = model => {
   }
   return model.authorization === false;
 };
+const isFolderModel = model => {
+  return model.modelId === _folder.FOLDER_MODEL_ID;
+};
 const decorateIfModelAuthorizationEnabled = (root, method, decorator) => {
   /**
    * We cast to `ModelCallable` because within the generic function, we only know that the first
@@ -36,6 +40,9 @@ const decorateIfModelAuthorizationEnabled = (root, method, decorator) => {
   const decoratee = root[method].bind(root);
   root[method] = (...params) => {
     const [model, ...rest] = params;
+    if (isFolderModel(model)) {
+      return decoratee(model, ...rest);
+    }
     if (modelAuthorizationDisabled(model)) {
       return decoratee(model, ...rest);
     }

package/utils/decorators/decorateIfModelAuthorizationEnabled.js.map

@@ -1 +1 @@
-{"version":3,"names":["modelAuthorizationDisabled","model","authorization","flp","decorateIfModelAuthorizationEnabled","root","method","decorator","decoratee","bind","params","rest","exports"],"sources":["decorateIfModelAuthorizationEnabled.ts"],"sourcesContent":["import { CmsModel, HeadlessCms } from \"@webiny/api-headless-cms/types\";\n\n/**\n * This type matches any function that has a CmsModel as the first parameter.\n */\ntype ModelCallable = (model: CmsModel, ...params: any[]) => any;\n\n/**\n * This type filters only `ModelCallable` methods.\n */\ntype FilterModelMethods<T> = {\n    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];\n};\n\n/**\n * This type omits methods that have a more complex `model` type.\n * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.\n * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.\n */\ntype ModelMethods<T> = Omit<FilterModelMethods<T>, \"getEntryManager\" | \"getSingletonEntryManager\">;\n\n/**\n * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.\n */\ntype Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;\n\nconst modelAuthorizationDisabled = (model: CmsModel) => {\n    if (typeof model.authorization === \"object\") {\n        return model?.authorization?.flp === false;\n    }\n\n    return model.authorization === false;\n};\n\nexport const decorateIfModelAuthorizationEnabled = <\n    /**\n     * This allows us to only have an auto-complete of `ModelCallable` methods.\n     */\n    M extends keyof ModelMethods<HeadlessCms>,\n    D extends Decorator<ModelMethods<HeadlessCms>[M]>\n>(\n    root: ModelMethods<HeadlessCms>,\n    method: M,\n    decorator: D\n) => {\n    /**\n     * We cast to `ModelCallable` because within the generic function, we only know that the first\n     * parameter is a `CmsModel`, and we forward the rest.\n     */\n    const decoratee = root[method].bind(root) as ModelCallable;\n    root[method] = ((...params: Parameters<ModelMethods<HeadlessCms>[M]>) => {\n        const [model, ...rest] = params;\n        if (modelAuthorizationDisabled(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        return decorator(decoratee, ...params);\n    }) as ModelCallable;\n};\n"],"mappings":";;;;;;AAEA;AACA;AACA;;AAGA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;;AAGA,MAAMA,0BAA0B,GAAIC,KAAe,IAAK;EACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;IACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;EAC9C;EAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;AACxC,CAAC;AAEM,MAAME,mCAAmC,GAAGA,CAO/CC,IAA+B,EAC/BC,MAAS,EACTC,SAAY,KACX;EACD;AACJ;AACA;AACA;EACI,MAAMC,SAAS,GAAGH,IAAI,CAACC,MAAM,CAAC,CAACG,IAAI,CAACJ,IAAI,CAAkB;EAC1DA,IAAI,CAACC,MAAM,CAAC,GAAI,CAAC,GAAGI,MAAgD,KAAK;IACrE,MAAM,CAACT,KAAK,EAAE,GAAGU,IAAI,CAAC,GAAGD,MAAM;IAC/B,IAAIV,0BAA0B,CAACC,KAAK,CAAC,EAAE;MACnC,OAAOO,SAAS,CAACP,KAAK,EAAE,GAAGU,IAAI,CAAC;IACpC;IAEA,OAAOJ,SAAS,CAACC,SAAS,EAAE,GAAGE,MAAM,CAAC;EAC1C,CAAmB;AACvB,CAAC;AAACE,OAAA,CAAAR,mCAAA,GAAAA,mCAAA","ignoreList":[]}
+{"version":3,"names":["_folder","require","modelAuthorizationDisabled","model","authorization","flp","isFolderModel","modelId","FOLDER_MODEL_ID","decorateIfModelAuthorizationEnabled","root","method","decorator","decoratee","bind","params","rest","exports"],"sources":["decorateIfModelAuthorizationEnabled.ts"],"sourcesContent":["import { CmsModel, HeadlessCms } from \"@webiny/api-headless-cms/types\";\nimport { FOLDER_MODEL_ID } from \"~/folder/folder.model\";\n\n/**\n * This type matches any function that has a CmsModel as the first parameter.\n */\ntype ModelCallable = (model: CmsModel, ...params: any[]) => any;\n\n/**\n * This type filters only `ModelCallable` methods.\n */\ntype FilterModelMethods<T> = {\n    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];\n};\n\n/**\n * This type omits methods that have a more complex `model` type.\n * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.\n * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.\n */\ntype ModelMethods<T> = Omit<FilterModelMethods<T>, \"getEntryManager\" | \"getSingletonEntryManager\">;\n\n/**\n * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.\n */\ntype Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;\n\nconst modelAuthorizationDisabled = (model: CmsModel) => {\n    if (typeof model.authorization === \"object\") {\n        return model?.authorization?.flp === false;\n    }\n\n    return model.authorization === false;\n};\n\nconst isFolderModel = (model: CmsModel) => {\n    return model.modelId === FOLDER_MODEL_ID;\n};\n\nexport const decorateIfModelAuthorizationEnabled = <\n    /**\n     * This allows us to only have an auto-complete of `ModelCallable` methods.\n     */\n    M extends keyof ModelMethods<HeadlessCms>,\n    D extends Decorator<ModelMethods<HeadlessCms>[M]>\n>(\n    root: ModelMethods<HeadlessCms>,\n    method: M,\n    decorator: D\n) => {\n    /**\n     * We cast to `ModelCallable` because within the generic function, we only know that the first\n     * parameter is a `CmsModel`, and we forward the rest.\n     */\n    const decoratee = root[method].bind(root) as ModelCallable;\n    root[method] = ((...params: Parameters<ModelMethods<HeadlessCms>[M]>) => {\n        const [model, ...rest] = params;\n        if (isFolderModel(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        if (modelAuthorizationDisabled(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        return decorator(decoratee, ...params);\n    }) as ModelCallable;\n};\n"],"mappings":";;;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAEA;AACA;AACA;;AAGA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;;AAGA,MAAMC,0BAA0B,GAAIC,KAAe,IAAK;EACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;IACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;EAC9C;EAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;AACxC,CAAC;AAED,MAAME,aAAa,GAAIH,KAAe,IAAK;EACvC,OAAOA,KAAK,CAACI,OAAO,KAAKC,uBAAe;AAC5C,CAAC;AAEM,MAAMC,mCAAmC,GAAGA,CAO/CC,IAA+B,EAC/BC,MAAS,EACTC,SAAY,KACX;EACD;AACJ;AACA;AACA;EACI,MAAMC,SAAS,GAAGH,IAAI,CAACC,MAAM,CAAC,CAACG,IAAI,CAACJ,IAAI,CAAkB;EAC1DA,IAAI,CAACC,MAAM,CAAC,GAAI,CAAC,GAAGI,MAAgD,KAAK;IACrE,MAAM,CAACZ,KAAK,EAAE,GAAGa,IAAI,CAAC,GAAGD,MAAM;IAC/B,IAAIT,aAAa,CAACH,KAAK,CAAC,EAAE;MACtB,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,IAAId,0BAA0B,CAACC,KAAK,CAAC,EAAE;MACnC,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,OAAOJ,SAAS,CAACC,SAAS,EAAE,GAAGE,MAAM,CAAC;EAC1C,CAAmB;AACvB,CAAC;AAACE,OAAA,CAAAR,mCAAA,GAAAA,mCAAA","ignoreList":[]}

package/utils/decorators/hasRootFolderId.d.ts

@@ -0,0 +1,7 @@
+import { CmsEntryListWhere, CmsModel } from "@webiny/api-headless-cms/types";
+interface Params {
+    model: CmsModel;
+    where: CmsEntryListWhere | undefined;
+}
+export declare const hasRootFolderId: ({ model, where }: Params) => boolean;
+export {};

package/utils/decorators/hasRootFolderId.js

@@ -0,0 +1,27 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.hasRootFolderId = void 0;
+var _isPlainObject = _interopRequireDefault(require("lodash/isPlainObject"));
+var _isPageModel = require("./isPageModel");
+var _constants = require("../../constants");
+const hasRootFolderId = ({
+  model,
+  where
+}) => {
+  if (!where) {
+    return false;
+  }
+  const key = (0, _isPageModel.isPageModel)(model) ? "location" : "wbyAco_location";
+  const location = where[key];
+  if (typeof location === "object" && location !== null && (0, _isPlainObject.default)(location)) {
+    return location.folderId === _constants.ROOT_FOLDER;
+  }
+  return false;
+};
+exports.hasRootFolderId = hasRootFolderId;
+
+//# sourceMappingURL=hasRootFolderId.js.map

package/utils/decorators/hasRootFolderId.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_isPlainObject","_interopRequireDefault","require","_isPageModel","_constants","hasRootFolderId","model","where","key","isPageModel","location","isPlainObject","folderId","ROOT_FOLDER","exports"],"sources":["hasRootFolderId.ts"],"sourcesContent":["import isPlainObject from \"lodash/isPlainObject\";\nimport { isPageModel } from \"~/utils/decorators/isPageModel\";\nimport { CmsEntryListWhere, CmsModel } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\ninterface Params {\n    model: CmsModel;\n    where: CmsEntryListWhere | undefined;\n}\n\nexport const hasRootFolderId = ({ model, where }: Params): boolean => {\n    if (!where) {\n        return false;\n    }\n\n    const key = isPageModel(model) ? \"location\" : \"wbyAco_location\";\n    const location = where[key];\n\n    if (typeof location === \"object\" && location !== null && isPlainObject(location)) {\n        return (location as Record<string, any>).folderId === ROOT_FOLDER;\n    }\n\n    return false;\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,cAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AAOO,MAAMG,eAAe,GAAGA,CAAC;EAAEC,KAAK;EAAEC;AAAc,CAAC,KAAc;EAClE,IAAI,CAACA,KAAK,EAAE;IACR,OAAO,KAAK;EAChB;EAEA,MAAMC,GAAG,GAAG,IAAAC,wBAAW,EAACH,KAAK,CAAC,GAAG,UAAU,GAAG,iBAAiB;EAC/D,MAAMI,QAAQ,GAAGH,KAAK,CAACC,GAAG,CAAC;EAE3B,IAAI,OAAOE,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,IAAI,IAAAC,sBAAa,EAACD,QAAQ,CAAC,EAAE;IAC9E,OAAQA,QAAQ,CAAyBE,QAAQ,KAAKC,sBAAW;EACrE;EAEA,OAAO,KAAK;AAChB,CAAC;AAACC,OAAA,CAAAT,eAAA,GAAAA,eAAA","ignoreList":[]}

package/utils/pickEntryFieldValues.js

@@ -7,7 +7,7 @@ exports.baseFields = void 0;
 exports.pickEntryFieldValues = pickEntryFieldValues;
 const baseFields = exports.baseFields = [
 // Entry ID is mapped to "id" (we don't use revisions with ACO entities).
-"id", "createdOn", "modifiedOn", "savedOn", "createdBy", "modifiedBy", "savedBy"];
+"id", "tenant", "locale", "createdOn", "modifiedOn", "savedOn", "createdBy", "modifiedBy", "savedBy"];
 const pickBaseEntryFieldValues = entry => {
   const pickedValues = {};
   for (const fieldName of baseFields) {

package/utils/pickEntryFieldValues.js.map

@@ -1 +1 @@
-{"version":3,"names":["baseFields","exports","pickBaseEntryFieldValues","entry","pickedValues","fieldName","srcFieldName","targetFieldName","split","Object","assign","pickEntryFieldValues","values"],"sources":["pickEntryFieldValues.ts"],"sourcesContent":["import { CmsEntry } from \"@webiny/api-headless-cms/types\";\n\nexport const baseFields = [\n    // Entry ID is mapped to \"id\" (we don't use revisions with ACO entities).\n    \"id\",\n\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\"\n];\n\nconst pickBaseEntryFieldValues = (entry: CmsEntry) => {\n    const pickedValues: Partial<CmsEntry> = {};\n    for (const fieldName of baseFields) {\n        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(\":\");\n        if (srcFieldName in entry) {\n            Object.assign(pickedValues, {\n                [targetFieldName]: entry[srcFieldName as keyof CmsEntry]\n            });\n        }\n    }\n\n    return pickedValues;\n};\n\nexport function pickEntryFieldValues<T>(entry: CmsEntry): T {\n    return {\n        ...pickBaseEntryFieldValues(entry),\n        ...entry.values\n    } as T;\n}\n"],"mappings":";;;;;;;AAEO,MAAMA,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG;AACtB;AACA,IAAI,EAEJ,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,SAAS,CACZ;AAED,MAAME,wBAAwB,GAAIC,KAAe,IAAK;EAClD,MAAMC,YAA+B,GAAG,CAAC,CAAC;EAC1C,KAAK,MAAMC,SAAS,IAAIL,UAAU,EAAE;IAChC,MAAM,CAACM,YAAY,EAAEC,eAAe,GAAGD,YAAY,CAAC,GAAGD,SAAS,CAACG,KAAK,CAAC,GAAG,CAAC;IAC3E,IAAIF,YAAY,IAAIH,KAAK,EAAE;MACvBM,MAAM,CAACC,MAAM,CAACN,YAAY,EAAE;QACxB,CAACG,eAAe,GAAGJ,KAAK,CAACG,YAAY;MACzC,CAAC,CAAC;IACN;EACJ;EAEA,OAAOF,YAAY;AACvB,CAAC;AAEM,SAASO,oBAAoBA,CAAIR,KAAe,EAAK;EACxD,OAAO;IACH,GAAGD,wBAAwB,CAACC,KAAK,CAAC;IAClC,GAAGA,KAAK,CAACS;EACb,CAAC;AACL","ignoreList":[]}
+{"version":3,"names":["baseFields","exports","pickBaseEntryFieldValues","entry","pickedValues","fieldName","srcFieldName","targetFieldName","split","Object","assign","pickEntryFieldValues","values"],"sources":["pickEntryFieldValues.ts"],"sourcesContent":["import { CmsEntry } from \"@webiny/api-headless-cms/types\";\n\nexport const baseFields = [\n    // Entry ID is mapped to \"id\" (we don't use revisions with ACO entities).\n    \"id\",\n    \"tenant\",\n    \"locale\",\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\"\n];\n\nconst pickBaseEntryFieldValues = (entry: CmsEntry) => {\n    const pickedValues: Partial<CmsEntry> = {};\n    for (const fieldName of baseFields) {\n        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(\":\");\n        if (srcFieldName in entry) {\n            Object.assign(pickedValues, {\n                [targetFieldName]: entry[srcFieldName as keyof CmsEntry]\n            });\n        }\n    }\n\n    return pickedValues;\n};\n\nexport function pickEntryFieldValues<T>(entry: CmsEntry): T {\n    return {\n        ...pickBaseEntryFieldValues(entry),\n        ...entry.values\n    } as T;\n}\n"],"mappings":";;;;;;;AAEO,MAAMA,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG;AACtB;AACA,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,SAAS,CACZ;AAED,MAAME,wBAAwB,GAAIC,KAAe,IAAK;EAClD,MAAMC,YAA+B,GAAG,CAAC,CAAC;EAC1C,KAAK,MAAMC,SAAS,IAAIL,UAAU,EAAE;IAChC,MAAM,CAACM,YAAY,EAAEC,eAAe,GAAGD,YAAY,CAAC,GAAGD,SAAS,CAACG,KAAK,CAAC,GAAG,CAAC;IAC3E,IAAIF,YAAY,IAAIH,KAAK,EAAE;MACvBM,MAAM,CAACC,MAAM,CAACN,YAAY,EAAE;QACxB,CAACG,eAAe,GAAGJ,KAAK,CAACG,YAAY;MACzC,CAAC,CAAC;IACN;EACJ;EAEA,OAAOF,YAAY;AACvB,CAAC;AAEM,SAASO,oBAAoBA,CAAIR,KAAe,EAAK;EACxD,OAAO;IACH,GAAGD,wBAAwB,CAACC,KAAK,CAAC;IAClC,GAAGA,KAAK,CAACS;EACb,CAAC;AACL","ignoreList":[]}

package/utils/FolderLevelPermissions.d.ts

@@ -1,75 +0,0 @@
-import { Authentication } from "@webiny/api-authentication/types";
-import { SecurityPermission, Team } from "@webiny/api-security/types";
-import { Folder, ListFoldersParams } from "../folder/folder.types";
-import { ListMeta } from "../types";
-export type FolderAccessLevel = "owner" | "viewer" | "editor" | "public";
-export interface FolderPermission {
-    target: string;
-    level: FolderAccessLevel;
-    inheritedFrom?: string;
-}
-export interface FolderPermissionsListItem {
-    folderId: string;
-    permissions: FolderPermission[];
-}
-export type FolderPermissionsList = FolderPermissionsListItem[];
-export interface CanAccessFolderContentParams {
-    folder: Pick<Folder, "id" | "type" | "parentId">;
-    rwd?: "r" | "w" | "d";
-    foldersList?: Folder[];
-}
-export interface CanAccessFolderParams extends CanAccessFolderContentParams {
-    managePermissions?: boolean;
-}
-interface FilterFoldersParams {
-    folders: Array<Folder>;
-    rwd?: "r" | "w" | "d";
-}
-interface GetFolderPermissionsParams {
-    folder: Pick<Folder, "id" | "type">;
-    foldersList?: Folder[];
-}
-interface ListFolderPermissionsParams {
-    folderType: string;
-    foldersList?: Folder[];
-}
-export interface FolderLevelPermissionsParams {
-    getIdentity: Authentication["getIdentity"];
-    listIdentityTeams: () => Promise<Team[]>;
-    listPermissions: () => Promise<SecurityPermission[]>;
-    listAllFolders: (params: ListFoldersParams) => Promise<[Folder[], ListMeta]>;
-    canUseTeams: () => boolean;
-    canUseFolderLevelPermissions: () => boolean;
-    isAuthorizationEnabled: () => boolean;
-}
-export declare class FolderLevelPermissions {
-    canUseFolderLevelPermissions: () => boolean;
-    private readonly getIdentity;
-    private readonly listIdentityTeams;
-    private readonly listPermissions;
-    private readonly canUseTeams;
-    private readonly isAuthorizationEnabled;
-    private foldersPermissionsLists;
-    private foldersLoader;
-    constructor(params: FolderLevelPermissionsParams);
-    listAllFolders(folderType: string): Promise<Folder[]>;
-    listAllFoldersWithPermissions(folderType: string): Promise<Folder[]>;
-    invalidateFoldersCache(folderType?: string): void;
-    invalidateFoldersPermissionsListCache(folderType?: string): void;
-    addFolderToCache(folderType: string, folder: Folder): void;
-    updateFoldersCache(folderType: string, modifier: (folder: Folder) => Folder): void;
-    listFoldersPermissions(params: ListFolderPermissionsParams): Promise<FolderPermissionsList>;
-    getFolderPermissions(params: GetFolderPermissionsParams): Promise<FolderPermissionsListItem | undefined>;
-    canAccessFolder(params: CanAccessFolderParams): Promise<boolean>;
-    ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void>;
-    canManageFolderPermissions(folder: Folder): boolean | Promise<boolean>;
-    canManageFolderStructure(folder: Folder): true | Promise<boolean>;
-    canManageFolderContent(folder: Folder): true | Promise<boolean>;
-    canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean>;
-    ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void>;
-    canCreateFolderInRoot(): Promise<boolean>;
-    filterFolders(params: FilterFoldersParams): Promise<Folder[]>;
-    assignFolderPermissions(folder: Folder | Folder[]): Promise<void>;
-    permissionsIncludeNonInheritedPermissions(folderPermissionsList?: FolderPermission[]): boolean | undefined;
-}
-export {};