@webiny/api-apw 0.0.0-unstable.cc58a6566b → 0.0.0-unstable.d13302545b

package/storageOperations/changeRequestStorageOperations.js

@@ -16,9 +16,9 @@ const createChangeRequestStorageOperations = params => {
     security
   } = params;
   const getChangeRequestModel = async () => {
-    security.disableAuthorization();
-    const model = await cms.getModel("apwChangeRequestModelDefinition");
-    security.enableAuthorization();
+    const model = await security.withoutAuthorization(async () => {
+      return cms.getModel("apwChangeRequestModelDefinition");
+    });
     if (!model) {
       throw new _error.default("Could not find `apwChangeRequestModelDefinition` model.", "MODEL_NOT_FOUND_ERROR");
     }
@@ -28,9 +28,9 @@ const createChangeRequestStorageOperations = params => {
     id
   }) => {
     const model = await getChangeRequestModel();
-    security.disableAuthorization();
-    const entry = await cms.getEntryById(model, id);
-    security.enableAuthorization();
+    const entry = await security.withoutAuthorization(async () => {
+      return cms.getEntryById(model, id);
+    });
     return (0, _fieldResolver.getFieldValues)({
       entry,
       fields: _index.baseFields,
@@ -43,11 +43,11 @@ const createChangeRequestStorageOperations = params => {
     getChangeRequest,
     async listChangeRequests(params) {
       const model = await getChangeRequestModel();
-      security.disableAuthorization();
-      const [entries, meta] = await cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
-        where: (0, _objectSpread2.default)({}, params.where)
-      }));
-      security.enableAuthorization();
+      const [entries, meta] = await security.withoutAuthorization(async () => {
+        return cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
+          where: (0, _objectSpread2.default)({}, params.where)
+        }));
+      });
       try {
         const all = await Promise.all(entries.map(entry => (0, _fieldResolver.getFieldValues)({
           entry,
@@ -62,9 +62,9 @@ const createChangeRequestStorageOperations = params => {
     },
     async createChangeRequest(params) {
       const model = await getChangeRequestModel();
-      security.disableAuthorization();
-      const entry = await cms.createEntry(model, params.data);
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.createEntry(model, params.data);
+      });
       return (0, _fieldResolver.getFieldValues)({
         entry,
         fields: _index.baseFields,
@@ -81,9 +81,9 @@ const createChangeRequestStorageOperations = params => {
       const existingEntry = await getChangeRequest({
         id: params.id
       });
-      security.disableAuthorization();
-      const entry = await cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
+      });
       return (0, _fieldResolver.getFieldValues)({
         entry,
         fields: _index.baseFields,
@@ -93,9 +93,9 @@ const createChangeRequestStorageOperations = params => {
     },
     async deleteChangeRequest(params) {
       const model = await getChangeRequestModel();
-      security.disableAuthorization();
-      await cms.deleteEntry(model, params.id);
-      security.enableAuthorization();
+      await security.withoutAuthorization(async () => {
+        return cms.deleteEntry(model, params.id);
+      });
       return true;
     }
   };

package/storageOperations/changeRequestStorageOperations.js.map

@@ -1 +1 @@
-{"version":3,"names":["createChangeRequestStorageOperations","params","cms","getCmsContext","security","getChangeRequestModel","disableAuthorization","model","getModel","enableAuthorization","WebinyError","getChangeRequest","id","entry","getEntryById","getFieldValues","fields","baseFields","context","transformers","getTransformer","listChangeRequests","entries","meta","listLatestEntries","where","all","Promise","map","ex","message","code","data","createChangeRequest","createEntry","updateChangeRequest","existingEntry","updateEntry","deleteChangeRequest","deleteEntry"],"sources":["changeRequestStorageOperations.ts"],"sourcesContent":["import { ApwChangeRequestStorageOperations } from \"./types\";\nimport { baseFields, CreateApwStorageOperationsParams } from \"~/storageOperations/index\";\nimport { getFieldValues, getTransformer } from \"~/utils/fieldResolver\";\nimport WebinyError from \"@webiny/error\";\nimport { ApwChangeRequest } from \"~/types\";\n\nexport const createChangeRequestStorageOperations = (\n    params: CreateApwStorageOperationsParams\n): ApwChangeRequestStorageOperations => {\n    const { cms, getCmsContext, security } = params;\n    const getChangeRequestModel = async () => {\n        security.disableAuthorization();\n        const model = await cms.getModel(\"apwChangeRequestModelDefinition\");\n        security.enableAuthorization();\n        if (!model) {\n            throw new WebinyError(\n                \"Could not find `apwChangeRequestModelDefinition` model.\",\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getChangeRequest: ApwChangeRequestStorageOperations[\"getChangeRequest\"] = async ({\n        id\n    }) => {\n        const model = await getChangeRequestModel();\n        security.disableAuthorization();\n        const entry = await cms.getEntryById(model, id);\n        security.enableAuthorization();\n        return getFieldValues({\n            entry,\n            fields: baseFields,\n            context: getCmsContext(),\n            transformers: [getTransformer(model, \"body\")]\n        });\n    };\n    return {\n        getChangeRequestModel,\n        getChangeRequest,\n        async listChangeRequests(params) {\n            const model = await getChangeRequestModel();\n            security.disableAuthorization();\n            const [entries, meta] = await cms.listLatestEntries(model, {\n                ...params,\n                where: {\n                    ...params.where\n                }\n            });\n            security.enableAuthorization();\n            try {\n                const all = await Promise.all(\n                    entries.map(entry =>\n                        getFieldValues<ApwChangeRequest>({\n                            entry,\n                            fields: baseFields,\n                            context: getCmsContext(),\n                            transformers: [getTransformer(model, \"body\")]\n                        })\n                    )\n                );\n                return [all, meta];\n            } catch (ex) {\n                throw new WebinyError(ex.message, ex.code, ex.data);\n            }\n        },\n        async createChangeRequest(params) {\n            const model = await getChangeRequestModel();\n            security.disableAuthorization();\n            const entry = await cms.createEntry(model, params.data);\n            security.enableAuthorization();\n            return getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n        },\n        async updateChangeRequest(params) {\n            const model = await getChangeRequestModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getChangeRequest({ id: params.id });\n\n            security.disableAuthorization();\n            const entry = await cms.updateEntry(model, params.id, {\n                ...existingEntry,\n                ...params.data\n            });\n            security.enableAuthorization();\n            return getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n        },\n        async deleteChangeRequest(params) {\n            const model = await getChangeRequestModel();\n            security.disableAuthorization();\n            await cms.deleteEntry(model, params.id);\n            security.enableAuthorization();\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AACA;AACA;AAGO,MAAMA,oCAAoC,GAC7CC,MAAwC,IACJ;EACpC,MAAM;IAAEC,GAAG;IAAEC,aAAa;IAAEC;EAAS,CAAC,GAAGH,MAAM;EAC/C,MAAMI,qBAAqB,GAAG,YAAY;IACtCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMC,KAAK,GAAG,MAAML,GAAG,CAACM,QAAQ,CAAC,iCAAiC,CAAC;IACnEJ,QAAQ,CAACK,mBAAmB,EAAE;IAC9B,IAAI,CAACF,KAAK,EAAE;MACR,MAAM,IAAIG,cAAW,CACjB,yDAAyD,EACzD,uBAAuB,CAC1B;IACL;IACA,OAAOH,KAAK;EAChB,CAAC;EACD,MAAMI,gBAAuE,GAAG,OAAO;IACnFC;EACJ,CAAC,KAAK;IACF,MAAML,KAAK,GAAG,MAAMF,qBAAqB,EAAE;IAC3CD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACY,YAAY,CAACP,KAAK,EAAEK,EAAE,CAAC;IAC/CR,QAAQ,CAACK,mBAAmB,EAAE;IAC9B,OAAO,IAAAM,6BAAc,EAAC;MAClBF,KAAK;MACLG,MAAM,EAAEC,iBAAU;MAClBC,OAAO,EAAEf,aAAa,EAAE;MACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;IAChD,CAAC,CAAC;EACN,CAAC;EACD,OAAO;IACHF,qBAAqB;IACrBM,gBAAgB;IAChB,MAAMU,kBAAkB,CAACpB,MAAM,EAAE;MAC7B,MAAMM,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAM,CAACgB,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMrB,GAAG,CAACsB,iBAAiB,CAACjB,KAAK,8DAClDN,MAAM;QACTwB,KAAK,kCACExB,MAAM,CAACwB,KAAK;MAClB,GACH;MACFrB,QAAQ,CAACK,mBAAmB,EAAE;MAC9B,IAAI;QACA,MAAMiB,GAAG,GAAG,MAAMC,OAAO,CAACD,GAAG,CACzBJ,OAAO,CAACM,GAAG,CAACf,KAAK,IACb,IAAAE,6BAAc,EAAmB;UAC7BF,KAAK;UACLG,MAAM,EAAEC,iBAAU;UAClBC,OAAO,EAAEf,aAAa,EAAE;UACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;QAChD,CAAC,CAAC,CACL,CACJ;QACD,OAAO,CAACmB,GAAG,EAAEH,IAAI,CAAC;MACtB,CAAC,CAAC,OAAOM,EAAE,EAAE;QACT,MAAM,IAAInB,cAAW,CAACmB,EAAE,CAACC,OAAO,EAAED,EAAE,CAACE,IAAI,EAAEF,EAAE,CAACG,IAAI,CAAC;MACvD;IACJ,CAAC;IACD,MAAMC,mBAAmB,CAAChC,MAAM,EAAE;MAC9B,MAAMM,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACgC,WAAW,CAAC3B,KAAK,EAAEN,MAAM,CAAC+B,IAAI,CAAC;MACvD5B,QAAQ,CAACK,mBAAmB,EAAE;MAC9B,OAAO,IAAAM,6BAAc,EAAC;QAClBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEf,aAAa,EAAE;QACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;IACN,CAAC;IACD,MAAM4B,mBAAmB,CAAClC,MAAM,EAAE;MAC9B,MAAMM,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3C;AACZ;AACA;AACA;MACY,MAAM+B,aAAa,GAAG,MAAMzB,gBAAgB,CAAC;QAAEC,EAAE,EAAEX,MAAM,CAACW;MAAG,CAAC,CAAC;MAE/DR,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACmC,WAAW,CAAC9B,KAAK,EAAEN,MAAM,CAACW,EAAE,8DAC7CwB,aAAa,GACbnC,MAAM,CAAC+B,IAAI,EAChB;MACF5B,QAAQ,CAACK,mBAAmB,EAAE;MAC9B,OAAO,IAAAM,6BAAc,EAAC;QAClBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEf,aAAa,EAAE;QACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;IACN,CAAC;IACD,MAAM+B,mBAAmB,CAACrC,MAAM,EAAE;MAC9B,MAAMM,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMJ,GAAG,CAACqC,WAAW,CAAChC,KAAK,EAAEN,MAAM,CAACW,EAAE,CAAC;MACvCR,QAAQ,CAACK,mBAAmB,EAAE;MAC9B,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["createChangeRequestStorageOperations","params","cms","getCmsContext","security","getChangeRequestModel","model","withoutAuthorization","getModel","WebinyError","getChangeRequest","id","entry","getEntryById","getFieldValues","fields","baseFields","context","transformers","getTransformer","listChangeRequests","entries","meta","listLatestEntries","where","all","Promise","map","ex","message","code","data","createChangeRequest","createEntry","updateChangeRequest","existingEntry","updateEntry","deleteChangeRequest","deleteEntry"],"sources":["changeRequestStorageOperations.ts"],"sourcesContent":["import { ApwChangeRequestStorageOperations } from \"./types\";\nimport { baseFields, CreateApwStorageOperationsParams } from \"~/storageOperations/index\";\nimport { getFieldValues, getTransformer } from \"~/utils/fieldResolver\";\nimport WebinyError from \"@webiny/error\";\nimport { ApwChangeRequest } from \"~/types\";\n\nexport const createChangeRequestStorageOperations = (\n    params: CreateApwStorageOperationsParams\n): ApwChangeRequestStorageOperations => {\n    const { cms, getCmsContext, security } = params;\n    const getChangeRequestModel = async () => {\n        const model = await security.withoutAuthorization(async () => {\n            return cms.getModel(\"apwChangeRequestModelDefinition\");\n        });\n        if (!model) {\n            throw new WebinyError(\n                \"Could not find `apwChangeRequestModelDefinition` model.\",\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getChangeRequest: ApwChangeRequestStorageOperations[\"getChangeRequest\"] = async ({\n        id\n    }) => {\n        const model = await getChangeRequestModel();\n\n        const entry = await security.withoutAuthorization(async () => {\n            return cms.getEntryById(model, id);\n        });\n        return getFieldValues({\n            entry,\n            fields: baseFields,\n            context: getCmsContext(),\n            transformers: [getTransformer(model, \"body\")]\n        });\n    };\n    return {\n        getChangeRequestModel,\n        getChangeRequest,\n        async listChangeRequests(params) {\n            const model = await getChangeRequestModel();\n\n            const [entries, meta] = await security.withoutAuthorization(async () => {\n                return cms.listLatestEntries(model, {\n                    ...params,\n                    where: {\n                        ...params.where\n                    }\n                });\n            });\n            try {\n                const all = await Promise.all(\n                    entries.map(entry =>\n                        getFieldValues<ApwChangeRequest>({\n                            entry,\n                            fields: baseFields,\n                            context: getCmsContext(),\n                            transformers: [getTransformer(model, \"body\")]\n                        })\n                    )\n                );\n                return [all, meta];\n            } catch (ex) {\n                throw new WebinyError(ex.message, ex.code, ex.data);\n            }\n        },\n        async createChangeRequest(params) {\n            const model = await getChangeRequestModel();\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.createEntry(model, params.data);\n            });\n            return getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n        },\n        async updateChangeRequest(params) {\n            const model = await getChangeRequestModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getChangeRequest({ id: params.id });\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.updateEntry(model, params.id, {\n                    ...existingEntry,\n                    ...params.data\n                });\n            });\n            return getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n        },\n        async deleteChangeRequest(params) {\n            const model = await getChangeRequestModel();\n\n            await security.withoutAuthorization(async () => {\n                return cms.deleteEntry(model, params.id);\n            });\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AACA;AACA;AAGO,MAAMA,oCAAoC,GAC7CC,MAAwC,IACJ;EACpC,MAAM;IAAEC,GAAG;IAAEC,aAAa;IAAEC;EAAS,CAAC,GAAGH,MAAM;EAC/C,MAAMI,qBAAqB,GAAG,YAAY;IACtC,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOL,GAAG,CAACM,QAAQ,CAAC,iCAAiC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,CAACF,KAAK,EAAE;MACR,MAAM,IAAIG,cAAW,CACjB,yDAAyD,EACzD,uBAAuB,CAC1B;IACL;IACA,OAAOH,KAAK;EAChB,CAAC;EACD,MAAMI,gBAAuE,GAAG,OAAO;IACnFC;EACJ,CAAC,KAAK;IACF,MAAML,KAAK,GAAG,MAAMD,qBAAqB,EAAE;IAE3C,MAAMO,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOL,GAAG,CAACW,YAAY,CAACP,KAAK,EAAEK,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,IAAAG,6BAAc,EAAC;MAClBF,KAAK;MACLG,MAAM,EAAEC,iBAAU;MAClBC,OAAO,EAAEd,aAAa,EAAE;MACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;IAChD,CAAC,CAAC;EACN,CAAC;EACD,OAAO;IACHD,qBAAqB;IACrBK,gBAAgB;IAChB,MAAMU,kBAAkB,CAACnB,MAAM,EAAE;MAC7B,MAAMK,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAM,CAACgB,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMlB,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QACpE,OAAOL,GAAG,CAACqB,iBAAiB,CAACjB,KAAK,8DAC3BL,MAAM;UACTuB,KAAK,kCACEvB,MAAM,CAACuB,KAAK;QAClB,GACH;MACN,CAAC,CAAC;MACF,IAAI;QACA,MAAMC,GAAG,GAAG,MAAMC,OAAO,CAACD,GAAG,CACzBJ,OAAO,CAACM,GAAG,CAACf,KAAK,IACb,IAAAE,6BAAc,EAAmB;UAC7BF,KAAK;UACLG,MAAM,EAAEC,iBAAU;UAClBC,OAAO,EAAEd,aAAa,EAAE;UACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;QAChD,CAAC,CAAC,CACL,CACJ;QACD,OAAO,CAACmB,GAAG,EAAEH,IAAI,CAAC;MACtB,CAAC,CAAC,OAAOM,EAAE,EAAE;QACT,MAAM,IAAInB,cAAW,CAACmB,EAAE,CAACC,OAAO,EAAED,EAAE,CAACE,IAAI,EAAEF,EAAE,CAACG,IAAI,CAAC;MACvD;IACJ,CAAC;IACD,MAAMC,mBAAmB,CAAC/B,MAAM,EAAE;MAC9B,MAAMK,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAMO,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOL,GAAG,CAAC+B,WAAW,CAAC3B,KAAK,EAAEL,MAAM,CAAC8B,IAAI,CAAC;MAC9C,CAAC,CAAC;MACF,OAAO,IAAAjB,6BAAc,EAAC;QAClBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEd,aAAa,EAAE;QACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;IACN,CAAC;IACD,MAAM4B,mBAAmB,CAACjC,MAAM,EAAE;MAC9B,MAAMK,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAC3C;AACZ;AACA;AACA;MACY,MAAM8B,aAAa,GAAG,MAAMzB,gBAAgB,CAAC;QAAEC,EAAE,EAAEV,MAAM,CAACU;MAAG,CAAC,CAAC;MAE/D,MAAMC,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOL,GAAG,CAACkC,WAAW,CAAC9B,KAAK,EAAEL,MAAM,CAACU,EAAE,8DAChCwB,aAAa,GACblC,MAAM,CAAC8B,IAAI,EAChB;MACN,CAAC,CAAC;MACF,OAAO,IAAAjB,6BAAc,EAAC;QAClBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEd,aAAa,EAAE;QACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;IACN,CAAC;IACD,MAAM+B,mBAAmB,CAACpC,MAAM,EAAE;MAC9B,MAAMK,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAMD,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC5C,OAAOL,GAAG,CAACoC,WAAW,CAAChC,KAAK,EAAEL,MAAM,CAACU,EAAE,CAAC;MAC5C,CAAC,CAAC;MACF,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}

package/storageOperations/commentStorageOperations.js

@@ -24,9 +24,9 @@ const createCommentStorageOperations = ({
   security
 }) => {
   const getCommentModel = async () => {
-    security.disableAuthorization();
-    const model = await cms.getModel(_comment.COMMENT_MODEL_ID);
-    security.enableAuthorization();
+    const model = await security.withoutAuthorization(async () => {
+      return cms.getModel(_comment.COMMENT_MODEL_ID);
+    });
     if (!model) {
       throw new _error.default(`Could not find "${_comment.COMMENT_MODEL_ID}" model.`, "MODEL_NOT_FOUND_ERROR");
     }
@@ -36,9 +36,9 @@ const createCommentStorageOperations = ({
     id
   }) => {
     const model = await getCommentModel();
-    security.disableAuthorization();
-    const entry = await cms.getEntryById(model, id);
-    security.enableAuthorization();
+    const entry = await security.withoutAuthorization(async () => {
+      return cms.getEntryById(model, id);
+    });
     return (0, _fieldResolver.getFieldValues)({
       entry,
       fields: _index.baseFields,
@@ -54,9 +54,9 @@ const createCommentStorageOperations = ({
     },
     async listComments(params) {
       const model = await getCommentModel();
-      security.disableAuthorization();
-      const [entries, meta] = await cms.listLatestEntries(model, params);
-      security.enableAuthorization();
+      const [entries, meta] = await security.withoutAuthorization(async () => {
+        return cms.listLatestEntries(model, params);
+      });
       const values = await Promise.all(entries.map(entry => (0, _fieldResolver.getFieldValues)({
         entry,
         fields: _index.baseFields,
@@ -69,14 +69,14 @@ const createCommentStorageOperations = ({
     async createComment(params) {
       const model = await getCommentModel();
       const refModel = await this.getChangeRequestModel();
-      security.disableAuthorization();
-      const entry = await cms.createEntry(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params.data), {}, {
-        changeRequest: {
-          id: params.data.changeRequest,
-          modelId: refModel.modelId
-        }
-      }));
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.createEntry(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params.data), {}, {
+          changeRequest: {
+            id: params.data.changeRequest,
+            modelId: refModel.modelId
+          }
+        }));
+      });
       const values = await (0, _fieldResolver.getFieldValues)({
         entry,
         fields: _index.baseFields,
@@ -94,9 +94,9 @@ const createCommentStorageOperations = ({
       const existingEntry = await getComment({
         id: params.id
       });
-      security.disableAuthorization();
-      const entry = await cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
+      });
       const values = await (0, _fieldResolver.getFieldValues)({
         entry,
         fields: _index.baseFields,
@@ -107,9 +107,9 @@ const createCommentStorageOperations = ({
     },
     async deleteComment(params) {
       const model = await getCommentModel();
-      security.disableAuthorization();
-      await cms.deleteEntry(model, params.id);
-      security.enableAuthorization();
+      await security.withoutAuthorization(async () => {
+        return cms.deleteEntry(model, params.id);
+      });
       return true;
     }
   };

package/storageOperations/commentStorageOperations.js.map

@@ -1 +1 @@
-{"version":3,"names":["pickIdFromChangeRequest","obj","rawValue","id","createCommentStorageOperations","cms","getCmsContext","security","getCommentModel","disableAuthorization","model","getModel","COMMENT_MODEL_ID","enableAuthorization","WebinyError","getComment","entry","getEntryById","getFieldValues","fields","baseFields","context","transformers","getTransformer","params","values","listComments","entries","meta","listLatestEntries","Promise","all","map","value","createComment","refModel","getChangeRequestModel","createEntry","data","changeRequest","modelId","updateComment","existingEntry","updateEntry","deleteComment","deleteEntry"],"sources":["commentStorageOperations.ts"],"sourcesContent":["import { ApwStorageOperations } from \"./types\";\nimport { ApwCommentStorageOperations } from \"./types\";\nimport { baseFields, CreateApwStorageOperationsParams } from \"~/storageOperations/index\";\nimport { getFieldValues, getTransformer } from \"~/utils/fieldResolver\";\nimport WebinyError from \"@webiny/error\";\nimport { ApwComment } from \"~/types\";\nimport { CmsEntryListParams } from \"@webiny/api-headless-cms/types\";\nimport { COMMENT_MODEL_ID } from \"~/storageOperations/models/comment.model\";\n\nconst pickIdFromChangeRequest = (obj: Record<string, any>): ApwComment => {\n    const rawValue = obj[\"changeRequest\"];\n    if (!rawValue) {\n        return obj as unknown as ApwComment;\n    }\n    obj[\"changeRequest\"] = rawValue.id;\n    return obj as unknown as ApwComment;\n};\n\nexport const createCommentStorageOperations = ({\n    cms,\n    getCmsContext,\n    security\n}: CreateApwStorageOperationsParams): ApwCommentStorageOperations => {\n    const getCommentModel = async () => {\n        security.disableAuthorization();\n        const model = await cms.getModel(COMMENT_MODEL_ID);\n        security.enableAuthorization();\n        if (!model) {\n            throw new WebinyError(\n                `Could not find \"${COMMENT_MODEL_ID}\" model.`,\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getComment: ApwCommentStorageOperations[\"getComment\"] = async ({ id }) => {\n        const model = await getCommentModel();\n        security.disableAuthorization();\n        const entry = await cms.getEntryById(model, id);\n        security.enableAuthorization();\n        return getFieldValues({\n            entry,\n            fields: baseFields,\n            context: getCmsContext(),\n            transformers: [getTransformer(model, \"body\")]\n        });\n    };\n    return {\n        getCommentModel,\n        getComment: async params => {\n            const values = await getComment(params);\n            return pickIdFromChangeRequest(values);\n        },\n        async listComments(params) {\n            const model = await getCommentModel();\n            security.disableAuthorization();\n            const [entries, meta] = await cms.listLatestEntries(\n                model,\n                params as CmsEntryListParams\n            );\n            security.enableAuthorization();\n            const values = await Promise.all(\n                entries.map(entry =>\n                    getFieldValues<ApwComment>({\n                        entry,\n                        fields: baseFields,\n                        context: getCmsContext(),\n                        transformers: [getTransformer(model, \"body\")]\n                    })\n                )\n            );\n            const all = values.map(value => pickIdFromChangeRequest(value));\n            return [all, meta];\n        },\n        async createComment(this: ApwStorageOperations, params) {\n            const model = await getCommentModel();\n            const refModel = await this.getChangeRequestModel();\n            security.disableAuthorization();\n            const entry = await cms.createEntry(model, {\n                ...params.data,\n                changeRequest: {\n                    id: params.data.changeRequest,\n                    modelId: refModel.modelId\n                }\n            });\n            security.enableAuthorization();\n\n            const values = await getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n            return pickIdFromChangeRequest(values);\n        },\n        async updateComment(params) {\n            const model = await getCommentModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getComment({ id: params.id });\n\n            security.disableAuthorization();\n            const entry = await cms.updateEntry(model, params.id, {\n                ...existingEntry,\n                ...params.data\n            });\n            security.enableAuthorization();\n            const values = await getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n            return pickIdFromChangeRequest(values);\n        },\n        async deleteComment(params) {\n            const model = await getCommentModel();\n            security.disableAuthorization();\n            await cms.deleteEntry(model, params.id);\n            security.enableAuthorization();\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AAEA;AACA;AACA;AAGA;AAEA,MAAMA,uBAAuB,GAAIC,GAAwB,IAAiB;EACtE,MAAMC,QAAQ,GAAGD,GAAG,CAAC,eAAe,CAAC;EACrC,IAAI,CAACC,QAAQ,EAAE;IACX,OAAOD,GAAG;EACd;EACAA,GAAG,CAAC,eAAe,CAAC,GAAGC,QAAQ,CAACC,EAAE;EAClC,OAAOF,GAAG;AACd,CAAC;AAEM,MAAMG,8BAA8B,GAAG,CAAC;EAC3CC,GAAG;EACHC,aAAa;EACbC;AAC8B,CAAC,KAAkC;EACjE,MAAMC,eAAe,GAAG,YAAY;IAChCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMC,KAAK,GAAG,MAAML,GAAG,CAACM,QAAQ,CAACC,yBAAgB,CAAC;IAClDL,QAAQ,CAACM,mBAAmB,EAAE;IAC9B,IAAI,CAACH,KAAK,EAAE;MACR,MAAM,IAAII,cAAW,CAChB,mBAAkBF,yBAAiB,UAAS,EAC7C,uBAAuB,CAC1B;IACL;IACA,OAAOF,KAAK;EAChB,CAAC;EACD,MAAMK,UAAqD,GAAG,OAAO;IAAEZ;EAAG,CAAC,KAAK;IAC5E,MAAMO,KAAK,GAAG,MAAMF,eAAe,EAAE;IACrCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACY,YAAY,CAACP,KAAK,EAAEP,EAAE,CAAC;IAC/CI,QAAQ,CAACM,mBAAmB,EAAE;IAC9B,OAAO,IAAAK,6BAAc,EAAC;MAClBF,KAAK;MACLG,MAAM,EAAEC,iBAAU;MAClBC,OAAO,EAAEf,aAAa,EAAE;MACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;IAChD,CAAC,CAAC;EACN,CAAC;EACD,OAAO;IACHF,eAAe;IACfO,UAAU,EAAE,MAAMS,MAAM,IAAI;MACxB,MAAMC,MAAM,GAAG,MAAMV,UAAU,CAACS,MAAM,CAAC;MACvC,OAAOxB,uBAAuB,CAACyB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMC,YAAY,CAACF,MAAM,EAAE;MACvB,MAAMd,KAAK,GAAG,MAAMF,eAAe,EAAE;MACrCD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAM,CAACkB,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMvB,GAAG,CAACwB,iBAAiB,CAC/CnB,KAAK,EACLc,MAAM,CACT;MACDjB,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,MAAMY,MAAM,GAAG,MAAMK,OAAO,CAACC,GAAG,CAC5BJ,OAAO,CAACK,GAAG,CAAChB,KAAK,IACb,IAAAE,6BAAc,EAAa;QACvBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEf,aAAa,EAAE;QACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC,CACL,CACJ;MACD,MAAMqB,GAAG,GAAGN,MAAM,CAACO,GAAG,CAACC,KAAK,IAAIjC,uBAAuB,CAACiC,KAAK,CAAC,CAAC;MAC/D,OAAO,CAACF,GAAG,EAAEH,IAAI,CAAC;IACtB,CAAC;IACD,MAAMM,aAAa,CAA6BV,MAAM,EAAE;MACpD,MAAMd,KAAK,GAAG,MAAMF,eAAe,EAAE;MACrC,MAAM2B,QAAQ,GAAG,MAAM,IAAI,CAACC,qBAAqB,EAAE;MACnD7B,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACgC,WAAW,CAAC3B,KAAK,8DAClCc,MAAM,CAACc,IAAI;QACdC,aAAa,EAAE;UACXpC,EAAE,EAAEqB,MAAM,CAACc,IAAI,CAACC,aAAa;UAC7BC,OAAO,EAAEL,QAAQ,CAACK;QACtB;MAAC,GACH;MACFjC,QAAQ,CAACM,mBAAmB,EAAE;MAE9B,MAAMY,MAAM,GAAG,MAAM,IAAAP,6BAAc,EAAC;QAChCF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEf,aAAa,EAAE;QACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;MACF,OAAOV,uBAAuB,CAACyB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMgB,aAAa,CAACjB,MAAM,EAAE;MACxB,MAAMd,KAAK,GAAG,MAAMF,eAAe,EAAE;MACrC;AACZ;AACA;AACA;MACY,MAAMkC,aAAa,GAAG,MAAM3B,UAAU,CAAC;QAAEZ,EAAE,EAAEqB,MAAM,CAACrB;MAAG,CAAC,CAAC;MAEzDI,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMO,KAAK,GAAG,MAAMX,GAAG,CAACsC,WAAW,CAACjC,KAAK,EAAEc,MAAM,CAACrB,EAAE,8DAC7CuC,aAAa,GACblB,MAAM,CAACc,IAAI,EAChB;MACF/B,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,MAAMY,MAAM,GAAG,MAAM,IAAAP,6BAAc,EAAC;QAChCF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEf,aAAa,EAAE;QACxBgB,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;MACF,OAAOV,uBAAuB,CAACyB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMmB,aAAa,CAACpB,MAAM,EAAE;MACxB,MAAMd,KAAK,GAAG,MAAMF,eAAe,EAAE;MACrCD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMJ,GAAG,CAACwC,WAAW,CAACnC,KAAK,EAAEc,MAAM,CAACrB,EAAE,CAAC;MACvCI,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["pickIdFromChangeRequest","obj","rawValue","id","createCommentStorageOperations","cms","getCmsContext","security","getCommentModel","model","withoutAuthorization","getModel","COMMENT_MODEL_ID","WebinyError","getComment","entry","getEntryById","getFieldValues","fields","baseFields","context","transformers","getTransformer","params","values","listComments","entries","meta","listLatestEntries","Promise","all","map","value","createComment","refModel","getChangeRequestModel","createEntry","data","changeRequest","modelId","updateComment","existingEntry","updateEntry","deleteComment","deleteEntry"],"sources":["commentStorageOperations.ts"],"sourcesContent":["import { ApwStorageOperations } from \"./types\";\nimport { ApwCommentStorageOperations } from \"./types\";\nimport { baseFields, CreateApwStorageOperationsParams } from \"~/storageOperations/index\";\nimport { getFieldValues, getTransformer } from \"~/utils/fieldResolver\";\nimport WebinyError from \"@webiny/error\";\nimport { ApwComment } from \"~/types\";\nimport { CmsEntryListParams } from \"@webiny/api-headless-cms/types\";\nimport { COMMENT_MODEL_ID } from \"~/storageOperations/models/comment.model\";\n\nconst pickIdFromChangeRequest = (obj: Record<string, any>): ApwComment => {\n    const rawValue = obj[\"changeRequest\"];\n    if (!rawValue) {\n        return obj as unknown as ApwComment;\n    }\n    obj[\"changeRequest\"] = rawValue.id;\n    return obj as unknown as ApwComment;\n};\n\nexport const createCommentStorageOperations = ({\n    cms,\n    getCmsContext,\n    security\n}: CreateApwStorageOperationsParams): ApwCommentStorageOperations => {\n    const getCommentModel = async () => {\n        const model = await security.withoutAuthorization(async () => {\n            return cms.getModel(COMMENT_MODEL_ID);\n        });\n\n        if (!model) {\n            throw new WebinyError(\n                `Could not find \"${COMMENT_MODEL_ID}\" model.`,\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getComment: ApwCommentStorageOperations[\"getComment\"] = async ({ id }) => {\n        const model = await getCommentModel();\n        const entry = await security.withoutAuthorization(async () => {\n            return cms.getEntryById(model, id);\n        });\n\n        return getFieldValues({\n            entry,\n            fields: baseFields,\n            context: getCmsContext(),\n            transformers: [getTransformer(model, \"body\")]\n        });\n    };\n    return {\n        getCommentModel,\n        getComment: async params => {\n            const values = await getComment(params);\n            return pickIdFromChangeRequest(values);\n        },\n        async listComments(params) {\n            const model = await getCommentModel();\n            const [entries, meta] = await security.withoutAuthorization(async () => {\n                return cms.listLatestEntries(model, params as CmsEntryListParams);\n            });\n            const values = await Promise.all(\n                entries.map(entry =>\n                    getFieldValues<ApwComment>({\n                        entry,\n                        fields: baseFields,\n                        context: getCmsContext(),\n                        transformers: [getTransformer(model, \"body\")]\n                    })\n                )\n            );\n            const all = values.map(value => pickIdFromChangeRequest(value));\n            return [all, meta];\n        },\n        async createComment(this: ApwStorageOperations, params) {\n            const model = await getCommentModel();\n            const refModel = await this.getChangeRequestModel();\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.createEntry(model, {\n                    ...params.data,\n                    changeRequest: {\n                        id: params.data.changeRequest,\n                        modelId: refModel.modelId\n                    }\n                });\n            });\n\n            const values = await getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n            return pickIdFromChangeRequest(values);\n        },\n        async updateComment(params) {\n            const model = await getCommentModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getComment({ id: params.id });\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.updateEntry(model, params.id, {\n                    ...existingEntry,\n                    ...params.data\n                });\n            });\n\n            const values = await getFieldValues({\n                entry,\n                fields: baseFields,\n                context: getCmsContext(),\n                transformers: [getTransformer(model, \"body\")]\n            });\n            return pickIdFromChangeRequest(values);\n        },\n        async deleteComment(params) {\n            const model = await getCommentModel();\n            await security.withoutAuthorization(async () => {\n                return cms.deleteEntry(model, params.id);\n            });\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AAEA;AACA;AACA;AAGA;AAEA,MAAMA,uBAAuB,GAAIC,GAAwB,IAAiB;EACtE,MAAMC,QAAQ,GAAGD,GAAG,CAAC,eAAe,CAAC;EACrC,IAAI,CAACC,QAAQ,EAAE;IACX,OAAOD,GAAG;EACd;EACAA,GAAG,CAAC,eAAe,CAAC,GAAGC,QAAQ,CAACC,EAAE;EAClC,OAAOF,GAAG;AACd,CAAC;AAEM,MAAMG,8BAA8B,GAAG,CAAC;EAC3CC,GAAG;EACHC,aAAa;EACbC;AAC8B,CAAC,KAAkC;EACjE,MAAMC,eAAe,GAAG,YAAY;IAChC,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOL,GAAG,CAACM,QAAQ,CAACC,yBAAgB,CAAC;IACzC,CAAC,CAAC;IAEF,IAAI,CAACH,KAAK,EAAE;MACR,MAAM,IAAII,cAAW,CAChB,mBAAkBD,yBAAiB,UAAS,EAC7C,uBAAuB,CAC1B;IACL;IACA,OAAOH,KAAK;EAChB,CAAC;EACD,MAAMK,UAAqD,GAAG,OAAO;IAAEX;EAAG,CAAC,KAAK;IAC5E,MAAMM,KAAK,GAAG,MAAMD,eAAe,EAAE;IACrC,MAAMO,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOL,GAAG,CAACW,YAAY,CAACP,KAAK,EAAEN,EAAE,CAAC;IACtC,CAAC,CAAC;IAEF,OAAO,IAAAc,6BAAc,EAAC;MAClBF,KAAK;MACLG,MAAM,EAAEC,iBAAU;MAClBC,OAAO,EAAEd,aAAa,EAAE;MACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;IAChD,CAAC,CAAC;EACN,CAAC;EACD,OAAO;IACHD,eAAe;IACfM,UAAU,EAAE,MAAMS,MAAM,IAAI;MACxB,MAAMC,MAAM,GAAG,MAAMV,UAAU,CAACS,MAAM,CAAC;MACvC,OAAOvB,uBAAuB,CAACwB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMC,YAAY,CAACF,MAAM,EAAE;MACvB,MAAMd,KAAK,GAAG,MAAMD,eAAe,EAAE;MACrC,MAAM,CAACkB,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMpB,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QACpE,OAAOL,GAAG,CAACuB,iBAAiB,CAACnB,KAAK,EAAEc,MAAM,CAAuB;MACrE,CAAC,CAAC;MACF,MAAMC,MAAM,GAAG,MAAMK,OAAO,CAACC,GAAG,CAC5BJ,OAAO,CAACK,GAAG,CAAChB,KAAK,IACb,IAAAE,6BAAc,EAAa;QACvBF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEd,aAAa,EAAE;QACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC,CACL,CACJ;MACD,MAAMqB,GAAG,GAAGN,MAAM,CAACO,GAAG,CAACC,KAAK,IAAIhC,uBAAuB,CAACgC,KAAK,CAAC,CAAC;MAC/D,OAAO,CAACF,GAAG,EAAEH,IAAI,CAAC;IACtB,CAAC;IACD,MAAMM,aAAa,CAA6BV,MAAM,EAAE;MACpD,MAAMd,KAAK,GAAG,MAAMD,eAAe,EAAE;MACrC,MAAM0B,QAAQ,GAAG,MAAM,IAAI,CAACC,qBAAqB,EAAE;MAEnD,MAAMpB,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOL,GAAG,CAAC+B,WAAW,CAAC3B,KAAK,8DACrBc,MAAM,CAACc,IAAI;UACdC,aAAa,EAAE;YACXnC,EAAE,EAAEoB,MAAM,CAACc,IAAI,CAACC,aAAa;YAC7BC,OAAO,EAAEL,QAAQ,CAACK;UACtB;QAAC,GACH;MACN,CAAC,CAAC;MAEF,MAAMf,MAAM,GAAG,MAAM,IAAAP,6BAAc,EAAC;QAChCF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEd,aAAa,EAAE;QACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;MACF,OAAOT,uBAAuB,CAACwB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMgB,aAAa,CAACjB,MAAM,EAAE;MACxB,MAAMd,KAAK,GAAG,MAAMD,eAAe,EAAE;MACrC;AACZ;AACA;AACA;MACY,MAAMiC,aAAa,GAAG,MAAM3B,UAAU,CAAC;QAAEX,EAAE,EAAEoB,MAAM,CAACpB;MAAG,CAAC,CAAC;MAEzD,MAAMY,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOL,GAAG,CAACqC,WAAW,CAACjC,KAAK,EAAEc,MAAM,CAACpB,EAAE,8DAChCsC,aAAa,GACblB,MAAM,CAACc,IAAI,EAChB;MACN,CAAC,CAAC;MAEF,MAAMb,MAAM,GAAG,MAAM,IAAAP,6BAAc,EAAC;QAChCF,KAAK;QACLG,MAAM,EAAEC,iBAAU;QAClBC,OAAO,EAAEd,aAAa,EAAE;QACxBe,YAAY,EAAE,CAAC,IAAAC,6BAAc,EAACb,KAAK,EAAE,MAAM,CAAC;MAChD,CAAC,CAAC;MACF,OAAOT,uBAAuB,CAACwB,MAAM,CAAC;IAC1C,CAAC;IACD,MAAMmB,aAAa,CAACpB,MAAM,EAAE;MACxB,MAAMd,KAAK,GAAG,MAAMD,eAAe,EAAE;MACrC,MAAMD,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC5C,OAAOL,GAAG,CAACuC,WAAW,CAACnC,KAAK,EAAEc,MAAM,CAACpB,EAAE,CAAC;MAC5C,CAAC,CAAC;MACF,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}

package/storageOperations/contentReviewStorageOperations.js

@@ -14,9 +14,9 @@ const createContentReviewStorageOperations = ({
   security
 }) => {
   const getContentReviewModel = async () => {
-    security.disableAuthorization();
-    const model = await cms.getModel(_contentReview.CONTENT_REVIEW_MODEL_ID);
-    security.enableAuthorization();
+    const model = await security.withoutAuthorization(async () => {
+      return cms.getModel(_contentReview.CONTENT_REVIEW_MODEL_ID);
+    });
     if (!model) {
       throw new _error.default(`Could not find "${_contentReview.CONTENT_REVIEW_MODEL_ID}" model.`, "MODEL_NOT_FOUND_ERROR");
     }
@@ -26,9 +26,9 @@ const createContentReviewStorageOperations = ({
     id
   }) => {
     const model = await getContentReviewModel();
-    security.disableAuthorization();
-    const entry = await cms.getEntryById(model, id);
-    security.enableAuthorization();
+    const entry = await security.withoutAuthorization(async () => {
+      return cms.getEntryById(model, id);
+    });
     return (0, _index.getFieldValues)(entry, _index.baseFields);
   };
   return {
@@ -36,18 +36,18 @@ const createContentReviewStorageOperations = ({
     getContentReview,
     async listContentReviews(params) {
       const model = await getContentReviewModel();
-      security.disableAuthorization();
-      const [entries, meta] = await cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
-        where: (0, _objectSpread2.default)({}, params.where)
-      }));
-      security.enableAuthorization();
+      const [entries, meta] = await security.withoutAuthorization(async () => {
+        return cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
+          where: (0, _objectSpread2.default)({}, params.where)
+        }));
+      });
       return [entries.map(entry => (0, _index.getFieldValues)(entry, _index.baseFields)), meta];
     },
     async createContentReview(params) {
       const model = await getContentReviewModel();
-      security.disableAuthorization();
-      const entry = await cms.createEntry(model, params.data);
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.createEntry(model, params.data);
+      });
       return (0, _index.getFieldValues)(entry, _index.baseFields);
     },
     async updateContentReview(params) {
@@ -59,16 +59,16 @@ const createContentReviewStorageOperations = ({
       const existingEntry = await getContentReview({
         id: params.id
       });
-      security.disableAuthorization();
-      const entry = await cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
+      });
       return (0, _index.getFieldValues)(entry, _index.baseFields);
     },
     async deleteContentReview(params) {
       const model = await getContentReviewModel();
-      security.disableAuthorization();
-      await cms.deleteEntry(model, params.id);
-      security.enableAuthorization();
+      await security.withoutAuthorization(async () => {
+        return cms.deleteEntry(model, params.id);
+      });
       return true;
     }
   };

package/storageOperations/contentReviewStorageOperations.js.map

@@ -1 +1 @@
-{"version":3,"names":["createContentReviewStorageOperations","cms","security","getContentReviewModel","disableAuthorization","model","getModel","CONTENT_REVIEW_MODEL_ID","enableAuthorization","WebinyError","getContentReview","id","entry","getEntryById","getFieldValues","baseFields","listContentReviews","params","entries","meta","listLatestEntries","where","map","createContentReview","createEntry","data","updateContentReview","existingEntry","updateEntry","deleteContentReview","deleteEntry"],"sources":["contentReviewStorageOperations.ts"],"sourcesContent":["import { ApwContentReviewStorageOperations } from \"./types\";\nimport {\n    baseFields,\n    CreateApwStorageOperationsParams,\n    getFieldValues\n} from \"~/storageOperations/index\";\nimport WebinyError from \"@webiny/error\";\nimport { CONTENT_REVIEW_MODEL_ID } from \"~/storageOperations/models/contentReview.model\";\n\nexport const createContentReviewStorageOperations = ({\n    cms,\n    security\n}: CreateApwStorageOperationsParams): ApwContentReviewStorageOperations => {\n    const getContentReviewModel = async () => {\n        security.disableAuthorization();\n        const model = await cms.getModel(CONTENT_REVIEW_MODEL_ID);\n        security.enableAuthorization();\n        if (!model) {\n            throw new WebinyError(\n                `Could not find \"${CONTENT_REVIEW_MODEL_ID}\" model.`,\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getContentReview: ApwContentReviewStorageOperations[\"getContentReview\"] = async ({\n        id\n    }) => {\n        const model = await getContentReviewModel();\n        security.disableAuthorization();\n        const entry = await cms.getEntryById(model, id);\n        security.enableAuthorization();\n        return getFieldValues(entry, baseFields);\n    };\n    return {\n        getContentReviewModel,\n        getContentReview,\n        async listContentReviews(params) {\n            const model = await getContentReviewModel();\n            security.disableAuthorization();\n            const [entries, meta] = await cms.listLatestEntries(model, {\n                ...params,\n                where: {\n                    ...params.where\n                }\n            });\n            security.enableAuthorization();\n            return [entries.map(entry => getFieldValues(entry, baseFields)), meta];\n        },\n        async createContentReview(params) {\n            const model = await getContentReviewModel();\n            security.disableAuthorization();\n            const entry = await cms.createEntry(model, params.data);\n            security.enableAuthorization();\n            return getFieldValues(entry, baseFields);\n        },\n        async updateContentReview(params) {\n            const model = await getContentReviewModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getContentReview({ id: params.id });\n\n            security.disableAuthorization();\n            const entry = await cms.updateEntry(model, params.id, {\n                ...existingEntry,\n                ...params.data\n            });\n            security.enableAuthorization();\n            return getFieldValues(entry, baseFields);\n        },\n        async deleteContentReview(params) {\n            const model = await getContentReviewModel();\n            security.disableAuthorization();\n            await cms.deleteEntry(model, params.id);\n            security.enableAuthorization();\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AAKA;AACA;AAEO,MAAMA,oCAAoC,GAAG,CAAC;EACjDC,GAAG;EACHC;AAC8B,CAAC,KAAwC;EACvE,MAAMC,qBAAqB,GAAG,YAAY;IACtCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMC,KAAK,GAAG,MAAMJ,GAAG,CAACK,QAAQ,CAACC,sCAAuB,CAAC;IACzDL,QAAQ,CAACM,mBAAmB,EAAE;IAC9B,IAAI,CAACH,KAAK,EAAE;MACR,MAAM,IAAII,cAAW,CAChB,mBAAkBF,sCAAwB,UAAS,EACpD,uBAAuB,CAC1B;IACL;IACA,OAAOF,KAAK;EAChB,CAAC;EACD,MAAMK,gBAAuE,GAAG,OAAO;IACnFC;EACJ,CAAC,KAAK;IACF,MAAMN,KAAK,GAAG,MAAMF,qBAAqB,EAAE;IAC3CD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAACY,YAAY,CAACR,KAAK,EAAEM,EAAE,CAAC;IAC/CT,QAAQ,CAACM,mBAAmB,EAAE;IAC9B,OAAO,IAAAM,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;EAC5C,CAAC;EACD,OAAO;IACHZ,qBAAqB;IACrBO,gBAAgB;IAChB,MAAMM,kBAAkB,CAACC,MAAM,EAAE;MAC7B,MAAMZ,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAM,CAACc,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMlB,GAAG,CAACmB,iBAAiB,CAACf,KAAK,8DAClDY,MAAM;QACTI,KAAK,kCACEJ,MAAM,CAACI,KAAK;MAClB,GACH;MACFnB,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,OAAO,CAACU,OAAO,CAACI,GAAG,CAACV,KAAK,IAAI,IAAAE,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC,CAAC,EAAEI,IAAI,CAAC;IAC1E,CAAC;IACD,MAAMI,mBAAmB,CAACN,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAACuB,WAAW,CAACnB,KAAK,EAAEY,MAAM,CAACQ,IAAI,CAAC;MACvDvB,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,OAAO,IAAAM,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMW,mBAAmB,CAACT,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3C;AACZ;AACA;AACA;MACY,MAAMwB,aAAa,GAAG,MAAMjB,gBAAgB,CAAC;QAAEC,EAAE,EAAEM,MAAM,CAACN;MAAG,CAAC,CAAC;MAE/DT,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAAC2B,WAAW,CAACvB,KAAK,EAAEY,MAAM,CAACN,EAAE,8DAC7CgB,aAAa,GACbV,MAAM,CAACQ,IAAI,EAChB;MACFvB,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,OAAO,IAAAM,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMc,mBAAmB,CAACZ,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMF,qBAAqB,EAAE;MAC3CD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMH,GAAG,CAAC6B,WAAW,CAACzB,KAAK,EAAEY,MAAM,CAACN,EAAE,CAAC;MACvCT,QAAQ,CAACM,mBAAmB,EAAE;MAC9B,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["createContentReviewStorageOperations","cms","security","getContentReviewModel","model","withoutAuthorization","getModel","CONTENT_REVIEW_MODEL_ID","WebinyError","getContentReview","id","entry","getEntryById","getFieldValues","baseFields","listContentReviews","params","entries","meta","listLatestEntries","where","map","createContentReview","createEntry","data","updateContentReview","existingEntry","updateEntry","deleteContentReview","deleteEntry"],"sources":["contentReviewStorageOperations.ts"],"sourcesContent":["import { ApwContentReviewStorageOperations } from \"./types\";\nimport {\n    baseFields,\n    CreateApwStorageOperationsParams,\n    getFieldValues\n} from \"~/storageOperations/index\";\nimport WebinyError from \"@webiny/error\";\nimport { CONTENT_REVIEW_MODEL_ID } from \"~/storageOperations/models/contentReview.model\";\n\nexport const createContentReviewStorageOperations = ({\n    cms,\n    security\n}: CreateApwStorageOperationsParams): ApwContentReviewStorageOperations => {\n    const getContentReviewModel = async () => {\n        const model = await security.withoutAuthorization(async () => {\n            return cms.getModel(CONTENT_REVIEW_MODEL_ID);\n        });\n        if (!model) {\n            throw new WebinyError(\n                `Could not find \"${CONTENT_REVIEW_MODEL_ID}\" model.`,\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getContentReview: ApwContentReviewStorageOperations[\"getContentReview\"] = async ({\n        id\n    }) => {\n        const model = await getContentReviewModel();\n        const entry = await security.withoutAuthorization(async () => {\n            return cms.getEntryById(model, id);\n        });\n        return getFieldValues(entry, baseFields);\n    };\n    return {\n        getContentReviewModel,\n        getContentReview,\n        async listContentReviews(params) {\n            const model = await getContentReviewModel();\n\n            const [entries, meta] = await security.withoutAuthorization(async () => {\n                return cms.listLatestEntries(model, {\n                    ...params,\n                    where: {\n                        ...params.where\n                    }\n                });\n            });\n\n            return [entries.map(entry => getFieldValues(entry, baseFields)), meta];\n        },\n        async createContentReview(params) {\n            const model = await getContentReviewModel();\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.createEntry(model, params.data);\n            });\n            return getFieldValues(entry, baseFields);\n        },\n        async updateContentReview(params) {\n            const model = await getContentReviewModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getContentReview({ id: params.id });\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.updateEntry(model, params.id, {\n                    ...existingEntry,\n                    ...params.data\n                });\n            });\n            return getFieldValues(entry, baseFields);\n        },\n        async deleteContentReview(params) {\n            const model = await getContentReviewModel();\n\n            await security.withoutAuthorization(async () => {\n                return cms.deleteEntry(model, params.id);\n            });\n\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AAKA;AACA;AAEO,MAAMA,oCAAoC,GAAG,CAAC;EACjDC,GAAG;EACHC;AAC8B,CAAC,KAAwC;EACvE,MAAMC,qBAAqB,GAAG,YAAY;IACtC,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOJ,GAAG,CAACK,QAAQ,CAACC,sCAAuB,CAAC;IAChD,CAAC,CAAC;IACF,IAAI,CAACH,KAAK,EAAE;MACR,MAAM,IAAII,cAAW,CAChB,mBAAkBD,sCAAwB,UAAS,EACpD,uBAAuB,CAC1B;IACL;IACA,OAAOH,KAAK;EAChB,CAAC;EACD,MAAMK,gBAAuE,GAAG,OAAO;IACnFC;EACJ,CAAC,KAAK;IACF,MAAMN,KAAK,GAAG,MAAMD,qBAAqB,EAAE;IAC3C,MAAMQ,KAAK,GAAG,MAAMT,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOJ,GAAG,CAACW,YAAY,CAACR,KAAK,EAAEM,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,IAAAG,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;EAC5C,CAAC;EACD,OAAO;IACHX,qBAAqB;IACrBM,gBAAgB;IAChB,MAAMM,kBAAkB,CAACC,MAAM,EAAE;MAC7B,MAAMZ,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAM,CAACc,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMhB,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QACpE,OAAOJ,GAAG,CAACkB,iBAAiB,CAACf,KAAK,8DAC3BY,MAAM;UACTI,KAAK,kCACEJ,MAAM,CAACI,KAAK;QAClB,GACH;MACN,CAAC,CAAC;MAEF,OAAO,CAACH,OAAO,CAACI,GAAG,CAACV,KAAK,IAAI,IAAAE,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC,CAAC,EAAEI,IAAI,CAAC;IAC1E,CAAC;IACD,MAAMI,mBAAmB,CAACN,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAMQ,KAAK,GAAG,MAAMT,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOJ,GAAG,CAACsB,WAAW,CAACnB,KAAK,EAAEY,MAAM,CAACQ,IAAI,CAAC;MAC9C,CAAC,CAAC;MACF,OAAO,IAAAX,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMW,mBAAmB,CAACT,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAC3C;AACZ;AACA;AACA;MACY,MAAMuB,aAAa,GAAG,MAAMjB,gBAAgB,CAAC;QAAEC,EAAE,EAAEM,MAAM,CAACN;MAAG,CAAC,CAAC;MAE/D,MAAMC,KAAK,GAAG,MAAMT,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOJ,GAAG,CAAC0B,WAAW,CAACvB,KAAK,EAAEY,MAAM,CAACN,EAAE,8DAChCgB,aAAa,GACbV,MAAM,CAACQ,IAAI,EAChB;MACN,CAAC,CAAC;MACF,OAAO,IAAAX,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMc,mBAAmB,CAACZ,MAAM,EAAE;MAC9B,MAAMZ,KAAK,GAAG,MAAMD,qBAAqB,EAAE;MAE3C,MAAMD,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC5C,OAAOJ,GAAG,CAAC4B,WAAW,CAACzB,KAAK,EAAEY,MAAM,CAACN,EAAE,CAAC;MAC5C,CAAC,CAAC;MAEF,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}

package/storageOperations/models/contentModelPluginFactory.d.ts

@@ -1,8 +1,8 @@
-import { CmsModelPlugin } from "@webiny/api-headless-cms";
-import { CmsModel, CmsGroup } from "@webiny/api-headless-cms/types";
+import { CmsModelPlugin, CmsPrivateModelFull } from "@webiny/api-headless-cms";
+import { CmsGroup } from "@webiny/api-headless-cms/types";
 interface Params {
     group: Pick<CmsGroup, "id" | "name">;
-    modelDefinition: Omit<CmsModel, "locale" | "tenant" | "webinyVersion" | "group">;
+    modelDefinition: Omit<CmsPrivateModelFull, "group" | "noValidate">;
 }
 export declare const contentModelPluginFactory: (params: Params) => CmsModelPlugin;
 export {};

package/storageOperations/models/contentModelPluginFactory.js

@@ -12,8 +12,9 @@ const contentModelPluginFactory = params => {
     group,
     modelDefinition
   } = params;
-  return (0, _apiHeadlessCms.createCmsModel)((0, _objectSpread2.default)({
-    group
-  }, modelDefinition));
+  return (0, _apiHeadlessCms.createCmsModel)((0, _objectSpread2.default)((0, _objectSpread2.default)({}, modelDefinition), {}, {
+    group,
+    noValidate: true
+  }));
 };
 exports.contentModelPluginFactory = contentModelPluginFactory;

package/storageOperations/models/contentModelPluginFactory.js.map

@@ -1 +1 @@
-{"version":3,"names":["contentModelPluginFactory","params","group","modelDefinition","createCmsModel"],"sources":["contentModelPluginFactory.ts"],"sourcesContent":["import { CmsModelPlugin, createCmsModel } from \"@webiny/api-headless-cms\";\nimport { CmsModel, CmsGroup } from \"@webiny/api-headless-cms/types\";\n\ninterface Params {\n    group: Pick<CmsGroup, \"id\" | \"name\">;\n    modelDefinition: Omit<CmsModel, \"locale\" | \"tenant\" | \"webinyVersion\" | \"group\">;\n}\n\nexport const contentModelPluginFactory = (params: Params): CmsModelPlugin => {\n    const { group, modelDefinition } = params;\n\n    return createCmsModel({\n        group,\n        ...modelDefinition\n    });\n};\n"],"mappings":";;;;;;;;AAAA;AAQO,MAAMA,yBAAyB,GAAIC,MAAc,IAAqB;EACzE,MAAM;IAAEC,KAAK;IAAEC;EAAgB,CAAC,GAAGF,MAAM;EAEzC,OAAO,IAAAG,8BAAc;IACjBF;EAAK,GACFC,eAAe,EACpB;AACN,CAAC;AAAC"}
+{"version":3,"names":["contentModelPluginFactory","params","group","modelDefinition","createCmsModel","noValidate"],"sources":["contentModelPluginFactory.ts"],"sourcesContent":["import { CmsModelPlugin, CmsPrivateModelFull, createCmsModel } from \"@webiny/api-headless-cms\";\nimport { CmsGroup } from \"@webiny/api-headless-cms/types\";\n\ninterface Params {\n    group: Pick<CmsGroup, \"id\" | \"name\">;\n    modelDefinition: Omit<CmsPrivateModelFull, \"group\" | \"noValidate\">;\n}\n\nexport const contentModelPluginFactory = (params: Params): CmsModelPlugin => {\n    const { group, modelDefinition } = params;\n\n    return createCmsModel({\n        ...modelDefinition,\n        group,\n        noValidate: true\n    });\n};\n"],"mappings":";;;;;;;;AAAA;AAQO,MAAMA,yBAAyB,GAAIC,MAAc,IAAqB;EACzE,MAAM;IAAEC,KAAK;IAAEC;EAAgB,CAAC,GAAGF,MAAM;EAEzC,OAAO,IAAAG,8BAAc,8DACdD,eAAe;IAClBD,KAAK;IACLG,UAAU,EAAE;EAAI,GAClB;AACN,CAAC;AAAC"}

package/storageOperations/models/index.js

@@ -29,7 +29,6 @@ const createApwModels = context => {
   })) {
     return;
   }
-  context.security.disableAuthorization();
   const locale = context.i18n.getContentLocale();
   if (!locale) {
     throw new _error.default("Missing content locale in api-apw/storageOperations/index.ts", "LOCALE_ERROR");
@@ -86,6 +85,5 @@ const createApwModels = context => {
    *  Register them so that they are accessible in cms context
    */
   context.plugins.register([cmsGroupPlugin, cmsModelPlugins]);
-  context.security.enableAuthorization();
 };
 exports.createApwModels = createApwModels;

package/storageOperations/models/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["createApwModels","context","cms","console","warn","isInstallationPending","tenancy","i18n","security","disableAuthorization","locale","getContentLocale","WebinyError","groupId","cmsGroupPlugin","CmsGroupPlugin","id","slug","name","description","icon","isPrivate","changeRequestModelDefinition","createChangeRequestModelDefinition","reviewerModelDefinition","createReviewerModelDefinition","workflowModelDefinition","createWorkflowModelDefinition","reviewerModelId","modelId","commentModelDefinition","createCommentModelDefinition","contentReviewModelDefinition","createContentReviewModelDefinition","modelDefinitions","cmsModelPlugins","modelDefinition","cmsModelPlugin","contentModelPluginFactory","group","contentModelGroup","contentModel","titleFieldId","push","plugins","register","enableAuthorization"],"sources":["index.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { CmsGroupPlugin } from \"@webiny/api-headless-cms\";\nimport { contentModelPluginFactory } from \"./contentModelPluginFactory\";\nimport { createWorkflowModelDefinition } from \"./workflow.model\";\nimport { createContentReviewModelDefinition } from \"./contentReview.model\";\nimport { createReviewerModelDefinition } from \"./reviewer.model\";\nimport { createCommentModelDefinition } from \"./comment.model\";\nimport { createChangeRequestModelDefinition } from \"./changeRequest.model\";\nimport { CmsContext } from \"@webiny/api-headless-cms/types\";\nimport { isInstallationPending } from \"~/plugins/utils\";\n\nexport const createApwModels = (context: CmsContext) => {\n    /**\n     * This should never happen in the actual project.\n     * It is to make sure that we load setup context before the CRUD init in our internal code.\n     */\n    if (!context.cms) {\n        console.warn(\"Creating model before cms init.\");\n        return;\n    }\n\n    if (isInstallationPending({ tenancy: context.tenancy, i18n: context.i18n })) {\n        return;\n    }\n\n    context.security.disableAuthorization();\n\n    const locale = context.i18n.getContentLocale();\n    if (!locale) {\n        throw new WebinyError(\n            \"Missing content locale in api-apw/storageOperations/index.ts\",\n            \"LOCALE_ERROR\"\n        );\n    }\n    /**\n     * TODO:@ashutosh\n     * We need to move these plugin in an installation plugin\n     */\n    const groupId = \"contentModelGroup_apw\";\n    /**\n     * Create a CmsGroup.\n     */\n    const cmsGroupPlugin = new CmsGroupPlugin({\n        id: groupId,\n        slug: \"apw\",\n        name: \"APW\",\n        description: \"Group for Advanced Publishing Workflow\",\n        icon: \"fas/star\",\n        isPrivate: true\n    });\n\n    /**\n     * Create  CmsModel plugins.\n     */\n    const changeRequestModelDefinition = createChangeRequestModelDefinition();\n    const reviewerModelDefinition = createReviewerModelDefinition();\n    const workflowModelDefinition = createWorkflowModelDefinition({\n        reviewerModelId: reviewerModelDefinition.modelId\n    });\n    const commentModelDefinition = createCommentModelDefinition({\n        modelId: changeRequestModelDefinition.modelId\n    });\n    const contentReviewModelDefinition = createContentReviewModelDefinition({\n        reviewerModelId: reviewerModelDefinition.modelId\n    });\n\n    const modelDefinitions = [\n        workflowModelDefinition,\n        contentReviewModelDefinition,\n        reviewerModelDefinition,\n        changeRequestModelDefinition,\n        commentModelDefinition\n    ];\n\n    const cmsModelPlugins = [];\n    for (const modelDefinition of modelDefinitions) {\n        const cmsModelPlugin = contentModelPluginFactory({\n            group: cmsGroupPlugin.contentModelGroup,\n            modelDefinition\n        });\n        /**\n         * We want \"title\" field as the \"titleField\" for \"ContentReview\" model.\n         * so that we can later search entries by title.\n         */\n        if (cmsModelPlugin.contentModel.modelId === \"apwContentReviewModelDefinition\") {\n            cmsModelPlugin.contentModel.titleFieldId = \"title\";\n        }\n        cmsModelPlugins.push(cmsModelPlugin);\n    }\n\n    /**\n     *  Register them so that they are accessible in cms context\n     */\n    context.plugins.register([cmsGroupPlugin, cmsModelPlugins]);\n\n    context.security.enableAuthorization();\n};\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AAEO,MAAMA,eAAe,GAAIC,OAAmB,IAAK;EACpD;AACJ;AACA;AACA;EACI,IAAI,CAACA,OAAO,CAACC,GAAG,EAAE;IACdC,OAAO,CAACC,IAAI,CAAC,iCAAiC,CAAC;IAC/C;EACJ;EAEA,IAAI,IAAAC,4BAAqB,EAAC;IAAEC,OAAO,EAAEL,OAAO,CAACK,OAAO;IAAEC,IAAI,EAAEN,OAAO,CAACM;EAAK,CAAC,CAAC,EAAE;IACzE;EACJ;EAEAN,OAAO,CAACO,QAAQ,CAACC,oBAAoB,EAAE;EAEvC,MAAMC,MAAM,GAAGT,OAAO,CAACM,IAAI,CAACI,gBAAgB,EAAE;EAC9C,IAAI,CAACD,MAAM,EAAE;IACT,MAAM,IAAIE,cAAW,CACjB,8DAA8D,EAC9D,cAAc,CACjB;EACL;EACA;AACJ;AACA;AACA;EACI,MAAMC,OAAO,GAAG,uBAAuB;EACvC;AACJ;AACA;EACI,MAAMC,cAAc,GAAG,IAAIC,8BAAc,CAAC;IACtCC,EAAE,EAAEH,OAAO;IACXI,IAAI,EAAE,KAAK;IACXC,IAAI,EAAE,KAAK;IACXC,WAAW,EAAE,wCAAwC;IACrDC,IAAI,EAAE,UAAU;IAChBC,SAAS,EAAE;EACf,CAAC,CAAC;;EAEF;AACJ;AACA;EACI,MAAMC,4BAA4B,GAAG,IAAAC,iDAAkC,GAAE;EACzE,MAAMC,uBAAuB,GAAG,IAAAC,uCAA6B,GAAE;EAC/D,MAAMC,uBAAuB,GAAG,IAAAC,uCAA6B,EAAC;IAC1DC,eAAe,EAAEJ,uBAAuB,CAACK;EAC7C,CAAC,CAAC;EACF,MAAMC,sBAAsB,GAAG,IAAAC,qCAA4B,EAAC;IACxDF,OAAO,EAAEP,4BAA4B,CAACO;EAC1C,CAAC,CAAC;EACF,MAAMG,4BAA4B,GAAG,IAAAC,iDAAkC,EAAC;IACpEL,eAAe,EAAEJ,uBAAuB,CAACK;EAC7C,CAAC,CAAC;EAEF,MAAMK,gBAAgB,GAAG,CACrBR,uBAAuB,EACvBM,4BAA4B,EAC5BR,uBAAuB,EACvBF,4BAA4B,EAC5BQ,sBAAsB,CACzB;EAED,MAAMK,eAAe,GAAG,EAAE;EAC1B,KAAK,MAAMC,eAAe,IAAIF,gBAAgB,EAAE;IAC5C,MAAMG,cAAc,GAAG,IAAAC,oDAAyB,EAAC;MAC7CC,KAAK,EAAEzB,cAAc,CAAC0B,iBAAiB;MACvCJ;IACJ,CAAC,CAAC;IACF;AACR;AACA;AACA;IACQ,IAAIC,cAAc,CAACI,YAAY,CAACZ,OAAO,KAAK,iCAAiC,EAAE;MAC3EQ,cAAc,CAACI,YAAY,CAACC,YAAY,GAAG,OAAO;IACtD;IACAP,eAAe,CAACQ,IAAI,CAACN,cAAc,CAAC;EACxC;;EAEA;AACJ;AACA;EACIpC,OAAO,CAAC2C,OAAO,CAACC,QAAQ,CAAC,CAAC/B,cAAc,EAAEqB,eAAe,CAAC,CAAC;EAE3DlC,OAAO,CAACO,QAAQ,CAACsC,mBAAmB,EAAE;AAC1C,CAAC;AAAC"}
+{"version":3,"names":["createApwModels","context","cms","console","warn","isInstallationPending","tenancy","i18n","locale","getContentLocale","WebinyError","groupId","cmsGroupPlugin","CmsGroupPlugin","id","slug","name","description","icon","isPrivate","changeRequestModelDefinition","createChangeRequestModelDefinition","reviewerModelDefinition","createReviewerModelDefinition","workflowModelDefinition","createWorkflowModelDefinition","reviewerModelId","modelId","commentModelDefinition","createCommentModelDefinition","contentReviewModelDefinition","createContentReviewModelDefinition","modelDefinitions","cmsModelPlugins","modelDefinition","cmsModelPlugin","contentModelPluginFactory","group","contentModelGroup","contentModel","titleFieldId","push","plugins","register"],"sources":["index.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { CmsGroupPlugin, CmsModelPlugin } from \"@webiny/api-headless-cms\";\nimport { contentModelPluginFactory } from \"./contentModelPluginFactory\";\nimport { createWorkflowModelDefinition } from \"./workflow.model\";\nimport { createContentReviewModelDefinition } from \"./contentReview.model\";\nimport { createReviewerModelDefinition } from \"./reviewer.model\";\nimport { createCommentModelDefinition } from \"./comment.model\";\nimport { createChangeRequestModelDefinition } from \"./changeRequest.model\";\nimport { CmsContext } from \"@webiny/api-headless-cms/types\";\nimport { isInstallationPending } from \"~/plugins/utils\";\n\nexport const createApwModels = (context: CmsContext) => {\n    /**\n     * This should never happen in the actual project.\n     * It is to make sure that we load setup context before the CRUD init in our internal code.\n     */\n    if (!context.cms) {\n        console.warn(\"Creating model before cms init.\");\n        return;\n    }\n\n    if (isInstallationPending({ tenancy: context.tenancy, i18n: context.i18n })) {\n        return;\n    }\n\n    const locale = context.i18n.getContentLocale();\n    if (!locale) {\n        throw new WebinyError(\n            \"Missing content locale in api-apw/storageOperations/index.ts\",\n            \"LOCALE_ERROR\"\n        );\n    }\n    /**\n     * TODO:@ashutosh\n     * We need to move these plugin in an installation plugin\n     */\n    const groupId = \"contentModelGroup_apw\";\n    /**\n     * Create a CmsGroup.\n     */\n    const cmsGroupPlugin = new CmsGroupPlugin({\n        id: groupId,\n        slug: \"apw\",\n        name: \"APW\",\n        description: \"Group for Advanced Publishing Workflow\",\n        icon: \"fas/star\",\n        isPrivate: true\n    });\n\n    /**\n     * Create  CmsModel plugins.\n     */\n    const changeRequestModelDefinition = createChangeRequestModelDefinition();\n    const reviewerModelDefinition = createReviewerModelDefinition();\n    const workflowModelDefinition = createWorkflowModelDefinition({\n        reviewerModelId: reviewerModelDefinition.modelId\n    });\n    const commentModelDefinition = createCommentModelDefinition({\n        modelId: changeRequestModelDefinition.modelId\n    });\n    const contentReviewModelDefinition = createContentReviewModelDefinition({\n        reviewerModelId: reviewerModelDefinition.modelId\n    });\n\n    const modelDefinitions = [\n        workflowModelDefinition,\n        contentReviewModelDefinition,\n        reviewerModelDefinition,\n        changeRequestModelDefinition,\n        commentModelDefinition\n    ];\n\n    const cmsModelPlugins: CmsModelPlugin[] = [];\n    for (const modelDefinition of modelDefinitions) {\n        const cmsModelPlugin = contentModelPluginFactory({\n            group: cmsGroupPlugin.contentModelGroup,\n            modelDefinition\n        });\n        /**\n         * We want \"title\" field as the \"titleField\" for \"ContentReview\" model.\n         * so that we can later search entries by title.\n         */\n        if (cmsModelPlugin.contentModel.modelId === \"apwContentReviewModelDefinition\") {\n            cmsModelPlugin.contentModel.titleFieldId = \"title\";\n        }\n        cmsModelPlugins.push(cmsModelPlugin);\n    }\n\n    /**\n     *  Register them so that they are accessible in cms context\n     */\n    context.plugins.register([cmsGroupPlugin, cmsModelPlugins]);\n};\n"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AAEO,MAAMA,eAAe,GAAIC,OAAmB,IAAK;EACpD;AACJ;AACA;AACA;EACI,IAAI,CAACA,OAAO,CAACC,GAAG,EAAE;IACdC,OAAO,CAACC,IAAI,CAAC,iCAAiC,CAAC;IAC/C;EACJ;EAEA,IAAI,IAAAC,4BAAqB,EAAC;IAAEC,OAAO,EAAEL,OAAO,CAACK,OAAO;IAAEC,IAAI,EAAEN,OAAO,CAACM;EAAK,CAAC,CAAC,EAAE;IACzE;EACJ;EAEA,MAAMC,MAAM,GAAGP,OAAO,CAACM,IAAI,CAACE,gBAAgB,EAAE;EAC9C,IAAI,CAACD,MAAM,EAAE;IACT,MAAM,IAAIE,cAAW,CACjB,8DAA8D,EAC9D,cAAc,CACjB;EACL;EACA;AACJ;AACA;AACA;EACI,MAAMC,OAAO,GAAG,uBAAuB;EACvC;AACJ;AACA;EACI,MAAMC,cAAc,GAAG,IAAIC,8BAAc,CAAC;IACtCC,EAAE,EAAEH,OAAO;IACXI,IAAI,EAAE,KAAK;IACXC,IAAI,EAAE,KAAK;IACXC,WAAW,EAAE,wCAAwC;IACrDC,IAAI,EAAE,UAAU;IAChBC,SAAS,EAAE;EACf,CAAC,CAAC;;EAEF;AACJ;AACA;EACI,MAAMC,4BAA4B,GAAG,IAAAC,iDAAkC,GAAE;EACzE,MAAMC,uBAAuB,GAAG,IAAAC,uCAA6B,GAAE;EAC/D,MAAMC,uBAAuB,GAAG,IAAAC,uCAA6B,EAAC;IAC1DC,eAAe,EAAEJ,uBAAuB,CAACK;EAC7C,CAAC,CAAC;EACF,MAAMC,sBAAsB,GAAG,IAAAC,qCAA4B,EAAC;IACxDF,OAAO,EAAEP,4BAA4B,CAACO;EAC1C,CAAC,CAAC;EACF,MAAMG,4BAA4B,GAAG,IAAAC,iDAAkC,EAAC;IACpEL,eAAe,EAAEJ,uBAAuB,CAACK;EAC7C,CAAC,CAAC;EAEF,MAAMK,gBAAgB,GAAG,CACrBR,uBAAuB,EACvBM,4BAA4B,EAC5BR,uBAAuB,EACvBF,4BAA4B,EAC5BQ,sBAAsB,CACzB;EAED,MAAMK,eAAiC,GAAG,EAAE;EAC5C,KAAK,MAAMC,eAAe,IAAIF,gBAAgB,EAAE;IAC5C,MAAMG,cAAc,GAAG,IAAAC,oDAAyB,EAAC;MAC7CC,KAAK,EAAEzB,cAAc,CAAC0B,iBAAiB;MACvCJ;IACJ,CAAC,CAAC;IACF;AACR;AACA;AACA;IACQ,IAAIC,cAAc,CAACI,YAAY,CAACZ,OAAO,KAAK,iCAAiC,EAAE;MAC3EQ,cAAc,CAACI,YAAY,CAACC,YAAY,GAAG,OAAO;IACtD;IACAP,eAAe,CAACQ,IAAI,CAACN,cAAc,CAAC;EACxC;;EAEA;AACJ;AACA;EACIlC,OAAO,CAACyC,OAAO,CAACC,QAAQ,CAAC,CAAC/B,cAAc,EAAEqB,eAAe,CAAC,CAAC;AAC/D,CAAC;AAAC"}

package/storageOperations/reviewerStorageOperations.js

@@ -13,26 +13,21 @@ const createReviewerStorageOperations = ({
   security
 }) => {
   const getReviewerModel = async () => {
-    security.disableAuthorization();
-    try {
-      const model = await cms.getModel("apwReviewerModelDefinition");
-      if (!model) {
-        throw new _error.default("Could not find `apwReviewerModelDefinition` model.", "MODEL_NOT_FOUND_ERROR");
-      }
-      return model;
-    } catch (ex) {
-      throw ex;
-    } finally {
-      security.enableAuthorization();
+    const model = await security.withoutAuthorization(async () => {
+      return cms.getModel("apwReviewerModelDefinition");
+    });
+    if (!model) {
+      throw new _error.default("Could not find `apwReviewerModelDefinition` model.", "MODEL_NOT_FOUND_ERROR");
     }
+    return model;
   };
   const getReviewer = async ({
     id
   }) => {
     const model = await getReviewerModel();
-    security.disableAuthorization();
-    const entry = await cms.getEntryById(model, id);
-    security.enableAuthorization();
+    const entry = await security.withoutAuthorization(async () => {
+      return cms.getEntryById(model, id);
+    });
     return (0, _index.getFieldValues)(entry, _index.baseFields);
   };
   return {
@@ -40,18 +35,18 @@ const createReviewerStorageOperations = ({
     getReviewer,
     async listReviewers(params) {
       const model = await getReviewerModel();
-      security.disableAuthorization();
-      const [entries, meta] = await cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
-        where: (0, _objectSpread2.default)({}, params.where)
-      }));
-      security.enableAuthorization();
+      const [entries, meta] = await security.withoutAuthorization(async () => {
+        return cms.listLatestEntries(model, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, params), {}, {
+          where: (0, _objectSpread2.default)({}, params.where)
+        }));
+      });
       return [entries.map(entry => (0, _index.getFieldValues)(entry, _index.baseFields)), meta];
     },
     async createReviewer(params) {
       const model = await getReviewerModel();
-      security.disableAuthorization();
-      const entry = await cms.createEntry(model, params.data);
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.createEntry(model, params.data);
+      });
       return (0, _index.getFieldValues)(entry, _index.baseFields);
     },
     async updateReviewer(params) {
@@ -63,16 +58,16 @@ const createReviewerStorageOperations = ({
       const existingEntry = await getReviewer({
         id: params.id
       });
-      security.disableAuthorization();
-      const entry = await cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
-      security.enableAuthorization();
+      const entry = await security.withoutAuthorization(async () => {
+        return cms.updateEntry(model, params.id, (0, _objectSpread2.default)((0, _objectSpread2.default)({}, existingEntry), params.data));
+      });
       return (0, _index.getFieldValues)(entry, _index.baseFields);
     },
     async deleteReviewer(params) {
       const model = await getReviewerModel();
-      security.disableAuthorization();
-      await cms.deleteEntry(model, params.id);
-      security.enableAuthorization();
+      await security.withoutAuthorization(async () => {
+        return cms.deleteEntry(model, params.id);
+      });
       return true;
     }
   };

package/storageOperations/reviewerStorageOperations.js.map

@@ -1 +1 @@
-{"version":3,"names":["createReviewerStorageOperations","cms","security","getReviewerModel","disableAuthorization","model","getModel","WebinyError","ex","enableAuthorization","getReviewer","id","entry","getEntryById","getFieldValues","baseFields","listReviewers","params","entries","meta","listLatestEntries","where","map","createReviewer","createEntry","data","updateReviewer","existingEntry","updateEntry","deleteReviewer","deleteEntry"],"sources":["reviewerStorageOperations.ts"],"sourcesContent":["import { ApwReviewerStorageOperations } from \"./types\";\nimport {\n    baseFields,\n    CreateApwStorageOperationsParams,\n    getFieldValues\n} from \"~/storageOperations/index\";\nimport WebinyError from \"@webiny/error\";\n\nexport const createReviewerStorageOperations = ({\n    cms,\n    security\n}: CreateApwStorageOperationsParams): ApwReviewerStorageOperations => {\n    const getReviewerModel = async () => {\n        security.disableAuthorization();\n        try {\n            const model = await cms.getModel(\"apwReviewerModelDefinition\");\n            if (!model) {\n                throw new WebinyError(\n                    \"Could not find `apwReviewerModelDefinition` model.\",\n                    \"MODEL_NOT_FOUND_ERROR\"\n                );\n            }\n            return model;\n        } catch (ex) {\n            throw ex;\n        } finally {\n            security.enableAuthorization();\n        }\n    };\n    const getReviewer: ApwReviewerStorageOperations[\"getReviewer\"] = async ({ id }) => {\n        const model = await getReviewerModel();\n        security.disableAuthorization();\n        const entry = await cms.getEntryById(model, id);\n        security.enableAuthorization();\n        return getFieldValues(entry, baseFields);\n    };\n    return {\n        getReviewerModel,\n        getReviewer,\n        async listReviewers(params) {\n            const model = await getReviewerModel();\n            security.disableAuthorization();\n            const [entries, meta] = await cms.listLatestEntries(model, {\n                ...params,\n                where: {\n                    ...params.where\n                }\n            });\n            security.enableAuthorization();\n            return [entries.map(entry => getFieldValues(entry, baseFields)), meta];\n        },\n        async createReviewer(params) {\n            const model = await getReviewerModel();\n            security.disableAuthorization();\n            const entry = await cms.createEntry(model, params.data);\n            security.enableAuthorization();\n            return getFieldValues(entry, baseFields);\n        },\n        async updateReviewer(params) {\n            const model = await getReviewerModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getReviewer({ id: params.id });\n\n            security.disableAuthorization();\n            const entry = await cms.updateEntry(model, params.id, {\n                ...existingEntry,\n                ...params.data\n            });\n            security.enableAuthorization();\n            return getFieldValues(entry, baseFields);\n        },\n        async deleteReviewer(params) {\n            const model = await getReviewerModel();\n            security.disableAuthorization();\n            await cms.deleteEntry(model, params.id);\n            security.enableAuthorization();\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AAKA;AAEO,MAAMA,+BAA+B,GAAG,CAAC;EAC5CC,GAAG;EACHC;AAC8B,CAAC,KAAmC;EAClE,MAAMC,gBAAgB,GAAG,YAAY;IACjCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,IAAI;MACA,MAAMC,KAAK,GAAG,MAAMJ,GAAG,CAACK,QAAQ,CAAC,4BAA4B,CAAC;MAC9D,IAAI,CAACD,KAAK,EAAE;QACR,MAAM,IAAIE,cAAW,CACjB,oDAAoD,EACpD,uBAAuB,CAC1B;MACL;MACA,OAAOF,KAAK;IAChB,CAAC,CAAC,OAAOG,EAAE,EAAE;MACT,MAAMA,EAAE;IACZ,CAAC,SAAS;MACNN,QAAQ,CAACO,mBAAmB,EAAE;IAClC;EACJ,CAAC;EACD,MAAMC,WAAwD,GAAG,OAAO;IAAEC;EAAG,CAAC,KAAK;IAC/E,MAAMN,KAAK,GAAG,MAAMF,gBAAgB,EAAE;IACtCD,QAAQ,CAACE,oBAAoB,EAAE;IAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAACY,YAAY,CAACR,KAAK,EAAEM,EAAE,CAAC;IAC/CT,QAAQ,CAACO,mBAAmB,EAAE;IAC9B,OAAO,IAAAK,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;EAC5C,CAAC;EACD,OAAO;IACHZ,gBAAgB;IAChBO,WAAW;IACX,MAAMM,aAAa,CAACC,MAAM,EAAE;MACxB,MAAMZ,KAAK,GAAG,MAAMF,gBAAgB,EAAE;MACtCD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAM,CAACc,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMlB,GAAG,CAACmB,iBAAiB,CAACf,KAAK,8DAClDY,MAAM;QACTI,KAAK,kCACEJ,MAAM,CAACI,KAAK;MAClB,GACH;MACFnB,QAAQ,CAACO,mBAAmB,EAAE;MAC9B,OAAO,CAACS,OAAO,CAACI,GAAG,CAACV,KAAK,IAAI,IAAAE,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC,CAAC,EAAEI,IAAI,CAAC;IAC1E,CAAC;IACD,MAAMI,cAAc,CAACN,MAAM,EAAE;MACzB,MAAMZ,KAAK,GAAG,MAAMF,gBAAgB,EAAE;MACtCD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAACuB,WAAW,CAACnB,KAAK,EAAEY,MAAM,CAACQ,IAAI,CAAC;MACvDvB,QAAQ,CAACO,mBAAmB,EAAE;MAC9B,OAAO,IAAAK,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMW,cAAc,CAACT,MAAM,EAAE;MACzB,MAAMZ,KAAK,GAAG,MAAMF,gBAAgB,EAAE;MACtC;AACZ;AACA;AACA;MACY,MAAMwB,aAAa,GAAG,MAAMjB,WAAW,CAAC;QAAEC,EAAE,EAAEM,MAAM,CAACN;MAAG,CAAC,CAAC;MAE1DT,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMQ,KAAK,GAAG,MAAMX,GAAG,CAAC2B,WAAW,CAACvB,KAAK,EAAEY,MAAM,CAACN,EAAE,8DAC7CgB,aAAa,GACbV,MAAM,CAACQ,IAAI,EAChB;MACFvB,QAAQ,CAACO,mBAAmB,EAAE;MAC9B,OAAO,IAAAK,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMc,cAAc,CAACZ,MAAM,EAAE;MACzB,MAAMZ,KAAK,GAAG,MAAMF,gBAAgB,EAAE;MACtCD,QAAQ,CAACE,oBAAoB,EAAE;MAC/B,MAAMH,GAAG,CAAC6B,WAAW,CAACzB,KAAK,EAAEY,MAAM,CAACN,EAAE,CAAC;MACvCT,QAAQ,CAACO,mBAAmB,EAAE;MAC9B,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}
+{"version":3,"names":["createReviewerStorageOperations","cms","security","getReviewerModel","model","withoutAuthorization","getModel","WebinyError","getReviewer","id","entry","getEntryById","getFieldValues","baseFields","listReviewers","params","entries","meta","listLatestEntries","where","map","createReviewer","createEntry","data","updateReviewer","existingEntry","updateEntry","deleteReviewer","deleteEntry"],"sources":["reviewerStorageOperations.ts"],"sourcesContent":["import { ApwReviewerStorageOperations } from \"./types\";\nimport {\n    baseFields,\n    CreateApwStorageOperationsParams,\n    getFieldValues\n} from \"~/storageOperations/index\";\nimport WebinyError from \"@webiny/error\";\n\nexport const createReviewerStorageOperations = ({\n    cms,\n    security\n}: CreateApwStorageOperationsParams): ApwReviewerStorageOperations => {\n    const getReviewerModel = async () => {\n        const model = await security.withoutAuthorization(async () => {\n            return cms.getModel(\"apwReviewerModelDefinition\");\n        });\n        if (!model) {\n            throw new WebinyError(\n                \"Could not find `apwReviewerModelDefinition` model.\",\n                \"MODEL_NOT_FOUND_ERROR\"\n            );\n        }\n        return model;\n    };\n    const getReviewer: ApwReviewerStorageOperations[\"getReviewer\"] = async ({ id }) => {\n        const model = await getReviewerModel();\n\n        const entry = await security.withoutAuthorization(async () => {\n            return cms.getEntryById(model, id);\n        });\n        return getFieldValues(entry, baseFields);\n    };\n    return {\n        getReviewerModel,\n        getReviewer,\n        async listReviewers(params) {\n            const model = await getReviewerModel();\n\n            const [entries, meta] = await security.withoutAuthorization(async () => {\n                return cms.listLatestEntries(model, {\n                    ...params,\n                    where: {\n                        ...params.where\n                    }\n                });\n            });\n            return [entries.map(entry => getFieldValues(entry, baseFields)), meta];\n        },\n        async createReviewer(params) {\n            const model = await getReviewerModel();\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.createEntry(model, params.data);\n            });\n            return getFieldValues(entry, baseFields);\n        },\n        async updateReviewer(params) {\n            const model = await getReviewerModel();\n            /**\n             * We're fetching the existing entry here because we're not accepting \"app\" field as input,\n             * but, we still need to retain its value after the \"update\" operation.\n             */\n            const existingEntry = await getReviewer({ id: params.id });\n\n            const entry = await security.withoutAuthorization(async () => {\n                return cms.updateEntry(model, params.id, {\n                    ...existingEntry,\n                    ...params.data\n                });\n            });\n            return getFieldValues(entry, baseFields);\n        },\n        async deleteReviewer(params) {\n            const model = await getReviewerModel();\n\n            await security.withoutAuthorization(async () => {\n                return cms.deleteEntry(model, params.id);\n            });\n            return true;\n        }\n    };\n};\n"],"mappings":";;;;;;;;AACA;AAKA;AAEO,MAAMA,+BAA+B,GAAG,CAAC;EAC5CC,GAAG;EACHC;AAC8B,CAAC,KAAmC;EAClE,MAAMC,gBAAgB,GAAG,YAAY;IACjC,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOJ,GAAG,CAACK,QAAQ,CAAC,4BAA4B,CAAC;IACrD,CAAC,CAAC;IACF,IAAI,CAACF,KAAK,EAAE;MACR,MAAM,IAAIG,cAAW,CACjB,oDAAoD,EACpD,uBAAuB,CAC1B;IACL;IACA,OAAOH,KAAK;EAChB,CAAC;EACD,MAAMI,WAAwD,GAAG,OAAO;IAAEC;EAAG,CAAC,KAAK;IAC/E,MAAML,KAAK,GAAG,MAAMD,gBAAgB,EAAE;IAEtC,MAAMO,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;MAC1D,OAAOJ,GAAG,CAACU,YAAY,CAACP,KAAK,EAAEK,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,IAAAG,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;EAC5C,CAAC;EACD,OAAO;IACHV,gBAAgB;IAChBK,WAAW;IACX,MAAMM,aAAa,CAACC,MAAM,EAAE;MACxB,MAAMX,KAAK,GAAG,MAAMD,gBAAgB,EAAE;MAEtC,MAAM,CAACa,OAAO,EAAEC,IAAI,CAAC,GAAG,MAAMf,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QACpE,OAAOJ,GAAG,CAACiB,iBAAiB,CAACd,KAAK,8DAC3BW,MAAM;UACTI,KAAK,kCACEJ,MAAM,CAACI,KAAK;QAClB,GACH;MACN,CAAC,CAAC;MACF,OAAO,CAACH,OAAO,CAACI,GAAG,CAACV,KAAK,IAAI,IAAAE,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC,CAAC,EAAEI,IAAI,CAAC;IAC1E,CAAC;IACD,MAAMI,cAAc,CAACN,MAAM,EAAE;MACzB,MAAMX,KAAK,GAAG,MAAMD,gBAAgB,EAAE;MACtC,MAAMO,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOJ,GAAG,CAACqB,WAAW,CAAClB,KAAK,EAAEW,MAAM,CAACQ,IAAI,CAAC;MAC9C,CAAC,CAAC;MACF,OAAO,IAAAX,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMW,cAAc,CAACT,MAAM,EAAE;MACzB,MAAMX,KAAK,GAAG,MAAMD,gBAAgB,EAAE;MACtC;AACZ;AACA;AACA;MACY,MAAMsB,aAAa,GAAG,MAAMjB,WAAW,CAAC;QAAEC,EAAE,EAAEM,MAAM,CAACN;MAAG,CAAC,CAAC;MAE1D,MAAMC,KAAK,GAAG,MAAMR,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC1D,OAAOJ,GAAG,CAACyB,WAAW,CAACtB,KAAK,EAAEW,MAAM,CAACN,EAAE,8DAChCgB,aAAa,GACbV,MAAM,CAACQ,IAAI,EAChB;MACN,CAAC,CAAC;MACF,OAAO,IAAAX,qBAAc,EAACF,KAAK,EAAEG,iBAAU,CAAC;IAC5C,CAAC;IACD,MAAMc,cAAc,CAACZ,MAAM,EAAE;MACzB,MAAMX,KAAK,GAAG,MAAMD,gBAAgB,EAAE;MAEtC,MAAMD,QAAQ,CAACG,oBAAoB,CAAC,YAAY;QAC5C,OAAOJ,GAAG,CAAC2B,WAAW,CAACxB,KAAK,EAAEW,MAAM,CAACN,EAAE,CAAC;MAC5C,CAAC,CAAC;MACF,OAAO,IAAI;IACf;EACJ,CAAC;AACL,CAAC;AAAC"}