@webiny/api-core 6.3.0 → 6.4.0-beta.1

package/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js

@@ -2,75 +2,53 @@ import { Result } from "@webiny/feature/api";
 import { TeamsRepository } from "../abstractions.js";
 import { ListCache } from "../../../roles/shared/decorators/ListCache.js";
 class TeamsRepositoryCachingDecoratorImpl {
-  cache = new ListCache();
-  constructor(decoratee) {
-    this.decoratee = decoratee;
-  }
-  async get(params) {
-    // Check cache first
-    if (this.cache.hasItems()) {
-      const cachedTeam = this.cache.getItems().find(t => {
-        if (params.id && t.id === params.id) {
-          return true;
-        }
-        if (params.slug && t.slug === params.slug) {
-          return true;
+    constructor(decoratee){
+        this.decoratee = decoratee;
+        this.cache = new ListCache();
+    }
+    async get(params) {
+        if (this.cache.hasItems()) {
+            const cachedTeam = this.cache.getItems().find((t)=>{
+                if (params.id && t.id === params.id) return true;
+                if (params.slug && t.slug === params.slug) return true;
+                return false;
+            });
+            if (cachedTeam) return Result.ok(cachedTeam);
         }
-        return false;
-      });
-      if (cachedTeam) {
-        return Result.ok(cachedTeam);
-      }
+        const result = await this.decoratee.get(params);
+        if (result.isOk()) this.cache.addItems([
+            result.value
+        ]);
+        return result;
     }
-
-    // Delegate to decoratee
-    const result = await this.decoratee.get(params);
-
-    // Add to cache on success
-    if (result.isOk()) {
-      this.cache.addItems([result.value]);
+    async list(params) {
+        return this.decoratee.list(params);
     }
-    return result;
-  }
-  async list(params) {
-    return this.decoratee.list(params);
-  }
-  async create(team) {
-    const result = await this.decoratee.create(team);
-
-    // Add to cache on success
-    if (result.isOk()) {
-      this.cache.addItems([team]);
+    async create(team) {
+        const result = await this.decoratee.create(team);
+        if (result.isOk()) this.cache.addItems([
+            team
+        ]);
+        return result;
     }
-    return result;
-  }
-  async update(team) {
-    const result = await this.decoratee.update(team);
-
-    // Update in cache on success
-    if (result.isOk()) {
-      this.cache.updateItems(item => {
-        if (item.id === team.id) {
-          return team;
-        }
-        return item;
-      });
+    async update(team) {
+        const result = await this.decoratee.update(team);
+        if (result.isOk()) this.cache.updateItems((item)=>{
+            if (item.id === team.id) return team;
+            return item;
+        });
+        return result;
     }
-    return result;
-  }
-  async delete(team) {
-    const result = await this.decoratee.delete(team);
-
-    // Remove from cache on success
-    if (result.isOk()) {
-      this.cache.removeItems(item => item.id === team.id);
+    async delete(team) {
+        const result = await this.decoratee.delete(team);
+        if (result.isOk()) this.cache.removeItems((item)=>item.id === team.id);
+        return result;
     }
-    return result;
-  }
 }
-export const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({
-  decorator: TeamsRepositoryCachingDecoratorImpl,
-  dependencies: []
+const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({
+    decorator: TeamsRepositoryCachingDecoratorImpl,
+    dependencies: []
 });
+export { TeamsRepositoryCachingDecorator };
 
 //# sourceMappingURL=TeamsRepositoryCachingDecorator.js.map

package/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","TeamsRepository","ListCache","TeamsRepositoryCachingDecoratorImpl","cache","constructor","decoratee","get","params","hasItems","cachedTeam","getItems","find","t","id","slug","ok","result","isOk","addItems","value","list","create","team","update","updateItems","item","delete","removeItems","TeamsRepositoryCachingDecorator","createDecorator","decorator","dependencies"],"sources":["TeamsRepositoryCachingDecorator.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { TeamsRepository } from \"../abstractions.js\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"../types.js\";\nimport { ListCache } from \"~/features/security/roles/shared/decorators/ListCache.js\";\n\nclass TeamsRepositoryCachingDecoratorImpl implements TeamsRepository.Interface {\n    private readonly cache = new ListCache<Team>();\n\n    constructor(private decoratee: TeamsRepository.Interface) {}\n\n    async get(params: GetTeamInput): Promise<Result<Team, TeamsRepository.Error>> {\n        // Check cache first\n        if (this.cache.hasItems()) {\n            const cachedTeam = this.cache.getItems().find(t => {\n                if (params.id && t.id === params.id) {\n                    return true;\n                }\n                if (params.slug && t.slug === params.slug) {\n                    return true;\n                }\n                return false;\n            });\n\n            if (cachedTeam) {\n                return Result.ok(cachedTeam);\n            }\n        }\n\n        // Delegate to decoratee\n        const result = await this.decoratee.get(params);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([result.value]);\n        }\n\n        return result;\n    }\n\n    async list(params: ListTeamsInput): Promise<Result<Team[], TeamsRepository.Error>> {\n        return this.decoratee.list(params);\n    }\n\n    async create(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.create(team);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([team]);\n        }\n\n        return result;\n    }\n\n    async update(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.update(team);\n\n        // Update in cache on success\n        if (result.isOk()) {\n            this.cache.updateItems(item => {\n                if (item.id === team.id) {\n                    return team;\n                }\n                return item;\n            });\n        }\n\n        return result;\n    }\n\n    async delete(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.delete(team);\n\n        // Remove from cache on success\n        if (result.isOk()) {\n            this.cache.removeItems(item => item.id === team.id);\n        }\n\n        return result;\n    }\n}\n\nexport const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({\n    decorator: TeamsRepositoryCachingDecoratorImpl,\n    dependencies: []\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,eAAe;AAExB,SAASC,SAAS;AAElB,MAAMC,mCAAmC,CAAsC;EAC1DC,KAAK,GAAG,IAAIF,SAAS,CAAO,CAAC;EAE9CG,WAAWA,CAASC,SAAoC,EAAE;IAAA,KAAtCA,SAAoC,GAApCA,SAAoC;EAAG;EAE3D,MAAMC,GAAGA,CAACC,MAAoB,EAAgD;IAC1E;IACA,IAAI,IAAI,CAACJ,KAAK,CAACK,QAAQ,CAAC,CAAC,EAAE;MACvB,MAAMC,UAAU,GAAG,IAAI,CAACN,KAAK,CAACO,QAAQ,CAAC,CAAC,CAACC,IAAI,CAACC,CAAC,IAAI;QAC/C,IAAIL,MAAM,CAACM,EAAE,IAAID,CAAC,CAACC,EAAE,KAAKN,MAAM,CAACM,EAAE,EAAE;UACjC,OAAO,IAAI;QACf;QACA,IAAIN,MAAM,CAACO,IAAI,IAAIF,CAAC,CAACE,IAAI,KAAKP,MAAM,CAACO,IAAI,EAAE;UACvC,OAAO,IAAI;QACf;QACA,OAAO,KAAK;MAChB,CAAC,CAAC;MAEF,IAAIL,UAAU,EAAE;QACZ,OAAOV,MAAM,CAACgB,EAAE,CAACN,UAAU,CAAC;MAChC;IACJ;;IAEA;IACA,MAAMO,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACC,GAAG,CAACC,MAAM,CAAC;;IAE/C;IACA,IAAIS,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACe,QAAQ,CAAC,CAACF,MAAM,CAACG,KAAK,CAAC,CAAC;IACvC;IAEA,OAAOH,MAAM;EACjB;EAEA,MAAMI,IAAIA,CAACb,MAAsB,EAAkD;IAC/E,OAAO,IAAI,CAACF,SAAS,CAACe,IAAI,CAACb,MAAM,CAAC;EACtC;EAEA,MAAMc,MAAMA,CAACC,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACgB,MAAM,CAACC,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACe,QAAQ,CAAC,CAACI,IAAI,CAAC,CAAC;IAC/B;IAEA,OAAON,MAAM;EACjB;EAEA,MAAMO,MAAMA,CAACD,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACkB,MAAM,CAACD,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACqB,WAAW,CAACC,IAAI,IAAI;QAC3B,IAAIA,IAAI,CAACZ,EAAE,KAAKS,IAAI,CAACT,EAAE,EAAE;UACrB,OAAOS,IAAI;QACf;QACA,OAAOG,IAAI;MACf,CAAC,CAAC;IACN;IAEA,OAAOT,MAAM;EACjB;EAEA,MAAMU,MAAMA,CAACJ,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACqB,MAAM,CAACJ,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACwB,WAAW,CAACF,IAAI,IAAIA,IAAI,CAACZ,EAAE,KAAKS,IAAI,CAACT,EAAE,CAAC;IACvD;IAEA,OAAOG,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMY,+BAA+B,GAAG5B,eAAe,CAAC6B,eAAe,CAAC;EAC3EC,SAAS,EAAE5B,mCAAmC;EAC9C6B,YAAY,EAAE;AAClB,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js","sources":["../../../../../../src/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { TeamsRepository } from \"../abstractions.js\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"../types.js\";\nimport { ListCache } from \"~/features/security/roles/shared/decorators/ListCache.js\";\n\nclass TeamsRepositoryCachingDecoratorImpl implements TeamsRepository.Interface {\n    private readonly cache = new ListCache<Team>();\n\n    constructor(private decoratee: TeamsRepository.Interface) {}\n\n    async get(params: GetTeamInput): Promise<Result<Team, TeamsRepository.Error>> {\n        // Check cache first\n        if (this.cache.hasItems()) {\n            const cachedTeam = this.cache.getItems().find(t => {\n                if (params.id && t.id === params.id) {\n                    return true;\n                }\n                if (params.slug && t.slug === params.slug) {\n                    return true;\n                }\n                return false;\n            });\n\n            if (cachedTeam) {\n                return Result.ok(cachedTeam);\n            }\n        }\n\n        // Delegate to decoratee\n        const result = await this.decoratee.get(params);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([result.value]);\n        }\n\n        return result;\n    }\n\n    async list(params: ListTeamsInput): Promise<Result<Team[], TeamsRepository.Error>> {\n        return this.decoratee.list(params);\n    }\n\n    async create(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.create(team);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([team]);\n        }\n\n        return result;\n    }\n\n    async update(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.update(team);\n\n        // Update in cache on success\n        if (result.isOk()) {\n            this.cache.updateItems(item => {\n                if (item.id === team.id) {\n                    return team;\n                }\n                return item;\n            });\n        }\n\n        return result;\n    }\n\n    async delete(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.delete(team);\n\n        // Remove from cache on success\n        if (result.isOk()) {\n            this.cache.removeItems(item => item.id === team.id);\n        }\n\n        return result;\n    }\n}\n\nexport const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({\n    decorator: TeamsRepositoryCachingDecoratorImpl,\n    dependencies: []\n});\n"],"names":["TeamsRepositoryCachingDecoratorImpl","decoratee","ListCache","params","cachedTeam","t","Result","result","team","item","TeamsRepositoryCachingDecorator","TeamsRepository"],"mappings":";;;AAKA,MAAMA;IAGF,YAAoBC,SAAoC,CAAE;aAAtCA,SAAS,GAATA;aAFH,KAAK,GAAG,IAAIC;IAE8B;IAE3D,MAAM,IAAIC,MAAoB,EAAgD;QAE1E,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI;YACvB,MAAMC,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAACC,CAAAA;gBAC1C,IAAIF,OAAO,EAAE,IAAIE,EAAE,EAAE,KAAKF,OAAO,EAAE,EAC/B,OAAO;gBAEX,IAAIA,OAAO,IAAI,IAAIE,EAAE,IAAI,KAAKF,OAAO,IAAI,EACrC,OAAO;gBAEX,OAAO;YACX;YAEA,IAAIC,YACA,OAAOE,OAAO,EAAE,CAACF;QAEzB;QAGA,MAAMG,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAACJ;QAGxC,IAAII,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAACA,OAAO,KAAK;SAAC;QAGtC,OAAOA;IACX;IAEA,MAAM,KAAKJ,MAAsB,EAAkD;QAC/E,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAACA;IAC/B;IAEA,MAAM,OAAOK,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAACC;SAAK;QAG9B,OAAOD;IACX;IAEA,MAAM,OAAOC,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,WAAW,CAACE,CAAAA;YACnB,IAAIA,KAAK,EAAE,KAAKD,KAAK,EAAE,EACnB,OAAOA;YAEX,OAAOC;QACX;QAGJ,OAAOF;IACX;IAEA,MAAM,OAAOC,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,WAAW,CAACE,CAAAA,OAAQA,KAAK,EAAE,KAAKD,KAAK,EAAE;QAGtD,OAAOD;IACX;AACJ;AAEO,MAAMG,kCAAkCC,gBAAgB,eAAe,CAAC;IAC3E,WAAWX;IACX,cAAc,EAAE;AACpB"}

package/features/security/teams/shared/errors.js

@@ -1,82 +1,74 @@
 import { BaseError } from "@webiny/feature/api";
-export class TeamStorageError extends BaseError {
-  code = "TEAM_STORAGE_ERROR";
-  constructor(error) {
-    super({
-      message: error.message
-    });
-  }
+class TeamStorageError extends BaseError {
+    constructor(error){
+        super({
+            message: error.message
+        }), this.code = "TEAM_STORAGE_ERROR";
+    }
 }
-export class TeamNotFoundError extends BaseError {
-  code = "TEAM_NOT_FOUND";
-  constructor() {
-    super({
-      message: `Team was not found!`
-    });
-  }
+class TeamNotFoundError extends BaseError {
+    constructor(){
+        super({
+            message: "Team was not found!"
+        }), this.code = "TEAM_NOT_FOUND";
+    }
 }
-export class NotAuthorizedError extends BaseError {
-  code = "NOT_AUTHORIZED";
-  constructor(data = {}) {
-    super({
-      message: data.message || "Not authorized!",
-      data
-    });
-  }
+class NotAuthorizedError extends BaseError {
+    constructor(data = {}){
+        super({
+            message: data.message || "Not authorized!",
+            data
+        }), this.code = "NOT_AUTHORIZED";
+    }
 }
-export class TeamExistsError extends BaseError {
-  code = "TEAM_EXISTS";
-  constructor(slug) {
-    super({
-      message: `Team with slug "${slug}" already exists.`,
-      data: {
-        slug
-      }
-    });
-  }
+class TeamExistsError extends BaseError {
+    constructor(slug){
+        super({
+            message: `Team with slug "${slug}" already exists.`,
+            data: {
+                slug
+            }
+        }), this.code = "TEAM_EXISTS";
+    }
 }
-export class CannotUpdatePluginTeamsError extends BaseError {
-  code = "CANNOT_UPDATE_PLUGIN_TEAMS";
-  constructor() {
-    super({
-      message: "Cannot update teams created via plugins."
-    });
-  }
+class CannotUpdatePluginTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot update teams created via plugins."
+        }), this.code = "CANNOT_UPDATE_PLUGIN_TEAMS";
+    }
 }
-export class CannotDeletePluginTeamsError extends BaseError {
-  code = "CANNOT_DELETE_PLUGIN_TEAMS";
-  constructor() {
-    super({
-      message: "Cannot delete teams created via plugins."
-    });
-  }
+class CannotDeletePluginTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot delete teams created via plugins."
+        }), this.code = "CANNOT_DELETE_PLUGIN_TEAMS";
+    }
 }
-export class CannotUpdateSystemTeamsError extends BaseError {
-  code = "CANNOT_UPDATE_SYSTEM_TEAMS";
-  constructor() {
-    super({
-      message: "Cannot update system teams."
-    });
-  }
+class CannotUpdateSystemTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot update system teams."
+        }), this.code = "CANNOT_UPDATE_SYSTEM_TEAMS";
+    }
 }
-export class CannotDeleteSystemTeamsError extends BaseError {
-  code = "CANNOT_DELETE_SYSTEM_TEAMS";
-  constructor() {
-    super({
-      message: "Cannot delete system teams."
-    });
-  }
+class CannotDeleteSystemTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot delete system teams."
+        }), this.code = "CANNOT_DELETE_SYSTEM_TEAMS";
+    }
 }
-export class TeamValidationError extends BaseError {
-  code = "TEAM_VALIDATION_ERROR";
-  constructor(message) {
-    super({
-      message,
-      data: {
-        message
-      }
-    });
-  }
+class TeamValidationError extends BaseError {
+    constructor(message){
+        super({
+            message,
+            data: {
+                message
+            }
+        }), this.code = "TEAM_VALIDATION_ERROR";
+    }
 }
+export { CannotDeletePluginTeamsError, CannotDeleteSystemTeamsError, CannotUpdatePluginTeamsError, CannotUpdateSystemTeamsError, NotAuthorizedError, TeamExistsError, TeamNotFoundError, TeamStorageError, TeamValidationError };
 
 //# sourceMappingURL=errors.js.map

package/features/security/teams/shared/errors.js.map

@@ -1 +1 @@
-{"version":3,"names":["BaseError","TeamStorageError","code","constructor","error","message","TeamNotFoundError","NotAuthorizedError","data","TeamExistsError","slug","CannotUpdatePluginTeamsError","CannotDeletePluginTeamsError","CannotUpdateSystemTeamsError","CannotDeleteSystemTeamsError","TeamValidationError"],"sources":["errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class TeamStorageError extends BaseError {\n    override readonly code = \"TEAM_STORAGE_ERROR\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class TeamNotFoundError extends BaseError {\n    override readonly code = \"TEAM_NOT_FOUND\" as const;\n\n    constructor() {\n        super({\n            message: `Team was not found!`\n        });\n    }\n}\n\ntype NotAuthorizedErrorData = {\n    message?: string;\n};\n\nexport class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {\n    override readonly code = \"NOT_AUTHORIZED\" as const;\n\n    constructor(data: NotAuthorizedErrorData = {}) {\n        super({\n            message: data.message || \"Not authorized!\",\n            data\n        });\n    }\n}\n\ntype TeamExistsErrorData = {\n    slug: string;\n};\n\nexport class TeamExistsError extends BaseError<TeamExistsErrorData> {\n    override readonly code = \"TEAM_EXISTS\" as const;\n\n    constructor(slug: string) {\n        super({\n            message: `Team with slug \"${slug}\" already exists.`,\n            data: { slug }\n        });\n    }\n}\n\nexport class CannotUpdatePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotDeletePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotUpdateSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update system teams.\"\n        });\n    }\n}\n\nexport class CannotDeleteSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete system teams.\"\n        });\n    }\n}\n\ntype TeamValidationErrorData = {\n    message: string;\n};\n\nexport class TeamValidationError extends BaseError<TeamValidationErrorData> {\n    override readonly code = \"TEAM_VALIDATION_ERROR\" as const;\n\n    constructor(message: string) {\n        super({\n            message,\n            data: { message }\n        });\n    }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ,qBAAqB;AAE/C,OAAO,MAAMC,gBAAgB,SAASD,SAAS,CAAC;EAC1BE,IAAI,GAAG,oBAAoB;EAE7CC,WAAWA,CAACC,KAAY,EAAE;IACtB,KAAK,CAAC;MACFC,OAAO,EAAED,KAAK,CAACC;IACnB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMC,iBAAiB,SAASN,SAAS,CAAC;EAC3BE,IAAI,GAAG,gBAAgB;EAEzCC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAME,kBAAkB,SAASP,SAAS,CAAyB;EACpDE,IAAI,GAAG,gBAAgB;EAEzCC,WAAWA,CAACK,IAA4B,GAAG,CAAC,CAAC,EAAE;IAC3C,KAAK,CAAC;MACFH,OAAO,EAAEG,IAAI,CAACH,OAAO,IAAI,iBAAiB;MAC1CG;IACJ,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAMC,eAAe,SAAST,SAAS,CAAsB;EAC9CE,IAAI,GAAG,aAAa;EAEtCC,WAAWA,CAACO,IAAY,EAAE;IACtB,KAAK,CAAC;MACFL,OAAO,EAAE,mBAAmBK,IAAI,mBAAmB;MACnDF,IAAI,EAAE;QAAEE;MAAK;IACjB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMC,4BAA4B,SAASX,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMO,4BAA4B,SAASZ,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMQ,4BAA4B,SAASb,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMS,4BAA4B,SAASd,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAMU,mBAAmB,SAASf,SAAS,CAA0B;EACtDE,IAAI,GAAG,uBAAuB;EAEhDC,WAAWA,CAACE,OAAe,EAAE;IACzB,KAAK,CAAC;MACFA,OAAO;MACPG,IAAI,EAAE;QAAEH;MAAQ;IACpB,CAAC,CAAC;EACN;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/teams/shared/errors.js","sources":["../../../../../src/features/security/teams/shared/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class TeamStorageError extends BaseError {\n    override readonly code = \"TEAM_STORAGE_ERROR\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class TeamNotFoundError extends BaseError {\n    override readonly code = \"TEAM_NOT_FOUND\" as const;\n\n    constructor() {\n        super({\n            message: `Team was not found!`\n        });\n    }\n}\n\ntype NotAuthorizedErrorData = {\n    message?: string;\n};\n\nexport class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {\n    override readonly code = \"NOT_AUTHORIZED\" as const;\n\n    constructor(data: NotAuthorizedErrorData = {}) {\n        super({\n            message: data.message || \"Not authorized!\",\n            data\n        });\n    }\n}\n\ntype TeamExistsErrorData = {\n    slug: string;\n};\n\nexport class TeamExistsError extends BaseError<TeamExistsErrorData> {\n    override readonly code = \"TEAM_EXISTS\" as const;\n\n    constructor(slug: string) {\n        super({\n            message: `Team with slug \"${slug}\" already exists.`,\n            data: { slug }\n        });\n    }\n}\n\nexport class CannotUpdatePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotDeletePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotUpdateSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update system teams.\"\n        });\n    }\n}\n\nexport class CannotDeleteSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete system teams.\"\n        });\n    }\n}\n\ntype TeamValidationErrorData = {\n    message: string;\n};\n\nexport class TeamValidationError extends BaseError<TeamValidationErrorData> {\n    override readonly code = \"TEAM_VALIDATION_ERROR\" as const;\n\n    constructor(message: string) {\n        super({\n            message,\n            data: { message }\n        });\n    }\n}\n"],"names":["TeamStorageError","BaseError","error","TeamNotFoundError","NotAuthorizedError","data","TeamExistsError","slug","CannotUpdatePluginTeamsError","CannotDeletePluginTeamsError","CannotUpdateSystemTeamsError","CannotDeleteSystemTeamsError","TeamValidationError","message"],"mappings":";AAEO,MAAMA,yBAAyBC;IAGlC,YAAYC,KAAY,CAAE;QACtB,KAAK,CAAC;YACF,SAASA,MAAM,OAAO;QAC1B,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMC,0BAA0BF;IAGnC,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAMO,MAAMG,2BAA2BH;IAGpC,YAAYI,OAA+B,CAAC,CAAC,CAAE;QAC3C,KAAK,CAAC;YACF,SAASA,KAAK,OAAO,IAAI;YACzBA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ;AAMO,MAAMC,wBAAwBL;IAGjC,YAAYM,IAAY,CAAE;QACtB,KAAK,CAAC;YACF,SAAS,CAAC,gBAAgB,EAAEA,KAAK,iBAAiB,CAAC;YACnD,MAAM;gBAAEA;YAAK;QACjB,SANc,IAAI,GAAG;IAOzB;AACJ;AAEO,MAAMC,qCAAqCP;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMQ,qCAAqCR;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMS,qCAAqCT;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMU,qCAAqCV;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAMO,MAAMW,4BAA4BX;IAGrC,YAAYY,OAAe,CAAE;QACzB,KAAK,CAAC;YACFA;YACA,MAAM;gBAAEA;YAAQ;QACpB,SANc,IAAI,GAAG;IAOzB;AACJ"}

package/features/security/teams/shared/types.js

@@ -1,3 +0,0 @@
-export {};
-
-//# sourceMappingURL=types.js.map

package/features/security/utils/AppPermissions.js

@@ -1,99 +1,60 @@
 const FULL_ACCESS_PERMISSION_NAME = "*";
-export class AppPermissions {
-  constructor({
-    getIdentity,
-    getPermissions,
-    fullAccessPermissionName
-  }) {
-    this.getIdentity = getIdentity;
-    this.getPermissions = getPermissions;
-    this.fullAccessPermissions = [FULL_ACCESS_PERMISSION_NAME, fullAccessPermissionName || ""].filter(Boolean);
-  }
-  async ensure(params = {}) {
-    if (await this.hasFullAccess()) {
-      return true;
+class AppPermissions {
+    constructor({ getIdentity, getPermissions, fullAccessPermissionName }){
+        this.getIdentity = getIdentity;
+        this.getPermissions = getPermissions;
+        this.fullAccessPermissions = [
+            FULL_ACCESS_PERMISSION_NAME,
+            fullAccessPermissionName || ""
+        ].filter(Boolean);
     }
-    if (params.owns) {
-      if (await this.canAccessNonOwnedRecords()) {
-        return true;
-      }
-
-      // If we got here, that means we didn't encounter a permission object
-      // that gives us the ability to access non-owned records.
-      const identity = await this.getIdentity();
-      if (identity.id === params.owns.id) {
-        return true;
-      }
-      return false;
+    async ensure(params = {}) {
+        if (await this.hasFullAccess()) return true;
+        if (params.owns) {
+            if (await this.canAccessNonOwnedRecords()) return true;
+            const identity = await this.getIdentity();
+            if (identity.id === params.owns.id) return true;
+            return false;
+        }
+        const permissions = await this.getPermissions();
+        const hasPermission = permissions.some((current)=>{
+            if (params.rwd && !this.hasRwd(current, params.rwd)) return false;
+            if (params.pw && !this.hasPw(current, params.pw)) return false;
+            return true;
+        });
+        return hasPermission;
     }
-    const permissions = await this.getPermissions();
-    const hasPermission = permissions.some(current => {
-      if (params.rwd && !this.hasRwd(current, params.rwd)) {
-        return false;
-      }
-      if (params.pw && !this.hasPw(current, params.pw)) {
-        return false;
-      }
-      return true;
-    });
-    return hasPermission;
-  }
-  async hasFullAccess() {
-    const permissions = await this.getPermissions();
-    return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));
-  }
-  async canAccessNonOwnedRecords() {
-    // First pass - check if we have full access.
-    if (await this.hasFullAccess()) {
-      return true;
+    async hasFullAccess() {
+        const permissions = await this.getPermissions();
+        return permissions.some((p)=>this.fullAccessPermissions.filter(Boolean).includes(p.name));
     }
-
-    // Second pass - if there's at least one permission that doesn't
-    // prevent us from accessing non-owned records, then we grant access.
-    const permissions = await this.getPermissions();
-    return permissions.some(p => !p.own);
-  }
-  async canAccessOnlyOwnRecords() {
-    // First pass - check if we have full access to Page Builder.
-    if (await this.hasFullAccess()) {
-      return false;
+    async canAccessNonOwnedRecords() {
+        if (await this.hasFullAccess()) return true;
+        const permissions = await this.getPermissions();
+        return permissions.some((p)=>!p.own);
     }
-
-    // Second pass - if there's at least one permission that doesn't
-    // prevent us from accessing non-owned records, then we grant access.
-    const permissions = await this.getPermissions();
-    return !permissions.some(p => !p.own);
-  }
-  hasRwd(permission, rwd) {
-    return typeof permission.rwd !== "string" || permission.rwd.includes(rwd);
-  }
-
-  // Has publishing workflow permissions?
-  hasPw(permission, pw) {
-    // `name` and `_src` properties are always present.
-    const permissionWithoutSystemProperties = this.filterOutSystemPermissionsObjectProperties(permission);
-    const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;
-    if (!isCustom) {
-      // Means it's a "full-access" permission.
-      return true;
+    async canAccessOnlyOwnRecords() {
+        if (await this.hasFullAccess()) return false;
+        const permissions = await this.getPermissions();
+        return !permissions.some((p)=>!p.own);
     }
-    if (typeof permission["pw"] !== "string") {
-      return false;
+    hasRwd(permission, rwd) {
+        return "string" != typeof permission.rwd || permission.rwd.includes(rwd);
+    }
+    hasPw(permission, pw) {
+        const permissionWithoutSystemProperties = this.filterOutSystemPermissionsObjectProperties(permission);
+        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;
+        if (!isCustom) return true;
+        if ("string" != typeof permission["pw"]) return false;
+        return permission["pw"].includes(pw);
+    }
+    filterOutSystemPermissionsObjectProperties(permission) {
+        return Object.keys(permission).reduce((acc, key)=>{
+            if ("name" !== key && "_src" !== key) acc[key] = permission[key];
+            return acc;
+        }, {});
     }
-    return permission["pw"].includes(pw);
-  }
-
-  /**
-   * Filters out base `name` and `_src` properties from the permission object.
-   */
-  filterOutSystemPermissionsObjectProperties(permission) {
-    return Object.keys(permission).reduce((acc, key) => {
-      if (key !== "name" && key !== "_src") {
-        acc[key] = permission[key];
-      }
-      return acc;
-    }, {});
-  }
 }
+export { AppPermissions };
 
 //# sourceMappingURL=AppPermissions.js.map

package/features/security/utils/AppPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["FULL_ACCESS_PERMISSION_NAME","AppPermissions","constructor","getIdentity","getPermissions","fullAccessPermissionName","fullAccessPermissions","filter","Boolean","ensure","params","hasFullAccess","owns","canAccessNonOwnedRecords","identity","id","permissions","hasPermission","some","current","rwd","hasRwd","pw","hasPw","p","includes","name","own","canAccessOnlyOwnRecords","permission","permissionWithoutSystemProperties","filterOutSystemPermissionsObjectProperties","isCustom","Object","keys","length","reduce","acc","key"],"sources":["AppPermissions.ts"],"sourcesContent":["import type { SecurityPermission, SecurityIdentity, CreatedBy } from \"~/types/security.js\";\n\nconst FULL_ACCESS_PERMISSION_NAME = \"*\";\n\nexport interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    fullAccessPermissionName?: string;\n}\n\nexport type EnsureParams = Partial<{\n    rwd: string;\n    pw: string;\n    owns: CreatedBy;\n}>;\n\nexport class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    private fullAccessPermissions: string[];\n\n    constructor({\n        getIdentity,\n        getPermissions,\n        fullAccessPermissionName\n    }: AppPermissionsParams<TPermission>) {\n        this.getIdentity = getIdentity;\n        this.getPermissions = getPermissions;\n        this.fullAccessPermissions = [\n            FULL_ACCESS_PERMISSION_NAME,\n            fullAccessPermissionName || \"\"\n        ].filter(Boolean);\n    }\n\n    async ensure(params: EnsureParams = {}): Promise<boolean> {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        if (params.owns) {\n            if (await this.canAccessNonOwnedRecords()) {\n                return true;\n            }\n\n            // If we got here, that means we didn't encounter a permission object\n            // that gives us the ability to access non-owned records.\n            const identity = await this.getIdentity();\n            if (identity.id === params.owns.id) {\n                return true;\n            }\n\n            return false;\n        }\n\n        const permissions = await this.getPermissions();\n        const hasPermission = permissions.some(current => {\n            if (params.rwd && !this.hasRwd(current, params.rwd)) {\n                return false;\n            }\n\n            if (params.pw && !this.hasPw(current, params.pw)) {\n                return false;\n            }\n\n            return true;\n        });\n\n        return hasPermission;\n    }\n\n    async hasFullAccess() {\n        const permissions = await this.getPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    async canAccessNonOwnedRecords() {\n        // First pass - check if we have full access.\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return permissions.some(p => !p.own);\n    }\n\n    async canAccessOnlyOwnRecords() {\n        // First pass - check if we have full access to Page Builder.\n        if (await this.hasFullAccess()) {\n            return false;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return !permissions.some(p => !p.own);\n    }\n\n    private hasRwd(permission: TPermission, rwd: string) {\n        return typeof permission.rwd !== \"string\" || permission.rwd.includes(rwd);\n    }\n\n    // Has publishing workflow permissions?\n    private hasPw(permission: TPermission, pw: string) {\n        // `name` and `_src` properties are always present.\n        const permissionWithoutSystemProperties =\n            this.filterOutSystemPermissionsObjectProperties(permission);\n\n        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;\n\n        if (!isCustom) {\n            // Means it's a \"full-access\" permission.\n            return true;\n        }\n\n        if (typeof permission[\"pw\"] !== \"string\") {\n            return false;\n        }\n\n        return permission[\"pw\"].includes(pw);\n    }\n\n    /**\n     * Filters out base `name` and `_src` properties from the permission object.\n     */\n    private filterOutSystemPermissionsObjectProperties(permission: SecurityPermission) {\n        return Object.keys(permission).reduce(\n            (acc, key) => {\n                if (key !== \"name\" && key !== \"_src\") {\n                    acc[key] = permission[key];\n                }\n                return acc;\n            },\n            {} as Record<string, any>\n        );\n    }\n}\n"],"mappings":"AAEA,MAAMA,2BAA2B,GAAG,GAAG;AAcvC,OAAO,MAAMC,cAAc,CAA8D;EAKrFC,WAAWA,CAAC;IACRC,WAAW;IACXC,cAAc;IACdC;EAC+B,CAAC,EAAE;IAClC,IAAI,CAACF,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,cAAc,GAAGA,cAAc;IACpC,IAAI,CAACE,qBAAqB,GAAG,CACzBN,2BAA2B,EAC3BK,wBAAwB,IAAI,EAAE,CACjC,CAACE,MAAM,CAACC,OAAO,CAAC;EACrB;EAEA,MAAMC,MAAMA,CAACC,MAAoB,GAAG,CAAC,CAAC,EAAoB;IACtD,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,IAAID,MAAM,CAACE,IAAI,EAAE;MACb,IAAI,MAAM,IAAI,CAACC,wBAAwB,CAAC,CAAC,EAAE;QACvC,OAAO,IAAI;MACf;;MAEA;MACA;MACA,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAACX,WAAW,CAAC,CAAC;MACzC,IAAIW,QAAQ,CAACC,EAAE,KAAKL,MAAM,CAACE,IAAI,CAACG,EAAE,EAAE;QAChC,OAAO,IAAI;MACf;MAEA,OAAO,KAAK;IAChB;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,MAAMa,aAAa,GAAGD,WAAW,CAACE,IAAI,CAACC,OAAO,IAAI;MAC9C,IAAIT,MAAM,CAACU,GAAG,IAAI,CAAC,IAAI,CAACC,MAAM,CAACF,OAAO,EAAET,MAAM,CAACU,GAAG,CAAC,EAAE;QACjD,OAAO,KAAK;MAChB;MAEA,IAAIV,MAAM,CAACY,EAAE,IAAI,CAAC,IAAI,CAACC,KAAK,CAACJ,OAAO,EAAET,MAAM,CAACY,EAAE,CAAC,EAAE;QAC9C,OAAO,KAAK;MAChB;MAEA,OAAO,IAAI;IACf,CAAC,CAAC;IAEF,OAAOL,aAAa;EACxB;EAEA,MAAMN,aAAaA,CAAA,EAAG;IAClB,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAOY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,IAAI,CAAClB,qBAAqB,CAACC,MAAM,CAACC,OAAO,CAAC,CAACiB,QAAQ,CAACD,CAAC,CAACE,IAAI,CAAC,CAAC;EAC7F;EAEA,MAAMb,wBAAwBA,CAAA,EAAG;IAC7B;IACA,IAAI,MAAM,IAAI,CAACF,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;;IAEA;IACA;IACA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAOY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,CAACA,CAAC,CAACG,GAAG,CAAC;EACxC;EAEA,MAAMC,uBAAuBA,CAAA,EAAG;IAC5B;IACA,IAAI,MAAM,IAAI,CAACjB,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAO,CAACY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,CAACA,CAAC,CAACG,GAAG,CAAC;EACzC;EAEQN,MAAMA,CAACQ,UAAuB,EAAET,GAAW,EAAE;IACjD,OAAO,OAAOS,UAAU,CAACT,GAAG,KAAK,QAAQ,IAAIS,UAAU,CAACT,GAAG,CAACK,QAAQ,CAACL,GAAG,CAAC;EAC7E;;EAEA;EACQG,KAAKA,CAACM,UAAuB,EAAEP,EAAU,EAAE;IAC/C;IACA,MAAMQ,iCAAiC,GACnC,IAAI,CAACC,0CAA0C,CAACF,UAAU,CAAC;IAE/D,MAAMG,QAAQ,GAAGC,MAAM,CAACC,IAAI,CAACJ,iCAAiC,CAAC,CAACK,MAAM,GAAG,CAAC;IAE1E,IAAI,CAACH,QAAQ,EAAE;MACX;MACA,OAAO,IAAI;IACf;IAEA,IAAI,OAAOH,UAAU,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE;MACtC,OAAO,KAAK;IAChB;IAEA,OAAOA,UAAU,CAAC,IAAI,CAAC,CAACJ,QAAQ,CAACH,EAAE,CAAC;EACxC;;EAEA;AACJ;AACA;EACYS,0CAA0CA,CAACF,UAA8B,EAAE;IAC/E,OAAOI,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACO,MAAM,CACjC,CAACC,GAAG,EAAEC,GAAG,KAAK;MACV,IAAIA,GAAG,KAAK,MAAM,IAAIA,GAAG,KAAK,MAAM,EAAE;QAClCD,GAAG,CAACC,GAAG,CAAC,GAAGT,UAAU,CAACS,GAAG,CAAC;MAC9B;MACA,OAAOD,GAAG;IACd,CAAC,EACD,CAAC,CACL,CAAC;EACL;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/utils/AppPermissions.js","sources":["../../../../src/features/security/utils/AppPermissions.ts"],"sourcesContent":["import type { SecurityPermission, SecurityIdentity, CreatedBy } from \"~/types/security.js\";\n\nconst FULL_ACCESS_PERMISSION_NAME = \"*\";\n\nexport interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    fullAccessPermissionName?: string;\n}\n\nexport type EnsureParams = Partial<{\n    rwd: string;\n    pw: string;\n    owns: CreatedBy;\n}>;\n\nexport class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    private fullAccessPermissions: string[];\n\n    constructor({\n        getIdentity,\n        getPermissions,\n        fullAccessPermissionName\n    }: AppPermissionsParams<TPermission>) {\n        this.getIdentity = getIdentity;\n        this.getPermissions = getPermissions;\n        this.fullAccessPermissions = [\n            FULL_ACCESS_PERMISSION_NAME,\n            fullAccessPermissionName || \"\"\n        ].filter(Boolean);\n    }\n\n    async ensure(params: EnsureParams = {}): Promise<boolean> {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        if (params.owns) {\n            if (await this.canAccessNonOwnedRecords()) {\n                return true;\n            }\n\n            // If we got here, that means we didn't encounter a permission object\n            // that gives us the ability to access non-owned records.\n            const identity = await this.getIdentity();\n            if (identity.id === params.owns.id) {\n                return true;\n            }\n\n            return false;\n        }\n\n        const permissions = await this.getPermissions();\n        const hasPermission = permissions.some(current => {\n            if (params.rwd && !this.hasRwd(current, params.rwd)) {\n                return false;\n            }\n\n            if (params.pw && !this.hasPw(current, params.pw)) {\n                return false;\n            }\n\n            return true;\n        });\n\n        return hasPermission;\n    }\n\n    async hasFullAccess() {\n        const permissions = await this.getPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    async canAccessNonOwnedRecords() {\n        // First pass - check if we have full access.\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return permissions.some(p => !p.own);\n    }\n\n    async canAccessOnlyOwnRecords() {\n        // First pass - check if we have full access to Page Builder.\n        if (await this.hasFullAccess()) {\n            return false;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return !permissions.some(p => !p.own);\n    }\n\n    private hasRwd(permission: TPermission, rwd: string) {\n        return typeof permission.rwd !== \"string\" || permission.rwd.includes(rwd);\n    }\n\n    // Has publishing workflow permissions?\n    private hasPw(permission: TPermission, pw: string) {\n        // `name` and `_src` properties are always present.\n        const permissionWithoutSystemProperties =\n            this.filterOutSystemPermissionsObjectProperties(permission);\n\n        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;\n\n        if (!isCustom) {\n            // Means it's a \"full-access\" permission.\n            return true;\n        }\n\n        if (typeof permission[\"pw\"] !== \"string\") {\n            return false;\n        }\n\n        return permission[\"pw\"].includes(pw);\n    }\n\n    /**\n     * Filters out base `name` and `_src` properties from the permission object.\n     */\n    private filterOutSystemPermissionsObjectProperties(permission: SecurityPermission) {\n        return Object.keys(permission).reduce(\n            (acc, key) => {\n                if (key !== \"name\" && key !== \"_src\") {\n                    acc[key] = permission[key];\n                }\n                return acc;\n            },\n            {} as Record<string, any>\n        );\n    }\n}\n"],"names":["FULL_ACCESS_PERMISSION_NAME","AppPermissions","getIdentity","getPermissions","fullAccessPermissionName","Boolean","params","identity","permissions","hasPermission","current","p","permission","rwd","pw","permissionWithoutSystemProperties","isCustom","Object","acc","key"],"mappings":"AAEA,MAAMA,8BAA8B;AAc7B,MAAMC;IAKT,YAAY,EACRC,WAAW,EACXC,cAAc,EACdC,wBAAwB,EACQ,CAAE;QAClC,IAAI,CAAC,WAAW,GAAGF;QACnB,IAAI,CAAC,cAAc,GAAGC;QACtB,IAAI,CAAC,qBAAqB,GAAG;YACzBH;YACAI,4BAA4B;SAC/B,CAAC,MAAM,CAACC;IACb;IAEA,MAAM,OAAOC,SAAuB,CAAC,CAAC,EAAoB;QACtD,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAGX,IAAIA,OAAO,IAAI,EAAE;YACb,IAAI,MAAM,IAAI,CAAC,wBAAwB,IACnC,OAAO;YAKX,MAAMC,WAAW,MAAM,IAAI,CAAC,WAAW;YACvC,IAAIA,SAAS,EAAE,KAAKD,OAAO,IAAI,CAAC,EAAE,EAC9B,OAAO;YAGX,OAAO;QACX;QAEA,MAAME,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,MAAMC,gBAAgBD,YAAY,IAAI,CAACE,CAAAA;YACnC,IAAIJ,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAACI,SAASJ,OAAO,GAAG,GAC9C,OAAO;YAGX,IAAIA,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAACI,SAASJ,OAAO,EAAE,GAC3C,OAAO;YAGX,OAAO;QACX;QAEA,OAAOG;IACX;IAEA,MAAM,gBAAgB;QAClB,MAAMD,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAOA,YAAY,IAAI,CAACG,CAAAA,IAAK,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAACN,SAAS,QAAQ,CAACM,EAAE,IAAI;IAC3F;IAEA,MAAM,2BAA2B;QAE7B,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAKX,MAAMH,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAOA,YAAY,IAAI,CAACG,CAAAA,IAAK,CAACA,EAAE,GAAG;IACvC;IAEA,MAAM,0BAA0B;QAE5B,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAKX,MAAMH,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAO,CAACA,YAAY,IAAI,CAACG,CAAAA,IAAK,CAACA,EAAE,GAAG;IACxC;IAEQ,OAAOC,UAAuB,EAAEC,GAAW,EAAE;QACjD,OAAO,AAA0B,YAA1B,OAAOD,WAAW,GAAG,IAAiBA,WAAW,GAAG,CAAC,QAAQ,CAACC;IACzE;IAGQ,MAAMD,UAAuB,EAAEE,EAAU,EAAE;QAE/C,MAAMC,oCACF,IAAI,CAAC,0CAA0C,CAACH;QAEpD,MAAMI,WAAWC,OAAO,IAAI,CAACF,mCAAmC,MAAM,GAAG;QAEzE,IAAI,CAACC,UAED,OAAO;QAGX,IAAI,AAA4B,YAA5B,OAAOJ,UAAU,CAAC,KAAK,EACvB,OAAO;QAGX,OAAOA,UAAU,CAAC,KAAK,CAAC,QAAQ,CAACE;IACrC;IAKQ,2CAA2CF,UAA8B,EAAE;QAC/E,OAAOK,OAAO,IAAI,CAACL,YAAY,MAAM,CACjC,CAACM,KAAKC;YACF,IAAIA,AAAQ,WAARA,OAAkBA,AAAQ,WAARA,KAClBD,GAAG,CAACC,IAAI,GAAGP,UAAU,CAACO,IAAI;YAE9B,OAAOD;QACX,GACA,CAAC;IAET;AACJ"}

package/features/security/utils/IdentityValue.js

@@ -1,27 +1,24 @@
-export class IdentityValue {
-  constructor(value) {
-    this.value = value;
-  }
-  static create(identity) {
-    return new IdentityValue(identity);
-  }
-  getValue() {
-    if (!this.value) {
-      return null;
+class IdentityValue {
+    constructor(value){
+        this.value = value;
     }
-    return {
-      id: this.value.id,
-      displayName: this.value.displayName,
-      type: this.value.type
-    };
-  }
-  getValueOrFallback(fallback) {
-    const value = this.getValue();
-    if (value) {
-      return value;
+    static create(identity) {
+        return new IdentityValue(identity);
+    }
+    getValue() {
+        if (!this.value) return null;
+        return {
+            id: this.value.id,
+            displayName: this.value.displayName,
+            type: this.value.type
+        };
+    }
+    getValueOrFallback(fallback) {
+        const value = this.getValue();
+        if (value) return value;
+        return IdentityValue.create(fallback).getValue();
     }
-    return IdentityValue.create(fallback).getValue();
-  }
 }
+export { IdentityValue };
 
 //# sourceMappingURL=IdentityValue.js.map

package/features/security/utils/IdentityValue.js.map

@@ -1 +1 @@
-{"version":3,"names":["IdentityValue","constructor","value","create","identity","getValue","id","displayName","type","getValueOrFallback","fallback"],"sources":["IdentityValue.ts"],"sourcesContent":["import type { SecurityIdentity } from \"~/types/security.js\";\n\ntype IdentityInput = SecurityIdentity | null | undefined;\n\nexport class IdentityValue {\n    private readonly value: IdentityInput;\n\n    private constructor(value: IdentityInput) {\n        this.value = value;\n    }\n\n    static create(identity: IdentityInput) {\n        return new IdentityValue(identity);\n    }\n\n    getValue() {\n        if (!this.value) {\n            return null;\n        }\n\n        return {\n            id: this.value.id,\n            displayName: this.value.displayName,\n            type: this.value.type\n        };\n    }\n\n    getValueOrFallback(fallback: IdentityInput) {\n        const value = this.getValue();\n\n        if (value) {\n            return value;\n        }\n\n        return IdentityValue.create(fallback).getValue();\n    }\n}\n"],"mappings":"AAIA,OAAO,MAAMA,aAAa,CAAC;EAGfC,WAAWA,CAACC,KAAoB,EAAE;IACtC,IAAI,CAACA,KAAK,GAAGA,KAAK;EACtB;EAEA,OAAOC,MAAMA,CAACC,QAAuB,EAAE;IACnC,OAAO,IAAIJ,aAAa,CAACI,QAAQ,CAAC;EACtC;EAEAC,QAAQA,CAAA,EAAG;IACP,IAAI,CAAC,IAAI,CAACH,KAAK,EAAE;MACb,OAAO,IAAI;IACf;IAEA,OAAO;MACHI,EAAE,EAAE,IAAI,CAACJ,KAAK,CAACI,EAAE;MACjBC,WAAW,EAAE,IAAI,CAACL,KAAK,CAACK,WAAW;MACnCC,IAAI,EAAE,IAAI,CAACN,KAAK,CAACM;IACrB,CAAC;EACL;EAEAC,kBAAkBA,CAACC,QAAuB,EAAE;IACxC,MAAMR,KAAK,GAAG,IAAI,CAACG,QAAQ,CAAC,CAAC;IAE7B,IAAIH,KAAK,EAAE;MACP,OAAOA,KAAK;IAChB;IAEA,OAAOF,aAAa,CAACG,MAAM,CAACO,QAAQ,CAAC,CAACL,QAAQ,CAAC,CAAC;EACpD;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/utils/IdentityValue.js","sources":["../../../../src/features/security/utils/IdentityValue.ts"],"sourcesContent":["import type { SecurityIdentity } from \"~/types/security.js\";\n\ntype IdentityInput = SecurityIdentity | null | undefined;\n\nexport class IdentityValue {\n    private readonly value: IdentityInput;\n\n    private constructor(value: IdentityInput) {\n        this.value = value;\n    }\n\n    static create(identity: IdentityInput) {\n        return new IdentityValue(identity);\n    }\n\n    getValue() {\n        if (!this.value) {\n            return null;\n        }\n\n        return {\n            id: this.value.id,\n            displayName: this.value.displayName,\n            type: this.value.type\n        };\n    }\n\n    getValueOrFallback(fallback: IdentityInput) {\n        const value = this.getValue();\n\n        if (value) {\n            return value;\n        }\n\n        return IdentityValue.create(fallback).getValue();\n    }\n}\n"],"names":["IdentityValue","value","identity","fallback"],"mappings":"AAIO,MAAMA;IAGT,YAAoBC,KAAoB,CAAE;QACtC,IAAI,CAAC,KAAK,GAAGA;IACjB;IAEA,OAAO,OAAOC,QAAuB,EAAE;QACnC,OAAO,IAAIF,cAAcE;IAC7B;IAEA,WAAW;QACP,IAAI,CAAC,IAAI,CAAC,KAAK,EACX,OAAO;QAGX,OAAO;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE;YACjB,aAAa,IAAI,CAAC,KAAK,CAAC,WAAW;YACnC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI;QACzB;IACJ;IAEA,mBAAmBC,QAAuB,EAAE;QACxC,MAAMF,QAAQ,IAAI,CAAC,QAAQ;QAE3B,IAAIA,OACA,OAAOA;QAGX,OAAOD,cAAc,MAAM,CAACG,UAAU,QAAQ;IAClD;AACJ"}