@webiny/api-headless-cms 0.0.0-mt-3 → 0.0.0-unstable.3386f66516

package/plugins/graphql.js

@@ -1,79 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createGraphQLPlugin = void 0;
-
-var _merge = _interopRequireDefault(require("lodash/merge"));
-
-var _system = _interopRequireDefault(require("./graphql/system"));
-
-const emptyResolver = () => ({});
-
-const createGraphQLPlugin = () => ({
-  name: "graphql-schema-headless",
-  type: "graphql-schema",
-  schema: {
-    typeDefs:
-    /* GraphQL */
-    `
-            type CmsError {
-                code: String
-                message: String
-                data: JSON
-            }
-
-            type CmsCursors {
-                next: String
-                previous: String
-            }
-
-            type CmsListMeta {
-                cursor: String
-                hasMoreItems: Boolean
-                totalCount: Int
-            }
-
-            type CmsDeleteResponse {
-                data: Boolean
-                error: CmsError
-            }
-
-            type CmsBooleanResponse {
-                data: Boolean
-                error: CmsError
-            }
-
-            extend type Query {
-                cms: CmsQuery
-            }
-
-            extend type Mutation {
-                cms: CmsMutation
-            }
-
-            type CmsQuery {
-                _empty: String
-            }
-
-            type CmsMutation {
-                _empty: String
-            }
-
-            ${_system.default.typeDefs}
-        `,
-    resolvers: (0, _merge.default)({
-      Query: {
-        cms: emptyResolver
-      },
-      Mutation: {
-        cms: emptyResolver
-      }
-    }, _system.default.resolvers)
-  }
-});
-
-exports.createGraphQLPlugin = createGraphQLPlugin;

package/plugins/upgrades/index.d.ts

@@ -1,2 +0,0 @@
-declare const _default: () => import("@webiny/api-upgrade").UpgradePlugin<import("../../types").CmsContext>[];
-export default _default;

package/plugins/upgrades/index.js

@@ -1,14 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-
-var _v = _interopRequireDefault(require("./v5.5.0"));
-
-var _default = () => [_v.default];
-
-exports.default = _default;

package/plugins/upgrades/v5.5.0/helpers.d.ts

@@ -1,6 +0,0 @@
-declare type BasicPermission = {
-    name: string;
-    [key: string]: any;
-};
-export declare const isCmsContentPermission: (permission: BasicPermission) => boolean;
-export {};

package/plugins/upgrades/v5.5.0/helpers.js

@@ -1,10 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.isCmsContentPermission = void 0;
-
-const isCmsContentPermission = permission => permission.name.includes("cms.") && !permission.name.includes("cms.endpoint.");
-
-exports.isCmsContentPermission = isCmsContentPermission;

package/plugins/upgrades/v5.5.0/index.d.ts

@@ -1,4 +0,0 @@
-import { UpgradePlugin } from "@webiny/api-upgrade/types";
-import { CmsContext } from "../../../types";
-declare const plugin: UpgradePlugin<CmsContext>;
-export default plugin;

package/plugins/upgrades/v5.5.0/index.js

@@ -1,129 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-
-var _error = _interopRequireDefault(require("@webiny/error"));
-
-var _migrateCMSPermissions = require("../../../migrateCMSPermissions");
-
-var _helpers = require("./helpers");
-
-const plugin = {
-  name: "api-upgrade-cms-5.5.0",
-  type: "api-upgrade",
-  app: "headless-cms",
-  version: "5.5.0",
-
-  async apply(context) {
-    console.log("Started CMS permissions migration."); // Migrate "Groups"
-
-    try {
-      const {
-        security,
-        tenancy,
-        cms
-      } = context;
-      const tenant = tenancy.getCurrentTenant(); // Check if there is any "SecurityGroup" that contains "cms" permissions.
-      // @ts-ignore Because we don't need a package dependency; this is a one-off operation.
-
-      const securityGroups = await security.groups.listGroups(tenant);
-      const securityGroupsWithCmsPermission = securityGroups.filter(group => group.permissions.some(_helpers.isCmsContentPermission));
-      const exists = securityGroupsWithCmsPermission.length > 0;
-
-      if (!exists) {
-        console.log("No Security groups with CMS permissions exists.");
-        return;
-      } // For each such group, migrate permissions.
-
-
-      for (let i = 0; i < securityGroupsWithCmsPermission.length; i++) {
-        const securityGroup = securityGroupsWithCmsPermission[i];
-        console.log(`Updating permission for group: ${securityGroup.slug}`); // Filter CMS content permissions.
-
-        const CmsContentPermissions = securityGroup.permissions.filter(_helpers.isCmsContentPermission);
-        const restPermissions = securityGroup.permissions.filter(permission => !(0, _helpers.isCmsContentPermission)(permission));
-
-        if (CmsContentPermissions.length === 0) {
-          console.log("Skipping...");
-          continue;
-        } // Migrate CMS permissions
-
-
-        const newCMSContentPermissions = await (0, _migrateCMSPermissions.migrateCMSPermissions)(CmsContentPermissions, cms.getModel);
-        const newPermissions = [...restPermissions, ...newCMSContentPermissions];
-        console.log(`Saving new permissions for group: ${securityGroup.slug}`);
-        console.log("newPermissions: ", JSON.stringify(newPermissions, null, 2)); // Save group
-        // @ts-ignore
-
-        await security.groups.updateGroup(tenant, securityGroup.slug, {
-          permissions: newPermissions
-        });
-      } // Indicate completion
-
-
-      console.log("Finish CMS permissions migration for [Security groups].");
-    } catch (e) {
-      console.log(e);
-      throw new _error.default("[Security groups] CMS permissions migration failed!");
-    } // Migrate "API Keys"
-
-
-    try {
-      const {
-        security,
-        cms
-      } = context; // Check if there is any "APIKey" that contains "cms" permissions.
-      // @ts-ignore
-
-      const ApiKeys = await security.apiKeys.listApiKeys();
-      const ApiKeysWithCmsPermission = ApiKeys.filter(key => key.permissions.some(_helpers.isCmsContentPermission));
-      const exists = ApiKeysWithCmsPermission.length > 0;
-
-      if (!exists) {
-        console.log("No API keys with CMS permissions exists.");
-        return;
-      } // For each such API key, migrate permissions.
-
-
-      for (let i = 0; i < ApiKeysWithCmsPermission.length; i++) {
-        const apiKey = ApiKeysWithCmsPermission[i];
-        console.log(`Updating permission for API key: ${apiKey.name}`); // Filter CMS content permissions.
-
-        const CmsContentPermissions = apiKey.permissions.filter(_helpers.isCmsContentPermission);
-        const restPermissions = apiKey.permissions.filter(permission => !(0, _helpers.isCmsContentPermission)(permission));
-
-        if (CmsContentPermissions.length === 0) {
-          console.log("Skipping...");
-          continue;
-        } // Migrate CMS permissions.
-
-
-        const newCMSContentPermissions = await (0, _migrateCMSPermissions.migrateCMSPermissions)(CmsContentPermissions, cms.getModel);
-        const newPermissions = [...restPermissions, ...newCMSContentPermissions];
-        console.log(`Saving new permissions for API key: ${apiKey.name}`);
-        console.log("newPermissions: ", JSON.stringify(newPermissions, null, 2)); // Save API key
-        // @ts-ignore
-
-        await security.apiKeys.updateApiKey(apiKey.id, {
-          name: apiKey.name,
-          description: apiKey.description,
-          permissions: newPermissions
-        });
-      } // Indicate completion
-
-
-      console.log("Finish CMS permissions migration for API keys.");
-    } catch (e) {
-      console.log(e);
-      throw new _error.default("[API keys] CMS permissions migration failed!");
-    }
-  }
-
-};
-var _default = plugin;
-exports.default = _default;

package/transformers.d.ts

@@ -1,2 +0,0 @@
-import { entryFromStorageTransform, entryToStorageTransform, entryFieldFromStorageTransform } from "./content/plugins/utils/entryStorage";
-export { entryToStorageTransform, entryFieldFromStorageTransform, entryFromStorageTransform };

package/transformers.js

@@ -1,25 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "entryFieldFromStorageTransform", {
-  enumerable: true,
-  get: function () {
-    return _entryStorage.entryFieldFromStorageTransform;
-  }
-});
-Object.defineProperty(exports, "entryFromStorageTransform", {
-  enumerable: true,
-  get: function () {
-    return _entryStorage.entryFromStorageTransform;
-  }
-});
-Object.defineProperty(exports, "entryToStorageTransform", {
-  enumerable: true,
-  get: function () {
-    return _entryStorage.entryToStorageTransform;
-  }
-});
-
-var _entryStorage = require("./content/plugins/utils/entryStorage");

package/utils.d.ts

@@ -1,25 +0,0 @@
-import { SecurityPermission } from "@webiny/api-security/types";
-import { CmsModel, CmsContext, CreatedBy, CmsGroupPermission, CmsGroup } from "./types";
-export declare const hasRwd: (permission: any, rwd: any) => any;
-export declare const hasPw: (permission: any, pw: any) => any;
-export declare const checkPermissions: <TPermission extends SecurityPermission = SecurityPermission>(context: CmsContext, name: string, check?: {
-    rwd?: string;
-    pw?: string;
-}) => Promise<TPermission>;
-export declare const checkOwnership: (context: CmsContext, permission: SecurityPermission, record: {
-    createdBy?: CreatedBy;
-    ownedBy?: CreatedBy;
-}) => void;
-export declare const validateOwnership: (context: CmsContext, permission: SecurityPermission, record: {
-    createdBy?: CreatedBy;
-    ownedBy?: CreatedBy;
-}) => boolean;
-/**
- * model access is checking for both specific model or group access
- * if permission has specific models set as access pattern then groups will not matter (although both can be set)
- */
-export declare const checkModelAccess: (context: CmsContext, model: CmsModel) => Promise<void>;
-export declare const validateModelAccess: (context: CmsContext, model: CmsModel) => Promise<boolean>;
-export declare const validateGroupAccess: (context: CmsContext, permission: CmsGroupPermission, group: CmsGroup) => boolean;
-export declare const toSlug: (text: any) => string;
-export declare const filterAsync: <T = Record<string, any>>(items: T[], predicate: (T: any) => Promise<boolean>) => Promise<T[]>;

package/utils.js

@@ -1,251 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.validateOwnership = exports.validateModelAccess = exports.validateGroupAccess = exports.toSlug = exports.hasRwd = exports.hasPw = exports.filterAsync = exports.checkPermissions = exports.checkOwnership = exports.checkModelAccess = void 0;
-
-var _slugify = _interopRequireDefault(require("slugify"));
-
-var _apiSecurity = require("@webiny/api-security");
-
-const hasRwd = (permission, rwd) => {
-  if (typeof permission.rwd !== "string") {
-    return true;
-  }
-
-  return permission.rwd.includes(rwd);
-};
-
-exports.hasRwd = hasRwd;
-
-const hasPw = (permission, pw) => {
-  const isCustom = Object.keys(permission).length > 1; // "name" key is always present
-
-  if (!isCustom) {
-    // Means it's a "full-access" permission.
-    return true;
-  }
-
-  if (typeof permission.pw !== "string") {
-    return false;
-  }
-
-  return permission.pw.includes(pw);
-};
-
-exports.hasPw = hasPw;
-const PW = {
-  r: "request review",
-  c: "request change",
-  p: "publish",
-  u: "unpublish"
-};
-const RWD = {
-  r: "read",
-  w: "write",
-  d: "delete"
-};
-
-const checkPermissions = async (context, name, check) => {
-  // Check if user is allowed to edit content in current language
-  const contentPermission = await context.security.getPermission("content.i18n");
-
-  if (!contentPermission) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: "Missing access to content in any locale."
-      }
-    });
-  } // We need to check this manually as CMS locale comes from the URL and not the default i18n app.
-
-
-  const code = context.cms.getLocale().code; // IMPORTANT: If we have a `contentPermission`, and `locales` key is NOT SET - it means the user has access to all locales.
-  // However, if the the `locales` IS SET - check that it contains the required locale.
-
-  if (Array.isArray(contentPermission.locales) && !contentPermission.locales.includes(code)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to access content in "${code}."`
-      }
-    });
-  }
-
-  const permission = await context.security.getPermission(name);
-
-  if (!permission) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Missing permission "${name}".`
-      }
-    });
-  }
-
-  if (!check) {
-    return permission;
-  }
-
-  if (check.rwd && !hasRwd(permission, check.rwd)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to perform "${RWD[check.rwd]}" on "${name}".`
-      }
-    });
-  } // r = request review
-  // c = request change
-  // p = publish
-  // u = unpublish
-
-
-  if (check.pw && !hasPw(permission, check.pw)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to perform "${PW[check.pw]}" on "${name}".`
-      }
-    });
-  }
-
-  return permission;
-};
-
-exports.checkPermissions = checkPermissions;
-
-const checkOwnership = (context, permission, record) => {
-  if (!permission.own) {
-    return;
-  }
-
-  const identity = context.security.getIdentity();
-  const owner = identity && record["ownedBy"] && record["ownedBy"].id === identity.id;
-  const creator = identity && record["createdBy"] && record["createdBy"].id === identity.id;
-
-  if (!owner && !creator) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `You are not the owner of the record.`
-      }
-    });
-  }
-};
-
-exports.checkOwnership = checkOwnership;
-
-const validateOwnership = (context, permission, record) => {
-  try {
-    checkOwnership(context, permission, record);
-    return true;
-  } catch {
-    return false;
-  }
-};
-/**
- * model access is checking for both specific model or group access
- * if permission has specific models set as access pattern then groups will not matter (although both can be set)
- */
-
-
-exports.validateOwnership = validateOwnership;
-
-const checkModelAccess = async (context, model) => {
-  if (await validateModelAccess(context, model)) {
-    return;
-  }
-
-  throw new _apiSecurity.NotAuthorizedError({
-    data: {
-      reason: `Not allowed to access model "${model.modelId}".`
-    }
-  });
-};
-
-exports.checkModelAccess = checkModelAccess;
-
-const validateModelAccess = async (context, model) => {
-  const modelGroupPermission = await checkPermissions(context, "cms.contentModelGroup", {
-    rwd: "r"
-  });
-  const {
-    groups
-  } = modelGroupPermission;
-  const modelPermission = await checkPermissions(context, "cms.contentModel", {
-    rwd: "r"
-  });
-  const {
-    models
-  } = modelPermission; // when no models or groups defined on permission
-  // it means user has access to everything
-
-  if (!models && !groups) {
-    return true;
-  }
-
-  const locale = context.cms.getLocale().code; // Check whether the model is question belongs to "content model groups" for which user has permission.
-
-  if (groups) {
-    if (Array.isArray(groups[locale]) === false || groups[locale].includes(model.group.id) === false) {
-      return false;
-    }
-  } // Check whether the model is question belongs to "content models" for which user has permission.
-
-
-  if (models) {
-    if (Array.isArray(models[locale]) === false || models[locale].includes(model.modelId) === false) {
-      return false;
-    }
-  }
-
-  return true;
-};
-
-exports.validateModelAccess = validateModelAccess;
-
-const validateGroupAccess = (context, permission, group) => {
-  const {
-    groups
-  } = permission; // when no groups defined on permission
-  // it means user has access to everything
-
-  if (!groups) {
-    return true;
-  }
-
-  const locale = context.cms.getLocale().code; // when there is no locale in groups, it means that no access was given
-  // this happens when access control was set but no models or groups were added
-
-  if (Array.isArray(groups[locale]) === false || groups[locale].includes(group.id) === false) {
-    return false;
-  }
-
-  return true;
-};
-
-exports.validateGroupAccess = validateGroupAccess;
-
-const toSlug = text => {
-  return (0, _slugify.default)(text, {
-    replacement: "-",
-    lower: true,
-    remove: /[*#\?<>_\{\}\[\]+~.()'"!:;@]/g
-  });
-};
-
-exports.toSlug = toSlug;
-
-const filterAsync = async (items, predicate) => {
-  const filteredItems = [];
-
-  for (let i = 0; i < items.length; i++) {
-    const item = items[i];
-    const valid = await predicate(item);
-
-    if (valid) {
-      filteredItems.push(item);
-    }
-  }
-
-  return filteredItems;
-};
-
-exports.filterAsync = filterAsync;