@webiny/api-headless-cms 0.0.0-unstable.99666aeb00 → 0.0.0-unstable.9bd236cf5e

package/utils/permissions/ModelsPermissions.js

@@ -1,91 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.ModelsPermissions = void 0;
-var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _apiSecurity = require("@webiny/api-security");
-class ModelsPermissions extends _apiSecurity.AppPermissions {
-  constructor(params) {
-    super(params);
-    (0, _defineProperty2.default)(this, "modelGroupsPermissions", void 0);
-    this.modelGroupsPermissions = params.modelGroupsPermissions;
-  }
-  async canAccessModel({
-    model,
-    locale
-  }) {
-    if (await this.hasFullAccess()) {
-      return true;
-    }
-    const modelGroupsPermissions = this.modelGroupsPermissions;
-
-    // eslint-disable-next-line
-    const modelsPermissions = this;
-    const canReadGroups = await modelGroupsPermissions.ensure({
-      rwd: "r"
-    }, {
-      throw: false
-    });
-    if (!canReadGroups) {
-      return false;
-    }
-    const canReadModels = await modelsPermissions.ensure({
-      rwd: "r"
-    }, {
-      throw: false
-    });
-    if (!canReadModels) {
-      return false;
-    }
-    const modelGroupsPermissionsList = await modelGroupsPermissions.getPermissions();
-    const modelsPermissionsList = await this.getPermissions();
-    for (let i = 0; i < modelGroupsPermissionsList.length; i++) {
-      const modelGroupPermission = modelGroupsPermissionsList[i];
-      const {
-        groups
-      } = modelGroupPermission;
-      for (let j = 0; j < modelsPermissionsList.length; j++) {
-        const modelPermission = modelsPermissionsList[j];
-        const {
-          models
-        } = modelPermission;
-        // when no models or groups defined on permission
-        // it means user has access to everything
-        if (!models && !groups) {
-          return true;
-        }
-
-        // Does the model belong to a group for which user has permission?
-        if (groups) {
-          if (Array.isArray(groups[locale]) === false || groups[locale].includes(model.group.id) === false) {
-            continue;
-          }
-        }
-
-        // Does the user have access to the specific model?
-        if (models) {
-          if (Array.isArray(models[locale]) === false || models[locale].includes(model.modelId) === false) {
-            continue;
-          }
-        }
-        return true;
-      }
-    }
-    return false;
-  }
-  async ensureCanAccessModel(params) {
-    const canAccessModel = await this.canAccessModel(params);
-    if (canAccessModel) {
-      return;
-    }
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to access model "${params.model.modelId}".`
-      }
-    });
-  }
-}
-exports.ModelsPermissions = ModelsPermissions;

package/utils/permissions/ModelsPermissions.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["ModelsPermissions","AppPermissions","constructor","params","modelGroupsPermissions","canAccessModel","model","locale","hasFullAccess","modelsPermissions","canReadGroups","ensure","rwd","throw","canReadModels","modelGroupsPermissionsList","getPermissions","modelsPermissionsList","i","length","modelGroupPermission","groups","j","modelPermission","models","Array","isArray","includes","group","id","modelId","ensureCanAccessModel","NotAuthorizedError","data","reason"],"sources":["ModelsPermissions.ts"],"sourcesContent":["import { AppPermissions, AppPermissionsParams, NotAuthorizedError } from \"@webiny/api-security\";\nimport { CmsGroupPermission, CmsModel, CmsModelPermission } from \"~/types\";\nimport { ModelGroupsPermissions } from \"~/utils/permissions/ModelGroupsPermissions\";\n\nexport interface ModelsPermissionsParams extends AppPermissionsParams<CmsGroupPermission> {\n    modelGroupsPermissions: ModelGroupsPermissions;\n}\n\nexport interface CanAccessModelParams {\n    model: CmsModel;\n    locale: string;\n}\n\nexport interface EnsureModelAccessParams {\n    model: CmsModel;\n    locale: string;\n}\n\nexport class ModelsPermissions extends AppPermissions<CmsModelPermission> {\n    private modelGroupsPermissions: ModelGroupsPermissions;\n\n    constructor(params: ModelsPermissionsParams) {\n        super(params);\n        this.modelGroupsPermissions = params.modelGroupsPermissions;\n    }\n\n    async canAccessModel({ model, locale }: CanAccessModelParams) {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        const modelGroupsPermissions = this.modelGroupsPermissions;\n\n        // eslint-disable-next-line\n        const modelsPermissions = this;\n\n        const canReadGroups = await modelGroupsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadGroups) {\n            return false;\n        }\n\n        const canReadModels = await modelsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadModels) {\n            return false;\n        }\n\n        const modelGroupsPermissionsList = await modelGroupsPermissions.getPermissions();\n        const modelsPermissionsList = await this.getPermissions();\n\n        for (let i = 0; i < modelGroupsPermissionsList.length; i++) {\n            const modelGroupPermission = modelGroupsPermissionsList[i];\n\n            const { groups } = modelGroupPermission;\n\n            for (let j = 0; j < modelsPermissionsList.length; j++) {\n                const modelPermission = modelsPermissionsList[j];\n\n                const { models } = modelPermission;\n                // when no models or groups defined on permission\n                // it means user has access to everything\n                if (!models && !groups) {\n                    return true;\n                }\n\n                // Does the model belong to a group for which user has permission?\n                if (groups) {\n                    if (\n                        Array.isArray(groups[locale]) === false ||\n                        groups[locale].includes(model.group.id) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                // Does the user have access to the specific model?\n                if (models) {\n                    if (\n                        Array.isArray(models[locale]) === false ||\n                        models[locale].includes(model.modelId) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                return true;\n            }\n        }\n\n        return false;\n    }\n\n    async ensureCanAccessModel(params: EnsureModelAccessParams) {\n        const canAccessModel = await this.canAccessModel(params);\n        if (canAccessModel) {\n            return;\n        }\n\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access model \"${params.model.modelId}\".`\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAAA;AAkBO,MAAMA,iBAAiB,SAASC,2BAAc,CAAqB;EAGtEC,WAAW,CAACC,MAA+B,EAAE;IACzC,KAAK,CAACA,MAAM,CAAC;IAAC;IACd,IAAI,CAACC,sBAAsB,GAAGD,MAAM,CAACC,sBAAsB;EAC/D;EAEA,MAAMC,cAAc,CAAC;IAAEC,KAAK;IAAEC;EAA6B,CAAC,EAAE;IAC1D,IAAI,MAAM,IAAI,CAACC,aAAa,EAAE,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMJ,sBAAsB,GAAG,IAAI,CAACA,sBAAsB;;IAE1D;IACA,MAAMK,iBAAiB,GAAG,IAAI;IAE9B,MAAMC,aAAa,GAAG,MAAMN,sBAAsB,CAACO,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACzF,IAAI,CAACH,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMI,aAAa,GAAG,MAAML,iBAAiB,CAACE,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACpF,IAAI,CAACC,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMC,0BAA0B,GAAG,MAAMX,sBAAsB,CAACY,cAAc,EAAE;IAChF,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACD,cAAc,EAAE;IAEzD,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGH,0BAA0B,CAACI,MAAM,EAAED,CAAC,EAAE,EAAE;MACxD,MAAME,oBAAoB,GAAGL,0BAA0B,CAACG,CAAC,CAAC;MAE1D,MAAM;QAAEG;MAAO,CAAC,GAAGD,oBAAoB;MAEvC,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGL,qBAAqB,CAACE,MAAM,EAAEG,CAAC,EAAE,EAAE;QACnD,MAAMC,eAAe,GAAGN,qBAAqB,CAACK,CAAC,CAAC;QAEhD,MAAM;UAAEE;QAAO,CAAC,GAAGD,eAAe;QAClC;QACA;QACA,IAAI,CAACC,MAAM,IAAI,CAACH,MAAM,EAAE;UACpB,OAAO,IAAI;QACf;;QAEA;QACA,IAAIA,MAAM,EAAE;UACR,IACII,KAAK,CAACC,OAAO,CAACL,MAAM,CAACd,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCc,MAAM,CAACd,MAAM,CAAC,CAACoB,QAAQ,CAACrB,KAAK,CAACsB,KAAK,CAACC,EAAE,CAAC,KAAK,KAAK,EACnD;YACE;UACJ;QACJ;;QAEA;QACA,IAAIL,MAAM,EAAE;UACR,IACIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAACjB,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCiB,MAAM,CAACjB,MAAM,CAAC,CAACoB,QAAQ,CAACrB,KAAK,CAACwB,OAAO,CAAC,KAAK,KAAK,EAClD;YACE;UACJ;QACJ;QAEA,OAAO,IAAI;MACf;IACJ;IAEA,OAAO,KAAK;EAChB;EAEA,MAAMC,oBAAoB,CAAC5B,MAA+B,EAAE;IACxD,MAAME,cAAc,GAAG,MAAM,IAAI,CAACA,cAAc,CAACF,MAAM,CAAC;IACxD,IAAIE,cAAc,EAAE;MAChB;IACJ;IAEA,MAAM,IAAI2B,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,gCAA+B/B,MAAM,CAACG,KAAK,CAACwB,OAAQ;MACjE;IACJ,CAAC,CAAC;EACN;AACJ;AAAC"}

package/utils/permissions/SettingsPermissions.d.ts

@@ -1,4 +0,0 @@
-import { CmsSettingsPermission } from "../../types";
-import { AppPermissions } from "@webiny/api-security";
-export declare class SettingsPermissions extends AppPermissions<CmsSettingsPermission> {
-}

package/utils/permissions/SettingsPermissions.js

@@ -1,9 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.SettingsPermissions = void 0;
-var _apiSecurity = require("@webiny/api-security");
-class SettingsPermissions extends _apiSecurity.AppPermissions {}
-exports.SettingsPermissions = SettingsPermissions;

package/utils/permissions/SettingsPermissions.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["SettingsPermissions","AppPermissions"],"sources":["SettingsPermissions.ts"],"sourcesContent":["import { CmsSettingsPermission } from \"~/types\";\nimport { AppPermissions } from \"@webiny/api-security\";\n\nexport class SettingsPermissions extends AppPermissions<CmsSettingsPermission> {}\n"],"mappings":";;;;;;AACA;AAEO,MAAMA,mBAAmB,SAASC,2BAAc,CAAwB;AAAE"}

package/validators/dynamicZone.d.ts

@@ -1,2 +0,0 @@
-import { CmsModelFieldValidatorPlugin } from "../types";
-export declare const createDynamicZoneValidator: () => CmsModelFieldValidatorPlugin;

package/validators/dynamicZone.js

@@ -1,20 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createDynamicZoneValidator = void 0;
-const createDynamicZoneValidator = () => {
-  return {
-    type: "cms-model-field-validator",
-    name: "cms-model-field-validator-dynamic-zone",
-    validator: {
-      name: "dynamicZone",
-      validate() {
-        // TODO: implement validation.
-        return Promise.resolve(true);
-      }
-    }
-  };
-};
-exports.createDynamicZoneValidator = createDynamicZoneValidator;

package/validators/dynamicZone.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["createDynamicZoneValidator","type","name","validator","validate","Promise","resolve"],"sources":["dynamicZone.ts"],"sourcesContent":["import { CmsModelFieldValidatorPlugin } from \"~/types\";\n\nexport const createDynamicZoneValidator = (): CmsModelFieldValidatorPlugin => {\n    return {\n        type: \"cms-model-field-validator\",\n        name: \"cms-model-field-validator-dynamic-zone\",\n        validator: {\n            name: \"dynamicZone\",\n            validate() {\n                // TODO: implement validation.\n                return Promise.resolve(true);\n            }\n        }\n    };\n};\n"],"mappings":";;;;;;AAEO,MAAMA,0BAA0B,GAAG,MAAoC;EAC1E,OAAO;IACHC,IAAI,EAAE,2BAA2B;IACjCC,IAAI,EAAE,wCAAwC;IAC9CC,SAAS,EAAE;MACPD,IAAI,EAAE,aAAa;MACnBE,QAAQ,GAAG;QACP;QACA,OAAOC,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;MAChC;IACJ;EACJ,CAAC;AACL,CAAC;AAAC"}