@webiny/api-headless-cms 0.0.0-unstable.9e825fd5fb → 0.0.0-unstable.aa00eecd97

package/crud/contentEntry.crud.js

@@ -7,32 +7,27 @@ Object.defineProperty(exports, "__esModule", {
 exports.createContentEntryCrud = exports.STATUS_UNPUBLISHED = exports.STATUS_PUBLISHED = exports.STATUS_DRAFT = void 0;
 var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2"));
 var _merge = _interopRequireDefault(require("lodash/merge"));
-var _mdbid = _interopRequireDefault(require("mdbid"));
+var _utils = require("@webiny/utils");
 var _error = _interopRequireDefault(require("@webiny/error"));
 var _handlerGraphql = require("@webiny/handler-graphql");
+var _types = require("../types");
 var _entryDataValidation = require("./contentEntry/entryDataValidation");
 var _pubsub = require("@webiny/pubsub");
 var _beforeCreate = require("./contentEntry/beforeCreate");
 var _beforeUpdate = require("./contentEntry/beforeUpdate");
-var _utils = require("@webiny/utils");
 var _afterDelete = require("./contentEntry/afterDelete");
 var _referenceFieldsMapping = require("./contentEntry/referenceFieldsMapping");
 var _permissions = require("../utils/permissions");
 var _access = require("../utils/access");
 var _ownership = require("../utils/ownership");
 var _entryStorage = require("../utils/entryStorage");
-var _valueKeyStorageConverter = require("../utils/converters/valueKeyStorageConverter");
 var _searchableFields = require("./contentEntry/searchableFields");
-/**
- * Package mdbid does not have types.
- */
-// @ts-ignore
-
-const STATUS_DRAFT = "draft";
+var _filterAsync = require("../utils/filterAsync");
+const STATUS_DRAFT = _types.CONTENT_ENTRY_STATUS.DRAFT;
 exports.STATUS_DRAFT = STATUS_DRAFT;
-const STATUS_PUBLISHED = "published";
+const STATUS_PUBLISHED = _types.CONTENT_ENTRY_STATUS.PUBLISHED;
 exports.STATUS_PUBLISHED = STATUS_PUBLISHED;
-const STATUS_UNPUBLISHED = "unpublished";
+const STATUS_UNPUBLISHED = _types.CONTENT_ENTRY_STATUS.UNPUBLISHED;
 exports.STATUS_UNPUBLISHED = STATUS_UNPUBLISHED;
 /**
  * Used for some fields to convert their values.
@@ -134,7 +129,7 @@ const createEntryMeta = (input, original) => {
   return (0, _utils.removeUndefinedValues)((0, _utils.removeNullValues)(meta));
 };
 const createEntryId = input => {
-  let entryId = (0, _mdbid.default)();
+  let entryId = (0, _utils.mdbid)();
   if (input.id) {
     if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\-]+)([a-zA-Z0-9])$/) === null) {
       throw new _error.default("The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.", "INVALID_ID", {
@@ -184,9 +179,6 @@ const createContentEntryCrud = params => {
     getTenant,
     getLocale
   } = params;
-  const {
-    plugins
-  } = context;
   const getCreatedBy = () => {
     const identity = getIdentity();
     return {
@@ -251,6 +243,12 @@ const createContentEntryCrud = params => {
   const onEntryRevisionBeforeDelete = (0, _pubsub.createTopic)("cms.onEntryRevisionBeforeDelete");
   const onEntryRevisionAfterDelete = (0, _pubsub.createTopic)("cms.onEntryRevisionAfterDelete");
   const onEntryRevisionDeleteError = (0, _pubsub.createTopic)("cms.onEntryRevisionDeleteError");
+  /**
+   * Delete multiple entries
+   */
+  const onEntryBeforeDeleteMultiple = (0, _pubsub.createTopic)("cms.onEntryBeforeDeleteMultiple");
+  const onEntryAfterDeleteMultiple = (0, _pubsub.createTopic)("cms.onEntryAfterDeleteMultiple");
+  const onEntryDeleteMultipleError = (0, _pubsub.createTopic)("cms.onEntryDeleteMultipleError");
 
   /**
    * Get entry
@@ -317,30 +315,22 @@ const createContentEntryCrud = params => {
   /**
    * A helper to get entries by revision IDs
    */
-  const getEntriesByIds = async (initialModel, ids) => {
+  const getEntriesByIds = async (model, ids) => {
     return context.benchmark.measure("headlessCms.crud.entries.getEntriesByIds", async () => {
       const permission = await checkEntryPermissions({
         rwd: "r"
       });
-      await (0, _access.checkModelAccess)(context, initialModel);
-      const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-        model: initialModel,
-        plugins
-      });
+      await (0, _access.checkModelAccess)(context, model);
       const entries = await storageOperations.entries.getByIds(model, {
         ids
       });
       return entries.filter(entry => (0, _ownership.validateOwnership)(context, permission, entry));
     });
   };
-  const getEntryById = async (initialModel, id) => {
+  const getEntryById = async (model, id) => {
     const where = {
       id
     };
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
     await onEntryBeforeGet.publish({
       where,
       model
@@ -351,42 +341,30 @@ const createContentEntryCrud = params => {
     }
     return entry;
   };
-  const getPublishedEntriesByIds = async (initialModel, ids) => {
+  const getPublishedEntriesByIds = async (model, ids) => {
     const permission = await checkEntryPermissions({
       rwd: "r"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     const entries = await storageOperations.entries.getPublishedByIds(model, {
       ids
     });
     return entries.filter(entry => (0, _ownership.validateOwnership)(context, permission, entry));
   };
-  const getLatestEntriesByIds = async (initialModel, ids) => {
+  const getLatestEntriesByIds = async (model, ids) => {
     const permission = await checkEntryPermissions({
       rwd: "r"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     const entries = await storageOperations.entries.getLatestByIds(model, {
       ids
     });
     return entries.filter(entry => (0, _ownership.validateOwnership)(context, permission, entry));
   };
-  const getEntry = async (initialModel, params) => {
+  const getEntry = async (model, params) => {
     await checkEntryPermissions({
       rwd: "r"
     });
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
     const {
       where,
       sort
@@ -406,32 +384,21 @@ const createContentEntryCrud = params => {
     }
     return item;
   };
-  const getEntryRevisions = async (initialModel, entryId) => {
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+  const getEntryRevisions = async (model, entryId) => {
     return storageOperations.entries.getRevisions(model, {
       id: entryId
     });
   };
-  const listEntries = async (initialModel, params) => {
+  const listEntries = async (model, params) => {
     const permission = await checkEntryPermissions({
       rwd: "r"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     const {
       where: initialWhere,
       limit: initialLimit
     } = params;
     const limit = initialLimit && initialLimit > 0 ? initialLimit : 50;
-    /**
-     * We always assign tenant and locale because we do not allow one model to have content through multiple tenants.
-     */
     const where = (0, _objectSpread2.default)({}, initialWhere);
     /**
      * Possibly only get records which are owned by current user.
@@ -497,15 +464,11 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const createEntry = async (initialModel, inputData) => {
+  const createEntry = async (model, inputData) => {
     await checkEntryPermissions({
       rwd: "w"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
 
     /**
      * Make sure we only work with fields that are defined in the model.
@@ -584,15 +547,11 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const createEntryRevisionFrom = async (initialModel, sourceId, inputData) => {
+  const createEntryRevisionFrom = async (model, sourceId, inputData) => {
     const permission = await checkEntryPermissions({
       rwd: "w"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
 
     /**
      * Make sure we only work with fields that are defined in the model.
@@ -693,15 +652,11 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const updateEntry = async (initialModel, id, inputData, metaInput) => {
+  const updateEntry = async (model, id, inputData, metaInput) => {
     const permission = await checkEntryPermissions({
       rwd: "w"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
 
     /**
      * Make sure we only work with fields that are defined in the model.
@@ -786,15 +741,11 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const republishEntry = async (initialModel, id) => {
+  const republishEntry = async (model, id) => {
     await checkEntryPermissions({
       rwd: "w"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     /**
      * Fetch the entry from the storage.
      */
@@ -868,15 +819,11 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const deleteEntryRevision = async (initialModel, revisionId) => {
+  const deleteEntryRevision = async (model, revisionId) => {
     const permission = await checkEntryPermissions({
       rwd: "d"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     const {
       id: entryId,
       version
@@ -946,20 +893,110 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const deleteEntry = async (initialModel, entryId) => {
+  const deleteMultipleEntries = async (model, params) => {
+    const {
+      entries: input
+    } = params;
+    const maxDeletableEntries = 50;
+    const entryIdList = new Set();
+    for (const id of input) {
+      const {
+        id: entryId
+      } = (0, _utils.parseIdentifier)(id);
+      entryIdList.add(entryId);
+    }
+    const ids = Array.from(entryIdList);
+    if (ids.length > maxDeletableEntries) {
+      throw new _error.default("Cannot delete more than 50 entries at once.", "DELETE_ENTRIES_MAX", {
+        entries: ids
+      });
+    }
     const permission = await checkEntryPermissions({
       rwd: "d"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
+    await (0, _access.checkModelAccess)(context, model);
+    const {
+      items: entries
+    } = await storageOperations.entries.list(model, {
+      where: {
+        latest: true,
+        entryId_in: ids
+      },
+      limit: maxDeletableEntries + 1
+    });
+    /**
+     * We do not want to allow deleting entries that user does not own or cannot access.
+     */
+    const items = (await (0, _filterAsync.filterAsync)(entries, async entry => {
+      return (0, _ownership.validateOwnership)(context, permission, entry);
+    })).map(entry => entry.id);
+    try {
+      await onEntryBeforeDeleteMultiple.publish({
+        entries,
+        ids,
+        model
+      });
+      await storageOperations.entries.deleteMultipleEntries(model, {
+        entries: items
+      });
+      await onEntryAfterDeleteMultiple.publish({
+        entries,
+        ids,
+        model
+      });
+      return items.map(id => {
+        return {
+          id
+        };
+      });
+    } catch (ex) {
+      await onEntryDeleteMultipleError.publish({
+        entries,
+        ids,
+        model,
+        error: ex
+      });
+      throw new _error.default(ex.message, ex.code || "DELETE_ENTRIES_MULTIPLE_ERROR", {
+        error: ex,
+        entries
+      });
+    }
+  };
+  const deleteEntry = async (model, id, options) => {
+    const permission = await checkEntryPermissions({
+      rwd: "d"
     });
+    await (0, _access.checkModelAccess)(context, model);
+    const {
+      force
+    } = options || {};
     const storageEntry = await storageOperations.entries.getLatestRevisionByEntryId(model, {
-      id: entryId
+      id
     });
-    if (!storageEntry) {
-      throw new _handlerGraphql.NotFoundError(`Entry "${entryId}" was not found!`);
+    /**
+     * If there is no entry, and we do not force the deletion, just throw an error.
+     */
+    if (!storageEntry && !force) {
+      throw new _handlerGraphql.NotFoundError(`Entry "${id}" was not found!`);
+    }
+    /**
+     * In the case we are forcing the deletion, we do not need the storageEntry to exist as it might be an error when loading single database record.
+     *
+     * This happens, sometimes, in the Elasticsearch system as the entry might get deleted from the DynamoDB but not from the Elasticsearch.
+     * This is due to high load on the Elasticsearch at the time of the deletion.
+     */
+    //
+    else if (!storageEntry && force) {
+      const {
+        id: entryId
+      } = (0, _utils.parseIdentifier)(id);
+      return await deleteEntryHelper({
+        model,
+        entry: {
+          id,
+          entryId
+        }
+      });
     }
     (0, _ownership.checkOwnership)(context, permission, storageEntry);
     const entry = await (0, _entryStorage.entryFromStorageTransform)(context, model, storageEntry);
@@ -968,15 +1005,11 @@ const createContentEntryCrud = params => {
       entry
     });
   };
-  const publishEntry = async (initialModel, id) => {
+  const publishEntry = async (model, id) => {
     const permission = await checkEntryPermissions({
       pw: "p"
     });
-    await (0, _access.checkModelAccess)(context, initialModel);
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
+    await (0, _access.checkModelAccess)(context, model);
     const originalStorageEntry = await storageOperations.entries.getRevisionById(model, {
       id
     });
@@ -1024,14 +1057,10 @@ const createContentEntryCrud = params => {
       });
     }
   };
-  const unpublishEntry = async (initialModel, id) => {
+  const unpublishEntry = async (model, id) => {
     const permission = await checkEntryPermissions({
       pw: "u"
     });
-    const model = (0, _valueKeyStorageConverter.attachCmsModelFieldConverters)({
-      model: initialModel,
-      plugins
-    });
     const {
       id: entryId
     } = (0, _utils.parseIdentifier)(id);
@@ -1082,6 +1111,68 @@ const createContentEntryCrud = params => {
       });
     }
   };
+  const getUniqueFieldValues = async (model, params) => {
+    const permission = await checkEntryPermissions({
+      rwd: "r"
+    });
+    await (0, _access.checkModelAccess)(context, model);
+    const {
+      where: initialWhere,
+      fieldId
+    } = params;
+    const where = (0, _objectSpread2.default)({}, initialWhere);
+    /**
+     * Possibly only get records which are owned by current user.
+     * Or if searching for the owner set that value - in the case that user can see other entries than their own.
+     */
+    const ownedBy = permission.own ? getIdentity().id : where.ownedBy;
+    if (ownedBy !== undefined) {
+      where.ownedBy = ownedBy;
+    }
+    /**
+     * Where must contain either latest or published keys.
+     * We cannot list entries without one of those
+     */
+    if (where.latest && where.published) {
+      throw new _error.default("Cannot list entries that are both published and latest.", "LIST_ENTRIES_ERROR", {
+        where
+      });
+    } else if (!where.latest && !where.published) {
+      throw new _error.default("Cannot list entries if we do not have latest or published defined.", "LIST_ENTRIES_ERROR", {
+        where
+      });
+    }
+    /**
+     * We need to verify that the field in question is searchable.
+     */
+    const fields = (0, _searchableFields.getSearchableFields)({
+      fields: model.fields,
+      plugins: context.plugins,
+      input: []
+    });
+    if (fields.includes(fieldId) === false) {
+      throw new _error.default("Cannot list unique entry field values if the field is not searchable.", "LIST_UNIQUE_ENTRY_VALUES_ERROR", {
+        fieldId
+      });
+    }
+    try {
+      return await storageOperations.entries.getUniqueFieldValues(model, {
+        where,
+        fieldId
+      });
+    } catch (ex) {
+      throw new _error.default("Error while fetching unique entry values from storage.", "LIST_UNIQUE_ENTRY_VALUES_ERROR", {
+        error: {
+          message: ex.message,
+          code: ex.code,
+          data: ex.data
+        },
+        model,
+        where,
+        fieldId
+      });
+    }
+  };
   return {
     /**
      * Deprecated - will be removed in 5.35.0
@@ -1261,6 +1352,11 @@ const createContentEntryCrud = params => {
         return deleteEntry(model, entryId);
       });
     },
+    async deleteMultipleEntries(model, ids) {
+      return context.benchmark.measure("headlessCms.crud.entries.deleteMultipleEntries", async () => {
+        return deleteMultipleEntries(model, ids);
+      });
+    },
     async publishEntry(model, id) {
       return context.benchmark.measure("headlessCms.crud.entries.publishEntry", async () => {
         return publishEntry(model, id);
@@ -1270,6 +1366,11 @@ const createContentEntryCrud = params => {
       return context.benchmark.measure("headlessCms.crud.entries.unpublishEntry", async () => {
         return unpublishEntry(model, id);
       });
+    },
+    async getUniqueFieldValues(model, params) {
+      return context.benchmark.measure("headlessCms.crud.entries.getUniqueFieldValues", async () => {
+        return getUniqueFieldValues(model, params);
+      });
     }
   };
 };