@webiny/api-headless-cms 0.0.0-unstable.aad28a72ae → 0.0.0-unstable.acacc54f0e

package/crud/contentModelGroup.crud.js

@@ -1,85 +1,29 @@
 "use strict";
 
 var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createModelGroupsCrud = void 0;
-
 var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2"));
-
-var _fields = require("@commodo/fields");
-
-var _validation = require("@webiny/validation");
-
-var _mdbid = _interopRequireDefault(require("mdbid"));
-
-var _handlerGraphql = require("@webiny/handler-graphql");
-
+var _dataloader = _interopRequireDefault(require("dataloader"));
 var _error = _interopRequireDefault(require("@webiny/error"));
-
+var _handlerGraphql = require("@webiny/handler-graphql");
 var _CmsGroupPlugin = require("../plugins/CmsGroupPlugin");
-
 var _pubsub = require("@webiny/pubsub");
-
 var _beforeUpdate = require("./contentModelGroup/beforeUpdate");
-
 var _beforeCreate = require("./contentModelGroup/beforeCreate");
-
 var _beforeDelete = require("./contentModelGroup/beforeDelete");
-
-var _dataloader = _interopRequireDefault(require("dataloader"));
-
-var _permissions = require("../utils/permissions");
-
-var _ownership = require("../utils/ownership");
-
-var _access = require("../utils/access");
-
-var _toSlug = require("../utils/toSlug");
-
-/**
- * Package @commodo/fields does not have types.
- */
-// @ts-ignore
-
-/**
- * Package mdbid does not have types.
- */
-// @ts-ignore
-const CreateContentModelGroupModel = (0, _fields.withFields)({
-  name: (0, _fields.string)({
-    validation: _validation.validation.create("required,maxLength:100")
-  }),
-  slug: (0, _fields.string)({
-    validation: _validation.validation.create("maxLength:100")
-  }),
-  description: (0, _fields.string)({
-    validation: _validation.validation.create("maxLength:255")
-  }),
-  icon: (0, _fields.string)({
-    validation: _validation.validation.create("required,maxLength:255")
-  })
-})();
-const UpdateContentModelGroupModel = (0, _fields.withFields)({
-  name: (0, _fields.string)({
-    validation: _validation.validation.create("maxLength:100")
-  }),
-  description: (0, _fields.string)({
-    validation: _validation.validation.create("maxLength:255")
-  }),
-  icon: (0, _fields.string)({
-    validation: _validation.validation.create("maxLength:255")
-  })
-})();
-
+var _validation = require("./contentModelGroup/validation");
+var _utils = require("@webiny/utils");
+var _filterAsync = require("../utils/filterAsync");
 const createModelGroupsCrud = params => {
   const {
     getTenant,
     getIdentity,
     getLocale,
     storageOperations,
+    modelGroupsPermissions,
     context
   } = params;
   const dataLoaders = {
@@ -101,13 +45,11 @@ const createModelGroupsCrud = params => {
       return [groups.concat(pluginsGroups)];
     })
   };
-
   const clearGroupsCache = () => {
     for (const loader of Object.values(dataLoaders)) {
       loader.clearAll();
     }
   };
-
   const getGroupsAsPlugins = () => {
     const tenant = getTenant().id;
     const locale = getLocale().code;
@@ -115,19 +57,16 @@ const createModelGroupsCrud = params => {
     /**
      * We need to filter out groups that are not for this tenant or locale.
      * If it does not have tenant or locale define, it is for every locale and tenant
-     */
-    .filter(plugin => {
+     */.filter(plugin => {
       const {
         tenant: t,
         locale: l
       } = plugin.contentModelGroup;
-
       if (t && t !== tenant) {
         return false;
       } else if (l && l !== locale) {
         return false;
       }
-
       return true;
     }).map(plugin => {
       return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, plugin.contentModelGroup), {}, {
@@ -137,29 +76,18 @@ const createModelGroupsCrud = params => {
       });
     });
   };
-
-  const checkPermissions = check => {
-    return (0, _permissions.checkPermissions)(context, "cms.contentModelGroup", {
-      rwd: check
-    });
-  };
-
-  const groupsGet = async id => {
+  const getGroupViaDataLoader = async id => {
     const groups = await dataLoaders.listGroups.load("listGroups");
     const group = groups.find(g => g.id === id);
-
     if (!group) {
       throw new _handlerGraphql.NotFoundError(`Cms Group "${id}" was not found!`);
     }
-
     return group;
   };
-
-  const groupsList = async params => {
+  const listGroupsViaDataLoader = async params => {
     const {
       where
     } = params || {};
-
     try {
       return await dataLoaders.listGroups.load("listGroups");
     } catch (ex) {
@@ -168,32 +96,29 @@ const createModelGroupsCrud = params => {
       }));
     }
   };
+
   /**
    * Create
    */
-
-
   const onGroupBeforeCreate = (0, _pubsub.createTopic)("cms.onGroupBeforeCreate");
   const onGroupAfterCreate = (0, _pubsub.createTopic)("cms.onGroupAfterCreate");
   const onGroupCreateError = (0, _pubsub.createTopic)("cms.onGroupCreateError");
   /**
    * Update
    */
-
   const onGroupBeforeUpdate = (0, _pubsub.createTopic)("cms.onGroupBeforeUpdate");
   const onGroupAfterUpdate = (0, _pubsub.createTopic)("cms.onGroupAfterUpdate");
   const onGroupUpdateError = (0, _pubsub.createTopic)("cms.onGroupUpdateError");
   /**
    * Delete
    */
-
   const onGroupBeforeDelete = (0, _pubsub.createTopic)("cms.onGroupBeforeDelete");
   const onGroupAfterDelete = (0, _pubsub.createTopic)("cms.onGroupAfterDelete");
   const onGroupDeleteError = (0, _pubsub.createTopic)("cms.onGroupDeleteError");
+
   /**
    * We need to assign some default behaviors.
    */
-
   (0, _beforeCreate.assignBeforeGroupCreate)({
     onGroupBeforeCreate,
     plugins: context.plugins,
@@ -208,6 +133,187 @@ const createModelGroupsCrud = params => {
     plugins: context.plugins,
     storageOperations
   });
+  /**
+   * CRUD Methods
+   */
+  const getGroup = async id => {
+    await modelGroupsPermissions.ensure({
+      rwd: "r"
+    });
+    const group = await getGroupViaDataLoader(id);
+    await modelGroupsPermissions.ensure({
+      owns: group.createdBy
+    });
+    await modelGroupsPermissions.ensureCanAccessGroup({
+      group,
+      locale: getLocale().code
+    });
+    return group;
+  };
+  const listGroups = async params => {
+    const {
+      where
+    } = params || {};
+    const {
+      tenant,
+      locale
+    } = where || {};
+    await modelGroupsPermissions.ensure({
+      rwd: "r"
+    });
+    const response = await listGroupsViaDataLoader((0, _objectSpread2.default)((0, _objectSpread2.default)({}, params || {}), {}, {
+      where: (0, _objectSpread2.default)((0, _objectSpread2.default)({}, where || {}), {}, {
+        tenant: tenant || getTenant().id,
+        locale: locale || getLocale().code
+      })
+    }));
+    return (0, _filterAsync.filterAsync)(response, async group => {
+      const ownsGroup = await modelGroupsPermissions.ensure({
+        owns: group.createdBy
+      }, {
+        throw: false
+      });
+      if (!ownsGroup) {
+        return false;
+      }
+      return await modelGroupsPermissions.canAccessGroup({
+        group,
+        locale: getLocale().code
+      });
+    });
+  };
+  const createGroup = async input => {
+    await modelGroupsPermissions.ensure({
+      rwd: "w"
+    });
+    const result = await (0, _validation.createGroupCreateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = result.data;
+    const identity = getIdentity();
+    const id = (0, _utils.mdbid)();
+    const group = (0, _objectSpread2.default)((0, _objectSpread2.default)({}, data), {}, {
+      id,
+      tenant: getTenant().id,
+      locale: getLocale().code,
+      createdOn: new Date().toISOString(),
+      savedOn: new Date().toISOString(),
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      webinyVersion: context.WEBINY_VERSION
+    });
+    try {
+      await onGroupBeforeCreate.publish({
+        group
+      });
+      const result = await storageOperations.groups.create({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterCreate.publish({
+        group: result
+      });
+      return group;
+    } catch (ex) {
+      await onGroupCreateError.publish({
+        input,
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message || "Could not save data model group.", ex.code || "ERROR_ON_CREATE", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
+        group,
+        input
+      }));
+    }
+  };
+  const updateGroup = async (id, input) => {
+    await modelGroupsPermissions.ensure({
+      rwd: "w"
+    });
+    const original = await getGroupViaDataLoader(id);
+    await modelGroupsPermissions.ensure({
+      owns: original.createdBy
+    });
+    const result = await (0, _validation.createGroupUpdateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = result.data;
+
+    /**
+     * No need to continue if no values were changed
+     */
+    if (Object.keys(data).length === 0) {
+      return original;
+    }
+    const group = (0, _objectSpread2.default)((0, _objectSpread2.default)((0, _objectSpread2.default)({}, original), data), {}, {
+      locale: getLocale().code,
+      tenant: getTenant().id,
+      savedOn: new Date().toISOString()
+    });
+    try {
+      await onGroupBeforeUpdate.publish({
+        original,
+        group
+      });
+      const updatedGroup = await storageOperations.groups.update({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterUpdate.publish({
+        original,
+        group: updatedGroup
+      });
+      return updatedGroup;
+    } catch (ex) {
+      await onGroupUpdateError.publish({
+        input,
+        original,
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message, ex.code || "UPDATE_ERROR", {
+        error: ex,
+        original,
+        group,
+        input
+      });
+    }
+  };
+  const deleteGroup = async id => {
+    await modelGroupsPermissions.ensure({
+      rwd: "d"
+    });
+    const group = await getGroupViaDataLoader(id);
+    await modelGroupsPermissions.ensure({
+      owns: group.createdBy
+    });
+    try {
+      await onGroupBeforeDelete.publish({
+        group
+      });
+      await storageOperations.groups.delete({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterDelete.publish({
+        group
+      });
+    } catch (ex) {
+      await onGroupDeleteError.publish({
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message, ex.code || "DELETE_ERROR", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
+        id
+      }));
+    }
+    return true;
+  };
   return {
     /**
      * Deprecated - will be removed in 5.36.0
@@ -218,7 +324,6 @@ const createModelGroupsCrud = params => {
     onAfterGroupUpdate: onGroupAfterUpdate,
     onBeforeGroupDelete: onGroupBeforeDelete,
     onAfterGroupDelete: onGroupAfterDelete,
-
     /**
      * Released in 5.34.0
      */
@@ -233,164 +338,30 @@ const createModelGroupsCrud = params => {
     onGroupDeleteError,
     clearGroupsCache,
     getGroup: async id => {
-      const permission = await checkPermissions("r");
-      const group = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, group);
-      (0, _access.validateGroupAccess)(context, permission, group);
-      return group;
+      return context.benchmark.measure("headlessCms.crud.groups.getGroup", async () => {
+        return getGroup(id);
+      });
     },
     listGroups: async params => {
-      const {
-        where
-      } = params || {};
-      const {
-        tenant,
-        locale
-      } = where || {};
-      const permission = await checkPermissions("r");
-      const response = await groupsList((0, _objectSpread2.default)((0, _objectSpread2.default)({}, params || {}), {}, {
-        where: (0, _objectSpread2.default)((0, _objectSpread2.default)({}, where || {}), {}, {
-          tenant: tenant || getTenant().id,
-          locale: locale || getLocale().code
-        })
-      }));
-      return response.filter(group => {
-        if (!(0, _ownership.validateOwnership)(context, permission, group)) {
-          return false;
-        }
-
-        return (0, _access.validateGroupAccess)(context, permission, group);
+      return context.benchmark.measure("headlessCms.crud.groups.listGroups", async () => {
+        return listGroups(params);
       });
     },
-    createGroup: async inputData => {
-      await checkPermissions("w");
-      const createdData = new CreateContentModelGroupModel().populate((0, _objectSpread2.default)((0, _objectSpread2.default)({}, inputData), {}, {
-        slug: inputData.slug ? (0, _toSlug.toSlug)(inputData.slug) : "",
-        description: inputData.description || ""
-      }));
-      await createdData.validate();
-      const input = await createdData.toJSON();
-      const identity = getIdentity();
-      const id = (0, _mdbid.default)();
-      const group = (0, _objectSpread2.default)((0, _objectSpread2.default)({}, input), {}, {
-        id,
-        tenant: getTenant().id,
-        locale: getLocale().code,
-        createdOn: new Date().toISOString(),
-        savedOn: new Date().toISOString(),
-        createdBy: {
-          id: identity.id,
-          displayName: identity.displayName,
-          type: identity.type
-        },
-        webinyVersion: context.WEBINY_VERSION
+    createGroup: async input => {
+      return context.benchmark.measure("headlessCms.crud.groups.createGroup", async () => {
+        return createGroup(input);
       });
-
-      try {
-        await onGroupBeforeCreate.publish({
-          group
-        });
-        const result = await storageOperations.groups.create({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterCreate.publish({
-          group: result
-        });
-        return group;
-      } catch (ex) {
-        await onGroupCreateError.publish({
-          input,
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message || "Could not save data model group.", ex.code || "ERROR_ON_CREATE", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
-          group,
-          input
-        }));
-      }
     },
-    updateGroup: async (id, inputData) => {
-      const permission = await checkPermissions("w");
-      const original = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, original);
-      const input = new UpdateContentModelGroupModel().populate(inputData);
-      await input.validate();
-      const updatedDataJson = await input.toJSON({
-        onlyDirty: true
-      });
-      /**
-       * No need to continue if no values were changed
-       */
-
-      if (Object.keys(updatedDataJson).length === 0) {
-        return original;
-      }
-
-      const group = (0, _objectSpread2.default)((0, _objectSpread2.default)((0, _objectSpread2.default)({}, original), updatedDataJson), {}, {
-        locale: getLocale().code,
-        tenant: getTenant().id,
-        savedOn: new Date().toISOString()
+    updateGroup: async (id, input) => {
+      return context.benchmark.measure("headlessCms.crud.groups.updateGroup", async () => {
+        return updateGroup(id, input);
       });
-
-      try {
-        await onGroupBeforeUpdate.publish({
-          original,
-          group
-        });
-        const updatedGroup = await storageOperations.groups.update({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterUpdate.publish({
-          original,
-          group: updatedGroup
-        });
-        return updatedGroup;
-      } catch (ex) {
-        await onGroupUpdateError.publish({
-          input,
-          original,
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message, ex.code || "UPDATE_ERROR", {
-          error: ex,
-          original,
-          group,
-          input
-        });
-      }
     },
     deleteGroup: async id => {
-      const permission = await checkPermissions("d");
-      const group = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, group);
-
-      try {
-        await onGroupBeforeDelete.publish({
-          group
-        });
-        await storageOperations.groups.delete({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterDelete.publish({
-          group
-        });
-      } catch (ex) {
-        await onGroupDeleteError.publish({
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message, ex.code || "DELETE_ERROR", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
-          id
-        }));
-      }
-
-      return true;
+      return context.benchmark.measure("headlessCms.crud.groups.deleteGroup", async () => {
+        return deleteGroup(id);
+      });
     }
   };
 };
-
 exports.createModelGroupsCrud = createModelGroupsCrud;