@webiny/api-headless-cms 0.0.0-unstable.bca7b3e350 → 0.0.0-unstable.c27f4d8a31

package/upgrades/5.33.0/index.js

@@ -1,159 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createUpgrade = void 0;
-var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2"));
-var _error = _interopRequireDefault(require("@webiny/error"));
-const assignStorageId = fields => {
-  return fields.map(field => {
-    const settings = (0, _objectSpread2.default)({}, field.settings || {});
-    if (settings.fields && Array.isArray(settings.fields) === true) {
-      settings.fields = assignStorageId(settings.fields);
-    }
-    return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, field), {}, {
-      storageId: field.fieldId,
-      settings
-    });
-  });
-};
-/**
- * If at least one field does not have storageId define, we should definitely update the model.
- */
-const shouldUpdate = fields => {
-  return fields.some(field => {
-    var _field$settings;
-    if ((_field$settings = field.settings) !== null && _field$settings !== void 0 && _field$settings.fields) {
-      return shouldUpdate(field.settings.fields);
-    }
-    return !field.storageId;
-  });
-};
-const upgradeTenantModels = async params => {
-  const {
-    tenant,
-    cms,
-    i18n
-  } = params;
-  /**
-   * We need all locales for this tenant, so we can go and find all models for all the locales.
-   */
-  const [locales] = await i18n.locales.storageOperations.list({
-    where: {
-      tenant: tenant.id
-    },
-    limit: 100
-  });
-  if (locales.length === 0) {
-    console.log(`There are no locales under the tenant "${tenant.id}".`);
-    return;
-  }
-  for (const locale of locales) {
-    /**
-     * We need all the models that are not plugin models.
-     */
-    const models = await cms.storageOperations.models.list({
-      where: {
-        tenant: tenant.id,
-        locale: locale.code
-      }
-    });
-    if (models.length === 0) {
-      console.log(`No models in tenant "${tenant.id}" and locale "${locale.code}" combination.`);
-      continue;
-    }
-
-    /**
-     * Then we need to go into each of the model fields and add the storageId, which is the same as the fieldId
-     */
-    const updatedModels = models.filter(model => {
-      /**
-       * If model has at least one field with no storageId, continue with the update.
-       */
-      const toUpdate = shouldUpdate(model.fields);
-
-      /**
-       * If not updating the model, lets log it - just in case...
-       */
-      if (!toUpdate) {
-        console.log(`Skipping update of model "${model.modelId} - ${tenant.id} - ${locale.code}".`);
-        return false;
-      }
-      return true;
-    }).map(model => {
-      return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, model), {}, {
-        fields: assignStorageId(model.fields)
-      });
-    });
-    /**
-     * And update all the models
-     */
-    for (const model of updatedModels) {
-      try {
-        await cms.storageOperations.models.update({
-          model
-        });
-      } catch (ex) {
-        throw new _error.default(`Could not update CMS model ${model.modelId}`, "MODEL_UPGRADE_ERROR", {
-          model
-        });
-      }
-    }
-  }
-  /**
-   * In the end we need to write the new cms system version.
-   */
-  await cms.setSystemVersion("5.33.0");
-};
-const createUpgrade = () => {
-  return {
-    type: "api-upgrade",
-    version: "5.33.0",
-    app: "headless-cms",
-    apply: async context => {
-      const {
-        security,
-        tenancy,
-        cms,
-        i18n
-      } = context;
-
-      /**
-       * We need to be able to access all data.
-       */
-      security.disableAuthorization();
-      const initialTenant = tenancy.getCurrentTenant();
-      const tenants = await tenancy.listTenants();
-      try {
-        for (const tenant of tenants) {
-          tenancy.setCurrentTenant(tenant);
-          await upgradeTenantModels({
-            tenant,
-            cms,
-            i18n
-          });
-        }
-      } catch (ex) {
-        console.log(`Upgrade error: ${JSON.stringify({
-          message: ex.message,
-          code: ex.code,
-          data: ex.data
-        })}`);
-        throw new _error.default(`Could not finish the 5.33.0 upgrade. Please contact Webiny team on Slack and share the error.`, "UPGRADE_ERROR", {
-          message: ex.message,
-          code: ex.code,
-          data: ex.data
-        });
-      } finally {
-        /**
-         * Always enable the security after all the code runs.
-         */
-        security.enableAuthorization();
-        tenancy.setCurrentTenant(initialTenant);
-      }
-    }
-  };
-};
-exports.createUpgrade = createUpgrade;

package/upgrades/5.33.0/index.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["assignStorageId","fields","map","field","settings","Array","isArray","storageId","fieldId","shouldUpdate","some","upgradeTenantModels","params","tenant","cms","i18n","locales","storageOperations","list","where","id","limit","length","console","log","locale","models","code","updatedModels","filter","model","toUpdate","modelId","update","ex","WebinyError","setSystemVersion","createUpgrade","type","version","app","apply","context","security","tenancy","disableAuthorization","initialTenant","getCurrentTenant","tenants","listTenants","setCurrentTenant","JSON","stringify","message","data","enableAuthorization"],"sources":["index.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { UpgradePlugin } from \"@webiny/api-upgrade\";\nimport { CmsContext, CmsModelField, HeadlessCms } from \"~/types\";\nimport { Tenant } from \"@webiny/api-tenancy/types\";\nimport { I18NContextObject } from \"@webiny/api-i18n/types\";\n\nconst assignStorageId = (fields: CmsModelField[]): CmsModelField[] => {\n    return fields.map(field => {\n        const settings = {\n            ...(field.settings || {})\n        };\n        if (settings.fields && Array.isArray(settings.fields) === true) {\n            settings.fields = assignStorageId(settings.fields);\n        }\n        return {\n            ...field,\n            storageId: field.fieldId,\n            settings\n        };\n    });\n};\n/**\n * If at least one field does not have storageId define, we should definitely update the model.\n */\nconst shouldUpdate = (fields: CmsModelField[]): boolean => {\n    return fields.some(field => {\n        if (field.settings?.fields) {\n            return shouldUpdate(field.settings.fields);\n        }\n        return !field.storageId;\n    });\n};\n\ninterface UpgradeTenantModelsParams {\n    tenant: Tenant;\n    cms: HeadlessCms;\n    i18n: I18NContextObject;\n}\n\nconst upgradeTenantModels = async (params: UpgradeTenantModelsParams): Promise<void> => {\n    const { tenant, cms, i18n } = params;\n    /**\n     * We need all locales for this tenant, so we can go and find all models for all the locales.\n     */\n    const [locales] = await i18n.locales.storageOperations.list({\n        where: {\n            tenant: tenant.id\n        },\n        limit: 100\n    });\n    if (locales.length === 0) {\n        console.log(`There are no locales under the tenant \"${tenant.id}\".`);\n        return;\n    }\n    for (const locale of locales) {\n        /**\n         * We need all the models that are not plugin models.\n         */\n        const models = await cms.storageOperations.models.list({\n            where: {\n                tenant: tenant.id,\n                locale: locale.code\n            }\n        });\n        if (models.length === 0) {\n            console.log(\n                `No models in tenant \"${tenant.id}\" and locale \"${locale.code}\" combination.`\n            );\n            continue;\n        }\n\n        /**\n         * Then we need to go into each of the model fields and add the storageId, which is the same as the fieldId\n         */\n        const updatedModels = models\n            .filter(model => {\n                /**\n                 * If model has at least one field with no storageId, continue with the update.\n                 */\n                const toUpdate = shouldUpdate(model.fields);\n\n                /**\n                 * If not updating the model, lets log it - just in case...\n                 */\n                if (!toUpdate) {\n                    console.log(\n                        `Skipping update of model \"${model.modelId} - ${tenant.id} - ${locale.code}\".`\n                    );\n                    return false;\n                }\n                return true;\n            })\n            .map(model => {\n                return {\n                    ...model,\n                    fields: assignStorageId(model.fields)\n                };\n            });\n        /**\n         * And update all the models\n         */\n        for (const model of updatedModels) {\n            try {\n                await cms.storageOperations.models.update({\n                    model\n                });\n            } catch (ex) {\n                throw new WebinyError(\n                    `Could not update CMS model ${model.modelId}`,\n                    \"MODEL_UPGRADE_ERROR\",\n                    {\n                        model\n                    }\n                );\n            }\n        }\n    }\n    /**\n     * In the end we need to write the new cms system version.\n     */\n    await cms.setSystemVersion(\"5.33.0\");\n};\n\nexport const createUpgrade = (): UpgradePlugin<CmsContext> => {\n    return {\n        type: \"api-upgrade\",\n        version: \"5.33.0\",\n        app: \"headless-cms\",\n        apply: async context => {\n            const { security, tenancy, cms, i18n } = context;\n\n            /**\n             * We need to be able to access all data.\n             */\n            security.disableAuthorization();\n\n            const initialTenant = tenancy.getCurrentTenant();\n\n            const tenants = await tenancy.listTenants();\n            try {\n                for (const tenant of tenants) {\n                    tenancy.setCurrentTenant(tenant);\n                    await upgradeTenantModels({\n                        tenant,\n                        cms,\n                        i18n\n                    });\n                }\n            } catch (ex) {\n                console.log(\n                    `Upgrade error: ${JSON.stringify({\n                        message: ex.message,\n                        code: ex.code,\n                        data: ex.data\n                    })}`\n                );\n                throw new WebinyError(\n                    `Could not finish the 5.33.0 upgrade. Please contact Webiny team on Slack and share the error.`,\n                    \"UPGRADE_ERROR\",\n                    {\n                        message: ex.message,\n                        code: ex.code,\n                        data: ex.data\n                    }\n                );\n            } finally {\n                /**\n                 * Always enable the security after all the code runs.\n                 */\n                security.enableAuthorization();\n                tenancy.setCurrentTenant(initialTenant);\n            }\n        }\n    };\n};\n"],"mappings":";;;;;;;;AAAA;AAMA,MAAMA,eAAe,GAAIC,MAAuB,IAAsB;EAClE,OAAOA,MAAM,CAACC,GAAG,CAACC,KAAK,IAAI;IACvB,MAAMC,QAAQ,mCACND,KAAK,CAACC,QAAQ,IAAI,CAAC,CAAC,CAC3B;IACD,IAAIA,QAAQ,CAACH,MAAM,IAAII,KAAK,CAACC,OAAO,CAACF,QAAQ,CAACH,MAAM,CAAC,KAAK,IAAI,EAAE;MAC5DG,QAAQ,CAACH,MAAM,GAAGD,eAAe,CAACI,QAAQ,CAACH,MAAM,CAAC;IACtD;IACA,mEACOE,KAAK;MACRI,SAAS,EAAEJ,KAAK,CAACK,OAAO;MACxBJ;IAAQ;EAEhB,CAAC,CAAC;AACN,CAAC;AACD;AACA;AACA;AACA,MAAMK,YAAY,GAAIR,MAAuB,IAAc;EACvD,OAAOA,MAAM,CAACS,IAAI,CAACP,KAAK,IAAI;IAAA;IACxB,uBAAIA,KAAK,CAACC,QAAQ,4CAAd,gBAAgBH,MAAM,EAAE;MACxB,OAAOQ,YAAY,CAACN,KAAK,CAACC,QAAQ,CAACH,MAAM,CAAC;IAC9C;IACA,OAAO,CAACE,KAAK,CAACI,SAAS;EAC3B,CAAC,CAAC;AACN,CAAC;AAQD,MAAMI,mBAAmB,GAAG,MAAOC,MAAiC,IAAoB;EACpF,MAAM;IAAEC,MAAM;IAAEC,GAAG;IAAEC;EAAK,CAAC,GAAGH,MAAM;EACpC;AACJ;AACA;EACI,MAAM,CAACI,OAAO,CAAC,GAAG,MAAMD,IAAI,CAACC,OAAO,CAACC,iBAAiB,CAACC,IAAI,CAAC;IACxDC,KAAK,EAAE;MACHN,MAAM,EAAEA,MAAM,CAACO;IACnB,CAAC;IACDC,KAAK,EAAE;EACX,CAAC,CAAC;EACF,IAAIL,OAAO,CAACM,MAAM,KAAK,CAAC,EAAE;IACtBC,OAAO,CAACC,GAAG,CAAE,0CAAyCX,MAAM,CAACO,EAAG,IAAG,CAAC;IACpE;EACJ;EACA,KAAK,MAAMK,MAAM,IAAIT,OAAO,EAAE;IAC1B;AACR;AACA;IACQ,MAAMU,MAAM,GAAG,MAAMZ,GAAG,CAACG,iBAAiB,CAACS,MAAM,CAACR,IAAI,CAAC;MACnDC,KAAK,EAAE;QACHN,MAAM,EAAEA,MAAM,CAACO,EAAE;QACjBK,MAAM,EAAEA,MAAM,CAACE;MACnB;IACJ,CAAC,CAAC;IACF,IAAID,MAAM,CAACJ,MAAM,KAAK,CAAC,EAAE;MACrBC,OAAO,CAACC,GAAG,CACN,wBAAuBX,MAAM,CAACO,EAAG,iBAAgBK,MAAM,CAACE,IAAK,gBAAe,CAChF;MACD;IACJ;;IAEA;AACR;AACA;IACQ,MAAMC,aAAa,GAAGF,MAAM,CACvBG,MAAM,CAACC,KAAK,IAAI;MACb;AAChB;AACA;MACgB,MAAMC,QAAQ,GAAGtB,YAAY,CAACqB,KAAK,CAAC7B,MAAM,CAAC;;MAE3C;AAChB;AACA;MACgB,IAAI,CAAC8B,QAAQ,EAAE;QACXR,OAAO,CAACC,GAAG,CACN,6BAA4BM,KAAK,CAACE,OAAQ,MAAKnB,MAAM,CAACO,EAAG,MAAKK,MAAM,CAACE,IAAK,IAAG,CACjF;QACD,OAAO,KAAK;MAChB;MACA,OAAO,IAAI;IACf,CAAC,CAAC,CACDzB,GAAG,CAAC4B,KAAK,IAAI;MACV,mEACOA,KAAK;QACR7B,MAAM,EAAED,eAAe,CAAC8B,KAAK,CAAC7B,MAAM;MAAC;IAE7C,CAAC,CAAC;IACN;AACR;AACA;IACQ,KAAK,MAAM6B,KAAK,IAAIF,aAAa,EAAE;MAC/B,IAAI;QACA,MAAMd,GAAG,CAACG,iBAAiB,CAACS,MAAM,CAACO,MAAM,CAAC;UACtCH;QACJ,CAAC,CAAC;MACN,CAAC,CAAC,OAAOI,EAAE,EAAE;QACT,MAAM,IAAIC,cAAW,CAChB,8BAA6BL,KAAK,CAACE,OAAQ,EAAC,EAC7C,qBAAqB,EACrB;UACIF;QACJ,CAAC,CACJ;MACL;IACJ;EACJ;EACA;AACJ;AACA;EACI,MAAMhB,GAAG,CAACsB,gBAAgB,CAAC,QAAQ,CAAC;AACxC,CAAC;AAEM,MAAMC,aAAa,GAAG,MAAiC;EAC1D,OAAO;IACHC,IAAI,EAAE,aAAa;IACnBC,OAAO,EAAE,QAAQ;IACjBC,GAAG,EAAE,cAAc;IACnBC,KAAK,EAAE,MAAMC,OAAO,IAAI;MACpB,MAAM;QAAEC,QAAQ;QAAEC,OAAO;QAAE9B,GAAG;QAAEC;MAAK,CAAC,GAAG2B,OAAO;;MAEhD;AACZ;AACA;MACYC,QAAQ,CAACE,oBAAoB,EAAE;MAE/B,MAAMC,aAAa,GAAGF,OAAO,CAACG,gBAAgB,EAAE;MAEhD,MAAMC,OAAO,GAAG,MAAMJ,OAAO,CAACK,WAAW,EAAE;MAC3C,IAAI;QACA,KAAK,MAAMpC,MAAM,IAAImC,OAAO,EAAE;UAC1BJ,OAAO,CAACM,gBAAgB,CAACrC,MAAM,CAAC;UAChC,MAAMF,mBAAmB,CAAC;YACtBE,MAAM;YACNC,GAAG;YACHC;UACJ,CAAC,CAAC;QACN;MACJ,CAAC,CAAC,OAAOmB,EAAE,EAAE;QACTX,OAAO,CAACC,GAAG,CACN,kBAAiB2B,IAAI,CAACC,SAAS,CAAC;UAC7BC,OAAO,EAAEnB,EAAE,CAACmB,OAAO;UACnB1B,IAAI,EAAEO,EAAE,CAACP,IAAI;UACb2B,IAAI,EAAEpB,EAAE,CAACoB;QACb,CAAC,CAAE,EAAC,CACP;QACD,MAAM,IAAInB,cAAW,CAChB,+FAA8F,EAC/F,eAAe,EACf;UACIkB,OAAO,EAAEnB,EAAE,CAACmB,OAAO;UACnB1B,IAAI,EAAEO,EAAE,CAACP,IAAI;UACb2B,IAAI,EAAEpB,EAAE,CAACoB;QACb,CAAC,CACJ;MACL,CAAC,SAAS;QACN;AAChB;AACA;QACgBX,QAAQ,CAACY,mBAAmB,EAAE;QAC9BX,OAAO,CAACM,gBAAgB,CAACJ,aAAa,CAAC;MAC3C;IACJ;EACJ,CAAC;AACL,CAAC;AAAC"}

package/upgrades/index.d.ts

@@ -1 +0,0 @@
-export declare const createUpgrades: () => import("@webiny/api-upgrade").UpgradePlugin<import("../types").CmsContext>[];

package/upgrades/index.js

@@ -1,9 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createUpgrades = void 0;
-var _ = require("./5.33.0");
-const createUpgrades = () => [(0, _.createUpgrade)()];
-exports.createUpgrades = createUpgrades;

package/upgrades/index.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["createUpgrades","create533Upgrade"],"sources":["index.ts"],"sourcesContent":["import { createUpgrade as create533Upgrade } from \"~/upgrades/5.33.0\";\n\nexport const createUpgrades = () => [create533Upgrade()];\n"],"mappings":";;;;;;AAAA;AAEO,MAAMA,cAAc,GAAG,MAAM,CAAC,IAAAC,eAAgB,GAAE,CAAC;AAAC"}

package/utils/access.d.ts

@@ -1,8 +0,0 @@
-import { CmsContext, CmsGroup, CmsGroupPermission, CmsModel } from "../types";
-export declare const validateGroupAccess: (context: CmsContext, permission: CmsGroupPermission, group: CmsGroup) => boolean;
-export declare const validateModelAccess: (context: CmsContext, model: CmsModel) => Promise<boolean>;
-/**
- * model access is checking for both specific model or group access
- * if permission has specific models set as access pattern then groups will not matter (although both can be set)
- */
-export declare const checkModelAccess: (context: CmsContext, model: CmsModel) => Promise<void>;

package/utils/access.js

@@ -1,76 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.validateModelAccess = exports.validateGroupAccess = exports.checkModelAccess = void 0;
-var _apiSecurity = require("@webiny/api-security");
-var _permissions = require("./permissions");
-const validateGroupAccess = (context, permission, group) => {
-  const {
-    groups
-  } = permission;
-  // when no groups defined on permission
-  // it means user has access to everything
-  if (!groups) {
-    return true;
-  }
-  const locale = context.cms.getLocale().code;
-  // when there is no locale in groups, it means that no access was given
-  // this happens when access control was set but no models or groups were added
-  if (Array.isArray(groups[locale]) === false || groups[locale].includes(group.id) === false) {
-    return false;
-  }
-  return true;
-};
-exports.validateGroupAccess = validateGroupAccess;
-const validateModelAccess = async (context, model) => {
-  const modelGroupPermission = await (0, _permissions.checkPermissions)(context, "cms.contentModelGroup", {
-    rwd: "r"
-  });
-  const {
-    groups
-  } = modelGroupPermission;
-  const modelPermission = await (0, _permissions.checkPermissions)(context, "cms.contentModel", {
-    rwd: "r"
-  });
-  const {
-    models
-  } = modelPermission;
-  // when no models or groups defined on permission
-  // it means user has access to everything
-  if (!models && !groups) {
-    return true;
-  }
-  const locale = context.cms.getLocale().code;
-  // Check whether the model is question belongs to "content model groups" for which user has permission.
-  if (groups) {
-    if (Array.isArray(groups[locale]) === false || groups[locale].includes(model.group.id) === false) {
-      return false;
-    }
-  }
-  // Check whether the model is question belongs to "content models" for which user has permission.
-  if (models) {
-    if (Array.isArray(models[locale]) === false || models[locale].includes(model.modelId) === false) {
-      return false;
-    }
-  }
-  return true;
-};
-
-/**
- * model access is checking for both specific model or group access
- * if permission has specific models set as access pattern then groups will not matter (although both can be set)
- */
-exports.validateModelAccess = validateModelAccess;
-const checkModelAccess = async (context, model) => {
-  if (await validateModelAccess(context, model)) {
-    return;
-  }
-  throw new _apiSecurity.NotAuthorizedError({
-    data: {
-      reason: `Not allowed to access model "${model.modelId}".`
-    }
-  });
-};
-exports.checkModelAccess = checkModelAccess;

package/utils/access.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["validateGroupAccess","context","permission","group","groups","locale","cms","getLocale","code","Array","isArray","includes","id","validateModelAccess","model","modelGroupPermission","checkPermissions","rwd","modelPermission","models","modelId","checkModelAccess","NotAuthorizedError","data","reason"],"sources":["access.ts"],"sourcesContent":["import { NotAuthorizedError } from \"@webiny/api-security\";\nimport { CmsContext, CmsGroup, CmsGroupPermission, CmsModel, CmsModelPermission } from \"~/types\";\nimport { checkPermissions } from \"./permissions\";\n\nexport const validateGroupAccess = (\n    context: CmsContext,\n    permission: CmsGroupPermission,\n    group: CmsGroup\n): boolean => {\n    const { groups } = permission;\n    // when no groups defined on permission\n    // it means user has access to everything\n    if (!groups) {\n        return true;\n    }\n    const locale = context.cms.getLocale().code;\n    // when there is no locale in groups, it means that no access was given\n    // this happens when access control was set but no models or groups were added\n    if (Array.isArray(groups[locale]) === false || groups[locale].includes(group.id) === false) {\n        return false;\n    }\n    return true;\n};\n\nexport const validateModelAccess = async (\n    context: CmsContext,\n    model: CmsModel\n): Promise<boolean> => {\n    const modelGroupPermission: CmsGroupPermission = await checkPermissions(\n        context,\n        \"cms.contentModelGroup\",\n        { rwd: \"r\" }\n    );\n    const { groups } = modelGroupPermission;\n\n    const modelPermission: CmsModelPermission = await checkPermissions(\n        context,\n        \"cms.contentModel\",\n        {\n            rwd: \"r\"\n        }\n    );\n    const { models } = modelPermission;\n    // when no models or groups defined on permission\n    // it means user has access to everything\n    if (!models && !groups) {\n        return true;\n    }\n    const locale = context.cms.getLocale().code;\n    // Check whether the model is question belongs to \"content model groups\" for which user has permission.\n    if (groups) {\n        if (\n            Array.isArray(groups[locale]) === false ||\n            groups[locale].includes(model.group.id) === false\n        ) {\n            return false;\n        }\n    }\n    // Check whether the model is question belongs to \"content models\" for which user has permission.\n    if (models) {\n        if (\n            Array.isArray(models[locale]) === false ||\n            models[locale].includes(model.modelId) === false\n        ) {\n            return false;\n        }\n    }\n\n    return true;\n};\n\n/**\n * model access is checking for both specific model or group access\n * if permission has specific models set as access pattern then groups will not matter (although both can be set)\n */\nexport const checkModelAccess = async (context: CmsContext, model: CmsModel): Promise<void> => {\n    if (await validateModelAccess(context, model)) {\n        return;\n    }\n    throw new NotAuthorizedError({\n        data: {\n            reason: `Not allowed to access model \"${model.modelId}\".`\n        }\n    });\n};\n"],"mappings":";;;;;;AAAA;AAEA;AAEO,MAAMA,mBAAmB,GAAG,CAC/BC,OAAmB,EACnBC,UAA8B,EAC9BC,KAAe,KACL;EACV,MAAM;IAAEC;EAAO,CAAC,GAAGF,UAAU;EAC7B;EACA;EACA,IAAI,CAACE,MAAM,EAAE;IACT,OAAO,IAAI;EACf;EACA,MAAMC,MAAM,GAAGJ,OAAO,CAACK,GAAG,CAACC,SAAS,EAAE,CAACC,IAAI;EAC3C;EACA;EACA,IAAIC,KAAK,CAACC,OAAO,CAACN,MAAM,CAACC,MAAM,CAAC,CAAC,KAAK,KAAK,IAAID,MAAM,CAACC,MAAM,CAAC,CAACM,QAAQ,CAACR,KAAK,CAACS,EAAE,CAAC,KAAK,KAAK,EAAE;IACxF,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf,CAAC;AAAC;AAEK,MAAMC,mBAAmB,GAAG,OAC/BZ,OAAmB,EACnBa,KAAe,KACI;EACnB,MAAMC,oBAAwC,GAAG,MAAM,IAAAC,6BAAgB,EACnEf,OAAO,EACP,uBAAuB,EACvB;IAAEgB,GAAG,EAAE;EAAI,CAAC,CACf;EACD,MAAM;IAAEb;EAAO,CAAC,GAAGW,oBAAoB;EAEvC,MAAMG,eAAmC,GAAG,MAAM,IAAAF,6BAAgB,EAC9Df,OAAO,EACP,kBAAkB,EAClB;IACIgB,GAAG,EAAE;EACT,CAAC,CACJ;EACD,MAAM;IAAEE;EAAO,CAAC,GAAGD,eAAe;EAClC;EACA;EACA,IAAI,CAACC,MAAM,IAAI,CAACf,MAAM,EAAE;IACpB,OAAO,IAAI;EACf;EACA,MAAMC,MAAM,GAAGJ,OAAO,CAACK,GAAG,CAACC,SAAS,EAAE,CAACC,IAAI;EAC3C;EACA,IAAIJ,MAAM,EAAE;IACR,IACIK,KAAK,CAACC,OAAO,CAACN,MAAM,CAACC,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCD,MAAM,CAACC,MAAM,CAAC,CAACM,QAAQ,CAACG,KAAK,CAACX,KAAK,CAACS,EAAE,CAAC,KAAK,KAAK,EACnD;MACE,OAAO,KAAK;IAChB;EACJ;EACA;EACA,IAAIO,MAAM,EAAE;IACR,IACIV,KAAK,CAACC,OAAO,CAACS,MAAM,CAACd,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCc,MAAM,CAACd,MAAM,CAAC,CAACM,QAAQ,CAACG,KAAK,CAACM,OAAO,CAAC,KAAK,KAAK,EAClD;MACE,OAAO,KAAK;IAChB;EACJ;EAEA,OAAO,IAAI;AACf,CAAC;;AAED;AACA;AACA;AACA;AAHA;AAIO,MAAMC,gBAAgB,GAAG,OAAOpB,OAAmB,EAAEa,KAAe,KAAoB;EAC3F,IAAI,MAAMD,mBAAmB,CAACZ,OAAO,EAAEa,KAAK,CAAC,EAAE;IAC3C;EACJ;EACA,MAAM,IAAIQ,+BAAkB,CAAC;IACzBC,IAAI,EAAE;MACFC,MAAM,EAAG,gCAA+BV,KAAK,CAACM,OAAQ;IAC1D;EACJ,CAAC,CAAC;AACN,CAAC;AAAC"}

package/utils/ownership.d.ts

@@ -1,8 +0,0 @@
-import { BaseCmsSecurityPermission, CmsContext, CreatedBy } from "../types";
-interface OwnableRecord {
-    createdBy?: CreatedBy;
-    ownedBy?: CreatedBy;
-}
-export declare const checkOwnership: (context: CmsContext, permission: BaseCmsSecurityPermission, record: OwnableRecord) => void;
-export declare const validateOwnership: (context: CmsContext, permission: BaseCmsSecurityPermission, record: OwnableRecord) => boolean;
-export {};

package/utils/ownership.js

@@ -1,33 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.validateOwnership = exports.checkOwnership = void 0;
-var _apiSecurity = require("@webiny/api-security");
-const checkOwnership = (context, permission, record) => {
-  var _record$ownedBy, _record$createdBy;
-  if (!permission.own) {
-    return;
-  }
-  const identity = context.security.getIdentity();
-  const owner = identity && ((_record$ownedBy = record.ownedBy) === null || _record$ownedBy === void 0 ? void 0 : _record$ownedBy.id) === identity.id;
-  const creator = identity && ((_record$createdBy = record.createdBy) === null || _record$createdBy === void 0 ? void 0 : _record$createdBy.id) === identity.id;
-  if (!owner && !creator) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `You are not the owner of the record.`
-      }
-    });
-  }
-};
-exports.checkOwnership = checkOwnership;
-const validateOwnership = (context, permission, record) => {
-  try {
-    checkOwnership(context, permission, record);
-    return true;
-  } catch {
-    return false;
-  }
-};
-exports.validateOwnership = validateOwnership;

package/utils/ownership.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["checkOwnership","context","permission","record","own","identity","security","getIdentity","owner","ownedBy","id","creator","createdBy","NotAuthorizedError","data","reason","validateOwnership"],"sources":["ownership.ts"],"sourcesContent":["import { BaseCmsSecurityPermission, CmsContext, CreatedBy } from \"~/types\";\nimport { NotAuthorizedError } from \"@webiny/api-security\";\n\ninterface OwnableRecord {\n    createdBy?: CreatedBy;\n    ownedBy?: CreatedBy;\n}\n\nexport const checkOwnership = (\n    context: CmsContext,\n    permission: BaseCmsSecurityPermission,\n    record: OwnableRecord\n): void => {\n    if (!permission.own) {\n        return;\n    }\n\n    const identity = context.security.getIdentity();\n    const owner = identity && record.ownedBy?.id === identity.id;\n    const creator = identity && record.createdBy?.id === identity.id;\n\n    if (!owner && !creator) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: `You are not the owner of the record.`\n            }\n        });\n    }\n};\n\nexport const validateOwnership = (\n    context: CmsContext,\n    permission: BaseCmsSecurityPermission,\n    record: OwnableRecord\n): boolean => {\n    try {\n        checkOwnership(context, permission, record);\n        return true;\n    } catch {\n        return false;\n    }\n};\n"],"mappings":";;;;;;AACA;AAOO,MAAMA,cAAc,GAAG,CAC1BC,OAAmB,EACnBC,UAAqC,EACrCC,MAAqB,KACd;EAAA;EACP,IAAI,CAACD,UAAU,CAACE,GAAG,EAAE;IACjB;EACJ;EAEA,MAAMC,QAAQ,GAAGJ,OAAO,CAACK,QAAQ,CAACC,WAAW,EAAE;EAC/C,MAAMC,KAAK,GAAGH,QAAQ,IAAI,oBAAAF,MAAM,CAACM,OAAO,oDAAd,gBAAgBC,EAAE,MAAKL,QAAQ,CAACK,EAAE;EAC5D,MAAMC,OAAO,GAAGN,QAAQ,IAAI,sBAAAF,MAAM,CAACS,SAAS,sDAAhB,kBAAkBF,EAAE,MAAKL,QAAQ,CAACK,EAAE;EAEhE,IAAI,CAACF,KAAK,IAAI,CAACG,OAAO,EAAE;IACpB,MAAM,IAAIE,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG;MACb;IACJ,CAAC,CAAC;EACN;AACJ,CAAC;AAAC;AAEK,MAAMC,iBAAiB,GAAG,CAC7Bf,OAAmB,EACnBC,UAAqC,EACrCC,MAAqB,KACX;EACV,IAAI;IACAH,cAAc,CAACC,OAAO,EAAEC,UAAU,EAAEC,MAAM,CAAC;IAC3C,OAAO,IAAI;EACf,CAAC,CAAC,MAAM;IACJ,OAAO,KAAK;EAChB;AACJ,CAAC;AAAC"}

package/utils/permissions.d.ts

@@ -1,7 +0,0 @@
-import { BaseCmsSecurityPermission, CmsContext, CmsEntryPermission } from "../types";
-export declare const hasRwd: (permission: BaseCmsSecurityPermission, rwd: string) => boolean;
-export declare const hasPw: (permission: CmsEntryPermission, pw: string) => boolean;
-export declare const checkPermissions: <TPermission extends BaseCmsSecurityPermission = BaseCmsSecurityPermission>(context: CmsContext, name: string, check?: {
-    rwd?: string;
-    pw?: string;
-}) => Promise<TPermission>;

package/utils/permissions.js

@@ -1,91 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.hasRwd = exports.hasPw = exports.checkPermissions = void 0;
-var _apiSecurity = require("@webiny/api-security");
-const hasRwd = (permission, rwd) => {
-  if (typeof permission.rwd !== "string") {
-    return true;
-  }
-  return permission.rwd.includes(rwd);
-};
-exports.hasRwd = hasRwd;
-const hasPw = (permission, pw) => {
-  const isCustom = Object.keys(permission).length > 1; // "name" key is always present
-
-  if (!isCustom) {
-    // Means it's a "full-access" permission.
-    return true;
-  }
-  if (typeof permission.pw !== "string") {
-    return false;
-  }
-  return permission.pw.includes(pw);
-};
-exports.hasPw = hasPw;
-const PW = {
-  p: "publish",
-  u: "unpublish"
-};
-const RWD = {
-  r: "read",
-  w: "write",
-  d: "delete"
-};
-const checkPermissions = async (context, name, check) => {
-  // Check if user is allowed to edit content in current language
-  const contentPermission = await context.security.getPermission("content.i18n");
-  if (!contentPermission) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: "Missing access to content in any locale."
-      }
-    });
-  }
-
-  // We need to check this manually as CMS locale comes from the URL and not the default i18n app.
-  const code = context.cms.getLocale().code;
-  const locales = contentPermission.locales;
-
-  // IMPORTANT: If we have a `contentPermission`, and `locales` key is NOT SET - it means the user has access to all locales.
-  // However, if the the `locales` IS SET - check that it contains the required locale.
-  if (Array.isArray(locales) && !locales.includes(code)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to access content in "${code}."`
-      }
-    });
-  }
-  const permission = await context.security.getPermission(name);
-  if (!permission) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Missing permission "${name}".`
-      }
-    });
-  }
-  if (!check) {
-    return permission;
-  }
-  if (check.rwd && !hasRwd(permission, check.rwd)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to perform "${RWD[check.rwd]}" on "${name}".`
-      }
-    });
-  }
-
-  // p = publish
-  // u = unpublish
-  if (check.pw && !hasPw(permission, check.pw)) {
-    throw new _apiSecurity.NotAuthorizedError({
-      data: {
-        reason: `Not allowed to perform "${PW[check.pw]}" on "${name}".`
-      }
-    });
-  }
-  return permission;
-};
-exports.checkPermissions = checkPermissions;

package/utils/permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["hasRwd","permission","rwd","includes","hasPw","pw","isCustom","Object","keys","length","PW","p","u","RWD","r","w","d","checkPermissions","context","name","check","contentPermission","security","getPermission","NotAuthorizedError","data","reason","code","cms","getLocale","locales","Array","isArray"],"sources":["permissions.ts"],"sourcesContent":["import { BaseCmsSecurityPermission, CmsContext, CmsEntryPermission } from \"~/types\";\nimport { NotAuthorizedError } from \"@webiny/api-security\";\n\nexport const hasRwd = (permission: BaseCmsSecurityPermission, rwd: string): boolean => {\n    if (typeof permission.rwd !== \"string\") {\n        return true;\n    }\n\n    return permission.rwd.includes(rwd);\n};\n\nexport const hasPw = (permission: CmsEntryPermission, pw: string): boolean => {\n    const isCustom = Object.keys(permission).length > 1; // \"name\" key is always present\n\n    if (!isCustom) {\n        // Means it's a \"full-access\" permission.\n        return true;\n    }\n\n    if (typeof permission.pw !== \"string\") {\n        return false;\n    }\n\n    return permission.pw.includes(pw);\n};\n\nconst PW: Record<string, string> = {\n    p: \"publish\",\n    u: \"unpublish\"\n};\n\nconst RWD: Record<string, string> = {\n    r: \"read\",\n    w: \"write\",\n    d: \"delete\"\n};\n\nexport const checkPermissions = async <\n    TPermission extends BaseCmsSecurityPermission = BaseCmsSecurityPermission\n>(\n    context: CmsContext,\n    name: string,\n    check?: { rwd?: string; pw?: string }\n): Promise<TPermission> => {\n    // Check if user is allowed to edit content in current language\n    const contentPermission = await context.security.getPermission(\"content.i18n\");\n\n    if (!contentPermission) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: \"Missing access to content in any locale.\"\n            }\n        });\n    }\n\n    // We need to check this manually as CMS locale comes from the URL and not the default i18n app.\n    const code = context.cms.getLocale().code;\n\n    const locales: string[] = contentPermission.locales;\n\n    // IMPORTANT: If we have a `contentPermission`, and `locales` key is NOT SET - it means the user has access to all locales.\n    // However, if the the `locales` IS SET - check that it contains the required locale.\n    if (Array.isArray(locales) && !locales.includes(code)) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access content in \"${code}.\"`\n            }\n        });\n    }\n\n    const permission = await context.security.getPermission<TPermission>(name);\n\n    if (!permission) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Missing permission \"${name}\".`\n            }\n        });\n    }\n\n    if (!check) {\n        return permission;\n    }\n\n    if (check.rwd && !hasRwd(permission, check.rwd)) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to perform \"${RWD[check.rwd]}\" on \"${name}\".`\n            }\n        });\n    }\n\n    // p = publish\n    // u = unpublish\n    if (check.pw && !hasPw(permission, check.pw)) {\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to perform \"${PW[check.pw]}\" on \"${name}\".`\n            }\n        });\n    }\n\n    return permission;\n};\n"],"mappings":";;;;;;AACA;AAEO,MAAMA,MAAM,GAAG,CAACC,UAAqC,EAAEC,GAAW,KAAc;EACnF,IAAI,OAAOD,UAAU,CAACC,GAAG,KAAK,QAAQ,EAAE;IACpC,OAAO,IAAI;EACf;EAEA,OAAOD,UAAU,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC;AACvC,CAAC;AAAC;AAEK,MAAME,KAAK,GAAG,CAACH,UAA8B,EAAEI,EAAU,KAAc;EAC1E,MAAMC,QAAQ,GAAGC,MAAM,CAACC,IAAI,CAACP,UAAU,CAAC,CAACQ,MAAM,GAAG,CAAC,CAAC,CAAC;;EAErD,IAAI,CAACH,QAAQ,EAAE;IACX;IACA,OAAO,IAAI;EACf;EAEA,IAAI,OAAOL,UAAU,CAACI,EAAE,KAAK,QAAQ,EAAE;IACnC,OAAO,KAAK;EAChB;EAEA,OAAOJ,UAAU,CAACI,EAAE,CAACF,QAAQ,CAACE,EAAE,CAAC;AACrC,CAAC;AAAC;AAEF,MAAMK,EAA0B,GAAG;EAC/BC,CAAC,EAAE,SAAS;EACZC,CAAC,EAAE;AACP,CAAC;AAED,MAAMC,GAA2B,GAAG;EAChCC,CAAC,EAAE,MAAM;EACTC,CAAC,EAAE,OAAO;EACVC,CAAC,EAAE;AACP,CAAC;AAEM,MAAMC,gBAAgB,GAAG,OAG5BC,OAAmB,EACnBC,IAAY,EACZC,KAAqC,KACd;EACvB;EACA,MAAMC,iBAAiB,GAAG,MAAMH,OAAO,CAACI,QAAQ,CAACC,aAAa,CAAC,cAAc,CAAC;EAE9E,IAAI,CAACF,iBAAiB,EAAE;IACpB,MAAM,IAAIG,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAE;MACZ;IACJ,CAAC,CAAC;EACN;;EAEA;EACA,MAAMC,IAAI,GAAGT,OAAO,CAACU,GAAG,CAACC,SAAS,EAAE,CAACF,IAAI;EAEzC,MAAMG,OAAiB,GAAGT,iBAAiB,CAACS,OAAO;;EAEnD;EACA;EACA,IAAIC,KAAK,CAACC,OAAO,CAACF,OAAO,CAAC,IAAI,CAACA,OAAO,CAAC3B,QAAQ,CAACwB,IAAI,CAAC,EAAE;IACnD,MAAM,IAAIH,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,qCAAoCC,IAAK;MACtD;IACJ,CAAC,CAAC;EACN;EAEA,MAAM1B,UAAU,GAAG,MAAMiB,OAAO,CAACI,QAAQ,CAACC,aAAa,CAAcJ,IAAI,CAAC;EAE1E,IAAI,CAAClB,UAAU,EAAE;IACb,MAAM,IAAIuB,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,uBAAsBP,IAAK;MACxC;IACJ,CAAC,CAAC;EACN;EAEA,IAAI,CAACC,KAAK,EAAE;IACR,OAAOnB,UAAU;EACrB;EAEA,IAAImB,KAAK,CAAClB,GAAG,IAAI,CAACF,MAAM,CAACC,UAAU,EAAEmB,KAAK,CAAClB,GAAG,CAAC,EAAE;IAC7C,MAAM,IAAIsB,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,2BAA0Bb,GAAG,CAACO,KAAK,CAAClB,GAAG,CAAE,SAAQiB,IAAK;MACnE;IACJ,CAAC,CAAC;EACN;;EAEA;EACA;EACA,IAAIC,KAAK,CAACf,EAAE,IAAI,CAACD,KAAK,CAACH,UAAU,EAAEmB,KAAK,CAACf,EAAE,CAAC,EAAE;IAC1C,MAAM,IAAImB,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,2BAA0BhB,EAAE,CAACU,KAAK,CAACf,EAAE,CAAE,SAAQc,IAAK;MACjE;IACJ,CAAC,CAAC;EACN;EAEA,OAAOlB,UAAU;AACrB,CAAC;AAAC"}

package/utils/pluralizedTypeName.d.ts

@@ -1 +0,0 @@
-export declare const pluralizedTypeName: (typeName: string) => string;

package/utils/pluralizedTypeName.js

@@ -1,20 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.pluralizedTypeName = void 0;
-var _pluralize = _interopRequireDefault(require("pluralize"));
-// This will make it so if the content model name is a single capitalized letter
-// Ex. A, pluralizedTypeName will capitalize the name to As, instead of AS
-const pluralizedTypeName = typeName => {
-  let pluralizedTypeName;
-  if (typeName.length === 1) {
-    pluralizedTypeName = `${typeName}s`;
-  } else {
-    pluralizedTypeName = (0, _pluralize.default)(typeName);
-  }
-  return pluralizedTypeName;
-};
-exports.pluralizedTypeName = pluralizedTypeName;

package/utils/pluralizedTypeName.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["pluralizedTypeName","typeName","length","pluralize"],"sources":["pluralizedTypeName.ts"],"sourcesContent":["import pluralize from \"pluralize\";\n\n// This will make it so if the content model name is a single capitalized letter\n// Ex. A, pluralizedTypeName will capitalize the name to As, instead of AS\nexport const pluralizedTypeName = (typeName: string): string => {\n    let pluralizedTypeName;\n    if (typeName.length === 1) {\n        pluralizedTypeName = `${typeName}s`;\n    } else {\n        pluralizedTypeName = pluralize(typeName);\n    }\n    return pluralizedTypeName;\n};\n"],"mappings":";;;;;;;AAAA;AAEA;AACA;AACO,MAAMA,kBAAkB,GAAIC,QAAgB,IAAa;EAC5D,IAAID,kBAAkB;EACtB,IAAIC,QAAQ,CAACC,MAAM,KAAK,CAAC,EAAE;IACvBF,kBAAkB,GAAI,GAAEC,QAAS,GAAE;EACvC,CAAC,MAAM;IACHD,kBAAkB,GAAG,IAAAG,kBAAS,EAACF,QAAQ,CAAC;EAC5C;EACA,OAAOD,kBAAkB;AAC7B,CAAC;AAAC"}

package/validators/dynamicZone.d.ts

@@ -1,2 +0,0 @@
-import { CmsModelFieldValidatorPlugin } from "../types";
-export declare const createDynamicZoneValidator: () => CmsModelFieldValidatorPlugin;

package/validators/dynamicZone.js

@@ -1,20 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createDynamicZoneValidator = void 0;
-const createDynamicZoneValidator = () => {
-  return {
-    type: "cms-model-field-validator",
-    name: "cms-model-field-validator-dynamic-zone",
-    validator: {
-      name: "dynamicZone",
-      validate() {
-        // TODO: implement validation.
-        return Promise.resolve(true);
-      }
-    }
-  };
-};
-exports.createDynamicZoneValidator = createDynamicZoneValidator;

package/validators/dynamicZone.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["createDynamicZoneValidator","type","name","validator","validate","Promise","resolve"],"sources":["dynamicZone.ts"],"sourcesContent":["import { CmsModelFieldValidatorPlugin } from \"~/types\";\n\nexport const createDynamicZoneValidator = (): CmsModelFieldValidatorPlugin => {\n    return {\n        type: \"cms-model-field-validator\",\n        name: \"cms-model-field-validator-dynamic-zone\",\n        validator: {\n            name: \"dynamicZone\",\n            validate() {\n                // TODO: implement validation.\n                return Promise.resolve(true);\n            }\n        }\n    };\n};\n"],"mappings":";;;;;;AAEO,MAAMA,0BAA0B,GAAG,MAAoC;EAC1E,OAAO;IACHC,IAAI,EAAE,2BAA2B;IACjCC,IAAI,EAAE,wCAAwC;IAC9CC,SAAS,EAAE;MACPD,IAAI,EAAE,aAAa;MACnBE,QAAQ,GAAG;QACP;QACA,OAAOC,OAAO,CAACC,OAAO,CAAC,IAAI,CAAC;MAChC;IACJ;EACJ,CAAC;AACL,CAAC;AAAC"}