@webiny/api-headless-cms 0.0.0-unstable.d7f521b032 → 0.0.0-unstable.de38392959

package/crud/contentModelGroup.crud.js

@@ -5,108 +5,116 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createModelGroupsCrud = void 0;
-var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2"));
-var _mdbid = _interopRequireDefault(require("mdbid"));
-var _handlerGraphql = require("@webiny/handler-graphql");
 var _error = _interopRequireDefault(require("@webiny/error"));
 var _CmsGroupPlugin = require("../plugins/CmsGroupPlugin");
 var _pubsub = require("@webiny/pubsub");
 var _beforeUpdate = require("./contentModelGroup/beforeUpdate");
 var _beforeCreate = require("./contentModelGroup/beforeCreate");
 var _beforeDelete = require("./contentModelGroup/beforeDelete");
-var _dataloader = _interopRequireDefault(require("dataloader"));
-var _permissions = require("../utils/permissions");
-var _ownership = require("../utils/ownership");
-var _access = require("../utils/access");
 var _validation = require("./contentModelGroup/validation");
 var _utils = require("@webiny/utils");
-/**
- * Package mdbid does not have types.
- */
-// @ts-ignore
-
+var _filterAsync = require("../utils/filterAsync");
+var _utils2 = require("../utils");
+var _listGroupsFromDatabase = require("./contentModelGroup/listGroupsFromDatabase");
+var _handlerGraphql = require("@webiny/handler-graphql");
 const createModelGroupsCrud = params => {
   const {
     getTenant,
     getIdentity,
     getLocale,
     storageOperations,
+    modelGroupsPermissions,
     context
   } = params;
-  const dataLoaders = {
-    listGroups: new _dataloader.default(async () => {
-      const tenant = getTenant().id;
-      const locale = getLocale().code;
-      const pluginsGroups = getGroupsAsPlugins().map(group => {
-        return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, group), {}, {
-          tenant: group.tenant || tenant,
-          locale: group.locale || locale
-        });
-      });
-      const groups = await storageOperations.groups.list({
-        where: {
-          tenant: getTenant().id,
-          locale: getLocale().code
-        }
-      });
-      return [groups.concat(pluginsGroups)];
-    })
+  const filterGroup = async group => {
+    if (!group) {
+      return false;
+    }
+    const ownsGroup = await modelGroupsPermissions.ensure({
+      owns: group.createdBy
+    }, {
+      throw: false
+    });
+    if (!ownsGroup) {
+      return false;
+    }
+    return await modelGroupsPermissions.canAccessGroup({
+      group
+    });
   };
+  const listDatabaseGroupsCache = (0, _utils2.createMemoryCache)();
+  const listFilteredDatabaseGroupsCache = (0, _utils2.createMemoryCache)();
+  const listPluginGroupsCache = (0, _utils2.createMemoryCache)();
   const clearGroupsCache = () => {
-    for (const loader of Object.values(dataLoaders)) {
-      loader.clearAll();
-    }
+    listPluginGroupsCache.clear();
+    listDatabaseGroupsCache.clear();
+    listFilteredDatabaseGroupsCache.clear();
   };
-  const getGroupsAsPlugins = () => {
-    const tenant = getTenant().id;
-    const locale = getLocale().code;
-    return context.plugins.byType(_CmsGroupPlugin.CmsGroupPlugin.type)
+  const fetchPluginGroups = (tenant, locale) => {
+    const pluginGroups = context.plugins.byType(_CmsGroupPlugin.CmsGroupPlugin.type);
+    const cacheKey = (0, _utils2.createCacheKey)({
+      tenant,
+      locale,
+      identity: context.security.isAuthorizationEnabled() ? getIdentity()?.id : undefined,
+      groups: pluginGroups.map(({
+        contentModelGroup: group
+      }) => {
+        return `${group.id}#${group.slug}#${group.savedOn || "unknown"}`;
+      }).join("/")
+    });
+    return listPluginGroupsCache.getOrSet(cacheKey, async () => {
+      const groups = pluginGroups
+      /**
+       * We need to filter out groups that are not for this tenant or locale.
+       * If it does not have tenant or locale define, it is for every locale and tenant
+       */.filter(plugin => {
+        const {
+          tenant: t,
+          locale: l
+        } = plugin.contentModelGroup;
+        if (t && t !== tenant) {
+          return false;
+        } else if (l && l !== locale) {
+          return false;
+        }
+        return true;
+      }).map(plugin => {
+        return {
+          ...plugin.contentModelGroup,
+          tenant,
+          locale,
+          webinyVersion: context.WEBINY_VERSION
+        };
+      });
+      return (0, _filterAsync.filterAsync)(groups, filterGroup);
+    });
+  };
+  const fetchGroups = async (tenant, locale) => {
+    const pluginGroups = await fetchPluginGroups(tenant, locale);
     /**
-     * We need to filter out groups that are not for this tenant or locale.
-     * If it does not have tenant or locale define, it is for every locale and tenant
-     */.filter(plugin => {
-      const {
-        tenant: t,
-        locale: l
-      } = plugin.contentModelGroup;
-      if (t && t !== tenant) {
-        return false;
-      } else if (l && l !== locale) {
-        return false;
-      }
-      return true;
-    }).map(plugin => {
-      return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, plugin.contentModelGroup), {}, {
+     * Maybe we can cache based on permissions, not the identity id?
+     *
+     * TODO: @adrian please check if possible.
+     */
+    const cacheKey = (0, _utils2.createCacheKey)({
+      tenant,
+      locale
+    });
+    const databaseGroups = await listDatabaseGroupsCache.getOrSet(cacheKey, async () => {
+      return await (0, _listGroupsFromDatabase.listGroupsFromDatabase)({
+        storageOperations,
         tenant,
-        locale,
-        webinyVersion: context.WEBINY_VERSION
+        locale
       });
     });
-  };
-  const checkPermissions = check => {
-    return (0, _permissions.checkPermissions)(context, "cms.contentModelGroup", {
-      rwd: check
+    const filteredCacheKey = (0, _utils2.createCacheKey)({
+      dbCacheKey: cacheKey.get(),
+      identity: context.security.isAuthorizationEnabled() ? getIdentity()?.id : undefined
     });
-  };
-  const groupsGet = async id => {
-    const groups = await dataLoaders.listGroups.load("listGroups");
-    const group = groups.find(g => g.id === id);
-    if (!group) {
-      throw new _handlerGraphql.NotFoundError(`Cms Group "${id}" was not found!`);
-    }
-    return group;
-  };
-  const groupsList = async params => {
-    const {
-      where
-    } = params || {};
-    try {
-      return await dataLoaders.listGroups.load("listGroups");
-    } catch (ex) {
-      throw new _error.default(ex.message, ex.code || "LIST_ERROR", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
-        where
-      }));
-    }
+    const groups = await listFilteredDatabaseGroupsCache.getOrSet(filteredCacheKey, async () => {
+      return (0, _filterAsync.filterAsync)(databaseGroups, filterGroup);
+    });
+    return groups.concat(pluginGroups);
   };
 
   /**
@@ -145,19 +153,179 @@ const createModelGroupsCrud = params => {
     plugins: context.plugins,
     storageOperations
   });
-  return {
-    /**
-     * Deprecated - will be removed in 5.36.0
-     */
-    onBeforeGroupCreate: onGroupBeforeCreate,
-    onAfterGroupCreate: onGroupAfterCreate,
-    onBeforeGroupUpdate: onGroupBeforeUpdate,
-    onAfterGroupUpdate: onGroupAfterUpdate,
-    onBeforeGroupDelete: onGroupBeforeDelete,
-    onAfterGroupDelete: onGroupAfterDelete,
+  /**
+   * CRUD Methods
+   */
+  const getGroup = async id => {
+    await modelGroupsPermissions.ensure({
+      rwd: "r"
+    });
+    const groups = await context.security.withoutAuthorization(async () => {
+      return fetchGroups(getTenant().id, getLocale().code);
+    });
+    const group = groups.find(group => group.id === id);
+    if (!group) {
+      throw new _handlerGraphql.NotFoundError(`Cms Group "${id}" was not found!`);
+    }
+    await modelGroupsPermissions.ensure({
+      owns: group.createdBy
+    });
+    await modelGroupsPermissions.ensureCanAccessGroup({
+      group
+    });
+    return group;
+  };
+  const listGroups = async params => {
+    const {
+      where
+    } = params || {};
+    const {
+      tenant,
+      locale
+    } = where || {};
+    await modelGroupsPermissions.ensure({
+      rwd: "r"
+    });
+    return fetchGroups(tenant || getTenant().id, locale || getLocale().code);
+  };
+  const createGroup = async input => {
+    await modelGroupsPermissions.ensure({
+      rwd: "w"
+    });
+    const result = await (0, _validation.createGroupCreateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = result.data;
+    const identity = getIdentity();
+    const id = data.id || (0, _utils.mdbid)();
+    const group = {
+      ...data,
+      id,
+      tenant: getTenant().id,
+      locale: getLocale().code,
+      createdOn: new Date().toISOString(),
+      savedOn: new Date().toISOString(),
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      webinyVersion: context.WEBINY_VERSION
+    };
+    try {
+      await onGroupBeforeCreate.publish({
+        group
+      });
+      const result = await storageOperations.groups.create({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterCreate.publish({
+        group: result
+      });
+      return group;
+    } catch (ex) {
+      await onGroupCreateError.publish({
+        input,
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message || "Could not save data model group.", ex.code || "ERROR_ON_CREATE", {
+        ...(ex.data || {}),
+        group,
+        input
+      });
+    }
+  };
+  const updateGroup = async (id, input) => {
+    await modelGroupsPermissions.ensure({
+      rwd: "w"
+    });
+    const original = await getGroup(id);
+    await modelGroupsPermissions.ensure({
+      owns: original.createdBy
+    });
+    const result = await (0, _validation.createGroupUpdateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = result.data;
+
     /**
-     * Released in 5.34.0
+     * No need to continue if no values were changed
      */
+    if (Object.keys(data).length === 0) {
+      return original;
+    }
+    const group = {
+      ...original,
+      ...data,
+      locale: getLocale().code,
+      tenant: getTenant().id,
+      savedOn: new Date().toISOString()
+    };
+    try {
+      await onGroupBeforeUpdate.publish({
+        original,
+        group
+      });
+      const updatedGroup = await storageOperations.groups.update({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterUpdate.publish({
+        original,
+        group: updatedGroup
+      });
+      return updatedGroup;
+    } catch (ex) {
+      await onGroupUpdateError.publish({
+        input,
+        original,
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message, ex.code || "UPDATE_ERROR", {
+        error: ex,
+        original,
+        group,
+        input
+      });
+    }
+  };
+  const deleteGroup = async id => {
+    await modelGroupsPermissions.ensure({
+      rwd: "d"
+    });
+    const group = await getGroup(id);
+    await modelGroupsPermissions.ensure({
+      owns: group.createdBy
+    });
+    try {
+      await onGroupBeforeDelete.publish({
+        group
+      });
+      await storageOperations.groups.delete({
+        group
+      });
+      clearGroupsCache();
+      await onGroupAfterDelete.publish({
+        group
+      });
+    } catch (ex) {
+      await onGroupDeleteError.publish({
+        group,
+        error: ex
+      });
+      throw new _error.default(ex.message, ex.code || "DELETE_ERROR", {
+        ...(ex.data || {}),
+        id
+      });
+    }
+    return true;
+  };
+  return {
     onGroupBeforeCreate,
     onGroupAfterCreate,
     onGroupCreateError,
@@ -169,156 +337,32 @@ const createModelGroupsCrud = params => {
     onGroupDeleteError,
     clearGroupsCache,
     getGroup: async id => {
-      const permission = await checkPermissions("r");
-      const group = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, group);
-      (0, _access.validateGroupAccess)(context, permission, group);
-      return group;
+      return context.benchmark.measure("headlessCms.crud.groups.getGroup", async () => {
+        return getGroup(id);
+      });
     },
     listGroups: async params => {
-      const {
-        where
-      } = params || {};
-      const {
-        tenant,
-        locale
-      } = where || {};
-      const permission = await checkPermissions("r");
-      const response = await groupsList((0, _objectSpread2.default)((0, _objectSpread2.default)({}, params || {}), {}, {
-        where: (0, _objectSpread2.default)((0, _objectSpread2.default)({}, where || {}), {}, {
-          tenant: tenant || getTenant().id,
-          locale: locale || getLocale().code
-        })
-      }));
-      return response.filter(group => {
-        if (!(0, _ownership.validateOwnership)(context, permission, group)) {
-          return false;
-        }
-        return (0, _access.validateGroupAccess)(context, permission, group);
+      return context.benchmark.measure("headlessCms.crud.groups.listGroups", async () => {
+        return listGroups(params);
       });
     },
     createGroup: async input => {
-      await checkPermissions("w");
-      const result = await (0, _validation.createGroupCreateValidation)().safeParseAsync(input);
-      if (!result.success) {
-        throw (0, _utils.createZodError)(result.error);
-      }
-      const data = result.data;
-      const identity = getIdentity();
-      const id = (0, _mdbid.default)();
-      const group = (0, _objectSpread2.default)((0, _objectSpread2.default)({}, data), {}, {
-        id,
-        tenant: getTenant().id,
-        locale: getLocale().code,
-        createdOn: new Date().toISOString(),
-        savedOn: new Date().toISOString(),
-        createdBy: {
-          id: identity.id,
-          displayName: identity.displayName,
-          type: identity.type
-        },
-        webinyVersion: context.WEBINY_VERSION
+      return context.benchmark.measure("headlessCms.crud.groups.createGroup", async () => {
+        return createGroup(input);
       });
-      try {
-        await onGroupBeforeCreate.publish({
-          group
-        });
-        const result = await storageOperations.groups.create({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterCreate.publish({
-          group: result
-        });
-        return group;
-      } catch (ex) {
-        await onGroupCreateError.publish({
-          input,
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message || "Could not save data model group.", ex.code || "ERROR_ON_CREATE", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
-          group,
-          input
-        }));
-      }
     },
     updateGroup: async (id, input) => {
-      const permission = await checkPermissions("w");
-      const original = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, original);
-      const result = await (0, _validation.createGroupUpdateValidation)().safeParseAsync(input);
-      if (!result.success) {
-        throw (0, _utils.createZodError)(result.error);
-      }
-      const data = result.data;
-
-      /**
-       * No need to continue if no values were changed
-       */
-      if (Object.keys(data).length === 0) {
-        return original;
-      }
-      const group = (0, _objectSpread2.default)((0, _objectSpread2.default)((0, _objectSpread2.default)({}, original), data), {}, {
-        locale: getLocale().code,
-        tenant: getTenant().id,
-        savedOn: new Date().toISOString()
+      return context.benchmark.measure("headlessCms.crud.groups.updateGroup", async () => {
+        return updateGroup(id, input);
       });
-      try {
-        await onGroupBeforeUpdate.publish({
-          original,
-          group
-        });
-        const updatedGroup = await storageOperations.groups.update({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterUpdate.publish({
-          original,
-          group: updatedGroup
-        });
-        return updatedGroup;
-      } catch (ex) {
-        await onGroupUpdateError.publish({
-          input,
-          original,
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message, ex.code || "UPDATE_ERROR", {
-          error: ex,
-          original,
-          group,
-          input
-        });
-      }
     },
     deleteGroup: async id => {
-      const permission = await checkPermissions("d");
-      const group = await groupsGet(id);
-      (0, _ownership.checkOwnership)(context, permission, group);
-      try {
-        await onGroupBeforeDelete.publish({
-          group
-        });
-        await storageOperations.groups.delete({
-          group
-        });
-        clearGroupsCache();
-        await onGroupAfterDelete.publish({
-          group
-        });
-      } catch (ex) {
-        await onGroupDeleteError.publish({
-          group,
-          error: ex
-        });
-        throw new _error.default(ex.message, ex.code || "DELETE_ERROR", (0, _objectSpread2.default)((0, _objectSpread2.default)({}, ex.data || {}), {}, {
-          id
-        }));
-      }
-      return true;
+      return context.benchmark.measure("headlessCms.crud.groups.deleteGroup", async () => {
+        return deleteGroup(id);
+      });
     }
   };
 };
-exports.createModelGroupsCrud = createModelGroupsCrud;
+exports.createModelGroupsCrud = createModelGroupsCrud;
+
+//# sourceMappingURL=contentModelGroup.crud.js.map