@webiny/api-headless-cms 0.0.0-unstable.e622468070 → 0.0.0-unstable.e6f0dc8ca7

package/constants.d.ts

@@ -1,4 +1,4 @@
-import type { CmsIdentity } from "./types/index.js";
+import type { CmsIdentity, ICmsEntryLive } from "./types/index.js";
 export declare const ROOT_FOLDER = "root";
 export declare const CMS_MODEL_SINGLETON_TAG = "singleEntry";
 export declare const ENTRY_META_FIELDS: readonly ["createdOn", "modifiedOn", "savedOn", "deletedOn", "restoredOn", "firstPublishedOn", "lastPublishedOn", "createdBy", "modifiedBy", "savedBy", "deletedBy", "restoredBy", "firstPublishedBy", "lastPublishedBy", "revisionCreatedOn", "revisionModifiedOn", "revisionSavedOn", "revisionDeletedOn", "revisionRestoredOn", "revisionFirstPublishedOn", "revisionLastPublishedOn", "revisionCreatedBy", "revisionModifiedBy", "revisionSavedBy", "revisionDeletedBy", "revisionRestoredBy", "revisionFirstPublishedBy", "revisionLastPublishedBy"];
@@ -32,6 +32,7 @@ export interface RecordWithEntryMetaFields {
     restoredBy: CmsIdentity | null;
     firstPublishedBy: CmsIdentity | null;
     lastPublishedBy: CmsIdentity | null;
+    live: ICmsEntryLive | null;
 }
 export declare const pickEntryMetaFields: (object: Partial<RecordWithEntryMetaFields>, filter?: (fieldName: EntryMetaFieldName | string) => boolean) => Partial<RecordWithEntryMetaFields>;
 export declare const isNullableEntryMetaField: (fieldName: string) => boolean;

package/constants.js

@@ -21,6 +21,10 @@ export const pickEntryMetaFields = (object, filter) => {
       });
     }
   }
+  /**
+   * Also add live field, as it's not part of entry meta fields, but it's required to be transfered.
+   */
+  pickedEntryMetaFields.live = object.live;
   return pickedEntryMetaFields;
 };
 export const isNullableEntryMetaField = fieldName => {

package/constants.js.map

@@ -1 +1 @@
-{"version":3,"names":["ROOT_FOLDER","CMS_MODEL_SINGLETON_TAG","ENTRY_META_FIELDS","pickEntryMetaFields","object","filter","pickedEntryMetaFields","entryMetaFieldName","fieldExists","undefined","mustPick","Object","assign","isNullableEntryMetaField","fieldName","lcFieldName","toLowerCase","includes","isNonNullableEntryMetaField","isDateTimeEntryMetaField","endsWith","isIdentityEntryMetaField","isRevisionEntryMetaField","startsWith","isEntryLevelEntryMetaField","isDeletedEntryMetaField","isRestoredEntryMetaField"],"sources":["constants.ts"],"sourcesContent":["import type { CmsIdentity } from \"~/types/index.js\";\n\nexport const ROOT_FOLDER = \"root\";\n\nexport const CMS_MODEL_SINGLETON_TAG = \"singleEntry\";\n\n// Content entries - xOn and xBy meta fields.\nexport const ENTRY_META_FIELDS = [\n    // Entry-level meta fields.\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"deletedOn\",\n    \"restoredOn\",\n    \"firstPublishedOn\",\n    \"lastPublishedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\",\n    \"deletedBy\",\n    \"restoredBy\",\n    \"firstPublishedBy\",\n    \"lastPublishedBy\",\n\n    // Revision-level meta fields.\n    \"revisionCreatedOn\",\n    \"revisionModifiedOn\",\n    \"revisionSavedOn\",\n    \"revisionDeletedOn\",\n    \"revisionRestoredOn\",\n    \"revisionFirstPublishedOn\",\n    \"revisionLastPublishedOn\",\n    \"revisionCreatedBy\",\n    \"revisionModifiedBy\",\n    \"revisionSavedBy\",\n    \"revisionDeletedBy\",\n    \"revisionRestoredBy\",\n    \"revisionFirstPublishedBy\",\n    \"revisionLastPublishedBy\"\n] as const;\n\nexport type EntryMetaFieldName = (typeof ENTRY_META_FIELDS)[number];\n\nexport interface RecordWithEntryMetaFields {\n    revisionCreatedOn: string;\n    revisionSavedOn: string;\n    revisionModifiedOn: string | null;\n    revisionDeletedOn: string | null;\n    revisionRestoredOn: string | null;\n    revisionFirstPublishedOn: string | null;\n    revisionLastPublishedOn: string | null;\n    revisionCreatedBy: CmsIdentity;\n    revisionSavedBy: CmsIdentity;\n    revisionModifiedBy: CmsIdentity | null;\n    revisionDeletedBy: CmsIdentity | null;\n    revisionRestoredBy: CmsIdentity | null;\n    revisionFirstPublishedBy: CmsIdentity | null;\n    revisionLastPublishedBy: CmsIdentity | null;\n\n    // Entry-level meta fields.\n    createdOn: string;\n    savedOn: string;\n    modifiedOn: string | null;\n    deletedOn: string | null;\n    restoredOn: string | null;\n    firstPublishedOn: string | null;\n    lastPublishedOn: string | null;\n    createdBy: CmsIdentity;\n    savedBy: CmsIdentity;\n    modifiedBy: CmsIdentity | null;\n    deletedBy: CmsIdentity | null;\n    restoredBy: CmsIdentity | null;\n    firstPublishedBy: CmsIdentity | null;\n    lastPublishedBy: CmsIdentity | null;\n}\n\nexport const pickEntryMetaFields = (\n    object: Partial<RecordWithEntryMetaFields>,\n    filter?: (fieldName: EntryMetaFieldName | string) => boolean\n) => {\n    const pickedEntryMetaFields: Partial<RecordWithEntryMetaFields> = {};\n    for (const entryMetaFieldName of ENTRY_META_FIELDS) {\n        const fieldExists = entryMetaFieldName in object;\n        if (!fieldExists) {\n            object[entryMetaFieldName] = undefined;\n        }\n\n        const mustPick = !filter || filter(entryMetaFieldName);\n        if (mustPick) {\n            Object.assign(pickedEntryMetaFields, {\n                [entryMetaFieldName]: object[entryMetaFieldName]\n            });\n        }\n    }\n\n    return pickedEntryMetaFields;\n};\n\nexport const isNullableEntryMetaField = (fieldName: string) => {\n    // Only modifiedX, publishedX, deletedX fields are nullable.\n    const lcFieldName = fieldName.toLowerCase();\n    return (\n        lcFieldName.includes(\"modified\") ||\n        lcFieldName.includes(\"published\") ||\n        lcFieldName.includes(\"deleted\") ||\n        lcFieldName.includes(\"restored\")\n    );\n};\n\nexport const isNonNullableEntryMetaField = (fieldName: string) => {\n    return !isNullableEntryMetaField(fieldName);\n};\n\nexport const isDateTimeEntryMetaField = (fieldName: string) => {\n    // Only field ending with \"On\" are date/time fields.\n    return fieldName.endsWith(\"On\");\n};\n\nexport const isIdentityEntryMetaField = (fieldName: string) => {\n    // Only field ending with \"On\" are date/time fields.\n    return fieldName.endsWith(\"By\");\n};\n\nexport const isRevisionEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        fieldName.startsWith(\"revision\")\n    );\n};\n\nexport const isEntryLevelEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        !fieldName.startsWith(\"revision\")\n    );\n};\n\nexport const isDeletedEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) && fieldName.includes(\"deleted\")\n    );\n};\n\nexport const isRestoredEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        fieldName.includes(\"restored\")\n    );\n};\n"],"mappings":"AAEA,OAAO,MAAMA,WAAW,GAAG,MAAM;AAEjC,OAAO,MAAMC,uBAAuB,GAAG,aAAa;;AAEpD;AACA,OAAO,MAAMC,iBAAiB,GAAG;AAC7B;AACA,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB;AAEjB;AACA,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,CACnB;AAqCV,OAAO,MAAMC,mBAAmB,GAAGA,CAC/BC,MAA0C,EAC1CC,MAA4D,KAC3D;EACD,MAAMC,qBAAyD,GAAG,CAAC,CAAC;EACpE,KAAK,MAAMC,kBAAkB,IAAIL,iBAAiB,EAAE;IAChD,MAAMM,WAAW,GAAGD,kBAAkB,IAAIH,MAAM;IAChD,IAAI,CAACI,WAAW,EAAE;MACdJ,MAAM,CAACG,kBAAkB,CAAC,GAAGE,SAAS;IAC1C;IAEA,MAAMC,QAAQ,GAAG,CAACL,MAAM,IAAIA,MAAM,CAACE,kBAAkB,CAAC;IACtD,IAAIG,QAAQ,EAAE;MACVC,MAAM,CAACC,MAAM,CAACN,qBAAqB,EAAE;QACjC,CAACC,kBAAkB,GAAGH,MAAM,CAACG,kBAAkB;MACnD,CAAC,CAAC;IACN;EACJ;EAEA,OAAOD,qBAAqB;AAChC,CAAC;AAED,OAAO,MAAMO,wBAAwB,GAAIC,SAAiB,IAAK;EAC3D;EACA,MAAMC,WAAW,GAAGD,SAAS,CAACE,WAAW,CAAC,CAAC;EAC3C,OACID,WAAW,CAACE,QAAQ,CAAC,UAAU,CAAC,IAChCF,WAAW,CAACE,QAAQ,CAAC,WAAW,CAAC,IACjCF,WAAW,CAACE,QAAQ,CAAC,SAAS,CAAC,IAC/BF,WAAW,CAACE,QAAQ,CAAC,UAAU,CAAC;AAExC,CAAC;AAED,OAAO,MAAMC,2BAA2B,GAAIJ,SAAiB,IAAK;EAC9D,OAAO,CAACD,wBAAwB,CAACC,SAAS,CAAC;AAC/C,CAAC;AAED,OAAO,MAAMK,wBAAwB,GAAIL,SAAiB,IAAK;EAC3D;EACA,OAAOA,SAAS,CAACM,QAAQ,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,OAAO,MAAMC,wBAAwB,GAAIP,SAAiB,IAAK;EAC3D;EACA,OAAOA,SAAS,CAACM,QAAQ,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,OAAO,MAAME,wBAAwB,GAAIR,SAAiB,IAAK;EAC3D,OACIZ,iBAAiB,CAACe,QAAQ,CAACH,SAA+B,CAAC,IAC3DA,SAAS,CAACS,UAAU,CAAC,UAAU,CAAC;AAExC,CAAC;AAED,OAAO,MAAMC,0BAA0B,GAAIV,SAAiB,IAAK;EAC7D,OACIZ,iBAAiB,CAACe,QAAQ,CAACH,SAA+B,CAAC,IAC3D,CAACA,SAAS,CAACS,UAAU,CAAC,UAAU,CAAC;AAEzC,CAAC;AAED,OAAO,MAAME,uBAAuB,GAAIX,SAAiB,IAAK;EAC1D,OACIZ,iBAAiB,CAACe,QAAQ,CAACH,SAA+B,CAAC,IAAIA,SAAS,CAACG,QAAQ,CAAC,SAAS,CAAC;AAEpG,CAAC;AAED,OAAO,MAAMS,wBAAwB,GAAIZ,SAAiB,IAAK;EAC3D,OACIZ,iBAAiB,CAACe,QAAQ,CAACH,SAA+B,CAAC,IAC3DA,SAAS,CAACG,QAAQ,CAAC,UAAU,CAAC;AAEtC,CAAC","ignoreList":[]}
+{"version":3,"names":["ROOT_FOLDER","CMS_MODEL_SINGLETON_TAG","ENTRY_META_FIELDS","pickEntryMetaFields","object","filter","pickedEntryMetaFields","entryMetaFieldName","fieldExists","undefined","mustPick","Object","assign","live","isNullableEntryMetaField","fieldName","lcFieldName","toLowerCase","includes","isNonNullableEntryMetaField","isDateTimeEntryMetaField","endsWith","isIdentityEntryMetaField","isRevisionEntryMetaField","startsWith","isEntryLevelEntryMetaField","isDeletedEntryMetaField","isRestoredEntryMetaField"],"sources":["constants.ts"],"sourcesContent":["import type { CmsIdentity, ICmsEntryLive } from \"~/types/index.js\";\n\nexport const ROOT_FOLDER = \"root\";\n\nexport const CMS_MODEL_SINGLETON_TAG = \"singleEntry\";\n\n// Content entries - xOn and xBy meta fields.\nexport const ENTRY_META_FIELDS = [\n    // Entry-level meta fields.\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"deletedOn\",\n    \"restoredOn\",\n    \"firstPublishedOn\",\n    \"lastPublishedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\",\n    \"deletedBy\",\n    \"restoredBy\",\n    \"firstPublishedBy\",\n    \"lastPublishedBy\",\n\n    // Revision-level meta fields.\n    \"revisionCreatedOn\",\n    \"revisionModifiedOn\",\n    \"revisionSavedOn\",\n    \"revisionDeletedOn\",\n    \"revisionRestoredOn\",\n    \"revisionFirstPublishedOn\",\n    \"revisionLastPublishedOn\",\n    \"revisionCreatedBy\",\n    \"revisionModifiedBy\",\n    \"revisionSavedBy\",\n    \"revisionDeletedBy\",\n    \"revisionRestoredBy\",\n    \"revisionFirstPublishedBy\",\n    \"revisionLastPublishedBy\"\n] as const;\n\nexport type EntryMetaFieldName = (typeof ENTRY_META_FIELDS)[number];\n\nexport interface RecordWithEntryMetaFields {\n    revisionCreatedOn: string;\n    revisionSavedOn: string;\n    revisionModifiedOn: string | null;\n    revisionDeletedOn: string | null;\n    revisionRestoredOn: string | null;\n    revisionFirstPublishedOn: string | null;\n    revisionLastPublishedOn: string | null;\n    revisionCreatedBy: CmsIdentity;\n    revisionSavedBy: CmsIdentity;\n    revisionModifiedBy: CmsIdentity | null;\n    revisionDeletedBy: CmsIdentity | null;\n    revisionRestoredBy: CmsIdentity | null;\n    revisionFirstPublishedBy: CmsIdentity | null;\n    revisionLastPublishedBy: CmsIdentity | null;\n\n    // Entry-level meta fields.\n    createdOn: string;\n    savedOn: string;\n    modifiedOn: string | null;\n    deletedOn: string | null;\n    restoredOn: string | null;\n    firstPublishedOn: string | null;\n    lastPublishedOn: string | null;\n    createdBy: CmsIdentity;\n    savedBy: CmsIdentity;\n    modifiedBy: CmsIdentity | null;\n    deletedBy: CmsIdentity | null;\n    restoredBy: CmsIdentity | null;\n    firstPublishedBy: CmsIdentity | null;\n    lastPublishedBy: CmsIdentity | null;\n    live: ICmsEntryLive | null;\n}\n\nexport const pickEntryMetaFields = (\n    object: Partial<RecordWithEntryMetaFields>,\n    filter?: (fieldName: EntryMetaFieldName | string) => boolean\n) => {\n    const pickedEntryMetaFields: Partial<RecordWithEntryMetaFields> = {};\n    for (const entryMetaFieldName of ENTRY_META_FIELDS) {\n        const fieldExists = entryMetaFieldName in object;\n        if (!fieldExists) {\n            object[entryMetaFieldName] = undefined;\n        }\n\n        const mustPick = !filter || filter(entryMetaFieldName);\n        if (mustPick) {\n            Object.assign(pickedEntryMetaFields, {\n                [entryMetaFieldName]: object[entryMetaFieldName]\n            });\n        }\n    }\n    /**\n     * Also add live field, as it's not part of entry meta fields, but it's required to be transfered.\n     */\n    pickedEntryMetaFields.live = object.live;\n\n    return pickedEntryMetaFields;\n};\n\nexport const isNullableEntryMetaField = (fieldName: string) => {\n    // Only modifiedX, publishedX, deletedX fields are nullable.\n    const lcFieldName = fieldName.toLowerCase();\n    return (\n        lcFieldName.includes(\"modified\") ||\n        lcFieldName.includes(\"published\") ||\n        lcFieldName.includes(\"deleted\") ||\n        lcFieldName.includes(\"restored\")\n    );\n};\n\nexport const isNonNullableEntryMetaField = (fieldName: string) => {\n    return !isNullableEntryMetaField(fieldName);\n};\n\nexport const isDateTimeEntryMetaField = (fieldName: string) => {\n    // Only field ending with \"On\" are date/time fields.\n    return fieldName.endsWith(\"On\");\n};\n\nexport const isIdentityEntryMetaField = (fieldName: string) => {\n    // Only field ending with \"On\" are date/time fields.\n    return fieldName.endsWith(\"By\");\n};\n\nexport const isRevisionEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        fieldName.startsWith(\"revision\")\n    );\n};\n\nexport const isEntryLevelEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        !fieldName.startsWith(\"revision\")\n    );\n};\n\nexport const isDeletedEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) && fieldName.includes(\"deleted\")\n    );\n};\n\nexport const isRestoredEntryMetaField = (fieldName: string) => {\n    return (\n        ENTRY_META_FIELDS.includes(fieldName as EntryMetaFieldName) &&\n        fieldName.includes(\"restored\")\n    );\n};\n"],"mappings":"AAEA,OAAO,MAAMA,WAAW,GAAG,MAAM;AAEjC,OAAO,MAAMC,uBAAuB,GAAG,aAAa;;AAEpD;AACA,OAAO,MAAMC,iBAAiB,GAAG;AAC7B;AACA,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,iBAAiB;AAEjB;AACA,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,CACnB;AAsCV,OAAO,MAAMC,mBAAmB,GAAGA,CAC/BC,MAA0C,EAC1CC,MAA4D,KAC3D;EACD,MAAMC,qBAAyD,GAAG,CAAC,CAAC;EACpE,KAAK,MAAMC,kBAAkB,IAAIL,iBAAiB,EAAE;IAChD,MAAMM,WAAW,GAAGD,kBAAkB,IAAIH,MAAM;IAChD,IAAI,CAACI,WAAW,EAAE;MACdJ,MAAM,CAACG,kBAAkB,CAAC,GAAGE,SAAS;IAC1C;IAEA,MAAMC,QAAQ,GAAG,CAACL,MAAM,IAAIA,MAAM,CAACE,kBAAkB,CAAC;IACtD,IAAIG,QAAQ,EAAE;MACVC,MAAM,CAACC,MAAM,CAACN,qBAAqB,EAAE;QACjC,CAACC,kBAAkB,GAAGH,MAAM,CAACG,kBAAkB;MACnD,CAAC,CAAC;IACN;EACJ;EACA;AACJ;AACA;EACID,qBAAqB,CAACO,IAAI,GAAGT,MAAM,CAACS,IAAI;EAExC,OAAOP,qBAAqB;AAChC,CAAC;AAED,OAAO,MAAMQ,wBAAwB,GAAIC,SAAiB,IAAK;EAC3D;EACA,MAAMC,WAAW,GAAGD,SAAS,CAACE,WAAW,CAAC,CAAC;EAC3C,OACID,WAAW,CAACE,QAAQ,CAAC,UAAU,CAAC,IAChCF,WAAW,CAACE,QAAQ,CAAC,WAAW,CAAC,IACjCF,WAAW,CAACE,QAAQ,CAAC,SAAS,CAAC,IAC/BF,WAAW,CAACE,QAAQ,CAAC,UAAU,CAAC;AAExC,CAAC;AAED,OAAO,MAAMC,2BAA2B,GAAIJ,SAAiB,IAAK;EAC9D,OAAO,CAACD,wBAAwB,CAACC,SAAS,CAAC;AAC/C,CAAC;AAED,OAAO,MAAMK,wBAAwB,GAAIL,SAAiB,IAAK;EAC3D;EACA,OAAOA,SAAS,CAACM,QAAQ,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,OAAO,MAAMC,wBAAwB,GAAIP,SAAiB,IAAK;EAC3D;EACA,OAAOA,SAAS,CAACM,QAAQ,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,OAAO,MAAME,wBAAwB,GAAIR,SAAiB,IAAK;EAC3D,OACIb,iBAAiB,CAACgB,QAAQ,CAACH,SAA+B,CAAC,IAC3DA,SAAS,CAACS,UAAU,CAAC,UAAU,CAAC;AAExC,CAAC;AAED,OAAO,MAAMC,0BAA0B,GAAIV,SAAiB,IAAK;EAC7D,OACIb,iBAAiB,CAACgB,QAAQ,CAACH,SAA+B,CAAC,IAC3D,CAACA,SAAS,CAACS,UAAU,CAAC,UAAU,CAAC;AAEzC,CAAC;AAED,OAAO,MAAME,uBAAuB,GAAIX,SAAiB,IAAK;EAC1D,OACIb,iBAAiB,CAACgB,QAAQ,CAACH,SAA+B,CAAC,IAAIA,SAAS,CAACG,QAAQ,CAAC,SAAS,CAAC;AAEpG,CAAC;AAED,OAAO,MAAMS,wBAAwB,GAAIZ,SAAiB,IAAK;EAC3D,OACIb,iBAAiB,CAACgB,QAAQ,CAACH,SAA+B,CAAC,IAC3DA,SAAS,CAACG,QAAQ,CAAC,UAAU,CAAC;AAEtC,CAAC","ignoreList":[]}

package/context.d.ts

@@ -1,6 +1,3 @@
-import type { CmsContext, HeadlessCmsStorageOperations } from "./types/index.js";
+import type { CmsContext } from "./types/index.js";
 import { ContextPlugin } from "@webiny/api";
-export interface CrudParams {
-    storageOperations: HeadlessCmsStorageOperations;
-}
-export declare const createContextPlugin: ({ storageOperations }: CrudParams) => ContextPlugin<CmsContext>;
+export declare const createContextPlugin: () => ContextPlugin<CmsContext>;

package/context.js

@@ -13,7 +13,7 @@ import { createImportCrud } from "./export/crud/importing.js";
 import { getSchema } from "./graphql/getSchema.js";
 import { CmsInstallerFeature } from "./features/installer/feature.js";
 import { ContentEntriesFeature } from "./features/contentEntry/ContentEntriesFeature.js";
-import { AccessControl as AccessControlAbstraction, CmsContext as CmsContextAbstraction, StorageOperations } from "./features/shared/abstractions.js";
+import { AccessControl as AccessControlAbstraction, CmsContext as CmsContextAbstraction, StorageOperations, StorageOperationsFactory } from "./features/shared/abstractions.js";
 import { EntryFromStorageTransform, EntryToStorageTransform, PluginsContainer, SearchableFieldsProvider } from "./legacy/abstractions.js";
 import { entryFromStorageTransform, entryToStorageTransform } from "./utils/entryStorage.js";
 import { getSearchableFields } from "./crud/contentEntry/searchableFields.js";
@@ -22,6 +22,9 @@ import { ContentModelFeature } from "./features/contentModel/ContentModelFeature
 import { ModelBuilderFeature } from "./features/modelBuilder/index.js";
 import { CmsWhereMapperFeature } from "./features/whereMapper/feature.js";
 import { CmsSortMapperFeature } from "./features/sortMapper/feature.js";
+import { GraphQLFeature } from "./features/graphql/index.js";
+import { ValidationFeature } from "./features/validation/index.js";
+import { StorageFeature } from "./features/storage/index.js";
 const getParameters = async context => {
   const plugins = context.plugins.byType(CmsParametersPlugin.type);
   for (const plugin of plugins) {
@@ -32,9 +35,7 @@ const getParameters = async context => {
   }
   throw new WebinyError("Could not determine type of the CMS.", "CMS_TYPE_ERROR");
 };
-export const createContextPlugin = ({
-  storageOperations
-}) => {
+export const createContextPlugin = () => {
   const plugin = new ContextPlugin(async context => {
     const {
       type
@@ -58,6 +59,12 @@ export const createContextPlugin = ({
           context.cms.MANAGE = true;
       }
     };
+
+    // TODO figure out a better way. maybe this stuff should be on before handler?
+    // GraphQL fields must be loaded before anything else
+    GraphQLFeature.register(context.container);
+    ValidationFeature.register(context.container);
+    StorageFeature.register(context.container);
     async function getExecutableSchema(type) {
       const originalType = context.cms.type;
       setSchemaType(type);
@@ -73,8 +80,7 @@ export const createContextPlugin = ({
         return processRequestBody(input, schema, context);
       };
     }
-    context.plugins.register(new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context.plugins)));
-    await storageOperations.beforeInit(context);
+    context.plugins.register(new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context)));
     const accessControl = new AccessControl({
       getIdentity: async () => context.security.getIdentity(),
       getGroupsPermissions: () => context.security.getPermissions("cms.contentModelGroup"),
@@ -86,6 +92,9 @@ export const createContextPlugin = ({
         });
       }
     });
+    const storageOperationsFactory = context.container.resolve(StorageOperationsFactory);
+    const storageOperations = await storageOperationsFactory.create(context);
+    await storageOperations.beforeInit(context);
     context.cms = {
       type,
       READ: type === "read",
@@ -124,7 +133,7 @@ export const createContextPlugin = ({
     });
     context.container.registerInstance(SearchableFieldsProvider, params => {
       return getSearchableFields({
-        plugins: context.plugins,
+        context,
         fields: params.fields,
         input: []
       });

package/context.js.map

@@ -1 +1 @@
-{"version":3,"names":["WebinyError","ContextPlugin","processRequestBody","CmsParametersPlugin","AccessControl","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","createExportCrud","createImportCrud","getSchema","CmsInstallerFeature","ContentEntriesFeature","AccessControlAbstraction","CmsContext","CmsContextAbstraction","StorageOperations","EntryFromStorageTransform","EntryToStorageTransform","PluginsContainer","SearchableFieldsProvider","entryFromStorageTransform","entryToStorageTransform","getSearchableFields","ContentModelGroupFeature","ContentModelFeature","ModelBuilderFeature","CmsWhereMapperFeature","CmsSortMapperFeature","getParameters","context","plugins","byType","type","plugin","result","createContextPlugin","storageOperations","getTenant","tenancy","getCurrentTenant","setSchemaType","cms","READ","PREVIEW","MANAGE","getExecutableSchema","originalType","schema","security","withoutAuthorization","input","register","beforeInit","accessControl","getIdentity","getGroupsPermissions","getPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","listGroups","export","importing","container","registerInstance","model","entry","params","fields","init","name"],"sources":["context.ts"],"sourcesContent":["import type { ApiEndpoint, CmsContext, HeadlessCmsStorageOperations } from \"~/types/index.js\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport type { GraphQLRequestBody } from \"@webiny/handler-graphql/types.js\";\nimport { processRequestBody } from \"@webiny/handler-graphql\";\nimport type { CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin.js\";\nimport { CmsParametersPlugin } from \"~/plugins/CmsParametersPlugin.js\";\nimport { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud.js\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud.js\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud.js\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins/index.js\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter.js\";\nimport { createExportCrud } from \"~/export/index.js\";\nimport { createImportCrud } from \"~/export/crud/importing.js\";\nimport { getSchema } from \"~/graphql/getSchema.js\";\nimport { CmsInstallerFeature } from \"~/features/installer/feature.js\";\nimport { ContentEntriesFeature } from \"~/features/contentEntry/ContentEntriesFeature.js\";\nimport {\n    AccessControl as AccessControlAbstraction,\n    CmsContext as CmsContextAbstraction,\n    StorageOperations\n} from \"~/features/shared/abstractions.js\";\nimport {\n    EntryFromStorageTransform,\n    EntryToStorageTransform,\n    PluginsContainer,\n    SearchableFieldsProvider\n} from \"./legacy/abstractions.js\";\nimport { entryFromStorageTransform, entryToStorageTransform } from \"~/utils/entryStorage.js\";\nimport { getSearchableFields } from \"~/crud/contentEntry/searchableFields.js\";\nimport { ContentModelGroupFeature } from \"~/features/contentModelGroup/ContentModelGroupFeature.js\";\nimport { ContentModelFeature } from \"~/features/contentModel/ContentModelFeature.js\";\nimport { ModelBuilderFeature } from \"~/features/modelBuilder/index.js\";\nimport { CmsWhereMapperFeature } from \"~/features/whereMapper/feature.js\";\nimport { CmsSortMapperFeature } from \"~/features/sortMapper/feature.js\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\"Could not determine type of the CMS.\", \"CMS_TYPE_ERROR\");\n};\n\nexport interface CrudParams {\n    storageOperations: HeadlessCmsStorageOperations;\n}\n\nexport const createContextPlugin = ({ storageOperations }: CrudParams) => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type } = await getParameters(context);\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        const setSchemaType = (type: ApiEndpoint | null) => {\n            if (!type) {\n                return;\n            }\n\n            context.cms.type = type;\n\n            switch (type) {\n                case \"read\":\n                    context.cms.READ = true;\n                    break;\n                case \"preview\":\n                    context.cms.PREVIEW = true;\n                    break;\n                default:\n                    context.cms.MANAGE = true;\n            }\n        };\n\n        async function getExecutableSchema(type: ApiEndpoint) {\n            const originalType = context.cms.type;\n            setSchemaType(type);\n\n            const schema = await context.security.withoutAuthorization(() => {\n                return getSchema({\n                    context,\n                    getTenant,\n                    type\n                });\n            });\n\n            setSchemaType(originalType);\n\n            return async <TData, TExtensions>(input: GraphQLRequestBody | GraphQLRequestBody[]) => {\n                return processRequestBody<TData, TExtensions>(input, schema, context);\n            };\n        }\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(\n                createCmsModelFieldConvertersAttachFactory(context.plugins)\n            )\n        );\n\n        await storageOperations.beforeInit(context);\n\n        const accessControl = new AccessControl({\n            getIdentity: async () => context.security.getIdentity(),\n            getGroupsPermissions: () => context.security.getPermissions(\"cms.contentModelGroup\"),\n            getModelsPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n            getEntriesPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n            listAllGroups: () => {\n                return context.security.withoutAuthorization(() => {\n                    return context.cms.listGroups();\n                });\n            }\n        });\n\n        context.cms = {\n            type,\n            READ: type === \"read\",\n            PREVIEW: type === \"preview\",\n            MANAGE: type === \"manage\",\n            storageOperations,\n            accessControl,\n            getExecutableSchema,\n            ...createModelGroupsCrud({\n                context\n            }),\n            ...createModelsCrud({\n                context\n            }),\n            ...createContentEntryCrud({\n                context\n            }),\n            export: {\n                ...createExportCrud(context)\n            },\n            importing: {\n                ...createImportCrud(context)\n            }\n        };\n\n        // Register legacy dependencies\n        context.container.registerInstance(StorageOperations, storageOperations);\n        context.container.registerInstance(AccessControlAbstraction, accessControl);\n        context.container.registerInstance(CmsContextAbstraction, context);\n        context.container.registerInstance(PluginsContainer, context.plugins);\n        context.container.registerInstance(EntryToStorageTransform, (model, entry) => {\n            return entryToStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(EntryFromStorageTransform, (model, entry) => {\n            return entryFromStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(SearchableFieldsProvider, params => {\n            return getSearchableFields({\n                plugins: context.plugins,\n                fields: params.fields,\n                input: []\n            });\n        });\n\n        // Register features\n        CmsInstallerFeature.register(context.container);\n        ContentEntriesFeature.register(context.container);\n        ContentModelFeature.register(context.container);\n        ContentModelGroupFeature.register(context.container);\n        ModelBuilderFeature.register(context.container);\n\n        CmsWhereMapperFeature.register(context.container);\n        CmsSortMapperFeature.register(context.container);\n\n        if (!storageOperations.init) {\n            return;\n        }\n        await storageOperations.init(context);\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":"AACA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,aAAa,QAAQ,aAAa;AAE3C,SAASC,kBAAkB,QAAQ,yBAAyB;AAE5D,SAASC,mBAAmB;AAC5B,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAC9B,SAASC,gBAAgB;AACzB,SAASC,sBAAsB;AAC/B,SAASC,+BAA+B;AACxC,SAASC,0CAA0C;AACnD,SAASC,gBAAgB;AACzB,SAASC,gBAAgB;AACzB,SAASC,SAAS;AAClB,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SACIV,aAAa,IAAIW,wBAAwB,EACzCC,UAAU,IAAIC,qBAAqB,EACnCC,iBAAiB;AAErB,SACIC,yBAAyB,EACzBC,uBAAuB,EACvBC,gBAAgB,EAChBC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,uBAAuB;AAC3D,SAASC,mBAAmB;AAC5B,SAASC,wBAAwB;AACjC,SAASC,mBAAmB;AAC5B,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SAASC,oBAAoB;AAE7B,MAAMC,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsB/B,mBAAmB,CAACgC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIH,OAAO,EAAE;IAC1B,MAAMI,MAAM,GAAG,MAAMD,MAAM,CAACL,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIK,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIrC,WAAW,CAAC,sCAAsC,EAAE,gBAAgB,CAAC;AACnF,CAAC;AAMD,OAAO,MAAMsC,mBAAmB,GAAGA,CAAC;EAAEC;AAA8B,CAAC,KAAK;EACtE,MAAMH,MAAM,GAAG,IAAInC,aAAa,CAAa,MAAM+B,OAAO,IAAI;IAC1D,MAAM;MAAEG;IAAK,CAAC,GAAG,MAAMJ,aAAa,CAACC,OAAO,CAAC;IAE7C,MAAMQ,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOR,OAAO,CAACS,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAMC,aAAa,GAAIR,IAAwB,IAAK;MAChD,IAAI,CAACA,IAAI,EAAE;QACP;MACJ;MAEAH,OAAO,CAACY,GAAG,CAACT,IAAI,GAAGA,IAAI;MAEvB,QAAQA,IAAI;QACR,KAAK,MAAM;UACPH,OAAO,CAACY,GAAG,CAACC,IAAI,GAAG,IAAI;UACvB;QACJ,KAAK,SAAS;UACVb,OAAO,CAACY,GAAG,CAACE,OAAO,GAAG,IAAI;UAC1B;QACJ;UACId,OAAO,CAACY,GAAG,CAACG,MAAM,GAAG,IAAI;MACjC;IACJ,CAAC;IAED,eAAeC,mBAAmBA,CAACb,IAAiB,EAAE;MAClD,MAAMc,YAAY,GAAGjB,OAAO,CAACY,GAAG,CAACT,IAAI;MACrCQ,aAAa,CAACR,IAAI,CAAC;MAEnB,MAAMe,MAAM,GAAG,MAAMlB,OAAO,CAACmB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;QAC7D,OAAOxC,SAAS,CAAC;UACboB,OAAO;UACPQ,SAAS;UACTL;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEFQ,aAAa,CAACM,YAAY,CAAC;MAE3B,OAAO,MAA2BI,KAAgD,IAAK;QACnF,OAAOnD,kBAAkB,CAAqBmD,KAAK,EAAEH,MAAM,EAAElB,OAAO,CAAC;MACzE,CAAC;IACL;IAEAA,OAAO,CAACC,OAAO,CAACqB,QAAQ,CACpB,IAAI9C,+BAA+B,CAC/BC,0CAA0C,CAACuB,OAAO,CAACC,OAAO,CAC9D,CACJ,CAAC;IAED,MAAMM,iBAAiB,CAACgB,UAAU,CAACvB,OAAO,CAAC;IAE3C,MAAMwB,aAAa,GAAG,IAAIpD,aAAa,CAAC;MACpCqD,WAAW,EAAE,MAAAA,CAAA,KAAYzB,OAAO,CAACmB,QAAQ,CAACM,WAAW,CAAC,CAAC;MACvDC,oBAAoB,EAAEA,CAAA,KAAM1B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,uBAAuB,CAAC;MACpFC,oBAAoB,EAAEA,CAAA,KAAM5B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,kBAAkB,CAAC;MAC/EE,qBAAqB,EAAEA,CAAA,KAAM7B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,kBAAkB,CAAC;MAChFG,aAAa,EAAEA,CAAA,KAAM;QACjB,OAAO9B,OAAO,CAACmB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;UAC/C,OAAOpB,OAAO,CAACY,GAAG,CAACmB,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC;MACN;IACJ,CAAC,CAAC;IAEF/B,OAAO,CAACY,GAAG,GAAG;MACVT,IAAI;MACJU,IAAI,EAAEV,IAAI,KAAK,MAAM;MACrBW,OAAO,EAAEX,IAAI,KAAK,SAAS;MAC3BY,MAAM,EAAEZ,IAAI,KAAK,QAAQ;MACzBI,iBAAiB;MACjBiB,aAAa;MACbR,mBAAmB;MACnB,GAAG3C,qBAAqB,CAAC;QACrB2B;MACJ,CAAC,CAAC;MACF,GAAG1B,gBAAgB,CAAC;QAChB0B;MACJ,CAAC,CAAC;MACF,GAAGzB,sBAAsB,CAAC;QACtByB;MACJ,CAAC,CAAC;MACFgC,MAAM,EAAE;QACJ,GAAGtD,gBAAgB,CAACsB,OAAO;MAC/B,CAAC;MACDiC,SAAS,EAAE;QACP,GAAGtD,gBAAgB,CAACqB,OAAO;MAC/B;IACJ,CAAC;;IAED;IACAA,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAACjD,iBAAiB,EAAEqB,iBAAiB,CAAC;IACxEP,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAACpD,wBAAwB,EAAEyC,aAAa,CAAC;IAC3ExB,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAClD,qBAAqB,EAAEe,OAAO,CAAC;IAClEA,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC9C,gBAAgB,EAAEW,OAAO,CAACC,OAAO,CAAC;IACrED,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC/C,uBAAuB,EAAE,CAACgD,KAAK,EAAEC,KAAK,KAAK;MAC1E,OAAO7C,uBAAuB,CAACQ,OAAO,EAAEoC,KAAK,EAAEC,KAAK,CAAC;IACzD,CAAC,CAAC;IACFrC,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAChD,yBAAyB,EAAE,CAACiD,KAAK,EAAEC,KAAK,KAAK;MAC5E,OAAO9C,yBAAyB,CAACS,OAAO,EAAEoC,KAAK,EAAEC,KAAK,CAAC;IAC3D,CAAC,CAAC;IACFrC,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC7C,wBAAwB,EAAEgD,MAAM,IAAI;MACnE,OAAO7C,mBAAmB,CAAC;QACvBQ,OAAO,EAAED,OAAO,CAACC,OAAO;QACxBsC,MAAM,EAAED,MAAM,CAACC,MAAM;QACrBlB,KAAK,EAAE;MACX,CAAC,CAAC;IACN,CAAC,CAAC;;IAEF;IACAxC,mBAAmB,CAACyC,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAC/CpD,qBAAqB,CAACwC,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACjDvC,mBAAmB,CAAC2B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAC/CxC,wBAAwB,CAAC4B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACpDtC,mBAAmB,CAAC0B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAE/CrC,qBAAqB,CAACyB,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACjDpC,oBAAoB,CAACwB,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAEhD,IAAI,CAAC3B,iBAAiB,CAACiC,IAAI,EAAE;MACzB;IACJ;IACA,MAAMjC,iBAAiB,CAACiC,IAAI,CAACxC,OAAO,CAAC;EACzC,CAAC,CAAC;EAEFI,MAAM,CAACqC,IAAI,GAAG,mBAAmB;EAEjC,OAAOrC,MAAM;AACjB,CAAC","ignoreList":[]}
+{"version":3,"names":["WebinyError","ContextPlugin","processRequestBody","CmsParametersPlugin","AccessControl","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","createExportCrud","createImportCrud","getSchema","CmsInstallerFeature","ContentEntriesFeature","AccessControlAbstraction","CmsContext","CmsContextAbstraction","StorageOperations","StorageOperationsFactory","EntryFromStorageTransform","EntryToStorageTransform","PluginsContainer","SearchableFieldsProvider","entryFromStorageTransform","entryToStorageTransform","getSearchableFields","ContentModelGroupFeature","ContentModelFeature","ModelBuilderFeature","CmsWhereMapperFeature","CmsSortMapperFeature","GraphQLFeature","ValidationFeature","StorageFeature","getParameters","context","plugins","byType","type","plugin","result","createContextPlugin","getTenant","tenancy","getCurrentTenant","setSchemaType","cms","READ","PREVIEW","MANAGE","register","container","getExecutableSchema","originalType","schema","security","withoutAuthorization","input","accessControl","getIdentity","getGroupsPermissions","getPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","listGroups","storageOperationsFactory","resolve","storageOperations","create","beforeInit","export","importing","registerInstance","model","entry","params","fields","init","name"],"sources":["context.ts"],"sourcesContent":["import type { ApiEndpoint, CmsContext } from \"~/types/index.js\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport type { GraphQLRequestBody } from \"@webiny/handler-graphql/types.js\";\nimport { processRequestBody } from \"@webiny/handler-graphql\";\nimport type { CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin.js\";\nimport { CmsParametersPlugin } from \"~/plugins/CmsParametersPlugin.js\";\nimport { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud.js\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud.js\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud.js\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins/index.js\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter.js\";\nimport { createExportCrud } from \"~/export/index.js\";\nimport { createImportCrud } from \"~/export/crud/importing.js\";\nimport { getSchema } from \"~/graphql/getSchema.js\";\nimport { CmsInstallerFeature } from \"~/features/installer/feature.js\";\nimport { ContentEntriesFeature } from \"~/features/contentEntry/ContentEntriesFeature.js\";\nimport {\n    AccessControl as AccessControlAbstraction,\n    CmsContext as CmsContextAbstraction,\n    StorageOperations,\n    StorageOperationsFactory\n} from \"~/features/shared/abstractions.js\";\nimport {\n    EntryFromStorageTransform,\n    EntryToStorageTransform,\n    PluginsContainer,\n    SearchableFieldsProvider\n} from \"./legacy/abstractions.js\";\nimport { entryFromStorageTransform, entryToStorageTransform } from \"~/utils/entryStorage.js\";\nimport { getSearchableFields } from \"~/crud/contentEntry/searchableFields.js\";\nimport { ContentModelGroupFeature } from \"~/features/contentModelGroup/ContentModelGroupFeature.js\";\nimport { ContentModelFeature } from \"~/features/contentModel/ContentModelFeature.js\";\nimport { ModelBuilderFeature } from \"~/features/modelBuilder/index.js\";\nimport { CmsWhereMapperFeature } from \"~/features/whereMapper/feature.js\";\nimport { CmsSortMapperFeature } from \"~/features/sortMapper/feature.js\";\nimport { GraphQLFeature } from \"~/features/graphql/index.js\";\nimport { ValidationFeature } from \"~/features/validation/index.js\";\nimport { StorageFeature } from \"~/features/storage/index.js\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\"Could not determine type of the CMS.\", \"CMS_TYPE_ERROR\");\n};\n\nexport const createContextPlugin = () => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type } = await getParameters(context);\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        const setSchemaType = (type: ApiEndpoint | null) => {\n            if (!type) {\n                return;\n            }\n\n            context.cms.type = type;\n\n            switch (type) {\n                case \"read\":\n                    context.cms.READ = true;\n                    break;\n                case \"preview\":\n                    context.cms.PREVIEW = true;\n                    break;\n                default:\n                    context.cms.MANAGE = true;\n            }\n        };\n\n        // TODO figure out a better way. maybe this stuff should be on before handler?\n        // GraphQL fields must be loaded before anything else\n        GraphQLFeature.register(context.container);\n        ValidationFeature.register(context.container);\n        StorageFeature.register(context.container);\n\n        async function getExecutableSchema(type: ApiEndpoint) {\n            const originalType = context.cms.type;\n            setSchemaType(type);\n\n            const schema = await context.security.withoutAuthorization(() => {\n                return getSchema({\n                    context,\n                    getTenant,\n                    type\n                });\n            });\n\n            setSchemaType(originalType);\n\n            return async <TData, TExtensions>(input: GraphQLRequestBody | GraphQLRequestBody[]) => {\n                return processRequestBody<TData, TExtensions>(input, schema, context);\n            };\n        }\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context))\n        );\n\n        const accessControl = new AccessControl({\n            getIdentity: async () => context.security.getIdentity(),\n            getGroupsPermissions: () => context.security.getPermissions(\"cms.contentModelGroup\"),\n            getModelsPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n            getEntriesPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n            listAllGroups: () => {\n                return context.security.withoutAuthorization(() => {\n                    return context.cms.listGroups();\n                });\n            }\n        });\n\n        const storageOperationsFactory = context.container.resolve(StorageOperationsFactory);\n\n        const storageOperations = await storageOperationsFactory.create(context);\n        await storageOperations.beforeInit(context);\n\n        context.cms = {\n            type,\n            READ: type === \"read\",\n            PREVIEW: type === \"preview\",\n            MANAGE: type === \"manage\",\n            storageOperations,\n            accessControl,\n            getExecutableSchema,\n            ...createModelGroupsCrud({\n                context\n            }),\n            ...createModelsCrud({\n                context\n            }),\n            ...createContentEntryCrud({\n                context\n            }),\n            export: {\n                ...createExportCrud(context)\n            },\n            importing: {\n                ...createImportCrud(context)\n            }\n        };\n\n        // Register legacy dependencies\n        context.container.registerInstance(StorageOperations, storageOperations);\n        context.container.registerInstance(AccessControlAbstraction, accessControl);\n        context.container.registerInstance(CmsContextAbstraction, context);\n        context.container.registerInstance(PluginsContainer, context.plugins);\n        context.container.registerInstance(EntryToStorageTransform, (model, entry) => {\n            return entryToStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(EntryFromStorageTransform, (model, entry) => {\n            return entryFromStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(SearchableFieldsProvider, params => {\n            return getSearchableFields({\n                context,\n                fields: params.fields,\n                input: []\n            });\n        });\n\n        // Register features\n        CmsInstallerFeature.register(context.container);\n        ContentEntriesFeature.register(context.container);\n        ContentModelFeature.register(context.container);\n        ContentModelGroupFeature.register(context.container);\n        ModelBuilderFeature.register(context.container);\n        CmsWhereMapperFeature.register(context.container);\n        CmsSortMapperFeature.register(context.container);\n\n        if (!storageOperations.init) {\n            return;\n        }\n        await storageOperations.init(context);\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":"AACA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,aAAa,QAAQ,aAAa;AAE3C,SAASC,kBAAkB,QAAQ,yBAAyB;AAE5D,SAASC,mBAAmB;AAC5B,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAC9B,SAASC,gBAAgB;AACzB,SAASC,sBAAsB;AAC/B,SAASC,+BAA+B;AACxC,SAASC,0CAA0C;AACnD,SAASC,gBAAgB;AACzB,SAASC,gBAAgB;AACzB,SAASC,SAAS;AAClB,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SACIV,aAAa,IAAIW,wBAAwB,EACzCC,UAAU,IAAIC,qBAAqB,EACnCC,iBAAiB,EACjBC,wBAAwB;AAE5B,SACIC,yBAAyB,EACzBC,uBAAuB,EACvBC,gBAAgB,EAChBC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,uBAAuB;AAC3D,SAASC,mBAAmB;AAC5B,SAASC,wBAAwB;AACjC,SAASC,mBAAmB;AAC5B,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SAASC,oBAAoB;AAC7B,SAASC,cAAc;AACvB,SAASC,iBAAiB;AAC1B,SAASC,cAAc;AAEvB,MAAMC,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsBnC,mBAAmB,CAACoC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIH,OAAO,EAAE;IAC1B,MAAMI,MAAM,GAAG,MAAMD,MAAM,CAACL,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIK,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIzC,WAAW,CAAC,sCAAsC,EAAE,gBAAgB,CAAC;AACnF,CAAC;AAED,OAAO,MAAM0C,mBAAmB,GAAGA,CAAA,KAAM;EACrC,MAAMF,MAAM,GAAG,IAAIvC,aAAa,CAAa,MAAMmC,OAAO,IAAI;IAC1D,MAAM;MAAEG;IAAK,CAAC,GAAG,MAAMJ,aAAa,CAACC,OAAO,CAAC;IAE7C,MAAMO,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOP,OAAO,CAACQ,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAMC,aAAa,GAAIP,IAAwB,IAAK;MAChD,IAAI,CAACA,IAAI,EAAE;QACP;MACJ;MAEAH,OAAO,CAACW,GAAG,CAACR,IAAI,GAAGA,IAAI;MAEvB,QAAQA,IAAI;QACR,KAAK,MAAM;UACPH,OAAO,CAACW,GAAG,CAACC,IAAI,GAAG,IAAI;UACvB;QACJ,KAAK,SAAS;UACVZ,OAAO,CAACW,GAAG,CAACE,OAAO,GAAG,IAAI;UAC1B;QACJ;UACIb,OAAO,CAACW,GAAG,CAACG,MAAM,GAAG,IAAI;MACjC;IACJ,CAAC;;IAED;IACA;IACAlB,cAAc,CAACmB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC1CnB,iBAAiB,CAACkB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC7ClB,cAAc,CAACiB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAE1C,eAAeC,mBAAmBA,CAACd,IAAiB,EAAE;MAClD,MAAMe,YAAY,GAAGlB,OAAO,CAACW,GAAG,CAACR,IAAI;MACrCO,aAAa,CAACP,IAAI,CAAC;MAEnB,MAAMgB,MAAM,GAAG,MAAMnB,OAAO,CAACoB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;QAC7D,OAAO7C,SAAS,CAAC;UACbwB,OAAO;UACPO,SAAS;UACTJ;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEFO,aAAa,CAACQ,YAAY,CAAC;MAE3B,OAAO,MAA2BI,KAAgD,IAAK;QACnF,OAAOxD,kBAAkB,CAAqBwD,KAAK,EAAEH,MAAM,EAAEnB,OAAO,CAAC;MACzE,CAAC;IACL;IAEAA,OAAO,CAACC,OAAO,CAACc,QAAQ,CACpB,IAAI3C,+BAA+B,CAACC,0CAA0C,CAAC2B,OAAO,CAAC,CAC3F,CAAC;IAED,MAAMuB,aAAa,GAAG,IAAIvD,aAAa,CAAC;MACpCwD,WAAW,EAAE,MAAAA,CAAA,KAAYxB,OAAO,CAACoB,QAAQ,CAACI,WAAW,CAAC,CAAC;MACvDC,oBAAoB,EAAEA,CAAA,KAAMzB,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,uBAAuB,CAAC;MACpFC,oBAAoB,EAAEA,CAAA,KAAM3B,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,kBAAkB,CAAC;MAC/EE,qBAAqB,EAAEA,CAAA,KAAM5B,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,kBAAkB,CAAC;MAChFG,aAAa,EAAEA,CAAA,KAAM;QACjB,OAAO7B,OAAO,CAACoB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;UAC/C,OAAOrB,OAAO,CAACW,GAAG,CAACmB,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC;MACN;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG/B,OAAO,CAACgB,SAAS,CAACgB,OAAO,CAACjD,wBAAwB,CAAC;IAEpF,MAAMkD,iBAAiB,GAAG,MAAMF,wBAAwB,CAACG,MAAM,CAAClC,OAAO,CAAC;IACxE,MAAMiC,iBAAiB,CAACE,UAAU,CAACnC,OAAO,CAAC;IAE3CA,OAAO,CAACW,GAAG,GAAG;MACVR,IAAI;MACJS,IAAI,EAAET,IAAI,KAAK,MAAM;MACrBU,OAAO,EAAEV,IAAI,KAAK,SAAS;MAC3BW,MAAM,EAAEX,IAAI,KAAK,QAAQ;MACzB8B,iBAAiB;MACjBV,aAAa;MACbN,mBAAmB;MACnB,GAAGhD,qBAAqB,CAAC;QACrB+B;MACJ,CAAC,CAAC;MACF,GAAG9B,gBAAgB,CAAC;QAChB8B;MACJ,CAAC,CAAC;MACF,GAAG7B,sBAAsB,CAAC;QACtB6B;MACJ,CAAC,CAAC;MACFoC,MAAM,EAAE;QACJ,GAAG9D,gBAAgB,CAAC0B,OAAO;MAC/B,CAAC;MACDqC,SAAS,EAAE;QACP,GAAG9D,gBAAgB,CAACyB,OAAO;MAC/B;IACJ,CAAC;;IAED;IACAA,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACxD,iBAAiB,EAAEmD,iBAAiB,CAAC;IACxEjC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAAC3D,wBAAwB,EAAE4C,aAAa,CAAC;IAC3EvB,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACzD,qBAAqB,EAAEmB,OAAO,CAAC;IAClEA,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACpD,gBAAgB,EAAEc,OAAO,CAACC,OAAO,CAAC;IACrED,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACrD,uBAAuB,EAAE,CAACsD,KAAK,EAAEC,KAAK,KAAK;MAC1E,OAAOnD,uBAAuB,CAACW,OAAO,EAAEuC,KAAK,EAAEC,KAAK,CAAC;IACzD,CAAC,CAAC;IACFxC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACtD,yBAAyB,EAAE,CAACuD,KAAK,EAAEC,KAAK,KAAK;MAC5E,OAAOpD,yBAAyB,CAACY,OAAO,EAAEuC,KAAK,EAAEC,KAAK,CAAC;IAC3D,CAAC,CAAC;IACFxC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACnD,wBAAwB,EAAEsD,MAAM,IAAI;MACnE,OAAOnD,mBAAmB,CAAC;QACvBU,OAAO;QACP0C,MAAM,EAAED,MAAM,CAACC,MAAM;QACrBpB,KAAK,EAAE;MACX,CAAC,CAAC;IACN,CAAC,CAAC;;IAEF;IACA7C,mBAAmB,CAACsC,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CtC,qBAAqB,CAACqC,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACjDxB,mBAAmB,CAACuB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CzB,wBAAwB,CAACwB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACpDvB,mBAAmB,CAACsB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CtB,qBAAqB,CAACqB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACjDrB,oBAAoB,CAACoB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAEhD,IAAI,CAACiB,iBAAiB,CAACU,IAAI,EAAE;MACzB;IACJ;IACA,MAAMV,iBAAiB,CAACU,IAAI,CAAC3C,OAAO,CAAC;EACzC,CAAC,CAAC;EAEFI,MAAM,CAACwC,IAAI,GAAG,mBAAmB;EAEjC,OAAOxC,MAAM;AACjB,CAAC","ignoreList":[]}

package/crud/AccessControl/AccessControl.d.ts

@@ -27,22 +27,12 @@ export interface CanAccessEntryParams extends GetEntriesAccessControlListParams
     rwd?: string;
     pw?: string;
 }
-interface AccessControlEntry {
-    rwd: string;
-    canAccessNonOwned: boolean;
-    canAccessOnlyOwned: boolean;
-}
-type AccessControlList = AccessControlEntry[];
-interface EntriesAccessControlEntry extends AccessControlEntry {
-    pw?: string;
-}
-type EntriesAccessControlList = EntriesAccessControlEntry[];
 export declare class AccessControl {
-    getIdentity: AccessControlParams["getIdentity"];
-    getGroupsPermissions: AccessControlParams["getGroupsPermissions"];
-    getModelsPermissions: AccessControlParams["getModelsPermissions"];
-    getEntriesPermissions: AccessControlParams["getEntriesPermissions"];
-    listAllGroupsCallback: AccessControlParams["listAllGroups"];
+    private getIdentity;
+    private getGroupsPermissions;
+    private getModelsPermissions;
+    private getEntriesPermissions;
+    private listAllGroupsCallback;
     private fullAccessPermissions;
     private allGroups;
     constructor({ getIdentity, getGroupsPermissions, getModelsPermissions, getEntriesPermissions, listAllGroups }: AccessControlParams);
@@ -56,10 +46,10 @@ export declare class AccessControl {
      * - hasFullAccessToGroups
      */
     canAccessGroup(params?: CanAccessGroupParams): Promise<boolean>;
-    canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
-    canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
-    getGroupsAccessControlList(params: GetGroupsAccessControlListParams): Promise<AccessControlList>;
-    hasFullAccessToGroups(): Promise<boolean>;
+    private canAccessNonOwnedGroups;
+    private canAccessOnlyOwnedGroups;
+    private getGroupsAccessControlList;
+    private hasFullAccessToGroups;
     /**
      * Models-related methods below. 👇
      * - canAccessModel
@@ -70,11 +60,11 @@ export declare class AccessControl {
      * - hasFullAccessToModels
      */
     canAccessModel(params: CanAccessModelParams): Promise<boolean>;
-    ensureCanAccessModel(params?: CanAccessModelParams): Promise<void>;
-    canAccessNonOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
-    canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
-    getModelsAccessControlList(params: GetModelsAccessControlListParams): Promise<AccessControlList>;
-    hasFullAccessToModels(params: GetModelsAccessControlListParams): Promise<boolean>;
+    private ensureCanAccessModel;
+    private canAccessNonOwnedModels;
+    private canAccessOnlyOwnedModels;
+    private getModelsAccessControlList;
+    private hasFullAccessToModels;
     /**
      * Entries-related methods below. 👇
      * - canAccessEntry
@@ -85,11 +75,11 @@ export declare class AccessControl {
      * - hasFullAccessToEntries
      */
     canAccessEntry(params: CanAccessEntryParams): Promise<boolean>;
-    ensureCanAccessEntry(params: CanAccessEntryParams): Promise<void>;
-    canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    private ensureCanAccessEntry;
+    private canAccessNonOwnedEntries;
     canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
-    getEntriesAccessControlList(params: GetEntriesAccessControlListParams): Promise<EntriesAccessControlList>;
-    hasFullAccessToEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    private getEntriesAccessControlList;
+    private hasFullAccessToEntries;
     private modelAuthorizationDisabled;
     private listAllGroups;
     private getGroup;

package/crud/AccessControl/AccessControl.js.map

@@ -1 +1 @@
-{"version":3,"names":["NotAuthorizedError","AccessControl","constructor","getIdentity","getGroupsPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","fullAccessPermissions","listAllGroupsCallback","allGroups","canAccessGroup","params","acl","getGroupsAccessControlList","canRead","find","ace","rwd","includes","hasRwd","canAccessNonOwnedGroups","some","canAccessNonOwned","canAccessOnlyOwnedGroups","hasFullAccessToGroups","canAccessOnlyOwned","groupsPermissionsList","groupsPermissions","own","modelGroupCreatedBy","group","createdBy","identity","id","push","groups","Array","isArray","permissions","p","filter","Boolean","name","canAccessModel","getModelsAccessControlList","ensureCanAccessModel","canAccess","modelName","model","canAccessNonOwnedModels","canAccessOnlyOwnedModels","hasFullAccessToModels","i","length","modelsPermissionsList","relatedModelPermissions","_src","getGroup","fullAccess","models","modelCreatedBy","modelId","modelAuthorizationDisabled","canAccessEntry","getEntriesAccessControlList","pw","hasPw","ensureCanAccessEntry","entry","entryId","canAccessNonOwnedEntries","canAccessOnlyOwnedEntries","hasFullAccessToEntries","groupPermissions","relatedModelsPermissions","entriesPermissionsList","relatedEntriesPermissions","groupCreatedBy","entryCreatedBy","authorization","slug"],"sources":["AccessControl.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryPermission,\n    CmsGroup,\n    CmsGroupPermission,\n    CmsModel,\n    CmsModelPermission\n} from \"~/types/index.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\n\nexport interface AccessControlParams {\n    getIdentity: () => Promise<SecurityIdentity>;\n    getGroupsPermissions: () => Promise<CmsGroupPermission[]>;\n    getModelsPermissions: () => Promise<CmsModelPermission[]>;\n    getEntriesPermissions: () => Promise<CmsEntryPermission[]>;\n    listAllGroups: () => Promise<CmsGroup[]>;\n}\n\ninterface GetGroupsAccessControlListParams {\n    group?: CmsGroup;\n}\n\ninterface CanAccessGroupParams extends GetGroupsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetModelsAccessControlListParams {\n    model?: CmsModel;\n}\n\ninterface CanAccessModelParams extends GetModelsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetEntriesAccessControlListParams {\n    model: Pick<CmsModel, \"modelId\" | \"createdBy\" | \"group\" | \"authorization\">;\n    entry?: Pick<CmsEntry, \"entryId\" | \"createdBy\">;\n}\n\nexport interface CanAccessEntryParams extends GetEntriesAccessControlListParams {\n    rwd?: string;\n    pw?: string;\n}\n\ninterface AccessControlEntry {\n    rwd: string;\n    canAccessNonOwned: boolean;\n    canAccessOnlyOwned: boolean;\n}\n\ntype AccessControlList = AccessControlEntry[];\n\ninterface EntriesAccessControlEntry extends AccessControlEntry {\n    pw?: string;\n}\n\ntype EntriesAccessControlList = EntriesAccessControlEntry[];\n\ninterface IModelAuthorizationDisabledParams {\n    model: Pick<CmsModel, \"authorization\">;\n}\n\nexport class AccessControl {\n    getIdentity: AccessControlParams[\"getIdentity\"];\n    getGroupsPermissions: AccessControlParams[\"getGroupsPermissions\"];\n    getModelsPermissions: AccessControlParams[\"getModelsPermissions\"];\n    getEntriesPermissions: AccessControlParams[\"getEntriesPermissions\"];\n    listAllGroupsCallback: AccessControlParams[\"listAllGroups\"];\n\n    private fullAccessPermissions: string[];\n    private allGroups: null | Promise<CmsGroup[]>;\n\n    constructor({\n        getIdentity,\n        getGroupsPermissions,\n        getModelsPermissions,\n        getEntriesPermissions,\n        listAllGroups\n    }: AccessControlParams) {\n        this.getIdentity = getIdentity;\n        this.getGroupsPermissions = getGroupsPermissions;\n        this.getModelsPermissions = getModelsPermissions;\n        this.getEntriesPermissions = getEntriesPermissions;\n        this.fullAccessPermissions = [\"*\", \"cms.*\"];\n        this.listAllGroupsCallback = listAllGroups;\n        this.allGroups = null;\n    }\n\n    /**\n     * Groups-related methods below. 👇\n     * - canAccessGroup\n     * - ensureCanAccessGroup\n     * - canAccessNonOwnedGroups\n     * - canAccessOnlyOwnedGroups\n     * - getGroupsAccessControlList\n     * - hasFullAccessToGroups\n     */\n\n    async canAccessGroup(params: CanAccessGroupParams = {}) {\n        const acl = await this.getGroupsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd?.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const acl = await this.getGroupsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedGroups(params);\n        return !canAccessNonOwned;\n    }\n\n    async getGroupsAccessControlList(\n        params: GetGroupsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToGroups()) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (const groupsPermissions of groupsPermissionsList) {\n            if (groupsPermissions.own) {\n                if (\"group\" in params) {\n                    const modelGroupCreatedBy = params.group?.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"group\" in params) {\n                    const { group } = params;\n                    if (!group) {\n                        continue;\n                    }\n\n                    const { groups } = groupsPermissions;\n                    if (!Array.isArray(groups)) {\n                        continue;\n                    }\n\n                    if (!groups.includes(group.id)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: groupsPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToGroups() {\n        const permissions = await this.getGroupsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Models-related methods below. 👇\n     * - canAccessModel\n     * - ensureCanAccessModel\n     * - canAccessNonOwnedModels\n     * - canAccessOnlyOwnedModels\n     * - getModelsAccessControlList\n     * - hasFullAccessToModels\n     */\n\n    async canAccessModel(params: CanAccessModelParams) {\n        const acl = await this.getModelsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessModel(params: CanAccessModelParams = {}) {\n        const canAccess = await this.canAccessModel(params);\n        if (canAccess) {\n            return;\n        }\n\n        if (\"model\" in params) {\n            let modelName = \"(could not determine name)\";\n            if (params.model?.name) {\n                modelName = `\"${params.model.name}\"`;\n            }\n\n            throw new NotAuthorizedError(`Not allowed to access content model ${modelName}.`);\n        }\n\n        throw new NotAuthorizedError(`Not allowed to access content models.`);\n    }\n\n    async canAccessNonOwnedModels(params: GetModelsAccessControlListParams) {\n        const acl = await this.getModelsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedModels(params);\n        return !canAccessNonOwned;\n    }\n\n    async getModelsAccessControlList(\n        params: GetModelsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToModels(params)) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupsPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupsPermissions._src\n            );\n\n            if (!relatedModelPermissions) {\n                continue;\n            }\n\n            if (groupsPermissions.own) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    const group = await this.getGroup(model.group);\n                    if (!group) {\n                        continue;\n                    }\n\n                    const modelGroupCreatedBy = group.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(groupsPermissions.groups)) {\n                        continue;\n                    }\n\n                    if (!groupsPermissions.groups.includes(model.group)) {\n                        continue;\n                    }\n                }\n            }\n\n            const fullAccess =\n                !relatedModelPermissions.rwd &&\n                !relatedModelPermissions.own &&\n                !relatedModelPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: true,\n                    canAccessOnlyOwned: false\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.own) {\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    const modelCreatedBy = params.model.createdBy;\n                    if (!modelCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.models) {\n                const { models } = relatedModelPermissions;\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(models)) {\n                        continue;\n                    }\n\n                    if (!models.includes(params.model.modelId)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: relatedModelPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToModels(params: GetModelsAccessControlListParams) {\n        const { model } = params;\n        if (model) {\n            if (this.modelAuthorizationDisabled({ model })) {\n                return true;\n            }\n        }\n\n        const permissions = await this.getModelsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Entries-related methods below. 👇\n     * - canAccessEntry\n     * - ensureCanAccessEntry\n     * - canAccessNonOwnedEntries\n     * - canAccessOnlyOwnedEntries\n     * - getEntriesAccessControlList\n     * - hasFullAccessToEntries\n     */\n\n    async canAccessEntry(params: CanAccessEntryParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        const { pw } = params;\n        if (pw) {\n            const hasPw = acl.find(ace => ace.pw?.includes(pw));\n            if (!hasPw) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessEntry(params: CanAccessEntryParams) {\n        const canAccess = await this.canAccessEntry(params);\n        if (!canAccess) {\n            if (params.entry) {\n                throw new NotAuthorizedError(\n                    `Not allowed to access entry \"${params.entry.entryId}\".`\n                );\n            }\n\n            throw new NotAuthorizedError(\n                `Not allowed to access \"${params.model.modelId}\" entries.`\n            );\n        }\n    }\n\n    async canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedEntries(params);\n        return !canAccessNonOwned;\n    }\n\n    async getEntriesAccessControlList(\n        params: GetEntriesAccessControlListParams\n    ): Promise<EntriesAccessControlList> {\n        if (await this.hasFullAccessToEntries(params)) {\n            return [{ rwd: \"rwd\", pw: \"pu\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        // We need a map of groups slugs to ids, to perform checks on models\n        const { model } = params;\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: EntriesAccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelsPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedModelsPermissions) {\n                continue;\n            }\n\n            const entriesPermissionsList = await this.getEntriesPermissions();\n            const relatedEntriesPermissions = entriesPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedEntriesPermissions) {\n                continue;\n            }\n\n            if (groupPermissions.own) {\n                const group = await this.getGroup(model.group);\n                if (!group) {\n                    continue;\n                }\n\n                const groupCreatedBy = group.createdBy;\n                if (!groupCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (groupCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            if (groupPermissions.groups) {\n                const { groups } = groupPermissions;\n\n                if (!Array.isArray(groups)) {\n                    continue;\n                }\n\n                if (!groups.includes(model.group)) {\n                    continue;\n                }\n            }\n\n            if (relatedModelsPermissions.own) {\n                const modelCreatedBy = model.createdBy;\n                if (!modelCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (modelCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n            }\n\n            if (relatedModelsPermissions.models) {\n                if (!Array.isArray(relatedModelsPermissions.models)) {\n                    continue;\n                }\n\n                if (!relatedModelsPermissions.models.includes(model.modelId)) {\n                    continue;\n                }\n            }\n\n            const fullAccess =\n                !relatedEntriesPermissions.rwd &&\n                !relatedEntriesPermissions.own &&\n                !relatedEntriesPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: \"pu\"\n                });\n\n                continue;\n            }\n\n            if (relatedEntriesPermissions.own) {\n                if (\"entry\" in params) {\n                    const entryCreatedBy = params.entry?.createdBy;\n                    if (!entryCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (entryCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: relatedEntriesPermissions.rwd,\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            acl.push({\n                rwd: relatedEntriesPermissions.rwd,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false,\n                pw: relatedEntriesPermissions.pw\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToEntries(params: GetEntriesAccessControlListParams) {\n        if (this.modelAuthorizationDisabled(params)) {\n            return true;\n        }\n\n        const permissions = await this.getEntriesPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    private modelAuthorizationDisabled(params: IModelAuthorizationDisabledParams) {\n        if (\"authorization\" in params.model) {\n            const { authorization } = params.model;\n            if (typeof authorization === \"boolean\") {\n                return authorization === false;\n            }\n\n            return authorization?.permissions === false;\n        }\n\n        return false;\n    }\n\n    private async listAllGroups(): Promise<CmsGroup[]> {\n        if (this.allGroups === null) {\n            this.allGroups = this.listAllGroupsCallback();\n        }\n\n        return this.allGroups;\n    }\n\n    private async getGroup(slug: string): Promise<CmsGroup | undefined> {\n        const groups = await this.listAllGroups();\n        return groups.find(group => group.slug === slug);\n    }\n}\n"],"mappings":"AASA,SAASA,kBAAkB;AAsD3B,OAAO,MAAMC,aAAa,CAAC;EAUvBC,WAAWA,CAAC;IACRC,WAAW;IACXC,oBAAoB;IACpBC,oBAAoB;IACpBC,qBAAqB;IACrBC;EACiB,CAAC,EAAE;IACpB,IAAI,CAACJ,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,qBAAqB,GAAGA,qBAAqB;IAClD,IAAI,CAACE,qBAAqB,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,IAAI,CAACC,qBAAqB,GAAGF,aAAa;IAC1C,IAAI,CAACG,SAAS,GAAG,IAAI;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAACC,MAA4B,GAAG,CAAC,CAAC,EAAE;IACpD,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,EAAEC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,uBAAuBA,CAACT,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMC,wBAAwBA,CAACZ,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACF,uBAAuB,CAACT,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMT,0BAA0BA,CAC5BF,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACa,qBAAqB,CAAC,CAAC,EAAE;MACpC,OAAO,CAAC;QAAEP,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,MAAMe,iBAAiB,IAAID,qBAAqB,EAAE;MACnD,IAAIC,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMkB,mBAAmB,GAAGlB,MAAM,CAACmB,KAAK,EAAEC,SAAS;UACnD,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UAEzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;MACN;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEmB;UAAM,CAAC,GAAGnB,MAAM;UACxB,IAAI,CAACmB,KAAK,EAAE;YACR;UACJ;UAEA,MAAM;YAAEK;UAAO,CAAC,GAAGR,iBAAiB;UACpC,IAAI,CAACS,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAACY,KAAK,CAACG,EAAE,CAAC,EAAE;YAC5B;UACJ;QACJ;MACJ;MAEArB,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEU,iBAAiB,CAACV,GAAa;QACpCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMY,qBAAqBA,CAAA,EAAG;IAC1B,MAAMc,WAAW,GAAG,MAAM,IAAI,CAACnC,oBAAoB,CAAC,CAAC;IACrD,OAAOmC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAAChC,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAM0B,oBAAoBA,CAAClC,MAA4B,GAAG,CAAC,CAAC,EAAE;IAC1D,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACH,cAAc,CAAChC,MAAM,CAAC;IACnD,IAAImC,SAAS,EAAE;MACX;IACJ;IAEA,IAAI,OAAO,IAAInC,MAAM,EAAE;MACnB,IAAIoC,SAAS,GAAG,4BAA4B;MAC5C,IAAIpC,MAAM,CAACqC,KAAK,EAAEN,IAAI,EAAE;QACpBK,SAAS,GAAG,IAAIpC,MAAM,CAACqC,KAAK,CAACN,IAAI,GAAG;MACxC;MAEA,MAAM,IAAI3C,kBAAkB,CAAC,uCAAuCgD,SAAS,GAAG,CAAC;IACrF;IAEA,MAAM,IAAIhD,kBAAkB,CAAC,uCAAuC,CAAC;EACzE;EAEA,MAAMkD,uBAAuBA,CAACtC,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAM4B,wBAAwBA,CAACvC,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAAC2B,uBAAuB,CAACtC,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMsB,0BAA0BA,CAC5BjC,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACwC,qBAAqB,CAACxC,MAAM,CAAC,EAAE;MAC1C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMzB,iBAAiB,GAAGD,qBAAqB,CAAC0B,CAAC,CAAC;MAElD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMmD,uBAAuB,GAAGD,qBAAqB,CAACvC,IAAI,CACtDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAK7B,iBAAiB,CAAC6B,IAC1D,CAAC;MAED,IAAI,CAACD,uBAAuB,EAAE;QAC1B;MACJ;MAEA,IAAI5B,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,MAAMlB,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;UAC9C,IAAI,CAACA,KAAK,EAAE;YACR;UACJ;UAEA,MAAMD,mBAAmB,GAAGC,KAAK,CAACC,SAAS;UAC3C,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACV,iBAAiB,CAACQ,MAAM,CAAC,EAAE;YAC1C;UACJ;UAEA,IAAI,CAACR,iBAAiB,CAACQ,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;YACjD;UACJ;QACJ;MACJ;MAEA,MAAM4B,UAAU,GACZ,CAACH,uBAAuB,CAACtC,GAAG,IAC5B,CAACsC,uBAAuB,CAAC3B,GAAG,IAC5B,CAAC2B,uBAAuB,CAACI,MAAM;MAEnC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,IAAI;UACvBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAAC3B,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,MAAMY,cAAc,GAAGjD,MAAM,CAACqC,KAAK,CAACjB,SAAS;UAC7C,IAAI,CAAC6B,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAACI,MAAM,EAAE;QAChC,MAAM;UAAEA;QAAO,CAAC,GAAGJ,uBAAuB;QAC1C,IAAI,OAAO,IAAI5C,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACsB,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACzC,QAAQ,CAACP,MAAM,CAACqC,KAAK,CAACa,OAAO,CAAC,EAAE;YACxC;UACJ;QACJ;MACJ;MAEAjD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEsC,uBAAuB,CAACtC,GAAa;QAC1CK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMuC,qBAAqBA,CAACxC,MAAwC,EAAE;IAClE,MAAM;MAAEqC;IAAM,CAAC,GAAGrC,MAAM;IACxB,IAAIqC,KAAK,EAAE;MACP,IAAI,IAAI,CAACc,0BAA0B,CAAC;QAAEd;MAAM,CAAC,CAAC,EAAE;QAC5C,OAAO,IAAI;MACf;IACJ;IAEA,MAAMV,WAAW,GAAG,MAAM,IAAI,CAAClC,oBAAoB,CAAC,CAAC;IACrD,OAAOkC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMqB,cAAcA,CAACpD,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAE1D,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,MAAM;MAAE8C;IAAG,CAAC,GAAGtD,MAAM;IACrB,IAAIsD,EAAE,EAAE;MACJ,MAAMC,KAAK,GAAGtD,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACiD,EAAE,EAAE/C,QAAQ,CAAC+C,EAAE,CAAC,CAAC;MACnD,IAAI,CAACC,KAAK,EAAE;QACR,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,oBAAoBA,CAACxD,MAA4B,EAAE;IACrD,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACiB,cAAc,CAACpD,MAAM,CAAC;IACnD,IAAI,CAACmC,SAAS,EAAE;MACZ,IAAInC,MAAM,CAACyD,KAAK,EAAE;QACd,MAAM,IAAIrE,kBAAkB,CACxB,gCAAgCY,MAAM,CAACyD,KAAK,CAACC,OAAO,IACxD,CAAC;MACL;MAEA,MAAM,IAAItE,kBAAkB,CACxB,0BAA0BY,MAAM,CAACqC,KAAK,CAACa,OAAO,YAClD,CAAC;IACL;EACJ;EAEA,MAAMS,wBAAwBA,CAAC3D,MAAyC,EAAE;IACtE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAC1D,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMiD,yBAAyBA,CAAC5D,MAAyC,EAAE;IACvE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACgD,wBAAwB,CAAC3D,MAAM,CAAC;IACrE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAM0C,2BAA2BA,CAC7BrD,MAAyC,EACR;IACjC,IAAI,MAAM,IAAI,CAAC6D,sBAAsB,CAAC7D,MAAM,CAAC,EAAE;MAC3C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEgD,EAAE,EAAE,IAAI;QAAE3C,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IACzF;;IAEA;IACA,MAAM;MAAEuB;IAAM,CAAC,GAAGrC,MAAM;IACxB,MAAMe,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAA6B,GAAG,EAAE;IAExC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMqB,gBAAgB,GAAG/C,qBAAqB,CAAC0B,CAAC,CAAC;MAEjD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMsE,wBAAwB,GAAGpB,qBAAqB,CAACvC,IAAI,CACvDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACkB,wBAAwB,EAAE;QAC3B;MACJ;MAEA,MAAMC,sBAAsB,GAAG,MAAM,IAAI,CAACtE,qBAAqB,CAAC,CAAC;MACjE,MAAMuE,yBAAyB,GAAGD,sBAAsB,CAAC5D,IAAI,CACzDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACoB,yBAAyB,EAAE;QAC5B;MACJ;MAEA,IAAIH,gBAAgB,CAAC7C,GAAG,EAAE;QACtB,MAAME,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;QAC9C,IAAI,CAACA,KAAK,EAAE;UACR;QACJ;QAEA,MAAM+C,cAAc,GAAG/C,KAAK,CAACC,SAAS;QACtC,IAAI,CAAC8C,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM7C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI2E,cAAc,CAAC5C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIQ,gBAAgB,CAACtC,MAAM,EAAE;QACzB,MAAM;UAAEA;QAAO,CAAC,GAAGsC,gBAAgB;QAEnC,IAAI,CAACrC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;UACxB;QACJ;QAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;UAC/B;QACJ;MACJ;MAEA,IAAI4C,wBAAwB,CAAC9C,GAAG,EAAE;QAC9B,MAAMgC,cAAc,GAAGZ,KAAK,CAACjB,SAAS;QACtC,IAAI,CAAC6B,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;MACN;MAEA,IAAIS,wBAAwB,CAACf,MAAM,EAAE;QACjC,IAAI,CAACvB,KAAK,CAACC,OAAO,CAACqC,wBAAwB,CAACf,MAAM,CAAC,EAAE;UACjD;QACJ;QAEA,IAAI,CAACe,wBAAwB,CAACf,MAAM,CAACzC,QAAQ,CAAC8B,KAAK,CAACa,OAAO,CAAC,EAAE;UAC1D;QACJ;MACJ;MAEA,MAAMH,UAAU,GACZ,CAACkB,yBAAyB,CAAC3D,GAAG,IAC9B,CAAC2D,yBAAyB,CAAChD,GAAG,IAC9B,CAACgD,yBAAyB,CAACjB,MAAM;MAErC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAE;QACR,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIW,yBAAyB,CAAChD,GAAG,EAAE;QAC/B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMmE,cAAc,GAAGnE,MAAM,CAACyD,KAAK,EAAErC,SAAS;UAC9C,IAAI,CAAC+C,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM9C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI4E,cAAc,CAAC7C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;UAClCK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEArD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;QAClCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE,KAAK;QACzBwC,EAAE,EAAEW,yBAAyB,CAACX;MAClC,CAAC,CAAC;IACN;IAEA,OAAOrD,GAAG;EACd;EAEA,MAAM4D,sBAAsBA,CAAC7D,MAAyC,EAAE;IACpE,IAAI,IAAI,CAACmD,0BAA0B,CAACnD,MAAM,CAAC,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,MAAM2B,WAAW,GAAG,MAAM,IAAI,CAACjC,qBAAqB,CAAC,CAAC;IACtD,OAAOiC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;EAEQoB,0BAA0BA,CAACnD,MAAyC,EAAE;IAC1E,IAAI,eAAe,IAAIA,MAAM,CAACqC,KAAK,EAAE;MACjC,MAAM;QAAE+B;MAAc,CAAC,GAAGpE,MAAM,CAACqC,KAAK;MACtC,IAAI,OAAO+B,aAAa,KAAK,SAAS,EAAE;QACpC,OAAOA,aAAa,KAAK,KAAK;MAClC;MAEA,OAAOA,aAAa,EAAEzC,WAAW,KAAK,KAAK;IAC/C;IAEA,OAAO,KAAK;EAChB;EAEA,MAAchC,aAAaA,CAAA,EAAwB;IAC/C,IAAI,IAAI,CAACG,SAAS,KAAK,IAAI,EAAE;MACzB,IAAI,CAACA,SAAS,GAAG,IAAI,CAACD,qBAAqB,CAAC,CAAC;IACjD;IAEA,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcgD,QAAQA,CAACuB,IAAY,EAAiC;IAChE,MAAM7C,MAAM,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC,CAAC;IACzC,OAAO6B,MAAM,CAACpB,IAAI,CAACe,KAAK,IAAIA,KAAK,CAACkD,IAAI,KAAKA,IAAI,CAAC;EACpD;AACJ","ignoreList":[]}
+{"version":3,"names":["NotAuthorizedError","AccessControl","constructor","getIdentity","getGroupsPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","fullAccessPermissions","listAllGroupsCallback","allGroups","canAccessGroup","params","acl","getGroupsAccessControlList","canRead","find","ace","rwd","includes","hasRwd","canAccessNonOwnedGroups","some","canAccessNonOwned","canAccessOnlyOwnedGroups","hasFullAccessToGroups","canAccessOnlyOwned","groupsPermissionsList","groupsPermissions","own","modelGroupCreatedBy","group","createdBy","identity","id","push","groups","Array","isArray","permissions","p","filter","Boolean","name","canAccessModel","getModelsAccessControlList","ensureCanAccessModel","canAccess","modelName","model","canAccessNonOwnedModels","canAccessOnlyOwnedModels","hasFullAccessToModels","i","length","modelsPermissionsList","relatedModelPermissions","_src","getGroup","fullAccess","models","modelCreatedBy","modelId","modelAuthorizationDisabled","canAccessEntry","getEntriesAccessControlList","pw","hasPw","ensureCanAccessEntry","entry","entryId","canAccessNonOwnedEntries","canAccessOnlyOwnedEntries","hasFullAccessToEntries","groupPermissions","relatedModelsPermissions","entriesPermissionsList","relatedEntriesPermissions","groupCreatedBy","entryCreatedBy","authorization","slug"],"sources":["AccessControl.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryPermission,\n    CmsGroup,\n    CmsGroupPermission,\n    CmsModel,\n    CmsModelPermission\n} from \"~/types/index.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\n\nexport interface AccessControlParams {\n    getIdentity: () => Promise<SecurityIdentity>;\n    getGroupsPermissions: () => Promise<CmsGroupPermission[]>;\n    getModelsPermissions: () => Promise<CmsModelPermission[]>;\n    getEntriesPermissions: () => Promise<CmsEntryPermission[]>;\n    listAllGroups: () => Promise<CmsGroup[]>;\n}\n\ninterface GetGroupsAccessControlListParams {\n    group?: CmsGroup;\n}\n\ninterface CanAccessGroupParams extends GetGroupsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetModelsAccessControlListParams {\n    model?: CmsModel;\n}\n\ninterface CanAccessModelParams extends GetModelsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetEntriesAccessControlListParams {\n    model: Pick<CmsModel, \"modelId\" | \"createdBy\" | \"group\" | \"authorization\">;\n    entry?: Pick<CmsEntry, \"entryId\" | \"createdBy\">;\n}\n\nexport interface CanAccessEntryParams extends GetEntriesAccessControlListParams {\n    rwd?: string;\n    pw?: string;\n}\n\ninterface AccessControlEntry {\n    rwd: string;\n    canAccessNonOwned: boolean;\n    canAccessOnlyOwned: boolean;\n}\n\ntype AccessControlList = AccessControlEntry[];\n\ninterface EntriesAccessControlEntry extends AccessControlEntry {\n    pw?: string;\n}\n\ntype EntriesAccessControlList = EntriesAccessControlEntry[];\n\ninterface IModelAuthorizationDisabledParams {\n    model: Pick<CmsModel, \"authorization\">;\n}\n\nexport class AccessControl {\n    private getIdentity: AccessControlParams[\"getIdentity\"];\n    private getGroupsPermissions: AccessControlParams[\"getGroupsPermissions\"];\n    private getModelsPermissions: AccessControlParams[\"getModelsPermissions\"];\n    private getEntriesPermissions: AccessControlParams[\"getEntriesPermissions\"];\n    private listAllGroupsCallback: AccessControlParams[\"listAllGroups\"];\n\n    private fullAccessPermissions: string[];\n    private allGroups: null | Promise<CmsGroup[]>;\n\n    constructor({\n        getIdentity,\n        getGroupsPermissions,\n        getModelsPermissions,\n        getEntriesPermissions,\n        listAllGroups\n    }: AccessControlParams) {\n        this.getIdentity = getIdentity;\n        this.getGroupsPermissions = getGroupsPermissions;\n        this.getModelsPermissions = getModelsPermissions;\n        this.getEntriesPermissions = getEntriesPermissions;\n        this.fullAccessPermissions = [\"*\", \"cms.*\"];\n        this.listAllGroupsCallback = listAllGroups;\n        this.allGroups = null;\n    }\n\n    /**\n     * Groups-related methods below. 👇\n     * - canAccessGroup\n     * - ensureCanAccessGroup\n     * - canAccessNonOwnedGroups\n     * - canAccessOnlyOwnedGroups\n     * - getGroupsAccessControlList\n     * - hasFullAccessToGroups\n     */\n\n    async canAccessGroup(params: CanAccessGroupParams = {}) {\n        const acl = await this.getGroupsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd?.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const acl = await this.getGroupsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    private async canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedGroups(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getGroupsAccessControlList(\n        params: GetGroupsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToGroups()) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (const groupsPermissions of groupsPermissionsList) {\n            if (groupsPermissions.own) {\n                if (\"group\" in params) {\n                    const modelGroupCreatedBy = params.group?.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"group\" in params) {\n                    const { group } = params;\n                    if (!group) {\n                        continue;\n                    }\n\n                    const { groups } = groupsPermissions;\n                    if (!Array.isArray(groups)) {\n                        continue;\n                    }\n\n                    if (!groups.includes(group.id)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: groupsPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToGroups() {\n        const permissions = await this.getGroupsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Models-related methods below. 👇\n     * - canAccessModel\n     * - ensureCanAccessModel\n     * - canAccessNonOwnedModels\n     * - canAccessOnlyOwnedModels\n     * - getModelsAccessControlList\n     * - hasFullAccessToModels\n     */\n\n    async canAccessModel(params: CanAccessModelParams) {\n        const acl = await this.getModelsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async ensureCanAccessModel(params: CanAccessModelParams = {}) {\n        const canAccess = await this.canAccessModel(params);\n        if (canAccess) {\n            return;\n        }\n\n        if (\"model\" in params) {\n            let modelName = \"(could not determine name)\";\n            if (params.model?.name) {\n                modelName = `\"${params.model.name}\"`;\n            }\n\n            throw new NotAuthorizedError(`Not allowed to access content model ${modelName}.`);\n        }\n\n        throw new NotAuthorizedError(`Not allowed to access content models.`);\n    }\n\n    private async canAccessNonOwnedModels(params: GetModelsAccessControlListParams) {\n        const acl = await this.getModelsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    private async canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedModels(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getModelsAccessControlList(\n        params: GetModelsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToModels(params)) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupsPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupsPermissions._src\n            );\n\n            if (!relatedModelPermissions) {\n                continue;\n            }\n\n            if (groupsPermissions.own) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    const group = await this.getGroup(model.group);\n                    if (!group) {\n                        continue;\n                    }\n\n                    const modelGroupCreatedBy = group.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(groupsPermissions.groups)) {\n                        continue;\n                    }\n\n                    if (!groupsPermissions.groups.includes(model.group)) {\n                        continue;\n                    }\n                }\n            }\n\n            const fullAccess =\n                !relatedModelPermissions.rwd &&\n                !relatedModelPermissions.own &&\n                !relatedModelPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: true,\n                    canAccessOnlyOwned: false\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.own) {\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    const modelCreatedBy = params.model.createdBy;\n                    if (!modelCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.models) {\n                const { models } = relatedModelPermissions;\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(models)) {\n                        continue;\n                    }\n\n                    if (!models.includes(params.model.modelId)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: relatedModelPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToModels(params: GetModelsAccessControlListParams) {\n        const { model } = params;\n        if (model) {\n            if (this.modelAuthorizationDisabled({ model })) {\n                return true;\n            }\n        }\n\n        const permissions = await this.getModelsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Entries-related methods below. 👇\n     * - canAccessEntry\n     * - ensureCanAccessEntry\n     * - canAccessNonOwnedEntries\n     * - canAccessOnlyOwnedEntries\n     * - getEntriesAccessControlList\n     * - hasFullAccessToEntries\n     */\n\n    async canAccessEntry(params: CanAccessEntryParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        const { pw } = params;\n        if (pw) {\n            const hasPw = acl.find(ace => ace.pw?.includes(pw));\n            if (!hasPw) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async ensureCanAccessEntry(params: CanAccessEntryParams) {\n        const canAccess = await this.canAccessEntry(params);\n        if (!canAccess) {\n            if (params.entry) {\n                throw new NotAuthorizedError(\n                    `Not allowed to access entry \"${params.entry.entryId}\".`\n                );\n            }\n\n            throw new NotAuthorizedError(\n                `Not allowed to access \"${params.model.modelId}\" entries.`\n            );\n        }\n    }\n\n    private async canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedEntries(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getEntriesAccessControlList(\n        params: GetEntriesAccessControlListParams\n    ): Promise<EntriesAccessControlList> {\n        if (await this.hasFullAccessToEntries(params)) {\n            return [{ rwd: \"rwd\", pw: \"pu\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        // We need a map of groups slugs to ids, to perform checks on models\n        const { model } = params;\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: EntriesAccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelsPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedModelsPermissions) {\n                continue;\n            }\n\n            const entriesPermissionsList = await this.getEntriesPermissions();\n            const relatedEntriesPermissions = entriesPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedEntriesPermissions) {\n                continue;\n            }\n\n            if (groupPermissions.own) {\n                const group = await this.getGroup(model.group);\n                if (!group) {\n                    continue;\n                }\n\n                const groupCreatedBy = group.createdBy;\n                if (!groupCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (groupCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            if (groupPermissions.groups) {\n                const { groups } = groupPermissions;\n\n                if (!Array.isArray(groups)) {\n                    continue;\n                }\n\n                if (!groups.includes(model.group)) {\n                    continue;\n                }\n            }\n\n            if (relatedModelsPermissions.own) {\n                const modelCreatedBy = model.createdBy;\n                if (!modelCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (modelCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n            }\n\n            if (relatedModelsPermissions.models) {\n                if (!Array.isArray(relatedModelsPermissions.models)) {\n                    continue;\n                }\n\n                if (!relatedModelsPermissions.models.includes(model.modelId)) {\n                    continue;\n                }\n            }\n\n            const fullAccess =\n                !relatedEntriesPermissions.rwd &&\n                !relatedEntriesPermissions.own &&\n                !relatedEntriesPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: \"pu\"\n                });\n\n                continue;\n            }\n\n            if (relatedEntriesPermissions.own) {\n                if (\"entry\" in params) {\n                    const entryCreatedBy = params.entry?.createdBy;\n                    if (!entryCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (entryCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: relatedEntriesPermissions.rwd,\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            acl.push({\n                rwd: relatedEntriesPermissions.rwd,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false,\n                pw: relatedEntriesPermissions.pw\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToEntries(params: GetEntriesAccessControlListParams) {\n        if (this.modelAuthorizationDisabled(params)) {\n            return true;\n        }\n\n        const permissions = await this.getEntriesPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    private modelAuthorizationDisabled(params: IModelAuthorizationDisabledParams) {\n        if (\"authorization\" in params.model) {\n            const { authorization } = params.model;\n            if (typeof authorization === \"boolean\") {\n                return authorization === false;\n            }\n\n            return authorization?.permissions === false;\n        }\n\n        return false;\n    }\n\n    private async listAllGroups(): Promise<CmsGroup[]> {\n        if (this.allGroups === null) {\n            this.allGroups = this.listAllGroupsCallback();\n        }\n\n        return this.allGroups;\n    }\n\n    private async getGroup(slug: string): Promise<CmsGroup | undefined> {\n        const groups = await this.listAllGroups();\n        return groups.find(group => group.slug === slug);\n    }\n}\n"],"mappings":"AASA,SAASA,kBAAkB;AAsD3B,OAAO,MAAMC,aAAa,CAAC;EAUvBC,WAAWA,CAAC;IACRC,WAAW;IACXC,oBAAoB;IACpBC,oBAAoB;IACpBC,qBAAqB;IACrBC;EACiB,CAAC,EAAE;IACpB,IAAI,CAACJ,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,qBAAqB,GAAGA,qBAAqB;IAClD,IAAI,CAACE,qBAAqB,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,IAAI,CAACC,qBAAqB,GAAGF,aAAa;IAC1C,IAAI,CAACG,SAAS,GAAG,IAAI;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAACC,MAA4B,GAAG,CAAC,CAAC,EAAE;IACpD,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,EAAEC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAcC,uBAAuBA,CAACT,MAAwC,EAAE;IAC5E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAcC,wBAAwBA,CAACZ,MAAwC,EAAE;IAC7E,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACF,uBAAuB,CAACT,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAcT,0BAA0BA,CACpCF,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACa,qBAAqB,CAAC,CAAC,EAAE;MACpC,OAAO,CAAC;QAAEP,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,MAAMe,iBAAiB,IAAID,qBAAqB,EAAE;MACnD,IAAIC,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMkB,mBAAmB,GAAGlB,MAAM,CAACmB,KAAK,EAAEC,SAAS;UACnD,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UAEzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;MACN;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEmB;UAAM,CAAC,GAAGnB,MAAM;UACxB,IAAI,CAACmB,KAAK,EAAE;YACR;UACJ;UAEA,MAAM;YAAEK;UAAO,CAAC,GAAGR,iBAAiB;UACpC,IAAI,CAACS,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAACY,KAAK,CAACG,EAAE,CAAC,EAAE;YAC5B;UACJ;QACJ;MACJ;MAEArB,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEU,iBAAiB,CAACV,GAAa;QACpCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAcY,qBAAqBA,CAAA,EAAG;IAClC,MAAMc,WAAW,GAAG,MAAM,IAAI,CAACnC,oBAAoB,CAAC,CAAC;IACrD,OAAOmC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAAChC,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAc0B,oBAAoBA,CAAClC,MAA4B,GAAG,CAAC,CAAC,EAAE;IAClE,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACH,cAAc,CAAChC,MAAM,CAAC;IACnD,IAAImC,SAAS,EAAE;MACX;IACJ;IAEA,IAAI,OAAO,IAAInC,MAAM,EAAE;MACnB,IAAIoC,SAAS,GAAG,4BAA4B;MAC5C,IAAIpC,MAAM,CAACqC,KAAK,EAAEN,IAAI,EAAE;QACpBK,SAAS,GAAG,IAAIpC,MAAM,CAACqC,KAAK,CAACN,IAAI,GAAG;MACxC;MAEA,MAAM,IAAI3C,kBAAkB,CAAC,uCAAuCgD,SAAS,GAAG,CAAC;IACrF;IAEA,MAAM,IAAIhD,kBAAkB,CAAC,uCAAuC,CAAC;EACzE;EAEA,MAAckD,uBAAuBA,CAACtC,MAAwC,EAAE;IAC5E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAc4B,wBAAwBA,CAACvC,MAAwC,EAAE;IAC7E,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAAC2B,uBAAuB,CAACtC,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAcsB,0BAA0BA,CACpCjC,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACwC,qBAAqB,CAACxC,MAAM,CAAC,EAAE;MAC1C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMzB,iBAAiB,GAAGD,qBAAqB,CAAC0B,CAAC,CAAC;MAElD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMmD,uBAAuB,GAAGD,qBAAqB,CAACvC,IAAI,CACtDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAK7B,iBAAiB,CAAC6B,IAC1D,CAAC;MAED,IAAI,CAACD,uBAAuB,EAAE;QAC1B;MACJ;MAEA,IAAI5B,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,MAAMlB,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;UAC9C,IAAI,CAACA,KAAK,EAAE;YACR;UACJ;UAEA,MAAMD,mBAAmB,GAAGC,KAAK,CAACC,SAAS;UAC3C,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACV,iBAAiB,CAACQ,MAAM,CAAC,EAAE;YAC1C;UACJ;UAEA,IAAI,CAACR,iBAAiB,CAACQ,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;YACjD;UACJ;QACJ;MACJ;MAEA,MAAM4B,UAAU,GACZ,CAACH,uBAAuB,CAACtC,GAAG,IAC5B,CAACsC,uBAAuB,CAAC3B,GAAG,IAC5B,CAAC2B,uBAAuB,CAACI,MAAM;MAEnC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,IAAI;UACvBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAAC3B,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,MAAMY,cAAc,GAAGjD,MAAM,CAACqC,KAAK,CAACjB,SAAS;UAC7C,IAAI,CAAC6B,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAACI,MAAM,EAAE;QAChC,MAAM;UAAEA;QAAO,CAAC,GAAGJ,uBAAuB;QAC1C,IAAI,OAAO,IAAI5C,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACsB,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACzC,QAAQ,CAACP,MAAM,CAACqC,KAAK,CAACa,OAAO,CAAC,EAAE;YACxC;UACJ;QACJ;MACJ;MAEAjD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEsC,uBAAuB,CAACtC,GAAa;QAC1CK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAcuC,qBAAqBA,CAACxC,MAAwC,EAAE;IAC1E,MAAM;MAAEqC;IAAM,CAAC,GAAGrC,MAAM;IACxB,IAAIqC,KAAK,EAAE;MACP,IAAI,IAAI,CAACc,0BAA0B,CAAC;QAAEd;MAAM,CAAC,CAAC,EAAE;QAC5C,OAAO,IAAI;MACf;IACJ;IAEA,MAAMV,WAAW,GAAG,MAAM,IAAI,CAAClC,oBAAoB,CAAC,CAAC;IACrD,OAAOkC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMqB,cAAcA,CAACpD,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAE1D,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,MAAM;MAAE8C;IAAG,CAAC,GAAGtD,MAAM;IACrB,IAAIsD,EAAE,EAAE;MACJ,MAAMC,KAAK,GAAGtD,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACiD,EAAE,EAAE/C,QAAQ,CAAC+C,EAAE,CAAC,CAAC;MACnD,IAAI,CAACC,KAAK,EAAE;QACR,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAcC,oBAAoBA,CAACxD,MAA4B,EAAE;IAC7D,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACiB,cAAc,CAACpD,MAAM,CAAC;IACnD,IAAI,CAACmC,SAAS,EAAE;MACZ,IAAInC,MAAM,CAACyD,KAAK,EAAE;QACd,MAAM,IAAIrE,kBAAkB,CACxB,gCAAgCY,MAAM,CAACyD,KAAK,CAACC,OAAO,IACxD,CAAC;MACL;MAEA,MAAM,IAAItE,kBAAkB,CACxB,0BAA0BY,MAAM,CAACqC,KAAK,CAACa,OAAO,YAClD,CAAC;IACL;EACJ;EAEA,MAAcS,wBAAwBA,CAAC3D,MAAyC,EAAE;IAC9E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAC1D,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMiD,yBAAyBA,CAAC5D,MAAyC,EAAE;IACvE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACgD,wBAAwB,CAAC3D,MAAM,CAAC;IACrE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAc0C,2BAA2BA,CACrCrD,MAAyC,EACR;IACjC,IAAI,MAAM,IAAI,CAAC6D,sBAAsB,CAAC7D,MAAM,CAAC,EAAE;MAC3C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEgD,EAAE,EAAE,IAAI;QAAE3C,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IACzF;;IAEA;IACA,MAAM;MAAEuB;IAAM,CAAC,GAAGrC,MAAM;IACxB,MAAMe,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAA6B,GAAG,EAAE;IAExC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMqB,gBAAgB,GAAG/C,qBAAqB,CAAC0B,CAAC,CAAC;MAEjD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMsE,wBAAwB,GAAGpB,qBAAqB,CAACvC,IAAI,CACvDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACkB,wBAAwB,EAAE;QAC3B;MACJ;MAEA,MAAMC,sBAAsB,GAAG,MAAM,IAAI,CAACtE,qBAAqB,CAAC,CAAC;MACjE,MAAMuE,yBAAyB,GAAGD,sBAAsB,CAAC5D,IAAI,CACzDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACoB,yBAAyB,EAAE;QAC5B;MACJ;MAEA,IAAIH,gBAAgB,CAAC7C,GAAG,EAAE;QACtB,MAAME,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;QAC9C,IAAI,CAACA,KAAK,EAAE;UACR;QACJ;QAEA,MAAM+C,cAAc,GAAG/C,KAAK,CAACC,SAAS;QACtC,IAAI,CAAC8C,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM7C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI2E,cAAc,CAAC5C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIQ,gBAAgB,CAACtC,MAAM,EAAE;QACzB,MAAM;UAAEA;QAAO,CAAC,GAAGsC,gBAAgB;QAEnC,IAAI,CAACrC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;UACxB;QACJ;QAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;UAC/B;QACJ;MACJ;MAEA,IAAI4C,wBAAwB,CAAC9C,GAAG,EAAE;QAC9B,MAAMgC,cAAc,GAAGZ,KAAK,CAACjB,SAAS;QACtC,IAAI,CAAC6B,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;MACN;MAEA,IAAIS,wBAAwB,CAACf,MAAM,EAAE;QACjC,IAAI,CAACvB,KAAK,CAACC,OAAO,CAACqC,wBAAwB,CAACf,MAAM,CAAC,EAAE;UACjD;QACJ;QAEA,IAAI,CAACe,wBAAwB,CAACf,MAAM,CAACzC,QAAQ,CAAC8B,KAAK,CAACa,OAAO,CAAC,EAAE;UAC1D;QACJ;MACJ;MAEA,MAAMH,UAAU,GACZ,CAACkB,yBAAyB,CAAC3D,GAAG,IAC9B,CAAC2D,yBAAyB,CAAChD,GAAG,IAC9B,CAACgD,yBAAyB,CAACjB,MAAM;MAErC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAE;QACR,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIW,yBAAyB,CAAChD,GAAG,EAAE;QAC/B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMmE,cAAc,GAAGnE,MAAM,CAACyD,KAAK,EAAErC,SAAS;UAC9C,IAAI,CAAC+C,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM9C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI4E,cAAc,CAAC7C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;UAClCK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEArD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;QAClCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE,KAAK;QACzBwC,EAAE,EAAEW,yBAAyB,CAACX;MAClC,CAAC,CAAC;IACN;IAEA,OAAOrD,GAAG;EACd;EAEA,MAAc4D,sBAAsBA,CAAC7D,MAAyC,EAAE;IAC5E,IAAI,IAAI,CAACmD,0BAA0B,CAACnD,MAAM,CAAC,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,MAAM2B,WAAW,GAAG,MAAM,IAAI,CAACjC,qBAAqB,CAAC,CAAC;IACtD,OAAOiC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;EAEQoB,0BAA0BA,CAACnD,MAAyC,EAAE;IAC1E,IAAI,eAAe,IAAIA,MAAM,CAACqC,KAAK,EAAE;MACjC,MAAM;QAAE+B;MAAc,CAAC,GAAGpE,MAAM,CAACqC,KAAK;MACtC,IAAI,OAAO+B,aAAa,KAAK,SAAS,EAAE;QACpC,OAAOA,aAAa,KAAK,KAAK;MAClC;MAEA,OAAOA,aAAa,EAAEzC,WAAW,KAAK,KAAK;IAC/C;IAEA,OAAO,KAAK;EAChB;EAEA,MAAchC,aAAaA,CAAA,EAAwB;IAC/C,IAAI,IAAI,CAACG,SAAS,KAAK,IAAI,EAAE;MACzB,IAAI,CAACA,SAAS,GAAG,IAAI,CAACD,qBAAqB,CAAC,CAAC;IACjD;IAEA,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcgD,QAAQA,CAACuB,IAAY,EAAiC;IAChE,MAAM7C,MAAM,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC,CAAC;IACzC,OAAO6B,MAAM,CAACpB,IAAI,CAACe,KAAK,IAAIA,KAAK,CAACkD,IAAI,KAAKA,IAAI,CAAC;EACpD;AACJ","ignoreList":[]}

package/crud/AccessControl/README.md

@@ -44,4 +44,4 @@ When choosing "Only models created by the user" access scope via the `cms.conten
 
 <img src="./models-own.png">
 
-Note that only the entry publishing actions-related permissions are not automatically set here. They need to be defined when defining the role explicitly.
+Note that only the entry publishing actions-related permissions are not automatically set here. They need to be defined when defining the role explicitly.

package/crud/contentEntry/entryDataFactories/createEntryData.js

@@ -6,7 +6,8 @@ import { referenceFieldsMapping } from "../referenceFieldsMapping.js";
 import { createIdentifier, mdbid } from "@webiny/utils";
 import { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from "./statuses.js";
 import { getIdentity } from "../../../utils/identity.js";
-import { getState } from "./state.js";
+import { NotAuthorizedError } from "../../../utils/errors.js";
+import { getSystem } from "./system.js";
 /**
  * Used for some fields to convert their values.
  */
@@ -23,7 +24,7 @@ const convertDefaultValue = (field, value) => {
 const getDefaultValue = field => {
   const {
     settings,
-    multipleValues
+    list
   } = field;
   if (settings && settings.defaultValue !== undefined) {
     return convertDefaultValue(field, settings.defaultValue);
@@ -34,7 +35,7 @@ const getDefaultValue = field => {
   if (!predefinedValues || !predefinedValues.enabled || Array.isArray(predefinedValues.values) === false) {
     return undefined;
   }
-  if (!multipleValues) {
+  if (!list) {
     const selectedValue = predefinedValues.values.find(value => {
       return !!value.selected;
     });
@@ -54,7 +55,7 @@ const getDefaultValue = field => {
 const createEntryId = input => {
   let entryId = mdbid();
   if (input.id) {
-    if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\-]+)([a-zA-Z0-9])$/) === null) {
+    if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9-]+)([a-zA-Z0-9])$/) === null) {
       throw new WebinyError("The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.", "INVALID_ID", {
         id: input.id
       });
@@ -138,16 +139,21 @@ export const createEntryData = async ({
   const status = rawInput.status || STATUS_DRAFT;
   if (status !== STATUS_DRAFT) {
     if (status === STATUS_PUBLISHED) {
-      await accessControl.ensureCanAccessEntry({
+      const canPublish = await accessControl.canAccessEntry({
         model,
         pw: "p"
       });
+      if (!canPublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     } else if (status === STATUS_UNPUBLISHED) {
-      // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await accessControl.ensureCanAccessEntry({
+      const canUnpublish = await accessControl.canAccessEntry({
         model,
         pw: "u"
       });
+      if (!canUnpublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     }
   }
   const locked = status !== STATUS_DRAFT;
@@ -217,24 +223,33 @@ export const createEntryData = async ({
     location: {
       folderId: rawInput.location?.folderId || rawInput.wbyAco_location?.folderId || ROOT_FOLDER
     },
-    state: getState({
+    system: getSystem({
       input: rawInput
-    })
+    }),
+    live: status === STATUS_PUBLISHED ? {
+      version
+    } : null,
+    revisionDescription: ""
   };
   if (status !== STATUS_DRAFT) {
     if (status === STATUS_PUBLISHED) {
-      await accessControl.ensureCanAccessEntry({
+      const canPublish = await accessControl.canAccessEntry({
         model,
         entry,
         pw: "p"
       });
+      if (!canPublish) {
+        throw new NotAuthorizedError(`Not allowed to access entry "${entry.entryId}".`);
+      }
     } else if (status === STATUS_UNPUBLISHED) {
-      // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await accessControl.ensureCanAccessEntry({
+      const canUnpublish = await accessControl.canAccessEntry({
         model,
         entry,
         pw: "u"
       });
+      if (!canUnpublish) {
+        throw new NotAuthorizedError(`Not allowed to access entry "${entry.entryId}".`);
+      }
     }
   }
   return {