@webiny/api-headless-cms 0.0.0-unstable.fcdad0bc61 → 0.0.0-unstable.fdd9228b5d

package/crud/contentModel.crud.js

@@ -1,406 +1,398 @@
 "use strict";
 
 var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createModelsCrud = void 0;
-
-var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/objectSpread2"));
-
-var _dataloader = _interopRequireDefault(require("dataloader"));
-
+var _error = _interopRequireDefault(require("@webiny/error"));
 var _handlerGraphql = require("@webiny/handler-graphql");
-
 var _contentModelManagerFactory = require("./contentModel/contentModelManagerFactory");
-
-var _models = require("./contentModel/models");
-
-var _createFieldModels = require("./contentModel/createFieldModels");
-
-var _error = _interopRequireDefault(require("@webiny/error"));
-
 var _pubsub = require("@webiny/pubsub");
-
 var _beforeCreate = require("./contentModel/beforeCreate");
-
 var _beforeUpdate = require("./contentModel/beforeUpdate");
-
 var _beforeDelete = require("./contentModel/beforeDelete");
-
-var _afterCreate = require("./contentModel/afterCreate");
-
-var _afterUpdate = require("./contentModel/afterUpdate");
-
-var _afterDelete = require("./contentModel/afterDelete");
-
-var _afterCreateFrom = require("./contentModel/afterCreateFrom");
-
 var _CmsModelPlugin = require("../plugins/CmsModelPlugin");
-
-var _permissions = require("../utils/permissions");
-
+var _validation = require("./contentModel/validation");
+var _utils = require("@webiny/utils");
+var _defaultFields = require("./contentModel/defaultFields");
+var _utils2 = require("../utils");
+var _ensureTypeTag = require("./contentModel/ensureTypeTag");
+var _listModelsFromDatabase = require("./contentModel/listModelsFromDatabase");
 var _filterAsync = require("../utils/filterAsync");
-
-var _ownership = require("../utils/ownership");
-
-var _access = require("../utils/access");
-
-var _validateModelFields = require("./contentModel/validateModelFields");
-
-var _semver = _interopRequireDefault(require("semver"));
-
-/**
- * TODO: remove for 5.34.0
- * Required because of the 5.33.0 upgrade.
- * Until the upgrade is done, API will break because there is no storageId assigned.
- */
-const featureVersion = _semver.default.coerce("5.33.0");
-
-const attachStorageIdToFields = fields => {
-  return fields.map(field => {
-    var _field$settings;
-
-    if ((_field$settings = field.settings) !== null && _field$settings !== void 0 && _field$settings.fields) {
-      field.settings.fields = attachStorageIdToFields(field.settings.fields);
-    }
-
-    if (!field.storageId) {
-      field.storageId = field.fieldId;
-    }
-
-    return field;
-  });
-};
-
-const attachStorageIdToModelFields = model => {
-  if (!model.webinyVersion) {
-    return model.fields;
-  }
-
-  const version = _semver.default.coerce(model.webinyVersion);
-
-  if (!version) {
-    return model.fields;
-  }
-  /**
-   * Unfortunately we need to check for beta and next.
-   * TODO remove after 5.33.0
-   */
-
-
-  if (model.webinyVersion.match(/beta|next/)) {
-    return attachStorageIdToFields(model.fields);
-  }
-
-  if (_semver.default.compare(version, featureVersion) >= 0) {
-    return model.fields;
-  }
-
-  return attachStorageIdToFields(model.fields);
-};
-
+var _contentModelAst = require("../utils/contentModelAst");
+var _modelManager = require("../modelManager");
 const createModelsCrud = params => {
   const {
     getTenant,
     getIdentity,
     getLocale,
     storageOperations,
+    accessControl,
     context
   } = params;
-  const loaders = {
-    listModels: new _dataloader.default(async () => {
-      const models = await storageOperations.models.list({
-        where: {
-          tenant: getTenant().id,
-          locale: getLocale().code
-        }
-      });
-      return [models.map(model => {
-        return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, model), {}, {
-          fields: attachStorageIdToModelFields(model),
-          tenant: model.tenant || getTenant().id,
-          locale: model.locale || getLocale().code
-        });
-      })];
-    })
-  };
-
+  const listPluginModelsCache = (0, _utils2.createMemoryCache)();
+  const listFilteredModelsCache = (0, _utils2.createMemoryCache)();
+  const listDatabaseModelsCache = (0, _utils2.createMemoryCache)();
   const clearModelsCache = () => {
-    for (const loader of Object.values(loaders)) {
-      loader.clearAll();
-    }
+    listDatabaseModelsCache.clear();
+    listFilteredModelsCache.clear();
   };
-
   const managers = new Map();
-
   const updateManager = async (context, model) => {
     const manager = await (0, _contentModelManagerFactory.contentModelManagerFactory)(context, model);
     managers.set(model.modelId, manager);
     return manager;
   };
-
-  const checkModelPermissions = check => {
-    return (0, _permissions.checkPermissions)(context, "cms.contentModel", {
-      rwd: check
-    });
+  const fieldTypePlugins = context.plugins.byType("cms-model-field-to-graphql");
+  const getModelToAstConverter = () => {
+    return new _contentModelAst.CmsModelToAstConverter(new _contentModelAst.CmsModelFieldToAstConverterFromPlugins(fieldTypePlugins));
   };
-
-  const getModelsAsPlugins = () => {
-    const tenant = getTenant().id;
-    const locale = getLocale().code;
-    const models = context.plugins.byType(_CmsModelPlugin.CmsModelPlugin.type)
-    /**
-     * We need to filter out models that are not for this tenant or locale.
-     * If it does not have tenant or locale define, it is for every locale and tenant
-     */
-    .filter(plugin => {
-      const {
-        tenant: t,
-        locale: l
-      } = plugin.contentModel;
-
-      if (t && t !== tenant) {
-        return false;
-      } else if (l && l !== locale) {
-        return false;
-      }
-
-      return true;
-    }).map(plugin => {
-      return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, plugin.contentModel), {}, {
-        tenant,
-        locale,
-        webinyVersion: context.WEBINY_VERSION
-      });
+  const listPluginModels = async (tenant, locale) => {
+    const modelPlugins = context.plugins.byType(_CmsModelPlugin.CmsModelPlugin.type);
+    const cacheKey = (0, _utils2.createCacheKey)({
+      tenant,
+      locale,
+      models: modelPlugins.map(({
+        contentModel: model
+      }) => {
+        return `${model.modelId}#${model.pluralApiName}#${model.singularApiName}#${model.savedOn || "savedOn:plugin"}`;
+      }).join("/"),
+      identity: context.security.isAuthorizationEnabled() ? getIdentity()?.id : undefined
     });
-    /**
-     * Only point where we can truly validate the user model is in the runtime.
-     */
-
-    for (const model of models) {
-      (0, _validateModelFields.validateModelFields)({
-        model,
-        plugins: context.plugins
+    return listPluginModelsCache.getOrSet(cacheKey, async () => {
+      const models = modelPlugins
+      /**
+       * We need to filter out models that are not for this tenant or locale.
+       * If it does not have tenant or locale define, it is for every locale and tenant
+       */.filter(plugin => {
+        const {
+          tenant: modelTenant,
+          locale: modelLocale
+        } = plugin.contentModel;
+        if (modelTenant && modelTenant !== tenant) {
+          return false;
+        } else if (modelLocale && modelLocale !== locale) {
+          return false;
+        }
+        return true;
+      }).map(plugin => {
+        return {
+          ...plugin.contentModel,
+          tags: (0, _ensureTypeTag.ensureTypeTag)(plugin.contentModel),
+          tenant,
+          locale,
+          webinyVersion: context.WEBINY_VERSION
+        };
+      });
+      return (0, _filterAsync.filterAsync)(models, async model => {
+        return accessControl.canAccessModel({
+          model
+        });
       });
-    }
-
-    return models;
-  };
-
-  const modelsGet = async modelId => {
-    const pluginModel = getModelsAsPlugins().find(model => model.modelId === modelId);
-
-    if (pluginModel) {
-      return pluginModel;
-    }
-
-    const model = await storageOperations.models.get({
-      tenant: getTenant().id,
-      locale: getLocale().code,
-      modelId
     });
-
+  };
+  const getModelFromCache = async modelId => {
+    const models = await listModels();
+    const model = models.find(m => m.modelId === modelId);
     if (!model) {
       throw new _handlerGraphql.NotFoundError(`Content model "${modelId}" was not found!`);
     }
-
-    return (0, _objectSpread2.default)((0, _objectSpread2.default)({}, model), {}, {
+    return {
+      ...model,
+      tags: (0, _ensureTypeTag.ensureTypeTag)(model),
       tenant: model.tenant || getTenant().id,
       locale: model.locale || getLocale().code
-    });
-  };
-
-  const modelsList = async () => {
-    const databaseModels = await loaders.listModels.load("listModels");
-    const pluginsModels = getModelsAsPlugins();
-    return databaseModels.concat(pluginsModels);
+    };
   };
 
-  const listModels = async () => {
-    const permission = await checkModelPermissions("r");
-    const models = await modelsList();
-    return (0, _filterAsync.filterAsync)(models, async model => {
-      if (!(0, _ownership.validateOwnership)(context, permission, model)) {
-        return false;
+  /**
+   * The list models cache is a key -> Promise pair so it the listModels() can be called multiple times but executed only once.
+   *
+   * We always fetch the plugins and database models separately.
+   * Then we combine them and run access filtering on them
+   */
+  const listModels = async input => {
+    return context.benchmark.measure("headlessCms.crud.models.listModels", async () => {
+      /**
+       * Maybe we can cache based on permissions, not the identity id?
+       *
+       * TODO: @adrian please check if possible.
+       */
+      const tenant = getTenant().id;
+      const locale = getLocale().code;
+      let pluginModels = await listPluginModels(tenant, locale);
+      const dbCacheKey = (0, _utils2.createCacheKey)({
+        tenant,
+        locale
+      });
+      const databaseModels = await listDatabaseModelsCache.getOrSet(dbCacheKey, async () => {
+        return await (0, _listModelsFromDatabase.listModelsFromDatabase)(params);
+      });
+      const filteredCacheKey = (0, _utils2.createCacheKey)({
+        dbCacheKey: dbCacheKey.get(),
+        identity: context.security.isAuthorizationEnabled() ? getIdentity()?.id : undefined
+      });
+      let filteredModels = await listFilteredModelsCache.getOrSet(filteredCacheKey, async () => {
+        return (0, _filterAsync.filterAsync)(databaseModels, async model => {
+          return accessControl.canAccessModel({
+            model
+          });
+        });
+      });
+      /**
+       * Do we need to hide private models?
+       */
+      if (input?.includePrivate === false) {
+        filteredModels = filteredModels.filter(model => !model.isPrivate);
+        pluginModels = pluginModels.filter(model => !model.isPrivate);
       }
-
-      return (0, _access.validateModelAccess)(context, model);
+      /**
+       * Do we need to hide plugin models?
+       */
+      if (input?.includePlugins === false) {
+        return filteredModels;
+      }
+      return filteredModels.concat(pluginModels);
     });
   };
-
   const getModel = async modelId => {
-    const permission = await checkModelPermissions("r");
-    const model = await modelsGet(modelId);
-    (0, _ownership.checkOwnership)(context, permission, model);
-    await (0, _access.checkModelAccess)(context, model);
-    return model;
+    return context.benchmark.measure("headlessCms.crud.models.getModel", async () => {
+      const model = await context.security.withoutAuthorization(async () => {
+        return await getModelFromCache(modelId);
+      });
+      if (!model) {
+        throw new _handlerGraphql.NotFoundError(`Content model "${modelId}" was not found!`);
+      }
+      await accessControl.ensureCanAccessModel({
+        model
+      });
+      return model;
+    });
   };
-
-  const getModelManager = async target => {
+  const getEntryManager = async target => {
     const modelId = typeof target === "string" ? target : target.modelId;
-
     if (managers.has(modelId)) {
       return managers.get(modelId);
     }
-
-    const models = await modelsList();
-    const model = models.find(m => m.modelId === modelId);
-
-    if (!model) {
-      throw new _handlerGraphql.NotFoundError(`There is no content model "${modelId}".`);
-    }
-
+    const model = await getModelFromCache(modelId);
     return await updateManager(context, model);
-  }; // create
-
+  };
+  const getSingletonEntryManager = async input => {
+    const model = typeof input === "string" ? await getModel(input) : input;
+    const manager = await getEntryManager(model);
+    return _modelManager.SingletonModelManager.create(manager);
+  };
 
+  /**
+   * Create
+   */
   const onModelBeforeCreate = (0, _pubsub.createTopic)("cms.onModelBeforeCreate");
-  const onModelAfterCreate = (0, _pubsub.createTopic)("cms.onModelAfterCreate"); // create from
-
+  const onModelAfterCreate = (0, _pubsub.createTopic)("cms.onModelAfterCreate");
+  const onModelCreateError = (0, _pubsub.createTopic)("cms.onModelCreateError");
+  /**
+   * Create from / clone
+   */
   const onModelBeforeCreateFrom = (0, _pubsub.createTopic)("cms.onModelBeforeCreateFrom");
-  const onModelAfterCreateFrom = (0, _pubsub.createTopic)("cms.onModelAfterCreateFrom"); // update
-
+  const onModelAfterCreateFrom = (0, _pubsub.createTopic)("cms.onModelAfterCreateFrom");
+  const onModelCreateFromError = (0, _pubsub.createTopic)("cms.onModelCreateFromError");
+  /**
+   * Update
+   */
   const onModelBeforeUpdate = (0, _pubsub.createTopic)("cms.onModelBeforeUpdate");
-  const onModelAfterUpdate = (0, _pubsub.createTopic)("cms.onModelAfterUpdate"); // delete
-
+  const onModelAfterUpdate = (0, _pubsub.createTopic)("cms.onModelAfterUpdate");
+  const onModelUpdateError = (0, _pubsub.createTopic)("cms.onModelUpdateError");
+  /**
+   * Delete
+   */
   const onModelBeforeDelete = (0, _pubsub.createTopic)("cms.onModelBeforeDelete");
   const onModelAfterDelete = (0, _pubsub.createTopic)("cms.onModelAfterDelete");
+  const onModelDeleteError = (0, _pubsub.createTopic)("cms.onModelDeleteError");
+  /**
+   * Initialize
+   */
   const onModelInitialize = (0, _pubsub.createTopic)("cms.onModelInitialize");
   /**
    * We need to assign some default behaviors.
    */
-
   (0, _beforeCreate.assignModelBeforeCreate)({
     onModelBeforeCreate,
     onModelBeforeCreateFrom,
-    plugins: context.plugins,
-    storageOperations
-  });
-  (0, _afterCreate.assignModelAfterCreate)({
     context,
-    onModelAfterCreate
+    storageOperations
   });
   (0, _beforeUpdate.assignModelBeforeUpdate)({
     onModelBeforeUpdate,
-    plugins: context.plugins,
-    storageOperations
-  });
-  (0, _afterUpdate.assignModelAfterUpdate)({
-    context,
-    onModelAfterUpdate
-  });
-  (0, _afterCreateFrom.assignModelAfterCreateFrom)({
-    context,
-    onModelAfterCreateFrom
+    context
   });
   (0, _beforeDelete.assignModelBeforeDelete)({
     onModelBeforeDelete,
-    plugins: context.plugins,
-    storageOperations
-  });
-  (0, _afterDelete.assignModelAfterDelete)({
-    context,
-    onModelAfterDelete
+    context
   });
-  return {
-    /**
-     * Deprecated - will be removed in 5.36.0
-     */
-    onBeforeModelCreate: onModelBeforeCreate,
-    onAfterModelCreate: onModelAfterCreate,
-    onBeforeModelCreateFrom: onModelBeforeCreateFrom,
-    onAfterModelCreateFrom: onModelAfterCreateFrom,
-    onBeforeModelUpdate: onModelBeforeUpdate,
-    onAfterModelUpdate: onModelAfterUpdate,
-    onBeforeModelDelete: onModelBeforeDelete,
-    onAfterModelDelete: onModelAfterDelete,
 
+  /**
+   * CRUD methods
+   */
+  const createModel = async input => {
+    await accessControl.ensureCanAccessModel({
+      rwd: "w"
+    });
+    const result = await (0, _validation.createModelCreateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
     /**
-     * Released in 5.34.0
+     * We need to extract the defaultFields because it is not for the CmsModel object.
      */
-    onModelBeforeCreate,
-    onModelAfterCreate,
-    onModelBeforeCreateFrom,
-    onModelAfterCreateFrom,
-    onModelBeforeUpdate,
-    onModelAfterUpdate,
-    onModelBeforeDelete,
-    onModelAfterDelete,
-    onModelInitialize,
-    clearModelsCache,
-    getModel,
-    listModels,
-
-    async createModel(inputData) {
-      await checkModelPermissions("w");
-      const createdData = new _models.CreateContentModelModel().populate(inputData);
-      await createdData.validate();
-      const input = await createdData.toJSON();
-      context.security.disableAuthorization();
-      const group = await context.cms.getGroup(input.group);
-      context.security.enableAuthorization();
-
-      if (!group) {
-        throw new _handlerGraphql.NotFoundError(`There is no group "${input.group}".`);
-      }
-
-      const fields = await (0, _createFieldModels.createFieldModels)(input.fields);
-      const identity = getIdentity();
-      const model = {
-        name: input.name,
-        description: input.description || "",
-        modelId: input.modelId || "",
-        titleFieldId: "id",
-        locale: getLocale().code,
-        tenant: getTenant().id,
-        group: {
-          id: group.id,
-          name: group.name
-        },
-        createdBy: {
-          id: identity.id,
-          displayName: identity.displayName,
-          type: identity.type
-        },
-        createdOn: new Date().toISOString(),
-        savedOn: new Date().toISOString(),
-        fields,
-        lockedFields: [],
-        layout: input.layout || [],
-        webinyVersion: context.WEBINY_VERSION
-      };
+    const {
+      defaultFields,
+      ...data
+    } = (0, _utils.removeUndefinedValues)(result.data);
+    if (defaultFields) {
+      (0, _defaultFields.assignModelDefaultFields)(data);
+    }
+    const group = await context.cms.getGroup(data.group);
+    const identity = getIdentity();
+    const model = {
+      ...data,
+      modelId: data.modelId || "",
+      singularApiName: data.singularApiName,
+      pluralApiName: data.pluralApiName,
+      titleFieldId: "id",
+      descriptionFieldId: null,
+      imageFieldId: null,
+      description: data.description || "",
+      locale: getLocale().code,
+      tenant: getTenant().id,
+      group: {
+        id: group.id,
+        name: group.name
+      },
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      createdOn: new Date().toISOString(),
+      savedOn: new Date().toISOString(),
+      lockedFields: [],
+      webinyVersion: context.WEBINY_VERSION
+    };
+    model.tags = (0, _ensureTypeTag.ensureTypeTag)(model);
+    await accessControl.ensureCanAccessModel({
+      model,
+      rwd: "w"
+    });
+    try {
       await onModelBeforeCreate.publish({
-        input,
+        input: data,
         model
       });
       const createdModel = await storageOperations.models.create({
         model
       });
-      loaders.listModels.clearAll();
+      clearModelsCache();
       await updateManager(context, model);
       await onModelAfterCreate.publish({
-        input,
+        input: data,
         model: createdModel
       });
       return createdModel;
-    },
+    } catch (ex) {
+      await onModelCreateError.publish({
+        input: data,
+        model,
+        error: ex
+      });
+      throw ex;
+    }
+  };
+  const updateModel = async (modelId, input) => {
+    await accessControl.ensureCanAccessModel({
+      rwd: "w"
+    });
 
-    /**
-     * Method does not check for permissions or ownership.
-     * @internal
-     */
-    async updateModelDirect(params) {
-      const {
-        model: initialModel,
-        original
-      } = params;
-      const model = (0, _objectSpread2.default)((0, _objectSpread2.default)({}, initialModel), {}, {
-        tenant: initialModel.tenant || getTenant().id,
-        locale: initialModel.locale || getLocale().code,
-        webinyVersion: context.WEBINY_VERSION
+    // Get a model record; this will also perform ownership validation.
+    const original = await getModel(modelId);
+    const result = await (0, _validation.createModelUpdateValidation)().safeParseAsync(input);
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = (0, _utils.removeUndefinedValues)(result.data);
+    if (Object.keys(data).length === 0) {
+      /**
+       * We need to return the original if nothing is to be updated.
+       */
+      return original;
+    }
+    let group = {
+      id: original.group.id,
+      name: original.group.name
+    };
+    const groupId = data.group;
+    if (groupId) {
+      const groupData = await context.cms.getGroup(groupId);
+      group = {
+        id: groupData.id,
+        name: groupData.name
+      };
+    }
+    const model = {
+      ...original,
+      ...data,
+      titleFieldId: data.titleFieldId === undefined ? original.titleFieldId : data.titleFieldId,
+      descriptionFieldId: data.descriptionFieldId === undefined ? original.descriptionFieldId : data.descriptionFieldId,
+      imageFieldId: data.imageFieldId === undefined ? original.imageFieldId : data.imageFieldId,
+      group,
+      description: data.description || original.description,
+      tenant: original.tenant || getTenant().id,
+      locale: original.locale || getLocale().code,
+      webinyVersion: context.WEBINY_VERSION,
+      savedOn: new Date().toISOString()
+    };
+    await accessControl.ensureCanAccessModel({
+      model,
+      rwd: "w"
+    });
+    model.tags = (0, _ensureTypeTag.ensureTypeTag)(model);
+    try {
+      await onModelBeforeUpdate.publish({
+        input: data,
+        original,
+        model
+      });
+      const resultModel = await storageOperations.models.update({
+        model
+      });
+      await updateManager(context, resultModel);
+      await onModelAfterUpdate.publish({
+        input: data,
+        original,
+        model: resultModel
+      });
+      return resultModel;
+    } catch (ex) {
+      await onModelUpdateError.publish({
+        input: data,
+        model,
+        original,
+        error: ex
       });
+      throw ex;
+    }
+  };
+  const updateModelDirect = async params => {
+    const {
+      model: initialModel,
+      original
+    } = params;
+    const model = {
+      ...initialModel,
+      tenant: initialModel.tenant || getTenant().id,
+      locale: initialModel.locale || getLocale().code,
+      webinyVersion: context.WEBINY_VERSION
+    };
+    try {
       await onModelBeforeUpdate.publish({
         input: {},
         original,
@@ -410,159 +402,123 @@ const createModelsCrud = params => {
         model
       });
       await updateManager(context, resultModel);
-      loaders.listModels.clearAll();
+      clearModelsCache();
       await onModelAfterUpdate.publish({
         input: {},
         original,
         model: resultModel
       });
       return resultModel;
-    },
-
-    async createModelFrom(modelId, data) {
-      await checkModelPermissions("w");
-      /**
-       * Get a model record; this will also perform ownership validation.
-       */
-
-      const original = await getModel(modelId);
-      const createdData = new _models.CreateContentModelModelFrom().populate({
-        name: data.name,
-        modelId: data.modelId,
-        description: data.description || original.description,
-        group: data.group,
-        locale: data.locale
-      });
-      await createdData.validate();
-      const input = await createdData.toJSON();
-      const locale = await context.i18n.getLocale(input.locale || original.locale);
-
-      if (!locale) {
-        throw new _handlerGraphql.NotFoundError(`There is no locale "${input.locale}".`);
-      }
-      /**
-       * Use storage operations directly because we cannot get group from different locale via context methods.
-       */
-
-
-      const group = await context.cms.storageOperations.groups.get({
-        id: input.group,
-        tenant: original.tenant,
-        locale: locale.code
+    } catch (ex) {
+      await onModelUpdateError.publish({
+        input: {},
+        original,
+        model,
+        error: ex
       });
+      throw ex;
+    }
+  };
+  const createModelFrom = async (modelId, input) => {
+    await accessControl.ensureCanAccessModel({
+      rwd: "w"
+    });
 
-      if (!group) {
-        throw new _handlerGraphql.NotFoundError(`There is no group "${input.group}".`);
-      }
-
-      const identity = getIdentity();
-      const model = (0, _objectSpread2.default)((0, _objectSpread2.default)({}, original), {}, {
-        locale: locale.code,
-        group: {
-          id: group.id,
-          name: group.name
-        },
-        name: input.name,
-        modelId: input.modelId || "",
-        description: input.description || "",
-        createdBy: {
-          id: identity.id,
-          displayName: identity.displayName,
-          type: identity.type
-        },
-        createdOn: new Date().toISOString(),
-        savedOn: new Date().toISOString(),
-        lockedFields: [],
-        webinyVersion: context.WEBINY_VERSION
-      });
+    /**
+     * Get a model record; this will also perform ownership validation.
+     */
+    const original = await getModel(modelId);
+    const result = await (0, _validation.createModelCreateFromValidation)().safeParseAsync({
+      ...input,
+      description: input.description || original.description
+    });
+    if (!result.success) {
+      throw (0, _utils.createZodError)(result.error);
+    }
+    const data = (0, _utils.removeUndefinedValues)(result.data);
+    const locale = await context.i18n.getLocale(data.locale || original.locale);
+    if (!locale) {
+      throw new _handlerGraphql.NotFoundError(`There is no locale "${data.locale}".`);
+    }
+    /**
+     * Use storage operations directly because we cannot get group from different locale via context methods.
+     */
+    const group = await context.cms.storageOperations.groups.get({
+      id: data.group,
+      tenant: original.tenant,
+      locale: locale.code
+    });
+    if (!group) {
+      throw new _handlerGraphql.NotFoundError(`There is no group "${data.group}".`);
+    }
+    const identity = getIdentity();
+    const model = {
+      ...original,
+      singularApiName: data.singularApiName,
+      pluralApiName: data.pluralApiName,
+      locale: locale.code,
+      group: {
+        id: group.id,
+        name: group.name
+      },
+      icon: data.icon,
+      name: data.name,
+      modelId: data.modelId || "",
+      description: data.description || "",
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      createdOn: new Date().toISOString(),
+      savedOn: new Date().toISOString(),
+      lockedFields: [],
+      webinyVersion: context.WEBINY_VERSION
+    };
+    await accessControl.ensureCanAccessModel({
+      model,
+      rwd: "w"
+    });
+    try {
       await onModelBeforeCreateFrom.publish({
-        input,
+        input: data,
         model,
         original
       });
       const createdModel = await storageOperations.models.create({
         model
       });
-      loaders.listModels.clearAll();
+      clearModelsCache();
       await updateManager(context, model);
       await onModelAfterCreateFrom.publish({
-        input,
+        input: data,
         original,
         model: createdModel
       });
       return createdModel;
-    },
-
-    async updateModel(modelId, inputData) {
-      await checkModelPermissions("w"); // Get a model record; this will also perform ownership validation.
-
-      const original = await getModel(modelId);
-      const updatedData = new _models.UpdateContentModelModel().populate(inputData);
-      await updatedData.validate();
-      const input = await updatedData.toJSON({
-        onlyDirty: true
-      });
-
-      if (Object.keys(input).length === 0) {
-        /**
-         * We need to return the original if nothing is to be updated.
-         */
-        return original;
-      }
-
-      let group = {
-        id: original.group.id,
-        name: original.group.name
-      };
-
-      if (input.group) {
-        context.security.disableAuthorization();
-        const groupData = await context.cms.getGroup(input.group);
-        context.security.enableAuthorization();
-
-        if (!groupData) {
-          throw new _handlerGraphql.NotFoundError(`There is no group "${input.group}".`);
-        }
-
-        group = {
-          id: groupData.id,
-          name: groupData.name
-        };
-      }
-
-      const fields = await (0, _createFieldModels.createFieldModels)(inputData.fields);
-      const model = (0, _objectSpread2.default)((0, _objectSpread2.default)((0, _objectSpread2.default)({}, original), input), {}, {
-        group,
-        tenant: original.tenant || getTenant().id,
-        locale: original.locale || getLocale().code,
-        webinyVersion: context.WEBINY_VERSION,
-        fields,
-        savedOn: new Date().toISOString()
-      });
-      await onModelBeforeUpdate.publish({
-        input,
-        original,
-        model
-      });
-      const resultModel = await storageOperations.models.update({
-        model
-      });
-      await updateManager(context, resultModel);
-      await onModelAfterUpdate.publish({
-        input,
+    } catch (ex) {
+      await onModelCreateFromError.publish({
+        input: data,
         original,
-        model: resultModel
+        model,
+        error: ex
       });
-      return resultModel;
-    },
-
-    async deleteModel(modelId) {
-      await checkModelPermissions("d");
-      const model = await getModel(modelId);
+      throw ex;
+    }
+  };
+  const deleteModel = async modelId => {
+    await accessControl.ensureCanAccessModel({
+      rwd: "d"
+    });
+    const model = await getModel(modelId);
+    await accessControl.ensureCanAccessModel({
+      model,
+      rwd: "d"
+    });
+    try {
       await onModelBeforeDelete.publish({
         model
       });
-
       try {
         await storageOperations.models.delete({
           model
@@ -573,33 +529,92 @@ const createModelsCrud = params => {
           modelId: model.modelId
         });
       }
-
+      clearModelsCache();
       await onModelAfterDelete.publish({
         model
       });
       managers.delete(model.modelId);
+    } catch (ex) {
+      await onModelDeleteError.publish({
+        model,
+        error: ex
+      });
+      throw ex;
+    }
+  };
+  const initializeModel = async (modelId, data) => {
+    /**
+     * We require that users have write permissions to initialize models.
+     * Maybe introduce another permission for it?
+     */
+    const model = await getModel(modelId);
+    await accessControl.ensureCanAccessModel({
+      model,
+      rwd: "w"
+    });
+    await onModelInitialize.publish({
+      model,
+      data
+    });
+    return true;
+  };
+  return {
+    onModelBeforeCreate,
+    onModelAfterCreate,
+    onModelCreateError,
+    onModelBeforeCreateFrom,
+    onModelAfterCreateFrom,
+    onModelCreateFromError,
+    onModelBeforeUpdate,
+    onModelAfterUpdate,
+    onModelUpdateError,
+    onModelBeforeDelete,
+    onModelAfterDelete,
+    onModelDeleteError,
+    onModelInitialize,
+    clearModelsCache,
+    getModel,
+    getModelToAstConverter,
+    listModels,
+    async createModel(input) {
+      return context.benchmark.measure("headlessCms.crud.models.createModel", async () => {
+        return createModel(input);
+      });
     },
-
-    async initializeModel(modelId) {
-      /**
-       * We require that users have write permissions to initialize models.
-       * Maybe introduce another permission for it?
-       */
-      await checkModelPermissions("w");
-      const model = await getModel(modelId);
-      await onModelInitialize.publish({
-        model
+    /**
+     * Method does not check for permissions or ownership.
+     * @internal
+     */
+    async updateModelDirect(params) {
+      return context.benchmark.measure("headlessCms.crud.models.updateModelDirect", async () => {
+        return updateModelDirect(params);
       });
-      return true;
     },
-
-    getModelManager,
-    getEntryManager: async model => {
-      return getModelManager(model);
+    async createModelFrom(modelId, userInput) {
+      return context.benchmark.measure("headlessCms.crud.models.createModelFrom", async () => {
+        return createModelFrom(modelId, userInput);
+      });
+    },
+    async updateModel(modelId, input) {
+      return context.benchmark.measure("headlessCms.crud.models.updateModel", async () => {
+        return updateModel(modelId, input);
+      });
+    },
+    async deleteModel(modelId) {
+      return context.benchmark.measure("headlessCms.crud.models.deleteModel", async () => {
+        return deleteModel(modelId);
+      });
+    },
+    async initializeModel(modelId, data) {
+      return context.benchmark.measure("headlessCms.crud.models.initializeModel", async () => {
+        return initializeModel(modelId, data);
+      });
     },
-    getManagers: () => managers,
-    getEntryManagers: () => managers
+    getEntryManager,
+    getEntryManagers: () => managers,
+    getSingletonEntryManager
   };
 };
+exports.createModelsCrud = createModelsCrud;
 
-exports.createModelsCrud = createModelsCrud;
+//# sourceMappingURL=contentModel.crud.js.map