@webiny/api-headless-cms 5.37.0 → 5.37.1-beta.1

package/utils/entryStorage.js.map

@@ -1 +1 @@
-{"version":3,"names":["_error","_interopRequireDefault","require","_StorageTransformPlugin","_getBaseFieldType","getStoragePluginFactory","context","defaultStoragePlugin","plugins","byType","StorageTransformPlugin","type","reverse","reduce","collection","plugin","fieldType","entryStorageTransform","model","operation","entry","getStoragePlugin","transformedValues","field","fields","baseType","getBaseFieldType","WebinyError","name","fieldId","value","values","_objectSpread2","default","entryToStorageTransform","exports","entryFromStorageTransform","entryFieldFromStorageTransform","params","fromStorage"],"sources":["entryStorage.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { StorageTransformPlugin } from \"~/plugins/StorageTransformPlugin\";\nimport { CmsEntry, CmsModel, CmsModelField, CmsContext } from \"~/types\";\nimport { getBaseFieldType } from \"~/utils/getBaseFieldType\";\n\ninterface GetStoragePluginFactory {\n    (context: CmsContext): (fieldType: string) => StorageTransformPlugin<any>;\n}\n\nconst getStoragePluginFactory: GetStoragePluginFactory = context => {\n    let defaultStoragePlugin: StorageTransformPlugin;\n\n    const plugins = context.plugins\n        .byType<StorageTransformPlugin>(StorageTransformPlugin.type)\n        // we reverse plugins because we want to get latest added only\n        .reverse()\n        .reduce((collection, plugin) => {\n            /**\n             * Check if it's a default plugin and set it - always override the previous one.\n             */\n            if (plugin.fieldType === \"*\") {\n                defaultStoragePlugin = plugin;\n                return collection;\n            }\n\n            /**\n             * We will just set the plugin for given type.\n             * The last one will override existing one - so users can override our default ones.\n             */\n            collection[plugin.fieldType] = plugin;\n\n            return collection;\n        }, {} as Record<string, StorageTransformPlugin>);\n\n    return (fieldType: string) => {\n        return plugins[fieldType] || defaultStoragePlugin;\n    };\n};\n\n/**\n * This should be used when transforming the whole entry.\n */\nconst entryStorageTransform = async (\n    context: CmsContext,\n    model: CmsModel,\n    operation: \"toStorage\" | \"fromStorage\",\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    const getStoragePlugin = getStoragePluginFactory(context);\n\n    const transformedValues: Record<string, any> = {};\n    for (const field of model.fields) {\n        const baseType = getBaseFieldType(field);\n        const plugin = getStoragePlugin(baseType);\n        // TODO: remove this once plugins are converted into classes\n        if (typeof plugin[operation] !== \"function\") {\n            throw new WebinyError(\n                `Missing \"${operation}\" function in storage plugin \"${plugin.name}\" for field type \"${baseType}\"`\n            );\n        }\n\n        transformedValues[field.fieldId] = await plugin[operation]({\n            plugins: context.plugins,\n            model,\n            field,\n            value: entry.values[field.fieldId],\n            getStoragePlugin\n        });\n    }\n\n    return { ...entry, values: transformedValues };\n};\n\n/**\n * A function that is used in crud to transform entry into the storage type.\n */\nexport const entryToStorageTransform = async (\n    context: CmsContext,\n    model: CmsModel,\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    return entryStorageTransform(context, model, \"toStorage\", entry);\n};\n\n/**\n * A function that is used to transform the whole entry from storage into its native form.\n */\nexport const entryFromStorageTransform = async (\n    context: CmsContext,\n    model: CmsModel,\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    return entryStorageTransform(context, model, \"fromStorage\", entry);\n};\n\ninterface EntryFieldFromStorageTransformParams {\n    context: CmsContext;\n    model: CmsModel;\n    field: CmsModelField;\n    value: any;\n}\n/*\n * A function that is used to transform a single field from storage\n */\nexport const entryFieldFromStorageTransform = async <T = any>(\n    params: EntryFieldFromStorageTransformParams\n): Promise<T> => {\n    const { context, model, field, value } = params;\n    const getStoragePlugin = getStoragePluginFactory(context);\n\n    const baseType = getBaseFieldType(field);\n    const plugin = getStoragePlugin(baseType);\n\n    // TODO: remove this once plugins are converted into classes\n    if (typeof plugin.fromStorage !== \"function\") {\n        throw new WebinyError(\n            `Missing \"fromStorage\" function in storage plugin \"${plugin.name}\" for field type \"${baseType}\"`\n        );\n    }\n\n    return plugin.fromStorage({\n        plugins: context.plugins,\n        model,\n        field,\n        value,\n        getStoragePlugin\n    });\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AAEA,IAAAE,iBAAA,GAAAF,OAAA;AAMA,MAAMG,uBAAgD,GAAGC,OAAO,IAAI;EAChE,IAAIC,oBAA4C;EAEhD,MAAMC,OAAO,GAAGF,OAAO,CAACE,OAAO,CAC1BC,MAAM,CAAyBC,8CAAsB,CAACC,IAAI;EAC3D;EAAA,CACCC,OAAO,CAAC,CAAC,CACTC,MAAM,CAAC,CAACC,UAAU,EAAEC,MAAM,KAAK;IAC5B;AACZ;AACA;IACY,IAAIA,MAAM,CAACC,SAAS,KAAK,GAAG,EAAE;MAC1BT,oBAAoB,GAAGQ,MAAM;MAC7B,OAAOD,UAAU;IACrB;;IAEA;AACZ;AACA;AACA;IACYA,UAAU,CAACC,MAAM,CAACC,SAAS,CAAC,GAAGD,MAAM;IAErC,OAAOD,UAAU;EACrB,CAAC,EAAE,CAAC,CAA2C,CAAC;EAEpD,OAAQE,SAAiB,IAAK;IAC1B,OAAOR,OAAO,CAACQ,SAAS,CAAC,IAAIT,oBAAoB;EACrD,CAAC;AACL,CAAC;;AAED;AACA;AACA;AACA,MAAMU,qBAAqB,GAAG,MAAAA,CAC1BX,OAAmB,EACnBY,KAAe,EACfC,SAAsC,EACtCC,KAAe,KACK;EACpB,MAAMC,gBAAgB,GAAGhB,uBAAuB,CAACC,OAAO,CAAC;EAEzD,MAAMgB,iBAAsC,GAAG,CAAC,CAAC;EACjD,KAAK,MAAMC,KAAK,IAAIL,KAAK,CAACM,MAAM,EAAE;IAC9B,MAAMC,QAAQ,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;IACxC,MAAMR,MAAM,GAAGM,gBAAgB,CAACI,QAAQ,CAAC;IACzC;IACA,IAAI,OAAOV,MAAM,CAACI,SAAS,CAAC,KAAK,UAAU,EAAE;MACzC,MAAM,IAAIQ,cAAW,CAChB,YAAWR,SAAU,iCAAgCJ,MAAM,CAACa,IAAK,qBAAoBH,QAAS,GACnG,CAAC;IACL;IAEAH,iBAAiB,CAACC,KAAK,CAACM,OAAO,CAAC,GAAG,MAAMd,MAAM,CAACI,SAAS,CAAC,CAAC;MACvDX,OAAO,EAAEF,OAAO,CAACE,OAAO;MACxBU,KAAK;MACLK,KAAK;MACLO,KAAK,EAAEV,KAAK,CAACW,MAAM,CAACR,KAAK,CAACM,OAAO,CAAC;MAClCR;IACJ,CAAC,CAAC;EACN;EAEA,WAAAW,cAAA,CAAAC,OAAA,MAAAD,cAAA,CAAAC,OAAA,MAAYb,KAAK;IAAEW,MAAM,EAAET;EAAiB;AAChD,CAAC;;AAED;AACA;AACA;AACO,MAAMY,uBAAuB,GAAG,MAAAA,CACnC5B,OAAmB,EACnBY,KAAe,EACfE,KAAe,KACK;EACpB,OAAOH,qBAAqB,CAACX,OAAO,EAAEY,KAAK,EAAE,WAAW,EAAEE,KAAK,CAAC;AACpE,CAAC;;AAED;AACA;AACA;AAFAe,OAAA,CAAAD,uBAAA,GAAAA,uBAAA;AAGO,MAAME,yBAAyB,GAAG,MAAAA,CACrC9B,OAAmB,EACnBY,KAAe,EACfE,KAAe,KACK;EACpB,OAAOH,qBAAqB,CAACX,OAAO,EAAEY,KAAK,EAAE,aAAa,EAAEE,KAAK,CAAC;AACtE,CAAC;AAACe,OAAA,CAAAC,yBAAA,GAAAA,yBAAA;AAQF;AACA;AACA;AACO,MAAMC,8BAA8B,GAAG,MAC1CC,MAA4C,IAC/B;EACb,MAAM;IAAEhC,OAAO;IAAEY,KAAK;IAAEK,KAAK;IAAEO;EAAM,CAAC,GAAGQ,MAAM;EAC/C,MAAMjB,gBAAgB,GAAGhB,uBAAuB,CAACC,OAAO,CAAC;EAEzD,MAAMmB,QAAQ,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;EACxC,MAAMR,MAAM,GAAGM,gBAAgB,CAACI,QAAQ,CAAC;;EAEzC;EACA,IAAI,OAAOV,MAAM,CAACwB,WAAW,KAAK,UAAU,EAAE;IAC1C,MAAM,IAAIZ,cAAW,CAChB,qDAAoDZ,MAAM,CAACa,IAAK,qBAAoBH,QAAS,GAClG,CAAC;EACL;EAEA,OAAOV,MAAM,CAACwB,WAAW,CAAC;IACtB/B,OAAO,EAAEF,OAAO,CAACE,OAAO;IACxBU,KAAK;IACLK,KAAK;IACLO,KAAK;IACLT;EACJ,CAAC,CAAC;AACN,CAAC;AAACc,OAAA,CAAAE,8BAAA,GAAAA,8BAAA"}
+{"version":3,"names":["_error","_interopRequireDefault","require","_StorageTransformPlugin","_getBaseFieldType","getStoragePluginFactory","context","defaultStoragePlugin","plugins","byType","StorageTransformPlugin","type","reverse","reduce","collection","plugin","fieldType","entryStorageTransform","model","operation","entry","getStoragePlugin","transformedValues","field","fields","baseType","getBaseFieldType","WebinyError","name","fieldId","value","values","_objectSpread2","default","entryToStorageTransform","exports","entryFromStorageTransform","entryFieldFromStorageTransform","params","fromStorage"],"sources":["entryStorage.ts"],"sourcesContent":["import WebinyError from \"@webiny/error\";\nimport { StorageTransformPlugin } from \"~/plugins/StorageTransformPlugin\";\nimport { CmsContext, CmsEntry, CmsModel, CmsModelField } from \"~/types\";\nimport { getBaseFieldType } from \"~/utils/getBaseFieldType\";\n\ninterface GetStoragePluginFactory {\n    (context: Pick<CmsContext, \"plugins\">): (fieldType: string) => StorageTransformPlugin<any>;\n}\n\nconst getStoragePluginFactory: GetStoragePluginFactory = context => {\n    let defaultStoragePlugin: StorageTransformPlugin;\n\n    const plugins = context.plugins\n        .byType<StorageTransformPlugin>(StorageTransformPlugin.type)\n        // we reverse plugins because we want to get latest added only\n        .reverse()\n        .reduce((collection, plugin) => {\n            /**\n             * Check if it's a default plugin and set it - always override the previous one.\n             */\n            if (plugin.fieldType === \"*\") {\n                defaultStoragePlugin = plugin;\n                return collection;\n            }\n\n            /**\n             * We will just set the plugin for given type.\n             * The last one will override existing one - so users can override our default ones.\n             */\n            collection[plugin.fieldType] = plugin;\n\n            return collection;\n        }, {} as Record<string, StorageTransformPlugin>);\n\n    return (fieldType: string) => {\n        return plugins[fieldType] || defaultStoragePlugin;\n    };\n};\n\n/**\n * This should be used when transforming the whole entry.\n */\nconst entryStorageTransform = async (\n    context: Pick<CmsContext, \"plugins\">,\n    model: CmsModel,\n    operation: \"toStorage\" | \"fromStorage\",\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    const getStoragePlugin = getStoragePluginFactory(context);\n\n    const transformedValues: Record<string, any> = {};\n    for (const field of model.fields) {\n        const baseType = getBaseFieldType(field);\n        const plugin = getStoragePlugin(baseType);\n        // TODO: remove this once plugins are converted into classes\n        if (typeof plugin[operation] !== \"function\") {\n            throw new WebinyError(\n                `Missing \"${operation}\" function in storage plugin \"${plugin.name}\" for field type \"${baseType}\"`\n            );\n        }\n\n        transformedValues[field.fieldId] = await plugin[operation]({\n            plugins: context.plugins,\n            model,\n            field,\n            value: entry.values[field.fieldId],\n            getStoragePlugin\n        });\n    }\n\n    return { ...entry, values: transformedValues };\n};\n\n/**\n * A function that is used in crud to transform entry into the storage type.\n */\nexport const entryToStorageTransform = async (\n    context: Pick<CmsContext, \"plugins\">,\n    model: CmsModel,\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    return entryStorageTransform(context, model, \"toStorage\", entry);\n};\n\n/**\n * A function that is used to transform the whole entry from storage into its native form.\n */\nexport const entryFromStorageTransform = async (\n    context: Pick<CmsContext, \"plugins\">,\n    model: CmsModel,\n    entry: CmsEntry\n): Promise<CmsEntry> => {\n    return entryStorageTransform(context, model, \"fromStorage\", entry);\n};\n\ninterface EntryFieldFromStorageTransformParams {\n    context: Pick<CmsContext, \"plugins\">;\n    model: CmsModel;\n    field: CmsModelField;\n    value: any;\n}\n/*\n * A function that is used to transform a single field from storage\n */\nexport const entryFieldFromStorageTransform = async <T = any>(\n    params: EntryFieldFromStorageTransformParams\n): Promise<T> => {\n    const { context, model, field, value } = params;\n    const getStoragePlugin = getStoragePluginFactory(context);\n\n    const baseType = getBaseFieldType(field);\n    const plugin = getStoragePlugin(baseType);\n\n    // TODO: remove this once plugins are converted into classes\n    if (typeof plugin.fromStorage !== \"function\") {\n        throw new WebinyError(\n            `Missing \"fromStorage\" function in storage plugin \"${plugin.name}\" for field type \"${baseType}\"`\n        );\n    }\n\n    return plugin.fromStorage({\n        plugins: context.plugins,\n        model,\n        field,\n        value,\n        getStoragePlugin\n    });\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,uBAAA,GAAAD,OAAA;AAEA,IAAAE,iBAAA,GAAAF,OAAA;AAMA,MAAMG,uBAAgD,GAAGC,OAAO,IAAI;EAChE,IAAIC,oBAA4C;EAEhD,MAAMC,OAAO,GAAGF,OAAO,CAACE,OAAO,CAC1BC,MAAM,CAAyBC,8CAAsB,CAACC,IAAI;EAC3D;EAAA,CACCC,OAAO,CAAC,CAAC,CACTC,MAAM,CAAC,CAACC,UAAU,EAAEC,MAAM,KAAK;IAC5B;AACZ;AACA;IACY,IAAIA,MAAM,CAACC,SAAS,KAAK,GAAG,EAAE;MAC1BT,oBAAoB,GAAGQ,MAAM;MAC7B,OAAOD,UAAU;IACrB;;IAEA;AACZ;AACA;AACA;IACYA,UAAU,CAACC,MAAM,CAACC,SAAS,CAAC,GAAGD,MAAM;IAErC,OAAOD,UAAU;EACrB,CAAC,EAAE,CAAC,CAA2C,CAAC;EAEpD,OAAQE,SAAiB,IAAK;IAC1B,OAAOR,OAAO,CAACQ,SAAS,CAAC,IAAIT,oBAAoB;EACrD,CAAC;AACL,CAAC;;AAED;AACA;AACA;AACA,MAAMU,qBAAqB,GAAG,MAAAA,CAC1BX,OAAoC,EACpCY,KAAe,EACfC,SAAsC,EACtCC,KAAe,KACK;EACpB,MAAMC,gBAAgB,GAAGhB,uBAAuB,CAACC,OAAO,CAAC;EAEzD,MAAMgB,iBAAsC,GAAG,CAAC,CAAC;EACjD,KAAK,MAAMC,KAAK,IAAIL,KAAK,CAACM,MAAM,EAAE;IAC9B,MAAMC,QAAQ,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;IACxC,MAAMR,MAAM,GAAGM,gBAAgB,CAACI,QAAQ,CAAC;IACzC;IACA,IAAI,OAAOV,MAAM,CAACI,SAAS,CAAC,KAAK,UAAU,EAAE;MACzC,MAAM,IAAIQ,cAAW,CAChB,YAAWR,SAAU,iCAAgCJ,MAAM,CAACa,IAAK,qBAAoBH,QAAS,GACnG,CAAC;IACL;IAEAH,iBAAiB,CAACC,KAAK,CAACM,OAAO,CAAC,GAAG,MAAMd,MAAM,CAACI,SAAS,CAAC,CAAC;MACvDX,OAAO,EAAEF,OAAO,CAACE,OAAO;MACxBU,KAAK;MACLK,KAAK;MACLO,KAAK,EAAEV,KAAK,CAACW,MAAM,CAACR,KAAK,CAACM,OAAO,CAAC;MAClCR;IACJ,CAAC,CAAC;EACN;EAEA,WAAAW,cAAA,CAAAC,OAAA,MAAAD,cAAA,CAAAC,OAAA,MAAYb,KAAK;IAAEW,MAAM,EAAET;EAAiB;AAChD,CAAC;;AAED;AACA;AACA;AACO,MAAMY,uBAAuB,GAAG,MAAAA,CACnC5B,OAAoC,EACpCY,KAAe,EACfE,KAAe,KACK;EACpB,OAAOH,qBAAqB,CAACX,OAAO,EAAEY,KAAK,EAAE,WAAW,EAAEE,KAAK,CAAC;AACpE,CAAC;;AAED;AACA;AACA;AAFAe,OAAA,CAAAD,uBAAA,GAAAA,uBAAA;AAGO,MAAME,yBAAyB,GAAG,MAAAA,CACrC9B,OAAoC,EACpCY,KAAe,EACfE,KAAe,KACK;EACpB,OAAOH,qBAAqB,CAACX,OAAO,EAAEY,KAAK,EAAE,aAAa,EAAEE,KAAK,CAAC;AACtE,CAAC;AAACe,OAAA,CAAAC,yBAAA,GAAAA,yBAAA;AAQF;AACA;AACA;AACO,MAAMC,8BAA8B,GAAG,MAC1CC,MAA4C,IAC/B;EACb,MAAM;IAAEhC,OAAO;IAAEY,KAAK;IAAEK,KAAK;IAAEO;EAAM,CAAC,GAAGQ,MAAM;EAC/C,MAAMjB,gBAAgB,GAAGhB,uBAAuB,CAACC,OAAO,CAAC;EAEzD,MAAMmB,QAAQ,GAAG,IAAAC,kCAAgB,EAACH,KAAK,CAAC;EACxC,MAAMR,MAAM,GAAGM,gBAAgB,CAACI,QAAQ,CAAC;;EAEzC;EACA,IAAI,OAAOV,MAAM,CAACwB,WAAW,KAAK,UAAU,EAAE;IAC1C,MAAM,IAAIZ,cAAW,CAChB,qDAAoDZ,MAAM,CAACa,IAAK,qBAAoBH,QAAS,GAClG,CAAC;EACL;EAEA,OAAOV,MAAM,CAACwB,WAAW,CAAC;IACtB/B,OAAO,EAAEF,OAAO,CAACE,OAAO;IACxBU,KAAK;IACLK,KAAK;IACLO,KAAK;IACLT;EACJ,CAAC,CAAC;AACN,CAAC;AAACc,OAAA,CAAAE,8BAAA,GAAAA,8BAAA"}

package/utils/permissions/ModelGroupsPermissions.d.ts

@@ -1,11 +1,9 @@
 import { AppPermissions } from "@webiny/api-security";
 import { CmsGroup, CmsGroupPermission } from "../../types";
-interface CanAccessGroupParams {
-    group: CmsGroup;
-    locale: string;
+export interface CanAccessGroupParams {
+    group: Pick<CmsGroup, "id" | "locale">;
 }
 export declare class ModelGroupsPermissions extends AppPermissions<CmsGroupPermission> {
-    canAccessGroup({ group, locale }: CanAccessGroupParams): Promise<boolean>;
+    canAccessGroup({ group }: CanAccessGroupParams): Promise<boolean>;
     ensureCanAccessGroup(params: CanAccessGroupParams): Promise<void>;
 }
-export {};

package/utils/permissions/ModelGroupsPermissions.js

@@ -7,18 +7,18 @@ exports.ModelGroupsPermissions = void 0;
 var _apiSecurity = require("@webiny/api-security");
 class ModelGroupsPermissions extends _apiSecurity.AppPermissions {
   async canAccessGroup({
-    group,
-    locale
+    group
   }) {
     if (await this.hasFullAccess()) {
       return true;
     }
     const permissions = await this.getPermissions();
-    for (let i = 0; i < permissions.length; i++) {
-      const permission = permissions[i];
+    const locale = group.locale;
+    for (const permission of permissions) {
       const {
         groups
       } = permission;
+
       // When no groups defined on permission it means user has access to everything.
       if (!groups) {
         return true;
@@ -27,7 +27,7 @@ class ModelGroupsPermissions extends _apiSecurity.AppPermissions {
       // when there is no locale in groups, it means that no access was given
       // this happens when access control was set but no models or groups were added
       if (Array.isArray(groups[locale]) === false || groups[locale].includes(group.id) === false) {
-        return false;
+        continue;
       }
       return true;
     }

package/utils/permissions/ModelGroupsPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["_apiSecurity","require","ModelGroupsPermissions","AppPermissions","canAccessGroup","group","locale","hasFullAccess","permissions","getPermissions","i","length","permission","groups","Array","isArray","includes","id","ensureCanAccessGroup","params","canAccessModel","NotAuthorizedError","data","reason","exports"],"sources":["ModelGroupsPermissions.ts"],"sourcesContent":["import { AppPermissions, NotAuthorizedError } from \"@webiny/api-security\";\nimport { CmsGroup, CmsGroupPermission } from \"~/types\";\n\ninterface CanAccessGroupParams {\n    group: CmsGroup;\n    locale: string;\n}\n\nexport class ModelGroupsPermissions extends AppPermissions<CmsGroupPermission> {\n    async canAccessGroup({ group, locale }: CanAccessGroupParams) {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        const permissions = await this.getPermissions();\n\n        for (let i = 0; i < permissions.length; i++) {\n            const permission = permissions[i];\n            const { groups } = permission;\n            // When no groups defined on permission it means user has access to everything.\n            if (!groups) {\n                return true;\n            }\n\n            // when there is no locale in groups, it means that no access was given\n            // this happens when access control was set but no models or groups were added\n            if (\n                Array.isArray(groups[locale]) === false ||\n                groups[locale].includes(group.id) === false\n            ) {\n                return false;\n            }\n            return true;\n        }\n\n        return false;\n    }\n\n    async ensureCanAccessGroup(params: CanAccessGroupParams) {\n        const canAccessModel = await this.canAccessGroup(params);\n        if (canAccessModel) {\n            return;\n        }\n\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access group \"${params.group.id}\".`\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAQO,MAAMC,sBAAsB,SAASC,2BAAc,CAAqB;EAC3E,MAAMC,cAAcA,CAAC;IAAEC,KAAK;IAAEC;EAA6B,CAAC,EAAE;IAC1D,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAAC,CAAC;IAE/C,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,WAAW,CAACG,MAAM,EAAED,CAAC,EAAE,EAAE;MACzC,MAAME,UAAU,GAAGJ,WAAW,CAACE,CAAC,CAAC;MACjC,MAAM;QAAEG;MAAO,CAAC,GAAGD,UAAU;MAC7B;MACA,IAAI,CAACC,MAAM,EAAE;QACT,OAAO,IAAI;MACf;;MAEA;MACA;MACA,IACIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAACP,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCO,MAAM,CAACP,MAAM,CAAC,CAACU,QAAQ,CAACX,KAAK,CAACY,EAAE,CAAC,KAAK,KAAK,EAC7C;QACE,OAAO,KAAK;MAChB;MACA,OAAO,IAAI;IACf;IAEA,OAAO,KAAK;EAChB;EAEA,MAAMC,oBAAoBA,CAACC,MAA4B,EAAE;IACrD,MAAMC,cAAc,GAAG,MAAM,IAAI,CAAChB,cAAc,CAACe,MAAM,CAAC;IACxD,IAAIC,cAAc,EAAE;MAChB;IACJ;IAEA,MAAM,IAAIC,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,gCAA+BJ,MAAM,CAACd,KAAK,CAACY,EAAG;MAC5D;IACJ,CAAC,CAAC;EACN;AACJ;AAACO,OAAA,CAAAtB,sBAAA,GAAAA,sBAAA"}
+{"version":3,"names":["_apiSecurity","require","ModelGroupsPermissions","AppPermissions","canAccessGroup","group","hasFullAccess","permissions","getPermissions","locale","permission","groups","Array","isArray","includes","id","ensureCanAccessGroup","params","canAccessModel","NotAuthorizedError","data","reason","exports"],"sources":["ModelGroupsPermissions.ts"],"sourcesContent":["import { AppPermissions, NotAuthorizedError } from \"@webiny/api-security\";\nimport { CmsGroup, CmsGroupPermission } from \"~/types\";\n\nexport interface CanAccessGroupParams {\n    group: Pick<CmsGroup, \"id\" | \"locale\">;\n}\n\nexport class ModelGroupsPermissions extends AppPermissions<CmsGroupPermission> {\n    async canAccessGroup({ group }: CanAccessGroupParams) {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        const permissions = await this.getPermissions();\n\n        const locale = group.locale;\n\n        for (const permission of permissions) {\n            const { groups } = permission;\n\n            // When no groups defined on permission it means user has access to everything.\n            if (!groups) {\n                return true;\n            }\n\n            // when there is no locale in groups, it means that no access was given\n            // this happens when access control was set but no models or groups were added\n            if (\n                Array.isArray(groups[locale]) === false ||\n                groups[locale].includes(group.id) === false\n            ) {\n                continue;\n            }\n            return true;\n        }\n\n        return false;\n    }\n\n    async ensureCanAccessGroup(params: CanAccessGroupParams) {\n        const canAccessModel = await this.canAccessGroup(params);\n        if (canAccessModel) {\n            return;\n        }\n\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access group \"${params.group.id}\".`\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAOO,MAAMC,sBAAsB,SAASC,2BAAc,CAAqB;EAC3E,MAAMC,cAAcA,CAAC;IAAEC;EAA4B,CAAC,EAAE;IAClD,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAAC,CAAC;IAE/C,MAAMC,MAAM,GAAGJ,KAAK,CAACI,MAAM;IAE3B,KAAK,MAAMC,UAAU,IAAIH,WAAW,EAAE;MAClC,MAAM;QAAEI;MAAO,CAAC,GAAGD,UAAU;;MAE7B;MACA,IAAI,CAACC,MAAM,EAAE;QACT,OAAO,IAAI;MACf;;MAEA;MACA;MACA,IACIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAACF,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCE,MAAM,CAACF,MAAM,CAAC,CAACK,QAAQ,CAACT,KAAK,CAACU,EAAE,CAAC,KAAK,KAAK,EAC7C;QACE;MACJ;MACA,OAAO,IAAI;IACf;IAEA,OAAO,KAAK;EAChB;EAEA,MAAMC,oBAAoBA,CAACC,MAA4B,EAAE;IACrD,MAAMC,cAAc,GAAG,MAAM,IAAI,CAACd,cAAc,CAACa,MAAM,CAAC;IACxD,IAAIC,cAAc,EAAE;MAChB;IACJ;IAEA,MAAM,IAAIC,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,gCAA+BJ,MAAM,CAACZ,KAAK,CAACU,EAAG;MAC5D;IACJ,CAAC,CAAC;EACN;AACJ;AAACO,OAAA,CAAApB,sBAAA,GAAAA,sBAAA"}

package/utils/permissions/ModelsPermissions.d.ts

@@ -1,20 +1,22 @@
 import { AppPermissions, AppPermissionsParams } from "@webiny/api-security";
-import { CmsGroupPermission, CmsModel, CmsModelPermission } from "../../types";
+import { CmsGroupPermission, CmsModel as BaseCmsModel, CmsModelGroup as BaseCmsModelGroup, CmsModelPermission } from "../../types";
 import { ModelGroupsPermissions } from "./ModelGroupsPermissions";
 export interface ModelsPermissionsParams extends AppPermissionsParams<CmsGroupPermission> {
     modelGroupsPermissions: ModelGroupsPermissions;
 }
+interface PickedCmsModel extends Pick<BaseCmsModel, "modelId" | "locale"> {
+    group: Pick<BaseCmsModelGroup, "id">;
+}
 export interface CanAccessModelParams {
-    model: CmsModel;
-    locale: string;
+    model: PickedCmsModel;
 }
 export interface EnsureModelAccessParams {
-    model: CmsModel;
-    locale: string;
+    model: PickedCmsModel;
 }
 export declare class ModelsPermissions extends AppPermissions<CmsModelPermission> {
-    private modelGroupsPermissions;
+    private readonly modelGroupsPermissions;
     constructor(params: ModelsPermissionsParams);
-    canAccessModel({ model, locale }: CanAccessModelParams): Promise<boolean>;
+    canAccessModel({ model }: CanAccessModelParams): Promise<boolean>;
     ensureCanAccessModel(params: EnsureModelAccessParams): Promise<void>;
 }
+export {};

package/utils/permissions/ModelsPermissions.js

@@ -14,8 +14,7 @@ class ModelsPermissions extends _apiSecurity.AppPermissions {
     this.modelGroupsPermissions = params.modelGroupsPermissions;
   }
   async canAccessModel({
-    model,
-    locale
+    model
   }) {
     if (await this.hasFullAccess()) {
       return true;
@@ -42,6 +41,7 @@ class ModelsPermissions extends _apiSecurity.AppPermissions {
     }
     const modelGroupsPermissionsList = await modelGroupsPermissions.getPermissions();
     const modelsPermissionsList = await this.getPermissions();
+    const locale = model.locale;
     for (let i = 0; i < modelGroupsPermissionsList.length; i++) {
       const modelGroupPermission = modelGroupsPermissionsList[i];
       const {

package/utils/permissions/ModelsPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["_apiSecurity","require","ModelsPermissions","AppPermissions","constructor","params","_defineProperty2","default","modelGroupsPermissions","canAccessModel","model","locale","hasFullAccess","modelsPermissions","canReadGroups","ensure","rwd","throw","canReadModels","modelGroupsPermissionsList","getPermissions","modelsPermissionsList","i","length","modelGroupPermission","groups","j","modelPermission","models","Array","isArray","includes","group","id","modelId","ensureCanAccessModel","NotAuthorizedError","data","reason","exports"],"sources":["ModelsPermissions.ts"],"sourcesContent":["import { AppPermissions, AppPermissionsParams, NotAuthorizedError } from \"@webiny/api-security\";\nimport { CmsGroupPermission, CmsModel, CmsModelPermission } from \"~/types\";\nimport { ModelGroupsPermissions } from \"~/utils/permissions/ModelGroupsPermissions\";\n\nexport interface ModelsPermissionsParams extends AppPermissionsParams<CmsGroupPermission> {\n    modelGroupsPermissions: ModelGroupsPermissions;\n}\n\nexport interface CanAccessModelParams {\n    model: CmsModel;\n    locale: string;\n}\n\nexport interface EnsureModelAccessParams {\n    model: CmsModel;\n    locale: string;\n}\n\nexport class ModelsPermissions extends AppPermissions<CmsModelPermission> {\n    private modelGroupsPermissions: ModelGroupsPermissions;\n\n    constructor(params: ModelsPermissionsParams) {\n        super(params);\n        this.modelGroupsPermissions = params.modelGroupsPermissions;\n    }\n\n    async canAccessModel({ model, locale }: CanAccessModelParams) {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        const modelGroupsPermissions = this.modelGroupsPermissions;\n\n        // eslint-disable-next-line\n        const modelsPermissions = this;\n\n        const canReadGroups = await modelGroupsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadGroups) {\n            return false;\n        }\n\n        const canReadModels = await modelsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadModels) {\n            return false;\n        }\n\n        const modelGroupsPermissionsList = await modelGroupsPermissions.getPermissions();\n        const modelsPermissionsList = await this.getPermissions();\n\n        for (let i = 0; i < modelGroupsPermissionsList.length; i++) {\n            const modelGroupPermission = modelGroupsPermissionsList[i];\n\n            const { groups } = modelGroupPermission;\n\n            for (let j = 0; j < modelsPermissionsList.length; j++) {\n                const modelPermission = modelsPermissionsList[j];\n\n                const { models } = modelPermission;\n                // when no models or groups defined on permission\n                // it means user has access to everything\n                if (!models && !groups) {\n                    return true;\n                }\n\n                // Does the model belong to a group for which user has permission?\n                if (groups) {\n                    if (\n                        Array.isArray(groups[locale]) === false ||\n                        groups[locale].includes(model.group.id) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                // Does the user have access to the specific model?\n                if (models) {\n                    if (\n                        Array.isArray(models[locale]) === false ||\n                        models[locale].includes(model.modelId) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                return true;\n            }\n        }\n\n        return false;\n    }\n\n    async ensureCanAccessModel(params: EnsureModelAccessParams) {\n        const canAccessModel = await this.canAccessModel(params);\n        if (canAccessModel) {\n            return;\n        }\n\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access model \"${params.model.modelId}\".`\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAkBO,MAAMC,iBAAiB,SAASC,2BAAc,CAAqB;EAGtEC,WAAWA,CAACC,MAA+B,EAAE;IACzC,KAAK,CAACA,MAAM,CAAC;IAAC,IAAAC,gBAAA,CAAAC,OAAA;IACd,IAAI,CAACC,sBAAsB,GAAGH,MAAM,CAACG,sBAAsB;EAC/D;EAEA,MAAMC,cAAcA,CAAC;IAAEC,KAAK;IAAEC;EAA6B,CAAC,EAAE;IAC1D,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMJ,sBAAsB,GAAG,IAAI,CAACA,sBAAsB;;IAE1D;IACA,MAAMK,iBAAiB,GAAG,IAAI;IAE9B,MAAMC,aAAa,GAAG,MAAMN,sBAAsB,CAACO,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACzF,IAAI,CAACH,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMI,aAAa,GAAG,MAAML,iBAAiB,CAACE,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACpF,IAAI,CAACC,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMC,0BAA0B,GAAG,MAAMX,sBAAsB,CAACY,cAAc,CAAC,CAAC;IAChF,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACD,cAAc,CAAC,CAAC;IAEzD,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGH,0BAA0B,CAACI,MAAM,EAAED,CAAC,EAAE,EAAE;MACxD,MAAME,oBAAoB,GAAGL,0BAA0B,CAACG,CAAC,CAAC;MAE1D,MAAM;QAAEG;MAAO,CAAC,GAAGD,oBAAoB;MAEvC,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGL,qBAAqB,CAACE,MAAM,EAAEG,CAAC,EAAE,EAAE;QACnD,MAAMC,eAAe,GAAGN,qBAAqB,CAACK,CAAC,CAAC;QAEhD,MAAM;UAAEE;QAAO,CAAC,GAAGD,eAAe;QAClC;QACA;QACA,IAAI,CAACC,MAAM,IAAI,CAACH,MAAM,EAAE;UACpB,OAAO,IAAI;QACf;;QAEA;QACA,IAAIA,MAAM,EAAE;UACR,IACII,KAAK,CAACC,OAAO,CAACL,MAAM,CAACd,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCc,MAAM,CAACd,MAAM,CAAC,CAACoB,QAAQ,CAACrB,KAAK,CAACsB,KAAK,CAACC,EAAE,CAAC,KAAK,KAAK,EACnD;YACE;UACJ;QACJ;;QAEA;QACA,IAAIL,MAAM,EAAE;UACR,IACIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAACjB,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCiB,MAAM,CAACjB,MAAM,CAAC,CAACoB,QAAQ,CAACrB,KAAK,CAACwB,OAAO,CAAC,KAAK,KAAK,EAClD;YACE;UACJ;QACJ;QAEA,OAAO,IAAI;MACf;IACJ;IAEA,OAAO,KAAK;EAChB;EAEA,MAAMC,oBAAoBA,CAAC9B,MAA+B,EAAE;IACxD,MAAMI,cAAc,GAAG,MAAM,IAAI,CAACA,cAAc,CAACJ,MAAM,CAAC;IACxD,IAAII,cAAc,EAAE;MAChB;IACJ;IAEA,MAAM,IAAI2B,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,gCAA+BjC,MAAM,CAACK,KAAK,CAACwB,OAAQ;MACjE;IACJ,CAAC,CAAC;EACN;AACJ;AAACK,OAAA,CAAArC,iBAAA,GAAAA,iBAAA"}
+{"version":3,"names":["_apiSecurity","require","ModelsPermissions","AppPermissions","constructor","params","_defineProperty2","default","modelGroupsPermissions","canAccessModel","model","hasFullAccess","modelsPermissions","canReadGroups","ensure","rwd","throw","canReadModels","modelGroupsPermissionsList","getPermissions","modelsPermissionsList","locale","i","length","modelGroupPermission","groups","j","modelPermission","models","Array","isArray","includes","group","id","modelId","ensureCanAccessModel","NotAuthorizedError","data","reason","exports"],"sources":["ModelsPermissions.ts"],"sourcesContent":["import { AppPermissions, AppPermissionsParams, NotAuthorizedError } from \"@webiny/api-security\";\nimport {\n    CmsGroupPermission,\n    CmsModel as BaseCmsModel,\n    CmsModelGroup as BaseCmsModelGroup,\n    CmsModelPermission\n} from \"~/types\";\nimport { ModelGroupsPermissions } from \"~/utils/permissions/ModelGroupsPermissions\";\n\nexport interface ModelsPermissionsParams extends AppPermissionsParams<CmsGroupPermission> {\n    modelGroupsPermissions: ModelGroupsPermissions;\n}\n\ninterface PickedCmsModel extends Pick<BaseCmsModel, \"modelId\" | \"locale\"> {\n    group: Pick<BaseCmsModelGroup, \"id\">;\n}\n\nexport interface CanAccessModelParams {\n    model: PickedCmsModel;\n}\n\nexport interface EnsureModelAccessParams {\n    model: PickedCmsModel;\n}\n\nexport class ModelsPermissions extends AppPermissions<CmsModelPermission> {\n    private readonly modelGroupsPermissions: ModelGroupsPermissions;\n\n    public constructor(params: ModelsPermissionsParams) {\n        super(params);\n        this.modelGroupsPermissions = params.modelGroupsPermissions;\n    }\n\n    public async canAccessModel({ model }: CanAccessModelParams) {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        const modelGroupsPermissions = this.modelGroupsPermissions;\n\n        // eslint-disable-next-line\n        const modelsPermissions = this;\n\n        const canReadGroups = await modelGroupsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadGroups) {\n            return false;\n        }\n\n        const canReadModels = await modelsPermissions.ensure({ rwd: \"r\" }, { throw: false });\n        if (!canReadModels) {\n            return false;\n        }\n\n        const modelGroupsPermissionsList = await modelGroupsPermissions.getPermissions();\n        const modelsPermissionsList = await this.getPermissions();\n\n        const locale = model.locale;\n\n        for (let i = 0; i < modelGroupsPermissionsList.length; i++) {\n            const modelGroupPermission = modelGroupsPermissionsList[i];\n\n            const { groups } = modelGroupPermission;\n\n            for (let j = 0; j < modelsPermissionsList.length; j++) {\n                const modelPermission = modelsPermissionsList[j];\n\n                const { models } = modelPermission;\n                // when no models or groups defined on permission\n                // it means user has access to everything\n                if (!models && !groups) {\n                    return true;\n                }\n\n                // Does the model belong to a group for which user has permission?\n                if (groups) {\n                    if (\n                        Array.isArray(groups[locale]) === false ||\n                        groups[locale].includes(model.group.id) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                // Does the user have access to the specific model?\n                if (models) {\n                    if (\n                        Array.isArray(models[locale]) === false ||\n                        models[locale].includes(model.modelId) === false\n                    ) {\n                        continue;\n                    }\n                }\n\n                return true;\n            }\n        }\n\n        return false;\n    }\n\n    public async ensureCanAccessModel(params: EnsureModelAccessParams) {\n        const canAccessModel = await this.canAccessModel(params);\n        if (canAccessModel) {\n            return;\n        }\n\n        throw new NotAuthorizedError({\n            data: {\n                reason: `Not allowed to access model \"${params.model.modelId}\".`\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAyBO,MAAMC,iBAAiB,SAASC,2BAAc,CAAqB;EAG/DC,WAAWA,CAACC,MAA+B,EAAE;IAChD,KAAK,CAACA,MAAM,CAAC;IAAC,IAAAC,gBAAA,CAAAC,OAAA;IACd,IAAI,CAACC,sBAAsB,GAAGH,MAAM,CAACG,sBAAsB;EAC/D;EAEA,MAAaC,cAAcA,CAAC;IAAEC;EAA4B,CAAC,EAAE;IACzD,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,MAAMH,sBAAsB,GAAG,IAAI,CAACA,sBAAsB;;IAE1D;IACA,MAAMI,iBAAiB,GAAG,IAAI;IAE9B,MAAMC,aAAa,GAAG,MAAML,sBAAsB,CAACM,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACzF,IAAI,CAACH,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMI,aAAa,GAAG,MAAML,iBAAiB,CAACE,MAAM,CAAC;MAAEC,GAAG,EAAE;IAAI,CAAC,EAAE;MAAEC,KAAK,EAAE;IAAM,CAAC,CAAC;IACpF,IAAI,CAACC,aAAa,EAAE;MAChB,OAAO,KAAK;IAChB;IAEA,MAAMC,0BAA0B,GAAG,MAAMV,sBAAsB,CAACW,cAAc,CAAC,CAAC;IAChF,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACD,cAAc,CAAC,CAAC;IAEzD,MAAME,MAAM,GAAGX,KAAK,CAACW,MAAM;IAE3B,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGJ,0BAA0B,CAACK,MAAM,EAAED,CAAC,EAAE,EAAE;MACxD,MAAME,oBAAoB,GAAGN,0BAA0B,CAACI,CAAC,CAAC;MAE1D,MAAM;QAAEG;MAAO,CAAC,GAAGD,oBAAoB;MAEvC,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGN,qBAAqB,CAACG,MAAM,EAAEG,CAAC,EAAE,EAAE;QACnD,MAAMC,eAAe,GAAGP,qBAAqB,CAACM,CAAC,CAAC;QAEhD,MAAM;UAAEE;QAAO,CAAC,GAAGD,eAAe;QAClC;QACA;QACA,IAAI,CAACC,MAAM,IAAI,CAACH,MAAM,EAAE;UACpB,OAAO,IAAI;QACf;;QAEA;QACA,IAAIA,MAAM,EAAE;UACR,IACII,KAAK,CAACC,OAAO,CAACL,MAAM,CAACJ,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCI,MAAM,CAACJ,MAAM,CAAC,CAACU,QAAQ,CAACrB,KAAK,CAACsB,KAAK,CAACC,EAAE,CAAC,KAAK,KAAK,EACnD;YACE;UACJ;QACJ;;QAEA;QACA,IAAIL,MAAM,EAAE;UACR,IACIC,KAAK,CAACC,OAAO,CAACF,MAAM,CAACP,MAAM,CAAC,CAAC,KAAK,KAAK,IACvCO,MAAM,CAACP,MAAM,CAAC,CAACU,QAAQ,CAACrB,KAAK,CAACwB,OAAO,CAAC,KAAK,KAAK,EAClD;YACE;UACJ;QACJ;QAEA,OAAO,IAAI;MACf;IACJ;IAEA,OAAO,KAAK;EAChB;EAEA,MAAaC,oBAAoBA,CAAC9B,MAA+B,EAAE;IAC/D,MAAMI,cAAc,GAAG,MAAM,IAAI,CAACA,cAAc,CAACJ,MAAM,CAAC;IACxD,IAAII,cAAc,EAAE;MAChB;IACJ;IAEA,MAAM,IAAI2B,+BAAkB,CAAC;MACzBC,IAAI,EAAE;QACFC,MAAM,EAAG,gCAA+BjC,MAAM,CAACK,KAAK,CAACwB,OAAQ;MACjE;IACJ,CAAC,CAAC;EACN;AACJ;AAACK,OAAA,CAAArC,iBAAA,GAAAA,iBAAA"}