@webiny/api-headless-cms 5.39.1 → 5.39.2-beta.0

package/context.js

@@ -8,15 +8,13 @@ exports.createContextPlugin = void 0;
 var _error = _interopRequireDefault(require("@webiny/error"));
 var _api = require("@webiny/api");
 var _CmsParametersPlugin = require("./plugins/CmsParametersPlugin");
+var _AccessControl = require("./crud/AccessControl/AccessControl");
 var _system = require("./crud/system.crud");
 var _contentModelGroup = require("./crud/contentModelGroup.crud");
 var _contentModel = require("./crud/contentModel.crud");
 var _contentEntry = require("./crud/contentEntry.crud");
 var _plugins = require("./plugins");
 var _valueKeyStorageConverter = require("./utils/converters/valueKeyStorageConverter");
-var _ModelsPermissions = require("./utils/permissions/ModelsPermissions");
-var _ModelGroupsPermissions = require("./utils/permissions/ModelGroupsPermissions");
-var _EntriesPermissions = require("./utils/permissions/EntriesPermissions");
 var _export = require("./export");
 var _importing = require("./export/crud/importing");
 const getParameters = async context => {
@@ -53,21 +51,16 @@ const createContextPlugin = ({
     context.plugins.register(new _plugins.StorageOperationsCmsModelPlugin((0, _valueKeyStorageConverter.createCmsModelFieldConvertersAttachFactory)(context.plugins)));
     await context.benchmark.measure("headlessCms.createContext", async () => {
       await storageOperations.beforeInit(context);
-      const modelGroupsPermissions = new _ModelGroupsPermissions.ModelGroupsPermissions({
+      const accessControl = new _AccessControl.AccessControl({
         getIdentity: context.security.getIdentity,
-        getPermissions: () => context.security.getPermissions("cms.contentModelGroup"),
-        fullAccessPermissionName: "cms.*"
-      });
-      const modelsPermissions = new _ModelsPermissions.ModelsPermissions({
-        getIdentity: context.security.getIdentity,
-        getPermissions: () => context.security.getPermissions("cms.contentModel"),
-        fullAccessPermissionName: "cms.*",
-        modelGroupsPermissions
-      });
-      const entriesPermissions = new _EntriesPermissions.EntriesPermissions({
-        getIdentity: context.security.getIdentity,
-        getPermissions: () => context.security.getPermissions("cms.contentEntry"),
-        fullAccessPermissionName: "cms.*"
+        getGroupsPermissions: () => context.security.getPermissions("cms.contentModelGroup"),
+        getModelsPermissions: () => context.security.getPermissions("cms.contentModel"),
+        getEntriesPermissions: () => context.security.getPermissions("cms.contentEntry"),
+        listAllGroups: () => {
+          return context.security.withoutAuthorization(() => {
+            return context.cms.listGroups();
+          });
+        }
       });
       context.cms = {
         type,
@@ -77,11 +70,7 @@ const createContextPlugin = ({
         PREVIEW: type === "preview",
         MANAGE: type === "manage",
         storageOperations,
-        permissions: {
-          groups: modelGroupsPermissions,
-          models: modelsPermissions,
-          entries: entriesPermissions
-        },
+        accessControl,
         ...(0, _system.createSystemCrud)({
           context,
           getTenant,
@@ -95,7 +84,7 @@ const createContextPlugin = ({
           getLocale,
           getIdentity,
           storageOperations,
-          modelGroupsPermissions
+          accessControl
         }),
         ...(0, _contentModel.createModelsCrud)({
           context,
@@ -103,7 +92,7 @@ const createContextPlugin = ({
           getTenant,
           getIdentity,
           storageOperations,
-          modelsPermissions
+          accessControl
         }),
         ...(0, _contentEntry.createContentEntryCrud)({
           context,
@@ -111,8 +100,7 @@ const createContextPlugin = ({
           getTenant,
           getLocale,
           storageOperations,
-          entriesPermissions,
-          modelsPermissions
+          accessControl
         }),
         export: {
           ...(0, _export.createExportCrud)(context)

package/context.js.map

@@ -1 +1 @@
-{"version":3,"names":["_error","_interopRequireDefault","require","_api","_CmsParametersPlugin","_system","_contentModelGroup","_contentModel","_contentEntry","_plugins","_valueKeyStorageConverter","_ModelsPermissions","_ModelGroupsPermissions","_EntriesPermissions","_export","_importing","getParameters","context","plugins","byType","CmsParametersPlugin","type","plugin","result","WebinyError","createContextPlugin","storageOperations","ContextPlugin","locale","getLocale","systemLocale","i18n","getIdentity","security","getTenant","tenancy","getCurrentTenant","register","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","benchmark","measure","beforeInit","modelGroupsPermissions","ModelGroupsPermissions","getPermissions","fullAccessPermissionName","modelsPermissions","ModelsPermissions","entriesPermissions","EntriesPermissions","cms","READ","PREVIEW","MANAGE","permissions","groups","models","entries","createSystemCrud","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","export","createExportCrud","importing","createImportCrud","init","name","exports"],"sources":["context.ts"],"sourcesContent":["import { CmsContext, HeadlessCmsStorageOperations } from \"~/types\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport { CmsParametersPlugin, CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin\";\nimport { createSystemCrud } from \"~/crud/system.crud\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter\";\nimport { ModelsPermissions } from \"~/utils/permissions/ModelsPermissions\";\nimport { ModelGroupsPermissions } from \"./utils/permissions/ModelGroupsPermissions\";\nimport { EntriesPermissions } from \"./utils/permissions/EntriesPermissions\";\nimport { createExportCrud } from \"~/export\";\nimport { createImportCrud } from \"~/export/crud/importing\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\n        \"Could not determine locale and/or type of the CMS.\",\n        \"CMS_LOCALE_AND_TYPE_ERROR\"\n    );\n};\n\nexport interface CrudParams {\n    storageOperations: HeadlessCmsStorageOperations;\n}\n\nexport const createContextPlugin = ({ storageOperations }: CrudParams) => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type, locale } = await getParameters(context);\n\n        const getLocale = () => {\n            const systemLocale = context.i18n.getLocale(locale);\n            if (!systemLocale) {\n                throw new WebinyError(`There is no locale \"${locale}\" in the system.`);\n            }\n            return systemLocale;\n        };\n\n        const getIdentity = () => {\n            return context.security.getIdentity();\n        };\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(\n                createCmsModelFieldConvertersAttachFactory(context.plugins)\n            )\n        );\n\n        await context.benchmark.measure(\"headlessCms.createContext\", async () => {\n            await storageOperations.beforeInit(context);\n\n            const modelGroupsPermissions = new ModelGroupsPermissions({\n                getIdentity: context.security.getIdentity,\n                getPermissions: () => context.security.getPermissions(\"cms.contentModelGroup\"),\n                fullAccessPermissionName: \"cms.*\"\n            });\n\n            const modelsPermissions = new ModelsPermissions({\n                getIdentity: context.security.getIdentity,\n                getPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n                fullAccessPermissionName: \"cms.*\",\n                modelGroupsPermissions\n            });\n\n            const entriesPermissions = new EntriesPermissions({\n                getIdentity: context.security.getIdentity,\n                getPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n                fullAccessPermissionName: \"cms.*\"\n            });\n\n            context.cms = {\n                type,\n                locale,\n                getLocale,\n                READ: type === \"read\",\n                PREVIEW: type === \"preview\",\n                MANAGE: type === \"manage\",\n                storageOperations,\n                permissions: {\n                    groups: modelGroupsPermissions,\n                    models: modelsPermissions,\n                    entries: entriesPermissions\n                },\n                ...createSystemCrud({\n                    context,\n                    getTenant,\n                    getLocale,\n                    getIdentity,\n                    storageOperations\n                }),\n                ...createModelGroupsCrud({\n                    context,\n                    getTenant,\n                    getLocale,\n                    getIdentity,\n                    storageOperations,\n                    modelGroupsPermissions\n                }),\n                ...createModelsCrud({\n                    context,\n                    getLocale,\n                    getTenant,\n                    getIdentity,\n                    storageOperations,\n                    modelsPermissions\n                }),\n                ...createContentEntryCrud({\n                    context,\n                    getIdentity,\n                    getTenant,\n                    getLocale,\n                    storageOperations,\n                    entriesPermissions,\n                    modelsPermissions\n                }),\n                export: {\n                    ...createExportCrud(context)\n                },\n                importing: {\n                    ...createImportCrud(context)\n                }\n            };\n\n            if (!storageOperations.init) {\n                return;\n            }\n            await storageOperations.init(context);\n        });\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":";;;;;;;AACA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,oBAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,kBAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AACA,IAAAQ,yBAAA,GAAAR,OAAA;AACA,IAAAS,kBAAA,GAAAT,OAAA;AACA,IAAAU,uBAAA,GAAAV,OAAA;AACA,IAAAW,mBAAA,GAAAX,OAAA;AACA,IAAAY,OAAA,GAAAZ,OAAA;AACA,IAAAa,UAAA,GAAAb,OAAA;AAEA,MAAMc,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsBC,wCAAmB,CAACC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIJ,OAAO,EAAE;IAC1B,MAAMK,MAAM,GAAG,MAAMD,MAAM,CAACN,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIM,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIC,cAAW,CACjB,oDAAoD,EACpD,2BACJ,CAAC;AACL,CAAC;AAMM,MAAMC,mBAAmB,GAAGA,CAAC;EAAEC;AAA8B,CAAC,KAAK;EACtE,MAAMJ,MAAM,GAAG,IAAIK,kBAAa,CAAa,MAAMV,OAAO,IAAI;IAC1D,MAAM;MAAEI,IAAI;MAAEO;IAAO,CAAC,GAAG,MAAMZ,aAAa,CAACC,OAAO,CAAC;IAErD,MAAMY,SAAS,GAAGA,CAAA,KAAM;MACpB,MAAMC,YAAY,GAAGb,OAAO,CAACc,IAAI,CAACF,SAAS,CAACD,MAAM,CAAC;MACnD,IAAI,CAACE,YAAY,EAAE;QACf,MAAM,IAAIN,cAAW,CAAE,uBAAsBI,MAAO,kBAAiB,CAAC;MAC1E;MACA,OAAOE,YAAY;IACvB,CAAC;IAED,MAAME,WAAW,GAAGA,CAAA,KAAM;MACtB,OAAOf,OAAO,CAACgB,QAAQ,CAACD,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,MAAME,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOjB,OAAO,CAACkB,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAEDnB,OAAO,CAACC,OAAO,CAACmB,QAAQ,CACpB,IAAIC,wCAA+B,CAC/B,IAAAC,oEAA0C,EAACtB,OAAO,CAACC,OAAO,CAC9D,CACJ,CAAC;IAED,MAAMD,OAAO,CAACuB,SAAS,CAACC,OAAO,CAAC,2BAA2B,EAAE,YAAY;MACrE,MAAMf,iBAAiB,CAACgB,UAAU,CAACzB,OAAO,CAAC;MAE3C,MAAM0B,sBAAsB,GAAG,IAAIC,8CAAsB,CAAC;QACtDZ,WAAW,EAAEf,OAAO,CAACgB,QAAQ,CAACD,WAAW;QACzCa,cAAc,EAAEA,CAAA,KAAM5B,OAAO,CAACgB,QAAQ,CAACY,cAAc,CAAC,uBAAuB,CAAC;QAC9EC,wBAAwB,EAAE;MAC9B,CAAC,CAAC;MAEF,MAAMC,iBAAiB,GAAG,IAAIC,oCAAiB,CAAC;QAC5ChB,WAAW,EAAEf,OAAO,CAACgB,QAAQ,CAACD,WAAW;QACzCa,cAAc,EAAEA,CAAA,KAAM5B,OAAO,CAACgB,QAAQ,CAACY,cAAc,CAAC,kBAAkB,CAAC;QACzEC,wBAAwB,EAAE,OAAO;QACjCH;MACJ,CAAC,CAAC;MAEF,MAAMM,kBAAkB,GAAG,IAAIC,sCAAkB,CAAC;QAC9ClB,WAAW,EAAEf,OAAO,CAACgB,QAAQ,CAACD,WAAW;QACzCa,cAAc,EAAEA,CAAA,KAAM5B,OAAO,CAACgB,QAAQ,CAACY,cAAc,CAAC,kBAAkB,CAAC;QACzEC,wBAAwB,EAAE;MAC9B,CAAC,CAAC;MAEF7B,OAAO,CAACkC,GAAG,GAAG;QACV9B,IAAI;QACJO,MAAM;QACNC,SAAS;QACTuB,IAAI,EAAE/B,IAAI,KAAK,MAAM;QACrBgC,OAAO,EAAEhC,IAAI,KAAK,SAAS;QAC3BiC,MAAM,EAAEjC,IAAI,KAAK,QAAQ;QACzBK,iBAAiB;QACjB6B,WAAW,EAAE;UACTC,MAAM,EAAEb,sBAAsB;UAC9Bc,MAAM,EAAEV,iBAAiB;UACzBW,OAAO,EAAET;QACb,CAAC;QACD,GAAG,IAAAU,wBAAgB,EAAC;UAChB1C,OAAO;UACPiB,SAAS;UACTL,SAAS;UACTG,WAAW;UACXN;QACJ,CAAC,CAAC;QACF,GAAG,IAAAkC,wCAAqB,EAAC;UACrB3C,OAAO;UACPiB,SAAS;UACTL,SAAS;UACTG,WAAW;UACXN,iBAAiB;UACjBiB;QACJ,CAAC,CAAC;QACF,GAAG,IAAAkB,8BAAgB,EAAC;UAChB5C,OAAO;UACPY,SAAS;UACTK,SAAS;UACTF,WAAW;UACXN,iBAAiB;UACjBqB;QACJ,CAAC,CAAC;QACF,GAAG,IAAAe,oCAAsB,EAAC;UACtB7C,OAAO;UACPe,WAAW;UACXE,SAAS;UACTL,SAAS;UACTH,iBAAiB;UACjBuB,kBAAkB;UAClBF;QACJ,CAAC,CAAC;QACFgB,MAAM,EAAE;UACJ,GAAG,IAAAC,wBAAgB,EAAC/C,OAAO;QAC/B,CAAC;QACDgD,SAAS,EAAE;UACP,GAAG,IAAAC,2BAAgB,EAACjD,OAAO;QAC/B;MACJ,CAAC;MAED,IAAI,CAACS,iBAAiB,CAACyC,IAAI,EAAE;QACzB;MACJ;MACA,MAAMzC,iBAAiB,CAACyC,IAAI,CAAClD,OAAO,CAAC;IACzC,CAAC,CAAC;EACN,CAAC,CAAC;EAEFK,MAAM,CAAC8C,IAAI,GAAG,mBAAmB;EAEjC,OAAO9C,MAAM;AACjB,CAAC;AAAC+C,OAAA,CAAA5C,mBAAA,GAAAA,mBAAA"}
+{"version":3,"names":["_error","_interopRequireDefault","require","_api","_CmsParametersPlugin","_AccessControl","_system","_contentModelGroup","_contentModel","_contentEntry","_plugins","_valueKeyStorageConverter","_export","_importing","getParameters","context","plugins","byType","CmsParametersPlugin","type","plugin","result","WebinyError","createContextPlugin","storageOperations","ContextPlugin","locale","getLocale","systemLocale","i18n","getIdentity","security","getTenant","tenancy","getCurrentTenant","register","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","benchmark","measure","beforeInit","accessControl","AccessControl","getGroupsPermissions","getPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","withoutAuthorization","cms","listGroups","READ","PREVIEW","MANAGE","createSystemCrud","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","export","createExportCrud","importing","createImportCrud","init","name","exports"],"sources":["context.ts"],"sourcesContent":["import { CmsContext, HeadlessCmsStorageOperations } from \"~/types\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport { CmsParametersPlugin, CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin\";\nimport { AccessControl } from \"~/crud/AccessControl/AccessControl\";\nimport { createSystemCrud } from \"~/crud/system.crud\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter\";\nimport { createExportCrud } from \"~/export\";\nimport { createImportCrud } from \"~/export/crud/importing\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\n        \"Could not determine locale and/or type of the CMS.\",\n        \"CMS_LOCALE_AND_TYPE_ERROR\"\n    );\n};\n\nexport interface CrudParams {\n    storageOperations: HeadlessCmsStorageOperations;\n}\n\nexport const createContextPlugin = ({ storageOperations }: CrudParams) => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type, locale } = await getParameters(context);\n\n        const getLocale = () => {\n            const systemLocale = context.i18n.getLocale(locale);\n            if (!systemLocale) {\n                throw new WebinyError(`There is no locale \"${locale}\" in the system.`);\n            }\n            return systemLocale;\n        };\n\n        const getIdentity = () => {\n            return context.security.getIdentity();\n        };\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(\n                createCmsModelFieldConvertersAttachFactory(context.plugins)\n            )\n        );\n\n        await context.benchmark.measure(\"headlessCms.createContext\", async () => {\n            await storageOperations.beforeInit(context);\n\n            const accessControl = new AccessControl({\n                getIdentity: context.security.getIdentity,\n                getGroupsPermissions: () =>\n                    context.security.getPermissions(\"cms.contentModelGroup\"),\n                getModelsPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n                getEntriesPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n                listAllGroups: () => {\n                    return context.security.withoutAuthorization(() => {\n                        return context.cms.listGroups();\n                    });\n                }\n            });\n\n            context.cms = {\n                type,\n                locale,\n                getLocale,\n                READ: type === \"read\",\n                PREVIEW: type === \"preview\",\n                MANAGE: type === \"manage\",\n                storageOperations,\n                accessControl,\n                ...createSystemCrud({\n                    context,\n                    getTenant,\n                    getLocale,\n                    getIdentity,\n                    storageOperations\n                }),\n                ...createModelGroupsCrud({\n                    context,\n                    getTenant,\n                    getLocale,\n                    getIdentity,\n                    storageOperations,\n                    accessControl\n                }),\n                ...createModelsCrud({\n                    context,\n                    getLocale,\n                    getTenant,\n                    getIdentity,\n                    storageOperations,\n                    accessControl\n                }),\n                ...createContentEntryCrud({\n                    context,\n                    getIdentity,\n                    getTenant,\n                    getLocale,\n                    storageOperations,\n                    accessControl\n                }),\n                export: {\n                    ...createExportCrud(context)\n                },\n                importing: {\n                    ...createImportCrud(context)\n                }\n            };\n\n            if (!storageOperations.init) {\n                return;\n            }\n            await storageOperations.init(context);\n        });\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":";;;;;;;AACA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAD,OAAA;AACA,IAAAE,oBAAA,GAAAF,OAAA;AACA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,kBAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,aAAA,GAAAP,OAAA;AACA,IAAAQ,QAAA,GAAAR,OAAA;AACA,IAAAS,yBAAA,GAAAT,OAAA;AACA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,UAAA,GAAAX,OAAA;AAEA,MAAMY,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsBC,wCAAmB,CAACC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIJ,OAAO,EAAE;IAC1B,MAAMK,MAAM,GAAG,MAAMD,MAAM,CAACN,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIM,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIC,cAAW,CACjB,oDAAoD,EACpD,2BACJ,CAAC;AACL,CAAC;AAMM,MAAMC,mBAAmB,GAAGA,CAAC;EAAEC;AAA8B,CAAC,KAAK;EACtE,MAAMJ,MAAM,GAAG,IAAIK,kBAAa,CAAa,MAAMV,OAAO,IAAI;IAC1D,MAAM;MAAEI,IAAI;MAAEO;IAAO,CAAC,GAAG,MAAMZ,aAAa,CAACC,OAAO,CAAC;IAErD,MAAMY,SAAS,GAAGA,CAAA,KAAM;MACpB,MAAMC,YAAY,GAAGb,OAAO,CAACc,IAAI,CAACF,SAAS,CAACD,MAAM,CAAC;MACnD,IAAI,CAACE,YAAY,EAAE;QACf,MAAM,IAAIN,cAAW,CAAE,uBAAsBI,MAAO,kBAAiB,CAAC;MAC1E;MACA,OAAOE,YAAY;IACvB,CAAC;IAED,MAAME,WAAW,GAAGA,CAAA,KAAM;MACtB,OAAOf,OAAO,CAACgB,QAAQ,CAACD,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,MAAME,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOjB,OAAO,CAACkB,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAEDnB,OAAO,CAACC,OAAO,CAACmB,QAAQ,CACpB,IAAIC,wCAA+B,CAC/B,IAAAC,oEAA0C,EAACtB,OAAO,CAACC,OAAO,CAC9D,CACJ,CAAC;IAED,MAAMD,OAAO,CAACuB,SAAS,CAACC,OAAO,CAAC,2BAA2B,EAAE,YAAY;MACrE,MAAMf,iBAAiB,CAACgB,UAAU,CAACzB,OAAO,CAAC;MAE3C,MAAM0B,aAAa,GAAG,IAAIC,4BAAa,CAAC;QACpCZ,WAAW,EAAEf,OAAO,CAACgB,QAAQ,CAACD,WAAW;QACzCa,oBAAoB,EAAEA,CAAA,KAClB5B,OAAO,CAACgB,QAAQ,CAACa,cAAc,CAAC,uBAAuB,CAAC;QAC5DC,oBAAoB,EAAEA,CAAA,KAAM9B,OAAO,CAACgB,QAAQ,CAACa,cAAc,CAAC,kBAAkB,CAAC;QAC/EE,qBAAqB,EAAEA,CAAA,KAAM/B,OAAO,CAACgB,QAAQ,CAACa,cAAc,CAAC,kBAAkB,CAAC;QAChFG,aAAa,EAAEA,CAAA,KAAM;UACjB,OAAOhC,OAAO,CAACgB,QAAQ,CAACiB,oBAAoB,CAAC,MAAM;YAC/C,OAAOjC,OAAO,CAACkC,GAAG,CAACC,UAAU,CAAC,CAAC;UACnC,CAAC,CAAC;QACN;MACJ,CAAC,CAAC;MAEFnC,OAAO,CAACkC,GAAG,GAAG;QACV9B,IAAI;QACJO,MAAM;QACNC,SAAS;QACTwB,IAAI,EAAEhC,IAAI,KAAK,MAAM;QACrBiC,OAAO,EAAEjC,IAAI,KAAK,SAAS;QAC3BkC,MAAM,EAAElC,IAAI,KAAK,QAAQ;QACzBK,iBAAiB;QACjBiB,aAAa;QACb,GAAG,IAAAa,wBAAgB,EAAC;UAChBvC,OAAO;UACPiB,SAAS;UACTL,SAAS;UACTG,WAAW;UACXN;QACJ,CAAC,CAAC;QACF,GAAG,IAAA+B,wCAAqB,EAAC;UACrBxC,OAAO;UACPiB,SAAS;UACTL,SAAS;UACTG,WAAW;UACXN,iBAAiB;UACjBiB;QACJ,CAAC,CAAC;QACF,GAAG,IAAAe,8BAAgB,EAAC;UAChBzC,OAAO;UACPY,SAAS;UACTK,SAAS;UACTF,WAAW;UACXN,iBAAiB;UACjBiB;QACJ,CAAC,CAAC;QACF,GAAG,IAAAgB,oCAAsB,EAAC;UACtB1C,OAAO;UACPe,WAAW;UACXE,SAAS;UACTL,SAAS;UACTH,iBAAiB;UACjBiB;QACJ,CAAC,CAAC;QACFiB,MAAM,EAAE;UACJ,GAAG,IAAAC,wBAAgB,EAAC5C,OAAO;QAC/B,CAAC;QACD6C,SAAS,EAAE;UACP,GAAG,IAAAC,2BAAgB,EAAC9C,OAAO;QAC/B;MACJ,CAAC;MAED,IAAI,CAACS,iBAAiB,CAACsC,IAAI,EAAE;QACzB;MACJ;MACA,MAAMtC,iBAAiB,CAACsC,IAAI,CAAC/C,OAAO,CAAC;IACzC,CAAC,CAAC;EACN,CAAC,CAAC;EAEFK,MAAM,CAAC2C,IAAI,GAAG,mBAAmB;EAEjC,OAAO3C,MAAM;AACjB,CAAC;AAAC4C,OAAA,CAAAzC,mBAAA,GAAAA,mBAAA"}

package/crud/AccessControl/AccessControl.d.ts

@@ -0,0 +1,98 @@
+import { SecurityIdentity } from "@webiny/api-security/types";
+import { CmsEntry, CmsEntryPermission, CmsGroup, CmsGroupPermission, CmsModel, CmsModelPermission } from "../../types";
+export interface AccessControlParams {
+    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;
+    getGroupsPermissions: () => CmsGroupPermission[] | Promise<CmsGroupPermission[]>;
+    getModelsPermissions: () => CmsModelPermission[] | Promise<CmsModelPermission[]>;
+    getEntriesPermissions: () => CmsEntryPermission[] | Promise<CmsEntryPermission[]>;
+    listAllGroups: () => Promise<CmsGroup[]>;
+}
+interface GetGroupsAccessControlListParams {
+    group?: CmsGroup;
+}
+interface CanAccessGroupParams extends GetGroupsAccessControlListParams {
+    rwd?: string;
+}
+interface GetModelsAccessControlListParams {
+    model?: CmsModel;
+}
+interface CanAccessModelParams extends GetModelsAccessControlListParams {
+    rwd?: string;
+}
+interface GetEntriesAccessControlListParams {
+    model: CmsModel;
+    entry?: CmsEntry;
+}
+interface CanAccessEntryParams extends GetEntriesAccessControlListParams {
+    rwd?: string;
+    pw?: string;
+}
+interface AccessControlEntry {
+    rwd: string;
+    canAccessNonOwned: boolean;
+    canAccessOnlyOwned: boolean;
+}
+declare type AccessControlList = AccessControlEntry[];
+interface EntriesAccessControlEntry extends AccessControlEntry {
+    pw?: string;
+}
+declare type EntriesAccessControlList = EntriesAccessControlEntry[];
+export declare class AccessControl {
+    getIdentity: AccessControlParams["getIdentity"];
+    getGroupsPermissions: AccessControlParams["getGroupsPermissions"];
+    getModelsPermissions: AccessControlParams["getModelsPermissions"];
+    getEntriesPermissions: AccessControlParams["getEntriesPermissions"];
+    listAllGroupsCallback: AccessControlParams["listAllGroups"];
+    private fullAccessPermissions;
+    private allGroups;
+    constructor({ getIdentity, getGroupsPermissions, getModelsPermissions, getEntriesPermissions, listAllGroups }: AccessControlParams);
+    /**
+     * Groups-related methods below. 👇
+     * - canAccessGroup
+     * - ensureCanAccessGroup
+     * - canAccessNonOwnedGroups
+     * - canAccessOnlyOwnedGroups
+     * - getGroupsAccessControlList
+     * - hasFullAccessToGroups
+     */
+    canAccessGroup(params?: CanAccessGroupParams): Promise<boolean>;
+    ensureCanAccessGroup(params?: CanAccessGroupParams): Promise<void>;
+    canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
+    canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
+    getGroupsAccessControlList(params: GetGroupsAccessControlListParams): Promise<AccessControlList>;
+    hasFullAccessToGroups(): Promise<boolean>;
+    /**
+     * Models-related methods below. 👇
+     * - canAccessModel
+     * - ensureCanAccessModel
+     * - canAccessNonOwnedModels
+     * - canAccessOnlyOwnedModels
+     * - getModelsAccessControlList
+     * - hasFullAccessToModels
+     */
+    canAccessModel(params: CanAccessModelParams): Promise<boolean>;
+    ensureCanAccessModel(params?: CanAccessModelParams): Promise<void>;
+    canAccessNonOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
+    canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
+    getModelsAccessControlList(params: GetModelsAccessControlListParams): Promise<AccessControlList>;
+    hasFullAccessToModels(params: GetModelsAccessControlListParams): Promise<boolean>;
+    /**
+     * Entries-related methods below. 👇
+     * - canAccessEntry
+     * - ensureCanAccessEntry
+     * - canAccessNonOwnedEntries
+     * - canAccessOnlyOwnedEntries
+     * - getEntriesAccessControlList
+     * - hasFullAccessToEntries
+     */
+    canAccessEntry(params: CanAccessEntryParams): Promise<boolean>;
+    ensureCanAccessEntry(params: CanAccessEntryParams): Promise<void>;
+    canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    getEntriesAccessControlList(params: GetEntriesAccessControlListParams): Promise<EntriesAccessControlList>;
+    hasFullAccessToEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    private modelAuthorizationDisabled;
+    listAllGroups(): Promise<CmsGroup[]>;
+    getGroup(id: string): Promise<CmsGroup | undefined>;
+}
+export {};