@webiny/api-headless-cms 6.1.0 → 6.2.0

package/context.d.ts

@@ -1,6 +1,3 @@
-import type { CmsContext, HeadlessCmsStorageOperations } from "./types/index.js";
+import type { CmsContext } from "./types/index.js";
 import { ContextPlugin } from "@webiny/api";
-export interface CrudParams {
-    storageOperations: HeadlessCmsStorageOperations;
-}
-export declare const createContextPlugin: ({ storageOperations }: CrudParams) => ContextPlugin<CmsContext>;
+export declare const createContextPlugin: () => ContextPlugin<CmsContext>;

package/context.js

@@ -13,7 +13,7 @@ import { createImportCrud } from "./export/crud/importing.js";
 import { getSchema } from "./graphql/getSchema.js";
 import { CmsInstallerFeature } from "./features/installer/feature.js";
 import { ContentEntriesFeature } from "./features/contentEntry/ContentEntriesFeature.js";
-import { AccessControl as AccessControlAbstraction, CmsContext as CmsContextAbstraction, StorageOperations } from "./features/shared/abstractions.js";
+import { AccessControl as AccessControlAbstraction, CmsContext as CmsContextAbstraction, StorageOperations, StorageOperationsFactory } from "./features/shared/abstractions.js";
 import { EntryFromStorageTransform, EntryToStorageTransform, PluginsContainer, SearchableFieldsProvider } from "./legacy/abstractions.js";
 import { entryFromStorageTransform, entryToStorageTransform } from "./utils/entryStorage.js";
 import { getSearchableFields } from "./crud/contentEntry/searchableFields.js";
@@ -22,6 +22,9 @@ import { ContentModelFeature } from "./features/contentModel/ContentModelFeature
 import { ModelBuilderFeature } from "./features/modelBuilder/index.js";
 import { CmsWhereMapperFeature } from "./features/whereMapper/feature.js";
 import { CmsSortMapperFeature } from "./features/sortMapper/feature.js";
+import { GraphQLFeature } from "./features/graphql/index.js";
+import { ValidationFeature } from "./features/validation/index.js";
+import { StorageFeature } from "./features/storage/index.js";
 const getParameters = async context => {
   const plugins = context.plugins.byType(CmsParametersPlugin.type);
   for (const plugin of plugins) {
@@ -32,9 +35,7 @@ const getParameters = async context => {
   }
   throw new WebinyError("Could not determine type of the CMS.", "CMS_TYPE_ERROR");
 };
-export const createContextPlugin = ({
-  storageOperations
-}) => {
+export const createContextPlugin = () => {
   const plugin = new ContextPlugin(async context => {
     const {
       type
@@ -58,6 +59,12 @@ export const createContextPlugin = ({
           context.cms.MANAGE = true;
       }
     };
+
+    // TODO figure out a better way. maybe this stuff should be on before handler?
+    // GraphQL fields must be loaded before anything else
+    GraphQLFeature.register(context.container);
+    ValidationFeature.register(context.container);
+    StorageFeature.register(context.container);
     async function getExecutableSchema(type) {
       const originalType = context.cms.type;
       setSchemaType(type);
@@ -73,8 +80,7 @@ export const createContextPlugin = ({
         return processRequestBody(input, schema, context);
       };
     }
-    context.plugins.register(new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context.plugins)));
-    await storageOperations.beforeInit(context);
+    context.plugins.register(new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context)));
     const accessControl = new AccessControl({
       getIdentity: async () => context.security.getIdentity(),
       getGroupsPermissions: () => context.security.getPermissions("cms.contentModelGroup"),
@@ -86,6 +92,9 @@ export const createContextPlugin = ({
         });
       }
     });
+    const storageOperationsFactory = context.container.resolve(StorageOperationsFactory);
+    const storageOperations = await storageOperationsFactory.create(context);
+    await storageOperations.beforeInit(context);
     context.cms = {
       type,
       READ: type === "read",
@@ -124,7 +133,7 @@ export const createContextPlugin = ({
     });
     context.container.registerInstance(SearchableFieldsProvider, params => {
       return getSearchableFields({
-        plugins: context.plugins,
+        context,
         fields: params.fields,
         input: []
       });

package/context.js.map

@@ -1 +1 @@
-{"version":3,"names":["WebinyError","ContextPlugin","processRequestBody","CmsParametersPlugin","AccessControl","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","createExportCrud","createImportCrud","getSchema","CmsInstallerFeature","ContentEntriesFeature","AccessControlAbstraction","CmsContext","CmsContextAbstraction","StorageOperations","EntryFromStorageTransform","EntryToStorageTransform","PluginsContainer","SearchableFieldsProvider","entryFromStorageTransform","entryToStorageTransform","getSearchableFields","ContentModelGroupFeature","ContentModelFeature","ModelBuilderFeature","CmsWhereMapperFeature","CmsSortMapperFeature","getParameters","context","plugins","byType","type","plugin","result","createContextPlugin","storageOperations","getTenant","tenancy","getCurrentTenant","setSchemaType","cms","READ","PREVIEW","MANAGE","getExecutableSchema","originalType","schema","security","withoutAuthorization","input","register","beforeInit","accessControl","getIdentity","getGroupsPermissions","getPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","listGroups","export","importing","container","registerInstance","model","entry","params","fields","init","name"],"sources":["context.ts"],"sourcesContent":["import type { ApiEndpoint, CmsContext, HeadlessCmsStorageOperations } from \"~/types/index.js\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport type { GraphQLRequestBody } from \"@webiny/handler-graphql/types.js\";\nimport { processRequestBody } from \"@webiny/handler-graphql\";\nimport type { CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin.js\";\nimport { CmsParametersPlugin } from \"~/plugins/CmsParametersPlugin.js\";\nimport { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud.js\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud.js\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud.js\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins/index.js\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter.js\";\nimport { createExportCrud } from \"~/export/index.js\";\nimport { createImportCrud } from \"~/export/crud/importing.js\";\nimport { getSchema } from \"~/graphql/getSchema.js\";\nimport { CmsInstallerFeature } from \"~/features/installer/feature.js\";\nimport { ContentEntriesFeature } from \"~/features/contentEntry/ContentEntriesFeature.js\";\nimport {\n    AccessControl as AccessControlAbstraction,\n    CmsContext as CmsContextAbstraction,\n    StorageOperations\n} from \"~/features/shared/abstractions.js\";\nimport {\n    EntryFromStorageTransform,\n    EntryToStorageTransform,\n    PluginsContainer,\n    SearchableFieldsProvider\n} from \"./legacy/abstractions.js\";\nimport { entryFromStorageTransform, entryToStorageTransform } from \"~/utils/entryStorage.js\";\nimport { getSearchableFields } from \"~/crud/contentEntry/searchableFields.js\";\nimport { ContentModelGroupFeature } from \"~/features/contentModelGroup/ContentModelGroupFeature.js\";\nimport { ContentModelFeature } from \"~/features/contentModel/ContentModelFeature.js\";\nimport { ModelBuilderFeature } from \"~/features/modelBuilder/index.js\";\nimport { CmsWhereMapperFeature } from \"~/features/whereMapper/feature.js\";\nimport { CmsSortMapperFeature } from \"~/features/sortMapper/feature.js\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\"Could not determine type of the CMS.\", \"CMS_TYPE_ERROR\");\n};\n\nexport interface CrudParams {\n    storageOperations: HeadlessCmsStorageOperations;\n}\n\nexport const createContextPlugin = ({ storageOperations }: CrudParams) => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type } = await getParameters(context);\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        const setSchemaType = (type: ApiEndpoint | null) => {\n            if (!type) {\n                return;\n            }\n\n            context.cms.type = type;\n\n            switch (type) {\n                case \"read\":\n                    context.cms.READ = true;\n                    break;\n                case \"preview\":\n                    context.cms.PREVIEW = true;\n                    break;\n                default:\n                    context.cms.MANAGE = true;\n            }\n        };\n\n        async function getExecutableSchema(type: ApiEndpoint) {\n            const originalType = context.cms.type;\n            setSchemaType(type);\n\n            const schema = await context.security.withoutAuthorization(() => {\n                return getSchema({\n                    context,\n                    getTenant,\n                    type\n                });\n            });\n\n            setSchemaType(originalType);\n\n            return async <TData, TExtensions>(input: GraphQLRequestBody | GraphQLRequestBody[]) => {\n                return processRequestBody<TData, TExtensions>(input, schema, context);\n            };\n        }\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(\n                createCmsModelFieldConvertersAttachFactory(context.plugins)\n            )\n        );\n\n        await storageOperations.beforeInit(context);\n\n        const accessControl = new AccessControl({\n            getIdentity: async () => context.security.getIdentity(),\n            getGroupsPermissions: () => context.security.getPermissions(\"cms.contentModelGroup\"),\n            getModelsPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n            getEntriesPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n            listAllGroups: () => {\n                return context.security.withoutAuthorization(() => {\n                    return context.cms.listGroups();\n                });\n            }\n        });\n\n        context.cms = {\n            type,\n            READ: type === \"read\",\n            PREVIEW: type === \"preview\",\n            MANAGE: type === \"manage\",\n            storageOperations,\n            accessControl,\n            getExecutableSchema,\n            ...createModelGroupsCrud({\n                context\n            }),\n            ...createModelsCrud({\n                context\n            }),\n            ...createContentEntryCrud({\n                context\n            }),\n            export: {\n                ...createExportCrud(context)\n            },\n            importing: {\n                ...createImportCrud(context)\n            }\n        };\n\n        // Register legacy dependencies\n        context.container.registerInstance(StorageOperations, storageOperations);\n        context.container.registerInstance(AccessControlAbstraction, accessControl);\n        context.container.registerInstance(CmsContextAbstraction, context);\n        context.container.registerInstance(PluginsContainer, context.plugins);\n        context.container.registerInstance(EntryToStorageTransform, (model, entry) => {\n            return entryToStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(EntryFromStorageTransform, (model, entry) => {\n            return entryFromStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(SearchableFieldsProvider, params => {\n            return getSearchableFields({\n                plugins: context.plugins,\n                fields: params.fields,\n                input: []\n            });\n        });\n\n        // Register features\n        CmsInstallerFeature.register(context.container);\n        ContentEntriesFeature.register(context.container);\n        ContentModelFeature.register(context.container);\n        ContentModelGroupFeature.register(context.container);\n        ModelBuilderFeature.register(context.container);\n\n        CmsWhereMapperFeature.register(context.container);\n        CmsSortMapperFeature.register(context.container);\n\n        if (!storageOperations.init) {\n            return;\n        }\n        await storageOperations.init(context);\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":"AACA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,aAAa,QAAQ,aAAa;AAE3C,SAASC,kBAAkB,QAAQ,yBAAyB;AAE5D,SAASC,mBAAmB;AAC5B,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAC9B,SAASC,gBAAgB;AACzB,SAASC,sBAAsB;AAC/B,SAASC,+BAA+B;AACxC,SAASC,0CAA0C;AACnD,SAASC,gBAAgB;AACzB,SAASC,gBAAgB;AACzB,SAASC,SAAS;AAClB,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SACIV,aAAa,IAAIW,wBAAwB,EACzCC,UAAU,IAAIC,qBAAqB,EACnCC,iBAAiB;AAErB,SACIC,yBAAyB,EACzBC,uBAAuB,EACvBC,gBAAgB,EAChBC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,uBAAuB;AAC3D,SAASC,mBAAmB;AAC5B,SAASC,wBAAwB;AACjC,SAASC,mBAAmB;AAC5B,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SAASC,oBAAoB;AAE7B,MAAMC,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsB/B,mBAAmB,CAACgC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIH,OAAO,EAAE;IAC1B,MAAMI,MAAM,GAAG,MAAMD,MAAM,CAACL,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIK,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIrC,WAAW,CAAC,sCAAsC,EAAE,gBAAgB,CAAC;AACnF,CAAC;AAMD,OAAO,MAAMsC,mBAAmB,GAAGA,CAAC;EAAEC;AAA8B,CAAC,KAAK;EACtE,MAAMH,MAAM,GAAG,IAAInC,aAAa,CAAa,MAAM+B,OAAO,IAAI;IAC1D,MAAM;MAAEG;IAAK,CAAC,GAAG,MAAMJ,aAAa,CAACC,OAAO,CAAC;IAE7C,MAAMQ,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOR,OAAO,CAACS,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAMC,aAAa,GAAIR,IAAwB,IAAK;MAChD,IAAI,CAACA,IAAI,EAAE;QACP;MACJ;MAEAH,OAAO,CAACY,GAAG,CAACT,IAAI,GAAGA,IAAI;MAEvB,QAAQA,IAAI;QACR,KAAK,MAAM;UACPH,OAAO,CAACY,GAAG,CAACC,IAAI,GAAG,IAAI;UACvB;QACJ,KAAK,SAAS;UACVb,OAAO,CAACY,GAAG,CAACE,OAAO,GAAG,IAAI;UAC1B;QACJ;UACId,OAAO,CAACY,GAAG,CAACG,MAAM,GAAG,IAAI;MACjC;IACJ,CAAC;IAED,eAAeC,mBAAmBA,CAACb,IAAiB,EAAE;MAClD,MAAMc,YAAY,GAAGjB,OAAO,CAACY,GAAG,CAACT,IAAI;MACrCQ,aAAa,CAACR,IAAI,CAAC;MAEnB,MAAMe,MAAM,GAAG,MAAMlB,OAAO,CAACmB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;QAC7D,OAAOxC,SAAS,CAAC;UACboB,OAAO;UACPQ,SAAS;UACTL;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEFQ,aAAa,CAACM,YAAY,CAAC;MAE3B,OAAO,MAA2BI,KAAgD,IAAK;QACnF,OAAOnD,kBAAkB,CAAqBmD,KAAK,EAAEH,MAAM,EAAElB,OAAO,CAAC;MACzE,CAAC;IACL;IAEAA,OAAO,CAACC,OAAO,CAACqB,QAAQ,CACpB,IAAI9C,+BAA+B,CAC/BC,0CAA0C,CAACuB,OAAO,CAACC,OAAO,CAC9D,CACJ,CAAC;IAED,MAAMM,iBAAiB,CAACgB,UAAU,CAACvB,OAAO,CAAC;IAE3C,MAAMwB,aAAa,GAAG,IAAIpD,aAAa,CAAC;MACpCqD,WAAW,EAAE,MAAAA,CAAA,KAAYzB,OAAO,CAACmB,QAAQ,CAACM,WAAW,CAAC,CAAC;MACvDC,oBAAoB,EAAEA,CAAA,KAAM1B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,uBAAuB,CAAC;MACpFC,oBAAoB,EAAEA,CAAA,KAAM5B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,kBAAkB,CAAC;MAC/EE,qBAAqB,EAAEA,CAAA,KAAM7B,OAAO,CAACmB,QAAQ,CAACQ,cAAc,CAAC,kBAAkB,CAAC;MAChFG,aAAa,EAAEA,CAAA,KAAM;QACjB,OAAO9B,OAAO,CAACmB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;UAC/C,OAAOpB,OAAO,CAACY,GAAG,CAACmB,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC;MACN;IACJ,CAAC,CAAC;IAEF/B,OAAO,CAACY,GAAG,GAAG;MACVT,IAAI;MACJU,IAAI,EAAEV,IAAI,KAAK,MAAM;MACrBW,OAAO,EAAEX,IAAI,KAAK,SAAS;MAC3BY,MAAM,EAAEZ,IAAI,KAAK,QAAQ;MACzBI,iBAAiB;MACjBiB,aAAa;MACbR,mBAAmB;MACnB,GAAG3C,qBAAqB,CAAC;QACrB2B;MACJ,CAAC,CAAC;MACF,GAAG1B,gBAAgB,CAAC;QAChB0B;MACJ,CAAC,CAAC;MACF,GAAGzB,sBAAsB,CAAC;QACtByB;MACJ,CAAC,CAAC;MACFgC,MAAM,EAAE;QACJ,GAAGtD,gBAAgB,CAACsB,OAAO;MAC/B,CAAC;MACDiC,SAAS,EAAE;QACP,GAAGtD,gBAAgB,CAACqB,OAAO;MAC/B;IACJ,CAAC;;IAED;IACAA,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAACjD,iBAAiB,EAAEqB,iBAAiB,CAAC;IACxEP,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAACpD,wBAAwB,EAAEyC,aAAa,CAAC;IAC3ExB,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAClD,qBAAqB,EAAEe,OAAO,CAAC;IAClEA,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC9C,gBAAgB,EAAEW,OAAO,CAACC,OAAO,CAAC;IACrED,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC/C,uBAAuB,EAAE,CAACgD,KAAK,EAAEC,KAAK,KAAK;MAC1E,OAAO7C,uBAAuB,CAACQ,OAAO,EAAEoC,KAAK,EAAEC,KAAK,CAAC;IACzD,CAAC,CAAC;IACFrC,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAChD,yBAAyB,EAAE,CAACiD,KAAK,EAAEC,KAAK,KAAK;MAC5E,OAAO9C,yBAAyB,CAACS,OAAO,EAAEoC,KAAK,EAAEC,KAAK,CAAC;IAC3D,CAAC,CAAC;IACFrC,OAAO,CAACkC,SAAS,CAACC,gBAAgB,CAAC7C,wBAAwB,EAAEgD,MAAM,IAAI;MACnE,OAAO7C,mBAAmB,CAAC;QACvBQ,OAAO,EAAED,OAAO,CAACC,OAAO;QACxBsC,MAAM,EAAED,MAAM,CAACC,MAAM;QACrBlB,KAAK,EAAE;MACX,CAAC,CAAC;IACN,CAAC,CAAC;;IAEF;IACAxC,mBAAmB,CAACyC,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAC/CpD,qBAAqB,CAACwC,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACjDvC,mBAAmB,CAAC2B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAC/CxC,wBAAwB,CAAC4B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACpDtC,mBAAmB,CAAC0B,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAE/CrC,qBAAqB,CAACyB,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IACjDpC,oBAAoB,CAACwB,QAAQ,CAACtB,OAAO,CAACkC,SAAS,CAAC;IAEhD,IAAI,CAAC3B,iBAAiB,CAACiC,IAAI,EAAE;MACzB;IACJ;IACA,MAAMjC,iBAAiB,CAACiC,IAAI,CAACxC,OAAO,CAAC;EACzC,CAAC,CAAC;EAEFI,MAAM,CAACqC,IAAI,GAAG,mBAAmB;EAEjC,OAAOrC,MAAM;AACjB,CAAC","ignoreList":[]}
+{"version":3,"names":["WebinyError","ContextPlugin","processRequestBody","CmsParametersPlugin","AccessControl","createModelGroupsCrud","createModelsCrud","createContentEntryCrud","StorageOperationsCmsModelPlugin","createCmsModelFieldConvertersAttachFactory","createExportCrud","createImportCrud","getSchema","CmsInstallerFeature","ContentEntriesFeature","AccessControlAbstraction","CmsContext","CmsContextAbstraction","StorageOperations","StorageOperationsFactory","EntryFromStorageTransform","EntryToStorageTransform","PluginsContainer","SearchableFieldsProvider","entryFromStorageTransform","entryToStorageTransform","getSearchableFields","ContentModelGroupFeature","ContentModelFeature","ModelBuilderFeature","CmsWhereMapperFeature","CmsSortMapperFeature","GraphQLFeature","ValidationFeature","StorageFeature","getParameters","context","plugins","byType","type","plugin","result","createContextPlugin","getTenant","tenancy","getCurrentTenant","setSchemaType","cms","READ","PREVIEW","MANAGE","register","container","getExecutableSchema","originalType","schema","security","withoutAuthorization","input","accessControl","getIdentity","getGroupsPermissions","getPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","listGroups","storageOperationsFactory","resolve","storageOperations","create","beforeInit","export","importing","registerInstance","model","entry","params","fields","init","name"],"sources":["context.ts"],"sourcesContent":["import type { ApiEndpoint, CmsContext } from \"~/types/index.js\";\nimport WebinyError from \"@webiny/error\";\nimport { ContextPlugin } from \"@webiny/api\";\nimport type { GraphQLRequestBody } from \"@webiny/handler-graphql/types.js\";\nimport { processRequestBody } from \"@webiny/handler-graphql\";\nimport type { CmsParametersPluginResponse } from \"~/plugins/CmsParametersPlugin.js\";\nimport { CmsParametersPlugin } from \"~/plugins/CmsParametersPlugin.js\";\nimport { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { createModelGroupsCrud } from \"~/crud/contentModelGroup.crud.js\";\nimport { createModelsCrud } from \"~/crud/contentModel.crud.js\";\nimport { createContentEntryCrud } from \"~/crud/contentEntry.crud.js\";\nimport { StorageOperationsCmsModelPlugin } from \"~/plugins/index.js\";\nimport { createCmsModelFieldConvertersAttachFactory } from \"~/utils/converters/valueKeyStorageConverter.js\";\nimport { createExportCrud } from \"~/export/index.js\";\nimport { createImportCrud } from \"~/export/crud/importing.js\";\nimport { getSchema } from \"~/graphql/getSchema.js\";\nimport { CmsInstallerFeature } from \"~/features/installer/feature.js\";\nimport { ContentEntriesFeature } from \"~/features/contentEntry/ContentEntriesFeature.js\";\nimport {\n    AccessControl as AccessControlAbstraction,\n    CmsContext as CmsContextAbstraction,\n    StorageOperations,\n    StorageOperationsFactory\n} from \"~/features/shared/abstractions.js\";\nimport {\n    EntryFromStorageTransform,\n    EntryToStorageTransform,\n    PluginsContainer,\n    SearchableFieldsProvider\n} from \"./legacy/abstractions.js\";\nimport { entryFromStorageTransform, entryToStorageTransform } from \"~/utils/entryStorage.js\";\nimport { getSearchableFields } from \"~/crud/contentEntry/searchableFields.js\";\nimport { ContentModelGroupFeature } from \"~/features/contentModelGroup/ContentModelGroupFeature.js\";\nimport { ContentModelFeature } from \"~/features/contentModel/ContentModelFeature.js\";\nimport { ModelBuilderFeature } from \"~/features/modelBuilder/index.js\";\nimport { CmsWhereMapperFeature } from \"~/features/whereMapper/feature.js\";\nimport { CmsSortMapperFeature } from \"~/features/sortMapper/feature.js\";\nimport { GraphQLFeature } from \"~/features/graphql/index.js\";\nimport { ValidationFeature } from \"~/features/validation/index.js\";\nimport { StorageFeature } from \"~/features/storage/index.js\";\n\nconst getParameters = async (context: CmsContext): Promise<CmsParametersPluginResponse> => {\n    const plugins = context.plugins.byType<CmsParametersPlugin>(CmsParametersPlugin.type);\n\n    for (const plugin of plugins) {\n        const result = await plugin.getParameters(context);\n        if (result !== null) {\n            return result;\n        }\n    }\n    throw new WebinyError(\"Could not determine type of the CMS.\", \"CMS_TYPE_ERROR\");\n};\n\nexport const createContextPlugin = () => {\n    const plugin = new ContextPlugin<CmsContext>(async context => {\n        const { type } = await getParameters(context);\n\n        const getTenant = () => {\n            return context.tenancy.getCurrentTenant();\n        };\n\n        const setSchemaType = (type: ApiEndpoint | null) => {\n            if (!type) {\n                return;\n            }\n\n            context.cms.type = type;\n\n            switch (type) {\n                case \"read\":\n                    context.cms.READ = true;\n                    break;\n                case \"preview\":\n                    context.cms.PREVIEW = true;\n                    break;\n                default:\n                    context.cms.MANAGE = true;\n            }\n        };\n\n        // TODO figure out a better way. maybe this stuff should be on before handler?\n        // GraphQL fields must be loaded before anything else\n        GraphQLFeature.register(context.container);\n        ValidationFeature.register(context.container);\n        StorageFeature.register(context.container);\n\n        async function getExecutableSchema(type: ApiEndpoint) {\n            const originalType = context.cms.type;\n            setSchemaType(type);\n\n            const schema = await context.security.withoutAuthorization(() => {\n                return getSchema({\n                    context,\n                    getTenant,\n                    type\n                });\n            });\n\n            setSchemaType(originalType);\n\n            return async <TData, TExtensions>(input: GraphQLRequestBody | GraphQLRequestBody[]) => {\n                return processRequestBody<TData, TExtensions>(input, schema, context);\n            };\n        }\n\n        context.plugins.register(\n            new StorageOperationsCmsModelPlugin(createCmsModelFieldConvertersAttachFactory(context))\n        );\n\n        const accessControl = new AccessControl({\n            getIdentity: async () => context.security.getIdentity(),\n            getGroupsPermissions: () => context.security.getPermissions(\"cms.contentModelGroup\"),\n            getModelsPermissions: () => context.security.getPermissions(\"cms.contentModel\"),\n            getEntriesPermissions: () => context.security.getPermissions(\"cms.contentEntry\"),\n            listAllGroups: () => {\n                return context.security.withoutAuthorization(() => {\n                    return context.cms.listGroups();\n                });\n            }\n        });\n\n        const storageOperationsFactory = context.container.resolve(StorageOperationsFactory);\n\n        const storageOperations = await storageOperationsFactory.create(context);\n        await storageOperations.beforeInit(context);\n\n        context.cms = {\n            type,\n            READ: type === \"read\",\n            PREVIEW: type === \"preview\",\n            MANAGE: type === \"manage\",\n            storageOperations,\n            accessControl,\n            getExecutableSchema,\n            ...createModelGroupsCrud({\n                context\n            }),\n            ...createModelsCrud({\n                context\n            }),\n            ...createContentEntryCrud({\n                context\n            }),\n            export: {\n                ...createExportCrud(context)\n            },\n            importing: {\n                ...createImportCrud(context)\n            }\n        };\n\n        // Register legacy dependencies\n        context.container.registerInstance(StorageOperations, storageOperations);\n        context.container.registerInstance(AccessControlAbstraction, accessControl);\n        context.container.registerInstance(CmsContextAbstraction, context);\n        context.container.registerInstance(PluginsContainer, context.plugins);\n        context.container.registerInstance(EntryToStorageTransform, (model, entry) => {\n            return entryToStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(EntryFromStorageTransform, (model, entry) => {\n            return entryFromStorageTransform(context, model, entry);\n        });\n        context.container.registerInstance(SearchableFieldsProvider, params => {\n            return getSearchableFields({\n                context,\n                fields: params.fields,\n                input: []\n            });\n        });\n\n        // Register features\n        CmsInstallerFeature.register(context.container);\n        ContentEntriesFeature.register(context.container);\n        ContentModelFeature.register(context.container);\n        ContentModelGroupFeature.register(context.container);\n        ModelBuilderFeature.register(context.container);\n        CmsWhereMapperFeature.register(context.container);\n        CmsSortMapperFeature.register(context.container);\n\n        if (!storageOperations.init) {\n            return;\n        }\n        await storageOperations.init(context);\n    });\n\n    plugin.name = \"cms.createContext\";\n\n    return plugin;\n};\n"],"mappings":"AACA,OAAOA,WAAW,MAAM,eAAe;AACvC,SAASC,aAAa,QAAQ,aAAa;AAE3C,SAASC,kBAAkB,QAAQ,yBAAyB;AAE5D,SAASC,mBAAmB;AAC5B,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAC9B,SAASC,gBAAgB;AACzB,SAASC,sBAAsB;AAC/B,SAASC,+BAA+B;AACxC,SAASC,0CAA0C;AACnD,SAASC,gBAAgB;AACzB,SAASC,gBAAgB;AACzB,SAASC,SAAS;AAClB,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SACIV,aAAa,IAAIW,wBAAwB,EACzCC,UAAU,IAAIC,qBAAqB,EACnCC,iBAAiB,EACjBC,wBAAwB;AAE5B,SACIC,yBAAyB,EACzBC,uBAAuB,EACvBC,gBAAgB,EAChBC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,uBAAuB;AAC3D,SAASC,mBAAmB;AAC5B,SAASC,wBAAwB;AACjC,SAASC,mBAAmB;AAC5B,SAASC,mBAAmB;AAC5B,SAASC,qBAAqB;AAC9B,SAASC,oBAAoB;AAC7B,SAASC,cAAc;AACvB,SAASC,iBAAiB;AAC1B,SAASC,cAAc;AAEvB,MAAMC,aAAa,GAAG,MAAOC,OAAmB,IAA2C;EACvF,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,CAACC,MAAM,CAAsBnC,mBAAmB,CAACoC,IAAI,CAAC;EAErF,KAAK,MAAMC,MAAM,IAAIH,OAAO,EAAE;IAC1B,MAAMI,MAAM,GAAG,MAAMD,MAAM,CAACL,aAAa,CAACC,OAAO,CAAC;IAClD,IAAIK,MAAM,KAAK,IAAI,EAAE;MACjB,OAAOA,MAAM;IACjB;EACJ;EACA,MAAM,IAAIzC,WAAW,CAAC,sCAAsC,EAAE,gBAAgB,CAAC;AACnF,CAAC;AAED,OAAO,MAAM0C,mBAAmB,GAAGA,CAAA,KAAM;EACrC,MAAMF,MAAM,GAAG,IAAIvC,aAAa,CAAa,MAAMmC,OAAO,IAAI;IAC1D,MAAM;MAAEG;IAAK,CAAC,GAAG,MAAMJ,aAAa,CAACC,OAAO,CAAC;IAE7C,MAAMO,SAAS,GAAGA,CAAA,KAAM;MACpB,OAAOP,OAAO,CAACQ,OAAO,CAACC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAMC,aAAa,GAAIP,IAAwB,IAAK;MAChD,IAAI,CAACA,IAAI,EAAE;QACP;MACJ;MAEAH,OAAO,CAACW,GAAG,CAACR,IAAI,GAAGA,IAAI;MAEvB,QAAQA,IAAI;QACR,KAAK,MAAM;UACPH,OAAO,CAACW,GAAG,CAACC,IAAI,GAAG,IAAI;UACvB;QACJ,KAAK,SAAS;UACVZ,OAAO,CAACW,GAAG,CAACE,OAAO,GAAG,IAAI;UAC1B;QACJ;UACIb,OAAO,CAACW,GAAG,CAACG,MAAM,GAAG,IAAI;MACjC;IACJ,CAAC;;IAED;IACA;IACAlB,cAAc,CAACmB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC1CnB,iBAAiB,CAACkB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC7ClB,cAAc,CAACiB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAE1C,eAAeC,mBAAmBA,CAACd,IAAiB,EAAE;MAClD,MAAMe,YAAY,GAAGlB,OAAO,CAACW,GAAG,CAACR,IAAI;MACrCO,aAAa,CAACP,IAAI,CAAC;MAEnB,MAAMgB,MAAM,GAAG,MAAMnB,OAAO,CAACoB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;QAC7D,OAAO7C,SAAS,CAAC;UACbwB,OAAO;UACPO,SAAS;UACTJ;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEFO,aAAa,CAACQ,YAAY,CAAC;MAE3B,OAAO,MAA2BI,KAAgD,IAAK;QACnF,OAAOxD,kBAAkB,CAAqBwD,KAAK,EAAEH,MAAM,EAAEnB,OAAO,CAAC;MACzE,CAAC;IACL;IAEAA,OAAO,CAACC,OAAO,CAACc,QAAQ,CACpB,IAAI3C,+BAA+B,CAACC,0CAA0C,CAAC2B,OAAO,CAAC,CAC3F,CAAC;IAED,MAAMuB,aAAa,GAAG,IAAIvD,aAAa,CAAC;MACpCwD,WAAW,EAAE,MAAAA,CAAA,KAAYxB,OAAO,CAACoB,QAAQ,CAACI,WAAW,CAAC,CAAC;MACvDC,oBAAoB,EAAEA,CAAA,KAAMzB,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,uBAAuB,CAAC;MACpFC,oBAAoB,EAAEA,CAAA,KAAM3B,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,kBAAkB,CAAC;MAC/EE,qBAAqB,EAAEA,CAAA,KAAM5B,OAAO,CAACoB,QAAQ,CAACM,cAAc,CAAC,kBAAkB,CAAC;MAChFG,aAAa,EAAEA,CAAA,KAAM;QACjB,OAAO7B,OAAO,CAACoB,QAAQ,CAACC,oBAAoB,CAAC,MAAM;UAC/C,OAAOrB,OAAO,CAACW,GAAG,CAACmB,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC;MACN;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG/B,OAAO,CAACgB,SAAS,CAACgB,OAAO,CAACjD,wBAAwB,CAAC;IAEpF,MAAMkD,iBAAiB,GAAG,MAAMF,wBAAwB,CAACG,MAAM,CAAClC,OAAO,CAAC;IACxE,MAAMiC,iBAAiB,CAACE,UAAU,CAACnC,OAAO,CAAC;IAE3CA,OAAO,CAACW,GAAG,GAAG;MACVR,IAAI;MACJS,IAAI,EAAET,IAAI,KAAK,MAAM;MACrBU,OAAO,EAAEV,IAAI,KAAK,SAAS;MAC3BW,MAAM,EAAEX,IAAI,KAAK,QAAQ;MACzB8B,iBAAiB;MACjBV,aAAa;MACbN,mBAAmB;MACnB,GAAGhD,qBAAqB,CAAC;QACrB+B;MACJ,CAAC,CAAC;MACF,GAAG9B,gBAAgB,CAAC;QAChB8B;MACJ,CAAC,CAAC;MACF,GAAG7B,sBAAsB,CAAC;QACtB6B;MACJ,CAAC,CAAC;MACFoC,MAAM,EAAE;QACJ,GAAG9D,gBAAgB,CAAC0B,OAAO;MAC/B,CAAC;MACDqC,SAAS,EAAE;QACP,GAAG9D,gBAAgB,CAACyB,OAAO;MAC/B;IACJ,CAAC;;IAED;IACAA,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACxD,iBAAiB,EAAEmD,iBAAiB,CAAC;IACxEjC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAAC3D,wBAAwB,EAAE4C,aAAa,CAAC;IAC3EvB,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACzD,qBAAqB,EAAEmB,OAAO,CAAC;IAClEA,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACpD,gBAAgB,EAAEc,OAAO,CAACC,OAAO,CAAC;IACrED,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACrD,uBAAuB,EAAE,CAACsD,KAAK,EAAEC,KAAK,KAAK;MAC1E,OAAOnD,uBAAuB,CAACW,OAAO,EAAEuC,KAAK,EAAEC,KAAK,CAAC;IACzD,CAAC,CAAC;IACFxC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACtD,yBAAyB,EAAE,CAACuD,KAAK,EAAEC,KAAK,KAAK;MAC5E,OAAOpD,yBAAyB,CAACY,OAAO,EAAEuC,KAAK,EAAEC,KAAK,CAAC;IAC3D,CAAC,CAAC;IACFxC,OAAO,CAACgB,SAAS,CAACsB,gBAAgB,CAACnD,wBAAwB,EAAEsD,MAAM,IAAI;MACnE,OAAOnD,mBAAmB,CAAC;QACvBU,OAAO;QACP0C,MAAM,EAAED,MAAM,CAACC,MAAM;QACrBpB,KAAK,EAAE;MACX,CAAC,CAAC;IACN,CAAC,CAAC;;IAEF;IACA7C,mBAAmB,CAACsC,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CtC,qBAAqB,CAACqC,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACjDxB,mBAAmB,CAACuB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CzB,wBAAwB,CAACwB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACpDvB,mBAAmB,CAACsB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAC/CtB,qBAAqB,CAACqB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IACjDrB,oBAAoB,CAACoB,QAAQ,CAACf,OAAO,CAACgB,SAAS,CAAC;IAEhD,IAAI,CAACiB,iBAAiB,CAACU,IAAI,EAAE;MACzB;IACJ;IACA,MAAMV,iBAAiB,CAACU,IAAI,CAAC3C,OAAO,CAAC;EACzC,CAAC,CAAC;EAEFI,MAAM,CAACwC,IAAI,GAAG,mBAAmB;EAEjC,OAAOxC,MAAM;AACjB,CAAC","ignoreList":[]}

package/crud/AccessControl/AccessControl.d.ts

@@ -27,22 +27,12 @@ export interface CanAccessEntryParams extends GetEntriesAccessControlListParams
     rwd?: string;
     pw?: string;
 }
-interface AccessControlEntry {
-    rwd: string;
-    canAccessNonOwned: boolean;
-    canAccessOnlyOwned: boolean;
-}
-type AccessControlList = AccessControlEntry[];
-interface EntriesAccessControlEntry extends AccessControlEntry {
-    pw?: string;
-}
-type EntriesAccessControlList = EntriesAccessControlEntry[];
 export declare class AccessControl {
-    getIdentity: AccessControlParams["getIdentity"];
-    getGroupsPermissions: AccessControlParams["getGroupsPermissions"];
-    getModelsPermissions: AccessControlParams["getModelsPermissions"];
-    getEntriesPermissions: AccessControlParams["getEntriesPermissions"];
-    listAllGroupsCallback: AccessControlParams["listAllGroups"];
+    private getIdentity;
+    private getGroupsPermissions;
+    private getModelsPermissions;
+    private getEntriesPermissions;
+    private listAllGroupsCallback;
     private fullAccessPermissions;
     private allGroups;
     constructor({ getIdentity, getGroupsPermissions, getModelsPermissions, getEntriesPermissions, listAllGroups }: AccessControlParams);
@@ -56,10 +46,10 @@ export declare class AccessControl {
      * - hasFullAccessToGroups
      */
     canAccessGroup(params?: CanAccessGroupParams): Promise<boolean>;
-    canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
-    canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams): Promise<boolean>;
-    getGroupsAccessControlList(params: GetGroupsAccessControlListParams): Promise<AccessControlList>;
-    hasFullAccessToGroups(): Promise<boolean>;
+    private canAccessNonOwnedGroups;
+    private canAccessOnlyOwnedGroups;
+    private getGroupsAccessControlList;
+    private hasFullAccessToGroups;
     /**
      * Models-related methods below. 👇
      * - canAccessModel
@@ -70,11 +60,11 @@ export declare class AccessControl {
      * - hasFullAccessToModels
      */
     canAccessModel(params: CanAccessModelParams): Promise<boolean>;
-    ensureCanAccessModel(params?: CanAccessModelParams): Promise<void>;
-    canAccessNonOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
-    canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams): Promise<boolean>;
-    getModelsAccessControlList(params: GetModelsAccessControlListParams): Promise<AccessControlList>;
-    hasFullAccessToModels(params: GetModelsAccessControlListParams): Promise<boolean>;
+    private ensureCanAccessModel;
+    private canAccessNonOwnedModels;
+    private canAccessOnlyOwnedModels;
+    private getModelsAccessControlList;
+    private hasFullAccessToModels;
     /**
      * Entries-related methods below. 👇
      * - canAccessEntry
@@ -85,11 +75,11 @@ export declare class AccessControl {
      * - hasFullAccessToEntries
      */
     canAccessEntry(params: CanAccessEntryParams): Promise<boolean>;
-    ensureCanAccessEntry(params: CanAccessEntryParams): Promise<void>;
-    canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    private ensureCanAccessEntry;
+    private canAccessNonOwnedEntries;
     canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
-    getEntriesAccessControlList(params: GetEntriesAccessControlListParams): Promise<EntriesAccessControlList>;
-    hasFullAccessToEntries(params: GetEntriesAccessControlListParams): Promise<boolean>;
+    private getEntriesAccessControlList;
+    private hasFullAccessToEntries;
     private modelAuthorizationDisabled;
     private listAllGroups;
     private getGroup;

package/crud/AccessControl/AccessControl.js.map

@@ -1 +1 @@
-{"version":3,"names":["NotAuthorizedError","AccessControl","constructor","getIdentity","getGroupsPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","fullAccessPermissions","listAllGroupsCallback","allGroups","canAccessGroup","params","acl","getGroupsAccessControlList","canRead","find","ace","rwd","includes","hasRwd","canAccessNonOwnedGroups","some","canAccessNonOwned","canAccessOnlyOwnedGroups","hasFullAccessToGroups","canAccessOnlyOwned","groupsPermissionsList","groupsPermissions","own","modelGroupCreatedBy","group","createdBy","identity","id","push","groups","Array","isArray","permissions","p","filter","Boolean","name","canAccessModel","getModelsAccessControlList","ensureCanAccessModel","canAccess","modelName","model","canAccessNonOwnedModels","canAccessOnlyOwnedModels","hasFullAccessToModels","i","length","modelsPermissionsList","relatedModelPermissions","_src","getGroup","fullAccess","models","modelCreatedBy","modelId","modelAuthorizationDisabled","canAccessEntry","getEntriesAccessControlList","pw","hasPw","ensureCanAccessEntry","entry","entryId","canAccessNonOwnedEntries","canAccessOnlyOwnedEntries","hasFullAccessToEntries","groupPermissions","relatedModelsPermissions","entriesPermissionsList","relatedEntriesPermissions","groupCreatedBy","entryCreatedBy","authorization","slug"],"sources":["AccessControl.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryPermission,\n    CmsGroup,\n    CmsGroupPermission,\n    CmsModel,\n    CmsModelPermission\n} from \"~/types/index.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\n\nexport interface AccessControlParams {\n    getIdentity: () => Promise<SecurityIdentity>;\n    getGroupsPermissions: () => Promise<CmsGroupPermission[]>;\n    getModelsPermissions: () => Promise<CmsModelPermission[]>;\n    getEntriesPermissions: () => Promise<CmsEntryPermission[]>;\n    listAllGroups: () => Promise<CmsGroup[]>;\n}\n\ninterface GetGroupsAccessControlListParams {\n    group?: CmsGroup;\n}\n\ninterface CanAccessGroupParams extends GetGroupsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetModelsAccessControlListParams {\n    model?: CmsModel;\n}\n\ninterface CanAccessModelParams extends GetModelsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetEntriesAccessControlListParams {\n    model: Pick<CmsModel, \"modelId\" | \"createdBy\" | \"group\" | \"authorization\">;\n    entry?: Pick<CmsEntry, \"entryId\" | \"createdBy\">;\n}\n\nexport interface CanAccessEntryParams extends GetEntriesAccessControlListParams {\n    rwd?: string;\n    pw?: string;\n}\n\ninterface AccessControlEntry {\n    rwd: string;\n    canAccessNonOwned: boolean;\n    canAccessOnlyOwned: boolean;\n}\n\ntype AccessControlList = AccessControlEntry[];\n\ninterface EntriesAccessControlEntry extends AccessControlEntry {\n    pw?: string;\n}\n\ntype EntriesAccessControlList = EntriesAccessControlEntry[];\n\ninterface IModelAuthorizationDisabledParams {\n    model: Pick<CmsModel, \"authorization\">;\n}\n\nexport class AccessControl {\n    getIdentity: AccessControlParams[\"getIdentity\"];\n    getGroupsPermissions: AccessControlParams[\"getGroupsPermissions\"];\n    getModelsPermissions: AccessControlParams[\"getModelsPermissions\"];\n    getEntriesPermissions: AccessControlParams[\"getEntriesPermissions\"];\n    listAllGroupsCallback: AccessControlParams[\"listAllGroups\"];\n\n    private fullAccessPermissions: string[];\n    private allGroups: null | Promise<CmsGroup[]>;\n\n    constructor({\n        getIdentity,\n        getGroupsPermissions,\n        getModelsPermissions,\n        getEntriesPermissions,\n        listAllGroups\n    }: AccessControlParams) {\n        this.getIdentity = getIdentity;\n        this.getGroupsPermissions = getGroupsPermissions;\n        this.getModelsPermissions = getModelsPermissions;\n        this.getEntriesPermissions = getEntriesPermissions;\n        this.fullAccessPermissions = [\"*\", \"cms.*\"];\n        this.listAllGroupsCallback = listAllGroups;\n        this.allGroups = null;\n    }\n\n    /**\n     * Groups-related methods below. 👇\n     * - canAccessGroup\n     * - ensureCanAccessGroup\n     * - canAccessNonOwnedGroups\n     * - canAccessOnlyOwnedGroups\n     * - getGroupsAccessControlList\n     * - hasFullAccessToGroups\n     */\n\n    async canAccessGroup(params: CanAccessGroupParams = {}) {\n        const acl = await this.getGroupsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd?.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const acl = await this.getGroupsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedGroups(params);\n        return !canAccessNonOwned;\n    }\n\n    async getGroupsAccessControlList(\n        params: GetGroupsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToGroups()) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (const groupsPermissions of groupsPermissionsList) {\n            if (groupsPermissions.own) {\n                if (\"group\" in params) {\n                    const modelGroupCreatedBy = params.group?.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"group\" in params) {\n                    const { group } = params;\n                    if (!group) {\n                        continue;\n                    }\n\n                    const { groups } = groupsPermissions;\n                    if (!Array.isArray(groups)) {\n                        continue;\n                    }\n\n                    if (!groups.includes(group.id)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: groupsPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToGroups() {\n        const permissions = await this.getGroupsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Models-related methods below. 👇\n     * - canAccessModel\n     * - ensureCanAccessModel\n     * - canAccessNonOwnedModels\n     * - canAccessOnlyOwnedModels\n     * - getModelsAccessControlList\n     * - hasFullAccessToModels\n     */\n\n    async canAccessModel(params: CanAccessModelParams) {\n        const acl = await this.getModelsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessModel(params: CanAccessModelParams = {}) {\n        const canAccess = await this.canAccessModel(params);\n        if (canAccess) {\n            return;\n        }\n\n        if (\"model\" in params) {\n            let modelName = \"(could not determine name)\";\n            if (params.model?.name) {\n                modelName = `\"${params.model.name}\"`;\n            }\n\n            throw new NotAuthorizedError(`Not allowed to access content model ${modelName}.`);\n        }\n\n        throw new NotAuthorizedError(`Not allowed to access content models.`);\n    }\n\n    async canAccessNonOwnedModels(params: GetModelsAccessControlListParams) {\n        const acl = await this.getModelsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedModels(params);\n        return !canAccessNonOwned;\n    }\n\n    async getModelsAccessControlList(\n        params: GetModelsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToModels(params)) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupsPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupsPermissions._src\n            );\n\n            if (!relatedModelPermissions) {\n                continue;\n            }\n\n            if (groupsPermissions.own) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    const group = await this.getGroup(model.group);\n                    if (!group) {\n                        continue;\n                    }\n\n                    const modelGroupCreatedBy = group.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(groupsPermissions.groups)) {\n                        continue;\n                    }\n\n                    if (!groupsPermissions.groups.includes(model.group)) {\n                        continue;\n                    }\n                }\n            }\n\n            const fullAccess =\n                !relatedModelPermissions.rwd &&\n                !relatedModelPermissions.own &&\n                !relatedModelPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: true,\n                    canAccessOnlyOwned: false\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.own) {\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    const modelCreatedBy = params.model.createdBy;\n                    if (!modelCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.models) {\n                const { models } = relatedModelPermissions;\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(models)) {\n                        continue;\n                    }\n\n                    if (!models.includes(params.model.modelId)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: relatedModelPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToModels(params: GetModelsAccessControlListParams) {\n        const { model } = params;\n        if (model) {\n            if (this.modelAuthorizationDisabled({ model })) {\n                return true;\n            }\n        }\n\n        const permissions = await this.getModelsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Entries-related methods below. 👇\n     * - canAccessEntry\n     * - ensureCanAccessEntry\n     * - canAccessNonOwnedEntries\n     * - canAccessOnlyOwnedEntries\n     * - getEntriesAccessControlList\n     * - hasFullAccessToEntries\n     */\n\n    async canAccessEntry(params: CanAccessEntryParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        const { pw } = params;\n        if (pw) {\n            const hasPw = acl.find(ace => ace.pw?.includes(pw));\n            if (!hasPw) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    async ensureCanAccessEntry(params: CanAccessEntryParams) {\n        const canAccess = await this.canAccessEntry(params);\n        if (!canAccess) {\n            if (params.entry) {\n                throw new NotAuthorizedError(\n                    `Not allowed to access entry \"${params.entry.entryId}\".`\n                );\n            }\n\n            throw new NotAuthorizedError(\n                `Not allowed to access \"${params.model.modelId}\" entries.`\n            );\n        }\n    }\n\n    async canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedEntries(params);\n        return !canAccessNonOwned;\n    }\n\n    async getEntriesAccessControlList(\n        params: GetEntriesAccessControlListParams\n    ): Promise<EntriesAccessControlList> {\n        if (await this.hasFullAccessToEntries(params)) {\n            return [{ rwd: \"rwd\", pw: \"pu\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        // We need a map of groups slugs to ids, to perform checks on models\n        const { model } = params;\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: EntriesAccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelsPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedModelsPermissions) {\n                continue;\n            }\n\n            const entriesPermissionsList = await this.getEntriesPermissions();\n            const relatedEntriesPermissions = entriesPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedEntriesPermissions) {\n                continue;\n            }\n\n            if (groupPermissions.own) {\n                const group = await this.getGroup(model.group);\n                if (!group) {\n                    continue;\n                }\n\n                const groupCreatedBy = group.createdBy;\n                if (!groupCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (groupCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            if (groupPermissions.groups) {\n                const { groups } = groupPermissions;\n\n                if (!Array.isArray(groups)) {\n                    continue;\n                }\n\n                if (!groups.includes(model.group)) {\n                    continue;\n                }\n            }\n\n            if (relatedModelsPermissions.own) {\n                const modelCreatedBy = model.createdBy;\n                if (!modelCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (modelCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n            }\n\n            if (relatedModelsPermissions.models) {\n                if (!Array.isArray(relatedModelsPermissions.models)) {\n                    continue;\n                }\n\n                if (!relatedModelsPermissions.models.includes(model.modelId)) {\n                    continue;\n                }\n            }\n\n            const fullAccess =\n                !relatedEntriesPermissions.rwd &&\n                !relatedEntriesPermissions.own &&\n                !relatedEntriesPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: \"pu\"\n                });\n\n                continue;\n            }\n\n            if (relatedEntriesPermissions.own) {\n                if (\"entry\" in params) {\n                    const entryCreatedBy = params.entry?.createdBy;\n                    if (!entryCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (entryCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: relatedEntriesPermissions.rwd,\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            acl.push({\n                rwd: relatedEntriesPermissions.rwd,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false,\n                pw: relatedEntriesPermissions.pw\n            });\n        }\n\n        return acl;\n    }\n\n    async hasFullAccessToEntries(params: GetEntriesAccessControlListParams) {\n        if (this.modelAuthorizationDisabled(params)) {\n            return true;\n        }\n\n        const permissions = await this.getEntriesPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    private modelAuthorizationDisabled(params: IModelAuthorizationDisabledParams) {\n        if (\"authorization\" in params.model) {\n            const { authorization } = params.model;\n            if (typeof authorization === \"boolean\") {\n                return authorization === false;\n            }\n\n            return authorization?.permissions === false;\n        }\n\n        return false;\n    }\n\n    private async listAllGroups(): Promise<CmsGroup[]> {\n        if (this.allGroups === null) {\n            this.allGroups = this.listAllGroupsCallback();\n        }\n\n        return this.allGroups;\n    }\n\n    private async getGroup(slug: string): Promise<CmsGroup | undefined> {\n        const groups = await this.listAllGroups();\n        return groups.find(group => group.slug === slug);\n    }\n}\n"],"mappings":"AASA,SAASA,kBAAkB;AAsD3B,OAAO,MAAMC,aAAa,CAAC;EAUvBC,WAAWA,CAAC;IACRC,WAAW;IACXC,oBAAoB;IACpBC,oBAAoB;IACpBC,qBAAqB;IACrBC;EACiB,CAAC,EAAE;IACpB,IAAI,CAACJ,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,qBAAqB,GAAGA,qBAAqB;IAClD,IAAI,CAACE,qBAAqB,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,IAAI,CAACC,qBAAqB,GAAGF,aAAa;IAC1C,IAAI,CAACG,SAAS,GAAG,IAAI;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAACC,MAA4B,GAAG,CAAC,CAAC,EAAE;IACpD,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,EAAEC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,uBAAuBA,CAACT,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMC,wBAAwBA,CAACZ,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACF,uBAAuB,CAACT,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMT,0BAA0BA,CAC5BF,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACa,qBAAqB,CAAC,CAAC,EAAE;MACpC,OAAO,CAAC;QAAEP,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,MAAMe,iBAAiB,IAAID,qBAAqB,EAAE;MACnD,IAAIC,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMkB,mBAAmB,GAAGlB,MAAM,CAACmB,KAAK,EAAEC,SAAS;UACnD,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UAEzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;MACN;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEmB;UAAM,CAAC,GAAGnB,MAAM;UACxB,IAAI,CAACmB,KAAK,EAAE;YACR;UACJ;UAEA,MAAM;YAAEK;UAAO,CAAC,GAAGR,iBAAiB;UACpC,IAAI,CAACS,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAACY,KAAK,CAACG,EAAE,CAAC,EAAE;YAC5B;UACJ;QACJ;MACJ;MAEArB,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEU,iBAAiB,CAACV,GAAa;QACpCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMY,qBAAqBA,CAAA,EAAG;IAC1B,MAAMc,WAAW,GAAG,MAAM,IAAI,CAACnC,oBAAoB,CAAC,CAAC;IACrD,OAAOmC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAAChC,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAM0B,oBAAoBA,CAAClC,MAA4B,GAAG,CAAC,CAAC,EAAE;IAC1D,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACH,cAAc,CAAChC,MAAM,CAAC;IACnD,IAAImC,SAAS,EAAE;MACX;IACJ;IAEA,IAAI,OAAO,IAAInC,MAAM,EAAE;MACnB,IAAIoC,SAAS,GAAG,4BAA4B;MAC5C,IAAIpC,MAAM,CAACqC,KAAK,EAAEN,IAAI,EAAE;QACpBK,SAAS,GAAG,IAAIpC,MAAM,CAACqC,KAAK,CAACN,IAAI,GAAG;MACxC;MAEA,MAAM,IAAI3C,kBAAkB,CAAC,uCAAuCgD,SAAS,GAAG,CAAC;IACrF;IAEA,MAAM,IAAIhD,kBAAkB,CAAC,uCAAuC,CAAC;EACzE;EAEA,MAAMkD,uBAAuBA,CAACtC,MAAwC,EAAE;IACpE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAM4B,wBAAwBA,CAACvC,MAAwC,EAAE;IACrE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAAC2B,uBAAuB,CAACtC,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAMsB,0BAA0BA,CAC5BjC,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACwC,qBAAqB,CAACxC,MAAM,CAAC,EAAE;MAC1C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMzB,iBAAiB,GAAGD,qBAAqB,CAAC0B,CAAC,CAAC;MAElD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMmD,uBAAuB,GAAGD,qBAAqB,CAACvC,IAAI,CACtDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAK7B,iBAAiB,CAAC6B,IAC1D,CAAC;MAED,IAAI,CAACD,uBAAuB,EAAE;QAC1B;MACJ;MAEA,IAAI5B,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,MAAMlB,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;UAC9C,IAAI,CAACA,KAAK,EAAE;YACR;UACJ;UAEA,MAAMD,mBAAmB,GAAGC,KAAK,CAACC,SAAS;UAC3C,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACV,iBAAiB,CAACQ,MAAM,CAAC,EAAE;YAC1C;UACJ;UAEA,IAAI,CAACR,iBAAiB,CAACQ,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;YACjD;UACJ;QACJ;MACJ;MAEA,MAAM4B,UAAU,GACZ,CAACH,uBAAuB,CAACtC,GAAG,IAC5B,CAACsC,uBAAuB,CAAC3B,GAAG,IAC5B,CAAC2B,uBAAuB,CAACI,MAAM;MAEnC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,IAAI;UACvBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAAC3B,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,MAAMY,cAAc,GAAGjD,MAAM,CAACqC,KAAK,CAACjB,SAAS;UAC7C,IAAI,CAAC6B,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAACI,MAAM,EAAE;QAChC,MAAM;UAAEA;QAAO,CAAC,GAAGJ,uBAAuB;QAC1C,IAAI,OAAO,IAAI5C,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACsB,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACzC,QAAQ,CAACP,MAAM,CAACqC,KAAK,CAACa,OAAO,CAAC,EAAE;YACxC;UACJ;QACJ;MACJ;MAEAjD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEsC,uBAAuB,CAACtC,GAAa;QAC1CK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAMuC,qBAAqBA,CAACxC,MAAwC,EAAE;IAClE,MAAM;MAAEqC;IAAM,CAAC,GAAGrC,MAAM;IACxB,IAAIqC,KAAK,EAAE;MACP,IAAI,IAAI,CAACc,0BAA0B,CAAC;QAAEd;MAAM,CAAC,CAAC,EAAE;QAC5C,OAAO,IAAI;MACf;IACJ;IAEA,MAAMV,WAAW,GAAG,MAAM,IAAI,CAAClC,oBAAoB,CAAC,CAAC;IACrD,OAAOkC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMqB,cAAcA,CAACpD,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAE1D,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,MAAM;MAAE8C;IAAG,CAAC,GAAGtD,MAAM;IACrB,IAAIsD,EAAE,EAAE;MACJ,MAAMC,KAAK,GAAGtD,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACiD,EAAE,EAAE/C,QAAQ,CAAC+C,EAAE,CAAC,CAAC;MACnD,IAAI,CAACC,KAAK,EAAE;QACR,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,oBAAoBA,CAACxD,MAA4B,EAAE;IACrD,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACiB,cAAc,CAACpD,MAAM,CAAC;IACnD,IAAI,CAACmC,SAAS,EAAE;MACZ,IAAInC,MAAM,CAACyD,KAAK,EAAE;QACd,MAAM,IAAIrE,kBAAkB,CACxB,gCAAgCY,MAAM,CAACyD,KAAK,CAACC,OAAO,IACxD,CAAC;MACL;MAEA,MAAM,IAAItE,kBAAkB,CACxB,0BAA0BY,MAAM,CAACqC,KAAK,CAACa,OAAO,YAClD,CAAC;IACL;EACJ;EAEA,MAAMS,wBAAwBA,CAAC3D,MAAyC,EAAE;IACtE,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAC1D,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMiD,yBAAyBA,CAAC5D,MAAyC,EAAE;IACvE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACgD,wBAAwB,CAAC3D,MAAM,CAAC;IACrE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAM0C,2BAA2BA,CAC7BrD,MAAyC,EACR;IACjC,IAAI,MAAM,IAAI,CAAC6D,sBAAsB,CAAC7D,MAAM,CAAC,EAAE;MAC3C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEgD,EAAE,EAAE,IAAI;QAAE3C,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IACzF;;IAEA;IACA,MAAM;MAAEuB;IAAM,CAAC,GAAGrC,MAAM;IACxB,MAAMe,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAA6B,GAAG,EAAE;IAExC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMqB,gBAAgB,GAAG/C,qBAAqB,CAAC0B,CAAC,CAAC;MAEjD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMsE,wBAAwB,GAAGpB,qBAAqB,CAACvC,IAAI,CACvDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACkB,wBAAwB,EAAE;QAC3B;MACJ;MAEA,MAAMC,sBAAsB,GAAG,MAAM,IAAI,CAACtE,qBAAqB,CAAC,CAAC;MACjE,MAAMuE,yBAAyB,GAAGD,sBAAsB,CAAC5D,IAAI,CACzDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACoB,yBAAyB,EAAE;QAC5B;MACJ;MAEA,IAAIH,gBAAgB,CAAC7C,GAAG,EAAE;QACtB,MAAME,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;QAC9C,IAAI,CAACA,KAAK,EAAE;UACR;QACJ;QAEA,MAAM+C,cAAc,GAAG/C,KAAK,CAACC,SAAS;QACtC,IAAI,CAAC8C,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM7C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI2E,cAAc,CAAC5C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIQ,gBAAgB,CAACtC,MAAM,EAAE;QACzB,MAAM;UAAEA;QAAO,CAAC,GAAGsC,gBAAgB;QAEnC,IAAI,CAACrC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;UACxB;QACJ;QAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;UAC/B;QACJ;MACJ;MAEA,IAAI4C,wBAAwB,CAAC9C,GAAG,EAAE;QAC9B,MAAMgC,cAAc,GAAGZ,KAAK,CAACjB,SAAS;QACtC,IAAI,CAAC6B,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;MACN;MAEA,IAAIS,wBAAwB,CAACf,MAAM,EAAE;QACjC,IAAI,CAACvB,KAAK,CAACC,OAAO,CAACqC,wBAAwB,CAACf,MAAM,CAAC,EAAE;UACjD;QACJ;QAEA,IAAI,CAACe,wBAAwB,CAACf,MAAM,CAACzC,QAAQ,CAAC8B,KAAK,CAACa,OAAO,CAAC,EAAE;UAC1D;QACJ;MACJ;MAEA,MAAMH,UAAU,GACZ,CAACkB,yBAAyB,CAAC3D,GAAG,IAC9B,CAAC2D,yBAAyB,CAAChD,GAAG,IAC9B,CAACgD,yBAAyB,CAACjB,MAAM;MAErC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAE;QACR,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIW,yBAAyB,CAAChD,GAAG,EAAE;QAC/B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMmE,cAAc,GAAGnE,MAAM,CAACyD,KAAK,EAAErC,SAAS;UAC9C,IAAI,CAAC+C,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM9C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI4E,cAAc,CAAC7C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;UAClCK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEArD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;QAClCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE,KAAK;QACzBwC,EAAE,EAAEW,yBAAyB,CAACX;MAClC,CAAC,CAAC;IACN;IAEA,OAAOrD,GAAG;EACd;EAEA,MAAM4D,sBAAsBA,CAAC7D,MAAyC,EAAE;IACpE,IAAI,IAAI,CAACmD,0BAA0B,CAACnD,MAAM,CAAC,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,MAAM2B,WAAW,GAAG,MAAM,IAAI,CAACjC,qBAAqB,CAAC,CAAC;IACtD,OAAOiC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;EAEQoB,0BAA0BA,CAACnD,MAAyC,EAAE;IAC1E,IAAI,eAAe,IAAIA,MAAM,CAACqC,KAAK,EAAE;MACjC,MAAM;QAAE+B;MAAc,CAAC,GAAGpE,MAAM,CAACqC,KAAK;MACtC,IAAI,OAAO+B,aAAa,KAAK,SAAS,EAAE;QACpC,OAAOA,aAAa,KAAK,KAAK;MAClC;MAEA,OAAOA,aAAa,EAAEzC,WAAW,KAAK,KAAK;IAC/C;IAEA,OAAO,KAAK;EAChB;EAEA,MAAchC,aAAaA,CAAA,EAAwB;IAC/C,IAAI,IAAI,CAACG,SAAS,KAAK,IAAI,EAAE;MACzB,IAAI,CAACA,SAAS,GAAG,IAAI,CAACD,qBAAqB,CAAC,CAAC;IACjD;IAEA,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcgD,QAAQA,CAACuB,IAAY,EAAiC;IAChE,MAAM7C,MAAM,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC,CAAC;IACzC,OAAO6B,MAAM,CAACpB,IAAI,CAACe,KAAK,IAAIA,KAAK,CAACkD,IAAI,KAAKA,IAAI,CAAC;EACpD;AACJ","ignoreList":[]}
+{"version":3,"names":["NotAuthorizedError","AccessControl","constructor","getIdentity","getGroupsPermissions","getModelsPermissions","getEntriesPermissions","listAllGroups","fullAccessPermissions","listAllGroupsCallback","allGroups","canAccessGroup","params","acl","getGroupsAccessControlList","canRead","find","ace","rwd","includes","hasRwd","canAccessNonOwnedGroups","some","canAccessNonOwned","canAccessOnlyOwnedGroups","hasFullAccessToGroups","canAccessOnlyOwned","groupsPermissionsList","groupsPermissions","own","modelGroupCreatedBy","group","createdBy","identity","id","push","groups","Array","isArray","permissions","p","filter","Boolean","name","canAccessModel","getModelsAccessControlList","ensureCanAccessModel","canAccess","modelName","model","canAccessNonOwnedModels","canAccessOnlyOwnedModels","hasFullAccessToModels","i","length","modelsPermissionsList","relatedModelPermissions","_src","getGroup","fullAccess","models","modelCreatedBy","modelId","modelAuthorizationDisabled","canAccessEntry","getEntriesAccessControlList","pw","hasPw","ensureCanAccessEntry","entry","entryId","canAccessNonOwnedEntries","canAccessOnlyOwnedEntries","hasFullAccessToEntries","groupPermissions","relatedModelsPermissions","entriesPermissionsList","relatedEntriesPermissions","groupCreatedBy","entryCreatedBy","authorization","slug"],"sources":["AccessControl.ts"],"sourcesContent":["import type {\n    CmsEntry,\n    CmsEntryPermission,\n    CmsGroup,\n    CmsGroupPermission,\n    CmsModel,\n    CmsModelPermission\n} from \"~/types/index.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\n\nexport interface AccessControlParams {\n    getIdentity: () => Promise<SecurityIdentity>;\n    getGroupsPermissions: () => Promise<CmsGroupPermission[]>;\n    getModelsPermissions: () => Promise<CmsModelPermission[]>;\n    getEntriesPermissions: () => Promise<CmsEntryPermission[]>;\n    listAllGroups: () => Promise<CmsGroup[]>;\n}\n\ninterface GetGroupsAccessControlListParams {\n    group?: CmsGroup;\n}\n\ninterface CanAccessGroupParams extends GetGroupsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetModelsAccessControlListParams {\n    model?: CmsModel;\n}\n\ninterface CanAccessModelParams extends GetModelsAccessControlListParams {\n    rwd?: string;\n}\n\ninterface GetEntriesAccessControlListParams {\n    model: Pick<CmsModel, \"modelId\" | \"createdBy\" | \"group\" | \"authorization\">;\n    entry?: Pick<CmsEntry, \"entryId\" | \"createdBy\">;\n}\n\nexport interface CanAccessEntryParams extends GetEntriesAccessControlListParams {\n    rwd?: string;\n    pw?: string;\n}\n\ninterface AccessControlEntry {\n    rwd: string;\n    canAccessNonOwned: boolean;\n    canAccessOnlyOwned: boolean;\n}\n\ntype AccessControlList = AccessControlEntry[];\n\ninterface EntriesAccessControlEntry extends AccessControlEntry {\n    pw?: string;\n}\n\ntype EntriesAccessControlList = EntriesAccessControlEntry[];\n\ninterface IModelAuthorizationDisabledParams {\n    model: Pick<CmsModel, \"authorization\">;\n}\n\nexport class AccessControl {\n    private getIdentity: AccessControlParams[\"getIdentity\"];\n    private getGroupsPermissions: AccessControlParams[\"getGroupsPermissions\"];\n    private getModelsPermissions: AccessControlParams[\"getModelsPermissions\"];\n    private getEntriesPermissions: AccessControlParams[\"getEntriesPermissions\"];\n    private listAllGroupsCallback: AccessControlParams[\"listAllGroups\"];\n\n    private fullAccessPermissions: string[];\n    private allGroups: null | Promise<CmsGroup[]>;\n\n    constructor({\n        getIdentity,\n        getGroupsPermissions,\n        getModelsPermissions,\n        getEntriesPermissions,\n        listAllGroups\n    }: AccessControlParams) {\n        this.getIdentity = getIdentity;\n        this.getGroupsPermissions = getGroupsPermissions;\n        this.getModelsPermissions = getModelsPermissions;\n        this.getEntriesPermissions = getEntriesPermissions;\n        this.fullAccessPermissions = [\"*\", \"cms.*\"];\n        this.listAllGroupsCallback = listAllGroups;\n        this.allGroups = null;\n    }\n\n    /**\n     * Groups-related methods below. 👇\n     * - canAccessGroup\n     * - ensureCanAccessGroup\n     * - canAccessNonOwnedGroups\n     * - canAccessOnlyOwnedGroups\n     * - getGroupsAccessControlList\n     * - hasFullAccessToGroups\n     */\n\n    async canAccessGroup(params: CanAccessGroupParams = {}) {\n        const acl = await this.getGroupsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd?.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async canAccessNonOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const acl = await this.getGroupsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    private async canAccessOnlyOwnedGroups(params: GetGroupsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedGroups(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getGroupsAccessControlList(\n        params: GetGroupsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToGroups()) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (const groupsPermissions of groupsPermissionsList) {\n            if (groupsPermissions.own) {\n                if (\"group\" in params) {\n                    const modelGroupCreatedBy = params.group?.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"group\" in params) {\n                    const { group } = params;\n                    if (!group) {\n                        continue;\n                    }\n\n                    const { groups } = groupsPermissions;\n                    if (!Array.isArray(groups)) {\n                        continue;\n                    }\n\n                    if (!groups.includes(group.id)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: groupsPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToGroups() {\n        const permissions = await this.getGroupsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Models-related methods below. 👇\n     * - canAccessModel\n     * - ensureCanAccessModel\n     * - canAccessNonOwnedModels\n     * - canAccessOnlyOwnedModels\n     * - getModelsAccessControlList\n     * - hasFullAccessToModels\n     */\n\n    async canAccessModel(params: CanAccessModelParams) {\n        const acl = await this.getModelsAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async ensureCanAccessModel(params: CanAccessModelParams = {}) {\n        const canAccess = await this.canAccessModel(params);\n        if (canAccess) {\n            return;\n        }\n\n        if (\"model\" in params) {\n            let modelName = \"(could not determine name)\";\n            if (params.model?.name) {\n                modelName = `\"${params.model.name}\"`;\n            }\n\n            throw new NotAuthorizedError(`Not allowed to access content model ${modelName}.`);\n        }\n\n        throw new NotAuthorizedError(`Not allowed to access content models.`);\n    }\n\n    private async canAccessNonOwnedModels(params: GetModelsAccessControlListParams) {\n        const acl = await this.getModelsAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    private async canAccessOnlyOwnedModels(params: GetModelsAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedModels(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getModelsAccessControlList(\n        params: GetModelsAccessControlListParams\n    ): Promise<AccessControlList> {\n        if (await this.hasFullAccessToModels(params)) {\n            return [{ rwd: \"rwd\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: AccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupsPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupsPermissions._src\n            );\n\n            if (!relatedModelPermissions) {\n                continue;\n            }\n\n            if (groupsPermissions.own) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    const group = await this.getGroup(model.group);\n                    if (!group) {\n                        continue;\n                    }\n\n                    const modelGroupCreatedBy = group.createdBy;\n                    if (!modelGroupCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelGroupCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (groupsPermissions.groups) {\n                if (\"model\" in params) {\n                    const { model } = params;\n                    if (!model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(groupsPermissions.groups)) {\n                        continue;\n                    }\n\n                    if (!groupsPermissions.groups.includes(model.group)) {\n                        continue;\n                    }\n                }\n            }\n\n            const fullAccess =\n                !relatedModelPermissions.rwd &&\n                !relatedModelPermissions.own &&\n                !relatedModelPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: true,\n                    canAccessOnlyOwned: false\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.own) {\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    const modelCreatedBy = params.model.createdBy;\n                    if (!modelCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (modelCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true\n                });\n\n                continue;\n            }\n\n            if (relatedModelPermissions.models) {\n                const { models } = relatedModelPermissions;\n                if (\"model\" in params) {\n                    if (!params.model) {\n                        continue;\n                    }\n\n                    if (!Array.isArray(models)) {\n                        continue;\n                    }\n\n                    if (!models.includes(params.model.modelId)) {\n                        continue;\n                    }\n                }\n            }\n\n            acl.push({\n                rwd: relatedModelPermissions.rwd as string,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToModels(params: GetModelsAccessControlListParams) {\n        const { model } = params;\n        if (model) {\n            if (this.modelAuthorizationDisabled({ model })) {\n                return true;\n            }\n        }\n\n        const permissions = await this.getModelsPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    /**\n     * Entries-related methods below. 👇\n     * - canAccessEntry\n     * - ensureCanAccessEntry\n     * - canAccessNonOwnedEntries\n     * - canAccessOnlyOwnedEntries\n     * - getEntriesAccessControlList\n     * - hasFullAccessToEntries\n     */\n\n    async canAccessEntry(params: CanAccessEntryParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n\n        const canRead = acl.find(ace => ace.rwd.includes(\"r\"));\n        if (!canRead) {\n            return false;\n        }\n\n        const { rwd } = params;\n        if (rwd) {\n            const hasRwd = acl.find(ace => ace.rwd.includes(rwd));\n            if (!hasRwd) {\n                return false;\n            }\n        }\n\n        const { pw } = params;\n        if (pw) {\n            const hasPw = acl.find(ace => ace.pw?.includes(pw));\n            if (!hasPw) {\n                return false;\n            }\n        }\n\n        return true;\n    }\n\n    private async ensureCanAccessEntry(params: CanAccessEntryParams) {\n        const canAccess = await this.canAccessEntry(params);\n        if (!canAccess) {\n            if (params.entry) {\n                throw new NotAuthorizedError(\n                    `Not allowed to access entry \"${params.entry.entryId}\".`\n                );\n            }\n\n            throw new NotAuthorizedError(\n                `Not allowed to access \"${params.model.modelId}\" entries.`\n            );\n        }\n    }\n\n    private async canAccessNonOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const acl = await this.getEntriesAccessControlList(params);\n        return acl.some(ace => ace.canAccessNonOwned);\n    }\n\n    async canAccessOnlyOwnedEntries(params: GetEntriesAccessControlListParams) {\n        const canAccessNonOwned = await this.canAccessNonOwnedEntries(params);\n        return !canAccessNonOwned;\n    }\n\n    private async getEntriesAccessControlList(\n        params: GetEntriesAccessControlListParams\n    ): Promise<EntriesAccessControlList> {\n        if (await this.hasFullAccessToEntries(params)) {\n            return [{ rwd: \"rwd\", pw: \"pu\", canAccessNonOwned: true, canAccessOnlyOwned: false }];\n        }\n\n        // We need a map of groups slugs to ids, to perform checks on models\n        const { model } = params;\n        const groupsPermissionsList = await this.getGroupsPermissions();\n        const acl: EntriesAccessControlList = [];\n\n        for (let i = 0; i < groupsPermissionsList.length; i++) {\n            const groupPermissions = groupsPermissionsList[i];\n\n            const modelsPermissionsList = await this.getModelsPermissions();\n            const relatedModelsPermissions = modelsPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedModelsPermissions) {\n                continue;\n            }\n\n            const entriesPermissionsList = await this.getEntriesPermissions();\n            const relatedEntriesPermissions = entriesPermissionsList.find(\n                permissions => permissions._src === groupPermissions._src\n            );\n\n            if (!relatedEntriesPermissions) {\n                continue;\n            }\n\n            if (groupPermissions.own) {\n                const group = await this.getGroup(model.group);\n                if (!group) {\n                    continue;\n                }\n\n                const groupCreatedBy = group.createdBy;\n                if (!groupCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (groupCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            if (groupPermissions.groups) {\n                const { groups } = groupPermissions;\n\n                if (!Array.isArray(groups)) {\n                    continue;\n                }\n\n                if (!groups.includes(model.group)) {\n                    continue;\n                }\n            }\n\n            if (relatedModelsPermissions.own) {\n                const modelCreatedBy = model.createdBy;\n                if (!modelCreatedBy) {\n                    continue;\n                }\n\n                const identity = await this.getIdentity();\n                if (modelCreatedBy.id !== identity.id) {\n                    continue;\n                }\n\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n            }\n\n            if (relatedModelsPermissions.models) {\n                if (!Array.isArray(relatedModelsPermissions.models)) {\n                    continue;\n                }\n\n                if (!relatedModelsPermissions.models.includes(model.modelId)) {\n                    continue;\n                }\n            }\n\n            const fullAccess =\n                !relatedEntriesPermissions.rwd &&\n                !relatedEntriesPermissions.own &&\n                !relatedEntriesPermissions.models;\n\n            if (fullAccess) {\n                acl.push({\n                    rwd: \"rwd\",\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: \"pu\"\n                });\n\n                continue;\n            }\n\n            if (relatedEntriesPermissions.own) {\n                if (\"entry\" in params) {\n                    const entryCreatedBy = params.entry?.createdBy;\n                    if (!entryCreatedBy) {\n                        continue;\n                    }\n\n                    const identity = await this.getIdentity();\n                    if (entryCreatedBy.id !== identity.id) {\n                        continue;\n                    }\n                }\n\n                acl.push({\n                    rwd: relatedEntriesPermissions.rwd,\n                    canAccessNonOwned: false,\n                    canAccessOnlyOwned: true,\n                    pw: relatedEntriesPermissions.pw\n                });\n\n                continue;\n            }\n\n            acl.push({\n                rwd: relatedEntriesPermissions.rwd,\n                canAccessNonOwned: true,\n                canAccessOnlyOwned: false,\n                pw: relatedEntriesPermissions.pw\n            });\n        }\n\n        return acl;\n    }\n\n    private async hasFullAccessToEntries(params: GetEntriesAccessControlListParams) {\n        if (this.modelAuthorizationDisabled(params)) {\n            return true;\n        }\n\n        const permissions = await this.getEntriesPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    private modelAuthorizationDisabled(params: IModelAuthorizationDisabledParams) {\n        if (\"authorization\" in params.model) {\n            const { authorization } = params.model;\n            if (typeof authorization === \"boolean\") {\n                return authorization === false;\n            }\n\n            return authorization?.permissions === false;\n        }\n\n        return false;\n    }\n\n    private async listAllGroups(): Promise<CmsGroup[]> {\n        if (this.allGroups === null) {\n            this.allGroups = this.listAllGroupsCallback();\n        }\n\n        return this.allGroups;\n    }\n\n    private async getGroup(slug: string): Promise<CmsGroup | undefined> {\n        const groups = await this.listAllGroups();\n        return groups.find(group => group.slug === slug);\n    }\n}\n"],"mappings":"AASA,SAASA,kBAAkB;AAsD3B,OAAO,MAAMC,aAAa,CAAC;EAUvBC,WAAWA,CAAC;IACRC,WAAW;IACXC,oBAAoB;IACpBC,oBAAoB;IACpBC,qBAAqB;IACrBC;EACiB,CAAC,EAAE;IACpB,IAAI,CAACJ,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,oBAAoB,GAAGA,oBAAoB;IAChD,IAAI,CAACC,qBAAqB,GAAGA,qBAAqB;IAClD,IAAI,CAACE,qBAAqB,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;IAC3C,IAAI,CAACC,qBAAqB,GAAGF,aAAa;IAC1C,IAAI,CAACG,SAAS,GAAG,IAAI;EACzB;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAACC,MAA4B,GAAG,CAAC,CAAC,EAAE;IACpD,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,EAAEC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAcC,uBAAuBA,CAACT,MAAwC,EAAE;IAC5E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACC,0BAA0B,CAACF,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAcC,wBAAwBA,CAACZ,MAAwC,EAAE;IAC7E,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACF,uBAAuB,CAACT,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAcT,0BAA0BA,CACpCF,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACa,qBAAqB,CAAC,CAAC,EAAE;MACpC,OAAO,CAAC;QAAEP,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,MAAMe,iBAAiB,IAAID,qBAAqB,EAAE;MACnD,IAAIC,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMkB,mBAAmB,GAAGlB,MAAM,CAACmB,KAAK,EAAEC,SAAS;UACnD,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UAEzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;MACN;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEmB;UAAM,CAAC,GAAGnB,MAAM;UACxB,IAAI,CAACmB,KAAK,EAAE;YACR;UACJ;UAEA,MAAM;YAAEK;UAAO,CAAC,GAAGR,iBAAiB;UACpC,IAAI,CAACS,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAACY,KAAK,CAACG,EAAE,CAAC,EAAE;YAC5B;UACJ;QACJ;MACJ;MAEArB,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEU,iBAAiB,CAACV,GAAa;QACpCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAcY,qBAAqBA,CAAA,EAAG;IAClC,MAAMc,WAAW,GAAG,MAAM,IAAI,CAACnC,oBAAoB,CAAC,CAAC;IACrD,OAAOmC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMC,cAAcA,CAAChC,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IAEzD,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAc0B,oBAAoBA,CAAClC,MAA4B,GAAG,CAAC,CAAC,EAAE;IAClE,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACH,cAAc,CAAChC,MAAM,CAAC;IACnD,IAAImC,SAAS,EAAE;MACX;IACJ;IAEA,IAAI,OAAO,IAAInC,MAAM,EAAE;MACnB,IAAIoC,SAAS,GAAG,4BAA4B;MAC5C,IAAIpC,MAAM,CAACqC,KAAK,EAAEN,IAAI,EAAE;QACpBK,SAAS,GAAG,IAAIpC,MAAM,CAACqC,KAAK,CAACN,IAAI,GAAG;MACxC;MAEA,MAAM,IAAI3C,kBAAkB,CAAC,uCAAuCgD,SAAS,GAAG,CAAC;IACrF;IAEA,MAAM,IAAIhD,kBAAkB,CAAC,uCAAuC,CAAC;EACzE;EAEA,MAAckD,uBAAuBA,CAACtC,MAAwC,EAAE;IAC5E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACgC,0BAA0B,CAACjC,MAAM,CAAC;IACzD,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAc4B,wBAAwBA,CAACvC,MAAwC,EAAE;IAC7E,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAAC2B,uBAAuB,CAACtC,MAAM,CAAC;IACpE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAcsB,0BAA0BA,CACpCjC,MAAwC,EACd;IAC1B,IAAI,MAAM,IAAI,CAACwC,qBAAqB,CAACxC,MAAM,CAAC,EAAE;MAC1C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEK,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IAC/E;IAEA,MAAMC,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAAsB,GAAG,EAAE;IAEjC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMzB,iBAAiB,GAAGD,qBAAqB,CAAC0B,CAAC,CAAC;MAElD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMmD,uBAAuB,GAAGD,qBAAqB,CAACvC,IAAI,CACtDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAK7B,iBAAiB,CAAC6B,IAC1D,CAAC;MAED,IAAI,CAACD,uBAAuB,EAAE;QAC1B;MACJ;MAEA,IAAI5B,iBAAiB,CAACC,GAAG,EAAE;QACvB,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,MAAMlB,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;UAC9C,IAAI,CAACA,KAAK,EAAE;YACR;UACJ;UAEA,MAAMD,mBAAmB,GAAGC,KAAK,CAACC,SAAS;UAC3C,IAAI,CAACF,mBAAmB,EAAE;YACtB;UACJ;UAEA,MAAMG,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI2B,mBAAmB,CAACI,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACxC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIE,iBAAiB,CAACQ,MAAM,EAAE;QAC1B,IAAI,OAAO,IAAIxB,MAAM,EAAE;UACnB,MAAM;YAAEqC;UAAM,CAAC,GAAGrC,MAAM;UACxB,IAAI,CAACqC,KAAK,EAAE;YACR;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACV,iBAAiB,CAACQ,MAAM,CAAC,EAAE;YAC1C;UACJ;UAEA,IAAI,CAACR,iBAAiB,CAACQ,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;YACjD;UACJ;QACJ;MACJ;MAEA,MAAM4B,UAAU,GACZ,CAACH,uBAAuB,CAACtC,GAAG,IAC5B,CAACsC,uBAAuB,CAAC3B,GAAG,IAC5B,CAAC2B,uBAAuB,CAACI,MAAM;MAEnC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,IAAI;UACvBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAAC3B,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,MAAMY,cAAc,GAAGjD,MAAM,CAACqC,KAAK,CAACjB,SAAS;UAC7C,IAAI,CAAC6B,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE;QACxB,CAAC,CAAC;QAEF;MACJ;MAEA,IAAI8B,uBAAuB,CAACI,MAAM,EAAE;QAChC,MAAM;UAAEA;QAAO,CAAC,GAAGJ,uBAAuB;QAC1C,IAAI,OAAO,IAAI5C,MAAM,EAAE;UACnB,IAAI,CAACA,MAAM,CAACqC,KAAK,EAAE;YACf;UACJ;UAEA,IAAI,CAACZ,KAAK,CAACC,OAAO,CAACsB,MAAM,CAAC,EAAE;YACxB;UACJ;UAEA,IAAI,CAACA,MAAM,CAACzC,QAAQ,CAACP,MAAM,CAACqC,KAAK,CAACa,OAAO,CAAC,EAAE;YACxC;UACJ;QACJ;MACJ;MAEAjD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAEsC,uBAAuB,CAACtC,GAAa;QAC1CK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE;MACxB,CAAC,CAAC;IACN;IAEA,OAAOb,GAAG;EACd;EAEA,MAAcuC,qBAAqBA,CAACxC,MAAwC,EAAE;IAC1E,MAAM;MAAEqC;IAAM,CAAC,GAAGrC,MAAM;IACxB,IAAIqC,KAAK,EAAE;MACP,IAAI,IAAI,CAACc,0BAA0B,CAAC;QAAEd;MAAM,CAAC,CAAC,EAAE;QAC5C,OAAO,IAAI;MACf;IACJ;IAEA,MAAMV,WAAW,GAAG,MAAM,IAAI,CAAClC,oBAAoB,CAAC,CAAC;IACrD,OAAOkC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAEI,MAAMqB,cAAcA,CAACpD,MAA4B,EAAE;IAC/C,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAE1D,MAAMG,OAAO,GAAGF,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAACJ,OAAO,EAAE;MACV,OAAO,KAAK;IAChB;IAEA,MAAM;MAAEG;IAAI,CAAC,GAAGN,MAAM;IACtB,IAAIM,GAAG,EAAE;MACL,MAAME,MAAM,GAAGP,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,GAAG,CAACC,QAAQ,CAACD,GAAG,CAAC,CAAC;MACrD,IAAI,CAACE,MAAM,EAAE;QACT,OAAO,KAAK;MAChB;IACJ;IAEA,MAAM;MAAE8C;IAAG,CAAC,GAAGtD,MAAM;IACrB,IAAIsD,EAAE,EAAE;MACJ,MAAMC,KAAK,GAAGtD,GAAG,CAACG,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACiD,EAAE,EAAE/C,QAAQ,CAAC+C,EAAE,CAAC,CAAC;MACnD,IAAI,CAACC,KAAK,EAAE;QACR,OAAO,KAAK;MAChB;IACJ;IAEA,OAAO,IAAI;EACf;EAEA,MAAcC,oBAAoBA,CAACxD,MAA4B,EAAE;IAC7D,MAAMmC,SAAS,GAAG,MAAM,IAAI,CAACiB,cAAc,CAACpD,MAAM,CAAC;IACnD,IAAI,CAACmC,SAAS,EAAE;MACZ,IAAInC,MAAM,CAACyD,KAAK,EAAE;QACd,MAAM,IAAIrE,kBAAkB,CACxB,gCAAgCY,MAAM,CAACyD,KAAK,CAACC,OAAO,IACxD,CAAC;MACL;MAEA,MAAM,IAAItE,kBAAkB,CACxB,0BAA0BY,MAAM,CAACqC,KAAK,CAACa,OAAO,YAClD,CAAC;IACL;EACJ;EAEA,MAAcS,wBAAwBA,CAAC3D,MAAyC,EAAE;IAC9E,MAAMC,GAAG,GAAG,MAAM,IAAI,CAACoD,2BAA2B,CAACrD,MAAM,CAAC;IAC1D,OAAOC,GAAG,CAACS,IAAI,CAACL,GAAG,IAAIA,GAAG,CAACM,iBAAiB,CAAC;EACjD;EAEA,MAAMiD,yBAAyBA,CAAC5D,MAAyC,EAAE;IACvE,MAAMW,iBAAiB,GAAG,MAAM,IAAI,CAACgD,wBAAwB,CAAC3D,MAAM,CAAC;IACrE,OAAO,CAACW,iBAAiB;EAC7B;EAEA,MAAc0C,2BAA2BA,CACrCrD,MAAyC,EACR;IACjC,IAAI,MAAM,IAAI,CAAC6D,sBAAsB,CAAC7D,MAAM,CAAC,EAAE;MAC3C,OAAO,CAAC;QAAEM,GAAG,EAAE,KAAK;QAAEgD,EAAE,EAAE,IAAI;QAAE3C,iBAAiB,EAAE,IAAI;QAAEG,kBAAkB,EAAE;MAAM,CAAC,CAAC;IACzF;;IAEA;IACA,MAAM;MAAEuB;IAAM,CAAC,GAAGrC,MAAM;IACxB,MAAMe,qBAAqB,GAAG,MAAM,IAAI,CAACvB,oBAAoB,CAAC,CAAC;IAC/D,MAAMS,GAA6B,GAAG,EAAE;IAExC,KAAK,IAAIwC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG1B,qBAAqB,CAAC2B,MAAM,EAAED,CAAC,EAAE,EAAE;MACnD,MAAMqB,gBAAgB,GAAG/C,qBAAqB,CAAC0B,CAAC,CAAC;MAEjD,MAAME,qBAAqB,GAAG,MAAM,IAAI,CAAClD,oBAAoB,CAAC,CAAC;MAC/D,MAAMsE,wBAAwB,GAAGpB,qBAAqB,CAACvC,IAAI,CACvDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACkB,wBAAwB,EAAE;QAC3B;MACJ;MAEA,MAAMC,sBAAsB,GAAG,MAAM,IAAI,CAACtE,qBAAqB,CAAC,CAAC;MACjE,MAAMuE,yBAAyB,GAAGD,sBAAsB,CAAC5D,IAAI,CACzDuB,WAAW,IAAIA,WAAW,CAACkB,IAAI,KAAKiB,gBAAgB,CAACjB,IACzD,CAAC;MAED,IAAI,CAACoB,yBAAyB,EAAE;QAC5B;MACJ;MAEA,IAAIH,gBAAgB,CAAC7C,GAAG,EAAE;QACtB,MAAME,KAAK,GAAG,MAAM,IAAI,CAAC2B,QAAQ,CAACT,KAAK,CAAClB,KAAK,CAAC;QAC9C,IAAI,CAACA,KAAK,EAAE;UACR;QACJ;QAEA,MAAM+C,cAAc,GAAG/C,KAAK,CAACC,SAAS;QACtC,IAAI,CAAC8C,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM7C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI2E,cAAc,CAAC5C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIQ,gBAAgB,CAACtC,MAAM,EAAE;QACzB,MAAM;UAAEA;QAAO,CAAC,GAAGsC,gBAAgB;QAEnC,IAAI,CAACrC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;UACxB;QACJ;QAEA,IAAI,CAACA,MAAM,CAACjB,QAAQ,CAAC8B,KAAK,CAAClB,KAAK,CAAC,EAAE;UAC/B;QACJ;MACJ;MAEA,IAAI4C,wBAAwB,CAAC9C,GAAG,EAAE;QAC9B,MAAMgC,cAAc,GAAGZ,KAAK,CAACjB,SAAS;QACtC,IAAI,CAAC6B,cAAc,EAAE;UACjB;QACJ;QAEA,MAAM5B,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;QACzC,IAAI0D,cAAc,CAAC3B,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;UACnC;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;MACN;MAEA,IAAIS,wBAAwB,CAACf,MAAM,EAAE;QACjC,IAAI,CAACvB,KAAK,CAACC,OAAO,CAACqC,wBAAwB,CAACf,MAAM,CAAC,EAAE;UACjD;QACJ;QAEA,IAAI,CAACe,wBAAwB,CAACf,MAAM,CAACzC,QAAQ,CAAC8B,KAAK,CAACa,OAAO,CAAC,EAAE;UAC1D;QACJ;MACJ;MAEA,MAAMH,UAAU,GACZ,CAACkB,yBAAyB,CAAC3D,GAAG,IAC9B,CAAC2D,yBAAyB,CAAChD,GAAG,IAC9B,CAACgD,yBAAyB,CAACjB,MAAM;MAErC,IAAID,UAAU,EAAE;QACZ9C,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE,KAAK;UACVK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAE;QACR,CAAC,CAAC;QAEF;MACJ;MAEA,IAAIW,yBAAyB,CAAChD,GAAG,EAAE;QAC/B,IAAI,OAAO,IAAIjB,MAAM,EAAE;UACnB,MAAMmE,cAAc,GAAGnE,MAAM,CAACyD,KAAK,EAAErC,SAAS;UAC9C,IAAI,CAAC+C,cAAc,EAAE;YACjB;UACJ;UAEA,MAAM9C,QAAQ,GAAG,MAAM,IAAI,CAAC9B,WAAW,CAAC,CAAC;UACzC,IAAI4E,cAAc,CAAC7C,EAAE,KAAKD,QAAQ,CAACC,EAAE,EAAE;YACnC;UACJ;QACJ;QAEArB,GAAG,CAACsB,IAAI,CAAC;UACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;UAClCK,iBAAiB,EAAE,KAAK;UACxBG,kBAAkB,EAAE,IAAI;UACxBwC,EAAE,EAAEW,yBAAyB,CAACX;QAClC,CAAC,CAAC;QAEF;MACJ;MAEArD,GAAG,CAACsB,IAAI,CAAC;QACLjB,GAAG,EAAE2D,yBAAyB,CAAC3D,GAAG;QAClCK,iBAAiB,EAAE,IAAI;QACvBG,kBAAkB,EAAE,KAAK;QACzBwC,EAAE,EAAEW,yBAAyB,CAACX;MAClC,CAAC,CAAC;IACN;IAEA,OAAOrD,GAAG;EACd;EAEA,MAAc4D,sBAAsBA,CAAC7D,MAAyC,EAAE;IAC5E,IAAI,IAAI,CAACmD,0BAA0B,CAACnD,MAAM,CAAC,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,MAAM2B,WAAW,GAAG,MAAM,IAAI,CAACjC,qBAAqB,CAAC,CAAC;IACtD,OAAOiC,WAAW,CAACjB,IAAI,CAACkB,CAAC,IAAI,IAAI,CAAChC,qBAAqB,CAACiC,MAAM,CAACC,OAAO,CAAC,CAACvB,QAAQ,CAACqB,CAAC,CAACG,IAAI,CAAC,CAAC;EAC7F;EAEQoB,0BAA0BA,CAACnD,MAAyC,EAAE;IAC1E,IAAI,eAAe,IAAIA,MAAM,CAACqC,KAAK,EAAE;MACjC,MAAM;QAAE+B;MAAc,CAAC,GAAGpE,MAAM,CAACqC,KAAK;MACtC,IAAI,OAAO+B,aAAa,KAAK,SAAS,EAAE;QACpC,OAAOA,aAAa,KAAK,KAAK;MAClC;MAEA,OAAOA,aAAa,EAAEzC,WAAW,KAAK,KAAK;IAC/C;IAEA,OAAO,KAAK;EAChB;EAEA,MAAchC,aAAaA,CAAA,EAAwB;IAC/C,IAAI,IAAI,CAACG,SAAS,KAAK,IAAI,EAAE;MACzB,IAAI,CAACA,SAAS,GAAG,IAAI,CAACD,qBAAqB,CAAC,CAAC;IACjD;IAEA,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcgD,QAAQA,CAACuB,IAAY,EAAiC;IAChE,MAAM7C,MAAM,GAAG,MAAM,IAAI,CAAC7B,aAAa,CAAC,CAAC;IACzC,OAAO6B,MAAM,CAACpB,IAAI,CAACe,KAAK,IAAIA,KAAK,CAACkD,IAAI,KAAKA,IAAI,CAAC;EACpD;AACJ","ignoreList":[]}

package/crud/contentEntry/entryDataFactories/createEntryData.js

@@ -6,6 +6,7 @@ import { referenceFieldsMapping } from "../referenceFieldsMapping.js";
 import { createIdentifier, mdbid } from "@webiny/utils";
 import { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from "./statuses.js";
 import { getIdentity } from "../../../utils/identity.js";
+import { NotAuthorizedError } from "../../../utils/errors.js";
 import { getSystem } from "./system.js";
 /**
  * Used for some fields to convert their values.
@@ -138,16 +139,21 @@ export const createEntryData = async ({
   const status = rawInput.status || STATUS_DRAFT;
   if (status !== STATUS_DRAFT) {
     if (status === STATUS_PUBLISHED) {
-      await accessControl.ensureCanAccessEntry({
+      const canPublish = await accessControl.canAccessEntry({
         model,
         pw: "p"
       });
+      if (!canPublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     } else if (status === STATUS_UNPUBLISHED) {
-      // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await accessControl.ensureCanAccessEntry({
+      const canUnpublish = await accessControl.canAccessEntry({
         model,
         pw: "u"
       });
+      if (!canUnpublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     }
   }
   const locked = status !== STATUS_DRAFT;
@@ -226,18 +232,23 @@ export const createEntryData = async ({
   };
   if (status !== STATUS_DRAFT) {
     if (status === STATUS_PUBLISHED) {
-      await accessControl.ensureCanAccessEntry({
+      const canPublish = await accessControl.canAccessEntry({
         model,
         entry,
         pw: "p"
       });
+      if (!canPublish) {
+        throw new NotAuthorizedError(`Not allowed to access entry "${entry.entryId}".`);
+      }
     } else if (status === STATUS_UNPUBLISHED) {
-      // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await accessControl.ensureCanAccessEntry({
+      const canUnpublish = await accessControl.canAccessEntry({
         model,
         entry,
         pw: "u"
       });
+      if (!canUnpublish) {
+        throw new NotAuthorizedError(`Not allowed to access entry "${entry.entryId}".`);
+      }
     }
   }
   return {

package/crud/contentEntry/entryDataFactories/createEntryData.js.map

@@ -1 +1 @@
-{"version":3,"names":["getDate","ROOT_FOLDER","WebinyError","validateModelEntryDataOrThrow","referenceFieldsMapping","createIdentifier","mdbid","STATUS_DRAFT","STATUS_PUBLISHED","STATUS_UNPUBLISHED","getIdentity","getSystem","convertDefaultValue","field","value","type","Boolean","Number","getDefaultValue","settings","list","defaultValue","undefined","predefinedValues","enabled","Array","isArray","values","selectedValue","find","selected","filter","map","createEntryId","input","entryId","id","match","version","cleanInputValues","model","fields","reduce","acc","fieldId","key","createEntryData","rawInput","options","context","getSecurityIdentity","getTenant","accessControl","initialValues","skipValidators","validateEntries","currentIdentity","currentDateTime","Date","status","ensureCanAccessEntry","pw","locked","revisionLevelPublishingMetaFields","revisionFirstPublishedOn","revisionLastPublishedOn","revisionFirstPublishedBy","revisionLastPublishedBy","entryLevelPublishingMetaFields","firstPublishedOn","lastPublishedOn","firstPublishedBy","lastPublishedBy","entry","tenant","modelId","createdOn","modifiedOn","savedOn","deletedOn","restoredOn","createdBy","modifiedBy","savedBy","deletedBy","restoredBy","revisionCreatedOn","revisionModifiedOn","revisionSavedOn","revisionDeletedOn","revisionRestoredOn","revisionCreatedBy","revisionModifiedBy","revisionSavedBy","revisionDeletedBy","revisionRestoredBy","location","folderId","wbyAco_location","system","live","structuredClone"],"sources":["createEntryData.ts"],"sourcesContent":["import type {\n    CmsContext,\n    CmsEntry,\n    CmsEntryValues,\n    CmsModel,\n    CmsModelField,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"~/types/index.js\";\nimport { getDate } from \"~/utils/date.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport WebinyError from \"@webiny/error\";\nimport { validateModelEntryDataOrThrow } from \"~/crud/contentEntry/entryDataValidation.js\";\nimport { referenceFieldsMapping } from \"~/crud/contentEntry/referenceFieldsMapping.js\";\nimport { createIdentifier, mdbid } from \"@webiny/utils\";\nimport { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from \"./statuses.js\";\nimport { getIdentity } from \"~/utils/identity.js\";\nimport type { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { getSystem } from \"./system.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport type { Tenant } from \"@webiny/api-core/types/tenancy.js\";\n\ntype DefaultValue = boolean | number | string | null;\n\n/**\n * Used for some fields to convert their values.\n */\nconst convertDefaultValue = (field: CmsModelField, value: DefaultValue): DefaultValue => {\n    switch (field.type) {\n        case \"boolean\":\n            return Boolean(value);\n        case \"number\":\n            return Number(value);\n        default:\n            return value;\n    }\n};\n\nconst getDefaultValue = (field: CmsModelField): (DefaultValue | DefaultValue[]) | undefined => {\n    const { settings, list } = field;\n    if (settings && settings.defaultValue !== undefined) {\n        return convertDefaultValue(field, settings.defaultValue);\n    }\n    const { predefinedValues } = field;\n    if (\n        !predefinedValues ||\n        !predefinedValues.enabled ||\n        Array.isArray(predefinedValues.values) === false\n    ) {\n        return undefined;\n    }\n    if (!list) {\n        const selectedValue = predefinedValues.values.find(value => {\n            return !!value.selected;\n        });\n        if (selectedValue) {\n            return convertDefaultValue(field, selectedValue.value);\n        }\n        return undefined;\n    }\n    return predefinedValues.values\n        .filter(({ selected }) => !!selected)\n        .map(({ value }) => {\n            return convertDefaultValue(field, value);\n        });\n};\n\nconst createEntryId = (input: CreateCmsEntryInput) => {\n    let entryId = mdbid();\n    if (input.id) {\n        if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\\-]+)([a-zA-Z0-9])$/) === null) {\n            throw new WebinyError(\n                \"The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.\",\n                \"INVALID_ID\",\n                {\n                    id: input.id\n                }\n            );\n        }\n        entryId = input.id;\n    }\n    const version = 1;\n    return {\n        entryId,\n        version,\n        id: createIdentifier({\n            id: entryId,\n            version\n        })\n    };\n};\n\n/**\n * Cleans and adds default values to create input data.\n */\nconst cleanInputValues = <TValues extends CmsEntryValues = CmsEntryValues>(\n    model: CmsModel,\n    input: TValues\n) => {\n    return model.fields.reduce<TValues>((acc, field) => {\n        /**\n         * This should never happen, but let's make it sure.\n         * The fix would be for the user to add the fieldId on the field definition.\n         */\n        if (!field.fieldId) {\n            throw new WebinyError(\"Field does not have an fieldId.\", \"MISSING_FIELD_ID\", {\n                field\n            });\n        }\n        const key = field.fieldId as keyof TValues;\n        const value = input[key] as TValues[keyof TValues];\n        /**\n         * We set the default value on create input if value is not defined.\n         */\n        acc[key] = value === undefined ? (getDefaultValue(field) as TValues[keyof TValues]) : value;\n        return acc;\n    }, {} as TValues);\n};\n\ninterface CreateEntryDataParams<TValues extends CmsEntryValues = CmsEntryValues> {\n    model: CmsModel;\n    rawInput: CreateCmsEntryInput<TValues>;\n    options?: CreateCmsEntryOptionsInput;\n    context: CmsContext;\n    getIdentity: () => SecurityIdentity;\n    getTenant: () => Tenant;\n    accessControl: AccessControl;\n}\n\ninterface ICreateEntryDataResponse<TValues extends CmsEntryValues = CmsEntryValues> {\n    entry: CmsEntry<TValues>;\n    input: CreateCmsEntryInput<TValues>;\n}\n\nexport const createEntryData = async <TValues extends CmsEntryValues = CmsEntryValues>({\n    model,\n    rawInput,\n    options,\n    context,\n    getIdentity: getSecurityIdentity,\n    getTenant,\n    accessControl\n}: CreateEntryDataParams<TValues>): Promise<ICreateEntryDataResponse<TValues>> => {\n    const initialValues = cleanInputValues<TValues>(model, rawInput.values || ({} as TValues));\n\n    await validateModelEntryDataOrThrow({\n        context,\n        model,\n        values: initialValues,\n        skipValidators: options?.skipValidators\n    });\n\n    const values = await referenceFieldsMapping<TValues>({\n        context,\n        model,\n        values: initialValues,\n        validateEntries: true\n    });\n\n    const { id, entryId, version } = createEntryId(rawInput);\n\n    /**\n     * There is a possibility that user sends an ID in the input, so we will use that one.\n     * There is no check if the ID is unique or not, that is up to the user.\n     */\n    const currentIdentity = getSecurityIdentity();\n    const currentDateTime = new Date();\n\n    /**\n     * Users can set the initial status of the entry. If so, we need to make\n     * sure they have the required permissions and also that all the fields\n     * are filled in correctly.\n     */\n    const status = rawInput.status || STATUS_DRAFT;\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            await accessControl.ensureCanAccessEntry({ model, pw: \"p\" });\n        } else if (status === STATUS_UNPUBLISHED) {\n            // If setting the status other than draft, we have to check if the user has permissions to publish.\n            await accessControl.ensureCanAccessEntry({ model, pw: \"u\" });\n        }\n    }\n\n    const locked = status !== STATUS_DRAFT;\n\n    let revisionLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        | \"revisionFirstPublishedOn\"\n        | \"revisionLastPublishedOn\"\n        | \"revisionFirstPublishedBy\"\n        | \"revisionLastPublishedBy\"\n    > = {\n        revisionFirstPublishedOn: null,\n        revisionLastPublishedOn: null,\n        revisionFirstPublishedBy: null,\n        revisionLastPublishedBy: null\n    };\n\n    let entryLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        \"firstPublishedOn\" | \"lastPublishedOn\" | \"firstPublishedBy\" | \"lastPublishedBy\"\n    > = {\n        firstPublishedOn: null,\n        lastPublishedOn: null,\n        firstPublishedBy: null,\n        lastPublishedBy: null\n    };\n\n    if (status === STATUS_PUBLISHED) {\n        revisionLevelPublishingMetaFields = {\n            revisionFirstPublishedOn: getDate(rawInput.revisionFirstPublishedOn, currentDateTime),\n            revisionLastPublishedOn: getDate(rawInput.revisionLastPublishedOn, currentDateTime),\n            revisionFirstPublishedBy: getIdentity(\n                rawInput.revisionFirstPublishedBy,\n                currentIdentity\n            ),\n            revisionLastPublishedBy: getIdentity(rawInput.revisionLastPublishedBy, currentIdentity)\n        };\n\n        entryLevelPublishingMetaFields = {\n            firstPublishedOn: getDate(rawInput.firstPublishedOn, currentDateTime),\n            lastPublishedOn: getDate(rawInput.lastPublishedOn, currentDateTime),\n            firstPublishedBy: getIdentity(rawInput.firstPublishedBy, currentIdentity),\n            lastPublishedBy: getIdentity(rawInput.lastPublishedBy, currentIdentity)\n        };\n    }\n\n    const entry: CmsEntry<TValues> = {\n        tenant: getTenant().id,\n        entryId,\n        id,\n        modelId: model.modelId,\n\n        /**\n         * Entry-level meta fields. 👇\n         */\n        createdOn: getDate(rawInput.createdOn, currentDateTime),\n        modifiedOn: getDate(rawInput.modifiedOn, null),\n        savedOn: getDate(rawInput.savedOn, currentDateTime),\n        deletedOn: getDate(rawInput.deletedOn, null),\n        restoredOn: getDate(rawInput.restoredOn, null),\n        createdBy: getIdentity(rawInput.createdBy, currentIdentity)!,\n        modifiedBy: getIdentity(rawInput.modifiedBy, null),\n        savedBy: getIdentity(rawInput.savedBy, currentIdentity)!,\n        deletedBy: getIdentity(rawInput.deletedBy, null),\n        restoredBy: getIdentity(rawInput.restoredBy, null),\n        ...entryLevelPublishingMetaFields,\n\n        /**\n         * Revision-level meta fields. 👇\n         */\n        revisionCreatedOn: getDate(rawInput.revisionCreatedOn, currentDateTime),\n        revisionModifiedOn: getDate(rawInput.revisionModifiedOn, null),\n        revisionSavedOn: getDate(rawInput.revisionSavedOn, currentDateTime),\n        revisionDeletedOn: getDate(rawInput.revisionDeletedOn, null),\n        revisionRestoredOn: getDate(rawInput.revisionRestoredOn, null),\n        revisionCreatedBy: getIdentity(rawInput.revisionCreatedBy, currentIdentity)!,\n        revisionModifiedBy: getIdentity(rawInput.revisionModifiedBy, null),\n        revisionSavedBy: getIdentity(rawInput.revisionSavedBy, currentIdentity)!,\n        revisionDeletedBy: getIdentity(rawInput.revisionDeletedBy, null),\n        revisionRestoredBy: getIdentity(rawInput.revisionRestoredBy, null),\n        ...revisionLevelPublishingMetaFields,\n\n        version,\n        status,\n        locked,\n        values,\n        location: {\n            folderId:\n                rawInput.location?.folderId || rawInput.wbyAco_location?.folderId || ROOT_FOLDER\n        },\n        system: getSystem({\n            input: rawInput\n        }),\n        live:\n            status === STATUS_PUBLISHED\n                ? {\n                      version\n                  }\n                : null\n    };\n\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            await accessControl.ensureCanAccessEntry({ model, entry, pw: \"p\" });\n        } else if (status === STATUS_UNPUBLISHED) {\n            // If setting the status other than draft, we have to check if the user has permissions to publish.\n            await accessControl.ensureCanAccessEntry({ model, entry, pw: \"u\" });\n        }\n    }\n\n    return {\n        entry,\n        input: {\n            ...rawInput,\n            values: structuredClone(values)\n        }\n    };\n};\n"],"mappings":"AASA,SAASA,OAAO;AAChB,SAASC,WAAW;AACpB,OAAOC,WAAW,MAAM,eAAe;AACvC,SAASC,6BAA6B;AACtC,SAASC,sBAAsB;AAC/B,SAASC,gBAAgB,EAAEC,KAAK,QAAQ,eAAe;AACvD,SAASC,YAAY,EAAEC,gBAAgB,EAAEC,kBAAkB;AAC3D,SAASC,WAAW;AAEpB,SAASC,SAAS;AAMlB;AACA;AACA;AACA,MAAMC,mBAAmB,GAAGA,CAACC,KAAoB,EAAEC,KAAmB,KAAmB;EACrF,QAAQD,KAAK,CAACE,IAAI;IACd,KAAK,SAAS;MACV,OAAOC,OAAO,CAACF,KAAK,CAAC;IACzB,KAAK,QAAQ;MACT,OAAOG,MAAM,CAACH,KAAK,CAAC;IACxB;MACI,OAAOA,KAAK;EACpB;AACJ,CAAC;AAED,MAAMI,eAAe,GAAIL,KAAoB,IAAkD;EAC3F,MAAM;IAAEM,QAAQ;IAAEC;EAAK,CAAC,GAAGP,KAAK;EAChC,IAAIM,QAAQ,IAAIA,QAAQ,CAACE,YAAY,KAAKC,SAAS,EAAE;IACjD,OAAOV,mBAAmB,CAACC,KAAK,EAAEM,QAAQ,CAACE,YAAY,CAAC;EAC5D;EACA,MAAM;IAAEE;EAAiB,CAAC,GAAGV,KAAK;EAClC,IACI,CAACU,gBAAgB,IACjB,CAACA,gBAAgB,CAACC,OAAO,IACzBC,KAAK,CAACC,OAAO,CAACH,gBAAgB,CAACI,MAAM,CAAC,KAAK,KAAK,EAClD;IACE,OAAOL,SAAS;EACpB;EACA,IAAI,CAACF,IAAI,EAAE;IACP,MAAMQ,aAAa,GAAGL,gBAAgB,CAACI,MAAM,CAACE,IAAI,CAACf,KAAK,IAAI;MACxD,OAAO,CAAC,CAACA,KAAK,CAACgB,QAAQ;IAC3B,CAAC,CAAC;IACF,IAAIF,aAAa,EAAE;MACf,OAAOhB,mBAAmB,CAACC,KAAK,EAAEe,aAAa,CAACd,KAAK,CAAC;IAC1D;IACA,OAAOQ,SAAS;EACpB;EACA,OAAOC,gBAAgB,CAACI,MAAM,CACzBI,MAAM,CAAC,CAAC;IAAED;EAAS,CAAC,KAAK,CAAC,CAACA,QAAQ,CAAC,CACpCE,GAAG,CAAC,CAAC;IAAElB;EAAM,CAAC,KAAK;IAChB,OAAOF,mBAAmB,CAACC,KAAK,EAAEC,KAAK,CAAC;EAC5C,CAAC,CAAC;AACV,CAAC;AAED,MAAMmB,aAAa,GAAIC,KAA0B,IAAK;EAClD,IAAIC,OAAO,GAAG7B,KAAK,CAAC,CAAC;EACrB,IAAI4B,KAAK,CAACE,EAAE,EAAE;IACV,IAAIF,KAAK,CAACE,EAAE,CAACC,KAAK,CAAC,8CAA8C,CAAC,KAAK,IAAI,EAAE;MACzE,MAAM,IAAInC,WAAW,CACjB,sHAAsH,EACtH,YAAY,EACZ;QACIkC,EAAE,EAAEF,KAAK,CAACE;MACd,CACJ,CAAC;IACL;IACAD,OAAO,GAAGD,KAAK,CAACE,EAAE;EACtB;EACA,MAAME,OAAO,GAAG,CAAC;EACjB,OAAO;IACHH,OAAO;IACPG,OAAO;IACPF,EAAE,EAAE/B,gBAAgB,CAAC;MACjB+B,EAAE,EAAED,OAAO;MACXG;IACJ,CAAC;EACL,CAAC;AACL,CAAC;;AAED;AACA;AACA;AACA,MAAMC,gBAAgB,GAAGA,CACrBC,KAAe,EACfN,KAAc,KACb;EACD,OAAOM,KAAK,CAACC,MAAM,CAACC,MAAM,CAAU,CAACC,GAAG,EAAE9B,KAAK,KAAK;IAChD;AACR;AACA;AACA;IACQ,IAAI,CAACA,KAAK,CAAC+B,OAAO,EAAE;MAChB,MAAM,IAAI1C,WAAW,CAAC,iCAAiC,EAAE,kBAAkB,EAAE;QACzEW;MACJ,CAAC,CAAC;IACN;IACA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC+B,OAAwB;IAC1C,MAAM9B,KAAK,GAAGoB,KAAK,CAACW,GAAG,CAA2B;IAClD;AACR;AACA;IACQF,GAAG,CAACE,GAAG,CAAC,GAAG/B,KAAK,KAAKQ,SAAS,GAAIJ,eAAe,CAACL,KAAK,CAAC,GAA8BC,KAAK;IAC3F,OAAO6B,GAAG;EACd,CAAC,EAAE,CAAC,CAAY,CAAC;AACrB,CAAC;AAiBD,OAAO,MAAMG,eAAe,GAAG,MAAAA,CAAwD;EACnFN,KAAK;EACLO,QAAQ;EACRC,OAAO;EACPC,OAAO;EACPvC,WAAW,EAAEwC,mBAAmB;EAChCC,SAAS;EACTC;AAC4B,CAAC,KAAiD;EAC9E,MAAMC,aAAa,GAAGd,gBAAgB,CAAUC,KAAK,EAAEO,QAAQ,CAACpB,MAAM,IAAK,CAAC,CAAa,CAAC;EAE1F,MAAMxB,6BAA6B,CAAC;IAChC8C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBC,cAAc,EAAEN,OAAO,EAAEM;EAC7B,CAAC,CAAC;EAEF,MAAM3B,MAAM,GAAG,MAAMvB,sBAAsB,CAAU;IACjD6C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBE,eAAe,EAAE;EACrB,CAAC,CAAC;EAEF,MAAM;IAAEnB,EAAE;IAAED,OAAO;IAAEG;EAAQ,CAAC,GAAGL,aAAa,CAACc,QAAQ,CAAC;;EAExD;AACJ;AACA;AACA;EACI,MAAMS,eAAe,GAAGN,mBAAmB,CAAC,CAAC;EAC7C,MAAMO,eAAe,GAAG,IAAIC,IAAI,CAAC,CAAC;;EAElC;AACJ;AACA;AACA;AACA;EACI,MAAMC,MAAM,GAAGZ,QAAQ,CAACY,MAAM,IAAIpD,YAAY;EAC9C,IAAIoD,MAAM,KAAKpD,YAAY,EAAE;IACzB,IAAIoD,MAAM,KAAKnD,gBAAgB,EAAE;MAC7B,MAAM4C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEqB,EAAE,EAAE;MAAI,CAAC,CAAC;IAChE,CAAC,MAAM,IAAIF,MAAM,KAAKlD,kBAAkB,EAAE;MACtC;MACA,MAAM2C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEqB,EAAE,EAAE;MAAI,CAAC,CAAC;IAChE;EACJ;EAEA,MAAMC,MAAM,GAAGH,MAAM,KAAKpD,YAAY;EAEtC,IAAIwD,iCAMH,GAAG;IACAC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE,IAAI;IAC7BC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE;EAC7B,CAAC;EAED,IAAIC,8BAGH,GAAG;IACAC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE,IAAI;IACrBC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE;EACrB,CAAC;EAED,IAAIb,MAAM,KAAKnD,gBAAgB,EAAE;IAC7BuD,iCAAiC,GAAG;MAChCC,wBAAwB,EAAEhE,OAAO,CAAC+C,QAAQ,CAACiB,wBAAwB,EAAEP,eAAe,CAAC;MACrFQ,uBAAuB,EAAEjE,OAAO,CAAC+C,QAAQ,CAACkB,uBAAuB,EAAER,eAAe,CAAC;MACnFS,wBAAwB,EAAExD,WAAW,CACjCqC,QAAQ,CAACmB,wBAAwB,EACjCV,eACJ,CAAC;MACDW,uBAAuB,EAAEzD,WAAW,CAACqC,QAAQ,CAACoB,uBAAuB,EAAEX,eAAe;IAC1F,CAAC;IAEDY,8BAA8B,GAAG;MAC7BC,gBAAgB,EAAErE,OAAO,CAAC+C,QAAQ,CAACsB,gBAAgB,EAAEZ,eAAe,CAAC;MACrEa,eAAe,EAAEtE,OAAO,CAAC+C,QAAQ,CAACuB,eAAe,EAAEb,eAAe,CAAC;MACnEc,gBAAgB,EAAE7D,WAAW,CAACqC,QAAQ,CAACwB,gBAAgB,EAAEf,eAAe,CAAC;MACzEgB,eAAe,EAAE9D,WAAW,CAACqC,QAAQ,CAACyB,eAAe,EAAEhB,eAAe;IAC1E,CAAC;EACL;EAEA,MAAMiB,KAAwB,GAAG;IAC7BC,MAAM,EAAEvB,SAAS,CAAC,CAAC,CAACf,EAAE;IACtBD,OAAO;IACPC,EAAE;IACFuC,OAAO,EAAEnC,KAAK,CAACmC,OAAO;IAEtB;AACR;AACA;IACQC,SAAS,EAAE5E,OAAO,CAAC+C,QAAQ,CAAC6B,SAAS,EAAEnB,eAAe,CAAC;IACvDoB,UAAU,EAAE7E,OAAO,CAAC+C,QAAQ,CAAC8B,UAAU,EAAE,IAAI,CAAC;IAC9CC,OAAO,EAAE9E,OAAO,CAAC+C,QAAQ,CAAC+B,OAAO,EAAErB,eAAe,CAAC;IACnDsB,SAAS,EAAE/E,OAAO,CAAC+C,QAAQ,CAACgC,SAAS,EAAE,IAAI,CAAC;IAC5CC,UAAU,EAAEhF,OAAO,CAAC+C,QAAQ,CAACiC,UAAU,EAAE,IAAI,CAAC;IAC9CC,SAAS,EAAEvE,WAAW,CAACqC,QAAQ,CAACkC,SAAS,EAAEzB,eAAe,CAAE;IAC5D0B,UAAU,EAAExE,WAAW,CAACqC,QAAQ,CAACmC,UAAU,EAAE,IAAI,CAAC;IAClDC,OAAO,EAAEzE,WAAW,CAACqC,QAAQ,CAACoC,OAAO,EAAE3B,eAAe,CAAE;IACxD4B,SAAS,EAAE1E,WAAW,CAACqC,QAAQ,CAACqC,SAAS,EAAE,IAAI,CAAC;IAChDC,UAAU,EAAE3E,WAAW,CAACqC,QAAQ,CAACsC,UAAU,EAAE,IAAI,CAAC;IAClD,GAAGjB,8BAA8B;IAEjC;AACR;AACA;IACQkB,iBAAiB,EAAEtF,OAAO,CAAC+C,QAAQ,CAACuC,iBAAiB,EAAE7B,eAAe,CAAC;IACvE8B,kBAAkB,EAAEvF,OAAO,CAAC+C,QAAQ,CAACwC,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,eAAe,EAAExF,OAAO,CAAC+C,QAAQ,CAACyC,eAAe,EAAE/B,eAAe,CAAC;IACnEgC,iBAAiB,EAAEzF,OAAO,CAAC+C,QAAQ,CAAC0C,iBAAiB,EAAE,IAAI,CAAC;IAC5DC,kBAAkB,EAAE1F,OAAO,CAAC+C,QAAQ,CAAC2C,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,iBAAiB,EAAEjF,WAAW,CAACqC,QAAQ,CAAC4C,iBAAiB,EAAEnC,eAAe,CAAE;IAC5EoC,kBAAkB,EAAElF,WAAW,CAACqC,QAAQ,CAAC6C,kBAAkB,EAAE,IAAI,CAAC;IAClEC,eAAe,EAAEnF,WAAW,CAACqC,QAAQ,CAAC8C,eAAe,EAAErC,eAAe,CAAE;IACxEsC,iBAAiB,EAAEpF,WAAW,CAACqC,QAAQ,CAAC+C,iBAAiB,EAAE,IAAI,CAAC;IAChEC,kBAAkB,EAAErF,WAAW,CAACqC,QAAQ,CAACgD,kBAAkB,EAAE,IAAI,CAAC;IAClE,GAAGhC,iCAAiC;IAEpCzB,OAAO;IACPqB,MAAM;IACNG,MAAM;IACNnC,MAAM;IACNqE,QAAQ,EAAE;MACNC,QAAQ,EACJlD,QAAQ,CAACiD,QAAQ,EAAEC,QAAQ,IAAIlD,QAAQ,CAACmD,eAAe,EAAED,QAAQ,IAAIhG;IAC7E,CAAC;IACDkG,MAAM,EAAExF,SAAS,CAAC;MACduB,KAAK,EAAEa;IACX,CAAC,CAAC;IACFqD,IAAI,EACAzC,MAAM,KAAKnD,gBAAgB,GACrB;MACI8B;IACJ,CAAC,GACD;EACd,CAAC;EAED,IAAIqB,MAAM,KAAKpD,YAAY,EAAE;IACzB,IAAIoD,MAAM,KAAKnD,gBAAgB,EAAE;MAC7B,MAAM4C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEiC,KAAK;QAAEZ,EAAE,EAAE;MAAI,CAAC,CAAC;IACvE,CAAC,MAAM,IAAIF,MAAM,KAAKlD,kBAAkB,EAAE;MACtC;MACA,MAAM2C,aAAa,CAACQ,oBAAoB,CAAC;QAAEpB,KAAK;QAAEiC,KAAK;QAAEZ,EAAE,EAAE;MAAI,CAAC,CAAC;IACvE;EACJ;EAEA,OAAO;IACHY,KAAK;IACLvC,KAAK,EAAE;MACH,GAAGa,QAAQ;MACXpB,MAAM,EAAE0E,eAAe,CAAC1E,MAAM;IAClC;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"names":["getDate","ROOT_FOLDER","WebinyError","validateModelEntryDataOrThrow","referenceFieldsMapping","createIdentifier","mdbid","STATUS_DRAFT","STATUS_PUBLISHED","STATUS_UNPUBLISHED","getIdentity","NotAuthorizedError","getSystem","convertDefaultValue","field","value","type","Boolean","Number","getDefaultValue","settings","list","defaultValue","undefined","predefinedValues","enabled","Array","isArray","values","selectedValue","find","selected","filter","map","createEntryId","input","entryId","id","match","version","cleanInputValues","model","fields","reduce","acc","fieldId","key","createEntryData","rawInput","options","context","getSecurityIdentity","getTenant","accessControl","initialValues","skipValidators","validateEntries","currentIdentity","currentDateTime","Date","status","canPublish","canAccessEntry","pw","modelId","canUnpublish","locked","revisionLevelPublishingMetaFields","revisionFirstPublishedOn","revisionLastPublishedOn","revisionFirstPublishedBy","revisionLastPublishedBy","entryLevelPublishingMetaFields","firstPublishedOn","lastPublishedOn","firstPublishedBy","lastPublishedBy","entry","tenant","createdOn","modifiedOn","savedOn","deletedOn","restoredOn","createdBy","modifiedBy","savedBy","deletedBy","restoredBy","revisionCreatedOn","revisionModifiedOn","revisionSavedOn","revisionDeletedOn","revisionRestoredOn","revisionCreatedBy","revisionModifiedBy","revisionSavedBy","revisionDeletedBy","revisionRestoredBy","location","folderId","wbyAco_location","system","live","structuredClone"],"sources":["createEntryData.ts"],"sourcesContent":["import type {\n    CmsContext,\n    CmsEntry,\n    CmsEntryValues,\n    CmsModel,\n    CmsModelField,\n    CreateCmsEntryInput,\n    CreateCmsEntryOptionsInput\n} from \"~/types/index.js\";\nimport { getDate } from \"~/utils/date.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\nimport WebinyError from \"@webiny/error\";\nimport { validateModelEntryDataOrThrow } from \"~/crud/contentEntry/entryDataValidation.js\";\nimport { referenceFieldsMapping } from \"~/crud/contentEntry/referenceFieldsMapping.js\";\nimport { createIdentifier, mdbid } from \"@webiny/utils\";\nimport { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from \"./statuses.js\";\nimport { getIdentity } from \"~/utils/identity.js\";\nimport type { AccessControl } from \"~/crud/AccessControl/AccessControl.js\";\nimport { NotAuthorizedError } from \"~/utils/errors.js\";\nimport { getSystem } from \"./system.js\";\nimport type { SecurityIdentity } from \"@webiny/api-core/types/security.js\";\nimport type { Tenant } from \"@webiny/api-core/types/tenancy.js\";\n\ntype DefaultValue = boolean | number | string | null;\n\n/**\n * Used for some fields to convert their values.\n */\nconst convertDefaultValue = (field: CmsModelField, value: DefaultValue): DefaultValue => {\n    switch (field.type) {\n        case \"boolean\":\n            return Boolean(value);\n        case \"number\":\n            return Number(value);\n        default:\n            return value;\n    }\n};\n\nconst getDefaultValue = (field: CmsModelField): (DefaultValue | DefaultValue[]) | undefined => {\n    const { settings, list } = field;\n    if (settings && settings.defaultValue !== undefined) {\n        return convertDefaultValue(field, settings.defaultValue);\n    }\n    const { predefinedValues } = field;\n    if (\n        !predefinedValues ||\n        !predefinedValues.enabled ||\n        Array.isArray(predefinedValues.values) === false\n    ) {\n        return undefined;\n    }\n    if (!list) {\n        const selectedValue = predefinedValues.values.find(value => {\n            return !!value.selected;\n        });\n        if (selectedValue) {\n            return convertDefaultValue(field, selectedValue.value);\n        }\n        return undefined;\n    }\n    return predefinedValues.values\n        .filter(({ selected }) => !!selected)\n        .map(({ value }) => {\n            return convertDefaultValue(field, value);\n        });\n};\n\nconst createEntryId = (input: CreateCmsEntryInput) => {\n    let entryId = mdbid();\n    if (input.id) {\n        if (input.id.match(/^([a-zA-Z0-9])([a-zA-Z0-9\\-]+)([a-zA-Z0-9])$/) === null) {\n            throw new WebinyError(\n                \"The provided ID is not valid. It must be a string which can be A-Z, a-z, 0-9, - and it cannot start or end with a -.\",\n                \"INVALID_ID\",\n                {\n                    id: input.id\n                }\n            );\n        }\n        entryId = input.id;\n    }\n    const version = 1;\n    return {\n        entryId,\n        version,\n        id: createIdentifier({\n            id: entryId,\n            version\n        })\n    };\n};\n\n/**\n * Cleans and adds default values to create input data.\n */\nconst cleanInputValues = <TValues extends CmsEntryValues = CmsEntryValues>(\n    model: CmsModel,\n    input: TValues\n) => {\n    return model.fields.reduce<TValues>((acc, field) => {\n        /**\n         * This should never happen, but let's make it sure.\n         * The fix would be for the user to add the fieldId on the field definition.\n         */\n        if (!field.fieldId) {\n            throw new WebinyError(\"Field does not have an fieldId.\", \"MISSING_FIELD_ID\", {\n                field\n            });\n        }\n        const key = field.fieldId as keyof TValues;\n        const value = input[key] as TValues[keyof TValues];\n        /**\n         * We set the default value on create input if value is not defined.\n         */\n        acc[key] = value === undefined ? (getDefaultValue(field) as TValues[keyof TValues]) : value;\n        return acc;\n    }, {} as TValues);\n};\n\ninterface CreateEntryDataParams<TValues extends CmsEntryValues = CmsEntryValues> {\n    model: CmsModel;\n    rawInput: CreateCmsEntryInput<TValues>;\n    options?: CreateCmsEntryOptionsInput;\n    context: CmsContext;\n    getIdentity: () => SecurityIdentity;\n    getTenant: () => Tenant;\n    accessControl: AccessControl;\n}\n\ninterface ICreateEntryDataResponse<TValues extends CmsEntryValues = CmsEntryValues> {\n    entry: CmsEntry<TValues>;\n    input: CreateCmsEntryInput<TValues>;\n}\n\nexport const createEntryData = async <TValues extends CmsEntryValues = CmsEntryValues>({\n    model,\n    rawInput,\n    options,\n    context,\n    getIdentity: getSecurityIdentity,\n    getTenant,\n    accessControl\n}: CreateEntryDataParams<TValues>): Promise<ICreateEntryDataResponse<TValues>> => {\n    const initialValues = cleanInputValues<TValues>(model, rawInput.values || ({} as TValues));\n\n    await validateModelEntryDataOrThrow({\n        context,\n        model,\n        values: initialValues,\n        skipValidators: options?.skipValidators\n    });\n\n    const values = await referenceFieldsMapping<TValues>({\n        context,\n        model,\n        values: initialValues,\n        validateEntries: true\n    });\n\n    const { id, entryId, version } = createEntryId(rawInput);\n\n    /**\n     * There is a possibility that user sends an ID in the input, so we will use that one.\n     * There is no check if the ID is unique or not, that is up to the user.\n     */\n    const currentIdentity = getSecurityIdentity();\n    const currentDateTime = new Date();\n\n    /**\n     * Users can set the initial status of the entry. If so, we need to make\n     * sure they have the required permissions and also that all the fields\n     * are filled in correctly.\n     */\n    const status = rawInput.status || STATUS_DRAFT;\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            const canPublish = await accessControl.canAccessEntry({ model, pw: \"p\" });\n            if (!canPublish) {\n                throw new NotAuthorizedError(`Not allowed to access \"${model.modelId}\" entries.`);\n            }\n        } else if (status === STATUS_UNPUBLISHED) {\n            const canUnpublish = await accessControl.canAccessEntry({ model, pw: \"u\" });\n            if (!canUnpublish) {\n                throw new NotAuthorizedError(`Not allowed to access \"${model.modelId}\" entries.`);\n            }\n        }\n    }\n\n    const locked = status !== STATUS_DRAFT;\n\n    let revisionLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        | \"revisionFirstPublishedOn\"\n        | \"revisionLastPublishedOn\"\n        | \"revisionFirstPublishedBy\"\n        | \"revisionLastPublishedBy\"\n    > = {\n        revisionFirstPublishedOn: null,\n        revisionLastPublishedOn: null,\n        revisionFirstPublishedBy: null,\n        revisionLastPublishedBy: null\n    };\n\n    let entryLevelPublishingMetaFields: Pick<\n        CmsEntry,\n        \"firstPublishedOn\" | \"lastPublishedOn\" | \"firstPublishedBy\" | \"lastPublishedBy\"\n    > = {\n        firstPublishedOn: null,\n        lastPublishedOn: null,\n        firstPublishedBy: null,\n        lastPublishedBy: null\n    };\n\n    if (status === STATUS_PUBLISHED) {\n        revisionLevelPublishingMetaFields = {\n            revisionFirstPublishedOn: getDate(rawInput.revisionFirstPublishedOn, currentDateTime),\n            revisionLastPublishedOn: getDate(rawInput.revisionLastPublishedOn, currentDateTime),\n            revisionFirstPublishedBy: getIdentity(\n                rawInput.revisionFirstPublishedBy,\n                currentIdentity\n            ),\n            revisionLastPublishedBy: getIdentity(rawInput.revisionLastPublishedBy, currentIdentity)\n        };\n\n        entryLevelPublishingMetaFields = {\n            firstPublishedOn: getDate(rawInput.firstPublishedOn, currentDateTime),\n            lastPublishedOn: getDate(rawInput.lastPublishedOn, currentDateTime),\n            firstPublishedBy: getIdentity(rawInput.firstPublishedBy, currentIdentity),\n            lastPublishedBy: getIdentity(rawInput.lastPublishedBy, currentIdentity)\n        };\n    }\n\n    const entry: CmsEntry<TValues> = {\n        tenant: getTenant().id,\n        entryId,\n        id,\n        modelId: model.modelId,\n\n        /**\n         * Entry-level meta fields. 👇\n         */\n        createdOn: getDate(rawInput.createdOn, currentDateTime),\n        modifiedOn: getDate(rawInput.modifiedOn, null),\n        savedOn: getDate(rawInput.savedOn, currentDateTime),\n        deletedOn: getDate(rawInput.deletedOn, null),\n        restoredOn: getDate(rawInput.restoredOn, null),\n        createdBy: getIdentity(rawInput.createdBy, currentIdentity)!,\n        modifiedBy: getIdentity(rawInput.modifiedBy, null),\n        savedBy: getIdentity(rawInput.savedBy, currentIdentity)!,\n        deletedBy: getIdentity(rawInput.deletedBy, null),\n        restoredBy: getIdentity(rawInput.restoredBy, null),\n        ...entryLevelPublishingMetaFields,\n\n        /**\n         * Revision-level meta fields. 👇\n         */\n        revisionCreatedOn: getDate(rawInput.revisionCreatedOn, currentDateTime),\n        revisionModifiedOn: getDate(rawInput.revisionModifiedOn, null),\n        revisionSavedOn: getDate(rawInput.revisionSavedOn, currentDateTime),\n        revisionDeletedOn: getDate(rawInput.revisionDeletedOn, null),\n        revisionRestoredOn: getDate(rawInput.revisionRestoredOn, null),\n        revisionCreatedBy: getIdentity(rawInput.revisionCreatedBy, currentIdentity)!,\n        revisionModifiedBy: getIdentity(rawInput.revisionModifiedBy, null),\n        revisionSavedBy: getIdentity(rawInput.revisionSavedBy, currentIdentity)!,\n        revisionDeletedBy: getIdentity(rawInput.revisionDeletedBy, null),\n        revisionRestoredBy: getIdentity(rawInput.revisionRestoredBy, null),\n        ...revisionLevelPublishingMetaFields,\n\n        version,\n        status,\n        locked,\n        values,\n        location: {\n            folderId:\n                rawInput.location?.folderId || rawInput.wbyAco_location?.folderId || ROOT_FOLDER\n        },\n        system: getSystem({\n            input: rawInput\n        }),\n        live:\n            status === STATUS_PUBLISHED\n                ? {\n                      version\n                  }\n                : null\n    };\n\n    if (status !== STATUS_DRAFT) {\n        if (status === STATUS_PUBLISHED) {\n            const canPublish = await accessControl.canAccessEntry({ model, entry, pw: \"p\" });\n            if (!canPublish) {\n                throw new NotAuthorizedError(`Not allowed to access entry \"${entry.entryId}\".`);\n            }\n        } else if (status === STATUS_UNPUBLISHED) {\n            const canUnpublish = await accessControl.canAccessEntry({ model, entry, pw: \"u\" });\n            if (!canUnpublish) {\n                throw new NotAuthorizedError(`Not allowed to access entry \"${entry.entryId}\".`);\n            }\n        }\n    }\n\n    return {\n        entry,\n        input: {\n            ...rawInput,\n            values: structuredClone(values)\n        }\n    };\n};\n"],"mappings":"AASA,SAASA,OAAO;AAChB,SAASC,WAAW;AACpB,OAAOC,WAAW,MAAM,eAAe;AACvC,SAASC,6BAA6B;AACtC,SAASC,sBAAsB;AAC/B,SAASC,gBAAgB,EAAEC,KAAK,QAAQ,eAAe;AACvD,SAASC,YAAY,EAAEC,gBAAgB,EAAEC,kBAAkB;AAC3D,SAASC,WAAW;AAEpB,SAASC,kBAAkB;AAC3B,SAASC,SAAS;AAMlB;AACA;AACA;AACA,MAAMC,mBAAmB,GAAGA,CAACC,KAAoB,EAAEC,KAAmB,KAAmB;EACrF,QAAQD,KAAK,CAACE,IAAI;IACd,KAAK,SAAS;MACV,OAAOC,OAAO,CAACF,KAAK,CAAC;IACzB,KAAK,QAAQ;MACT,OAAOG,MAAM,CAACH,KAAK,CAAC;IACxB;MACI,OAAOA,KAAK;EACpB;AACJ,CAAC;AAED,MAAMI,eAAe,GAAIL,KAAoB,IAAkD;EAC3F,MAAM;IAAEM,QAAQ;IAAEC;EAAK,CAAC,GAAGP,KAAK;EAChC,IAAIM,QAAQ,IAAIA,QAAQ,CAACE,YAAY,KAAKC,SAAS,EAAE;IACjD,OAAOV,mBAAmB,CAACC,KAAK,EAAEM,QAAQ,CAACE,YAAY,CAAC;EAC5D;EACA,MAAM;IAAEE;EAAiB,CAAC,GAAGV,KAAK;EAClC,IACI,CAACU,gBAAgB,IACjB,CAACA,gBAAgB,CAACC,OAAO,IACzBC,KAAK,CAACC,OAAO,CAACH,gBAAgB,CAACI,MAAM,CAAC,KAAK,KAAK,EAClD;IACE,OAAOL,SAAS;EACpB;EACA,IAAI,CAACF,IAAI,EAAE;IACP,MAAMQ,aAAa,GAAGL,gBAAgB,CAACI,MAAM,CAACE,IAAI,CAACf,KAAK,IAAI;MACxD,OAAO,CAAC,CAACA,KAAK,CAACgB,QAAQ;IAC3B,CAAC,CAAC;IACF,IAAIF,aAAa,EAAE;MACf,OAAOhB,mBAAmB,CAACC,KAAK,EAAEe,aAAa,CAACd,KAAK,CAAC;IAC1D;IACA,OAAOQ,SAAS;EACpB;EACA,OAAOC,gBAAgB,CAACI,MAAM,CACzBI,MAAM,CAAC,CAAC;IAAED;EAAS,CAAC,KAAK,CAAC,CAACA,QAAQ,CAAC,CACpCE,GAAG,CAAC,CAAC;IAAElB;EAAM,CAAC,KAAK;IAChB,OAAOF,mBAAmB,CAACC,KAAK,EAAEC,KAAK,CAAC;EAC5C,CAAC,CAAC;AACV,CAAC;AAED,MAAMmB,aAAa,GAAIC,KAA0B,IAAK;EAClD,IAAIC,OAAO,GAAG9B,KAAK,CAAC,CAAC;EACrB,IAAI6B,KAAK,CAACE,EAAE,EAAE;IACV,IAAIF,KAAK,CAACE,EAAE,CAACC,KAAK,CAAC,8CAA8C,CAAC,KAAK,IAAI,EAAE;MACzE,MAAM,IAAIpC,WAAW,CACjB,sHAAsH,EACtH,YAAY,EACZ;QACImC,EAAE,EAAEF,KAAK,CAACE;MACd,CACJ,CAAC;IACL;IACAD,OAAO,GAAGD,KAAK,CAACE,EAAE;EACtB;EACA,MAAME,OAAO,GAAG,CAAC;EACjB,OAAO;IACHH,OAAO;IACPG,OAAO;IACPF,EAAE,EAAEhC,gBAAgB,CAAC;MACjBgC,EAAE,EAAED,OAAO;MACXG;IACJ,CAAC;EACL,CAAC;AACL,CAAC;;AAED;AACA;AACA;AACA,MAAMC,gBAAgB,GAAGA,CACrBC,KAAe,EACfN,KAAc,KACb;EACD,OAAOM,KAAK,CAACC,MAAM,CAACC,MAAM,CAAU,CAACC,GAAG,EAAE9B,KAAK,KAAK;IAChD;AACR;AACA;AACA;IACQ,IAAI,CAACA,KAAK,CAAC+B,OAAO,EAAE;MAChB,MAAM,IAAI3C,WAAW,CAAC,iCAAiC,EAAE,kBAAkB,EAAE;QACzEY;MACJ,CAAC,CAAC;IACN;IACA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC+B,OAAwB;IAC1C,MAAM9B,KAAK,GAAGoB,KAAK,CAACW,GAAG,CAA2B;IAClD;AACR;AACA;IACQF,GAAG,CAACE,GAAG,CAAC,GAAG/B,KAAK,KAAKQ,SAAS,GAAIJ,eAAe,CAACL,KAAK,CAAC,GAA8BC,KAAK;IAC3F,OAAO6B,GAAG;EACd,CAAC,EAAE,CAAC,CAAY,CAAC;AACrB,CAAC;AAiBD,OAAO,MAAMG,eAAe,GAAG,MAAAA,CAAwD;EACnFN,KAAK;EACLO,QAAQ;EACRC,OAAO;EACPC,OAAO;EACPxC,WAAW,EAAEyC,mBAAmB;EAChCC,SAAS;EACTC;AAC4B,CAAC,KAAiD;EAC9E,MAAMC,aAAa,GAAGd,gBAAgB,CAAUC,KAAK,EAAEO,QAAQ,CAACpB,MAAM,IAAK,CAAC,CAAa,CAAC;EAE1F,MAAMzB,6BAA6B,CAAC;IAChC+C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBC,cAAc,EAAEN,OAAO,EAAEM;EAC7B,CAAC,CAAC;EAEF,MAAM3B,MAAM,GAAG,MAAMxB,sBAAsB,CAAU;IACjD8C,OAAO;IACPT,KAAK;IACLb,MAAM,EAAE0B,aAAa;IACrBE,eAAe,EAAE;EACrB,CAAC,CAAC;EAEF,MAAM;IAAEnB,EAAE;IAAED,OAAO;IAAEG;EAAQ,CAAC,GAAGL,aAAa,CAACc,QAAQ,CAAC;;EAExD;AACJ;AACA;AACA;EACI,MAAMS,eAAe,GAAGN,mBAAmB,CAAC,CAAC;EAC7C,MAAMO,eAAe,GAAG,IAAIC,IAAI,CAAC,CAAC;;EAElC;AACJ;AACA;AACA;AACA;EACI,MAAMC,MAAM,GAAGZ,QAAQ,CAACY,MAAM,IAAIrD,YAAY;EAC9C,IAAIqD,MAAM,KAAKrD,YAAY,EAAE;IACzB,IAAIqD,MAAM,KAAKpD,gBAAgB,EAAE;MAC7B,MAAMqD,UAAU,GAAG,MAAMR,aAAa,CAACS,cAAc,CAAC;QAAErB,KAAK;QAAEsB,EAAE,EAAE;MAAI,CAAC,CAAC;MACzE,IAAI,CAACF,UAAU,EAAE;QACb,MAAM,IAAIlD,kBAAkB,CAAC,0BAA0B8B,KAAK,CAACuB,OAAO,YAAY,CAAC;MACrF;IACJ,CAAC,MAAM,IAAIJ,MAAM,KAAKnD,kBAAkB,EAAE;MACtC,MAAMwD,YAAY,GAAG,MAAMZ,aAAa,CAACS,cAAc,CAAC;QAAErB,KAAK;QAAEsB,EAAE,EAAE;MAAI,CAAC,CAAC;MAC3E,IAAI,CAACE,YAAY,EAAE;QACf,MAAM,IAAItD,kBAAkB,CAAC,0BAA0B8B,KAAK,CAACuB,OAAO,YAAY,CAAC;MACrF;IACJ;EACJ;EAEA,MAAME,MAAM,GAAGN,MAAM,KAAKrD,YAAY;EAEtC,IAAI4D,iCAMH,GAAG;IACAC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE,IAAI;IAC7BC,wBAAwB,EAAE,IAAI;IAC9BC,uBAAuB,EAAE;EAC7B,CAAC;EAED,IAAIC,8BAGH,GAAG;IACAC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE,IAAI;IACrBC,gBAAgB,EAAE,IAAI;IACtBC,eAAe,EAAE;EACrB,CAAC;EAED,IAAIhB,MAAM,KAAKpD,gBAAgB,EAAE;IAC7B2D,iCAAiC,GAAG;MAChCC,wBAAwB,EAAEpE,OAAO,CAACgD,QAAQ,CAACoB,wBAAwB,EAAEV,eAAe,CAAC;MACrFW,uBAAuB,EAAErE,OAAO,CAACgD,QAAQ,CAACqB,uBAAuB,EAAEX,eAAe,CAAC;MACnFY,wBAAwB,EAAE5D,WAAW,CACjCsC,QAAQ,CAACsB,wBAAwB,EACjCb,eACJ,CAAC;MACDc,uBAAuB,EAAE7D,WAAW,CAACsC,QAAQ,CAACuB,uBAAuB,EAAEd,eAAe;IAC1F,CAAC;IAEDe,8BAA8B,GAAG;MAC7BC,gBAAgB,EAAEzE,OAAO,CAACgD,QAAQ,CAACyB,gBAAgB,EAAEf,eAAe,CAAC;MACrEgB,eAAe,EAAE1E,OAAO,CAACgD,QAAQ,CAAC0B,eAAe,EAAEhB,eAAe,CAAC;MACnEiB,gBAAgB,EAAEjE,WAAW,CAACsC,QAAQ,CAAC2B,gBAAgB,EAAElB,eAAe,CAAC;MACzEmB,eAAe,EAAElE,WAAW,CAACsC,QAAQ,CAAC4B,eAAe,EAAEnB,eAAe;IAC1E,CAAC;EACL;EAEA,MAAMoB,KAAwB,GAAG;IAC7BC,MAAM,EAAE1B,SAAS,CAAC,CAAC,CAACf,EAAE;IACtBD,OAAO;IACPC,EAAE;IACF2B,OAAO,EAAEvB,KAAK,CAACuB,OAAO;IAEtB;AACR;AACA;IACQe,SAAS,EAAE/E,OAAO,CAACgD,QAAQ,CAAC+B,SAAS,EAAErB,eAAe,CAAC;IACvDsB,UAAU,EAAEhF,OAAO,CAACgD,QAAQ,CAACgC,UAAU,EAAE,IAAI,CAAC;IAC9CC,OAAO,EAAEjF,OAAO,CAACgD,QAAQ,CAACiC,OAAO,EAAEvB,eAAe,CAAC;IACnDwB,SAAS,EAAElF,OAAO,CAACgD,QAAQ,CAACkC,SAAS,EAAE,IAAI,CAAC;IAC5CC,UAAU,EAAEnF,OAAO,CAACgD,QAAQ,CAACmC,UAAU,EAAE,IAAI,CAAC;IAC9CC,SAAS,EAAE1E,WAAW,CAACsC,QAAQ,CAACoC,SAAS,EAAE3B,eAAe,CAAE;IAC5D4B,UAAU,EAAE3E,WAAW,CAACsC,QAAQ,CAACqC,UAAU,EAAE,IAAI,CAAC;IAClDC,OAAO,EAAE5E,WAAW,CAACsC,QAAQ,CAACsC,OAAO,EAAE7B,eAAe,CAAE;IACxD8B,SAAS,EAAE7E,WAAW,CAACsC,QAAQ,CAACuC,SAAS,EAAE,IAAI,CAAC;IAChDC,UAAU,EAAE9E,WAAW,CAACsC,QAAQ,CAACwC,UAAU,EAAE,IAAI,CAAC;IAClD,GAAGhB,8BAA8B;IAEjC;AACR;AACA;IACQiB,iBAAiB,EAAEzF,OAAO,CAACgD,QAAQ,CAACyC,iBAAiB,EAAE/B,eAAe,CAAC;IACvEgC,kBAAkB,EAAE1F,OAAO,CAACgD,QAAQ,CAAC0C,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,eAAe,EAAE3F,OAAO,CAACgD,QAAQ,CAAC2C,eAAe,EAAEjC,eAAe,CAAC;IACnEkC,iBAAiB,EAAE5F,OAAO,CAACgD,QAAQ,CAAC4C,iBAAiB,EAAE,IAAI,CAAC;IAC5DC,kBAAkB,EAAE7F,OAAO,CAACgD,QAAQ,CAAC6C,kBAAkB,EAAE,IAAI,CAAC;IAC9DC,iBAAiB,EAAEpF,WAAW,CAACsC,QAAQ,CAAC8C,iBAAiB,EAAErC,eAAe,CAAE;IAC5EsC,kBAAkB,EAAErF,WAAW,CAACsC,QAAQ,CAAC+C,kBAAkB,EAAE,IAAI,CAAC;IAClEC,eAAe,EAAEtF,WAAW,CAACsC,QAAQ,CAACgD,eAAe,EAAEvC,eAAe,CAAE;IACxEwC,iBAAiB,EAAEvF,WAAW,CAACsC,QAAQ,CAACiD,iBAAiB,EAAE,IAAI,CAAC;IAChEC,kBAAkB,EAAExF,WAAW,CAACsC,QAAQ,CAACkD,kBAAkB,EAAE,IAAI,CAAC;IAClE,GAAG/B,iCAAiC;IAEpC5B,OAAO;IACPqB,MAAM;IACNM,MAAM;IACNtC,MAAM;IACNuE,QAAQ,EAAE;MACNC,QAAQ,EACJpD,QAAQ,CAACmD,QAAQ,EAAEC,QAAQ,IAAIpD,QAAQ,CAACqD,eAAe,EAAED,QAAQ,IAAInG;IAC7E,CAAC;IACDqG,MAAM,EAAE1F,SAAS,CAAC;MACduB,KAAK,EAAEa;IACX,CAAC,CAAC;IACFuD,IAAI,EACA3C,MAAM,KAAKpD,gBAAgB,GACrB;MACI+B;IACJ,CAAC,GACD;EACd,CAAC;EAED,IAAIqB,MAAM,KAAKrD,YAAY,EAAE;IACzB,IAAIqD,MAAM,KAAKpD,gBAAgB,EAAE;MAC7B,MAAMqD,UAAU,GAAG,MAAMR,aAAa,CAACS,cAAc,CAAC;QAAErB,KAAK;QAAEoC,KAAK;QAAEd,EAAE,EAAE;MAAI,CAAC,CAAC;MAChF,IAAI,CAACF,UAAU,EAAE;QACb,MAAM,IAAIlD,kBAAkB,CAAC,gCAAgCkE,KAAK,CAACzC,OAAO,IAAI,CAAC;MACnF;IACJ,CAAC,MAAM,IAAIwB,MAAM,KAAKnD,kBAAkB,EAAE;MACtC,MAAMwD,YAAY,GAAG,MAAMZ,aAAa,CAACS,cAAc,CAAC;QAAErB,KAAK;QAAEoC,KAAK;QAAEd,EAAE,EAAE;MAAI,CAAC,CAAC;MAClF,IAAI,CAACE,YAAY,EAAE;QACf,MAAM,IAAItD,kBAAkB,CAAC,gCAAgCkE,KAAK,CAACzC,OAAO,IAAI,CAAC;MACnF;IACJ;EACJ;EAEA,OAAO;IACHyC,KAAK;IACL1C,KAAK,EAAE;MACH,GAAGa,QAAQ;MACXpB,MAAM,EAAE4E,eAAe,CAAC5E,MAAM;IAClC;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/crud/contentEntry/entryDataFactories/createEntryRevisionFromData.js

@@ -6,6 +6,7 @@ import { referenceFieldsMapping } from "../referenceFieldsMapping.js";
 import { createIdentifier, parseIdentifier } from "@webiny/utils";
 import WebinyError from "@webiny/error";
 import { STATUS_DRAFT, STATUS_PUBLISHED, STATUS_UNPUBLISHED } from "./statuses.js";
+import { NotAuthorizedError } from "../../../utils/errors.js";
 import { getSystem } from "./system.js";
 export const createEntryRevisionFromData = async ({
   sourceId,
@@ -56,16 +57,21 @@ export const createEntryRevisionFromData = async ({
   const status = rawInput.status || STATUS_DRAFT;
   if (status !== STATUS_DRAFT) {
     if (status === STATUS_PUBLISHED) {
-      await accessControl.ensureCanAccessEntry({
+      const canPublish = await accessControl.canAccessEntry({
         model,
         pw: "p"
       });
+      if (!canPublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     } else if (status === STATUS_UNPUBLISHED) {
-      // If setting the status other than draft, we have to check if the user has permissions to publish.
-      await accessControl.ensureCanAccessEntry({
+      const canUnpublish = await accessControl.canAccessEntry({
         model,
         pw: "u"
       });
+      if (!canUnpublish) {
+        throw new NotAuthorizedError(`Not allowed to access "${model.modelId}" entries.`);
+      }
     }
   }
   const locked = status !== STATUS_DRAFT;