@webiny/api-website-builder 0.0.0-unstable.ac6ebf63c6 → 0.0.0-unstable.c27f4d8a31

package/features/pages/GetPageById/GetPageByIdUseCase.d.ts

@@ -1,7 +1,9 @@
 import { GetPageByIdUseCase as UseCaseAbstraction, GetPageByIdRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class GetPageByIdUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private repository;
-    constructor(repository: GetPageByIdRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, repository: GetPageByIdRepository.Interface);
     execute(id: string): UseCaseAbstraction.Return;
 }
 export declare const GetPageByIdUseCase: typeof GetPageByIdUseCaseImpl & {

package/features/pages/GetPageById/GetPageByIdUseCase.js

@@ -1,15 +1,31 @@
+import { Result } from "@webiny/feature/api";
 import { GetPageByIdUseCase as UseCaseAbstraction, GetPageByIdRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class GetPageByIdUseCaseImpl {
-  constructor(repository) {
+  constructor(permissions, repository) {
+    this.permissions = permissions;
     this.repository = repository;
   }
   async execute(id) {
-    return this.repository.execute(id);
+    const hasPermission = await this.permissions.canRead("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    const result = await this.repository.execute(id);
+    if (result.isFail()) {
+      return result;
+    }
+    const canAccess = await this.permissions.canAccess("page", result.value);
+    if (!canAccess) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    return result;
   }
 }
 export const GetPageByIdUseCase = UseCaseAbstraction.createImplementation({
   implementation: GetPageByIdUseCaseImpl,
-  dependencies: [GetPageByIdRepository]
+  dependencies: [WbPermissions.Abstraction, GetPageByIdRepository]
 });
 
 //# sourceMappingURL=GetPageByIdUseCase.js.map

package/features/pages/GetPageById/GetPageByIdUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["GetPageByIdUseCase","UseCaseAbstraction","GetPageByIdRepository","GetPageByIdUseCaseImpl","constructor","repository","execute","id","createImplementation","implementation","dependencies"],"sources":["GetPageByIdUseCase.ts"],"sourcesContent":["import { GetPageByIdUseCase as UseCaseAbstraction, GetPageByIdRepository } from \"./abstractions.js\";\n\nclass GetPageByIdUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(private repository: GetPageByIdRepository.Interface) {}\n\n    async execute(id: string): UseCaseAbstraction.Return {\n        return this.repository.execute(id);\n    }\n}\n\nexport const GetPageByIdUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageByIdUseCaseImpl,\n    dependencies: [GetPageByIdRepository]\n});\n"],"mappings":"AAAA,SAASA,kBAAkB,IAAIC,kBAAkB,EAAEC,qBAAqB;AAExE,MAAMC,sBAAsB,CAAyC;EACjEC,WAAWA,CAASC,UAA2C,EAAE;IAAA,KAA7CA,UAA2C,GAA3CA,UAA2C;EAAG;EAElE,MAAMC,OAAOA,CAACC,EAAU,EAA6B;IACjD,OAAO,IAAI,CAACF,UAAU,CAACC,OAAO,CAACC,EAAE,CAAC;EACtC;AACJ;AAEA,OAAO,MAAMP,kBAAkB,GAAGC,kBAAkB,CAACO,oBAAoB,CAAC;EACtEC,cAAc,EAAEN,sBAAsB;EACtCO,YAAY,EAAE,CAACR,qBAAqB;AACxC,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","GetPageByIdUseCase","UseCaseAbstraction","GetPageByIdRepository","WbPermissions","PageNotAuthorizedError","GetPageByIdUseCaseImpl","constructor","permissions","repository","execute","id","hasPermission","canRead","fail","result","isFail","canAccess","value","createImplementation","implementation","dependencies","Abstraction"],"sources":["GetPageByIdUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetPageByIdUseCase as UseCaseAbstraction, GetPageByIdRepository } from \"./abstractions.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass GetPageByIdUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private repository: GetPageByIdRepository.Interface\n    ) {}\n\n    async execute(id: string): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canRead(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        const result = await this.repository.execute(id);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const canAccess = await this.permissions.canAccess(\"page\", result.value);\n        if (!canAccess) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        return result;\n    }\n}\n\nexport const GetPageByIdUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageByIdUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, GetPageByIdRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,kBAAkB,IAAIC,kBAAkB,EAAEC,qBAAqB;AACxE,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,sBAAsB,CAAyC;EACjEC,WAAWA,CACCC,WAAoC,EACpCC,UAA2C,EACrD;IAAA,KAFUD,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,UAA2C,GAA3CA,UAA2C;EACpD;EAEH,MAAMC,OAAOA,CAACC,EAAU,EAA6B;IACjD,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACK,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOZ,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,MAAMU,MAAM,GAAG,MAAM,IAAI,CAACN,UAAU,CAACC,OAAO,CAACC,EAAE,CAAC;IAEhD,IAAII,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,SAAS,GAAG,MAAM,IAAI,CAACT,WAAW,CAACS,SAAS,CAAC,MAAM,EAAEF,MAAM,CAACG,KAAK,CAAC;IACxE,IAAI,CAACD,SAAS,EAAE;MACZ,OAAOjB,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,OAAOU,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMd,kBAAkB,GAAGC,kBAAkB,CAACiB,oBAAoB,CAAC;EACtEC,cAAc,EAAEd,sBAAsB;EACtCe,YAAY,EAAE,CAACjB,aAAa,CAACkB,WAAW,EAAEnB,qBAAqB;AACnE,CAAC,CAAC","ignoreList":[]}

package/features/pages/GetPageById/abstractions.d.ts

@@ -1,6 +1,6 @@
 import type { Result } from "@webiny/feature/api";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import type { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import type { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 /**
  * GetPageById repository interface
  */
@@ -25,6 +25,7 @@ export interface IGetPageByIdUseCase {
     execute(id: string): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IGetPageByIdUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }

package/features/pages/GetPageById/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","GetPageByIdRepository","GetPageByIdUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PageNotFoundError, PagePersistenceError } from \"~/domain/page/errors.js\";\n\n/**\n * GetPageById repository interface\n */\nexport interface IGetPageByIdRepository {\n    execute(id: string): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IGetPageByIdRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageByIdRepositoryErrors[keyof IGetPageByIdRepositoryErrors];\n\nexport const GetPageByIdRepository = createAbstraction<IGetPageByIdRepository>(\n    \"Wb/GetPageByIdRepository\"\n);\n\nexport namespace GetPageByIdRepository {\n    export type Interface = IGetPageByIdRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n}\n\n/**\n * GetPageById use case interface\n */\nexport interface IGetPageByIdUseCase {\n    execute(id: string): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IGetPageByIdUseCaseErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageByIdUseCaseErrors[keyof IGetPageByIdUseCaseErrors];\n\nexport const GetPageByIdUseCase = createAbstraction<IGetPageByIdUseCase>(\"Wb/GetPageByIdUseCase\");\n\nexport namespace GetPageByIdUseCase {\n    export type Interface = IGetPageByIdUseCase;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAKvD;AACA;AACA;;AAYA,OAAO,MAAMC,qBAAqB,GAAGD,iBAAiB,CAClD,0BACJ,CAAC;;AAQD;AACA;AACA;;AAYA,OAAO,MAAME,kBAAkB,GAAGF,iBAAiB,CAAsB,uBAAuB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","GetPageByIdRepository","GetPageByIdUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n/**\n * GetPageById repository interface\n */\nexport interface IGetPageByIdRepository {\n    execute(id: string): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IGetPageByIdRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageByIdRepositoryErrors[keyof IGetPageByIdRepositoryErrors];\n\nexport const GetPageByIdRepository = createAbstraction<IGetPageByIdRepository>(\n    \"Wb/GetPageByIdRepository\"\n);\n\nexport namespace GetPageByIdRepository {\n    export type Interface = IGetPageByIdRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n}\n\n/**\n * GetPageById use case interface\n */\nexport interface IGetPageByIdUseCase {\n    execute(id: string): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IGetPageByIdUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageByIdUseCaseErrors[keyof IGetPageByIdUseCaseErrors];\n\nexport const GetPageByIdUseCase = createAbstraction<IGetPageByIdUseCase>(\"Wb/GetPageByIdUseCase\");\n\nexport namespace GetPageByIdUseCase {\n    export type Interface = IGetPageByIdUseCase;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AASvD;AACA;AACA;;AAYA,OAAO,MAAMC,qBAAqB,GAAGD,iBAAiB,CAClD,0BACJ,CAAC;;AAQD;AACA;AACA;;AAaA,OAAO,MAAME,kBAAkB,GAAGF,iBAAiB,CAAsB,uBAAuB,CAAC","ignoreList":[]}

package/features/pages/GetPageByPath/GetPageByPathUseCase.d.ts

@@ -1,7 +1,9 @@
 import { GetPageByPathUseCase as UseCaseAbstraction, GetPageByPathRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class GetPageByPathUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private repository;
-    constructor(repository: GetPageByPathRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, repository: GetPageByPathRepository.Interface);
     execute(path: string): UseCaseAbstraction.Return;
 }
 export declare const GetPageByPathUseCase: typeof GetPageByPathUseCaseImpl & {

package/features/pages/GetPageByPath/GetPageByPathUseCase.js

@@ -1,15 +1,31 @@
+import { Result } from "@webiny/feature/api";
 import { GetPageByPathUseCase as UseCaseAbstraction, GetPageByPathRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class GetPageByPathUseCaseImpl {
-  constructor(repository) {
+  constructor(permissions, repository) {
+    this.permissions = permissions;
     this.repository = repository;
   }
   async execute(path) {
-    return this.repository.execute(path);
+    const hasPermission = await this.permissions.canRead("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    const result = await this.repository.execute(path);
+    if (result.isFail()) {
+      return result;
+    }
+    const canAccess = await this.permissions.canAccess("page", result.value);
+    if (!canAccess) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    return result;
   }
 }
 export const GetPageByPathUseCase = UseCaseAbstraction.createImplementation({
   implementation: GetPageByPathUseCaseImpl,
-  dependencies: [GetPageByPathRepository]
+  dependencies: [WbPermissions.Abstraction, GetPageByPathRepository]
 });
 
 //# sourceMappingURL=GetPageByPathUseCase.js.map

package/features/pages/GetPageByPath/GetPageByPathUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["GetPageByPathUseCase","UseCaseAbstraction","GetPageByPathRepository","GetPageByPathUseCaseImpl","constructor","repository","execute","path","createImplementation","implementation","dependencies"],"sources":["GetPageByPathUseCase.ts"],"sourcesContent":["import {\n    GetPageByPathUseCase as UseCaseAbstraction,\n    GetPageByPathRepository\n} from \"./abstractions.js\";\n\nclass GetPageByPathUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(private repository: GetPageByPathRepository.Interface) {}\n\n    async execute(path: string): UseCaseAbstraction.Return {\n        return this.repository.execute(path);\n    }\n}\n\nexport const GetPageByPathUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageByPathUseCaseImpl,\n    dependencies: [GetPageByPathRepository]\n});\n"],"mappings":"AAAA,SACIA,oBAAoB,IAAIC,kBAAkB,EAC1CC,uBAAuB;AAG3B,MAAMC,wBAAwB,CAAyC;EACnEC,WAAWA,CAASC,UAA6C,EAAE;IAAA,KAA/CA,UAA6C,GAA7CA,UAA6C;EAAG;EAEpE,MAAMC,OAAOA,CAACC,IAAY,EAA6B;IACnD,OAAO,IAAI,CAACF,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;EACxC;AACJ;AAEA,OAAO,MAAMP,oBAAoB,GAAGC,kBAAkB,CAACO,oBAAoB,CAAC;EACxEC,cAAc,EAAEN,wBAAwB;EACxCO,YAAY,EAAE,CAACR,uBAAuB;AAC1C,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","GetPageByPathUseCase","UseCaseAbstraction","GetPageByPathRepository","WbPermissions","PageNotAuthorizedError","GetPageByPathUseCaseImpl","constructor","permissions","repository","execute","path","hasPermission","canRead","fail","result","isFail","canAccess","value","createImplementation","implementation","dependencies","Abstraction"],"sources":["GetPageByPathUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    GetPageByPathUseCase as UseCaseAbstraction,\n    GetPageByPathRepository\n} from \"./abstractions.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass GetPageByPathUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private repository: GetPageByPathRepository.Interface\n    ) {}\n\n    async execute(path: string): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canRead(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        const result = await this.repository.execute(path);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const canAccess = await this.permissions.canAccess(\"page\", result.value);\n        if (!canAccess) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        return result;\n    }\n}\n\nexport const GetPageByPathUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageByPathUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, GetPageByPathRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,oBAAoB,IAAIC,kBAAkB,EAC1CC,uBAAuB;AAE3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,wBAAwB,CAAyC;EACnEC,WAAWA,CACCC,WAAoC,EACpCC,UAA6C,EACvD;IAAA,KAFUD,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,UAA6C,GAA7CA,UAA6C;EACtD;EAEH,MAAMC,OAAOA,CAACC,IAAY,EAA6B;IACnD,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACK,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOZ,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,MAAMU,MAAM,GAAG,MAAM,IAAI,CAACN,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;IAElD,IAAII,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,SAAS,GAAG,MAAM,IAAI,CAACT,WAAW,CAACS,SAAS,CAAC,MAAM,EAAEF,MAAM,CAACG,KAAK,CAAC;IACxE,IAAI,CAACD,SAAS,EAAE;MACZ,OAAOjB,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,OAAOU,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMd,oBAAoB,GAAGC,kBAAkB,CAACiB,oBAAoB,CAAC;EACxEC,cAAc,EAAEd,wBAAwB;EACxCe,YAAY,EAAE,CAACjB,aAAa,CAACkB,WAAW,EAAEnB,uBAAuB;AACrE,CAAC,CAAC","ignoreList":[]}

package/features/pages/GetPageByPath/abstractions.d.ts

@@ -1,6 +1,6 @@
 import type { Result } from "@webiny/feature/api";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import type { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import type { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 /**
  * GetPageByPath repository interface
  */
@@ -25,6 +25,7 @@ export interface IGetPageByPathUseCase {
     execute(path: string): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IGetPageByPathUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }

package/features/pages/GetPageByPath/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","GetPageByPathRepository","GetPageByPathUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PageNotFoundError, PagePersistenceError } from \"~/domain/page/errors.js\";\n\n/**\n * GetPageByPath repository interface\n */\nexport interface IGetPageByPathRepository {\n    execute(path: string): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IGetPageByPathRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageByPathRepositoryErrors[keyof IGetPageByPathRepositoryErrors];\n\nexport const GetPageByPathRepository = createAbstraction<IGetPageByPathRepository>(\n    \"Wb/GetPageByPathRepository\"\n);\n\nexport namespace GetPageByPathRepository {\n    export type Interface = IGetPageByPathRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n}\n\n/**\n * GetPageByPath use case interface\n */\nexport interface IGetPageByPathUseCase {\n    execute(path: string): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IGetPageByPathUseCaseErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageByPathUseCaseErrors[keyof IGetPageByPathUseCaseErrors];\n\nexport const GetPageByPathUseCase =\n    createAbstraction<IGetPageByPathUseCase>(\"Wb/GetPageByPathUseCase\");\n\nexport namespace GetPageByPathUseCase {\n    export type Interface = IGetPageByPathUseCase;\n    export type Error = UseCaseError;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAKvD;AACA;AACA;;AAYA,OAAO,MAAMC,uBAAuB,GAAGD,iBAAiB,CACpD,4BACJ,CAAC;;AAQD;AACA;AACA;;AAYA,OAAO,MAAME,oBAAoB,GAC7BF,iBAAiB,CAAwB,yBAAyB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","GetPageByPathRepository","GetPageByPathUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n/**\n * GetPageByPath repository interface\n */\nexport interface IGetPageByPathRepository {\n    execute(path: string): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IGetPageByPathRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageByPathRepositoryErrors[keyof IGetPageByPathRepositoryErrors];\n\nexport const GetPageByPathRepository = createAbstraction<IGetPageByPathRepository>(\n    \"Wb/GetPageByPathRepository\"\n);\n\nexport namespace GetPageByPathRepository {\n    export type Interface = IGetPageByPathRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n}\n\n/**\n * GetPageByPath use case interface\n */\nexport interface IGetPageByPathUseCase {\n    execute(path: string): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IGetPageByPathUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageByPathUseCaseErrors[keyof IGetPageByPathUseCaseErrors];\n\nexport const GetPageByPathUseCase =\n    createAbstraction<IGetPageByPathUseCase>(\"Wb/GetPageByPathUseCase\");\n\nexport namespace GetPageByPathUseCase {\n    export type Interface = IGetPageByPathUseCase;\n    export type Error = UseCaseError;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AASvD;AACA;AACA;;AAYA,OAAO,MAAMC,uBAAuB,GAAGD,iBAAiB,CACpD,4BACJ,CAAC;;AAQD;AACA;AACA;;AAaA,OAAO,MAAME,oBAAoB,GAC7BF,iBAAiB,CAAwB,yBAAyB,CAAC","ignoreList":[]}

package/features/pages/GetPageRevisions/GetPageRevisionsUseCase.d.ts

@@ -1,7 +1,9 @@
 import { GetPageRevisionsUseCase as UseCaseAbstraction, GetPageRevisionsRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class GetPageRevisionsUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private repository;
-    constructor(repository: GetPageRevisionsRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, repository: GetPageRevisionsRepository.Interface);
     execute(entryId: string): UseCaseAbstraction.Return;
 }
 export declare const GetPageRevisionsUseCase: typeof GetPageRevisionsUseCaseImpl & {

package/features/pages/GetPageRevisions/GetPageRevisionsUseCase.js

@@ -1,15 +1,34 @@
+import { Result } from "@webiny/feature/api";
 import { GetPageRevisionsUseCase as UseCaseAbstraction, GetPageRevisionsRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class GetPageRevisionsUseCaseImpl {
-  constructor(repository) {
+  constructor(permissions, repository) {
+    this.permissions = permissions;
     this.repository = repository;
   }
   async execute(entryId) {
-    return this.repository.execute(entryId);
+    const hasPermission = await this.permissions.canRead("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    const result = await this.repository.execute(entryId);
+    if (result.isFail()) {
+      return result;
+    }
+    const pages = result.value;
+    if (pages.length > 0) {
+      const canAccess = await this.permissions.canAccess("page", pages[0]);
+      if (!canAccess) {
+        return Result.fail(new PageNotAuthorizedError());
+      }
+    }
+    return result;
   }
 }
 export const GetPageRevisionsUseCase = UseCaseAbstraction.createImplementation({
   implementation: GetPageRevisionsUseCaseImpl,
-  dependencies: [GetPageRevisionsRepository]
+  dependencies: [WbPermissions.Abstraction, GetPageRevisionsRepository]
 });
 
 //# sourceMappingURL=GetPageRevisionsUseCase.js.map

package/features/pages/GetPageRevisions/GetPageRevisionsUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["GetPageRevisionsUseCase","UseCaseAbstraction","GetPageRevisionsRepository","GetPageRevisionsUseCaseImpl","constructor","repository","execute","entryId","createImplementation","implementation","dependencies"],"sources":["GetPageRevisionsUseCase.ts"],"sourcesContent":["import {\n    GetPageRevisionsUseCase as UseCaseAbstraction,\n    GetPageRevisionsRepository\n} from \"./abstractions.js\";\n\nclass GetPageRevisionsUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(private repository: GetPageRevisionsRepository.Interface) {}\n\n    async execute(entryId: string): UseCaseAbstraction.Return {\n        return this.repository.execute(entryId);\n    }\n}\n\nexport const GetPageRevisionsUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageRevisionsUseCaseImpl,\n    dependencies: [GetPageRevisionsRepository]\n});\n"],"mappings":"AAAA,SACIA,uBAAuB,IAAIC,kBAAkB,EAC7CC,0BAA0B;AAG9B,MAAMC,2BAA2B,CAAyC;EACtEC,WAAWA,CAASC,UAAgD,EAAE;IAAA,KAAlDA,UAAgD,GAAhDA,UAAgD;EAAG;EAEvE,MAAMC,OAAOA,CAACC,OAAe,EAA6B;IACtD,OAAO,IAAI,CAACF,UAAU,CAACC,OAAO,CAACC,OAAO,CAAC;EAC3C;AACJ;AAEA,OAAO,MAAMP,uBAAuB,GAAGC,kBAAkB,CAACO,oBAAoB,CAAC;EAC3EC,cAAc,EAAEN,2BAA2B;EAC3CO,YAAY,EAAE,CAACR,0BAA0B;AAC7C,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","GetPageRevisionsUseCase","UseCaseAbstraction","GetPageRevisionsRepository","WbPermissions","PageNotAuthorizedError","GetPageRevisionsUseCaseImpl","constructor","permissions","repository","execute","entryId","hasPermission","canRead","fail","result","isFail","pages","value","length","canAccess","createImplementation","implementation","dependencies","Abstraction"],"sources":["GetPageRevisionsUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    GetPageRevisionsUseCase as UseCaseAbstraction,\n    GetPageRevisionsRepository\n} from \"./abstractions.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass GetPageRevisionsUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private repository: GetPageRevisionsRepository.Interface\n    ) {}\n\n    async execute(entryId: string): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canRead(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        const result = await this.repository.execute(entryId);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const pages = result.value;\n        if (pages.length > 0) {\n            const canAccess = await this.permissions.canAccess(\"page\", pages[0]);\n            if (!canAccess) {\n                return Result.fail(new PageNotAuthorizedError());\n            }\n        }\n\n        return result;\n    }\n}\n\nexport const GetPageRevisionsUseCase = UseCaseAbstraction.createImplementation({\n    implementation: GetPageRevisionsUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, GetPageRevisionsRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,uBAAuB,IAAIC,kBAAkB,EAC7CC,0BAA0B;AAE9B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,2BAA2B,CAAyC;EACtEC,WAAWA,CACCC,WAAoC,EACpCC,UAAgD,EAC1D;IAAA,KAFUD,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,UAAgD,GAAhDA,UAAgD;EACzD;EAEH,MAAMC,OAAOA,CAACC,OAAe,EAA6B;IACtD,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACK,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOZ,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,MAAMU,MAAM,GAAG,MAAM,IAAI,CAACN,UAAU,CAACC,OAAO,CAACC,OAAO,CAAC;IAErD,IAAII,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,KAAK,GAAGF,MAAM,CAACG,KAAK;IAC1B,IAAID,KAAK,CAACE,MAAM,GAAG,CAAC,EAAE;MAClB,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACZ,WAAW,CAACY,SAAS,CAAC,MAAM,EAAEH,KAAK,CAAC,CAAC,CAAC,CAAC;MACpE,IAAI,CAACG,SAAS,EAAE;QACZ,OAAOpB,MAAM,CAACc,IAAI,CAAC,IAAIT,sBAAsB,CAAC,CAAC,CAAC;MACpD;IACJ;IAEA,OAAOU,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMd,uBAAuB,GAAGC,kBAAkB,CAACmB,oBAAoB,CAAC;EAC3EC,cAAc,EAAEhB,2BAA2B;EAC3CiB,YAAY,EAAE,CAACnB,aAAa,CAACoB,WAAW,EAAErB,0BAA0B;AACxE,CAAC,CAAC","ignoreList":[]}

package/features/pages/GetPageRevisions/abstractions.d.ts

@@ -1,6 +1,6 @@
 import type { Result } from "@webiny/feature/api";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import type { PagePersistenceError } from "../../../domain/page/errors.js";
+import type { PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 /**
  * GetPageRevisions repository interface
  */
@@ -24,6 +24,7 @@ export interface IGetPageRevisionsUseCase {
     execute(entryId: string): Promise<Result<WbPage[], UseCaseError>>;
 }
 export interface IGetPageRevisionsUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     persistence: PagePersistenceError;
 }
 type UseCaseError = IGetPageRevisionsUseCaseErrors[keyof IGetPageRevisionsUseCaseErrors];

package/features/pages/GetPageRevisions/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","GetPageRevisionsRepository","GetPageRevisionsUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PagePersistenceError } from \"~/domain/page/errors.js\";\n\n/**\n * GetPageRevisions repository interface\n */\nexport interface IGetPageRevisionsRepository {\n    execute(entryId: string): Promise<Result<WbPage[], RepositoryError>>;\n}\n\nexport interface IGetPageRevisionsRepositoryErrors {\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageRevisionsRepositoryErrors[keyof IGetPageRevisionsRepositoryErrors];\n\nexport const GetPageRevisionsRepository = createAbstraction<IGetPageRevisionsRepository>(\n    \"Wb/GetPageRevisionsRepository\"\n);\n\nexport namespace GetPageRevisionsRepository {\n    export type Interface = IGetPageRevisionsRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage[], RepositoryError>>;\n}\n\n/**\n * GetPageRevisions use case interface\n */\nexport interface IGetPageRevisionsUseCase {\n    execute(entryId: string): Promise<Result<WbPage[], UseCaseError>>;\n}\n\nexport interface IGetPageRevisionsUseCaseErrors {\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageRevisionsUseCaseErrors[keyof IGetPageRevisionsUseCaseErrors];\n\nexport const GetPageRevisionsUseCase = createAbstraction<IGetPageRevisionsUseCase>(\n    \"Wb/GetPageRevisionsUseCase\"\n);\n\nexport namespace GetPageRevisionsUseCase {\n    export type Interface = IGetPageRevisionsUseCase;\n    export type Error = UseCaseError;\n    export type Return = Promise<Result<WbPage[], UseCaseError>>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAKvD;AACA;AACA;;AAWA,OAAO,MAAMC,0BAA0B,GAAGD,iBAAiB,CACvD,+BACJ,CAAC;;AAQD;AACA;AACA;;AAWA,OAAO,MAAME,uBAAuB,GAAGF,iBAAiB,CACpD,4BACJ,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","GetPageRevisionsRepository","GetPageRevisionsUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PagePersistenceError, PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\n/**\n * GetPageRevisions repository interface\n */\nexport interface IGetPageRevisionsRepository {\n    execute(entryId: string): Promise<Result<WbPage[], RepositoryError>>;\n}\n\nexport interface IGetPageRevisionsRepositoryErrors {\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IGetPageRevisionsRepositoryErrors[keyof IGetPageRevisionsRepositoryErrors];\n\nexport const GetPageRevisionsRepository = createAbstraction<IGetPageRevisionsRepository>(\n    \"Wb/GetPageRevisionsRepository\"\n);\n\nexport namespace GetPageRevisionsRepository {\n    export type Interface = IGetPageRevisionsRepository;\n    export type Error = RepositoryError;\n    export type Return = Promise<Result<WbPage[], RepositoryError>>;\n}\n\n/**\n * GetPageRevisions use case interface\n */\nexport interface IGetPageRevisionsUseCase {\n    execute(entryId: string): Promise<Result<WbPage[], UseCaseError>>;\n}\n\nexport interface IGetPageRevisionsUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IGetPageRevisionsUseCaseErrors[keyof IGetPageRevisionsUseCaseErrors];\n\nexport const GetPageRevisionsUseCase = createAbstraction<IGetPageRevisionsUseCase>(\n    \"Wb/GetPageRevisionsUseCase\"\n);\n\nexport namespace GetPageRevisionsUseCase {\n    export type Interface = IGetPageRevisionsUseCase;\n    export type Error = UseCaseError;\n    export type Return = Promise<Result<WbPage[], UseCaseError>>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAKvD;AACA;AACA;;AAWA,OAAO,MAAMC,0BAA0B,GAAGD,iBAAiB,CACvD,+BACJ,CAAC;;AAQD;AACA;AACA;;AAYA,OAAO,MAAME,uBAAuB,GAAGF,iBAAiB,CACpD,4BACJ,CAAC","ignoreList":[]}

package/features/pages/ListPages/ListPagesRepository.d.ts

@@ -1,10 +1,14 @@
 import { ListPagesRepository as RepositoryAbstraction } from "./abstractions.js";
 import { ListLatestEntriesUseCase } from "@webiny/api-headless-cms/features/contentEntry/ListEntries";
 import { PageModel } from "../../../domain/page/abstractions.js";
+import { CmsWhereMapper } from "@webiny/api-headless-cms/features/whereMapper/abstractions.js";
+import { CmsSortMapper } from "@webiny/api-headless-cms/features/sortMapper/abstractions.js";
 declare class ListPagesRepositoryImpl implements RepositoryAbstraction.Interface {
     private pageModel;
     private listLatestEntries;
-    constructor(pageModel: PageModel.Interface, listLatestEntries: ListLatestEntriesUseCase.Interface);
+    private whereMapper;
+    private sortMapper;
+    constructor(pageModel: PageModel.Interface, listLatestEntries: ListLatestEntriesUseCase.Interface, whereMapper: CmsWhereMapper.Interface, sortMapper: CmsSortMapper.Interface);
     execute(params: RepositoryAbstraction.Params): RepositoryAbstraction.Return;
 }
 export declare const ListPagesRepository: typeof ListPagesRepositoryImpl & {

package/features/pages/ListPages/ListPagesRepository.js

@@ -4,15 +4,25 @@ import { ListLatestEntriesUseCase } from "@webiny/api-headless-cms/features/cont
 import { PageModel } from "../../../domain/page/abstractions.js";
 import { EntryToPageMapper } from "../../../domain/page/EntryToPageMapper.js";
 import { PagePersistenceError } from "../../../domain/page/errors.js";
+import { CmsWhereMapper } from "@webiny/api-headless-cms/features/whereMapper/abstractions.js";
+import { CmsSortMapper } from "@webiny/api-headless-cms/features/sortMapper/abstractions.js";
 class ListPagesRepositoryImpl {
-  constructor(pageModel, listLatestEntries) {
+  constructor(pageModel, listLatestEntries, whereMapper, sortMapper) {
     this.pageModel = pageModel;
     this.listLatestEntries = listLatestEntries;
+    this.whereMapper = whereMapper;
+    this.sortMapper = sortMapper;
   }
   async execute(params) {
     const result = await this.listLatestEntries.execute(this.pageModel, {
-      where: params.where,
-      sort: params.sort,
+      where: this.whereMapper.map({
+        fields: this.pageModel.fields,
+        input: params.where
+      }),
+      sort: this.sortMapper.map({
+        fields: this.pageModel.fields,
+        input: params.sort
+      }),
       limit: params.limit,
       after: params.after,
       search: params.search
@@ -33,7 +43,7 @@ class ListPagesRepositoryImpl {
 }
 export const ListPagesRepository = RepositoryAbstraction.createImplementation({
   implementation: ListPagesRepositoryImpl,
-  dependencies: [PageModel, ListLatestEntriesUseCase]
+  dependencies: [PageModel, ListLatestEntriesUseCase, CmsWhereMapper, CmsSortMapper]
 });
 
 //# sourceMappingURL=ListPagesRepository.js.map

package/features/pages/ListPages/ListPagesRepository.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","ListPagesRepository","RepositoryAbstraction","ListLatestEntriesUseCase","PageModel","EntryToPageMapper","PagePersistenceError","ListPagesRepositoryImpl","constructor","pageModel","listLatestEntries","execute","params","result","where","sort","limit","after","search","isFail","fail","error","entries","meta","value","pages","map","entry","toPage","ok","createImplementation","implementation","dependencies"],"sources":["ListPagesRepository.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { ListPagesRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport { ListLatestEntriesUseCase } from \"@webiny/api-headless-cms/features/contentEntry/ListEntries\";\nimport { PageModel } from \"~/domain/page/abstractions.js\";\nimport { EntryToPageMapper } from \"~/domain/page/EntryToPageMapper.js\";\nimport { PagePersistenceError } from \"~/domain/page/errors.js\";\n\nclass ListPagesRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private pageModel: PageModel.Interface,\n        private listLatestEntries: ListLatestEntriesUseCase.Interface\n    ) {}\n\n    async execute(params: RepositoryAbstraction.Params): RepositoryAbstraction.Return {\n        const result = await this.listLatestEntries.execute(this.pageModel, {\n            where: params.where,\n            sort: params.sort,\n            limit: params.limit,\n            after: params.after,\n            search: params.search\n        });\n\n        if (result.isFail()) {\n            return Result.fail(new PagePersistenceError(result.error));\n        }\n\n        const { entries, meta } = result.value;\n        const pages = entries.map(entry => EntryToPageMapper.toPage(entry));\n\n        return Result.ok({ pages, meta });\n    }\n}\n\nexport const ListPagesRepository = RepositoryAbstraction.createImplementation({\n    implementation: ListPagesRepositoryImpl,\n    dependencies: [PageModel, ListLatestEntriesUseCase]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,mBAAmB,IAAIC,qBAAqB;AACrD,SAASC,wBAAwB,QAAQ,4DAA4D;AACrG,SAASC,SAAS;AAClB,SAASC,iBAAiB;AAC1B,SAASC,oBAAoB;AAE7B,MAAMC,uBAAuB,CAA4C;EACrEC,WAAWA,CACCC,SAA8B,EAC9BC,iBAAqD,EAC/D;IAAA,KAFUD,SAA8B,GAA9BA,SAA8B;IAAA,KAC9BC,iBAAqD,GAArDA,iBAAqD;EAC9D;EAEH,MAAMC,OAAOA,CAACC,MAAoC,EAAgC;IAC9E,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACH,iBAAiB,CAACC,OAAO,CAAC,IAAI,CAACF,SAAS,EAAE;MAChEK,KAAK,EAAEF,MAAM,CAACE,KAAK;MACnBC,IAAI,EAAEH,MAAM,CAACG,IAAI;MACjBC,KAAK,EAAEJ,MAAM,CAACI,KAAK;MACnBC,KAAK,EAAEL,MAAM,CAACK,KAAK;MACnBC,MAAM,EAAEN,MAAM,CAACM;IACnB,CAAC,CAAC;IAEF,IAAIL,MAAM,CAACM,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOnB,MAAM,CAACoB,IAAI,CAAC,IAAId,oBAAoB,CAACO,MAAM,CAACQ,KAAK,CAAC,CAAC;IAC9D;IAEA,MAAM;MAAEC,OAAO;MAAEC;IAAK,CAAC,GAAGV,MAAM,CAACW,KAAK;IACtC,MAAMC,KAAK,GAAGH,OAAO,CAACI,GAAG,CAACC,KAAK,IAAItB,iBAAiB,CAACuB,MAAM,CAACD,KAAK,CAAC,CAAC;IAEnE,OAAO3B,MAAM,CAAC6B,EAAE,CAAC;MAAEJ,KAAK;MAAEF;IAAK,CAAC,CAAC;EACrC;AACJ;AAEA,OAAO,MAAMtB,mBAAmB,GAAGC,qBAAqB,CAAC4B,oBAAoB,CAAC;EAC1EC,cAAc,EAAExB,uBAAuB;EACvCyB,YAAY,EAAE,CAAC5B,SAAS,EAAED,wBAAwB;AACtD,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","ListPagesRepository","RepositoryAbstraction","ListLatestEntriesUseCase","PageModel","EntryToPageMapper","PagePersistenceError","CmsWhereMapper","CmsSortMapper","ListPagesRepositoryImpl","constructor","pageModel","listLatestEntries","whereMapper","sortMapper","execute","params","result","where","map","fields","input","sort","limit","after","search","isFail","fail","error","entries","meta","value","pages","entry","toPage","ok","createImplementation","implementation","dependencies"],"sources":["ListPagesRepository.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { ListPagesRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport { ListLatestEntriesUseCase } from \"@webiny/api-headless-cms/features/contentEntry/ListEntries\";\nimport { PageModel } from \"~/domain/page/abstractions.js\";\nimport { EntryToPageMapper } from \"~/domain/page/EntryToPageMapper.js\";\nimport { PagePersistenceError } from \"~/domain/page/errors.js\";\nimport { CmsWhereMapper } from \"@webiny/api-headless-cms/features/whereMapper/abstractions.js\";\nimport { CmsSortMapper } from \"@webiny/api-headless-cms/features/sortMapper/abstractions.js\";\n\nclass ListPagesRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private pageModel: PageModel.Interface,\n        private listLatestEntries: ListLatestEntriesUseCase.Interface,\n        private whereMapper: CmsWhereMapper.Interface,\n        private sortMapper: CmsSortMapper.Interface\n    ) {}\n\n    async execute(params: RepositoryAbstraction.Params): RepositoryAbstraction.Return {\n        const result = await this.listLatestEntries.execute(this.pageModel, {\n            where: this.whereMapper.map({\n                fields: this.pageModel.fields,\n                input: params.where\n            }),\n            sort: this.sortMapper.map({\n                fields: this.pageModel.fields,\n                input: params.sort\n            }),\n            limit: params.limit,\n            after: params.after,\n            search: params.search\n        });\n\n        if (result.isFail()) {\n            return Result.fail(new PagePersistenceError(result.error));\n        }\n\n        const { entries, meta } = result.value;\n        const pages = entries.map(entry => EntryToPageMapper.toPage(entry));\n\n        return Result.ok({ pages, meta });\n    }\n}\n\nexport const ListPagesRepository = RepositoryAbstraction.createImplementation({\n    implementation: ListPagesRepositoryImpl,\n    dependencies: [PageModel, ListLatestEntriesUseCase, CmsWhereMapper, CmsSortMapper]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,mBAAmB,IAAIC,qBAAqB;AACrD,SAASC,wBAAwB,QAAQ,4DAA4D;AACrG,SAASC,SAAS;AAClB,SAASC,iBAAiB;AAC1B,SAASC,oBAAoB;AAC7B,SAASC,cAAc,QAAQ,+DAA+D;AAC9F,SAASC,aAAa,QAAQ,8DAA8D;AAE5F,MAAMC,uBAAuB,CAA4C;EACrEC,WAAWA,CACCC,SAA8B,EAC9BC,iBAAqD,EACrDC,WAAqC,EACrCC,UAAmC,EAC7C;IAAA,KAJUH,SAA8B,GAA9BA,SAA8B;IAAA,KAC9BC,iBAAqD,GAArDA,iBAAqD;IAAA,KACrDC,WAAqC,GAArCA,WAAqC;IAAA,KACrCC,UAAmC,GAAnCA,UAAmC;EAC5C;EAEH,MAAMC,OAAOA,CAACC,MAAoC,EAAgC;IAC9E,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACL,iBAAiB,CAACG,OAAO,CAAC,IAAI,CAACJ,SAAS,EAAE;MAChEO,KAAK,EAAE,IAAI,CAACL,WAAW,CAACM,GAAG,CAAC;QACxBC,MAAM,EAAE,IAAI,CAACT,SAAS,CAACS,MAAM;QAC7BC,KAAK,EAAEL,MAAM,CAACE;MAClB,CAAC,CAAC;MACFI,IAAI,EAAE,IAAI,CAACR,UAAU,CAACK,GAAG,CAAC;QACtBC,MAAM,EAAE,IAAI,CAACT,SAAS,CAACS,MAAM;QAC7BC,KAAK,EAAEL,MAAM,CAACM;MAClB,CAAC,CAAC;MACFC,KAAK,EAAEP,MAAM,CAACO,KAAK;MACnBC,KAAK,EAAER,MAAM,CAACQ,KAAK;MACnBC,MAAM,EAAET,MAAM,CAACS;IACnB,CAAC,CAAC;IAEF,IAAIR,MAAM,CAACS,MAAM,CAAC,CAAC,EAAE;MACjB,OAAO1B,MAAM,CAAC2B,IAAI,CAAC,IAAIrB,oBAAoB,CAACW,MAAM,CAACW,KAAK,CAAC,CAAC;IAC9D;IAEA,MAAM;MAAEC,OAAO;MAAEC;IAAK,CAAC,GAAGb,MAAM,CAACc,KAAK;IACtC,MAAMC,KAAK,GAAGH,OAAO,CAACV,GAAG,CAACc,KAAK,IAAI5B,iBAAiB,CAAC6B,MAAM,CAACD,KAAK,CAAC,CAAC;IAEnE,OAAOjC,MAAM,CAACmC,EAAE,CAAC;MAAEH,KAAK;MAAEF;IAAK,CAAC,CAAC;EACrC;AACJ;AAEA,OAAO,MAAM7B,mBAAmB,GAAGC,qBAAqB,CAACkC,oBAAoB,CAAC;EAC1EC,cAAc,EAAE5B,uBAAuB;EACvC6B,YAAY,EAAE,CAAClC,SAAS,EAAED,wBAAwB,EAAEI,cAAc,EAAEC,aAAa;AACrF,CAAC,CAAC","ignoreList":[]}

package/features/pages/ListPages/ListPagesUseCase.d.ts

@@ -1,7 +1,11 @@
 import { ListPagesUseCase as UseCaseAbstraction, ListPagesRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
 declare class ListPagesUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
+    private identityContext;
     private repository;
-    constructor(repository: ListPagesRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, identityContext: IdentityContext.Interface, repository: ListPagesRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const ListPagesUseCase: typeof ListPagesUseCaseImpl & {

package/features/pages/ListPages/ListPagesUseCase.js

@@ -1,15 +1,35 @@
+import { Result } from "@webiny/feature/api";
 import { ListPagesUseCase as UseCaseAbstraction, ListPagesRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
 class ListPagesUseCaseImpl {
-  constructor(repository) {
+  constructor(permissions, identityContext, repository) {
+    this.permissions = permissions;
+    this.identityContext = identityContext;
     this.repository = repository;
   }
-  execute(params) {
-    return this.repository.execute(params);
+  async execute(params) {
+    const hasPermission = await this.permissions.canRead("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+    const where = {
+      ...params.where
+    };
+    if (await this.permissions.onlyOwnRecords("page")) {
+      const identity = this.identityContext.getIdentity();
+      where.createdBy = identity.id;
+    }
+    return this.repository.execute({
+      ...params,
+      where
+    });
   }
 }
 export const ListPagesUseCase = UseCaseAbstraction.createImplementation({
   implementation: ListPagesUseCaseImpl,
-  dependencies: [ListPagesRepository]
+  dependencies: [WbPermissions.Abstraction, IdentityContext, ListPagesRepository]
 });
 
 //# sourceMappingURL=ListPagesUseCase.js.map

package/features/pages/ListPages/ListPagesUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["ListPagesUseCase","UseCaseAbstraction","ListPagesRepository","ListPagesUseCaseImpl","constructor","repository","execute","params","createImplementation","implementation","dependencies"],"sources":["ListPagesUseCase.ts"],"sourcesContent":["import { ListPagesUseCase as UseCaseAbstraction, ListPagesRepository } from \"./abstractions.js\";\n\nclass ListPagesUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(private repository: ListPagesRepository.Interface) {}\n\n    execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        return this.repository.execute(params);\n    }\n}\n\nexport const ListPagesUseCase = UseCaseAbstraction.createImplementation({\n    implementation: ListPagesUseCaseImpl,\n    dependencies: [ListPagesRepository]\n});\n"],"mappings":"AAAA,SAASA,gBAAgB,IAAIC,kBAAkB,EAAEC,mBAAmB;AAEpE,MAAMC,oBAAoB,CAAyC;EAC/DC,WAAWA,CAASC,UAAyC,EAAE;IAAA,KAA3CA,UAAyC,GAAzCA,UAAyC;EAAG;EAEhEC,OAAOA,CAACC,MAAiC,EAA6B;IAClE,OAAO,IAAI,CAACF,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;EAC1C;AACJ;AAEA,OAAO,MAAMP,gBAAgB,GAAGC,kBAAkB,CAACO,oBAAoB,CAAC;EACpEC,cAAc,EAAEN,oBAAoB;EACpCO,YAAY,EAAE,CAACR,mBAAmB;AACtC,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","ListPagesUseCase","UseCaseAbstraction","ListPagesRepository","WbPermissions","PageNotAuthorizedError","IdentityContext","ListPagesUseCaseImpl","constructor","permissions","identityContext","repository","execute","params","hasPermission","canRead","fail","where","onlyOwnRecords","identity","getIdentity","createdBy","id","createImplementation","implementation","dependencies","Abstraction"],"sources":["ListPagesUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { ListPagesUseCase as UseCaseAbstraction, ListPagesRepository } from \"./abstractions.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\n\nclass ListPagesUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private identityContext: IdentityContext.Interface,\n        private repository: ListPagesRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canRead(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        const where = { ...params.where };\n\n        if (await this.permissions.onlyOwnRecords(\"page\")) {\n            const identity = this.identityContext.getIdentity();\n            where.createdBy = identity.id;\n        }\n\n        return this.repository.execute({ ...params, where });\n    }\n}\n\nexport const ListPagesUseCase = UseCaseAbstraction.createImplementation({\n    implementation: ListPagesUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, IdentityContext, ListPagesRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,gBAAgB,IAAIC,kBAAkB,EAAEC,mBAAmB;AACpE,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAC/B,SAASC,eAAe,QAAQ,6DAA6D;AAE7F,MAAMC,oBAAoB,CAAyC;EAC/DC,WAAWA,CACCC,WAAoC,EACpCC,eAA0C,EAC1CC,UAAyC,EACnD;IAAA,KAHUF,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,UAAyC,GAAzCA,UAAyC;EAClD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACL,WAAW,CAACM,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOd,MAAM,CAACgB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;IAEA,MAAMY,KAAK,GAAG;MAAE,GAAGJ,MAAM,CAACI;IAAM,CAAC;IAEjC,IAAI,MAAM,IAAI,CAACR,WAAW,CAACS,cAAc,CAAC,MAAM,CAAC,EAAE;MAC/C,MAAMC,QAAQ,GAAG,IAAI,CAACT,eAAe,CAACU,WAAW,CAAC,CAAC;MACnDH,KAAK,CAACI,SAAS,GAAGF,QAAQ,CAACG,EAAE;IACjC;IAEA,OAAO,IAAI,CAACX,UAAU,CAACC,OAAO,CAAC;MAAE,GAAGC,MAAM;MAAEI;IAAM,CAAC,CAAC;EACxD;AACJ;AAEA,OAAO,MAAMhB,gBAAgB,GAAGC,kBAAkB,CAACqB,oBAAoB,CAAC;EACpEC,cAAc,EAAEjB,oBAAoB;EACpCkB,YAAY,EAAE,CAACrB,aAAa,CAACsB,WAAW,EAAEpB,eAAe,EAAEH,mBAAmB;AAClF,CAAC,CAAC","ignoreList":[]}

package/features/pages/ListPages/abstractions.d.ts

@@ -1,6 +1,6 @@
 import type { Result } from "@webiny/feature/api";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import type { PagePersistenceError } from "../../../domain/page/errors.js";
+import type { PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 import type { CmsEntryListSort, CmsEntryListWhere } from "@webiny/api-headless-cms/types/index.js";
 export interface IListPagesParams {
     where: CmsEntryListWhere;
@@ -42,6 +42,7 @@ export interface IListPagesUseCase {
     execute(params: IListPagesParams): Promise<Result<IListPagesResult, UseCaseError>>;
 }
 export interface IListPagesUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     persistence: PagePersistenceError;
 }
 type UseCaseError = IListPagesUseCaseErrors[keyof IListPagesUseCaseErrors];

package/features/pages/ListPages/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","ListPagesRepository","ListPagesUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PagePersistenceError } from \"~/domain/page/errors.js\";\nimport type { CmsEntryListSort, CmsEntryListWhere } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport interface IListPagesParams {\n    where: CmsEntryListWhere;\n    sort: CmsEntryListSort;\n    limit: number;\n    after: string | null;\n    search?: string;\n}\n\nexport interface IListPagesMeta {\n    hasMoreItems: boolean;\n    totalCount: number;\n    cursor: string | null;\n}\n\nexport type IListPagesResult = { pages: WbPage[]; meta: IListPagesMeta };\n\n/**\n * ListPages repository interface\n */\nexport interface IListPagesRepository {\n    execute(params: IListPagesParams): Promise<Result<IListPagesResult, RepositoryError>>;\n}\n\nexport interface IListPagesRepositoryErrors {\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IListPagesRepositoryErrors[keyof IListPagesRepositoryErrors];\n\nexport const ListPagesRepository =\n    createAbstraction<IListPagesRepository>(\"Wb/ListPagesRepository\");\n\nexport namespace ListPagesRepository {\n    export type Interface = IListPagesRepository;\n    export type Error = RepositoryError;\n    export type Params = IListPagesParams;\n    export type Return = Promise<Result<IListPagesResult, RepositoryError>>;\n}\n\n/**\n * ListPages use case interface\n */\nexport interface IListPagesUseCase {\n    execute(params: IListPagesParams): Promise<Result<IListPagesResult, UseCaseError>>;\n}\n\nexport interface IListPagesUseCaseErrors {\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IListPagesUseCaseErrors[keyof IListPagesUseCaseErrors];\n\nexport const ListPagesUseCase = createAbstraction<IListPagesUseCase>(\"Wb/ListPagesUseCase\");\n\nexport namespace ListPagesUseCase {\n    export type Interface = IListPagesUseCase;\n    export type Error = UseCaseError;\n    export type Params = IListPagesParams;\n    export type Return = Promise<Result<IListPagesResult, UseCaseError>>;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAsBvD;AACA;AACA;;AAWA,OAAO,MAAMC,mBAAmB,GAC5BD,iBAAiB,CAAuB,wBAAwB,CAAC;;AASrE;AACA;AACA;;AAWA,OAAO,MAAME,gBAAgB,GAAGF,iBAAiB,CAAoB,qBAAqB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","ListPagesRepository","ListPagesUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { PagePersistenceError, PageNotAuthorizedError } from \"~/domain/page/errors.js\";\nimport type { CmsEntryListSort, CmsEntryListWhere } from \"@webiny/api-headless-cms/types/index.js\";\n\nexport interface IListPagesParams {\n    where: CmsEntryListWhere;\n    sort: CmsEntryListSort;\n    limit: number;\n    after: string | null;\n    search?: string;\n}\n\nexport interface IListPagesMeta {\n    hasMoreItems: boolean;\n    totalCount: number;\n    cursor: string | null;\n}\n\nexport type IListPagesResult = { pages: WbPage[]; meta: IListPagesMeta };\n\n/**\n * ListPages repository interface\n */\nexport interface IListPagesRepository {\n    execute(params: IListPagesParams): Promise<Result<IListPagesResult, RepositoryError>>;\n}\n\nexport interface IListPagesRepositoryErrors {\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IListPagesRepositoryErrors[keyof IListPagesRepositoryErrors];\n\nexport const ListPagesRepository =\n    createAbstraction<IListPagesRepository>(\"Wb/ListPagesRepository\");\n\nexport namespace ListPagesRepository {\n    export type Interface = IListPagesRepository;\n    export type Error = RepositoryError;\n    export type Params = IListPagesParams;\n    export type Return = Promise<Result<IListPagesResult, RepositoryError>>;\n}\n\n/**\n * ListPages use case interface\n */\nexport interface IListPagesUseCase {\n    execute(params: IListPagesParams): Promise<Result<IListPagesResult, UseCaseError>>;\n}\n\nexport interface IListPagesUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IListPagesUseCaseErrors[keyof IListPagesUseCaseErrors];\n\nexport const ListPagesUseCase = createAbstraction<IListPagesUseCase>(\"Wb/ListPagesUseCase\");\n\nexport namespace ListPagesUseCase {\n    export type Interface = IListPagesUseCase;\n    export type Error = UseCaseError;\n    export type Params = IListPagesParams;\n    export type Return = Promise<Result<IListPagesResult, UseCaseError>>;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAsBvD;AACA;AACA;;AAWA,OAAO,MAAMC,mBAAmB,GAC5BD,iBAAiB,CAAuB,wBAAwB,CAAC;;AASrE;AACA;AACA;;AAYA,OAAO,MAAME,gBAAgB,GAAGF,iBAAiB,CAAoB,qBAAqB,CAAC","ignoreList":[]}

package/features/pages/MovePage/MovePageUseCase.d.ts

@@ -1,11 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from "./abstractions.js";
 import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class MovePageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: MovePageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: MovePageRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const MovePageUseCase: import("@webiny/di").Implementation<typeof MovePageUseCaseImpl>;

package/features/pages/MovePage/MovePageUseCase.js

@@ -3,19 +3,31 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from "./abstractions.js";
 import { PageBeforeMoveEvent, PageAfterMoveEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class MovePageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
+    const hasPermission = await this.permissions.canEdit("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Get the original page for events
     const getResult = await this.getPageById.execute(params.id);
     if (getResult.isFail()) {
       return getResult;
     }
     const original = getResult.value;
+    const canEdit = await this.permissions.canEdit("page", original);
+    if (!canEdit) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before move event
     const beforeEvent = new PageBeforeMoveEvent({
@@ -43,7 +55,7 @@ class MovePageUseCaseImpl {
 export const MovePageUseCase = createImplementation({
   abstraction: UseCaseAbstraction,
   implementation: MovePageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, MovePageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, MovePageRepository]
 });
 
 //# sourceMappingURL=MovePageUseCase.js.map

package/features/pages/MovePage/MovePageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","createImplementation","EventPublisher","MovePageUseCase","UseCaseAbstraction","MovePageRepository","PageBeforeMoveEvent","PageAfterMoveEvent","GetPageByIdUseCase","MovePageUseCaseImpl","constructor","eventPublisher","getPageById","repository","execute","params","getResult","id","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","abstraction","implementation","dependencies"],"sources":["MovePageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from \"./abstractions.js\";\nimport { PageBeforeMoveEvent, PageAfterMoveEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\n\nclass MovePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: MovePageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        // Publish before move event\n        const beforeEvent = new PageBeforeMoveEvent({\n            original,\n            input: params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the move operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after move event\n        const afterEvent = new PageAfterMoveEvent({\n            original,\n            input: params,\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const MovePageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: MovePageUseCaseImpl,\n    dependencies: [EventPublisher, GetPageByIdUseCase, MovePageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,eAAe,IAAIC,kBAAkB,EAAEC,kBAAkB;AAClE,SAASC,mBAAmB,EAAEC,kBAAkB;AAChD,SAASC,kBAAkB;AAE3B,MAAMC,mBAAmB,CAAyC;EAC9DC,WAAWA,CACCC,cAAmD,EACnDC,WAAyC,EACzCC,UAAwC,EAClD;IAAA,KAHUF,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAAwC,GAAxCA,UAAwC;EACjD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE;IACA,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACE,OAAO,CAACC,MAAM,CAACE,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,QAAQ,GAAGH,SAAS,CAACI,KAAK;;IAEhC;IACA,MAAMC,WAAW,GAAG,IAAIf,mBAAmB,CAAC;MACxCa,QAAQ;MACRG,KAAK,EAAEP;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,CAACJ,cAAc,CAACY,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACX,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIS,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIlB,kBAAkB,CAAC;MACtCY,QAAQ;MACRG,KAAK,EAAEP,MAAM;MACbW,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACT,cAAc,CAACY,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAOzB,MAAM,CAAC2B,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMjB,eAAe,GAAGF,oBAAoB,CAAC;EAChD2B,WAAW,EAAExB,kBAAkB;EAC/ByB,cAAc,EAAEpB,mBAAmB;EACnCqB,YAAY,EAAE,CAAC5B,cAAc,EAAEM,kBAAkB,EAAEH,kBAAkB;AACzE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","createImplementation","EventPublisher","MovePageUseCase","UseCaseAbstraction","MovePageRepository","PageBeforeMoveEvent","PageAfterMoveEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","MovePageUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","params","hasPermission","canEdit","fail","getResult","id","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","abstraction","implementation","dependencies","Abstraction"],"sources":["MovePageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from \"./abstractions.js\";\nimport { PageBeforeMoveEvent, PageAfterMoveEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass MovePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: MovePageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canEdit(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        const canEdit = await this.permissions.canEdit(\"page\", original);\n        if (!canEdit) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before move event\n        const beforeEvent = new PageBeforeMoveEvent({\n            original,\n            input: params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the move operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after move event\n        const afterEvent = new PageAfterMoveEvent({\n            original,\n            input: params,\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const MovePageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: MovePageUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        MovePageRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,eAAe,IAAIC,kBAAkB,EAAEC,kBAAkB;AAClE,SAASC,mBAAmB,EAAEC,kBAAkB;AAChD,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,mBAAmB,CAAyC;EAC9DC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAAwC,EAClD;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAAwC,GAAxCA,UAAwC;EACjD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACN,WAAW,CAACO,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOnB,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMY,SAAS,GAAG,MAAM,IAAI,CAACP,WAAW,CAACE,OAAO,CAACC,MAAM,CAACK,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,QAAQ,GAAGH,SAAS,CAACI,KAAK;IAEhC,MAAMN,OAAO,GAAG,MAAM,IAAI,CAACP,WAAW,CAACO,OAAO,CAAC,MAAM,EAAEK,QAAQ,CAAC;IAChE,IAAI,CAACL,OAAO,EAAE;MACV,OAAOpB,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMiB,WAAW,GAAG,IAAIrB,mBAAmB,CAAC;MACxCmB,QAAQ;MACRG,KAAK,EAAEV;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,CAACJ,cAAc,CAACe,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACd,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIY,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIxB,kBAAkB,CAAC;MACtCkB,QAAQ;MACRG,KAAK,EAAEV,MAAM;MACbc,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACZ,cAAc,CAACe,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAO/B,MAAM,CAACiC,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMvB,eAAe,GAAGF,oBAAoB,CAAC;EAChDiC,WAAW,EAAE9B,kBAAkB;EAC/B+B,cAAc,EAAExB,mBAAmB;EACnCyB,YAAY,EAAE,CACV3B,aAAa,CAAC4B,WAAW,EACzBnC,cAAc,EACdM,kBAAkB,EAClBH,kBAAkB;AAE1B,CAAC,CAAC","ignoreList":[]}

package/features/pages/MovePage/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export interface IMoveWbPageParams {
     id: string;
     folderId: string;
@@ -26,6 +26,7 @@ export interface IMovePageUseCase {
     execute(params: IMoveWbPageParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IMovePageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }
@@ -47,14 +48,14 @@ export interface PageAfterMovePayload {
     input: IMoveWbPageParams;
     page: WbPage;
 }
-export declare const PageBeforeMoveHandler: import("@webiny/di").Abstraction<IEventHandler<DomainEvent<PageBeforeMovePayload>>>;
-export declare namespace PageBeforeMoveHandler {
+export declare const PageBeforeMoveEventHandler: import("@webiny/di").Abstraction<IEventHandler<DomainEvent<PageBeforeMovePayload>>>;
+export declare namespace PageBeforeMoveEventHandler {
     type Interface = IEventHandler<DomainEvent<PageBeforeMovePayload>>;
     type Event = DomainEvent<PageBeforeMovePayload>;
     type Page = WbPage;
 }
-export declare const PageAfterMoveHandler: import("@webiny/di").Abstraction<IEventHandler<DomainEvent<PageAfterMovePayload>>>;
-export declare namespace PageAfterMoveHandler {
+export declare const PageAfterMoveEventHandler: import("@webiny/di").Abstraction<IEventHandler<DomainEvent<PageAfterMovePayload>>>;
+export declare namespace PageAfterMoveEventHandler {
     type Interface = IEventHandler<DomainEvent<PageAfterMovePayload>>;
     type Event = DomainEvent<PageAfterMovePayload>;
     type Page = WbPage;

package/features/pages/MovePage/abstractions.js

@@ -24,7 +24,7 @@ export const MovePageUseCase = createAbstraction("Wb/MovePageUseCase");
 // Event Handler Abstractions
 // ============================================================================
 
-export const PageBeforeMoveHandler = createAbstraction("Wb/PageBeforeMoveHandler");
-export const PageAfterMoveHandler = createAbstraction("Wb/PageAfterMoveHandler");
+export const PageBeforeMoveEventHandler = createAbstraction("Wb/PageBeforeMoveEventHandler");
+export const PageAfterMoveEventHandler = createAbstraction("Wb/PageAfterMoveEventHandler");
 
 //# sourceMappingURL=abstractions.js.map