@webiny/api-website-builder 0.0.0-unstable.ac6ebf63c6 → 0.0.0-unstable.dbdf5d6258

package/domain/page/EntryToPageMapper.js

@@ -17,7 +17,8 @@ export class EntryToPageMapper {
       modifiedOn: entry.modifiedOn ?? null,
       modifiedBy: entry.modifiedBy ?? null,
       tenant: entry.tenant,
-      state: entry.state,
+      system: entry.system,
+      live: entry.live,
       properties: entry.values.properties,
       metadata: entry.values.metadata,
       bindings: entry.values.bindings,

package/domain/page/EntryToPageMapper.js.map

@@ -1 +1 @@
-{"version":3,"names":["ROOT_FOLDER","EntryToPageMapper","toPage","entry","id","entryId","location","folderId","status","version","locked","createdOn","createdBy","savedOn","savedBy","modifiedOn","modifiedBy","tenant","state","properties","values","metadata","bindings","elements","extensions"],"sources":["EntryToPageMapper.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\n\nexport class EntryToPageMapper {\n    static toPage(entry: CmsEntry): WbPage {\n        return {\n            id: entry.id,\n            entryId: entry.entryId,\n            location: {\n                folderId: entry.location?.folderId ?? ROOT_FOLDER\n            },\n            status: entry.status,\n            version: entry.version,\n            locked: entry.locked,\n            createdOn: entry.createdOn,\n            createdBy: entry.createdBy,\n            savedOn: entry.savedOn,\n            savedBy: entry.savedBy,\n            modifiedOn: entry.modifiedOn ?? null,\n            modifiedBy: entry.modifiedBy ?? null,\n            tenant: entry.tenant,\n            state: entry.state,\n            properties: entry.values.properties,\n            metadata: entry.values.metadata,\n            bindings: entry.values.bindings,\n            elements: entry.values.elements,\n            extensions: entry.values.extensions\n        };\n    }\n}\n"],"mappings":"AAEA,SAASA,WAAW;AAEpB,OAAO,MAAMC,iBAAiB,CAAC;EAC3B,OAAOC,MAAMA,CAACC,KAAe,EAAU;IACnC,OAAO;MACHC,EAAE,EAAED,KAAK,CAACC,EAAE;MACZC,OAAO,EAAEF,KAAK,CAACE,OAAO;MACtBC,QAAQ,EAAE;QACNC,QAAQ,EAAEJ,KAAK,CAACG,QAAQ,EAAEC,QAAQ,IAAIP;MAC1C,CAAC;MACDQ,MAAM,EAAEL,KAAK,CAACK,MAAM;MACpBC,OAAO,EAAEN,KAAK,CAACM,OAAO;MACtBC,MAAM,EAAEP,KAAK,CAACO,MAAM;MACpBC,SAAS,EAAER,KAAK,CAACQ,SAAS;MAC1BC,SAAS,EAAET,KAAK,CAACS,SAAS;MAC1BC,OAAO,EAAEV,KAAK,CAACU,OAAO;MACtBC,OAAO,EAAEX,KAAK,CAACW,OAAO;MACtBC,UAAU,EAAEZ,KAAK,CAACY,UAAU,IAAI,IAAI;MACpCC,UAAU,EAAEb,KAAK,CAACa,UAAU,IAAI,IAAI;MACpCC,MAAM,EAAEd,KAAK,CAACc,MAAM;MACpBC,KAAK,EAAEf,KAAK,CAACe,KAAK;MAClBC,UAAU,EAAEhB,KAAK,CAACiB,MAAM,CAACD,UAAU;MACnCE,QAAQ,EAAElB,KAAK,CAACiB,MAAM,CAACC,QAAQ;MAC/BC,QAAQ,EAAEnB,KAAK,CAACiB,MAAM,CAACE,QAAQ;MAC/BC,QAAQ,EAAEpB,KAAK,CAACiB,MAAM,CAACG,QAAQ;MAC/BC,UAAU,EAAErB,KAAK,CAACiB,MAAM,CAACI;IAC7B,CAAC;EACL;AACJ","ignoreList":[]}
+{"version":3,"names":["ROOT_FOLDER","EntryToPageMapper","toPage","entry","id","entryId","location","folderId","status","version","locked","createdOn","createdBy","savedOn","savedBy","modifiedOn","modifiedBy","tenant","system","live","properties","values","metadata","bindings","elements","extensions"],"sources":["EntryToPageMapper.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { ROOT_FOLDER } from \"~/constants.js\";\n\nexport class EntryToPageMapper {\n    static toPage(entry: CmsEntry): WbPage {\n        return {\n            id: entry.id,\n            entryId: entry.entryId,\n            location: {\n                folderId: entry.location?.folderId ?? ROOT_FOLDER\n            },\n            status: entry.status,\n            version: entry.version,\n            locked: entry.locked,\n            createdOn: entry.createdOn,\n            createdBy: entry.createdBy,\n            savedOn: entry.savedOn,\n            savedBy: entry.savedBy,\n            modifiedOn: entry.modifiedOn ?? null,\n            modifiedBy: entry.modifiedBy ?? null,\n            tenant: entry.tenant,\n            system: entry.system,\n            live: entry.live,\n            properties: entry.values.properties,\n            metadata: entry.values.metadata,\n            bindings: entry.values.bindings,\n            elements: entry.values.elements,\n            extensions: entry.values.extensions\n        };\n    }\n}\n"],"mappings":"AAEA,SAASA,WAAW;AAEpB,OAAO,MAAMC,iBAAiB,CAAC;EAC3B,OAAOC,MAAMA,CAACC,KAAe,EAAU;IACnC,OAAO;MACHC,EAAE,EAAED,KAAK,CAACC,EAAE;MACZC,OAAO,EAAEF,KAAK,CAACE,OAAO;MACtBC,QAAQ,EAAE;QACNC,QAAQ,EAAEJ,KAAK,CAACG,QAAQ,EAAEC,QAAQ,IAAIP;MAC1C,CAAC;MACDQ,MAAM,EAAEL,KAAK,CAACK,MAAM;MACpBC,OAAO,EAAEN,KAAK,CAACM,OAAO;MACtBC,MAAM,EAAEP,KAAK,CAACO,MAAM;MACpBC,SAAS,EAAER,KAAK,CAACQ,SAAS;MAC1BC,SAAS,EAAET,KAAK,CAACS,SAAS;MAC1BC,OAAO,EAAEV,KAAK,CAACU,OAAO;MACtBC,OAAO,EAAEX,KAAK,CAACW,OAAO;MACtBC,UAAU,EAAEZ,KAAK,CAACY,UAAU,IAAI,IAAI;MACpCC,UAAU,EAAEb,KAAK,CAACa,UAAU,IAAI,IAAI;MACpCC,MAAM,EAAEd,KAAK,CAACc,MAAM;MACpBC,MAAM,EAAEf,KAAK,CAACe,MAAM;MACpBC,IAAI,EAAEhB,KAAK,CAACgB,IAAI;MAChBC,UAAU,EAAEjB,KAAK,CAACkB,MAAM,CAACD,UAAU;MACnCE,QAAQ,EAAEnB,KAAK,CAACkB,MAAM,CAACC,QAAQ;MAC/BC,QAAQ,EAAEpB,KAAK,CAACkB,MAAM,CAACE,QAAQ;MAC/BC,QAAQ,EAAErB,KAAK,CAACkB,MAAM,CAACG,QAAQ;MAC/BC,UAAU,EAAEtB,KAAK,CAACkB,MAAM,CAACI;IAC7B,CAAC;EACL;AACJ","ignoreList":[]}

package/domain/page/abstractions.d.ts

@@ -1,4 +1,4 @@
-import type { CmsModel, IEntryState } from "@webiny/api-headless-cms/types/index.js";
+import type { CmsModel, ICmsEntryLive, ICmsEntrySystem } from "@webiny/api-headless-cms/types/index.js";
 import type { WbIdentity, WbLocation } from "../../domain/shared/abstractions.js";
 export interface CmsEntryWbPage {
     properties: Record<string, any>;
@@ -21,7 +21,8 @@ export interface WbPage extends CmsEntryWbPage {
     modifiedOn: string | null;
     modifiedBy: WbIdentity | null;
     tenant: string;
-    state?: IEntryState;
+    system?: ICmsEntrySystem;
+    live: ICmsEntryLive | null;
 }
 /**
  * PageModel abstraction - represents the Website Builder page CMS model.

package/domain/page/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","PageModel"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { CmsModel, IEntryState } from \"@webiny/api-headless-cms/types/index.js\";\nimport type { WbIdentity, WbLocation } from \"~/domain/shared/abstractions.js\";\n\nexport interface CmsEntryWbPage {\n    properties: Record<string, any>;\n    metadata: Record<string, any>;\n    bindings: Record<string, any>;\n    elements: Record<string, any>;\n    extensions?: Record<string, any>;\n}\n\nexport interface WbPage extends CmsEntryWbPage {\n    id: string;\n    entryId: string;\n    location: WbLocation;\n    status: string;\n    version: number;\n    locked: boolean;\n    createdOn: string;\n    createdBy: WbIdentity;\n    savedOn: string;\n    savedBy: WbIdentity;\n    modifiedOn: string | null;\n    modifiedBy: WbIdentity | null;\n    tenant: string;\n    state?: IEntryState;\n}\n\n/**\n * PageModel abstraction - represents the Website Builder page CMS model.\n * This will be registered via container.registerInstance in the composite feature.\n */\nexport const PageModel = createAbstraction<CmsModel>(\"Wb/PageModel\");\n\nexport namespace PageModel {\n    export type Interface = CmsModel;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA6BvD;AACA;AACA;AACA;AACA,OAAO,MAAMC,SAAS,GAAGD,iBAAiB,CAAW,cAAc,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","PageModel"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type {\n    CmsModel,\n    ICmsEntryLive,\n    ICmsEntrySystem\n} from \"@webiny/api-headless-cms/types/index.js\";\nimport type { WbIdentity, WbLocation } from \"~/domain/shared/abstractions.js\";\n\nexport interface CmsEntryWbPage {\n    properties: Record<string, any>;\n    metadata: Record<string, any>;\n    bindings: Record<string, any>;\n    elements: Record<string, any>;\n    extensions?: Record<string, any>;\n}\n\nexport interface WbPage extends CmsEntryWbPage {\n    id: string;\n    entryId: string;\n    location: WbLocation;\n    status: string;\n    version: number;\n    locked: boolean;\n    createdOn: string;\n    createdBy: WbIdentity;\n    savedOn: string;\n    savedBy: WbIdentity;\n    modifiedOn: string | null;\n    modifiedBy: WbIdentity | null;\n    tenant: string;\n    system?: ICmsEntrySystem;\n    live: ICmsEntryLive | null;\n}\n\n/**\n * PageModel abstraction - represents the Website Builder page CMS model.\n * This will be registered via container.registerInstance in the composite feature.\n */\nexport const PageModel = createAbstraction<CmsModel>(\"Wb/PageModel\");\n\nexport namespace PageModel {\n    export type Interface = CmsModel;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAkCvD;AACA;AACA;AACA;AACA,OAAO,MAAMC,SAAS,GAAGD,iBAAiB,CAAW,cAAc,CAAC","ignoreList":[]}

package/domain/permissions.d.ts

@@ -0,0 +1,133 @@
+import type { Permissions } from "@webiny/api-core/features/security/permissions/index.js";
+declare const schema: {
+    readonly prefix: "wb";
+    readonly fullAccess: {
+        readonly name: "wb.*";
+    };
+    readonly entities: readonly [{
+        readonly id: "page";
+        readonly permission: "wb.page";
+        readonly scopes: readonly ["full", "own"];
+        readonly actions: readonly [{
+            readonly name: "rwd";
+        }, {
+            readonly name: "pw";
+        }];
+    }, {
+        readonly id: "redirect";
+        readonly permission: "wb.redirect";
+        readonly scopes: readonly ["full", "own"];
+        readonly actions: readonly [{
+            readonly name: "rwd";
+        }];
+    }, {
+        readonly id: "settings";
+        readonly permission: "wb.settings";
+        readonly scopes: readonly ["full"];
+    }, {
+        readonly id: "integrations";
+        readonly permission: "wb.integrations";
+        readonly scopes: readonly ["full"];
+    }];
+};
+type WbSchema = typeof schema;
+export declare const WbPermissions: {
+    Abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/security/permissions/types").PermissionsTyped<{
+        readonly prefix: "wb";
+        readonly fullAccess: {
+            readonly name: "wb.*";
+        };
+        readonly entities: readonly [{
+            readonly id: "page";
+            readonly permission: "wb.page";
+            readonly scopes: readonly ["full", "own"];
+            readonly actions: readonly [{
+                readonly name: "rwd";
+            }, {
+                readonly name: "pw";
+            }];
+        }, {
+            readonly id: "redirect";
+            readonly permission: "wb.redirect";
+            readonly scopes: readonly ["full", "own"];
+            readonly actions: readonly [{
+                readonly name: "rwd";
+            }];
+        }, {
+            readonly id: "settings";
+            readonly permission: "wb.settings";
+            readonly scopes: readonly ["full"];
+        }, {
+            readonly id: "integrations";
+            readonly permission: "wb.integrations";
+            readonly scopes: readonly ["full"];
+        }];
+    }>>;
+    Implementation: import("@webiny/di").Constructor<import("@webiny/api-core/features/security/permissions/types").PermissionsTyped<{
+        readonly prefix: "wb";
+        readonly fullAccess: {
+            readonly name: "wb.*";
+        };
+        readonly entities: readonly [{
+            readonly id: "page";
+            readonly permission: "wb.page";
+            readonly scopes: readonly ["full", "own"];
+            readonly actions: readonly [{
+                readonly name: "rwd";
+            }, {
+                readonly name: "pw";
+            }];
+        }, {
+            readonly id: "redirect";
+            readonly permission: "wb.redirect";
+            readonly scopes: readonly ["full", "own"];
+            readonly actions: readonly [{
+                readonly name: "rwd";
+            }];
+        }, {
+            readonly id: "settings";
+            readonly permission: "wb.settings";
+            readonly scopes: readonly ["full"];
+        }, {
+            readonly id: "integrations";
+            readonly permission: "wb.integrations";
+            readonly scopes: readonly ["full"];
+        }];
+    }>> & {
+        __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-core/features/security/permissions/types").PermissionsTyped<{
+            readonly prefix: "wb";
+            readonly fullAccess: {
+                readonly name: "wb.*";
+            };
+            readonly entities: readonly [{
+                readonly id: "page";
+                readonly permission: "wb.page";
+                readonly scopes: readonly ["full", "own"];
+                readonly actions: readonly [{
+                    readonly name: "rwd";
+                }, {
+                    readonly name: "pw";
+                }];
+            }, {
+                readonly id: "redirect";
+                readonly permission: "wb.redirect";
+                readonly scopes: readonly ["full", "own"];
+                readonly actions: readonly [{
+                    readonly name: "rwd";
+                }];
+            }, {
+                readonly id: "settings";
+                readonly permission: "wb.settings";
+                readonly scopes: readonly ["full"];
+            }, {
+                readonly id: "integrations";
+                readonly permission: "wb.integrations";
+                readonly scopes: readonly ["full"];
+            }];
+        }>>;
+    };
+};
+export declare namespace WbPermissions {
+    type Interface = Permissions<WbSchema>;
+}
+export {};

package/domain/permissions.js

@@ -0,0 +1,35 @@
+import { createPermissions } from "@webiny/api-core/features/security/permissions/index.js";
+const schema = {
+  prefix: "wb",
+  fullAccess: {
+    name: "wb.*"
+  },
+  entities: [{
+    id: "page",
+    permission: "wb.page",
+    scopes: ["full", "own"],
+    actions: [{
+      name: "rwd"
+    }, {
+      name: "pw"
+    }]
+  }, {
+    id: "redirect",
+    permission: "wb.redirect",
+    scopes: ["full", "own"],
+    actions: [{
+      name: "rwd"
+    }]
+  }, {
+    id: "settings",
+    permission: "wb.settings",
+    scopes: ["full"]
+  }, {
+    id: "integrations",
+    permission: "wb.integrations",
+    scopes: ["full"]
+  }]
+};
+export const WbPermissions = createPermissions(schema);
+
+//# sourceMappingURL=permissions.js.map

package/domain/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissions","schema","prefix","fullAccess","name","entities","id","permission","scopes","actions","WbPermissions"],"sources":["permissions.ts"],"sourcesContent":["import { createPermissions } from \"@webiny/api-core/features/security/permissions/index.js\";\nimport type { Permissions } from \"@webiny/api-core/features/security/permissions/index.js\";\n\nconst schema = {\n    prefix: \"wb\",\n    fullAccess: { name: \"wb.*\" },\n    entities: [\n        {\n            id: \"page\",\n            permission: \"wb.page\",\n            scopes: [\"full\", \"own\"],\n            actions: [{ name: \"rwd\" }, { name: \"pw\" }]\n        },\n        {\n            id: \"redirect\",\n            permission: \"wb.redirect\",\n            scopes: [\"full\", \"own\"],\n            actions: [{ name: \"rwd\" }]\n        },\n        {\n            id: \"settings\",\n            permission: \"wb.settings\",\n            scopes: [\"full\"]\n        },\n        {\n            id: \"integrations\",\n            permission: \"wb.integrations\",\n            scopes: [\"full\"]\n        }\n    ]\n} as const;\n\ntype WbSchema = typeof schema;\n\nexport const WbPermissions = createPermissions(schema);\n\nexport namespace WbPermissions {\n    export type Interface = Permissions<WbSchema>;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,yDAAyD;AAG3F,MAAMC,MAAM,GAAG;EACXC,MAAM,EAAE,IAAI;EACZC,UAAU,EAAE;IAAEC,IAAI,EAAE;EAAO,CAAC;EAC5BC,QAAQ,EAAE,CACN;IACIC,EAAE,EAAE,MAAM;IACVC,UAAU,EAAE,SAAS;IACrBC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IACvBC,OAAO,EAAE,CAAC;MAAEL,IAAI,EAAE;IAAM,CAAC,EAAE;MAAEA,IAAI,EAAE;IAAK,CAAC;EAC7C,CAAC,EACD;IACIE,EAAE,EAAE,UAAU;IACdC,UAAU,EAAE,aAAa;IACzBC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IACvBC,OAAO,EAAE,CAAC;MAAEL,IAAI,EAAE;IAAM,CAAC;EAC7B,CAAC,EACD;IACIE,EAAE,EAAE,UAAU;IACdC,UAAU,EAAE,aAAa;IACzBC,MAAM,EAAE,CAAC,MAAM;EACnB,CAAC,EACD;IACIF,EAAE,EAAE,cAAc;IAClBC,UAAU,EAAE,iBAAiB;IAC7BC,MAAM,EAAE,CAAC,MAAM;EACnB,CAAC;AAET,CAAU;AAIV,OAAO,MAAME,aAAa,GAAGV,iBAAiB,CAACC,MAAM,CAAC","ignoreList":[]}

package/features/installer/ApiKeyInstaller.d.ts

@@ -1,14 +1,16 @@
 import { AppInstaller } from "@webiny/api-core/features/InstallTenant";
 import { CreateApiKeyUseCase } from "@webiny/api-core/features/security/apiKeys/CreateApiKey/index.js";
 import { DeleteApiKeyUseCase } from "@webiny/api-core/features/security/apiKeys/DeleteApiKey/index.js";
+import { WcpContext } from "@webiny/api-core/features/wcp/WcpContext/index.js";
 declare class ApiKeyInstallerImpl implements AppInstaller.Interface {
+    private wcpContext;
     private createApiKey;
     private deleteApiKey;
     readonly alwaysRun = true;
     readonly appName = "WebsiteBuilder";
     readonly dependsOn: never[];
     private apiKey;
-    constructor(createApiKey: CreateApiKeyUseCase.Interface, deleteApiKey: DeleteApiKeyUseCase.Interface);
+    constructor(wcpContext: WcpContext.Interface, createApiKey: CreateApiKeyUseCase.Interface, deleteApiKey: DeleteApiKeyUseCase.Interface);
     install(): Promise<void>;
     uninstall(): Promise<void>;
 }

package/features/installer/ApiKeyInstaller.js

@@ -1,23 +1,30 @@
 import { AppInstaller } from "@webiny/api-core/features/InstallTenant";
 import { CreateApiKeyUseCase } from "@webiny/api-core/features/security/apiKeys/CreateApiKey/index.js";
 import { DeleteApiKeyUseCase } from "@webiny/api-core/features/security/apiKeys/DeleteApiKey/index.js";
+import { WcpContext } from "@webiny/api-core/features/wcp/WcpContext/index.js";
 class ApiKeyInstallerImpl {
   alwaysRun = true;
   appName = "WebsiteBuilder";
   dependsOn = [];
   apiKey = undefined;
-  constructor(createApiKey, deleteApiKey) {
+  constructor(wcpContext, createApiKey, deleteApiKey) {
+    this.wcpContext = wcpContext;
     this.createApiKey = createApiKey;
     this.deleteApiKey = deleteApiKey;
   }
   async install() {
+    const aacl = this.wcpContext.canUseAacl();
+    const permissions = aacl ? [{
+      name: "wb.page",
+      rwd: "r"
+    }] : [{
+      name: "wb.*"
+    }];
     const result = await this.createApiKey.execute({
       name: "Website Builder",
       description: "Integrate Next.js or custom frontend with Website Builder.",
       slug: "website-builder",
-      permissions: [{
-        name: "wb.*"
-      }]
+      permissions
     });
     if (result.isOk()) {
       this.apiKey = result.value;
@@ -31,7 +38,7 @@ class ApiKeyInstallerImpl {
 }
 export const ApiKeyInstaller = AppInstaller.createImplementation({
   implementation: ApiKeyInstallerImpl,
-  dependencies: [CreateApiKeyUseCase, DeleteApiKeyUseCase]
+  dependencies: [WcpContext, CreateApiKeyUseCase, DeleteApiKeyUseCase]
 });
 
 //# sourceMappingURL=ApiKeyInstaller.js.map

package/features/installer/ApiKeyInstaller.js.map

@@ -1 +1 @@
-{"version":3,"names":["AppInstaller","CreateApiKeyUseCase","DeleteApiKeyUseCase","ApiKeyInstallerImpl","alwaysRun","appName","dependsOn","apiKey","undefined","constructor","createApiKey","deleteApiKey","install","result","execute","name","description","slug","permissions","isOk","value","uninstall","id","ApiKeyInstaller","createImplementation","implementation","dependencies"],"sources":["ApiKeyInstaller.ts"],"sourcesContent":["import { AppInstaller } from \"@webiny/api-core/features/InstallTenant\";\nimport { CreateApiKeyUseCase } from \"@webiny/api-core/features/security/apiKeys/CreateApiKey/index.js\";\nimport { DeleteApiKeyUseCase } from \"@webiny/api-core/features/security/apiKeys/DeleteApiKey/index.js\";\nimport type { ApiKey } from \"@webiny/api-core/types/security.js\";\n\nclass ApiKeyInstallerImpl implements AppInstaller.Interface {\n    readonly alwaysRun = true;\n    readonly appName = \"WebsiteBuilder\";\n    readonly dependsOn = [];\n    private apiKey: ApiKey | undefined = undefined;\n\n    constructor(\n        private createApiKey: CreateApiKeyUseCase.Interface,\n        private deleteApiKey: DeleteApiKeyUseCase.Interface\n    ) {}\n\n    async install(): Promise<void> {\n        const result = await this.createApiKey.execute({\n            name: \"Website Builder\",\n            description: \"Integrate Next.js or custom frontend with Website Builder.\",\n            slug: \"website-builder\",\n            permissions: [{ name: \"wb.*\" }]\n        });\n\n        if (result.isOk()) {\n            this.apiKey = result.value;\n        }\n    }\n\n    async uninstall(): Promise<void> {\n        if (this.apiKey) {\n            await this.deleteApiKey.execute(this.apiKey.id);\n        }\n    }\n}\n\nexport const ApiKeyInstaller = AppInstaller.createImplementation({\n    implementation: ApiKeyInstallerImpl,\n    dependencies: [CreateApiKeyUseCase, DeleteApiKeyUseCase]\n});\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,yCAAyC;AACtE,SAASC,mBAAmB,QAAQ,kEAAkE;AACtG,SAASC,mBAAmB,QAAQ,kEAAkE;AAGtG,MAAMC,mBAAmB,CAAmC;EAC/CC,SAAS,GAAG,IAAI;EAChBC,OAAO,GAAG,gBAAgB;EAC1BC,SAAS,GAAG,EAAE;EACfC,MAAM,GAAuBC,SAAS;EAE9CC,WAAWA,CACCC,YAA2C,EAC3CC,YAA2C,EACrD;IAAA,KAFUD,YAA2C,GAA3CA,YAA2C;IAAA,KAC3CC,YAA2C,GAA3CA,YAA2C;EACpD;EAEH,MAAMC,OAAOA,CAAA,EAAkB;IAC3B,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACH,YAAY,CAACI,OAAO,CAAC;MAC3CC,IAAI,EAAE,iBAAiB;MACvBC,WAAW,EAAE,4DAA4D;MACzEC,IAAI,EAAE,iBAAiB;MACvBC,WAAW,EAAE,CAAC;QAAEH,IAAI,EAAE;MAAO,CAAC;IAClC,CAAC,CAAC;IAEF,IAAIF,MAAM,CAACM,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACZ,MAAM,GAAGM,MAAM,CAACO,KAAK;IAC9B;EACJ;EAEA,MAAMC,SAASA,CAAA,EAAkB;IAC7B,IAAI,IAAI,CAACd,MAAM,EAAE;MACb,MAAM,IAAI,CAACI,YAAY,CAACG,OAAO,CAAC,IAAI,CAACP,MAAM,CAACe,EAAE,CAAC;IACnD;EACJ;AACJ;AAEA,OAAO,MAAMC,eAAe,GAAGvB,YAAY,CAACwB,oBAAoB,CAAC;EAC7DC,cAAc,EAAEtB,mBAAmB;EACnCuB,YAAY,EAAE,CAACzB,mBAAmB,EAAEC,mBAAmB;AAC3D,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["AppInstaller","CreateApiKeyUseCase","DeleteApiKeyUseCase","WcpContext","ApiKeyInstallerImpl","alwaysRun","appName","dependsOn","apiKey","undefined","constructor","wcpContext","createApiKey","deleteApiKey","install","aacl","canUseAacl","permissions","name","rwd","result","execute","description","slug","isOk","value","uninstall","id","ApiKeyInstaller","createImplementation","implementation","dependencies"],"sources":["ApiKeyInstaller.ts"],"sourcesContent":["import { AppInstaller } from \"@webiny/api-core/features/InstallTenant\";\nimport { CreateApiKeyUseCase } from \"@webiny/api-core/features/security/apiKeys/CreateApiKey/index.js\";\nimport { DeleteApiKeyUseCase } from \"@webiny/api-core/features/security/apiKeys/DeleteApiKey/index.js\";\nimport type { ApiKey } from \"@webiny/api-core/types/security.js\";\nimport { WcpContext } from \"@webiny/api-core/features/wcp/WcpContext/index.js\";\n\nclass ApiKeyInstallerImpl implements AppInstaller.Interface {\n    readonly alwaysRun = true;\n    readonly appName = \"WebsiteBuilder\";\n    readonly dependsOn = [];\n    private apiKey: ApiKey | undefined = undefined;\n\n    constructor(\n        private wcpContext: WcpContext.Interface,\n        private createApiKey: CreateApiKeyUseCase.Interface,\n        private deleteApiKey: DeleteApiKeyUseCase.Interface\n    ) {}\n\n    async install(): Promise<void> {\n        const aacl = this.wcpContext.canUseAacl();\n\n        const permissions = aacl ? [{ name: \"wb.page\", rwd: \"r\" }] : [{ name: \"wb.*\" }];\n\n        const result = await this.createApiKey.execute({\n            name: \"Website Builder\",\n            description: \"Integrate Next.js or custom frontend with Website Builder.\",\n            slug: \"website-builder\",\n            permissions\n        });\n\n        if (result.isOk()) {\n            this.apiKey = result.value;\n        }\n    }\n\n    async uninstall(): Promise<void> {\n        if (this.apiKey) {\n            await this.deleteApiKey.execute(this.apiKey.id);\n        }\n    }\n}\n\nexport const ApiKeyInstaller = AppInstaller.createImplementation({\n    implementation: ApiKeyInstallerImpl,\n    dependencies: [WcpContext, CreateApiKeyUseCase, DeleteApiKeyUseCase]\n});\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,yCAAyC;AACtE,SAASC,mBAAmB,QAAQ,kEAAkE;AACtG,SAASC,mBAAmB,QAAQ,kEAAkE;AAEtG,SAASC,UAAU,QAAQ,mDAAmD;AAE9E,MAAMC,mBAAmB,CAAmC;EAC/CC,SAAS,GAAG,IAAI;EAChBC,OAAO,GAAG,gBAAgB;EAC1BC,SAAS,GAAG,EAAE;EACfC,MAAM,GAAuBC,SAAS;EAE9CC,WAAWA,CACCC,UAAgC,EAChCC,YAA2C,EAC3CC,YAA2C,EACrD;IAAA,KAHUF,UAAgC,GAAhCA,UAAgC;IAAA,KAChCC,YAA2C,GAA3CA,YAA2C;IAAA,KAC3CC,YAA2C,GAA3CA,YAA2C;EACpD;EAEH,MAAMC,OAAOA,CAAA,EAAkB;IAC3B,MAAMC,IAAI,GAAG,IAAI,CAACJ,UAAU,CAACK,UAAU,CAAC,CAAC;IAEzC,MAAMC,WAAW,GAAGF,IAAI,GAAG,CAAC;MAAEG,IAAI,EAAE,SAAS;MAAEC,GAAG,EAAE;IAAI,CAAC,CAAC,GAAG,CAAC;MAAED,IAAI,EAAE;IAAO,CAAC,CAAC;IAE/E,MAAME,MAAM,GAAG,MAAM,IAAI,CAACR,YAAY,CAACS,OAAO,CAAC;MAC3CH,IAAI,EAAE,iBAAiB;MACvBI,WAAW,EAAE,4DAA4D;MACzEC,IAAI,EAAE,iBAAiB;MACvBN;IACJ,CAAC,CAAC;IAEF,IAAIG,MAAM,CAACI,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAAChB,MAAM,GAAGY,MAAM,CAACK,KAAK;IAC9B;EACJ;EAEA,MAAMC,SAASA,CAAA,EAAkB;IAC7B,IAAI,IAAI,CAAClB,MAAM,EAAE;MACb,MAAM,IAAI,CAACK,YAAY,CAACQ,OAAO,CAAC,IAAI,CAACb,MAAM,CAACmB,EAAE,CAAC;IACnD;EACJ;AACJ;AAEA,OAAO,MAAMC,eAAe,GAAG5B,YAAY,CAAC6B,oBAAoB,CAAC;EAC7DC,cAAc,EAAE1B,mBAAmB;EACnC2B,YAAY,EAAE,CAAC5B,UAAU,EAAEF,mBAAmB,EAAEC,mBAAmB;AACvE,CAAC,CAAC","ignoreList":[]}

package/features/pages/CreatePage/CreatePageUseCase.d.ts

@@ -1,9 +1,11 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { CreatePageUseCase as UseCaseAbstraction, CreatePageRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class CreatePageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, repository: CreatePageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, repository: CreatePageRepository.Interface);
     execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const CreatePageUseCase: typeof CreatePageUseCaseImpl & {

package/features/pages/CreatePage/CreatePageUseCase.js

@@ -2,12 +2,20 @@ import { Result } from "@webiny/feature/api";
 import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { CreatePageUseCase as UseCaseAbstraction, CreatePageRepository } from "./abstractions.js";
 import { PageBeforeCreateEvent, PageAfterCreateEvent } from "./events.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class CreatePageUseCaseImpl {
-  constructor(eventPublisher, repository) {
+  constructor(permissions, eventPublisher, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.repository = repository;
   }
   async execute(data) {
+    const hasPermission = await this.permissions.canCreate("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Publish before create event
     const beforeCreateEvent = new PageBeforeCreateEvent({
       input: data
@@ -31,7 +39,7 @@ class CreatePageUseCaseImpl {
 }
 export const CreatePageUseCase = UseCaseAbstraction.createImplementation({
   implementation: CreatePageUseCaseImpl,
-  dependencies: [EventPublisher, CreatePageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, CreatePageRepository]
 });
 
 //# sourceMappingURL=CreatePageUseCase.js.map

package/features/pages/CreatePage/CreatePageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","EventPublisher","CreatePageUseCase","UseCaseAbstraction","CreatePageRepository","PageBeforeCreateEvent","PageAfterCreateEvent","CreatePageUseCaseImpl","constructor","eventPublisher","repository","execute","data","beforeCreateEvent","input","publish","result","isFail","page","value","afterCreateEvent","ok","createImplementation","implementation","dependencies"],"sources":["CreatePageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { CreatePageUseCase as UseCaseAbstraction, CreatePageRepository } from \"./abstractions.js\";\nimport { PageBeforeCreateEvent, PageAfterCreateEvent } from \"./events.js\";\n\nclass CreatePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private repository: CreatePageRepository.Interface\n    ) {}\n\n    async execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Publish before create event\n        const beforeCreateEvent = new PageBeforeCreateEvent({ input: data });\n\n        await this.eventPublisher.publish(beforeCreateEvent);\n\n        // Execute the create operation\n        const result = await this.repository.execute(data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const page = result.value;\n\n        // Publish after create event\n        const afterCreateEvent = new PageAfterCreateEvent({ page });\n\n        await this.eventPublisher.publish(afterCreateEvent);\n\n        return Result.ok(page);\n    }\n}\n\nexport const CreatePageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: CreatePageUseCaseImpl,\n    dependencies: [EventPublisher, CreatePageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,iBAAiB,IAAIC,kBAAkB,EAAEC,oBAAoB;AACtE,SAASC,qBAAqB,EAAEC,oBAAoB;AAEpD,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,cAAmD,EACnDC,UAA0C,EACpD;IAAA,KAFUD,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,UAA0C,GAA1CA,UAA0C;EACnD;EAEH,MAAMC,OAAOA,CAACC,IAA+B,EAA6B;IACtE;IACA,MAAMC,iBAAiB,GAAG,IAAIR,qBAAqB,CAAC;MAAES,KAAK,EAAEF;IAAK,CAAC,CAAC;IAEpE,MAAM,IAAI,CAACH,cAAc,CAACM,OAAO,CAACF,iBAAiB,CAAC;;IAEpD;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACN,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;IAElD,IAAII,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,IAAI,GAAGF,MAAM,CAACG,KAAK;;IAEzB;IACA,MAAMC,gBAAgB,GAAG,IAAId,oBAAoB,CAAC;MAAEY;IAAK,CAAC,CAAC;IAE3D,MAAM,IAAI,CAACT,cAAc,CAACM,OAAO,CAACK,gBAAgB,CAAC;IAEnD,OAAOpB,MAAM,CAACqB,EAAE,CAACH,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMhB,iBAAiB,GAAGC,kBAAkB,CAACmB,oBAAoB,CAAC;EACrEC,cAAc,EAAEhB,qBAAqB;EACrCiB,YAAY,EAAE,CAACvB,cAAc,EAAEG,oBAAoB;AACvD,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","EventPublisher","CreatePageUseCase","UseCaseAbstraction","CreatePageRepository","PageBeforeCreateEvent","PageAfterCreateEvent","WbPermissions","PageNotAuthorizedError","CreatePageUseCaseImpl","constructor","permissions","eventPublisher","repository","execute","data","hasPermission","canCreate","fail","beforeCreateEvent","input","publish","result","isFail","page","value","afterCreateEvent","ok","createImplementation","implementation","dependencies","Abstraction"],"sources":["CreatePageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { CreatePageUseCase as UseCaseAbstraction, CreatePageRepository } from \"./abstractions.js\";\nimport { PageBeforeCreateEvent, PageAfterCreateEvent } from \"./events.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass CreatePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private repository: CreatePageRepository.Interface\n    ) {}\n\n    async execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canCreate(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before create event\n        const beforeCreateEvent = new PageBeforeCreateEvent({ input: data });\n\n        await this.eventPublisher.publish(beforeCreateEvent);\n\n        // Execute the create operation\n        const result = await this.repository.execute(data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const page = result.value;\n\n        // Publish after create event\n        const afterCreateEvent = new PageAfterCreateEvent({ page });\n\n        await this.eventPublisher.publish(afterCreateEvent);\n\n        return Result.ok(page);\n    }\n}\n\nexport const CreatePageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: CreatePageUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, EventPublisher, CreatePageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,iBAAiB,IAAIC,kBAAkB,EAAEC,oBAAoB;AACtE,SAASC,qBAAqB,EAAEC,oBAAoB;AACpD,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,UAA0C,EACpD;IAAA,KAHUF,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,UAA0C,GAA1CA,UAA0C;EACnD;EAEH,MAAMC,OAAOA,CAACC,IAA+B,EAA6B;IACtE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACL,WAAW,CAACM,SAAS,CAAC,MAAM,CAAC;IAC9D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOhB,MAAM,CAACkB,IAAI,CAAC,IAAIV,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMW,iBAAiB,GAAG,IAAId,qBAAqB,CAAC;MAAEe,KAAK,EAAEL;IAAK,CAAC,CAAC;IAEpE,MAAM,IAAI,CAACH,cAAc,CAACS,OAAO,CAACF,iBAAiB,CAAC;;IAEpD;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACT,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;IAElD,IAAIO,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,IAAI,GAAGF,MAAM,CAACG,KAAK;;IAEzB;IACA,MAAMC,gBAAgB,GAAG,IAAIpB,oBAAoB,CAAC;MAAEkB;IAAK,CAAC,CAAC;IAE3D,MAAM,IAAI,CAACZ,cAAc,CAACS,OAAO,CAACK,gBAAgB,CAAC;IAEnD,OAAO1B,MAAM,CAAC2B,EAAE,CAACH,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMtB,iBAAiB,GAAGC,kBAAkB,CAACyB,oBAAoB,CAAC;EACrEC,cAAc,EAAEpB,qBAAqB;EACrCqB,YAAY,EAAE,CAACvB,aAAa,CAACwB,WAAW,EAAE9B,cAAc,EAAEG,oBAAoB;AAClF,CAAC,CAAC","ignoreList":[]}

package/features/pages/CreatePage/abstractions.d.ts

@@ -1,7 +1,7 @@
 import { type Result } from "@webiny/feature/api";
 import type { DomainEvent, IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PagePersistenceError, PageValidationError } from "../../../domain/page/errors.js";
+import { PagePersistenceError, PageValidationError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export type ICreateWbPageParams = Pick<WbPage, "properties" | "metadata" | "bindings" | "elements" | "location" | "extensions">;
 export interface ICreatePageRepository {
     execute(data: ICreateWbPageParams): Promise<Result<WbPage, RepositoryError>>;
@@ -22,6 +22,7 @@ export interface ICreatePageUseCase {
     execute(data: ICreateWbPageParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface ICreatePageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     validation: PageValidationError;
     persistence: PagePersistenceError;
 }

package/features/pages/CreatePage/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","CreatePageRepository","CreatePageUseCase","PageBeforeCreateHandler","PageAfterCreateHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { DomainEvent, IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { PagePersistenceError, PageValidationError } from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport type ICreateWbPageParams = Pick<\n    WbPage,\n    \"properties\" | \"metadata\" | \"bindings\" | \"elements\" | \"location\" | \"extensions\"\n>;\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface ICreatePageRepository {\n    execute(data: ICreateWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface ICreatePageRepositoryErrors {\n    validation: PageValidationError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = ICreatePageRepositoryErrors[keyof ICreatePageRepositoryErrors];\n\nexport const CreatePageRepository =\n    createAbstraction<ICreatePageRepository>(\"Wb/CreatePageRepository\");\n\nexport namespace CreatePageRepository {\n    export type Interface = ICreatePageRepository;\n    export type Params = ICreateWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface ICreatePageUseCase {\n    execute(data: ICreateWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface ICreatePageUseCaseErrors {\n    validation: PageValidationError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = ICreatePageUseCaseErrors[keyof ICreatePageUseCaseErrors];\n\nexport const CreatePageUseCase = createAbstraction<ICreatePageUseCase>(\"Wb/CreatePageUseCase\");\n\nexport namespace CreatePageUseCase {\n    export type Interface = ICreatePageUseCase;\n    export type Params = ICreateWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeCreatePayload {\n    input: ICreateWbPageParams;\n}\n\nexport interface PageAfterCreatePayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeCreateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeCreatePayload>>\n>(\"Wb/PageBeforeCreateHandler\");\n\nexport namespace PageBeforeCreateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeCreatePayload>>;\n    export type Event = DomainEvent<PageBeforeCreatePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterCreateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterCreatePayload>>\n>(\"Wb/PageAfterCreateHandler\");\n\nexport namespace PageAfterCreateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterCreatePayload>>;\n    export type Event = DomainEvent<PageAfterCreatePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAKpE;AACA;AACA;;AAOA;AACA;AACA;;AAaA,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,yBAAyB,CAAC;;AASvE;AACA;AACA;;AAaA,OAAO,MAAME,iBAAiB,GAAGF,iBAAiB,CAAqB,sBAAsB,CAAC;;AAU9F;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,uBAAuB,GAAGH,iBAAiB,CAEtD,4BAA4B,CAAC;AAQ/B,OAAO,MAAMI,sBAAsB,GAAGJ,iBAAiB,CAErD,2BAA2B,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","CreatePageRepository","CreatePageUseCase","PageBeforeCreateHandler","PageAfterCreateHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { DomainEvent, IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PagePersistenceError,\n    PageValidationError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport type ICreateWbPageParams = Pick<\n    WbPage,\n    \"properties\" | \"metadata\" | \"bindings\" | \"elements\" | \"location\" | \"extensions\"\n>;\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface ICreatePageRepository {\n    execute(data: ICreateWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface ICreatePageRepositoryErrors {\n    validation: PageValidationError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = ICreatePageRepositoryErrors[keyof ICreatePageRepositoryErrors];\n\nexport const CreatePageRepository =\n    createAbstraction<ICreatePageRepository>(\"Wb/CreatePageRepository\");\n\nexport namespace CreatePageRepository {\n    export type Interface = ICreatePageRepository;\n    export type Params = ICreateWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface ICreatePageUseCase {\n    execute(data: ICreateWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface ICreatePageUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    validation: PageValidationError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = ICreatePageUseCaseErrors[keyof ICreatePageUseCaseErrors];\n\nexport const CreatePageUseCase = createAbstraction<ICreatePageUseCase>(\"Wb/CreatePageUseCase\");\n\nexport namespace CreatePageUseCase {\n    export type Interface = ICreatePageUseCase;\n    export type Params = ICreateWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeCreatePayload {\n    input: ICreateWbPageParams;\n}\n\nexport interface PageAfterCreatePayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeCreateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeCreatePayload>>\n>(\"Wb/PageBeforeCreateHandler\");\n\nexport namespace PageBeforeCreateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeCreatePayload>>;\n    export type Event = DomainEvent<PageBeforeCreatePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterCreateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterCreatePayload>>\n>(\"Wb/PageAfterCreateHandler\");\n\nexport namespace PageAfterCreateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterCreatePayload>>;\n    export type Event = DomainEvent<PageAfterCreatePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AASpE;AACA;AACA;;AAOA;AACA;AACA;;AAaA,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,yBAAyB,CAAC;;AASvE;AACA;AACA;;AAcA,OAAO,MAAME,iBAAiB,GAAGF,iBAAiB,CAAqB,sBAAsB,CAAC;;AAU9F;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,uBAAuB,GAAGH,iBAAiB,CAEtD,4BAA4B,CAAC;AAQ/B,OAAO,MAAMI,sBAAsB,GAAGJ,iBAAiB,CAErD,2BAA2B,CAAC","ignoreList":[]}

package/features/pages/CreatePageRevisionFrom/CreatePageRevisionFromUseCase.d.ts

@@ -1,9 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { CreatePageRevisionFromUseCase as UseCaseAbstraction, CreatePageRevisionFromRepository } from "./abstractions.js";
+import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class CreatePageRevisionFromUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
+    private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, repository: CreatePageRevisionFromRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: CreatePageRevisionFromRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const CreatePageRevisionFromUseCase: typeof CreatePageRevisionFromUseCaseImpl & {

package/features/pages/CreatePageRevisionFrom/CreatePageRevisionFromUseCase.js

@@ -2,12 +2,28 @@ import { Result } from "@webiny/feature/api";
 import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { CreatePageRevisionFromUseCase as UseCaseAbstraction, CreatePageRevisionFromRepository } from "./abstractions.js";
 import { PageBeforeCreateRevisionFromEvent, PageAfterCreateRevisionFromEvent } from "./events.js";
+import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class CreatePageRevisionFromUseCaseImpl {
-  constructor(eventPublisher, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
+    this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
+    const hasPermission = await this.permissions.canCreate("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
+    // Verify ownership of the source page
+    const getResult = await this.getPageById.execute(params.id);
+    if (getResult.isFail()) {
+      return getResult;
+    }
+
     // Publish before event
     const beforeEvent = new PageBeforeCreateRevisionFromEvent({
       params
@@ -31,7 +47,7 @@ class CreatePageRevisionFromUseCaseImpl {
 }
 export const CreatePageRevisionFromUseCase = UseCaseAbstraction.createImplementation({
   implementation: CreatePageRevisionFromUseCaseImpl,
-  dependencies: [EventPublisher, CreatePageRevisionFromRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, CreatePageRevisionFromRepository]
 });
 
 //# sourceMappingURL=CreatePageRevisionFromUseCase.js.map

package/features/pages/CreatePageRevisionFrom/CreatePageRevisionFromUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","EventPublisher","CreatePageRevisionFromUseCase","UseCaseAbstraction","CreatePageRevisionFromRepository","PageBeforeCreateRevisionFromEvent","PageAfterCreateRevisionFromEvent","CreatePageRevisionFromUseCaseImpl","constructor","eventPublisher","repository","execute","params","beforeEvent","publish","result","isFail","page","value","afterEvent","ok","createImplementation","implementation","dependencies"],"sources":["CreatePageRevisionFromUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    CreatePageRevisionFromUseCase as UseCaseAbstraction,\n    CreatePageRevisionFromRepository\n} from \"./abstractions.js\";\nimport { PageBeforeCreateRevisionFromEvent, PageAfterCreateRevisionFromEvent } from \"./events.js\";\n\nclass CreatePageRevisionFromUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private repository: CreatePageRevisionFromRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Publish before event\n        const beforeEvent = new PageBeforeCreateRevisionFromEvent({\n            params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the create revision operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const page = result.value;\n\n        // Publish after event\n        const afterEvent = new PageAfterCreateRevisionFromEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(page);\n    }\n}\n\nexport const CreatePageRevisionFromUseCase = UseCaseAbstraction.createImplementation({\n    implementation: CreatePageRevisionFromUseCaseImpl,\n    dependencies: [EventPublisher, CreatePageRevisionFromRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,6BAA6B,IAAIC,kBAAkB,EACnDC,gCAAgC;AAEpC,SAASC,iCAAiC,EAAEC,gCAAgC;AAE5E,MAAMC,iCAAiC,CAAyC;EAC5EC,WAAWA,CACCC,cAAmD,EACnDC,UAAsD,EAChE;IAAA,KAFUD,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,UAAsD,GAAtDA,UAAsD;EAC/D;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE;IACA,MAAMC,WAAW,GAAG,IAAIR,iCAAiC,CAAC;MACtDO;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACH,cAAc,CAACK,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACL,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIG,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;IAEA,MAAME,IAAI,GAAGF,MAAM,CAACG,KAAK;;IAEzB;IACA,MAAMC,UAAU,GAAG,IAAIb,gCAAgC,CAAC;MACpDW;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACR,cAAc,CAACK,OAAO,CAACK,UAAU,CAAC;IAE7C,OAAOnB,MAAM,CAACoB,EAAE,CAACH,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMf,6BAA6B,GAAGC,kBAAkB,CAACkB,oBAAoB,CAAC;EACjFC,cAAc,EAAEf,iCAAiC;EACjDgB,YAAY,EAAE,CAACtB,cAAc,EAAEG,gCAAgC;AACnE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","EventPublisher","CreatePageRevisionFromUseCase","UseCaseAbstraction","CreatePageRevisionFromRepository","PageBeforeCreateRevisionFromEvent","PageAfterCreateRevisionFromEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","CreatePageRevisionFromUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","params","hasPermission","canCreate","fail","getResult","id","isFail","beforeEvent","publish","result","page","value","afterEvent","ok","createImplementation","implementation","dependencies","Abstraction"],"sources":["CreatePageRevisionFromUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    CreatePageRevisionFromUseCase as UseCaseAbstraction,\n    CreatePageRevisionFromRepository\n} from \"./abstractions.js\";\nimport { PageBeforeCreateRevisionFromEvent, PageAfterCreateRevisionFromEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass CreatePageRevisionFromUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: CreatePageRevisionFromRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canCreate(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Verify ownership of the source page\n        const getResult = await this.getPageById.execute(params.id);\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        // Publish before event\n        const beforeEvent = new PageBeforeCreateRevisionFromEvent({\n            params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the create revision operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        const page = result.value;\n\n        // Publish after event\n        const afterEvent = new PageAfterCreateRevisionFromEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(page);\n    }\n}\n\nexport const CreatePageRevisionFromUseCase = UseCaseAbstraction.createImplementation({\n    implementation: CreatePageRevisionFromUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        CreatePageRevisionFromRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,6BAA6B,IAAIC,kBAAkB,EACnDC,gCAAgC;AAEpC,SAASC,iCAAiC,EAAEC,gCAAgC;AAC5E,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,iCAAiC,CAAyC;EAC5EC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAAsD,EAChE;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAAsD,GAAtDA,UAAsD;EAC/D;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACN,WAAW,CAACO,SAAS,CAAC,MAAM,CAAC;IAC9D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOlB,MAAM,CAACoB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMY,SAAS,GAAG,MAAM,IAAI,CAACP,WAAW,CAACE,OAAO,CAACC,MAAM,CAACK,EAAE,CAAC;IAC3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;;IAEA;IACA,MAAMG,WAAW,GAAG,IAAInB,iCAAiC,CAAC;MACtDY;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACJ,cAAc,CAACY,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACX,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIS,MAAM,CAACH,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOG,MAAM;IACjB;IAEA,MAAMC,IAAI,GAAGD,MAAM,CAACE,KAAK;;IAEzB;IACA,MAAMC,UAAU,GAAG,IAAIvB,gCAAgC,CAAC;MACpDqB;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACd,cAAc,CAACY,OAAO,CAACI,UAAU,CAAC;IAE7C,OAAO7B,MAAM,CAAC8B,EAAE,CAACH,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMzB,6BAA6B,GAAGC,kBAAkB,CAAC4B,oBAAoB,CAAC;EACjFC,cAAc,EAAEtB,iCAAiC;EACjDuB,YAAY,EAAE,CACVzB,aAAa,CAAC0B,WAAW,EACzBjC,cAAc,EACdM,kBAAkB,EAClBH,gCAAgC;AAExC,CAAC,CAAC","ignoreList":[]}

package/features/pages/CreatePageRevisionFrom/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PageNotFoundError, PagePersistenceError, PageValidationError } from "../../../domain/page/errors.js";
+import { PageNotFoundError, PagePersistenceError, PageValidationError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export interface ICreateWbPageRevisionFromParams {
     id: string;
 }
@@ -26,6 +26,7 @@ export interface ICreatePageRevisionFromUseCase {
     execute(params: ICreateWbPageRevisionFromParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface ICreatePageRevisionFromUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     validation: PageValidationError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;

package/features/pages/CreatePageRevisionFrom/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","CreatePageRevisionFromRepository","CreatePageRevisionFromUseCase","PageBeforeCreateRevisionFromHandler","PageAfterCreateRevisionFromHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageValidationError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface ICreateWbPageRevisionFromParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface ICreatePageRevisionFromRepository {\n    execute(params: ICreateWbPageRevisionFromParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface ICreatePageRevisionFromRepositoryErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError =\n    ICreatePageRevisionFromRepositoryErrors[keyof ICreatePageRevisionFromRepositoryErrors];\n\nexport const CreatePageRevisionFromRepository =\n    createAbstraction<ICreatePageRevisionFromRepository>(\"Wb/CreatePageRevisionFromRepository\");\n\nexport namespace CreatePageRevisionFromRepository {\n    export type Interface = ICreatePageRevisionFromRepository;\n    export type Params = ICreateWbPageRevisionFromParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface ICreatePageRevisionFromUseCase {\n    execute(params: ICreateWbPageRevisionFromParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface ICreatePageRevisionFromUseCaseErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError =\n    ICreatePageRevisionFromUseCaseErrors[keyof ICreatePageRevisionFromUseCaseErrors];\n\nexport const CreatePageRevisionFromUseCase = createAbstraction<ICreatePageRevisionFromUseCase>(\n    \"Wb/CreatePageRevisionFromUseCase\"\n);\n\nexport namespace CreatePageRevisionFromUseCase {\n    export type Interface = ICreatePageRevisionFromUseCase;\n    export type Params = ICreateWbPageRevisionFromParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeCreateRevisionFromPayload {\n    params: ICreateWbPageRevisionFromParams;\n}\n\nexport interface PageAfterCreateRevisionFromPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeCreateRevisionFromHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeCreateRevisionFromPayload>>\n>(\"Wb/PageBeforeCreateRevisionFromHandler\");\n\nexport namespace PageBeforeCreateRevisionFromHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeCreateRevisionFromPayload>>;\n    export type Event = DomainEvent<PageBeforeCreateRevisionFromPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterCreateRevisionFromHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterCreateRevisionFromPayload>>\n>(\"Wb/PageAfterCreateRevisionFromHandler\");\n\nexport namespace PageAfterCreateRevisionFromHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterCreateRevisionFromPayload>>;\n    export type Event = DomainEvent<PageAfterCreateRevisionFromPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAUpE;AACA;AACA;;AAMA;AACA;AACA;;AAeA,OAAO,MAAMC,gCAAgC,GACzCD,iBAAiB,CAAoC,qCAAqC,CAAC;;AAS/F;AACA;AACA;;AAeA,OAAO,MAAME,6BAA6B,GAAGF,iBAAiB,CAC1D,kCACJ,CAAC;;AAUD;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,mCAAmC,GAAGH,iBAAiB,CAElE,wCAAwC,CAAC;AAQ3C,OAAO,MAAMI,kCAAkC,GAAGJ,iBAAiB,CAEjE,uCAAuC,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","CreatePageRevisionFromRepository","CreatePageRevisionFromUseCase","PageBeforeCreateRevisionFromHandler","PageAfterCreateRevisionFromHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageValidationError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface ICreateWbPageRevisionFromParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface ICreatePageRevisionFromRepository {\n    execute(params: ICreateWbPageRevisionFromParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface ICreatePageRevisionFromRepositoryErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError =\n    ICreatePageRevisionFromRepositoryErrors[keyof ICreatePageRevisionFromRepositoryErrors];\n\nexport const CreatePageRevisionFromRepository =\n    createAbstraction<ICreatePageRevisionFromRepository>(\"Wb/CreatePageRevisionFromRepository\");\n\nexport namespace CreatePageRevisionFromRepository {\n    export type Interface = ICreatePageRevisionFromRepository;\n    export type Params = ICreateWbPageRevisionFromParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface ICreatePageRevisionFromUseCase {\n    execute(params: ICreateWbPageRevisionFromParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface ICreatePageRevisionFromUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError =\n    ICreatePageRevisionFromUseCaseErrors[keyof ICreatePageRevisionFromUseCaseErrors];\n\nexport const CreatePageRevisionFromUseCase = createAbstraction<ICreatePageRevisionFromUseCase>(\n    \"Wb/CreatePageRevisionFromUseCase\"\n);\n\nexport namespace CreatePageRevisionFromUseCase {\n    export type Interface = ICreatePageRevisionFromUseCase;\n    export type Params = ICreateWbPageRevisionFromParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeCreateRevisionFromPayload {\n    params: ICreateWbPageRevisionFromParams;\n}\n\nexport interface PageAfterCreateRevisionFromPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeCreateRevisionFromHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeCreateRevisionFromPayload>>\n>(\"Wb/PageBeforeCreateRevisionFromHandler\");\n\nexport namespace PageBeforeCreateRevisionFromHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeCreateRevisionFromPayload>>;\n    export type Event = DomainEvent<PageBeforeCreateRevisionFromPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterCreateRevisionFromHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterCreateRevisionFromPayload>>\n>(\"Wb/PageAfterCreateRevisionFromHandler\");\n\nexport namespace PageAfterCreateRevisionFromHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterCreateRevisionFromPayload>>;\n    export type Event = DomainEvent<PageAfterCreateRevisionFromPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAWpE;AACA;AACA;;AAMA;AACA;AACA;;AAeA,OAAO,MAAMC,gCAAgC,GACzCD,iBAAiB,CAAoC,qCAAqC,CAAC;;AAS/F;AACA;AACA;;AAgBA,OAAO,MAAME,6BAA6B,GAAGF,iBAAiB,CAC1D,kCACJ,CAAC;;AAUD;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,mCAAmC,GAAGH,iBAAiB,CAElE,wCAAwC,CAAC;AAQ3C,OAAO,MAAMI,kCAAkC,GAAGJ,iBAAiB,CAEjE,uCAAuC,CAAC","ignoreList":[]}

package/features/pages/DeletePage/DeletePageUseCase.d.ts

@@ -1,11 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { DeletePageUseCase as UseCaseAbstraction, DeletePageRepository } from "./abstractions.js";
 import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class DeletePageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: DeletePageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: DeletePageRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const DeletePageUseCase: typeof DeletePageUseCaseImpl & {

package/features/pages/DeletePage/DeletePageUseCase.js

@@ -3,19 +3,26 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { DeletePageUseCase as UseCaseAbstraction, DeletePageRepository } from "./abstractions.js";
 import { PageBeforeDeleteEvent, PageAfterDeleteEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class DeletePageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
-    // Get the page first to include in events
+    // Get the page first to include in events and for item-level permission check
     const getResult = await this.getPageById.execute(params.id);
     if (getResult.isFail()) {
       return Result.fail(getResult.error);
     }
     const page = getResult.value;
+    const canDelete = await this.permissions.canDelete("page", page);
+    if (!canDelete) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before delete event
     const beforeEvent = new PageBeforeDeleteEvent({
@@ -39,7 +46,7 @@ class DeletePageUseCaseImpl {
 }
 export const DeletePageUseCase = UseCaseAbstraction.createImplementation({
   implementation: DeletePageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, DeletePageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, DeletePageRepository]
 });
 
 //# sourceMappingURL=DeletePageUseCase.js.map