@webiny/api-website-builder 0.0.0-unstable.df7a8bb475 → 0.0.0-unstable.e2758ee1cf

package/features/pages/MovePage/MovePageUseCase.js

@@ -3,19 +3,31 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from "./abstractions.js";
 import { PageBeforeMoveEvent, PageAfterMoveEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class MovePageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
+    const hasPermission = await this.permissions.canEdit("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Get the original page for events
     const getResult = await this.getPageById.execute(params.id);
     if (getResult.isFail()) {
       return getResult;
     }
     const original = getResult.value;
+    const canEdit = await this.permissions.canEdit("page", original);
+    if (!canEdit) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before move event
     const beforeEvent = new PageBeforeMoveEvent({
@@ -43,7 +55,7 @@ class MovePageUseCaseImpl {
 export const MovePageUseCase = createImplementation({
   abstraction: UseCaseAbstraction,
   implementation: MovePageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, MovePageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, MovePageRepository]
 });
 
 //# sourceMappingURL=MovePageUseCase.js.map

package/features/pages/MovePage/MovePageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","createImplementation","EventPublisher","MovePageUseCase","UseCaseAbstraction","MovePageRepository","PageBeforeMoveEvent","PageAfterMoveEvent","GetPageByIdUseCase","MovePageUseCaseImpl","constructor","eventPublisher","getPageById","repository","execute","params","getResult","id","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","abstraction","implementation","dependencies"],"sources":["MovePageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from \"./abstractions.js\";\nimport { PageBeforeMoveEvent, PageAfterMoveEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\n\nclass MovePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: MovePageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        // Publish before move event\n        const beforeEvent = new PageBeforeMoveEvent({\n            original,\n            input: params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the move operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after move event\n        const afterEvent = new PageAfterMoveEvent({\n            original,\n            input: params,\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const MovePageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: MovePageUseCaseImpl,\n    dependencies: [EventPublisher, GetPageByIdUseCase, MovePageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,eAAe,IAAIC,kBAAkB,EAAEC,kBAAkB;AAClE,SAASC,mBAAmB,EAAEC,kBAAkB;AAChD,SAASC,kBAAkB;AAE3B,MAAMC,mBAAmB,CAAyC;EAC9DC,WAAWA,CACCC,cAAmD,EACnDC,WAAyC,EACzCC,UAAwC,EAClD;IAAA,KAHUF,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAAwC,GAAxCA,UAAwC;EACjD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE;IACA,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACE,OAAO,CAACC,MAAM,CAACE,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,QAAQ,GAAGH,SAAS,CAACI,KAAK;;IAEhC;IACA,MAAMC,WAAW,GAAG,IAAIf,mBAAmB,CAAC;MACxCa,QAAQ;MACRG,KAAK,EAAEP;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,CAACJ,cAAc,CAACY,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACX,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIS,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIlB,kBAAkB,CAAC;MACtCY,QAAQ;MACRG,KAAK,EAAEP,MAAM;MACbW,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACT,cAAc,CAACY,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAOzB,MAAM,CAAC2B,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMjB,eAAe,GAAGF,oBAAoB,CAAC;EAChD2B,WAAW,EAAExB,kBAAkB;EAC/ByB,cAAc,EAAEpB,mBAAmB;EACnCqB,YAAY,EAAE,CAAC5B,cAAc,EAAEM,kBAAkB,EAAEH,kBAAkB;AACzE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","createImplementation","EventPublisher","MovePageUseCase","UseCaseAbstraction","MovePageRepository","PageBeforeMoveEvent","PageAfterMoveEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","MovePageUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","params","hasPermission","canEdit","fail","getResult","id","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","abstraction","implementation","dependencies","Abstraction"],"sources":["MovePageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { MovePageUseCase as UseCaseAbstraction, MovePageRepository } from \"./abstractions.js\";\nimport { PageBeforeMoveEvent, PageAfterMoveEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass MovePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: MovePageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canEdit(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        const canEdit = await this.permissions.canEdit(\"page\", original);\n        if (!canEdit) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before move event\n        const beforeEvent = new PageBeforeMoveEvent({\n            original,\n            input: params\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the move operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after move event\n        const afterEvent = new PageAfterMoveEvent({\n            original,\n            input: params,\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const MovePageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: MovePageUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        MovePageRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,eAAe,IAAIC,kBAAkB,EAAEC,kBAAkB;AAClE,SAASC,mBAAmB,EAAEC,kBAAkB;AAChD,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,mBAAmB,CAAyC;EAC9DC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAAwC,EAClD;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAAwC,GAAxCA,UAAwC;EACjD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACN,WAAW,CAACO,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOnB,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMY,SAAS,GAAG,MAAM,IAAI,CAACP,WAAW,CAACE,OAAO,CAACC,MAAM,CAACK,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,QAAQ,GAAGH,SAAS,CAACI,KAAK;IAEhC,MAAMN,OAAO,GAAG,MAAM,IAAI,CAACP,WAAW,CAACO,OAAO,CAAC,MAAM,EAAEK,QAAQ,CAAC;IAChE,IAAI,CAACL,OAAO,EAAE;MACV,OAAOpB,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMiB,WAAW,GAAG,IAAIrB,mBAAmB,CAAC;MACxCmB,QAAQ;MACRG,KAAK,EAAEV;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,CAACJ,cAAc,CAACe,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACd,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIY,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIxB,kBAAkB,CAAC;MACtCkB,QAAQ;MACRG,KAAK,EAAEV,MAAM;MACbc,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACZ,cAAc,CAACe,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAO/B,MAAM,CAACiC,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMvB,eAAe,GAAGF,oBAAoB,CAAC;EAChDiC,WAAW,EAAE9B,kBAAkB;EAC/B+B,cAAc,EAAExB,mBAAmB;EACnCyB,YAAY,EAAE,CACV3B,aAAa,CAAC4B,WAAW,EACzBnC,cAAc,EACdM,kBAAkB,EAClBH,kBAAkB;AAE1B,CAAC,CAAC","ignoreList":[]}

package/features/pages/MovePage/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export interface IMoveWbPageParams {
     id: string;
     folderId: string;
@@ -26,6 +26,7 @@ export interface IMovePageUseCase {
     execute(params: IMoveWbPageParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IMovePageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }

package/features/pages/MovePage/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","MovePageRepository","MovePageUseCase","PageBeforeMoveHandler","PageAfterMoveHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { PageNotFoundError, PagePersistenceError } from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IMoveWbPageParams {\n    id: string;\n    folderId: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IMovePageRepository {\n    execute(params: IMoveWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IMovePageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IMovePageRepositoryErrors[keyof IMovePageRepositoryErrors];\n\nexport const MovePageRepository = createAbstraction<IMovePageRepository>(\"Wb/MovePageRepository\");\n\nexport namespace MovePageRepository {\n    export type Interface = IMovePageRepository;\n    export type Params = IMoveWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IMovePageUseCase {\n    execute(params: IMoveWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IMovePageUseCaseErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IMovePageUseCaseErrors[keyof IMovePageUseCaseErrors];\n\nexport const MovePageUseCase = createAbstraction<IMovePageUseCase>(\"Wb/MovePageUseCase\");\n\nexport namespace MovePageUseCase {\n    export type Interface = IMovePageUseCase;\n    export type Params = IMoveWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeMovePayload {\n    original: WbPage;\n    input: IMoveWbPageParams;\n}\n\nexport interface PageAfterMovePayload {\n    original: WbPage;\n    input: IMoveWbPageParams;\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeMoveHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeMovePayload>>\n>(\"Wb/PageBeforeMoveHandler\");\n\nexport namespace PageBeforeMoveHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeMovePayload>>;\n    export type Event = DomainEvent<PageBeforeMovePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterMoveHandler =\n    createAbstraction<IEventHandler<DomainEvent<PageAfterMovePayload>>>(\"Wb/PageAfterMoveHandler\");\n\nexport namespace PageAfterMoveHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterMovePayload>>;\n    export type Event = DomainEvent<PageAfterMovePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAMpE;AACA;AACA;;AAOA;AACA;AACA;;AAaA,OAAO,MAAMC,kBAAkB,GAAGD,iBAAiB,CAAsB,uBAAuB,CAAC;;AASjG;AACA;AACA;;AAaA,OAAO,MAAME,eAAe,GAAGF,iBAAiB,CAAmB,oBAAoB,CAAC;;AAUxF;AACA;AACA;;AAaA;AACA;AACA;;AAEA,OAAO,MAAMG,qBAAqB,GAAGH,iBAAiB,CAEpD,0BAA0B,CAAC;AAQ7B,OAAO,MAAMI,oBAAoB,GAC7BJ,iBAAiB,CAAmD,yBAAyB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","MovePageRepository","MovePageUseCase","PageBeforeMoveHandler","PageAfterMoveHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IMoveWbPageParams {\n    id: string;\n    folderId: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IMovePageRepository {\n    execute(params: IMoveWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IMovePageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IMovePageRepositoryErrors[keyof IMovePageRepositoryErrors];\n\nexport const MovePageRepository = createAbstraction<IMovePageRepository>(\"Wb/MovePageRepository\");\n\nexport namespace MovePageRepository {\n    export type Interface = IMovePageRepository;\n    export type Params = IMoveWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IMovePageUseCase {\n    execute(params: IMoveWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IMovePageUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IMovePageUseCaseErrors[keyof IMovePageUseCaseErrors];\n\nexport const MovePageUseCase = createAbstraction<IMovePageUseCase>(\"Wb/MovePageUseCase\");\n\nexport namespace MovePageUseCase {\n    export type Interface = IMovePageUseCase;\n    export type Params = IMoveWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeMovePayload {\n    original: WbPage;\n    input: IMoveWbPageParams;\n}\n\nexport interface PageAfterMovePayload {\n    original: WbPage;\n    input: IMoveWbPageParams;\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeMoveHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeMovePayload>>\n>(\"Wb/PageBeforeMoveHandler\");\n\nexport namespace PageBeforeMoveHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeMovePayload>>;\n    export type Event = DomainEvent<PageBeforeMovePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterMoveHandler =\n    createAbstraction<IEventHandler<DomainEvent<PageAfterMovePayload>>>(\"Wb/PageAfterMoveHandler\");\n\nexport namespace PageAfterMoveHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterMovePayload>>;\n    export type Event = DomainEvent<PageAfterMovePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAUpE;AACA;AACA;;AAOA;AACA;AACA;;AAaA,OAAO,MAAMC,kBAAkB,GAAGD,iBAAiB,CAAsB,uBAAuB,CAAC;;AASjG;AACA;AACA;;AAcA,OAAO,MAAME,eAAe,GAAGF,iBAAiB,CAAmB,oBAAoB,CAAC;;AAUxF;AACA;AACA;;AAaA;AACA;AACA;;AAEA,OAAO,MAAMG,qBAAqB,GAAGH,iBAAiB,CAEpD,0BAA0B,CAAC;AAQ7B,OAAO,MAAMI,oBAAoB,GAC7BJ,iBAAiB,CAAmD,yBAAyB,CAAC","ignoreList":[]}

package/features/pages/PublishPage/PublishPageUseCase.d.ts

@@ -1,11 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { PublishPageUseCase as UseCaseAbstraction, PublishPageRepository } from "./abstractions.js";
 import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class PublishPageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: PublishPageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: PublishPageRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const PublishPageUseCase: import("@webiny/di").Implementation<typeof PublishPageUseCaseImpl>;

package/features/pages/PublishPage/PublishPageUseCase.js

@@ -3,19 +3,31 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { PublishPageUseCase as UseCaseAbstraction, PublishPageRepository } from "./abstractions.js";
 import { PageBeforePublishEvent, PageAfterPublishEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class PublishPageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
+    const hasPermission = await this.permissions.canPublish("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Get the page first for the before event
     const getResult = await this.getPageById.execute(params.id);
     if (getResult.isFail()) {
       return getResult;
     }
     const page = getResult.value;
+    const canAccess = await this.permissions.canAccess("page", page);
+    if (!canAccess) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before publish event
     const beforeEvent = new PageBeforePublishEvent({
@@ -40,7 +52,7 @@ class PublishPageUseCaseImpl {
 export const PublishPageUseCase = createImplementation({
   abstraction: UseCaseAbstraction,
   implementation: PublishPageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, PublishPageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, PublishPageRepository]
 });
 
 //# sourceMappingURL=PublishPageUseCase.js.map

package/features/pages/PublishPage/PublishPageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","createImplementation","EventPublisher","PublishPageUseCase","UseCaseAbstraction","PublishPageRepository","PageBeforePublishEvent","PageAfterPublishEvent","GetPageByIdUseCase","PublishPageUseCaseImpl","constructor","eventPublisher","getPageById","repository","execute","params","getResult","id","isFail","page","value","beforeEvent","publish","result","afterEvent","ok","abstraction","implementation","dependencies"],"sources":["PublishPageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { PublishPageUseCase as UseCaseAbstraction, PublishPageRepository } from \"./abstractions.js\";\nimport { PageBeforePublishEvent, PageAfterPublishEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\n\nclass PublishPageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: PublishPageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Get the page first for the before event\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const page = getResult.value;\n\n        // Publish before publish event\n        const beforeEvent = new PageBeforePublishEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the publish operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after publish event\n        const afterEvent = new PageAfterPublishEvent({\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const PublishPageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: PublishPageUseCaseImpl,\n    dependencies: [EventPublisher, GetPageByIdUseCase, PublishPageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,kBAAkB,IAAIC,kBAAkB,EAAEC,qBAAqB;AACxE,SAASC,sBAAsB,EAAEC,qBAAqB;AACtD,SAASC,kBAAkB;AAE3B,MAAMC,sBAAsB,CAAyC;EACjEC,WAAWA,CACCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA2C,EACrD;IAAA,KAHUF,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA2C,GAA3CA,UAA2C;EACpD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE;IACA,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACE,OAAO,CAACC,MAAM,CAACE,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,IAAI,GAAGH,SAAS,CAACI,KAAK;;IAE5B;IACA,MAAMC,WAAW,GAAG,IAAIf,sBAAsB,CAAC;MAC3Ca;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACR,cAAc,CAACW,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACV,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIQ,MAAM,CAACL,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOK,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIjB,qBAAqB,CAAC;MACzCY,IAAI,EAAEI,MAAM,CAACH;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACT,cAAc,CAACW,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAOxB,MAAM,CAACyB,EAAE,CAACF,MAAM,CAACH,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMjB,kBAAkB,GAAGF,oBAAoB,CAAC;EACnDyB,WAAW,EAAEtB,kBAAkB;EAC/BuB,cAAc,EAAElB,sBAAsB;EACtCmB,YAAY,EAAE,CAAC1B,cAAc,EAAEM,kBAAkB,EAAEH,qBAAqB;AAC5E,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","createImplementation","EventPublisher","PublishPageUseCase","UseCaseAbstraction","PublishPageRepository","PageBeforePublishEvent","PageAfterPublishEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","PublishPageUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","params","hasPermission","canPublish","fail","getResult","id","isFail","page","value","canAccess","beforeEvent","publish","result","afterEvent","ok","abstraction","implementation","dependencies","Abstraction"],"sources":["PublishPageUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { PublishPageUseCase as UseCaseAbstraction, PublishPageRepository } from \"./abstractions.js\";\nimport { PageBeforePublishEvent, PageAfterPublishEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass PublishPageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: PublishPageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canPublish(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Get the page first for the before event\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const page = getResult.value;\n\n        const canAccess = await this.permissions.canAccess(\"page\", page);\n        if (!canAccess) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before publish event\n        const beforeEvent = new PageBeforePublishEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the publish operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after publish event\n        const afterEvent = new PageAfterPublishEvent({\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const PublishPageUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: PublishPageUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        PublishPageRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,kBAAkB,IAAIC,kBAAkB,EAAEC,qBAAqB;AACxE,SAASC,sBAAsB,EAAEC,qBAAqB;AACtD,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,sBAAsB,CAAyC;EACjEC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA2C,EACrD;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA2C,GAA3CA,UAA2C;EACpD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACN,WAAW,CAACO,UAAU,CAAC,MAAM,CAAC;IAC/D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOnB,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMY,SAAS,GAAG,MAAM,IAAI,CAACP,WAAW,CAACE,OAAO,CAACC,MAAM,CAACK,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,IAAI,GAAGH,SAAS,CAACI,KAAK;IAE5B,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACd,WAAW,CAACc,SAAS,CAAC,MAAM,EAAEF,IAAI,CAAC;IAChE,IAAI,CAACE,SAAS,EAAE;MACZ,OAAO3B,MAAM,CAACqB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMkB,WAAW,GAAG,IAAItB,sBAAsB,CAAC;MAC3CmB;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACX,cAAc,CAACe,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACd,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIY,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIxB,qBAAqB,CAAC;MACzCkB,IAAI,EAAEK,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACZ,cAAc,CAACe,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAO/B,MAAM,CAACgC,EAAE,CAACF,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMvB,kBAAkB,GAAGF,oBAAoB,CAAC;EACnDgC,WAAW,EAAE7B,kBAAkB;EAC/B8B,cAAc,EAAEvB,sBAAsB;EACtCwB,YAAY,EAAE,CACV1B,aAAa,CAAC2B,WAAW,EACzBlC,cAAc,EACdM,kBAAkB,EAClBH,qBAAqB;AAE7B,CAAC,CAAC","ignoreList":[]}

package/features/pages/PublishPage/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export interface IPublishWbPageParams {
     id: string;
 }
@@ -25,6 +25,7 @@ export interface IPublishPageUseCase {
     execute(params: IPublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IPublishPageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }

package/features/pages/PublishPage/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","PublishPageRepository","PublishPageUseCase","PageBeforePublishHandler","PageAfterPublishHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { PageNotFoundError, PagePersistenceError } from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IPublishWbPageParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IPublishPageRepository {\n    execute(params: IPublishWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IPublishPageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IPublishPageRepositoryErrors[keyof IPublishPageRepositoryErrors];\n\nexport const PublishPageRepository = createAbstraction<IPublishPageRepository>(\n    \"Wb/PublishPageRepository\"\n);\n\nexport namespace PublishPageRepository {\n    export type Interface = IPublishPageRepository;\n    export type Params = IPublishWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IPublishPageUseCase {\n    execute(params: IPublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IPublishPageUseCaseErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IPublishPageUseCaseErrors[keyof IPublishPageUseCaseErrors];\n\nexport const PublishPageUseCase = createAbstraction<IPublishPageUseCase>(\"Wb/PublishPageUseCase\");\n\nexport namespace PublishPageUseCase {\n    export type Interface = IPublishPageUseCase;\n    export type Params = IPublishWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforePublishPayload {\n    page: WbPage;\n}\n\nexport interface PageAfterPublishPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforePublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforePublishPayload>>\n>(\"Wb/PageBeforePublishHandler\");\n\nexport namespace PageBeforePublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforePublishPayload>>;\n    export type Event = DomainEvent<PageBeforePublishPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterPublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterPublishPayload>>\n>(\"Wb/PageAfterPublishHandler\");\n\nexport namespace PageAfterPublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterPublishPayload>>;\n    export type Event = DomainEvent<PageAfterPublishPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAMpE;AACA;AACA;;AAMA;AACA;AACA;;AAaA,OAAO,MAAMC,qBAAqB,GAAGD,iBAAiB,CAClD,0BACJ,CAAC;;AASD;AACA;AACA;;AAaA,OAAO,MAAME,kBAAkB,GAAGF,iBAAiB,CAAsB,uBAAuB,CAAC;;AAUjG;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,wBAAwB,GAAGH,iBAAiB,CAEvD,6BAA6B,CAAC;AAQhC,OAAO,MAAMI,uBAAuB,GAAGJ,iBAAiB,CAEtD,4BAA4B,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","PublishPageRepository","PublishPageUseCase","PageBeforePublishHandler","PageAfterPublishHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IPublishWbPageParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IPublishPageRepository {\n    execute(params: IPublishWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IPublishPageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IPublishPageRepositoryErrors[keyof IPublishPageRepositoryErrors];\n\nexport const PublishPageRepository = createAbstraction<IPublishPageRepository>(\n    \"Wb/PublishPageRepository\"\n);\n\nexport namespace PublishPageRepository {\n    export type Interface = IPublishPageRepository;\n    export type Params = IPublishWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IPublishPageUseCase {\n    execute(params: IPublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IPublishPageUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IPublishPageUseCaseErrors[keyof IPublishPageUseCaseErrors];\n\nexport const PublishPageUseCase = createAbstraction<IPublishPageUseCase>(\"Wb/PublishPageUseCase\");\n\nexport namespace PublishPageUseCase {\n    export type Interface = IPublishPageUseCase;\n    export type Params = IPublishWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforePublishPayload {\n    page: WbPage;\n}\n\nexport interface PageAfterPublishPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforePublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforePublishPayload>>\n>(\"Wb/PageBeforePublishHandler\");\n\nexport namespace PageBeforePublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforePublishPayload>>;\n    export type Event = DomainEvent<PageBeforePublishPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterPublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterPublishPayload>>\n>(\"Wb/PageAfterPublishHandler\");\n\nexport namespace PageAfterPublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterPublishPayload>>;\n    export type Event = DomainEvent<PageAfterPublishPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAUpE;AACA;AACA;;AAMA;AACA;AACA;;AAaA,OAAO,MAAMC,qBAAqB,GAAGD,iBAAiB,CAClD,0BACJ,CAAC;;AASD;AACA;AACA;;AAcA,OAAO,MAAME,kBAAkB,GAAGF,iBAAiB,CAAsB,uBAAuB,CAAC;;AAUjG;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,wBAAwB,GAAGH,iBAAiB,CAEvD,6BAA6B,CAAC;AAQhC,OAAO,MAAMI,uBAAuB,GAAGJ,iBAAiB,CAEtD,4BAA4B,CAAC","ignoreList":[]}

package/features/pages/UnpublishPage/UnpublishPageUseCase.d.ts

@@ -1,11 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { UnpublishPageUseCase as UseCaseAbstraction, UnpublishPageRepository } from "./abstractions.js";
 import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class UnpublishPageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: UnpublishPageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: UnpublishPageRepository.Interface);
     execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const UnpublishPageUseCase: typeof UnpublishPageUseCaseImpl & {

package/features/pages/UnpublishPage/UnpublishPageUseCase.js

@@ -3,19 +3,31 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { UnpublishPageUseCase as UseCaseAbstraction, UnpublishPageRepository } from "./abstractions.js";
 import { PageBeforeUnpublishEvent, PageAfterUnpublishEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class UnpublishPageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(params) {
+    const hasPermission = await this.permissions.canUnpublish("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Get the page first for the before event
     const getResult = await this.getPageById.execute(params.id);
     if (getResult.isFail()) {
       return getResult;
     }
     const page = getResult.value;
+    const canAccess = await this.permissions.canAccess("page", page);
+    if (!canAccess) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before unpublish event
     const beforeEvent = new PageBeforeUnpublishEvent({
@@ -39,7 +51,7 @@ class UnpublishPageUseCaseImpl {
 }
 export const UnpublishPageUseCase = UseCaseAbstraction.createImplementation({
   implementation: UnpublishPageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, UnpublishPageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, UnpublishPageRepository]
 });
 
 //# sourceMappingURL=UnpublishPageUseCase.js.map

package/features/pages/UnpublishPage/UnpublishPageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","EventPublisher","UnpublishPageUseCase","UseCaseAbstraction","UnpublishPageRepository","PageBeforeUnpublishEvent","PageAfterUnpublishEvent","GetPageByIdUseCase","UnpublishPageUseCaseImpl","constructor","eventPublisher","getPageById","repository","execute","params","getResult","id","isFail","page","value","beforeEvent","publish","result","afterEvent","ok","createImplementation","implementation","dependencies"],"sources":["UnpublishPageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    UnpublishPageUseCase as UseCaseAbstraction,\n    UnpublishPageRepository\n} from \"./abstractions.js\";\nimport { PageBeforeUnpublishEvent, PageAfterUnpublishEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\n\nclass UnpublishPageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: UnpublishPageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Get the page first for the before event\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const page = getResult.value;\n\n        // Publish before unpublish event\n        const beforeEvent = new PageBeforeUnpublishEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the unpublish operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after unpublish event\n        const afterEvent = new PageAfterUnpublishEvent({\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const UnpublishPageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: UnpublishPageUseCaseImpl,\n    dependencies: [EventPublisher, GetPageByIdUseCase, UnpublishPageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,oBAAoB,IAAIC,kBAAkB,EAC1CC,uBAAuB;AAE3B,SAASC,wBAAwB,EAAEC,uBAAuB;AAC1D,SAASC,kBAAkB;AAE3B,MAAMC,wBAAwB,CAAyC;EACnEC,WAAWA,CACCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA6C,EACvD;IAAA,KAHUF,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA6C,GAA7CA,UAA6C;EACtD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE;IACA,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACJ,WAAW,CAACE,OAAO,CAACC,MAAM,CAACE,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,IAAI,GAAGH,SAAS,CAACI,KAAK;;IAE5B;IACA,MAAMC,WAAW,GAAG,IAAIf,wBAAwB,CAAC;MAC7Ca;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACR,cAAc,CAACW,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACV,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIQ,MAAM,CAACL,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOK,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIjB,uBAAuB,CAAC;MAC3CY,IAAI,EAAEI,MAAM,CAACH;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACT,cAAc,CAACW,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAOvB,MAAM,CAACwB,EAAE,CAACF,MAAM,CAACH,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMjB,oBAAoB,GAAGC,kBAAkB,CAACsB,oBAAoB,CAAC;EACxEC,cAAc,EAAElB,wBAAwB;EACxCmB,YAAY,EAAE,CAAC1B,cAAc,EAAEM,kBAAkB,EAAEH,uBAAuB;AAC9E,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","EventPublisher","UnpublishPageUseCase","UseCaseAbstraction","UnpublishPageRepository","PageBeforeUnpublishEvent","PageAfterUnpublishEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","UnpublishPageUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","params","hasPermission","canUnpublish","fail","getResult","id","isFail","page","value","canAccess","beforeEvent","publish","result","afterEvent","ok","createImplementation","implementation","dependencies","Abstraction"],"sources":["UnpublishPageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    UnpublishPageUseCase as UseCaseAbstraction,\n    UnpublishPageRepository\n} from \"./abstractions.js\";\nimport { PageBeforeUnpublishEvent, PageAfterUnpublishEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass UnpublishPageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: UnpublishPageRepository.Interface\n    ) {}\n\n    async execute(params: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canUnpublish(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Get the page first for the before event\n        const getResult = await this.getPageById.execute(params.id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const page = getResult.value;\n\n        const canAccess = await this.permissions.canAccess(\"page\", page);\n        if (!canAccess) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before unpublish event\n        const beforeEvent = new PageBeforeUnpublishEvent({\n            page\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the unpublish operation\n        const result = await this.repository.execute(params);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after unpublish event\n        const afterEvent = new PageAfterUnpublishEvent({\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const UnpublishPageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: UnpublishPageUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        UnpublishPageRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,oBAAoB,IAAIC,kBAAkB,EAC1CC,uBAAuB;AAE3B,SAASC,wBAAwB,EAAEC,uBAAuB;AAC1D,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,wBAAwB,CAAyC;EACnEC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA6C,EACvD;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA6C,GAA7CA,UAA6C;EACtD;EAEH,MAAMC,OAAOA,CAACC,MAAiC,EAA6B;IACxE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACN,WAAW,CAACO,YAAY,CAAC,MAAM,CAAC;IACjE,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOlB,MAAM,CAACoB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMY,SAAS,GAAG,MAAM,IAAI,CAACP,WAAW,CAACE,OAAO,CAACC,MAAM,CAACK,EAAE,CAAC;IAE3D,IAAID,SAAS,CAACE,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOF,SAAS;IACpB;IAEA,MAAMG,IAAI,GAAGH,SAAS,CAACI,KAAK;IAE5B,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACd,WAAW,CAACc,SAAS,CAAC,MAAM,EAAEF,IAAI,CAAC;IAChE,IAAI,CAACE,SAAS,EAAE;MACZ,OAAO1B,MAAM,CAACoB,IAAI,CAAC,IAAIX,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMkB,WAAW,GAAG,IAAItB,wBAAwB,CAAC;MAC7CmB;IACJ,CAAC,CAAC;IAEF,MAAM,IAAI,CAACX,cAAc,CAACe,OAAO,CAACD,WAAW,CAAC;;IAE9C;IACA,MAAME,MAAM,GAAG,MAAM,IAAI,CAACd,UAAU,CAACC,OAAO,CAACC,MAAM,CAAC;IAEpD,IAAIY,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIxB,uBAAuB,CAAC;MAC3CkB,IAAI,EAAEK,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACZ,cAAc,CAACe,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAO9B,MAAM,CAAC+B,EAAE,CAACF,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMvB,oBAAoB,GAAGC,kBAAkB,CAAC6B,oBAAoB,CAAC;EACxEC,cAAc,EAAEvB,wBAAwB;EACxCwB,YAAY,EAAE,CACV1B,aAAa,CAAC2B,WAAW,EACzBlC,cAAc,EACdM,kBAAkB,EAClBH,uBAAuB;AAE/B,CAAC,CAAC","ignoreList":[]}

package/features/pages/UnpublishPage/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
-import { PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import { PageNotFoundError, PagePersistenceError, PageNotAuthorizedError } from "../../../domain/page/errors.js";
 export interface IUnpublishWbPageParams {
     id: string;
 }
@@ -25,6 +25,7 @@ export interface IUnpublishPageUseCase {
     execute(params: IUnpublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IUnpublishPageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;
 }

package/features/pages/UnpublishPage/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","UnpublishPageRepository","UnpublishPageUseCase","PageBeforeUnpublishHandler","PageAfterUnpublishHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport { PageNotFoundError, PagePersistenceError } from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IUnpublishWbPageParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IUnpublishPageRepository {\n    execute(params: IUnpublishWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IUnpublishPageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IUnpublishPageRepositoryErrors[keyof IUnpublishPageRepositoryErrors];\n\nexport const UnpublishPageRepository = createAbstraction<IUnpublishPageRepository>(\n    \"Wb/UnpublishPageRepository\"\n);\n\nexport namespace UnpublishPageRepository {\n    export type Interface = IUnpublishPageRepository;\n    export type Params = IUnpublishWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IUnpublishPageUseCase {\n    execute(params: IUnpublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IUnpublishPageUseCaseErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IUnpublishPageUseCaseErrors[keyof IUnpublishPageUseCaseErrors];\n\nexport const UnpublishPageUseCase =\n    createAbstraction<IUnpublishPageUseCase>(\"Wb/UnpublishPageUseCase\");\n\nexport namespace UnpublishPageUseCase {\n    export type Interface = IUnpublishPageUseCase;\n    export type Params = IUnpublishWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeUnpublishPayload {\n    page: WbPage;\n}\n\nexport interface PageAfterUnpublishPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeUnpublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeUnpublishPayload>>\n>(\"Wb/PageBeforeUnpublishHandler\");\n\nexport namespace PageBeforeUnpublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeUnpublishPayload>>;\n    export type Event = DomainEvent<PageBeforeUnpublishPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterUnpublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterUnpublishPayload>>\n>(\"Wb/PageAfterUnpublishHandler\");\n\nexport namespace PageAfterUnpublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterUnpublishPayload>>;\n    export type Event = DomainEvent<PageAfterUnpublishPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAMpE;AACA;AACA;;AAMA;AACA;AACA;;AAaA,OAAO,MAAMC,uBAAuB,GAAGD,iBAAiB,CACpD,4BACJ,CAAC;;AASD;AACA;AACA;;AAaA,OAAO,MAAME,oBAAoB,GAC7BF,iBAAiB,CAAwB,yBAAyB,CAAC;;AAUvE;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,0BAA0B,GAAGH,iBAAiB,CAEzD,+BAA+B,CAAC;AAQlC,OAAO,MAAMI,yBAAyB,GAAGJ,iBAAiB,CAExD,8BAA8B,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","UnpublishPageRepository","UnpublishPageUseCase","PageBeforeUnpublishHandler","PageAfterUnpublishHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport {\n    PageNotFoundError,\n    PagePersistenceError,\n    PageNotAuthorizedError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IUnpublishWbPageParams {\n    id: string;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IUnpublishPageRepository {\n    execute(params: IUnpublishWbPageParams): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IUnpublishPageRepositoryErrors {\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IUnpublishPageRepositoryErrors[keyof IUnpublishPageRepositoryErrors];\n\nexport const UnpublishPageRepository = createAbstraction<IUnpublishPageRepository>(\n    \"Wb/UnpublishPageRepository\"\n);\n\nexport namespace UnpublishPageRepository {\n    export type Interface = IUnpublishPageRepository;\n    export type Params = IUnpublishWbPageParams;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IUnpublishPageUseCase {\n    execute(params: IUnpublishWbPageParams): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IUnpublishPageUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IUnpublishPageUseCaseErrors[keyof IUnpublishPageUseCaseErrors];\n\nexport const UnpublishPageUseCase =\n    createAbstraction<IUnpublishPageUseCase>(\"Wb/UnpublishPageUseCase\");\n\nexport namespace UnpublishPageUseCase {\n    export type Interface = IUnpublishPageUseCase;\n    export type Params = IUnpublishWbPageParams;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeUnpublishPayload {\n    page: WbPage;\n}\n\nexport interface PageAfterUnpublishPayload {\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeUnpublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeUnpublishPayload>>\n>(\"Wb/PageBeforeUnpublishHandler\");\n\nexport namespace PageBeforeUnpublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeUnpublishPayload>>;\n    export type Event = DomainEvent<PageBeforeUnpublishPayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterUnpublishHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterUnpublishPayload>>\n>(\"Wb/PageAfterUnpublishHandler\");\n\nexport namespace PageAfterUnpublishHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterUnpublishPayload>>;\n    export type Event = DomainEvent<PageAfterUnpublishPayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAUpE;AACA;AACA;;AAMA;AACA;AACA;;AAaA,OAAO,MAAMC,uBAAuB,GAAGD,iBAAiB,CACpD,4BACJ,CAAC;;AASD;AACA;AACA;;AAcA,OAAO,MAAME,oBAAoB,GAC7BF,iBAAiB,CAAwB,yBAAyB,CAAC;;AAUvE;AACA;AACA;;AAUA;AACA;AACA;;AAEA,OAAO,MAAMG,0BAA0B,GAAGH,iBAAiB,CAEzD,+BAA+B,CAAC;AAQlC,OAAO,MAAMI,yBAAyB,GAAGJ,iBAAiB,CAExD,8BAA8B,CAAC","ignoreList":[]}

package/features/pages/UpdatePage/UpdatePageUseCase.d.ts

@@ -1,11 +1,13 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { UpdatePageUseCase as UseCaseAbstraction, UpdatePageRepository } from "./abstractions.js";
 import { GetPageByIdUseCase } from "../../../features/pages/GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class UpdatePageUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private getPageById;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: UpdatePageRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, getPageById: GetPageByIdUseCase.Interface, repository: UpdatePageRepository.Interface);
     execute(id: string, data: UseCaseAbstraction.UpdateData): UseCaseAbstraction.Return;
 }
 export declare const UpdatePageUseCase: typeof UpdatePageUseCaseImpl & {

package/features/pages/UpdatePage/UpdatePageUseCase.js

@@ -3,19 +3,31 @@ import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { UpdatePageUseCase as UseCaseAbstraction, UpdatePageRepository } from "./abstractions.js";
 import { PageBeforeUpdateEvent, PageAfterUpdateEvent } from "./events.js";
 import { GetPageByIdUseCase } from "../GetPageById/index.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { PageNotAuthorizedError } from "../../../domain/page/errors.js";
 class UpdatePageUseCaseImpl {
-  constructor(eventPublisher, getPageById, repository) {
+  constructor(permissions, eventPublisher, getPageById, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.getPageById = getPageById;
     this.repository = repository;
   }
   async execute(id, data) {
+    const hasPermission = await this.permissions.canEdit("page");
+    if (!hasPermission) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
+
     // Get the original page for events
     const getResult = await this.getPageById.execute(id);
     if (getResult.isFail()) {
       return getResult;
     }
     const original = getResult.value;
+    const canEdit = await this.permissions.canEdit("page", original);
+    if (!canEdit) {
+      return Result.fail(new PageNotAuthorizedError());
+    }
 
     // Publish before update event
     const beforeEvent = new PageBeforeUpdateEvent({
@@ -48,7 +60,7 @@ class UpdatePageUseCaseImpl {
 }
 export const UpdatePageUseCase = UseCaseAbstraction.createImplementation({
   implementation: UpdatePageUseCaseImpl,
-  dependencies: [EventPublisher, GetPageByIdUseCase, UpdatePageRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, GetPageByIdUseCase, UpdatePageRepository]
 });
 
 //# sourceMappingURL=UpdatePageUseCase.js.map

package/features/pages/UpdatePage/UpdatePageUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","EventPublisher","UpdatePageUseCase","UseCaseAbstraction","UpdatePageRepository","PageBeforeUpdateEvent","PageAfterUpdateEvent","GetPageByIdUseCase","UpdatePageUseCaseImpl","constructor","eventPublisher","getPageById","repository","execute","id","data","getResult","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","createImplementation","implementation","dependencies"],"sources":["UpdatePageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { UpdatePageUseCase as UseCaseAbstraction, UpdatePageRepository } from \"./abstractions.js\";\nimport { PageBeforeUpdateEvent, PageAfterUpdateEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\n\nclass UpdatePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: UpdatePageRepository.Interface\n    ) {}\n\n    async execute(id: string, data: UseCaseAbstraction.UpdateData): UseCaseAbstraction.Return {\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        // Publish before update event\n        const beforeEvent = new PageBeforeUpdateEvent({\n            original,\n            input: { id, data }\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the update operation\n        const result = await this.repository.execute(id, data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after update event\n        const afterEvent = new PageAfterUpdateEvent({\n            original,\n            input: { id, data },\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const UpdatePageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: UpdatePageUseCaseImpl,\n    dependencies: [EventPublisher, GetPageByIdUseCase, UpdatePageRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,iBAAiB,IAAIC,kBAAkB,EAAEC,oBAAoB;AACtE,SAASC,qBAAqB,EAAEC,oBAAoB;AACpD,SAASC,kBAAkB;AAE3B,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA0C,EACpD;IAAA,KAHUF,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA0C,GAA1CA,UAA0C;EACnD;EAEH,MAAMC,OAAOA,CAACC,EAAU,EAAEC,IAAmC,EAA6B;IACtF;IACA,MAAMC,SAAS,GAAG,MAAM,IAAI,CAACL,WAAW,CAACE,OAAO,CAACC,EAAE,CAAC;IAEpD,IAAIE,SAAS,CAACC,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOD,SAAS;IACpB;IAEA,MAAME,QAAQ,GAAGF,SAAS,CAACG,KAAK;;IAEhC;IACA,MAAMC,WAAW,GAAG,IAAIf,qBAAqB,CAAC;MAC1Ca,QAAQ;MACRG,KAAK,EAAE;QAAEP,EAAE;QAAEC;MAAK;IACtB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACL,cAAc,CAACY,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACX,UAAU,CAACC,OAAO,CAACC,EAAE,EAAEC,IAAI,CAAC;IAEtD,IAAIQ,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIlB,oBAAoB,CAAC;MACxCY,QAAQ;MACRG,KAAK,EAAE;QAAEP,EAAE;QAAEC;MAAK,CAAC;MACnBU,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACT,cAAc,CAACY,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAOxB,MAAM,CAAC0B,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMjB,iBAAiB,GAAGC,kBAAkB,CAACwB,oBAAoB,CAAC;EACrEC,cAAc,EAAEpB,qBAAqB;EACrCqB,YAAY,EAAE,CAAC5B,cAAc,EAAEM,kBAAkB,EAAEH,oBAAoB;AAC3E,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","EventPublisher","UpdatePageUseCase","UseCaseAbstraction","UpdatePageRepository","PageBeforeUpdateEvent","PageAfterUpdateEvent","GetPageByIdUseCase","WbPermissions","PageNotAuthorizedError","UpdatePageUseCaseImpl","constructor","permissions","eventPublisher","getPageById","repository","execute","id","data","hasPermission","canEdit","fail","getResult","isFail","original","value","beforeEvent","input","publish","result","afterEvent","page","ok","createImplementation","implementation","dependencies","Abstraction"],"sources":["UpdatePageUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport { UpdatePageUseCase as UseCaseAbstraction, UpdatePageRepository } from \"./abstractions.js\";\nimport { PageBeforeUpdateEvent, PageAfterUpdateEvent } from \"./events.js\";\nimport { GetPageByIdUseCase } from \"~/features/pages/GetPageById/index.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { PageNotAuthorizedError } from \"~/domain/page/errors.js\";\n\nclass UpdatePageUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private getPageById: GetPageByIdUseCase.Interface,\n        private repository: UpdatePageRepository.Interface\n    ) {}\n\n    async execute(id: string, data: UseCaseAbstraction.UpdateData): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canEdit(\"page\");\n        if (!hasPermission) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Get the original page for events\n        const getResult = await this.getPageById.execute(id);\n\n        if (getResult.isFail()) {\n            return getResult;\n        }\n\n        const original = getResult.value;\n\n        const canEdit = await this.permissions.canEdit(\"page\", original);\n        if (!canEdit) {\n            return Result.fail(new PageNotAuthorizedError());\n        }\n\n        // Publish before update event\n        const beforeEvent = new PageBeforeUpdateEvent({\n            original,\n            input: { id, data }\n        });\n\n        await this.eventPublisher.publish(beforeEvent);\n\n        // Execute the update operation\n        const result = await this.repository.execute(id, data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after update event\n        const afterEvent = new PageAfterUpdateEvent({\n            original,\n            input: { id, data },\n            page: result.value\n        });\n\n        await this.eventPublisher.publish(afterEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const UpdatePageUseCase = UseCaseAbstraction.createImplementation({\n    implementation: UpdatePageUseCaseImpl,\n    dependencies: [\n        WbPermissions.Abstraction,\n        EventPublisher,\n        GetPageByIdUseCase,\n        UpdatePageRepository\n    ]\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SACIC,cAAc,QAEX,0CAA0C;AACjD,SAASC,iBAAiB,IAAIC,kBAAkB,EAAEC,oBAAoB;AACtE,SAASC,qBAAqB,EAAEC,oBAAoB;AACpD,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,sBAAsB;AAE/B,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,WAAyC,EACzCC,UAA0C,EACpD;IAAA,KAJUH,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,WAAyC,GAAzCA,WAAyC;IAAA,KACzCC,UAA0C,GAA1CA,UAA0C;EACnD;EAEH,MAAMC,OAAOA,CAACC,EAAU,EAAEC,IAAmC,EAA6B;IACtF,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACP,WAAW,CAACQ,OAAO,CAAC,MAAM,CAAC;IAC5D,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOnB,MAAM,CAACqB,IAAI,CAAC,IAAIZ,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMa,SAAS,GAAG,MAAM,IAAI,CAACR,WAAW,CAACE,OAAO,CAACC,EAAE,CAAC;IAEpD,IAAIK,SAAS,CAACC,MAAM,CAAC,CAAC,EAAE;MACpB,OAAOD,SAAS;IACpB;IAEA,MAAME,QAAQ,GAAGF,SAAS,CAACG,KAAK;IAEhC,MAAML,OAAO,GAAG,MAAM,IAAI,CAACR,WAAW,CAACQ,OAAO,CAAC,MAAM,EAAEI,QAAQ,CAAC;IAChE,IAAI,CAACJ,OAAO,EAAE;MACV,OAAOpB,MAAM,CAACqB,IAAI,CAAC,IAAIZ,sBAAsB,CAAC,CAAC,CAAC;IACpD;;IAEA;IACA,MAAMiB,WAAW,GAAG,IAAIrB,qBAAqB,CAAC;MAC1CmB,QAAQ;MACRG,KAAK,EAAE;QAAEV,EAAE;QAAEC;MAAK;IACtB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACL,cAAc,CAACe,OAAO,CAACF,WAAW,CAAC;;IAE9C;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACd,UAAU,CAACC,OAAO,CAACC,EAAE,EAAEC,IAAI,CAAC;IAEtD,IAAIW,MAAM,CAACN,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOM,MAAM;IACjB;;IAEA;IACA,MAAMC,UAAU,GAAG,IAAIxB,oBAAoB,CAAC;MACxCkB,QAAQ;MACRG,KAAK,EAAE;QAAEV,EAAE;QAAEC;MAAK,CAAC;MACnBa,IAAI,EAAEF,MAAM,CAACJ;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,CAACZ,cAAc,CAACe,OAAO,CAACE,UAAU,CAAC;IAE7C,OAAO9B,MAAM,CAACgC,EAAE,CAACH,MAAM,CAACJ,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMvB,iBAAiB,GAAGC,kBAAkB,CAAC8B,oBAAoB,CAAC;EACrEC,cAAc,EAAExB,qBAAqB;EACrCyB,YAAY,EAAE,CACV3B,aAAa,CAAC4B,WAAW,EACzBnC,cAAc,EACdM,kBAAkB,EAClBH,oBAAoB;AAE5B,CAAC,CAAC","ignoreList":[]}

package/features/pages/UpdatePage/abstractions.d.ts

@@ -1,17 +1,16 @@
 import { type Result } from "@webiny/feature/api";
-import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
-import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
+import type { DomainEvent, IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { WbPage } from "../../../domain/page/abstractions.js";
 import type { WbLocation } from "../../../domain/shared/abstractions.js";
-import type { IEntryState } from "@webiny/api-headless-cms/types/index.js";
-import { PageValidationError, PageNotFoundError, PagePersistenceError } from "../../../domain/page/errors.js";
+import type { ICmsEntrySystem } from "@webiny/api-headless-cms/types/index.js";
+import { PageNotAuthorizedError, PageNotFoundError, PagePersistenceError, PageValidationError } from "../../../domain/page/errors.js";
 export interface IUpdateWbPageData {
     location?: WbLocation;
     properties?: Record<string, any>;
     metadata?: Record<string, any>;
     bindings?: Record<string, any>;
     elements?: Record<string, any>;
-    state?: Partial<IEntryState>;
+    system?: ICmsEntrySystem;
 }
 export interface IUpdatePageRepository {
     execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, RepositoryError>>;
@@ -33,6 +32,7 @@ export interface IUpdatePageUseCase {
     execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, UseCaseError>>;
 }
 export interface IUpdatePageUseCaseErrors {
+    notAuthorized: PageNotAuthorizedError;
     validation: PageValidationError;
     notFound: PageNotFoundError;
     persistence: PagePersistenceError;

package/features/pages/UpdatePage/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","UpdatePageRepository","UpdatePageUseCase","PageBeforeUpdateHandler","PageAfterUpdateHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { DomainEvent } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { WbLocation } from \"~/domain/shared/abstractions.js\";\nimport type { IEntryState } from \"@webiny/api-headless-cms/types/index.js\";\nimport {\n    PageValidationError,\n    PageNotFoundError,\n    PagePersistenceError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IUpdateWbPageData {\n    location?: WbLocation;\n    properties?: Record<string, any>;\n    metadata?: Record<string, any>;\n    bindings?: Record<string, any>;\n    elements?: Record<string, any>;\n    // Workflows - remove when workflows are more generic\n    state?: Partial<IEntryState>;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IUpdatePageRepository {\n    execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IUpdatePageRepositoryErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IUpdatePageRepositoryErrors[keyof IUpdatePageRepositoryErrors];\n\nexport const UpdatePageRepository =\n    createAbstraction<IUpdatePageRepository>(\"Wb/UpdatePageRepository\");\n\nexport namespace UpdatePageRepository {\n    export type Interface = IUpdatePageRepository;\n    export type UpdateData = IUpdateWbPageData;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IUpdatePageUseCase {\n    execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IUpdatePageUseCaseErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IUpdatePageUseCaseErrors[keyof IUpdatePageUseCaseErrors];\n\nexport const UpdatePageUseCase = createAbstraction<IUpdatePageUseCase>(\"Wb/UpdatePageUseCase\");\n\nexport namespace UpdatePageUseCase {\n    export type Interface = IUpdatePageUseCase;\n    export type UpdateData = IUpdateWbPageData;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeUpdatePayload {\n    original: WbPage;\n    input: {\n        id: string;\n        data: IUpdateWbPageData;\n    };\n}\n\nexport interface PageAfterUpdatePayload {\n    original: WbPage;\n    input: {\n        id: string;\n        data: IUpdateWbPageData;\n    };\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeUpdateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeUpdatePayload>>\n>(\"Wb/PageBeforeUpdateHandler\");\n\nexport namespace PageBeforeUpdateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeUpdatePayload>>;\n    export type Event = DomainEvent<PageBeforeUpdatePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterUpdateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterUpdatePayload>>\n>(\"Wb/PageAfterUpdateHandler\");\n\nexport namespace PageAfterUpdateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterUpdatePayload>>;\n    export type Event = DomainEvent<PageAfterUpdatePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAYpE;AACA;AACA;;AAYA;AACA;AACA;;AAcA,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,yBAAyB,CAAC;;AASvE;AACA;AACA;;AAcA,OAAO,MAAME,iBAAiB,GAAGF,iBAAiB,CAAqB,sBAAsB,CAAC;;AAU9F;AACA;AACA;;AAmBA;AACA;AACA;;AAEA,OAAO,MAAMG,uBAAuB,GAAGH,iBAAiB,CAEtD,4BAA4B,CAAC;AAQ/B,OAAO,MAAMI,sBAAsB,GAAGJ,iBAAiB,CAErD,2BAA2B,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","UpdatePageRepository","UpdatePageUseCase","PageBeforeUpdateHandler","PageAfterUpdateHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { DomainEvent, IEventHandler } from \"@webiny/api-core/features/EventPublisher\";\nimport type { WbPage } from \"~/domain/page/abstractions.js\";\nimport type { WbLocation } from \"~/domain/shared/abstractions.js\";\nimport type { ICmsEntrySystem } from \"@webiny/api-headless-cms/types/index.js\";\nimport {\n    PageNotAuthorizedError,\n    PageNotFoundError,\n    PagePersistenceError,\n    PageValidationError\n} from \"~/domain/page/errors.js\";\n\n// ============================================================================\n// Type Definitions\n// ============================================================================\n\nexport interface IUpdateWbPageData {\n    location?: WbLocation;\n    properties?: Record<string, any>;\n    metadata?: Record<string, any>;\n    bindings?: Record<string, any>;\n    elements?: Record<string, any>;\n    system?: ICmsEntrySystem;\n}\n\n// ============================================================================\n// Repository Abstraction\n// ============================================================================\n\nexport interface IUpdatePageRepository {\n    execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, RepositoryError>>;\n}\n\nexport interface IUpdatePageRepositoryErrors {\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype RepositoryError = IUpdatePageRepositoryErrors[keyof IUpdatePageRepositoryErrors];\n\nexport const UpdatePageRepository =\n    createAbstraction<IUpdatePageRepository>(\"Wb/UpdatePageRepository\");\n\nexport namespace UpdatePageRepository {\n    export type Interface = IUpdatePageRepository;\n    export type UpdateData = IUpdateWbPageData;\n    export type Return = Promise<Result<WbPage, RepositoryError>>;\n    export type Error = RepositoryError;\n}\n\n// ============================================================================\n// Use Case Abstraction\n// ============================================================================\n\nexport interface IUpdatePageUseCase {\n    execute(id: string, data: IUpdateWbPageData): Promise<Result<WbPage, UseCaseError>>;\n}\n\nexport interface IUpdatePageUseCaseErrors {\n    notAuthorized: PageNotAuthorizedError;\n    validation: PageValidationError;\n    notFound: PageNotFoundError;\n    persistence: PagePersistenceError;\n}\n\ntype UseCaseError = IUpdatePageUseCaseErrors[keyof IUpdatePageUseCaseErrors];\n\nexport const UpdatePageUseCase = createAbstraction<IUpdatePageUseCase>(\"Wb/UpdatePageUseCase\");\n\nexport namespace UpdatePageUseCase {\n    export type Interface = IUpdatePageUseCase;\n    export type UpdateData = IUpdateWbPageData;\n    export type Return = Promise<Result<WbPage, UseCaseError>>;\n    export type Error = UseCaseError;\n    export type Page = WbPage;\n}\n\n// ============================================================================\n// Event Payload Types\n// ============================================================================\n\nexport interface PageBeforeUpdatePayload {\n    original: WbPage;\n    input: {\n        id: string;\n        data: IUpdateWbPageData;\n    };\n}\n\nexport interface PageAfterUpdatePayload {\n    original: WbPage;\n    input: {\n        id: string;\n        data: IUpdateWbPageData;\n    };\n    page: WbPage;\n}\n\n// ============================================================================\n// Event Handler Abstractions\n// ============================================================================\n\nexport const PageBeforeUpdateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageBeforeUpdatePayload>>\n>(\"Wb/PageBeforeUpdateHandler\");\n\nexport namespace PageBeforeUpdateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageBeforeUpdatePayload>>;\n    export type Event = DomainEvent<PageBeforeUpdatePayload>;\n    export type Page = WbPage;\n}\n\nexport const PageAfterUpdateHandler = createAbstraction<\n    IEventHandler<DomainEvent<PageAfterUpdatePayload>>\n>(\"Wb/PageAfterUpdateHandler\");\n\nexport namespace PageAfterUpdateHandler {\n    export type Interface = IEventHandler<DomainEvent<PageAfterUpdatePayload>>;\n    export type Event = DomainEvent<PageAfterUpdatePayload>;\n    export type Page = WbPage;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAqB,qBAAqB;;AAYpE;AACA;AACA;;AAWA;AACA;AACA;;AAcA,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,yBAAyB,CAAC;;AASvE;AACA;AACA;;AAeA,OAAO,MAAME,iBAAiB,GAAGF,iBAAiB,CAAqB,sBAAsB,CAAC;;AAU9F;AACA;AACA;;AAmBA;AACA;AACA;;AAEA,OAAO,MAAMG,uBAAuB,GAAGH,iBAAiB,CAEtD,4BAA4B,CAAC;AAQ/B,OAAO,MAAMI,sBAAsB,GAAGJ,iBAAiB,CAErD,2BAA2B,CAAC","ignoreList":[]}

package/features/redirects/CreateRedirect/CreateRedirectUseCase.d.ts

@@ -1,9 +1,11 @@
 import { EventPublisher as EventPublisherAbstraction } from "@webiny/api-core/features/EventPublisher";
 import { CreateRedirectUseCase as UseCaseAbstraction, CreateRedirectRepository } from "./abstractions.js";
+import { WbPermissions } from "../../../domain/permissions.js";
 declare class CreateRedirectUseCaseImpl implements UseCaseAbstraction.Interface {
+    private permissions;
     private eventPublisher;
     private repository;
-    constructor(eventPublisher: EventPublisherAbstraction.Interface, repository: CreateRedirectRepository.Interface);
+    constructor(permissions: WbPermissions.Interface, eventPublisher: EventPublisherAbstraction.Interface, repository: CreateRedirectRepository.Interface);
     execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return;
 }
 export declare const CreateRedirectUseCase: import("@webiny/di").Implementation<typeof CreateRedirectUseCaseImpl>;

package/features/redirects/CreateRedirect/CreateRedirectUseCase.js

@@ -2,12 +2,20 @@ import { Result, createImplementation } from "@webiny/feature/api";
 import { EventPublisher } from "@webiny/api-core/features/EventPublisher";
 import { CreateRedirectUseCase as UseCaseAbstraction, CreateRedirectRepository } from "./abstractions.js";
 import { RedirectBeforeCreateEvent, RedirectAfterCreateEvent } from "./events.js";
+import { WbPermissions } from "../../../domain/permissions.js";
+import { RedirectNotAuthorizedError } from "../../../domain/redirect/errors.js";
 class CreateRedirectUseCaseImpl {
-  constructor(eventPublisher, repository) {
+  constructor(permissions, eventPublisher, repository) {
+    this.permissions = permissions;
     this.eventPublisher = eventPublisher;
     this.repository = repository;
   }
   async execute(data) {
+    const hasPermission = await this.permissions.canCreate("redirect");
+    if (!hasPermission) {
+      return Result.fail(new RedirectNotAuthorizedError());
+    }
+
     // Publish before create event
     const beforeCreateEvent = new RedirectBeforeCreateEvent({
       input: data
@@ -31,7 +39,7 @@ class CreateRedirectUseCaseImpl {
 export const CreateRedirectUseCase = createImplementation({
   abstraction: UseCaseAbstraction,
   implementation: CreateRedirectUseCaseImpl,
-  dependencies: [EventPublisher, CreateRedirectRepository]
+  dependencies: [WbPermissions.Abstraction, EventPublisher, CreateRedirectRepository]
 });
 
 //# sourceMappingURL=CreateRedirectUseCase.js.map

package/features/redirects/CreateRedirect/CreateRedirectUseCase.js.map

@@ -1 +1 @@
-{"version":3,"names":["Result","createImplementation","EventPublisher","CreateRedirectUseCase","UseCaseAbstraction","CreateRedirectRepository","RedirectBeforeCreateEvent","RedirectAfterCreateEvent","CreateRedirectUseCaseImpl","constructor","eventPublisher","repository","execute","data","beforeCreateEvent","input","publish","result","isFail","afterCreateEvent","redirect","value","ok","abstraction","implementation","dependencies"],"sources":["CreateRedirectUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    CreateRedirectUseCase as UseCaseAbstraction,\n    CreateRedirectRepository\n} from \"./abstractions.js\";\nimport { RedirectBeforeCreateEvent, RedirectAfterCreateEvent } from \"./events.js\";\n\nclass CreateRedirectUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private repository: CreateRedirectRepository.Interface\n    ) {}\n\n    async execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        // Publish before create event\n        const beforeCreateEvent = new RedirectBeforeCreateEvent({ input: data });\n        await this.eventPublisher.publish(beforeCreateEvent);\n\n        // Execute the create operation\n        const result = await this.repository.execute(data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after create event\n        const afterCreateEvent = new RedirectAfterCreateEvent({ redirect: result.value });\n        await this.eventPublisher.publish(afterCreateEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const CreateRedirectUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: CreateRedirectUseCaseImpl,\n    dependencies: [EventPublisher, CreateRedirectRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,qBAAqB,IAAIC,kBAAkB,EAC3CC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,wBAAwB;AAE5D,MAAMC,yBAAyB,CAAyC;EACpEC,WAAWA,CACCC,cAAmD,EACnDC,UAA8C,EACxD;IAAA,KAFUD,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,UAA8C,GAA9CA,UAA8C;EACvD;EAEH,MAAMC,OAAOA,CAACC,IAA+B,EAA6B;IACtE;IACA,MAAMC,iBAAiB,GAAG,IAAIR,yBAAyB,CAAC;MAAES,KAAK,EAAEF;IAAK,CAAC,CAAC;IACxE,MAAM,IAAI,CAACH,cAAc,CAACM,OAAO,CAACF,iBAAiB,CAAC;;IAEpD;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACN,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;IAElD,IAAII,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;;IAEA;IACA,MAAME,gBAAgB,GAAG,IAAIZ,wBAAwB,CAAC;MAAEa,QAAQ,EAAEH,MAAM,CAACI;IAAM,CAAC,CAAC;IACjF,MAAM,IAAI,CAACX,cAAc,CAACM,OAAO,CAACG,gBAAgB,CAAC;IAEnD,OAAOnB,MAAM,CAACsB,EAAE,CAACL,MAAM,CAACI,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMlB,qBAAqB,GAAGF,oBAAoB,CAAC;EACtDsB,WAAW,EAAEnB,kBAAkB;EAC/BoB,cAAc,EAAEhB,yBAAyB;EACzCiB,YAAY,EAAE,CAACvB,cAAc,EAAEG,wBAAwB;AAC3D,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["Result","createImplementation","EventPublisher","CreateRedirectUseCase","UseCaseAbstraction","CreateRedirectRepository","RedirectBeforeCreateEvent","RedirectAfterCreateEvent","WbPermissions","RedirectNotAuthorizedError","CreateRedirectUseCaseImpl","constructor","permissions","eventPublisher","repository","execute","data","hasPermission","canCreate","fail","beforeCreateEvent","input","publish","result","isFail","afterCreateEvent","redirect","value","ok","abstraction","implementation","dependencies","Abstraction"],"sources":["CreateRedirectUseCase.ts"],"sourcesContent":["import { Result, createImplementation } from \"@webiny/feature/api\";\nimport {\n    EventPublisher,\n    EventPublisher as EventPublisherAbstraction\n} from \"@webiny/api-core/features/EventPublisher\";\nimport {\n    CreateRedirectUseCase as UseCaseAbstraction,\n    CreateRedirectRepository\n} from \"./abstractions.js\";\nimport { RedirectBeforeCreateEvent, RedirectAfterCreateEvent } from \"./events.js\";\nimport { WbPermissions } from \"~/domain/permissions.js\";\nimport { RedirectNotAuthorizedError } from \"~/domain/redirect/errors.js\";\n\nclass CreateRedirectUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private permissions: WbPermissions.Interface,\n        private eventPublisher: EventPublisherAbstraction.Interface,\n        private repository: CreateRedirectRepository.Interface\n    ) {}\n\n    async execute(data: UseCaseAbstraction.Params): UseCaseAbstraction.Return {\n        const hasPermission = await this.permissions.canCreate(\"redirect\");\n        if (!hasPermission) {\n            return Result.fail(new RedirectNotAuthorizedError());\n        }\n\n        // Publish before create event\n        const beforeCreateEvent = new RedirectBeforeCreateEvent({ input: data });\n        await this.eventPublisher.publish(beforeCreateEvent);\n\n        // Execute the create operation\n        const result = await this.repository.execute(data);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        // Publish after create event\n        const afterCreateEvent = new RedirectAfterCreateEvent({ redirect: result.value });\n        await this.eventPublisher.publish(afterCreateEvent);\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const CreateRedirectUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: CreateRedirectUseCaseImpl,\n    dependencies: [WbPermissions.Abstraction, EventPublisher, CreateRedirectRepository]\n});\n"],"mappings":"AAAA,SAASA,MAAM,EAAEC,oBAAoB,QAAQ,qBAAqB;AAClE,SACIC,cAAc,QAEX,0CAA0C;AACjD,SACIC,qBAAqB,IAAIC,kBAAkB,EAC3CC,wBAAwB;AAE5B,SAASC,yBAAyB,EAAEC,wBAAwB;AAC5D,SAASC,aAAa;AACtB,SAASC,0BAA0B;AAEnC,MAAMC,yBAAyB,CAAyC;EACpEC,WAAWA,CACCC,WAAoC,EACpCC,cAAmD,EACnDC,UAA8C,EACxD;IAAA,KAHUF,WAAoC,GAApCA,WAAoC;IAAA,KACpCC,cAAmD,GAAnDA,cAAmD;IAAA,KACnDC,UAA8C,GAA9CA,UAA8C;EACvD;EAEH,MAAMC,OAAOA,CAACC,IAA+B,EAA6B;IACtE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACL,WAAW,CAACM,SAAS,CAAC,UAAU,CAAC;IAClE,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOjB,MAAM,CAACmB,IAAI,CAAC,IAAIV,0BAA0B,CAAC,CAAC,CAAC;IACxD;;IAEA;IACA,MAAMW,iBAAiB,GAAG,IAAId,yBAAyB,CAAC;MAAEe,KAAK,EAAEL;IAAK,CAAC,CAAC;IACxE,MAAM,IAAI,CAACH,cAAc,CAACS,OAAO,CAACF,iBAAiB,CAAC;;IAEpD;IACA,MAAMG,MAAM,GAAG,MAAM,IAAI,CAACT,UAAU,CAACC,OAAO,CAACC,IAAI,CAAC;IAElD,IAAIO,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOD,MAAM;IACjB;;IAEA;IACA,MAAME,gBAAgB,GAAG,IAAIlB,wBAAwB,CAAC;MAAEmB,QAAQ,EAAEH,MAAM,CAACI;IAAM,CAAC,CAAC;IACjF,MAAM,IAAI,CAACd,cAAc,CAACS,OAAO,CAACG,gBAAgB,CAAC;IAEnD,OAAOzB,MAAM,CAAC4B,EAAE,CAACL,MAAM,CAACI,KAAK,CAAC;EAClC;AACJ;AAEA,OAAO,MAAMxB,qBAAqB,GAAGF,oBAAoB,CAAC;EACtD4B,WAAW,EAAEzB,kBAAkB;EAC/B0B,cAAc,EAAEpB,yBAAyB;EACzCqB,YAAY,EAAE,CAACvB,aAAa,CAACwB,WAAW,EAAE9B,cAAc,EAAEG,wBAAwB;AACtF,CAAC,CAAC","ignoreList":[]}

package/features/redirects/CreateRedirect/abstractions.d.ts

@@ -2,7 +2,7 @@ import { type Result } from "@webiny/feature/api";
 import type { IEventHandler } from "@webiny/api-core/features/EventPublisher";
 import type { DomainEvent } from "@webiny/api-core/features/EventPublisher";
 import type { WbRedirect } from "../../../domain/redirect/abstractions.js";
-import { RedirectPersistenceError, RedirectValidationError } from "../../../domain/redirect/errors.js";
+import { RedirectPersistenceError, RedirectValidationError, RedirectNotAuthorizedError } from "../../../domain/redirect/errors.js";
 export type ICreateWbRedirectData = Pick<WbRedirect, "redirectFrom" | "redirectTo" | "redirectType" | "isEnabled" | "location">;
 export interface ICreateRedirectRepository {
     execute(data: ICreateWbRedirectData): Promise<Result<WbRedirect, RepositoryError>>;
@@ -24,6 +24,7 @@ export interface ICreateRedirectUseCase {
     execute(data: ICreateWbRedirectData): Promise<Result<WbRedirect, UseCaseError>>;
 }
 export interface ICreateRedirectUseCaseErrors {
+    notAuthorized: RedirectNotAuthorizedError;
     validation: RedirectValidationError;
     persistence: RedirectPersistenceError;
 }