@webiny/app-admin 0.0.0-unstable.6f45466a1d → 0.0.0-unstable.7be00a75a9

package/permissions/PermissionRenderer.js

@@ -0,0 +1,205 @@
+import react, { Fragment, useCallback, useMemo } from "react";
+import { CheckboxGroup, Grid, Select } from "@webiny/admin-ui";
+import { Form } from "@webiny/form";
+import { CannotUseAaclAlert, PermissionInfo, PermissionsGroup } from "../components/Permissions/index.js";
+import { usePermissionForm } from "./usePermissionForm.js";
+import { usePermissionValue } from "./PermissionValueContext.js";
+import { useAuthentication } from "../exports/admin/security.js";
+const NO_ACCESS = "no";
+const FULL_ACCESS = "full";
+const READ_ONLY_ACCESS = "read-only";
+const CUSTOM_ACCESS = "custom";
+const RWD_OPTIONS = [
+    {
+        value: "r",
+        label: "Read"
+    },
+    {
+        value: "rw",
+        label: "Read, write"
+    },
+    {
+        value: "rwd",
+        label: "Read, write, delete"
+    }
+];
+const PW_OPTIONS = [
+    {
+        value: "p",
+        label: "Publish"
+    },
+    {
+        value: "u",
+        label: "Unpublish"
+    }
+];
+function hasAction(entity, name) {
+    return entity.actions?.some((a)=>a.name === name) ?? false;
+}
+function buildScopeOptions(entity) {
+    const options = [
+        {
+            value: NO_ACCESS,
+            label: "No access"
+        }
+    ];
+    if (entity.scopes.includes("full")) options.push({
+        value: FULL_ACCESS,
+        label: "Full access"
+    });
+    if (entity.scopes.includes("own")) options.push({
+        value: "own",
+        label: "Only entries created by the user"
+    });
+    return options;
+}
+const BUILTIN_ACTIONS = new Set([
+    "rwd",
+    "pw"
+]);
+function getCustomActions(entity) {
+    return (entity.actions ?? []).filter((a)=>!BUILTIN_ACTIONS.has(a.name));
+}
+function EntitySection({ entity, data, cannotUseAAcl, Bind, setValue }) {
+    const scopeField = `${entity.id}AccessScope`;
+    const currentScope = data[scopeField];
+    const scopeDisabled = cannotUseAAcl || !currentScope || currentScope === NO_ACCESS;
+    const customActions = useMemo(()=>getCustomActions(entity), [
+        entity
+    ]);
+    const customActionsValue = useMemo(()=>customActions.filter((a)=>data[`${entity.id}Action_${a.name}`]).map((a)=>a.name), [
+        data,
+        customActions,
+        entity.id
+    ]);
+    const onCustomActionsChange = useCallback((selected)=>{
+        const selectedSet = new Set(selected);
+        for (const action of customActions)setValue(`${entity.id}Action_${action.name}`, selectedSet.has(action.name));
+    }, [
+        customActions,
+        entity.id,
+        setValue
+    ]);
+    const columns = [
+        /*#__PURE__*/ react.createElement(Grid.Column, {
+            span: 12,
+            key: "access"
+        }, /*#__PURE__*/ react.createElement(Bind, {
+            name: scopeField,
+            beforeChange: (value, cb)=>{
+                if ("own" === value && hasAction(entity, "rwd")) setValue(`${entity.id}RWD`, "rwd");
+                cb(value);
+            }
+        }, /*#__PURE__*/ react.createElement(Select, {
+            label: "Access Scope",
+            disabled: cannotUseAAcl,
+            options: buildScopeOptions(entity)
+        })))
+    ];
+    if (hasAction(entity, "rwd")) columns.push(/*#__PURE__*/ react.createElement(Grid.Column, {
+        span: 12,
+        key: "rwd"
+    }, /*#__PURE__*/ react.createElement(Bind, {
+        name: `${entity.id}RWD`
+    }, /*#__PURE__*/ react.createElement(Select, {
+        label: "Primary Actions",
+        disabled: scopeDisabled || "own" === currentScope,
+        options: RWD_OPTIONS
+    }))));
+    if (hasAction(entity, "pw")) columns.push(/*#__PURE__*/ react.createElement(Grid.Column, {
+        span: 12,
+        key: "pw"
+    }, /*#__PURE__*/ react.createElement(Bind, {
+        name: `${entity.id}PW`
+    }, /*#__PURE__*/ react.createElement(CheckboxGroup, {
+        label: "Publishing actions",
+        description: "Publishing-related actions that can be performed on entries.",
+        items: PW_OPTIONS.map((opt)=>({
+                ...opt,
+                disabled: scopeDisabled
+            }))
+    }))));
+    if (customActions.length > 0) columns.push(/*#__PURE__*/ react.createElement(Grid.Column, {
+        span: 12,
+        key: "other"
+    }, /*#__PURE__*/ react.createElement(CheckboxGroup, {
+        label: "Other Actions",
+        value: customActionsValue,
+        onChange: onCustomActionsChange,
+        items: customActions.map((action)=>({
+                value: action.name,
+                label: action.label || action.name,
+                disabled: scopeDisabled
+            }))
+    })));
+    return /*#__PURE__*/ react.createElement(PermissionsGroup, {
+        title: entity.title || entity.id
+    }, /*#__PURE__*/ react.createElement(Grid, null, columns));
+}
+const PermissionRenderer = ({ schema })=>{
+    const { value, onChange } = usePermissionValue();
+    const { identity } = useAuthentication();
+    const cannotUseAAcl = useMemo(()=>!identity.getPermission("aacl", true), []);
+    const { formData, onFormChange } = usePermissionForm(schema, {
+        value,
+        onChange
+    });
+    const entities = schema.entities || [];
+    const hasEntities = entities.length > 0;
+    const accessLevelOptions = useMemo(()=>{
+        const options = [
+            {
+                value: NO_ACCESS,
+                label: "No access"
+            }
+        ];
+        if (schema.readOnlyAccess) options.push({
+            value: READ_ONLY_ACCESS,
+            label: "Read-only access"
+        });
+        options.push({
+            value: FULL_ACCESS,
+            label: "Full access"
+        });
+        if (hasEntities) options.push({
+            value: CUSTOM_ACCESS,
+            label: "Custom access"
+        });
+        return options;
+    }, [
+        schema,
+        hasEntities
+    ]);
+    return /*#__PURE__*/ react.createElement(Form, {
+        data: formData,
+        onChange: onFormChange
+    }, ({ data, Bind, setValue })=>/*#__PURE__*/ react.createElement(Fragment, null, /*#__PURE__*/ react.createElement(Grid, {
+            className: "pt-md"
+        }, /*#__PURE__*/ react.createElement(Grid.Column, {
+            span: 12
+        }, data.accessLevel === CUSTOM_ACCESS && cannotUseAAcl && /*#__PURE__*/ react.createElement(CannotUseAaclAlert, null))), /*#__PURE__*/ react.createElement(Grid, {
+            className: "pt-md"
+        }, /*#__PURE__*/ react.createElement(Grid.Column, {
+            span: 6
+        }, /*#__PURE__*/ react.createElement(PermissionInfo, {
+            title: "Access Level"
+        })), /*#__PURE__*/ react.createElement(Grid.Column, {
+            span: 6
+        }, /*#__PURE__*/ react.createElement(Bind, {
+            name: "accessLevel"
+        }, /*#__PURE__*/ react.createElement(Select, {
+            options: accessLevelOptions
+        })))), data.accessLevel === CUSTOM_ACCESS && hasEntities && /*#__PURE__*/ react.createElement("div", {
+            className: "mt-lg"
+        }, entities.map((entity)=>/*#__PURE__*/ react.createElement(EntitySection, {
+                key: entity.id,
+                entity: entity,
+                data: data,
+                cannotUseAAcl: cannotUseAAcl,
+                Bind: Bind,
+                setValue: setValue
+            })))));
+};
+export { PermissionRenderer };
+
+//# sourceMappingURL=PermissionRenderer.js.map

package/permissions/PermissionRenderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions/PermissionRenderer.js","sources":["../../src/permissions/PermissionRenderer.tsx"],"sourcesContent":["import React, { Fragment, useCallback, useMemo } from \"react\";\nimport { CheckboxGroup, Grid, Select } from \"@webiny/admin-ui\";\nimport { Form } from \"@webiny/form\";\nimport type { BindComponent } from \"@webiny/form\";\nimport {\n    CannotUseAaclAlert,\n    PermissionInfo,\n    PermissionsGroup\n} from \"../components/Permissions/index.js\";\nimport { usePermissionForm } from \"./usePermissionForm.js\";\nimport type { AaclPermission } from \"../features/wcp/types.js\";\nimport type { ActionDefinition, PermissionSchema, EntityDefinition } from \"./types.js\";\nimport { usePermissionValue } from \"./PermissionValueContext.js\";\nimport { useAuthentication } from \"~/exports/admin/security.js\";\n\nexport interface PermissionRendererProps {\n    schema: PermissionSchema;\n}\n\nconst NO_ACCESS = \"no\";\nconst FULL_ACCESS = \"full\";\nconst READ_ONLY_ACCESS = \"read-only\";\nconst CUSTOM_ACCESS = \"custom\";\n\nconst RWD_OPTIONS = [\n    { value: \"r\", label: \"Read\" },\n    { value: \"rw\", label: \"Read, write\" },\n    { value: \"rwd\", label: \"Read, write, delete\" }\n];\n\nconst PW_OPTIONS = [\n    { value: \"p\", label: \"Publish\" },\n    { value: \"u\", label: \"Unpublish\" }\n];\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\nfunction buildScopeOptions(entity: EntityDefinition) {\n    const options = [{ value: NO_ACCESS, label: \"No access\" }];\n\n    if (entity.scopes.includes(\"full\")) {\n        options.push({ value: FULL_ACCESS, label: \"Full access\" });\n    }\n\n    if (entity.scopes.includes(\"own\")) {\n        options.push({ value: \"own\", label: \"Only entries created by the user\" });\n    }\n\n    return options;\n}\n\nconst BUILTIN_ACTIONS = new Set([\"rwd\", \"pw\"]);\n\nfunction getCustomActions(entity: EntityDefinition): ActionDefinition[] {\n    return (entity.actions ?? []).filter(a => !BUILTIN_ACTIONS.has(a.name));\n}\n\ninterface EntitySectionProps {\n    entity: EntityDefinition;\n    data: Record<string, any>;\n    cannotUseAAcl: boolean;\n    Bind: BindComponent;\n    setValue: (name: string, value: any) => void;\n}\n\nfunction EntitySection({ entity, data, cannotUseAAcl, Bind, setValue }: EntitySectionProps) {\n    const scopeField = `${entity.id}AccessScope`;\n    const currentScope = data[scopeField];\n    const scopeDisabled = cannotUseAAcl || !currentScope || currentScope === NO_ACCESS;\n    const customActions = useMemo(() => getCustomActions(entity), [entity]);\n\n    // Derive the selected values array from individual boolean form fields.\n    const customActionsValue = useMemo(() => {\n        return customActions.filter(a => data[`${entity.id}Action_${a.name}`]).map(a => a.name);\n    }, [data, customActions, entity.id]);\n\n    const onCustomActionsChange = useCallback(\n        (selected: string[]) => {\n            const selectedSet = new Set(selected);\n            for (const action of customActions) {\n                setValue(`${entity.id}Action_${action.name}`, selectedSet.has(action.name));\n            }\n        },\n        [customActions, entity.id, setValue]\n    );\n\n    const columns = [\n        <Grid.Column span={12} key={\"access\"}>\n            <Bind\n                name={scopeField}\n                beforeChange={(value: string, cb: (v: string) => void) => {\n                    if (value === \"own\" && hasAction(entity, \"rwd\")) {\n                        setValue(`${entity.id}RWD`, \"rwd\");\n                    }\n                    cb(value);\n                }}\n            >\n                <Select\n                    label={\"Access Scope\"}\n                    disabled={cannotUseAAcl}\n                    options={buildScopeOptions(entity)}\n                />\n            </Bind>\n        </Grid.Column>\n    ];\n\n    if (hasAction(entity, \"rwd\")) {\n        columns.push(\n            <Grid.Column span={12} key={\"rwd\"}>\n                <Bind name={`${entity.id}RWD`}>\n                    <Select\n                        label={\"Primary Actions\"}\n                        disabled={scopeDisabled || currentScope === \"own\"}\n                        options={RWD_OPTIONS}\n                    />\n                </Bind>\n            </Grid.Column>\n        );\n    }\n\n    if (hasAction(entity, \"pw\")) {\n        columns.push(\n            <Grid.Column span={12} key={\"pw\"}>\n                <Bind name={`${entity.id}PW`}>\n                    <CheckboxGroup\n                        label={\"Publishing actions\"}\n                        description={\"Publishing-related actions that can be performed on entries.\"}\n                        items={PW_OPTIONS.map(opt => ({\n                            ...opt,\n                            disabled: scopeDisabled\n                        }))}\n                    />\n                </Bind>\n            </Grid.Column>\n        );\n    }\n\n    if (customActions.length > 0) {\n        columns.push(\n            <Grid.Column span={12} key={\"other\"}>\n                <CheckboxGroup\n                    label={\"Other Actions\"}\n                    value={customActionsValue}\n                    onChange={onCustomActionsChange}\n                    items={customActions.map(action => ({\n                        value: action.name,\n                        label: action.label || action.name,\n                        disabled: scopeDisabled\n                    }))}\n                />\n            </Grid.Column>\n        );\n    }\n\n    return (\n        <PermissionsGroup title={entity.title || entity.id}>\n            <Grid>{columns}</Grid>\n        </PermissionsGroup>\n    );\n}\n\nexport const PermissionRenderer = ({ schema }: PermissionRendererProps) => {\n    const { value, onChange } = usePermissionValue();\n    const { identity } = useAuthentication();\n\n    const cannotUseAAcl = useMemo(() => {\n        return !identity.getPermission<AaclPermission>(\"aacl\", true);\n    }, []);\n\n    const { formData, onFormChange } = usePermissionForm(schema, { value, onChange });\n\n    const entities = schema.entities || [];\n    const hasEntities = entities.length > 0;\n\n    const accessLevelOptions = useMemo(() => {\n        const options = [{ value: NO_ACCESS, label: \"No access\" }];\n\n        if (schema.readOnlyAccess) {\n            options.push({ value: READ_ONLY_ACCESS, label: \"Read-only access\" });\n        }\n\n        options.push({ value: FULL_ACCESS, label: \"Full access\" });\n\n        if (hasEntities) {\n            options.push({ value: CUSTOM_ACCESS, label: \"Custom access\" });\n        }\n\n        return options;\n    }, [schema, hasEntities]);\n\n    return (\n        <Form data={formData} onChange={onFormChange}>\n            {({ data, Bind, setValue }) => (\n                <Fragment>\n                    <Grid className={\"pt-md\"}>\n                        <Grid.Column span={12}>\n                            {data.accessLevel === CUSTOM_ACCESS && cannotUseAAcl && (\n                                <CannotUseAaclAlert />\n                            )}\n                        </Grid.Column>\n                    </Grid>\n                    <Grid className={\"pt-md\"}>\n                        <Grid.Column span={6}>\n                            <PermissionInfo title={\"Access Level\"} />\n                        </Grid.Column>\n                        <Grid.Column span={6}>\n                            <Bind name={\"accessLevel\"}>\n                                <Select options={accessLevelOptions} />\n                            </Bind>\n                        </Grid.Column>\n                    </Grid>\n                    {data.accessLevel === CUSTOM_ACCESS && hasEntities && (\n                        <div className={\"mt-lg\"}>\n                            {entities.map(entity => (\n                                <EntitySection\n                                    key={entity.id}\n                                    entity={entity}\n                                    data={data}\n                                    cannotUseAAcl={cannotUseAAcl}\n                                    Bind={Bind}\n                                    setValue={setValue}\n                                />\n                            ))}\n                        </div>\n                    )}\n                </Fragment>\n            )}\n        </Form>\n    );\n};\n"],"names":["NO_ACCESS","FULL_ACCESS","READ_ONLY_ACCESS","CUSTOM_ACCESS","RWD_OPTIONS","PW_OPTIONS","hasAction","entity","name","a","buildScopeOptions","options","BUILTIN_ACTIONS","Set","getCustomActions","EntitySection","data","cannotUseAAcl","Bind","setValue","scopeField","currentScope","scopeDisabled","customActions","useMemo","customActionsValue","onCustomActionsChange","useCallback","selected","selectedSet","action","columns","Grid","value","cb","Select","CheckboxGroup","opt","PermissionsGroup","PermissionRenderer","schema","onChange","usePermissionValue","identity","useAuthentication","formData","onFormChange","usePermissionForm","entities","hasEntities","accessLevelOptions","Form","Fragment","CannotUseAaclAlert","PermissionInfo"],"mappings":";;;;;;;AAmBA,MAAMA,YAAY;AAClB,MAAMC,cAAc;AACpB,MAAMC,mBAAmB;AACzB,MAAMC,gBAAgB;AAEtB,MAAMC,cAAc;IAChB;QAAE,OAAO;QAAK,OAAO;IAAO;IAC5B;QAAE,OAAO;QAAM,OAAO;IAAc;IACpC;QAAE,OAAO;QAAO,OAAO;IAAsB;CAChD;AAED,MAAMC,aAAa;IACf;QAAE,OAAO;QAAK,OAAO;IAAU;IAC/B;QAAE,OAAO;QAAK,OAAO;IAAY;CACpC;AAED,SAASC,UAAUC,MAAwB,EAAEC,IAAY;IACrD,OAAOD,OAAO,OAAO,EAAE,KAAKE,CAAAA,IAAKA,EAAE,IAAI,KAAKD,SAAS;AACzD;AAEA,SAASE,kBAAkBH,MAAwB;IAC/C,MAAMI,UAAU;QAAC;YAAE,OAAOX;YAAW,OAAO;QAAY;KAAE;IAE1D,IAAIO,OAAO,MAAM,CAAC,QAAQ,CAAC,SACvBI,QAAQ,IAAI,CAAC;QAAE,OAAOV;QAAa,OAAO;IAAc;IAG5D,IAAIM,OAAO,MAAM,CAAC,QAAQ,CAAC,QACvBI,QAAQ,IAAI,CAAC;QAAE,OAAO;QAAO,OAAO;IAAmC;IAG3E,OAAOA;AACX;AAEA,MAAMC,kBAAkB,IAAIC,IAAI;IAAC;IAAO;CAAK;AAE7C,SAASC,iBAAiBP,MAAwB;IAC9C,OAAQA,AAAAA,CAAAA,OAAO,OAAO,IAAI,EAAC,EAAG,MAAM,CAACE,CAAAA,IAAK,CAACG,gBAAgB,GAAG,CAACH,EAAE,IAAI;AACzE;AAUA,SAASM,cAAc,EAAER,MAAM,EAAES,IAAI,EAAEC,aAAa,EAAEC,IAAI,EAAEC,QAAQ,EAAsB;IACtF,MAAMC,aAAa,GAAGb,OAAO,EAAE,CAAC,WAAW,CAAC;IAC5C,MAAMc,eAAeL,IAAI,CAACI,WAAW;IACrC,MAAME,gBAAgBL,iBAAiB,CAACI,gBAAgBA,iBAAiBrB;IACzE,MAAMuB,gBAAgBC,QAAQ,IAAMV,iBAAiBP,SAAS;QAACA;KAAO;IAGtE,MAAMkB,qBAAqBD,QAAQ,IACxBD,cAAc,MAAM,CAACd,CAAAA,IAAKO,IAAI,CAAC,GAAGT,OAAO,EAAE,CAAC,OAAO,EAAEE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAACA,CAAAA,IAAKA,EAAE,IAAI,GACvF;QAACO;QAAMO;QAAehB,OAAO,EAAE;KAAC;IAEnC,MAAMmB,wBAAwBC,YAC1B,CAACC;QACG,MAAMC,cAAc,IAAIhB,IAAIe;QAC5B,KAAK,MAAME,UAAUP,cACjBJ,SAAS,GAAGZ,OAAO,EAAE,CAAC,OAAO,EAAEuB,OAAO,IAAI,EAAE,EAAED,YAAY,GAAG,CAACC,OAAO,IAAI;IAEjF,GACA;QAACP;QAAehB,OAAO,EAAE;QAAEY;KAAS;IAGxC,MAAMY,UAAU;sBACZ,oBAACC,KAAK,MAAM;YAAC,MAAM;YAAI,KAAK;yBACxB,oBAACd,MAAAA;YACG,MAAME;YACN,cAAc,CAACa,OAAeC;gBAC1B,IAAID,AAAU,UAAVA,SAAmB3B,UAAUC,QAAQ,QACrCY,SAAS,GAAGZ,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE;gBAEhC2B,GAAGD;YACP;yBAEA,oBAACE,QAAMA;YACH,OAAO;YACP,UAAUlB;YACV,SAASP,kBAAkBH;;KAI1C;IAED,IAAID,UAAUC,QAAQ,QAClBwB,QAAQ,IAAI,CAAC,WAAD,GACR,oBAACC,KAAK,MAAM;QAAC,MAAM;QAAI,KAAK;qBACxB,oBAACd,MAAAA;QAAK,MAAM,GAAGX,OAAO,EAAE,CAAC,GAAG,CAAC;qBACzB,oBAAC4B,QAAMA;QACH,OAAO;QACP,UAAUb,iBAAiBD,AAAiB,UAAjBA;QAC3B,SAASjB;;IAO7B,IAAIE,UAAUC,QAAQ,OAClBwB,QAAQ,IAAI,CAAC,WAAD,GACR,oBAACC,KAAK,MAAM;QAAC,MAAM;QAAI,KAAK;qBACxB,oBAACd,MAAAA;QAAK,MAAM,GAAGX,OAAO,EAAE,CAAC,EAAE,CAAC;qBACxB,oBAAC6B,eAAaA;QACV,OAAO;QACP,aAAa;QACb,OAAO/B,WAAW,GAAG,CAACgC,CAAAA,MAAQ;gBAC1B,GAAGA,GAAG;gBACN,UAAUf;YACd;;IAOpB,IAAIC,cAAc,MAAM,GAAG,GACvBQ,QAAQ,IAAI,CAAC,WAAD,GACR,oBAACC,KAAK,MAAM;QAAC,MAAM;QAAI,KAAK;qBACxB,oBAACI,eAAaA;QACV,OAAO;QACP,OAAOX;QACP,UAAUC;QACV,OAAOH,cAAc,GAAG,CAACO,CAAAA,SAAW;gBAChC,OAAOA,OAAO,IAAI;gBAClB,OAAOA,OAAO,KAAK,IAAIA,OAAO,IAAI;gBAClC,UAAUR;YACd;;IAMhB,OAAO,WAAP,GACI,oBAACgB,kBAAgBA;QAAC,OAAO/B,OAAO,KAAK,IAAIA,OAAO,EAAE;qBAC9C,oBAACyB,MAAIA,MAAED;AAGnB;AAEO,MAAMQ,qBAAqB,CAAC,EAAEC,MAAM,EAA2B;IAClE,MAAM,EAAEP,KAAK,EAAEQ,QAAQ,EAAE,GAAGC;IAC5B,MAAM,EAAEC,QAAQ,EAAE,GAAGC;IAErB,MAAM3B,gBAAgBO,QAAQ,IACnB,CAACmB,SAAS,aAAa,CAAiB,QAAQ,OACxD,EAAE;IAEL,MAAM,EAAEE,QAAQ,EAAEC,YAAY,EAAE,GAAGC,kBAAkBP,QAAQ;QAAEP;QAAOQ;IAAS;IAE/E,MAAMO,WAAWR,OAAO,QAAQ,IAAI,EAAE;IACtC,MAAMS,cAAcD,SAAS,MAAM,GAAG;IAEtC,MAAME,qBAAqB1B,QAAQ;QAC/B,MAAMb,UAAU;YAAC;gBAAE,OAAOX;gBAAW,OAAO;YAAY;SAAE;QAE1D,IAAIwC,OAAO,cAAc,EACrB7B,QAAQ,IAAI,CAAC;YAAE,OAAOT;YAAkB,OAAO;QAAmB;QAGtES,QAAQ,IAAI,CAAC;YAAE,OAAOV;YAAa,OAAO;QAAc;QAExD,IAAIgD,aACAtC,QAAQ,IAAI,CAAC;YAAE,OAAOR;YAAe,OAAO;QAAgB;QAGhE,OAAOQ;IACX,GAAG;QAAC6B;QAAQS;KAAY;IAExB,OAAO,WAAP,GACI,oBAACE,MAAIA;QAAC,MAAMN;QAAU,UAAUC;OAC3B,CAAC,EAAE9B,IAAI,EAAEE,IAAI,EAAEC,QAAQ,EAAE,iBACtB,oBAACiC,UAAQA,MAAAA,WAAAA,GACL,oBAACpB,MAAIA;YAAC,WAAW;yBACb,oBAACA,KAAK,MAAM;YAAC,MAAM;WACdhB,KAAK,WAAW,KAAKb,iBAAiBc,iBAAiB,WAAjBA,GACnC,oBAACoC,oBAAkBA,SAAAA,WAAAA,GAI/B,oBAACrB,MAAIA;YAAC,WAAW;yBACb,oBAACA,KAAK,MAAM;YAAC,MAAM;yBACf,oBAACsB,gBAAcA;YAAC,OAAO;2BAE3B,oBAACtB,KAAK,MAAM;YAAC,MAAM;yBACf,oBAACd,MAAAA;YAAK,MAAM;yBACR,oBAACiB,QAAMA;YAAC,SAASe;eAI5BlC,KAAK,WAAW,KAAKb,iBAAiB8C,eAAe,WAAfA,GACnC,oBAAC;YAAI,WAAW;WACXD,SAAS,GAAG,CAACzC,CAAAA,SAAAA,WAAAA,GACV,oBAACQ,eAAaA;gBACV,KAAKR,OAAO,EAAE;gBACd,QAAQA;gBACR,MAAMS;gBACN,eAAeC;gBACf,MAAMC;gBACN,UAAUC;;AAS9C"}

package/permissions/PermissionValueContext.d.ts

@@ -0,0 +1,11 @@
+import React from "react";
+import type { Permission } from "./types.js";
+interface PermissionValueContextValue {
+    value: Permission[];
+    onChange: (value: Permission[]) => void;
+}
+export declare const PermissionValueProvider: ({ value, onChange, children }: PermissionValueContextValue & {
+    children: React.ReactNode;
+}) => React.JSX.Element;
+export declare function usePermissionValue(): PermissionValueContextValue;
+export {};

package/permissions/PermissionValueContext.js

@@ -0,0 +1,16 @@
+import react, { useContext } from "react";
+const PermissionValueContext = /*#__PURE__*/ react.createContext(null);
+const PermissionValueProvider = ({ value, onChange, children })=>/*#__PURE__*/ react.createElement(PermissionValueContext.Provider, {
+        value: {
+            value,
+            onChange
+        }
+    }, children);
+function usePermissionValue() {
+    const ctx = useContext(PermissionValueContext);
+    if (!ctx) throw new Error("usePermissionValue must be used within a PermissionValueProvider");
+    return ctx;
+}
+export { PermissionValueProvider, usePermissionValue };
+
+//# sourceMappingURL=PermissionValueContext.js.map

package/permissions/PermissionValueContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions/PermissionValueContext.js","sources":["../../src/permissions/PermissionValueContext.tsx"],"sourcesContent":["import React, { useContext } from \"react\";\nimport type { Permission } from \"./types.js\";\n\ninterface PermissionValueContextValue {\n    value: Permission[];\n    onChange: (value: Permission[]) => void;\n}\n\nconst PermissionValueContext = React.createContext<PermissionValueContextValue | null>(null);\n\nexport const PermissionValueProvider = ({\n    value,\n    onChange,\n    children\n}: PermissionValueContextValue & { children: React.ReactNode }) => {\n    return (\n        <PermissionValueContext.Provider value={{ value, onChange }}>\n            {children}\n        </PermissionValueContext.Provider>\n    );\n};\n\nexport function usePermissionValue(): PermissionValueContextValue {\n    const ctx = useContext(PermissionValueContext);\n    if (!ctx) {\n        throw new Error(\"usePermissionValue must be used within a PermissionValueProvider\");\n    }\n    return ctx;\n}\n"],"names":["PermissionValueContext","React","PermissionValueProvider","value","onChange","children","usePermissionValue","ctx","useContext","Error"],"mappings":";AAQA,MAAMA,yBAAyB,WAAHA,GAAGC,MAAAA,aAAmB,CAAqC;AAEhF,MAAMC,0BAA0B,CAAC,EACpCC,KAAK,EACLC,QAAQ,EACRC,QAAQ,EACkD,GACnD,WAAP,GACI,oBAACL,uBAAuB,QAAQ;QAAC,OAAO;YAAEG;YAAOC;QAAS;OACrDC;AAKN,SAASC;IACZ,MAAMC,MAAMC,WAAWR;IACvB,IAAI,CAACO,KACD,MAAM,IAAIE,MAAM;IAEpB,OAAOF;AACX"}

package/permissions/createHasPermission.d.ts

@@ -0,0 +1,4 @@
+import React from "react";
+import type { Abstraction } from "@webiny/di";
+import type { HasPermissionProps, PermissionSchemaConfig, UsePermissionsResult } from "./types.js";
+export declare function createHasPermission<const S extends PermissionSchemaConfig>(abstraction: Abstraction<UsePermissionsResult<S>>): React.FC<HasPermissionProps<S>>;

package/permissions/createHasPermission.js

@@ -0,0 +1,39 @@
+import react from "react";
+import { useContainer } from "@webiny/app";
+const BUILT_IN_ACTIONS = {
+    read: "canRead",
+    create: "canCreate",
+    edit: "canEdit",
+    delete: "canDelete",
+    publish: "canPublish",
+    unpublish: "canUnpublish"
+};
+function createHasPermission(abstraction) {
+    return function({ children, ...props }) {
+        const container = useContainer();
+        const permissions = container.resolve(abstraction);
+        const action = props.action;
+        const someActions = props.someActions;
+        const allActions = props.allActions;
+        const entities = props.entity ? [
+            props.entity
+        ] : props.any ?? props.all ?? [];
+        const requireAll = !!props.all;
+        const checkAction = (entityId, singleAction)=>{
+            if (!singleAction) return permissions.canAccess(entityId);
+            const method = BUILT_IN_ACTIONS[singleAction];
+            if (method && "function" == typeof permissions[method]) return permissions[method](entityId);
+            return permissions.canAction(singleAction, entityId);
+        };
+        const check = (entityId)=>{
+            if (allActions) return allActions.every((act)=>checkAction(entityId, act));
+            if (someActions) return someActions.some((act)=>checkAction(entityId, act));
+            return checkAction(entityId, action);
+        };
+        const allowed = requireAll ? entities.every(check) : entities.some(check);
+        return allowed ? /*#__PURE__*/ react.createElement(react.Fragment, null, children) : null;
+    };
+}
+export { createHasPermission };
+
+//# sourceMappingURL=createHasPermission.js.map

package/permissions/createHasPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions/createHasPermission.js","sources":["../../src/permissions/createHasPermission.tsx"],"sourcesContent":["import React from \"react\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { HasPermissionProps, PermissionSchemaConfig, UsePermissionsResult } from \"./types.js\";\nimport { useContainer } from \"@webiny/app\";\n\nconst BUILT_IN_ACTIONS: Record<string, string> = {\n    read: \"canRead\",\n    create: \"canCreate\",\n    edit: \"canEdit\",\n    delete: \"canDelete\",\n    publish: \"canPublish\",\n    unpublish: \"canUnpublish\"\n};\n\nexport function createHasPermission<const S extends PermissionSchemaConfig>(\n    abstraction: Abstraction<UsePermissionsResult<S>>\n): React.FC<HasPermissionProps<S>> {\n    return function HasPermission({ children, ...props }) {\n        const container = useContainer();\n        const permissions = container.resolve(abstraction);\n\n        const action = props.action as string | undefined;\n        const someActions = props.someActions as string[] | undefined;\n        const allActions = props.allActions as string[] | undefined;\n        const entities: string[] = props.entity ? [props.entity] : (props.any ?? props.all ?? []);\n        const requireAll = !!props.all;\n\n        const checkAction = (entityId: string, singleAction: string | undefined): boolean => {\n            if (!singleAction) {\n                return permissions.canAccess(entityId);\n            }\n            const method = BUILT_IN_ACTIONS[singleAction] as keyof typeof permissions;\n            if (method && typeof permissions[method] === \"function\") {\n                return (permissions[method] as (entityId: string) => boolean)(entityId);\n            }\n            return (permissions.canAction as (action: string, entityId: string) => boolean)(\n                singleAction,\n                entityId\n            );\n        };\n\n        const check = (entityId: string): boolean => {\n            if (allActions) {\n                return allActions.every(act => checkAction(entityId, act));\n            }\n            if (someActions) {\n                return someActions.some(act => checkAction(entityId, act));\n            }\n            return checkAction(entityId, action);\n        };\n\n        const allowed = requireAll ? entities.every(check) : entities.some(check);\n\n        return allowed ? <>{children}</> : null;\n    };\n}\n"],"names":["BUILT_IN_ACTIONS","createHasPermission","abstraction","children","props","container","useContainer","permissions","action","someActions","allActions","entities","requireAll","checkAction","entityId","singleAction","method","check","act","allowed"],"mappings":";;AAKA,MAAMA,mBAA2C;IAC7C,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,WAAW;AACf;AAEO,SAASC,oBACZC,WAAiD;IAEjD,OAAO,SAAuB,EAAEC,QAAQ,EAAE,GAAGC,OAAO;QAChD,MAAMC,YAAYC;QAClB,MAAMC,cAAcF,UAAU,OAAO,CAACH;QAEtC,MAAMM,SAASJ,MAAM,MAAM;QAC3B,MAAMK,cAAcL,MAAM,WAAW;QACrC,MAAMM,aAAaN,MAAM,UAAU;QACnC,MAAMO,WAAqBP,MAAM,MAAM,GAAG;YAACA,MAAM,MAAM;SAAC,GAAIA,MAAM,GAAG,IAAIA,MAAM,GAAG,IAAI,EAAE;QACxF,MAAMQ,aAAa,CAAC,CAACR,MAAM,GAAG;QAE9B,MAAMS,cAAc,CAACC,UAAkBC;YACnC,IAAI,CAACA,cACD,OAAOR,YAAY,SAAS,CAACO;YAEjC,MAAME,SAAShB,gBAAgB,CAACe,aAAa;YAC7C,IAAIC,UAAU,AAA+B,cAA/B,OAAOT,WAAW,CAACS,OAAO,EACpC,OAAQT,WAAW,CAACS,OAAO,CAAmCF;YAElE,OAAQP,YAAY,SAAS,CACzBQ,cACAD;QAER;QAEA,MAAMG,QAAQ,CAACH;YACX,IAAIJ,YACA,OAAOA,WAAW,KAAK,CAACQ,CAAAA,MAAOL,YAAYC,UAAUI;YAEzD,IAAIT,aACA,OAAOA,YAAY,IAAI,CAACS,CAAAA,MAAOL,YAAYC,UAAUI;YAEzD,OAAOL,YAAYC,UAAUN;QACjC;QAEA,MAAMW,UAAUP,aAAaD,SAAS,KAAK,CAACM,SAASN,SAAS,IAAI,CAACM;QAEnE,OAAOE,UAAU,WAAVA,GAAU,0CAAGhB,YAAe;IACvC;AACJ"}

package/permissions/createPermissionSchema.d.ts

@@ -0,0 +1,2 @@
+import type { PermissionSchemaConfig } from "./types.js";
+export declare function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T;

package/permissions/createPermissionSchema.js

@@ -0,0 +1,9 @@
+function createPermissionSchema(config) {
+    return {
+        ...config,
+        entities: config.entities ?? []
+    };
+}
+export { createPermissionSchema };
+
+//# sourceMappingURL=createPermissionSchema.js.map

package/permissions/createPermissionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions/createPermissionSchema.js","sources":["../../src/permissions/createPermissionSchema.ts"],"sourcesContent":["import type { PermissionSchemaConfig } from \"./types.js\";\n\nexport function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T {\n    return {\n        ...config,\n        entities: config.entities ?? []\n    };\n}\n"],"names":["createPermissionSchema","config"],"mappings":"AAEO,SAASA,uBAA+DC,MAAS;IACpF,OAAO;QACH,GAAGA,MAAM;QACT,UAAUA,OAAO,QAAQ,IAAI,EAAE;IACnC;AACJ"}

package/permissions/createPermissions.d.ts

@@ -0,0 +1,6 @@
+import type { Abstraction } from "@webiny/di";
+import type { PermissionSchemaConfig, UsePermissionsResult } from "./types.js";
+export declare function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S): Abstraction<UsePermissionsResult<S>>;
+export declare function createPermissionsFeature<const S extends PermissionSchemaConfig>(schema: S, abstraction: Abstraction<UsePermissionsResult<S>>): import("@webiny/feature/admin").FeatureDefinition<{
+    permissions: UsePermissionsResult<S>;
+}, []>;

package/permissions/createPermissions.js

@@ -0,0 +1,141 @@
+import { createAbstraction, createFeature } from "@webiny/feature/admin";
+import { IdentityContext } from "../features/security/IdentityContext/abstractions.js";
+function buildEntityMap(schema) {
+    const map = new Map();
+    for (const entity of schema.entities ?? []){
+        const actions = new Set();
+        for (const action of entity.actions ?? [])actions.add(action.name);
+        map.set(entity.id, {
+            permission: entity.permission,
+            actions,
+            hasOwn: entity.scopes.includes("own")
+        });
+    }
+    return map;
+}
+function getEntity(entityMap, entityId) {
+    const entity = entityMap.get(entityId);
+    if (!entity) throw new Error(`Unknown entity "${entityId}" in permission schema.`);
+    return entity;
+}
+function hasFullSchemaAccess(identity, prefix) {
+    const fullAccessName = `${prefix}.*`;
+    const permission = identity.getPermission(fullAccessName);
+    if (!permission) return false;
+    if ("string" == typeof permission.rwd || "string" == typeof permission.pw) return false;
+    return true;
+}
+class SchemaPermissions {
+    constructor(schema, identityContext){
+        this.canAccess = (entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            return this.identity.getPermissions(entity.permission).length > 0;
+        };
+        this.canRead = (entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>{
+                if ("string" != typeof permission.rwd) return true;
+                return permission.rwd.includes("r");
+            });
+        };
+        this.canCreate = (entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>{
+                if ("string" != typeof permission.rwd) return true;
+                return permission.rwd.includes("w");
+            });
+        };
+        this.canEdit = (entityId, item)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>{
+                if (permission.own) {
+                    if (!item?.createdBy) return true;
+                    return item.createdBy.id === this.identity.id;
+                }
+                if ("string" != typeof permission.rwd) return true;
+                return permission.rwd.includes("w");
+            });
+        };
+        this.canDelete = (entityId, item)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>{
+                if (permission.own) return item?.createdBy?.id === this.identity.id;
+                if ("string" != typeof permission.rwd) return true;
+                return permission.rwd.includes("d");
+            });
+        };
+        this.canPublish = (entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>permission.pw?.includes("p"));
+        };
+        this.canUnpublish = (entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>permission.pw?.includes("u"));
+        };
+        this.canAction = (action, entityId)=>{
+            if (this.fullAccess) return true;
+            const entity = getEntity(this.entityMap, entityId);
+            const permissions = this.identity.getPermissions(entity.permission);
+            if (!permissions.length) return false;
+            return permissions.some((permission)=>true === permission[action]);
+        };
+        this.schema = schema;
+        this.entityMap = buildEntityMap(schema);
+        this.identityContext = identityContext;
+    }
+    get identity() {
+        return this.identityContext.getIdentity();
+    }
+    get fullAccess() {
+        return hasFullSchemaAccess(this.identity, this.schema.prefix);
+    }
+}
+function createPermissionsAbstraction(schema) {
+    return createAbstraction(`${schema.prefix}:Permissions`);
+}
+function createPermissionsFeature(schema, abstraction) {
+    class PermissionsImpl extends SchemaPermissions {
+        constructor(identityContext){
+            super(schema, identityContext);
+        }
+    }
+    const Implementation = abstraction.createImplementation({
+        implementation: PermissionsImpl,
+        dependencies: [
+            IdentityContext
+        ]
+    });
+    return createFeature({
+        name: `${schema.prefix}:Permissions`,
+        register (container) {
+            container.register(Implementation).inSingletonScope();
+        },
+        resolve (container) {
+            return {
+                permissions: container.resolve(abstraction)
+            };
+        }
+    });
+}
+export { createPermissionsAbstraction, createPermissionsFeature };
+
+//# sourceMappingURL=createPermissions.js.map

package/permissions/createPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions/createPermissions.js","sources":["../../src/permissions/createPermissions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/admin\";\nimport { createFeature } from \"@webiny/feature/admin\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport type { IIdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport type { Identity } from \"~/domain/Identity.js\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { PermissionSchemaConfig, OwnableItem, UsePermissionsResult } from \"./types.js\";\n\ninterface EntityLookup {\n    permission: string;\n    actions: Set<string>;\n    hasOwn: boolean;\n}\n\nfunction buildEntityMap(schema: PermissionSchemaConfig): Map<string, EntityLookup> {\n    const map = new Map<string, EntityLookup>();\n    for (const entity of schema.entities ?? []) {\n        const actions = new Set<string>();\n        for (const action of entity.actions ?? []) {\n            actions.add(action.name);\n        }\n        map.set(entity.id, {\n            permission: entity.permission,\n            actions,\n            hasOwn: entity.scopes.includes(\"own\")\n        });\n    }\n    return map;\n}\n\nfunction getEntity(entityMap: Map<string, EntityLookup>, entityId: string): EntityLookup {\n    const entity = entityMap.get(entityId);\n    if (!entity) {\n        throw new Error(`Unknown entity \"${entityId}\" in permission schema.`);\n    }\n    return entity;\n}\n\n/**\n * Check whether the identity has unrestricted full access for the given schema prefix.\n * Stricter than the legacy check: `{ name: \"wb.*\", rwd: \"r\" }` is NOT full access.\n */\nfunction hasFullSchemaAccess(identity: Identity, prefix: string): boolean {\n    const fullAccessName = `${prefix}.*`;\n    const permission = identity.getPermission(fullAccessName);\n    if (!permission) {\n        return false;\n    }\n    // If any restricting keys are present, this is not full access.\n    if (typeof permission.rwd === \"string\" || typeof permission.pw === \"string\") {\n        return false;\n    }\n    return true;\n}\n\nclass SchemaPermissions<S extends PermissionSchemaConfig> {\n    private readonly schema: S;\n    private readonly entityMap: Map<string, EntityLookup>;\n    private readonly identityContext: IIdentityContext;\n\n    constructor(schema: S, identityContext: IIdentityContext) {\n        this.schema = schema;\n        this.entityMap = buildEntityMap(schema);\n        this.identityContext = identityContext;\n    }\n\n    private get identity(): Identity {\n        return this.identityContext.getIdentity();\n    }\n\n    private get fullAccess(): boolean {\n        return hasFullSchemaAccess(this.identity, this.schema.prefix);\n    }\n\n    canAccess = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        return this.identity.getPermissions(entity.permission).length > 0;\n    };\n\n    canRead = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"r\");\n        });\n    };\n\n    canCreate = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    canEdit = (entityId: string, item?: OwnableItem): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                if (!item?.createdBy) {\n                    return true;\n                }\n                return item.createdBy.id === this.identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    canDelete = (entityId: string, item?: OwnableItem): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                return item?.createdBy?.id === this.identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"d\");\n        });\n    };\n\n    canPublish = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"p\");\n        });\n    };\n\n    canUnpublish = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"u\");\n        });\n    };\n\n    canAction = (action: string, entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission[action] === true;\n        });\n    };\n}\n\nexport function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S) {\n    return createAbstraction<UsePermissionsResult<S>>(`${schema.prefix}:Permissions`);\n}\n\nexport function createPermissionsFeature<const S extends PermissionSchemaConfig>(\n    schema: S,\n    abstraction: Abstraction<UsePermissionsResult<S>>\n) {\n    class PermissionsImpl extends SchemaPermissions<S> {\n        constructor(identityContext: IIdentityContext) {\n            super(schema, identityContext);\n        }\n    }\n\n    const Implementation = abstraction.createImplementation({\n        implementation: PermissionsImpl,\n        dependencies: [IdentityContext]\n    });\n\n    return createFeature({\n        name: `${schema.prefix}:Permissions`,\n        register(container) {\n            container.register(Implementation).inSingletonScope();\n        },\n        resolve(container) {\n            return { permissions: container.resolve(abstraction) };\n        }\n    });\n}\n"],"names":["buildEntityMap","schema","map","Map","entity","actions","Set","action","getEntity","entityMap","entityId","Error","hasFullSchemaAccess","identity","prefix","fullAccessName","permission","SchemaPermissions","identityContext","permissions","item","createPermissionsAbstraction","createAbstraction","createPermissionsFeature","abstraction","PermissionsImpl","Implementation","IdentityContext","createFeature","container"],"mappings":";;AAcA,SAASA,eAAeC,MAA8B;IAClD,MAAMC,MAAM,IAAIC;IAChB,KAAK,MAAMC,UAAUH,OAAO,QAAQ,IAAI,EAAE,CAAE;QACxC,MAAMI,UAAU,IAAIC;QACpB,KAAK,MAAMC,UAAUH,OAAO,OAAO,IAAI,EAAE,CACrCC,QAAQ,GAAG,CAACE,OAAO,IAAI;QAE3BL,IAAI,GAAG,CAACE,OAAO,EAAE,EAAE;YACf,YAAYA,OAAO,UAAU;YAC7BC;YACA,QAAQD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACnC;IACJ;IACA,OAAOF;AACX;AAEA,SAASM,UAAUC,SAAoC,EAAEC,QAAgB;IACrE,MAAMN,SAASK,UAAU,GAAG,CAACC;IAC7B,IAAI,CAACN,QACD,MAAM,IAAIO,MAAM,CAAC,gBAAgB,EAAED,SAAS,uBAAuB,CAAC;IAExE,OAAON;AACX;AAMA,SAASQ,oBAAoBC,QAAkB,EAAEC,MAAc;IAC3D,MAAMC,iBAAiB,GAAGD,OAAO,EAAE,CAAC;IACpC,MAAME,aAAaH,SAAS,aAAa,CAACE;IAC1C,IAAI,CAACC,YACD,OAAO;IAGX,IAAI,AAA0B,YAA1B,OAAOA,WAAW,GAAG,IAAiB,AAAyB,YAAzB,OAAOA,WAAW,EAAE,EAC1D,OAAO;IAEX,OAAO;AACX;AAEA,MAAMC;IAKF,YAAYhB,MAAS,EAAEiB,eAAiC,CAAE;aAc1D,SAAS,GAAG,CAACR;YACT,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACN,OAAO,UAAU,EAAE,MAAM,GAAG;QACpE;aAEA,OAAO,GAAG,CAACM;YACP,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA;gBACpB,IAAI,AAA0B,YAA1B,OAAOA,WAAW,GAAG,EACrB,OAAO;gBAEX,OAAOA,WAAW,GAAG,CAAC,QAAQ,CAAC;YACnC;QACJ;aAEA,SAAS,GAAG,CAACN;YACT,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA;gBACpB,IAAI,AAA0B,YAA1B,OAAOA,WAAW,GAAG,EACrB,OAAO;gBAEX,OAAOA,WAAW,GAAG,CAAC,QAAQ,CAAC;YACnC;QACJ;aAEA,OAAO,GAAG,CAACN,UAAkBU;YACzB,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMhB,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA;gBACpB,IAAIA,WAAW,GAAG,EAAE;oBAChB,IAAI,CAACI,MAAM,WACP,OAAO;oBAEX,OAAOA,KAAK,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACjD;gBACA,IAAI,AAA0B,YAA1B,OAAOJ,WAAW,GAAG,EACrB,OAAO;gBAEX,OAAOA,WAAW,GAAG,CAAC,QAAQ,CAAC;YACnC;QACJ;aAEA,SAAS,GAAG,CAACN,UAAkBU;YAC3B,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMhB,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA;gBACpB,IAAIA,WAAW,GAAG,EACd,OAAOI,MAAM,WAAW,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAEnD,IAAI,AAA0B,YAA1B,OAAOJ,WAAW,GAAG,EACrB,OAAO;gBAEX,OAAOA,WAAW,GAAG,CAAC,QAAQ,CAAC;YACnC;QACJ;aAEA,UAAU,GAAG,CAACN;YACV,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA,aACbA,WAAW,EAAE,EAAE,SAAS;QAEvC;aAEA,YAAY,GAAG,CAACN;YACZ,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA,aACbA,WAAW,EAAE,EAAE,SAAS;QAEvC;aAEA,SAAS,GAAG,CAACT,QAAgBG;YACzB,IAAI,IAAI,CAAC,UAAU,EACf,OAAO;YAEX,MAAMN,SAASI,UAAU,IAAI,CAAC,SAAS,EAAEE;YACzC,MAAMS,cAAc,IAAI,CAAC,QAAQ,CAAC,cAAc,CAACf,OAAO,UAAU;YAClE,IAAI,CAACe,YAAY,MAAM,EACnB,OAAO;YAEX,OAAOA,YAAY,IAAI,CAACH,CAAAA,aACbA,AAAuB,SAAvBA,UAAU,CAACT,OAAO;QAEjC;QA1II,IAAI,CAAC,MAAM,GAAGN;QACd,IAAI,CAAC,SAAS,GAAGD,eAAeC;QAChC,IAAI,CAAC,eAAe,GAAGiB;IAC3B;IAEA,IAAY,WAAqB;QAC7B,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW;IAC3C;IAEA,IAAY,aAAsB;QAC9B,OAAON,oBAAoB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;IAChE;AAgIJ;AAEO,SAASS,6BAAqEpB,MAAS;IAC1F,OAAOqB,kBAA2C,GAAGrB,OAAO,MAAM,CAAC,YAAY,CAAC;AACpF;AAEO,SAASsB,yBACZtB,MAAS,EACTuB,WAAiD;IAEjD,MAAMC,wBAAwBR;QAC1B,YAAYC,eAAiC,CAAE;YAC3C,KAAK,CAACjB,QAAQiB;QAClB;IACJ;IAEA,MAAMQ,iBAAiBF,YAAY,oBAAoB,CAAC;QACpD,gBAAgBC;QAChB,cAAc;YAACE;SAAgB;IACnC;IAEA,OAAOC,cAAc;QACjB,MAAM,GAAG3B,OAAO,MAAM,CAAC,YAAY,CAAC;QACpC,UAAS4B,SAAS;YACdA,UAAU,QAAQ,CAACH,gBAAgB,gBAAgB;QACvD;QACA,SAAQG,SAAS;YACb,OAAO;gBAAE,aAAaA,UAAU,OAAO,CAACL;YAAa;QACzD;IACJ;AACJ"}

package/permissions/createPermissions.test.d.ts

@@ -0,0 +1 @@
+export {};