@webiny/app-admin 0.0.0-unstable.e53eceafb5 → 0.0.0-unstable.e6f0dc8ca7

package/permissions/createHasPermission.js

@@ -0,0 +1,47 @@
+import React from "react";
+import { useContainer } from "@webiny/app";
+const BUILT_IN_ACTIONS = {
+  read: "canRead",
+  create: "canCreate",
+  edit: "canEdit",
+  delete: "canDelete",
+  publish: "canPublish",
+  unpublish: "canUnpublish"
+};
+export function createHasPermission(abstraction) {
+  return function HasPermission({
+    children,
+    ...props
+  }) {
+    const container = useContainer();
+    const permissions = container.resolve(abstraction);
+    const action = props.action;
+    const someActions = props.someActions;
+    const allActions = props.allActions;
+    const entities = props.entity ? [props.entity] : props.any ?? props.all ?? [];
+    const requireAll = !!props.all;
+    const checkAction = (entityId, singleAction) => {
+      if (!singleAction) {
+        return permissions.canAccess(entityId);
+      }
+      const method = BUILT_IN_ACTIONS[singleAction];
+      if (method && typeof permissions[method] === "function") {
+        return permissions[method](entityId);
+      }
+      return permissions.canAction(singleAction, entityId);
+    };
+    const check = entityId => {
+      if (allActions) {
+        return allActions.every(act => checkAction(entityId, act));
+      }
+      if (someActions) {
+        return someActions.some(act => checkAction(entityId, act));
+      }
+      return checkAction(entityId, action);
+    };
+    const allowed = requireAll ? entities.every(check) : entities.some(check);
+    return allowed ? /*#__PURE__*/React.createElement(React.Fragment, null, children) : null;
+  };
+}
+
+//# sourceMappingURL=createHasPermission.js.map

package/permissions/createHasPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","useContainer","BUILT_IN_ACTIONS","read","create","edit","delete","publish","unpublish","createHasPermission","abstraction","HasPermission","children","props","container","permissions","resolve","action","someActions","allActions","entities","entity","any","all","requireAll","checkAction","entityId","singleAction","canAccess","method","canAction","check","every","act","some","allowed","createElement","Fragment"],"sources":["createHasPermission.tsx"],"sourcesContent":["import React from \"react\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { HasPermissionProps, PermissionSchemaConfig, UsePermissionsResult } from \"./types.js\";\nimport { useContainer } from \"@webiny/app\";\n\nconst BUILT_IN_ACTIONS: Record<string, string> = {\n    read: \"canRead\",\n    create: \"canCreate\",\n    edit: \"canEdit\",\n    delete: \"canDelete\",\n    publish: \"canPublish\",\n    unpublish: \"canUnpublish\"\n};\n\nexport function createHasPermission<const S extends PermissionSchemaConfig>(\n    abstraction: Abstraction<UsePermissionsResult<S>>\n): React.FC<HasPermissionProps<S>> {\n    return function HasPermission({ children, ...props }) {\n        const container = useContainer();\n        const permissions = container.resolve(abstraction);\n\n        const action = props.action as string | undefined;\n        const someActions = props.someActions as string[] | undefined;\n        const allActions = props.allActions as string[] | undefined;\n        const entities: string[] = props.entity ? [props.entity] : (props.any ?? props.all ?? []);\n        const requireAll = !!props.all;\n\n        const checkAction = (entityId: string, singleAction: string | undefined): boolean => {\n            if (!singleAction) {\n                return permissions.canAccess(entityId);\n            }\n            const method = BUILT_IN_ACTIONS[singleAction] as keyof typeof permissions;\n            if (method && typeof permissions[method] === \"function\") {\n                return (permissions[method] as (entityId: string) => boolean)(entityId);\n            }\n            return (permissions.canAction as (action: string, entityId: string) => boolean)(\n                singleAction,\n                entityId\n            );\n        };\n\n        const check = (entityId: string): boolean => {\n            if (allActions) {\n                return allActions.every(act => checkAction(entityId, act));\n            }\n            if (someActions) {\n                return someActions.some(act => checkAction(entityId, act));\n            }\n            return checkAction(entityId, action);\n        };\n\n        const allowed = requireAll ? entities.every(check) : entities.some(check);\n\n        return allowed ? <>{children}</> : null;\n    };\n}\n"],"mappings":"AAAA,OAAOA,KAAK,MAAM,OAAO;AAGzB,SAASC,YAAY,QAAQ,aAAa;AAE1C,MAAMC,gBAAwC,GAAG;EAC7CC,IAAI,EAAE,SAAS;EACfC,MAAM,EAAE,WAAW;EACnBC,IAAI,EAAE,SAAS;EACfC,MAAM,EAAE,WAAW;EACnBC,OAAO,EAAE,YAAY;EACrBC,SAAS,EAAE;AACf,CAAC;AAED,OAAO,SAASC,mBAAmBA,CAC/BC,WAAiD,EAClB;EAC/B,OAAO,SAASC,aAAaA,CAAC;IAAEC,QAAQ;IAAE,GAAGC;EAAM,CAAC,EAAE;IAClD,MAAMC,SAAS,GAAGb,YAAY,CAAC,CAAC;IAChC,MAAMc,WAAW,GAAGD,SAAS,CAACE,OAAO,CAACN,WAAW,CAAC;IAElD,MAAMO,MAAM,GAAGJ,KAAK,CAACI,MAA4B;IACjD,MAAMC,WAAW,GAAGL,KAAK,CAACK,WAAmC;IAC7D,MAAMC,UAAU,GAAGN,KAAK,CAACM,UAAkC;IAC3D,MAAMC,QAAkB,GAAGP,KAAK,CAACQ,MAAM,GAAG,CAACR,KAAK,CAACQ,MAAM,CAAC,GAAIR,KAAK,CAACS,GAAG,IAAIT,KAAK,CAACU,GAAG,IAAI,EAAG;IACzF,MAAMC,UAAU,GAAG,CAAC,CAACX,KAAK,CAACU,GAAG;IAE9B,MAAME,WAAW,GAAGA,CAACC,QAAgB,EAAEC,YAAgC,KAAc;MACjF,IAAI,CAACA,YAAY,EAAE;QACf,OAAOZ,WAAW,CAACa,SAAS,CAACF,QAAQ,CAAC;MAC1C;MACA,MAAMG,MAAM,GAAG3B,gBAAgB,CAACyB,YAAY,CAA6B;MACzE,IAAIE,MAAM,IAAI,OAAOd,WAAW,CAACc,MAAM,CAAC,KAAK,UAAU,EAAE;QACrD,OAAQd,WAAW,CAACc,MAAM,CAAC,CAAmCH,QAAQ,CAAC;MAC3E;MACA,OAAQX,WAAW,CAACe,SAAS,CACzBH,YAAY,EACZD,QACJ,CAAC;IACL,CAAC;IAED,MAAMK,KAAK,GAAIL,QAAgB,IAAc;MACzC,IAAIP,UAAU,EAAE;QACZ,OAAOA,UAAU,CAACa,KAAK,CAACC,GAAG,IAAIR,WAAW,CAACC,QAAQ,EAAEO,GAAG,CAAC,CAAC;MAC9D;MACA,IAAIf,WAAW,EAAE;QACb,OAAOA,WAAW,CAACgB,IAAI,CAACD,GAAG,IAAIR,WAAW,CAACC,QAAQ,EAAEO,GAAG,CAAC,CAAC;MAC9D;MACA,OAAOR,WAAW,CAACC,QAAQ,EAAET,MAAM,CAAC;IACxC,CAAC;IAED,MAAMkB,OAAO,GAAGX,UAAU,GAAGJ,QAAQ,CAACY,KAAK,CAACD,KAAK,CAAC,GAAGX,QAAQ,CAACc,IAAI,CAACH,KAAK,CAAC;IAEzE,OAAOI,OAAO,gBAAGnC,KAAA,CAAAoC,aAAA,CAAApC,KAAA,CAAAqC,QAAA,QAAGzB,QAAW,CAAC,GAAG,IAAI;EAC3C,CAAC;AACL","ignoreList":[]}

package/permissions/createPermissionSchema.d.ts

@@ -0,0 +1,2 @@
+import type { PermissionSchemaConfig } from "./types.js";
+export declare function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T;

package/permissions/createPermissionSchema.js

@@ -0,0 +1,8 @@
+export function createPermissionSchema(config) {
+  return {
+    ...config,
+    entities: config.entities ?? []
+  };
+}
+
+//# sourceMappingURL=createPermissionSchema.js.map

package/permissions/createPermissionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissionSchema","config","entities"],"sources":["createPermissionSchema.ts"],"sourcesContent":["import type { PermissionSchemaConfig } from \"./types.js\";\n\nexport function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T {\n    return {\n        ...config,\n        entities: config.entities ?? []\n    };\n}\n"],"mappings":"AAEA,OAAO,SAASA,sBAAsBA,CAAyCC,MAAS,EAAK;EACzF,OAAO;IACH,GAAGA,MAAM;IACTC,QAAQ,EAAED,MAAM,CAACC,QAAQ,IAAI;EACjC,CAAC;AACL","ignoreList":[]}

package/permissions/createPermissions.d.ts

@@ -0,0 +1,6 @@
+import type { Abstraction } from "@webiny/di";
+import type { PermissionSchemaConfig, UsePermissionsResult } from "./types.js";
+export declare function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S): Abstraction<UsePermissionsResult<S>>;
+export declare function createPermissionsFeature<const S extends PermissionSchemaConfig>(schema: S, abstraction: Abstraction<UsePermissionsResult<S>>): import("@webiny/feature/admin").FeatureDefinition<{
+    permissions: UsePermissionsResult<S>;
+}, []>;

package/permissions/createPermissions.js

@@ -0,0 +1,201 @@
+import { createAbstraction } from "@webiny/feature/admin";
+import { createFeature } from "@webiny/feature/admin";
+import { IdentityContext } from "../features/security/IdentityContext/abstractions.js";
+function buildEntityMap(schema) {
+  const map = new Map();
+  for (const entity of schema.entities ?? []) {
+    const actions = new Set();
+    for (const action of entity.actions ?? []) {
+      actions.add(action.name);
+    }
+    map.set(entity.id, {
+      permission: entity.permission,
+      actions,
+      hasOwn: entity.scopes.includes("own")
+    });
+  }
+  return map;
+}
+function getEntity(entityMap, entityId) {
+  const entity = entityMap.get(entityId);
+  if (!entity) {
+    throw new Error(`Unknown entity "${entityId}" in permission schema.`);
+  }
+  return entity;
+}
+
+/**
+ * Check whether the identity has unrestricted full access for the given schema prefix.
+ * Stricter than the legacy check: `{ name: "wb.*", rwd: "r" }` is NOT full access.
+ */
+function hasFullSchemaAccess(identity, prefix) {
+  const fullAccessName = `${prefix}.*`;
+  const permission = identity.getPermission(fullAccessName);
+  if (!permission) {
+    return false;
+  }
+  // If any restricting keys are present, this is not full access.
+  if (typeof permission.rwd === "string" || typeof permission.pw === "string") {
+    return false;
+  }
+  return true;
+}
+class SchemaPermissions {
+  constructor(schema, identityContext) {
+    this.schema = schema;
+    this.entityMap = buildEntityMap(schema);
+    this.identityContext = identityContext;
+  }
+  get identity() {
+    return this.identityContext.getIdentity();
+  }
+  get fullAccess() {
+    return hasFullSchemaAccess(this.identity, this.schema.prefix);
+  }
+  canAccess = entityId => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    return this.identity.getPermissions(entity.permission).length > 0;
+  };
+  canRead = entityId => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("r");
+    });
+  };
+  canCreate = entityId => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("w");
+    });
+  };
+  canEdit = (entityId, item) => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (permission.own) {
+        if (!item?.createdBy) {
+          return true;
+        }
+        return item.createdBy.id === this.identity.id;
+      }
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("w");
+    });
+  };
+  canDelete = (entityId, item) => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (permission.own) {
+        return item?.createdBy?.id === this.identity.id;
+      }
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("d");
+    });
+  };
+  canPublish = entityId => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission.pw?.includes("p");
+    });
+  };
+  canUnpublish = entityId => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission.pw?.includes("u");
+    });
+  };
+  canAction = (action, entityId) => {
+    if (this.fullAccess) {
+      return true;
+    }
+    const entity = getEntity(this.entityMap, entityId);
+    const permissions = this.identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission[action] === true;
+    });
+  };
+}
+export function createPermissionsAbstraction(schema) {
+  return createAbstraction(`${schema.prefix}:Permissions`);
+}
+export function createPermissionsFeature(schema, abstraction) {
+  class PermissionsImpl extends SchemaPermissions {
+    constructor(identityContext) {
+      super(schema, identityContext);
+    }
+  }
+  const Implementation = abstraction.createImplementation({
+    implementation: PermissionsImpl,
+    dependencies: [IdentityContext]
+  });
+  return createFeature({
+    name: `${schema.prefix}:Permissions`,
+    register(container) {
+      container.register(Implementation).inSingletonScope();
+    },
+    resolve(container) {
+      return {
+        permissions: container.resolve(abstraction)
+      };
+    }
+  });
+}
+
+//# sourceMappingURL=createPermissions.js.map

package/permissions/createPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","createFeature","IdentityContext","buildEntityMap","schema","map","Map","entity","entities","actions","Set","action","add","name","set","id","permission","hasOwn","scopes","includes","getEntity","entityMap","entityId","get","Error","hasFullSchemaAccess","identity","prefix","fullAccessName","getPermission","rwd","pw","SchemaPermissions","constructor","identityContext","getIdentity","fullAccess","canAccess","getPermissions","length","canRead","permissions","some","canCreate","canEdit","item","own","createdBy","canDelete","canPublish","canUnpublish","canAction","createPermissionsAbstraction","createPermissionsFeature","abstraction","PermissionsImpl","Implementation","createImplementation","implementation","dependencies","register","container","inSingletonScope","resolve"],"sources":["createPermissions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/admin\";\nimport { createFeature } from \"@webiny/feature/admin\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport type { IIdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport type { Identity } from \"~/domain/Identity.js\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { PermissionSchemaConfig, OwnableItem, UsePermissionsResult } from \"./types.js\";\n\ninterface EntityLookup {\n    permission: string;\n    actions: Set<string>;\n    hasOwn: boolean;\n}\n\nfunction buildEntityMap(schema: PermissionSchemaConfig): Map<string, EntityLookup> {\n    const map = new Map<string, EntityLookup>();\n    for (const entity of schema.entities ?? []) {\n        const actions = new Set<string>();\n        for (const action of entity.actions ?? []) {\n            actions.add(action.name);\n        }\n        map.set(entity.id, {\n            permission: entity.permission,\n            actions,\n            hasOwn: entity.scopes.includes(\"own\")\n        });\n    }\n    return map;\n}\n\nfunction getEntity(entityMap: Map<string, EntityLookup>, entityId: string): EntityLookup {\n    const entity = entityMap.get(entityId);\n    if (!entity) {\n        throw new Error(`Unknown entity \"${entityId}\" in permission schema.`);\n    }\n    return entity;\n}\n\n/**\n * Check whether the identity has unrestricted full access for the given schema prefix.\n * Stricter than the legacy check: `{ name: \"wb.*\", rwd: \"r\" }` is NOT full access.\n */\nfunction hasFullSchemaAccess(identity: Identity, prefix: string): boolean {\n    const fullAccessName = `${prefix}.*`;\n    const permission = identity.getPermission(fullAccessName);\n    if (!permission) {\n        return false;\n    }\n    // If any restricting keys are present, this is not full access.\n    if (typeof permission.rwd === \"string\" || typeof permission.pw === \"string\") {\n        return false;\n    }\n    return true;\n}\n\nclass SchemaPermissions<S extends PermissionSchemaConfig> {\n    private readonly schema: S;\n    private readonly entityMap: Map<string, EntityLookup>;\n    private readonly identityContext: IIdentityContext;\n\n    constructor(schema: S, identityContext: IIdentityContext) {\n        this.schema = schema;\n        this.entityMap = buildEntityMap(schema);\n        this.identityContext = identityContext;\n    }\n\n    private get identity(): Identity {\n        return this.identityContext.getIdentity();\n    }\n\n    private get fullAccess(): boolean {\n        return hasFullSchemaAccess(this.identity, this.schema.prefix);\n    }\n\n    canAccess = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        return this.identity.getPermissions(entity.permission).length > 0;\n    };\n\n    canRead = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"r\");\n        });\n    };\n\n    canCreate = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    canEdit = (entityId: string, item?: OwnableItem): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                if (!item?.createdBy) {\n                    return true;\n                }\n                return item.createdBy.id === this.identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    canDelete = (entityId: string, item?: OwnableItem): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                return item?.createdBy?.id === this.identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"d\");\n        });\n    };\n\n    canPublish = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"p\");\n        });\n    };\n\n    canUnpublish = (entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"u\");\n        });\n    };\n\n    canAction = (action: string, entityId: string): boolean => {\n        if (this.fullAccess) {\n            return true;\n        }\n        const entity = getEntity(this.entityMap, entityId);\n        const permissions = this.identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission[action] === true;\n        });\n    };\n}\n\nexport function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S) {\n    return createAbstraction<UsePermissionsResult<S>>(`${schema.prefix}:Permissions`);\n}\n\nexport function createPermissionsFeature<const S extends PermissionSchemaConfig>(\n    schema: S,\n    abstraction: Abstraction<UsePermissionsResult<S>>\n) {\n    class PermissionsImpl extends SchemaPermissions<S> {\n        constructor(identityContext: IIdentityContext) {\n            super(schema, identityContext);\n        }\n    }\n\n    const Implementation = abstraction.createImplementation({\n        implementation: PermissionsImpl,\n        dependencies: [IdentityContext]\n    });\n\n    return createFeature({\n        name: `${schema.prefix}:Permissions`,\n        register(container) {\n            container.register(Implementation).inSingletonScope();\n        },\n        resolve(container) {\n            return { permissions: container.resolve(abstraction) };\n        }\n    });\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,uBAAuB;AACzD,SAASC,aAAa,QAAQ,uBAAuB;AACrD,SAASC,eAAe;AAYxB,SAASC,cAAcA,CAACC,MAA8B,EAA6B;EAC/E,MAAMC,GAAG,GAAG,IAAIC,GAAG,CAAuB,CAAC;EAC3C,KAAK,MAAMC,MAAM,IAAIH,MAAM,CAACI,QAAQ,IAAI,EAAE,EAAE;IACxC,MAAMC,OAAO,GAAG,IAAIC,GAAG,CAAS,CAAC;IACjC,KAAK,MAAMC,MAAM,IAAIJ,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvCA,OAAO,CAACG,GAAG,CAACD,MAAM,CAACE,IAAI,CAAC;IAC5B;IACAR,GAAG,CAACS,GAAG,CAACP,MAAM,CAACQ,EAAE,EAAE;MACfC,UAAU,EAAET,MAAM,CAACS,UAAU;MAC7BP,OAAO;MACPQ,MAAM,EAAEV,MAAM,CAACW,MAAM,CAACC,QAAQ,CAAC,KAAK;IACxC,CAAC,CAAC;EACN;EACA,OAAOd,GAAG;AACd;AAEA,SAASe,SAASA,CAACC,SAAoC,EAAEC,QAAgB,EAAgB;EACrF,MAAMf,MAAM,GAAGc,SAAS,CAACE,GAAG,CAACD,QAAQ,CAAC;EACtC,IAAI,CAACf,MAAM,EAAE;IACT,MAAM,IAAIiB,KAAK,CAAC,mBAAmBF,QAAQ,yBAAyB,CAAC;EACzE;EACA,OAAOf,MAAM;AACjB;;AAEA;AACA;AACA;AACA;AACA,SAASkB,mBAAmBA,CAACC,QAAkB,EAAEC,MAAc,EAAW;EACtE,MAAMC,cAAc,GAAG,GAAGD,MAAM,IAAI;EACpC,MAAMX,UAAU,GAAGU,QAAQ,CAACG,aAAa,CAACD,cAAc,CAAC;EACzD,IAAI,CAACZ,UAAU,EAAE;IACb,OAAO,KAAK;EAChB;EACA;EACA,IAAI,OAAOA,UAAU,CAACc,GAAG,KAAK,QAAQ,IAAI,OAAOd,UAAU,CAACe,EAAE,KAAK,QAAQ,EAAE;IACzE,OAAO,KAAK;EAChB;EACA,OAAO,IAAI;AACf;AAEA,MAAMC,iBAAiB,CAAmC;EAKtDC,WAAWA,CAAC7B,MAAS,EAAE8B,eAAiC,EAAE;IACtD,IAAI,CAAC9B,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACiB,SAAS,GAAGlB,cAAc,CAACC,MAAM,CAAC;IACvC,IAAI,CAAC8B,eAAe,GAAGA,eAAe;EAC1C;EAEA,IAAYR,QAAQA,CAAA,EAAa;IAC7B,OAAO,IAAI,CAACQ,eAAe,CAACC,WAAW,CAAC,CAAC;EAC7C;EAEA,IAAYC,UAAUA,CAAA,EAAY;IAC9B,OAAOX,mBAAmB,CAAC,IAAI,CAACC,QAAQ,EAAE,IAAI,CAACtB,MAAM,CAACuB,MAAM,CAAC;EACjE;EAEAU,SAAS,GAAIf,QAAgB,IAAc;IACvC,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,OAAO,IAAI,CAACI,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC,CAACuB,MAAM,GAAG,CAAC;EACrE,CAAC;EAEDC,OAAO,GAAIlB,QAAgB,IAAc;IACrC,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,IAAI,OAAOA,UAAU,CAACc,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOd,UAAU,CAACc,GAAG,CAACX,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAEDwB,SAAS,GAAIrB,QAAgB,IAAc;IACvC,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,IAAI,OAAOA,UAAU,CAACc,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOd,UAAU,CAACc,GAAG,CAACX,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAEDyB,OAAO,GAAGA,CAACtB,QAAgB,EAAEuB,IAAkB,KAAc;IACzD,IAAI,IAAI,CAACT,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,IAAIA,UAAU,CAAC8B,GAAG,EAAE;QAChB,IAAI,CAACD,IAAI,EAAEE,SAAS,EAAE;UAClB,OAAO,IAAI;QACf;QACA,OAAOF,IAAI,CAACE,SAAS,CAAChC,EAAE,KAAK,IAAI,CAACW,QAAQ,CAACX,EAAE;MACjD;MACA,IAAI,OAAOC,UAAU,CAACc,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOd,UAAU,CAACc,GAAG,CAACX,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED6B,SAAS,GAAGA,CAAC1B,QAAgB,EAAEuB,IAAkB,KAAc;IAC3D,IAAI,IAAI,CAACT,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,IAAIA,UAAU,CAAC8B,GAAG,EAAE;QAChB,OAAOD,IAAI,EAAEE,SAAS,EAAEhC,EAAE,KAAK,IAAI,CAACW,QAAQ,CAACX,EAAE;MACnD;MACA,IAAI,OAAOC,UAAU,CAACc,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOd,UAAU,CAACc,GAAG,CAACX,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED8B,UAAU,GAAI3B,QAAgB,IAAc;IACxC,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,OAAOA,UAAU,CAACe,EAAE,EAAEZ,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED+B,YAAY,GAAI5B,QAAgB,IAAc;IAC1C,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,OAAOA,UAAU,CAACe,EAAE,EAAEZ,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAEDgC,SAAS,GAAGA,CAACxC,MAAc,EAAEW,QAAgB,KAAc;IACvD,IAAI,IAAI,CAACc,UAAU,EAAE;MACjB,OAAO,IAAI;IACf;IACA,MAAM7B,MAAM,GAAGa,SAAS,CAAC,IAAI,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAClD,MAAMmB,WAAW,GAAG,IAAI,CAACf,QAAQ,CAACY,cAAc,CAAC/B,MAAM,CAACS,UAAU,CAAC;IACnE,IAAI,CAACyB,WAAW,CAACF,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOE,WAAW,CAACC,IAAI,CAAC1B,UAAU,IAAI;MAClC,OAAOA,UAAU,CAACL,MAAM,CAAC,KAAK,IAAI;IACtC,CAAC,CAAC;EACN,CAAC;AACL;AAEA,OAAO,SAASyC,4BAA4BA,CAAyChD,MAAS,EAAE;EAC5F,OAAOJ,iBAAiB,CAA0B,GAAGI,MAAM,CAACuB,MAAM,cAAc,CAAC;AACrF;AAEA,OAAO,SAAS0B,wBAAwBA,CACpCjD,MAAS,EACTkD,WAAiD,EACnD;EACE,MAAMC,eAAe,SAASvB,iBAAiB,CAAI;IAC/CC,WAAWA,CAACC,eAAiC,EAAE;MAC3C,KAAK,CAAC9B,MAAM,EAAE8B,eAAe,CAAC;IAClC;EACJ;EAEA,MAAMsB,cAAc,GAAGF,WAAW,CAACG,oBAAoB,CAAC;IACpDC,cAAc,EAAEH,eAAe;IAC/BI,YAAY,EAAE,CAACzD,eAAe;EAClC,CAAC,CAAC;EAEF,OAAOD,aAAa,CAAC;IACjBY,IAAI,EAAE,GAAGT,MAAM,CAACuB,MAAM,cAAc;IACpCiC,QAAQA,CAACC,SAAS,EAAE;MAChBA,SAAS,CAACD,QAAQ,CAACJ,cAAc,CAAC,CAACM,gBAAgB,CAAC,CAAC;IACzD,CAAC;IACDC,OAAOA,CAACF,SAAS,EAAE;MACf,OAAO;QAAEpB,WAAW,EAAEoB,SAAS,CAACE,OAAO,CAACT,WAAW;MAAE,CAAC;IAC1D;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/permissions/createPermissions.test.d.ts

@@ -0,0 +1 @@
+export {};

package/permissions/createPermissions.test.js

@@ -0,0 +1,177 @@
+import { describe, it, expect } from "vitest";
+import { Container } from "@webiny/di";
+import { createPermissionsAbstraction, createPermissionsFeature } from "./createPermissions.js";
+import { createPermissionSchema } from "./createPermissionSchema.js";
+import { IdentityContext } from "../features/security/IdentityContext/abstractions.js";
+import { IdentityContext as IdentityContextImpl } from "../features/security/IdentityContext/IdentityContext.js";
+import { Identity } from "../domain/Identity.js";
+const TEST_SCHEMA = createPermissionSchema({
+  prefix: "test",
+  fullAccess: true,
+  entities: [{
+    id: "page",
+    title: "Page",
+    permission: "test.page",
+    scopes: ["full", "own"],
+    actions: [{
+      name: "rwd"
+    }, {
+      name: "pw"
+    }]
+  }]
+});
+const TestPermissions = createPermissionsAbstraction(TEST_SCHEMA);
+const TestPermissionsFeature = createPermissionsFeature(TEST_SCHEMA, TestPermissions);
+function resolve(permissions) {
+  const container = new Container();
+  container.register(IdentityContextImpl).inSingletonScope();
+  TestPermissionsFeature.register(container);
+  const identityContext = container.resolve(IdentityContext);
+  identityContext.setIdentity(Identity.createAuthenticated({
+    id: "test-user",
+    displayName: "Test User",
+    type: "admin",
+    roles: [],
+    teams: [],
+    permissions,
+    profile: {
+      external: false
+    },
+    currentTenant: {
+      id: "root",
+      name: "Root"
+    },
+    defaultTenant: {
+      id: "root",
+      name: "Root"
+    }
+  }));
+  return container.resolve(TestPermissions);
+}
+describe("SchemaPermissions", () => {
+  describe("full access", () => {
+    it("grants everything with unrestricted wildcard", () => {
+      const p = resolve([{
+        name: "test.*"
+      }]);
+      expect(p.canAccess("page")).toBe(true);
+      expect(p.canRead("page")).toBe(true);
+      expect(p.canCreate("page")).toBe(true);
+      expect(p.canEdit("page")).toBe(true);
+      expect(p.canDelete("page")).toBe(true);
+      expect(p.canPublish("page")).toBe(true);
+      expect(p.canUnpublish("page")).toBe(true);
+    });
+    it("rejects wildcard with rwd restriction as non-full access", () => {
+      const p = resolve([{
+        name: "test.*",
+        rwd: "r"
+      }]);
+      expect(p.canCreate("page")).toBe(false);
+      expect(p.canDelete("page")).toBe(false);
+    });
+  });
+  describe("entity-level access", () => {
+    it("grants access when entity permission exists", () => {
+      const p = resolve([{
+        name: "test.page"
+      }]);
+      expect(p.canAccess("page")).toBe(true);
+    });
+    it("denies access when no permission exists", () => {
+      const p = resolve([]);
+      expect(p.canAccess("page")).toBe(false);
+    });
+  });
+  describe("rwd actions", () => {
+    it("respects read permission", () => {
+      const p = resolve([{
+        name: "test.page",
+        rwd: "r"
+      }]);
+      expect(p.canRead("page")).toBe(true);
+      expect(p.canCreate("page")).toBe(false);
+      expect(p.canDelete("page")).toBe(false);
+    });
+    it("respects write permission", () => {
+      const p = resolve([{
+        name: "test.page",
+        rwd: "rw"
+      }]);
+      expect(p.canRead("page")).toBe(true);
+      expect(p.canCreate("page")).toBe(true);
+      expect(p.canEdit("page")).toBe(true);
+      expect(p.canDelete("page")).toBe(false);
+    });
+    it("respects delete permission", () => {
+      const p = resolve([{
+        name: "test.page",
+        rwd: "d"
+      }]);
+      expect(p.canDelete("page")).toBe(true);
+      expect(p.canRead("page")).toBe(false);
+    });
+  });
+  describe("publish/unpublish actions", () => {
+    it("grants publish when pw includes p", () => {
+      const p = resolve([{
+        name: "test.page",
+        pw: "p"
+      }]);
+      expect(p.canPublish("page")).toBe(true);
+      expect(p.canUnpublish("page")).toBe(false);
+    });
+    it("grants both when pw includes pu", () => {
+      const p = resolve([{
+        name: "test.page",
+        pw: "pu"
+      }]);
+      expect(p.canPublish("page")).toBe(true);
+      expect(p.canUnpublish("page")).toBe(true);
+    });
+  });
+  describe("own scope", () => {
+    it("allows edit when item is owned by the user", () => {
+      const p = resolve([{
+        name: "test.page",
+        own: true
+      }]);
+      expect(p.canEdit("page", {
+        createdBy: {
+          id: "test-user"
+        }
+      })).toBe(true);
+    });
+    it("denies edit when item is owned by someone else", () => {
+      const p = resolve([{
+        name: "test.page",
+        own: true
+      }]);
+      expect(p.canEdit("page", {
+        createdBy: {
+          id: "other-user"
+        }
+      })).toBe(false);
+    });
+    it("allows edit when no item is provided (optimistic)", () => {
+      const p = resolve([{
+        name: "test.page",
+        own: true
+      }]);
+      expect(p.canEdit("page")).toBe(true);
+    });
+    it("denies delete when item is owned by someone else", () => {
+      const p = resolve([{
+        name: "test.page",
+        own: true
+      }]);
+      expect(p.canDelete("page", {
+        createdBy: {
+          id: "other-user"
+        }
+      })).toBe(false);
+    });
+  });
+});
+
+//# sourceMappingURL=createPermissions.test.js.map

package/permissions/createPermissions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["describe","it","expect","Container","createPermissionsAbstraction","createPermissionsFeature","createPermissionSchema","IdentityContext","IdentityContextImpl","Identity","TEST_SCHEMA","prefix","fullAccess","entities","id","title","permission","scopes","actions","name","TestPermissions","TestPermissionsFeature","resolve","permissions","container","register","inSingletonScope","identityContext","setIdentity","createAuthenticated","displayName","type","roles","teams","profile","external","currentTenant","defaultTenant","p","canAccess","toBe","canRead","canCreate","canEdit","canDelete","canPublish","canUnpublish","rwd","pw","own","createdBy"],"sources":["createPermissions.test.ts"],"sourcesContent":["import { describe, it, expect } from \"vitest\";\nimport { Container } from \"@webiny/di\";\nimport { createPermissionsAbstraction, createPermissionsFeature } from \"./createPermissions.js\";\nimport { createPermissionSchema } from \"./createPermissionSchema.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport { IdentityContext as IdentityContextImpl } from \"~/features/security/IdentityContext/IdentityContext.js\";\nimport { Identity } from \"~/domain/Identity.js\";\n\nconst TEST_SCHEMA = createPermissionSchema({\n    prefix: \"test\",\n    fullAccess: true,\n    entities: [\n        {\n            id: \"page\",\n            title: \"Page\",\n            permission: \"test.page\",\n            scopes: [\"full\", \"own\"],\n            actions: [{ name: \"rwd\" }, { name: \"pw\" }]\n        }\n    ]\n} as const);\n\nconst TestPermissions = createPermissionsAbstraction(TEST_SCHEMA);\nconst TestPermissionsFeature = createPermissionsFeature(TEST_SCHEMA, TestPermissions);\n\nfunction resolve(permissions: Array<{ name: string; [key: string]: any }>) {\n    const container = new Container();\n    container.register(IdentityContextImpl).inSingletonScope();\n    TestPermissionsFeature.register(container);\n\n    const identityContext = container.resolve(IdentityContext);\n    identityContext.setIdentity(\n        Identity.createAuthenticated({\n            id: \"test-user\",\n            displayName: \"Test User\",\n            type: \"admin\",\n            roles: [],\n            teams: [],\n            permissions,\n            profile: { external: false },\n            currentTenant: { id: \"root\", name: \"Root\" },\n            defaultTenant: { id: \"root\", name: \"Root\" }\n        })\n    );\n\n    return container.resolve(TestPermissions);\n}\n\ndescribe(\"SchemaPermissions\", () => {\n    describe(\"full access\", () => {\n        it(\"grants everything with unrestricted wildcard\", () => {\n            const p = resolve([{ name: \"test.*\" }]);\n            expect(p.canAccess(\"page\")).toBe(true);\n            expect(p.canRead(\"page\")).toBe(true);\n            expect(p.canCreate(\"page\")).toBe(true);\n            expect(p.canEdit(\"page\")).toBe(true);\n            expect(p.canDelete(\"page\")).toBe(true);\n            expect(p.canPublish(\"page\")).toBe(true);\n            expect(p.canUnpublish(\"page\")).toBe(true);\n        });\n\n        it(\"rejects wildcard with rwd restriction as non-full access\", () => {\n            const p = resolve([{ name: \"test.*\", rwd: \"r\" }]);\n            expect(p.canCreate(\"page\")).toBe(false);\n            expect(p.canDelete(\"page\")).toBe(false);\n        });\n    });\n\n    describe(\"entity-level access\", () => {\n        it(\"grants access when entity permission exists\", () => {\n            const p = resolve([{ name: \"test.page\" }]);\n            expect(p.canAccess(\"page\")).toBe(true);\n        });\n\n        it(\"denies access when no permission exists\", () => {\n            const p = resolve([]);\n            expect(p.canAccess(\"page\")).toBe(false);\n        });\n    });\n\n    describe(\"rwd actions\", () => {\n        it(\"respects read permission\", () => {\n            const p = resolve([{ name: \"test.page\", rwd: \"r\" }]);\n            expect(p.canRead(\"page\")).toBe(true);\n            expect(p.canCreate(\"page\")).toBe(false);\n            expect(p.canDelete(\"page\")).toBe(false);\n        });\n\n        it(\"respects write permission\", () => {\n            const p = resolve([{ name: \"test.page\", rwd: \"rw\" }]);\n            expect(p.canRead(\"page\")).toBe(true);\n            expect(p.canCreate(\"page\")).toBe(true);\n            expect(p.canEdit(\"page\")).toBe(true);\n            expect(p.canDelete(\"page\")).toBe(false);\n        });\n\n        it(\"respects delete permission\", () => {\n            const p = resolve([{ name: \"test.page\", rwd: \"d\" }]);\n            expect(p.canDelete(\"page\")).toBe(true);\n            expect(p.canRead(\"page\")).toBe(false);\n        });\n    });\n\n    describe(\"publish/unpublish actions\", () => {\n        it(\"grants publish when pw includes p\", () => {\n            const p = resolve([{ name: \"test.page\", pw: \"p\" }]);\n            expect(p.canPublish(\"page\")).toBe(true);\n            expect(p.canUnpublish(\"page\")).toBe(false);\n        });\n\n        it(\"grants both when pw includes pu\", () => {\n            const p = resolve([{ name: \"test.page\", pw: \"pu\" }]);\n            expect(p.canPublish(\"page\")).toBe(true);\n            expect(p.canUnpublish(\"page\")).toBe(true);\n        });\n    });\n\n    describe(\"own scope\", () => {\n        it(\"allows edit when item is owned by the user\", () => {\n            const p = resolve([{ name: \"test.page\", own: true }]);\n            expect(p.canEdit(\"page\", { createdBy: { id: \"test-user\" } })).toBe(true);\n        });\n\n        it(\"denies edit when item is owned by someone else\", () => {\n            const p = resolve([{ name: \"test.page\", own: true }]);\n            expect(p.canEdit(\"page\", { createdBy: { id: \"other-user\" } })).toBe(false);\n        });\n\n        it(\"allows edit when no item is provided (optimistic)\", () => {\n            const p = resolve([{ name: \"test.page\", own: true }]);\n            expect(p.canEdit(\"page\")).toBe(true);\n        });\n\n        it(\"denies delete when item is owned by someone else\", () => {\n            const p = resolve([{ name: \"test.page\", own: true }]);\n            expect(p.canDelete(\"page\", { createdBy: { id: \"other-user\" } })).toBe(false);\n        });\n    });\n});\n"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,EAAE,EAAEC,MAAM,QAAQ,QAAQ;AAC7C,SAASC,SAAS,QAAQ,YAAY;AACtC,SAASC,4BAA4B,EAAEC,wBAAwB;AAC/D,SAASC,sBAAsB;AAC/B,SAASC,eAAe;AACxB,SAASA,eAAe,IAAIC,mBAAmB;AAC/C,SAASC,QAAQ;AAEjB,MAAMC,WAAW,GAAGJ,sBAAsB,CAAC;EACvCK,MAAM,EAAE,MAAM;EACdC,UAAU,EAAE,IAAI;EAChBC,QAAQ,EAAE,CACN;IACIC,EAAE,EAAE,MAAM;IACVC,KAAK,EAAE,MAAM;IACbC,UAAU,EAAE,WAAW;IACvBC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IACvBC,OAAO,EAAE,CAAC;MAAEC,IAAI,EAAE;IAAM,CAAC,EAAE;MAAEA,IAAI,EAAE;IAAK,CAAC;EAC7C,CAAC;AAET,CAAU,CAAC;AAEX,MAAMC,eAAe,GAAGhB,4BAA4B,CAACM,WAAW,CAAC;AACjE,MAAMW,sBAAsB,GAAGhB,wBAAwB,CAACK,WAAW,EAAEU,eAAe,CAAC;AAErF,SAASE,OAAOA,CAACC,WAAwD,EAAE;EACvE,MAAMC,SAAS,GAAG,IAAIrB,SAAS,CAAC,CAAC;EACjCqB,SAAS,CAACC,QAAQ,CAACjB,mBAAmB,CAAC,CAACkB,gBAAgB,CAAC,CAAC;EAC1DL,sBAAsB,CAACI,QAAQ,CAACD,SAAS,CAAC;EAE1C,MAAMG,eAAe,GAAGH,SAAS,CAACF,OAAO,CAACf,eAAe,CAAC;EAC1DoB,eAAe,CAACC,WAAW,CACvBnB,QAAQ,CAACoB,mBAAmB,CAAC;IACzBf,EAAE,EAAE,WAAW;IACfgB,WAAW,EAAE,WAAW;IACxBC,IAAI,EAAE,OAAO;IACbC,KAAK,EAAE,EAAE;IACTC,KAAK,EAAE,EAAE;IACTV,WAAW;IACXW,OAAO,EAAE;MAAEC,QAAQ,EAAE;IAAM,CAAC;IAC5BC,aAAa,EAAE;MAAEtB,EAAE,EAAE,MAAM;MAAEK,IAAI,EAAE;IAAO,CAAC;IAC3CkB,aAAa,EAAE;MAAEvB,EAAE,EAAE,MAAM;MAAEK,IAAI,EAAE;IAAO;EAC9C,CAAC,CACL,CAAC;EAED,OAAOK,SAAS,CAACF,OAAO,CAACF,eAAe,CAAC;AAC7C;AAEApB,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAChCA,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC1BC,EAAE,CAAC,8CAA8C,EAAE,MAAM;MACrD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE;MAAS,CAAC,CAAC,CAAC;MACvCjB,MAAM,CAACoC,CAAC,CAACC,SAAS,CAAC,MAAM,CAAC,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;MACtCtC,MAAM,CAACoC,CAAC,CAACG,OAAO,CAAC,MAAM,CAAC,CAAC,CAACD,IAAI,CAAC,IAAI,CAAC;MACpCtC,MAAM,CAACoC,CAAC,CAACI,SAAS,CAAC,MAAM,CAAC,CAAC,CAACF,IAAI,CAAC,IAAI,CAAC;MACtCtC,MAAM,CAACoC,CAAC,CAACK,OAAO,CAAC,MAAM,CAAC,CAAC,CAACH,IAAI,CAAC,IAAI,CAAC;MACpCtC,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,CAAC,CAAC,CAACJ,IAAI,CAAC,IAAI,CAAC;MACtCtC,MAAM,CAACoC,CAAC,CAACO,UAAU,CAAC,MAAM,CAAC,CAAC,CAACL,IAAI,CAAC,IAAI,CAAC;MACvCtC,MAAM,CAACoC,CAAC,CAACQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAACN,IAAI,CAAC,IAAI,CAAC;IAC7C,CAAC,CAAC;IAEFvC,EAAE,CAAC,0DAA0D,EAAE,MAAM;MACjE,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,QAAQ;QAAE4B,GAAG,EAAE;MAAI,CAAC,CAAC,CAAC;MACjD7C,MAAM,CAACoC,CAAC,CAACI,SAAS,CAAC,MAAM,CAAC,CAAC,CAACF,IAAI,CAAC,KAAK,CAAC;MACvCtC,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,CAAC,CAAC,CAACJ,IAAI,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC;EACN,CAAC,CAAC;EAEFxC,QAAQ,CAAC,qBAAqB,EAAE,MAAM;IAClCC,EAAE,CAAC,6CAA6C,EAAE,MAAM;MACpD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE;MAAY,CAAC,CAAC,CAAC;MAC1CjB,MAAM,CAACoC,CAAC,CAACC,SAAS,CAAC,MAAM,CAAC,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC;IAEFvC,EAAE,CAAC,yCAAyC,EAAE,MAAM;MAChD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,EAAE,CAAC;MACrBpB,MAAM,CAACoC,CAAC,CAACC,SAAS,CAAC,MAAM,CAAC,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC;EACN,CAAC,CAAC;EAEFxC,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC1BC,EAAE,CAAC,0BAA0B,EAAE,MAAM;MACjC,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE4B,GAAG,EAAE;MAAI,CAAC,CAAC,CAAC;MACpD7C,MAAM,CAACoC,CAAC,CAACG,OAAO,CAAC,MAAM,CAAC,CAAC,CAACD,IAAI,CAAC,IAAI,CAAC;MACpCtC,MAAM,CAACoC,CAAC,CAACI,SAAS,CAAC,MAAM,CAAC,CAAC,CAACF,IAAI,CAAC,KAAK,CAAC;MACvCtC,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,CAAC,CAAC,CAACJ,IAAI,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC;IAEFvC,EAAE,CAAC,2BAA2B,EAAE,MAAM;MAClC,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE4B,GAAG,EAAE;MAAK,CAAC,CAAC,CAAC;MACrD7C,MAAM,CAACoC,CAAC,CAACG,OAAO,CAAC,MAAM,CAAC,CAAC,CAACD,IAAI,CAAC,IAAI,CAAC;MACpCtC,MAAM,CAACoC,CAAC,CAACI,SAAS,CAAC,MAAM,CAAC,CAAC,CAACF,IAAI,CAAC,IAAI,CAAC;MACtCtC,MAAM,CAACoC,CAAC,CAACK,OAAO,CAAC,MAAM,CAAC,CAAC,CAACH,IAAI,CAAC,IAAI,CAAC;MACpCtC,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,CAAC,CAAC,CAACJ,IAAI,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC;IAEFvC,EAAE,CAAC,4BAA4B,EAAE,MAAM;MACnC,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE4B,GAAG,EAAE;MAAI,CAAC,CAAC,CAAC;MACpD7C,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,CAAC,CAAC,CAACJ,IAAI,CAAC,IAAI,CAAC;MACtCtC,MAAM,CAACoC,CAAC,CAACG,OAAO,CAAC,MAAM,CAAC,CAAC,CAACD,IAAI,CAAC,KAAK,CAAC;IACzC,CAAC,CAAC;EACN,CAAC,CAAC;EAEFxC,QAAQ,CAAC,2BAA2B,EAAE,MAAM;IACxCC,EAAE,CAAC,mCAAmC,EAAE,MAAM;MAC1C,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE6B,EAAE,EAAE;MAAI,CAAC,CAAC,CAAC;MACnD9C,MAAM,CAACoC,CAAC,CAACO,UAAU,CAAC,MAAM,CAAC,CAAC,CAACL,IAAI,CAAC,IAAI,CAAC;MACvCtC,MAAM,CAACoC,CAAC,CAACQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAACN,IAAI,CAAC,KAAK,CAAC;IAC9C,CAAC,CAAC;IAEFvC,EAAE,CAAC,iCAAiC,EAAE,MAAM;MACxC,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE6B,EAAE,EAAE;MAAK,CAAC,CAAC,CAAC;MACpD9C,MAAM,CAACoC,CAAC,CAACO,UAAU,CAAC,MAAM,CAAC,CAAC,CAACL,IAAI,CAAC,IAAI,CAAC;MACvCtC,MAAM,CAACoC,CAAC,CAACQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAACN,IAAI,CAAC,IAAI,CAAC;IAC7C,CAAC,CAAC;EACN,CAAC,CAAC;EAEFxC,QAAQ,CAAC,WAAW,EAAE,MAAM;IACxBC,EAAE,CAAC,4CAA4C,EAAE,MAAM;MACnD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE8B,GAAG,EAAE;MAAK,CAAC,CAAC,CAAC;MACrD/C,MAAM,CAACoC,CAAC,CAACK,OAAO,CAAC,MAAM,EAAE;QAAEO,SAAS,EAAE;UAAEpC,EAAE,EAAE;QAAY;MAAE,CAAC,CAAC,CAAC,CAAC0B,IAAI,CAAC,IAAI,CAAC;IAC5E,CAAC,CAAC;IAEFvC,EAAE,CAAC,gDAAgD,EAAE,MAAM;MACvD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE8B,GAAG,EAAE;MAAK,CAAC,CAAC,CAAC;MACrD/C,MAAM,CAACoC,CAAC,CAACK,OAAO,CAAC,MAAM,EAAE;QAAEO,SAAS,EAAE;UAAEpC,EAAE,EAAE;QAAa;MAAE,CAAC,CAAC,CAAC,CAAC0B,IAAI,CAAC,KAAK,CAAC;IAC9E,CAAC,CAAC;IAEFvC,EAAE,CAAC,mDAAmD,EAAE,MAAM;MAC1D,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE8B,GAAG,EAAE;MAAK,CAAC,CAAC,CAAC;MACrD/C,MAAM,CAACoC,CAAC,CAACK,OAAO,CAAC,MAAM,CAAC,CAAC,CAACH,IAAI,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;IAEFvC,EAAE,CAAC,kDAAkD,EAAE,MAAM;MACzD,MAAMqC,CAAC,GAAGhB,OAAO,CAAC,CAAC;QAAEH,IAAI,EAAE,WAAW;QAAE8B,GAAG,EAAE;MAAK,CAAC,CAAC,CAAC;MACrD/C,MAAM,CAACoC,CAAC,CAACM,SAAS,CAAC,MAAM,EAAE;QAAEM,SAAS,EAAE;UAAEpC,EAAE,EAAE;QAAa;MAAE,CAAC,CAAC,CAAC,CAAC0B,IAAI,CAAC,KAAK,CAAC;IAChF,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC,CAAC","ignoreList":[]}

package/permissions/index.d.ts

@@ -0,0 +1,9 @@
+export { createPermissionSchema } from "./createPermissionSchema.js";
+export { createPermissionsAbstraction, createPermissionsFeature } from "./createPermissions.js";
+export { createUsePermissions } from "./usePermissions.js";
+export { usePermissionForm, deserializePermissions, serializePermissions } from "./usePermissionForm.js";
+export { PermissionRenderer } from "./PermissionRenderer.js";
+export type { PermissionRendererProps } from "./PermissionRenderer.js";
+export { usePermissionValue, PermissionValueProvider } from "./PermissionValueContext.js";
+export { createHasPermission } from "./createHasPermission.js";
+export type { Permission, ActionDefinition, EntityDefinition, OwnableItem, PermissionSchemaConfig, PermissionSchema, UsePermissionFormOptions, UsePermissionFormResult, UsePermissionsResult, PermissionRendererConfig, HasPermissionAction, HasPermissionProps } from "./types.js";

package/permissions/index.js

@@ -0,0 +1,9 @@
+export { createPermissionSchema } from "./createPermissionSchema.js";
+export { createPermissionsAbstraction, createPermissionsFeature } from "./createPermissions.js";
+export { createUsePermissions } from "./usePermissions.js";
+export { usePermissionForm, deserializePermissions, serializePermissions } from "./usePermissionForm.js";
+export { PermissionRenderer } from "./PermissionRenderer.js";
+export { usePermissionValue, PermissionValueProvider } from "./PermissionValueContext.js";
+export { createHasPermission } from "./createHasPermission.js";
+
+//# sourceMappingURL=index.js.map

package/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissionSchema","createPermissionsAbstraction","createPermissionsFeature","createUsePermissions","usePermissionForm","deserializePermissions","serializePermissions","PermissionRenderer","usePermissionValue","PermissionValueProvider","createHasPermission"],"sources":["index.ts"],"sourcesContent":["export { createPermissionSchema } from \"./createPermissionSchema.js\";\nexport { createPermissionsAbstraction, createPermissionsFeature } from \"./createPermissions.js\";\nexport { createUsePermissions } from \"./usePermissions.js\";\nexport {\n    usePermissionForm,\n    deserializePermissions,\n    serializePermissions\n} from \"./usePermissionForm.js\";\nexport { PermissionRenderer } from \"./PermissionRenderer.js\";\nexport type { PermissionRendererProps } from \"./PermissionRenderer.js\";\nexport { usePermissionValue, PermissionValueProvider } from \"./PermissionValueContext.js\";\nexport { createHasPermission } from \"./createHasPermission.js\";\nexport type {\n    Permission,\n    ActionDefinition,\n    EntityDefinition,\n    OwnableItem,\n    PermissionSchemaConfig,\n    PermissionSchema,\n    UsePermissionFormOptions,\n    UsePermissionFormResult,\n    UsePermissionsResult,\n    PermissionRendererConfig,\n    HasPermissionAction,\n    HasPermissionProps\n} from \"./types.js\";\n"],"mappings":"AAAA,SAASA,sBAAsB;AAC/B,SAASC,4BAA4B,EAAEC,wBAAwB;AAC/D,SAASC,oBAAoB;AAC7B,SACIC,iBAAiB,EACjBC,sBAAsB,EACtBC,oBAAoB;AAExB,SAASC,kBAAkB;AAE3B,SAASC,kBAAkB,EAAEC,uBAAuB;AACpD,SAASC,mBAAmB","ignoreList":[]}