@webiny/app-headless-cms 5.43.2 → 6.0.0-alpha.0

package/admin/plugins/permissionRenderer/CmsPermissions.js

@@ -1,39 +1,26 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.CMSPermissions = void 0;
-var _taggedTemplateLiteral2 = _interopRequireDefault(require("@babel/runtime/helpers/taggedTemplateLiteral"));
-var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _react = _interopRequireWildcard(require("react"));
-var _ContentModelGroupPermission = _interopRequireDefault(require("./components/ContentModelGroupPermission"));
-var _Grid = require("@webiny/ui/Grid");
-var _Select = require("@webiny/ui/Select");
-var _i18n = require("@webiny/app/i18n");
-var _Permissions = require("@webiny/app-admin/components/Permissions");
-var _form = require("@webiny/form");
-var _ContentModelPermission = require("./components/ContentModelPermission");
-var _ContentEntryPermission = require("./components/ContentEntryPermission");
-var _Checkbox = require("@webiny/ui/Checkbox");
-var _useI18N2 = require("@webiny/app-i18n/hooks/useI18N");
-var _reactRouter = require("@webiny/react-router");
-var _appSecurity = require("@webiny/app-security");
-var _templateObject, _templateObject2, _templateObject3, _templateObject4, _templateObject5, _templateObject6, _templateObject7;
 /**
  * @pavel Please review types for security permissions
  * TODO @ts-refactor
  */
-var t = _i18n.i18n.ns("app-headless-cms/admin/plugins/permissionRenderer");
-var CMS_PERMISSION = "cms";
-var CMS_PERMISSION_FULL_ACCESS = "cms.*";
-var FULL_ACCESS = "full";
-var NO_ACCESS = "no";
-var CUSTOM_ACCESS = "custom";
-var ENTITIES = ["contentModel", "contentModelGroup", "contentEntry"];
-var API_ENDPOINTS = [{
+import React, { useCallback, useMemo } from "react";
+import ContentModelGroupPermission from "./components/ContentModelGroupPermission";
+import { i18n } from "@webiny/app/i18n";
+import { CannotUseAaclAlert, PermissionInfo, gridWithPaddingClass } from "@webiny/app-admin/components/Permissions";
+import { Form } from "@webiny/form";
+import { ContentModelPermission } from "./components/ContentModelPermission";
+import { ContentEntryPermission } from "./components/ContentEntryPermission";
+import { useI18N } from "@webiny/app-i18n/hooks/useI18N";
+import { Link } from "@webiny/react-router";
+import { useSecurity } from "@webiny/app-security";
+import { CheckboxGroup, Grid, Select } from "@webiny/admin-ui";
+const t = i18n.ns("app-headless-cms/admin/plugins/permissionRenderer");
+const CMS_PERMISSION = "cms";
+const CMS_PERMISSION_FULL_ACCESS = "cms.*";
+const FULL_ACCESS = "full";
+const NO_ACCESS = "no";
+const CUSTOM_ACCESS = "custom";
+const ENTITIES = ["contentModel", "contentModelGroup", "contentEntry"];
+const API_ENDPOINTS = [{
   id: "read",
   name: "Read"
 }, {
@@ -43,23 +30,24 @@ var API_ENDPOINTS = [{
   id: "preview",
   name: "Preview"
 }];
-var GRAPHQL_API_TYPES_LINK = "https://www.webiny.com/docs/key-topics/webiny-applications/headless-cms/graphql-api/#graphql-api-types";
-var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
-  var value = _ref.value,
-    onChange = _ref.onChange;
-  var _useSecurity = (0, _appSecurity.useSecurity)(),
-    getPermission = _useSecurity.getPermission;
+const GRAPHQL_API_TYPES_LINK = "https://www.webiny.com/docs/key-topics/webiny-applications/headless-cms/graphql-api/#graphql-api-types";
+export const CMSPermissions = ({
+  value,
+  onChange
+}) => {
+  const {
+    getPermission
+  } = useSecurity();
 
   // We disable form elements for custom permissions if AACL cannot be used.
-  var cannotUseAAcl = (0, _react.useMemo)(function () {
+  const cannotUseAAcl = useMemo(() => {
     return !getPermission("aacl", true);
   }, []);
-  var _useI18N = (0, _useI18N2.useI18N)(),
-    getLocales = _useI18N.getLocales;
-  var canRead = (0, _react.useCallback)(function (value, permissionName) {
-    var permission = value.find(function (item) {
-      return item.name === permissionName;
-    });
+  const {
+    getLocales
+  } = useI18N();
+  const canRead = useCallback((value, permissionName) => {
+    const permission = value.find(item => item.name === permissionName);
     if (!permission) {
       return false;
     }
@@ -68,27 +56,19 @@ var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
     }
     return permission.rwd.includes("r");
   }, []);
-  var getFormLocales = function getFormLocales() {
-    var localePermission = (value || []).find(function (item) {
-      return item.name.startsWith("content.i18n");
-    });
+  const getFormLocales = () => {
+    const localePermission = (value || []).find(item => item.name.startsWith("content.i18n"));
     if (!localePermission) {
-      return getLocales().map(function (l) {
-        return l.code;
-      });
+      return getLocales().map(l => l.code);
     }
-    return Array.isArray(localePermission.locales) ? localePermission.locales : getLocales().map(function (l) {
-      return l.code;
-    });
+    return Array.isArray(localePermission.locales) ? localePermission.locales : getLocales().map(l => l.code);
   };
-  var onFormChange = (0, _react.useCallback)(function (data) {
-    var newValue = [];
+  const onFormChange = useCallback(data => {
+    let newValue = [];
     if (Array.isArray(value)) {
       // Let's just filter out the `cms*` permission objects.
       // Based on the `data` we rebuild new permission object from scratch.
-      newValue = value.filter(function (item) {
-        return !item.name.startsWith(CMS_PERMISSION);
-      });
+      newValue = value.filter(item => !item.name.startsWith(CMS_PERMISSION));
     }
     if (data.accessLevel === NO_ACCESS) {
       onChange(newValue);
@@ -101,26 +81,26 @@ var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
       onChange(newValue);
       return;
     }
-    var endpoints = data.endpoints;
+    const endpoints = data.endpoints;
 
     // Handling custom access level.
     if (endpoints && Array.isArray(data.endpoints)) {
-      API_ENDPOINTS.forEach(function (api) {
+      API_ENDPOINTS.forEach(api => {
         if (endpoints.includes(api.id)) {
           newValue.push({
-            name: "".concat(CMS_PERMISSION, ".endpoint.").concat(api.id)
+            name: `${CMS_PERMISSION}.endpoint.${api.id}`
           });
         }
       });
     }
-    var locales = getFormLocales();
+    const locales = getFormLocales();
 
     // Content models, content model groups, content entries
-    ENTITIES.forEach(function (entity) {
-      var accessScope = data["".concat(entity, "AccessScope")];
+    ENTITIES.forEach(entity => {
+      const accessScope = data[`${entity}AccessScope`];
       if (accessScope && accessScope !== NO_ACCESS) {
-        var permission = {
-          name: "".concat(CMS_PERMISSION, ".").concat(entity),
+        const permission = {
+          name: `${CMS_PERMISSION}.${entity}`,
           own: false,
           rwd: "r",
           pw: "",
@@ -131,20 +111,20 @@ var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
           permission.own = true;
           permission.rwd = "rwd";
         } else {
-          permission.rwd = data["".concat(entity, "RWD")] || "r";
+          permission.rwd = data[`${entity}RWD`] || "r";
         }
-        permission.pw = (data["".concat(entity, "PW")] || []).join("");
+        permission.pw = (data[`${entity}PW`] || []).join("");
         if (accessScope === "models") {
           permission.models = {};
         }
         if (accessScope === "groups") {
           permission.groups = {};
         }
-        var props = data["".concat(entity, "Props")];
+        const props = data[`${entity}Props`];
         if (props) {
-          ["models", "groups"].forEach(function (entity) {
+          ["models", "groups"].forEach(entity => {
             if (accessScope === entity && props[entity]) {
-              permission[entity] = locales.reduce(function (acc, locale) {
+              permission[entity] = locales.reduce((acc, locale) => {
                 if (props[entity][locale]) {
                   acc[locale] = props[entity][locale];
                 }
@@ -159,39 +139,29 @@ var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
     // Remove dependent permissions.
     // The "cms.contentModel" permission can only be assigned if the user has the "read" access for the "cms.contentModelGroup".
     if (!canRead(newValue, "cms.contentModelGroup")) {
-      newValue = newValue.filter(function (item) {
-        return item.name !== "cms.contentModel";
-      });
+      newValue = newValue.filter(item => item.name !== "cms.contentModel");
     }
     // The "cms.contentEntry" permission can only be assigned if the user has the "read" access for the "cms.contentModel".
     if (!canRead(newValue, "cms.contentModel")) {
-      newValue = newValue.filter(function (item) {
-        return item.name !== "cms.contentEntry";
-      });
+      newValue = newValue.filter(item => item.name !== "cms.contentEntry");
     }
     onChange(newValue);
   }, [value]);
-  var initialFormData = (0, _react.useMemo)(function () {
+  const initialFormData = useMemo(() => {
     // This function only runs once on Form mount
     if (!Array.isArray(value)) {
       return {
         accessLevel: NO_ACCESS
       };
     }
-    var hasFullAccess = value.some(function (item) {
-      return item.name === CMS_PERMISSION_FULL_ACCESS || item.name === "*";
-    });
+    const hasFullAccess = value.some(item => item.name === CMS_PERMISSION_FULL_ACCESS || item.name === "*");
     if (hasFullAccess) {
       return {
         accessLevel: FULL_ACCESS,
-        endpoints: API_ENDPOINTS.map(function (item) {
-          return item.id;
-        })
+        endpoints: API_ENDPOINTS.map(item => item.id)
       };
     }
-    var permissions = value.filter(function (item) {
-      return item.name.startsWith(CMS_PERMISSION);
-    });
+    const permissions = value.filter(item => item.name.startsWith(CMS_PERMISSION));
     if (!permissions.length) {
       return {
         accessLevel: NO_ACCESS
@@ -199,134 +169,133 @@ var CMSPermissions = exports.CMSPermissions = function CMSPermissions(_ref) {
     }
 
     // We're dealing with custom permissions. Let's first prepare data for "content models", "content model groups", "content entries" and "environments".
-    var returnData = {
+    const returnData = {
       accessLevel: CUSTOM_ACCESS,
-      endpoints: permissions.filter(function (p) {
-        return p.name.startsWith("cms.endpoint.");
-      }).map(function (p) {
-        return p.name.replace("cms.endpoint.", "");
-      })
+      endpoints: permissions.filter(p => p.name.startsWith("cms.endpoint.")).map(p => p.name.replace("cms.endpoint.", ""))
     };
-    ENTITIES.forEach(function (entity) {
-      var data = (0, _defineProperty2.default)((0, _defineProperty2.default)((0, _defineProperty2.default)({}, "".concat(entity, "AccessScope"), FULL_ACCESS), "".concat(entity, "RWD"), "r"), "".concat(entity, "Props"), {});
-      var entityPermission = permissions.find(function (item) {
-        return item.name === "".concat(CMS_PERMISSION, ".").concat(entity);
-      });
+    ENTITIES.forEach(entity => {
+      const data = {
+        [`${entity}AccessScope`]: FULL_ACCESS,
+        [`${entity}RWD`]: "r",
+        [`${entity}Props`]: {}
+      };
+      const entityPermission = permissions.find(item => item.name === `${CMS_PERMISSION}.${entity}`);
       if (entityPermission) {
-        data["".concat(entity, "AccessScope")] = entityPermission.own ? "own" : FULL_ACCESS;
-        if (data["".concat(entity, "AccessScope")] === "own") {
-          data["".concat(entity, "RWD")] = "rwd";
+        data[`${entity}AccessScope`] = entityPermission.own ? "own" : FULL_ACCESS;
+        if (data[`${entity}AccessScope`] === "own") {
+          data[`${entity}RWD`] = "rwd";
         } else {
-          data["".concat(entity, "RWD")] = entityPermission.rwd;
+          data[`${entity}RWD`] = entityPermission.rwd;
         }
 
         // If there are any non-empty props we'll set "AccessScope" to that prop.
         if (entityPermission.models) {
-          data["".concat(entity, "AccessScope")] = "models";
-          data["".concat(entity, "Props")] = {
+          data[`${entity}AccessScope`] = "models";
+          data[`${entity}Props`] = {
             models: entityPermission.models
           };
         }
         if (entityPermission.groups) {
-          data["".concat(entity, "AccessScope")] = "groups";
-          data["".concat(entity, "Props")] = {
+          data[`${entity}AccessScope`] = "groups";
+          data[`${entity}Props`] = {
             groups: entityPermission.groups
           };
         }
         if (entity === "contentEntry") {
-          data["".concat(entity, "PW")] = entityPermission.pw ? entityPermission.pw.split("") : [];
+          data[`${entity}PW`] = entityPermission.pw ? entityPermission.pw.split("") : [];
         }
       }
       Object.assign(returnData, data);
     });
     return returnData;
   }, []);
-  var locales = getFormLocales();
-  var getSelectedContentModelGroups = (0, _react.useCallback)(function (data) {
+  const locales = getFormLocales();
+  const getSelectedContentModelGroups = useCallback(data => {
     if (data && data.contentModelGroupAccessScope === "groups" && data.contentModelGroupProps) {
       return data.contentModelGroupProps.groups;
     }
   }, []);
-  return /*#__PURE__*/_react.default.createElement(_form.Form, {
+  return /*#__PURE__*/React.createElement(Form, {
     data: initialFormData,
     onChange: onFormChange
-  }, function (_ref2) {
-    var data = _ref2.data,
-      Bind = _ref2.Bind,
-      setValue = _ref2.setValue;
-    return /*#__PURE__*/_react.default.createElement(_react.default.Fragment, null, /*#__PURE__*/_react.default.createElement(_Grid.Grid, {
-      className: _Permissions.gridNoPaddingClass
-    }, /*#__PURE__*/_react.default.createElement(_Grid.Cell, {
-      span: 12
-    }, data.accessLevel === "custom" && cannotUseAAcl && /*#__PURE__*/_react.default.createElement(_Permissions.CannotUseAaclAlert, null))), /*#__PURE__*/_react.default.createElement(_Grid.Grid, {
-      className: _Permissions.gridNoPaddingClass
-    }, /*#__PURE__*/_react.default.createElement(_Grid.Cell, {
-      span: 6
-    }, /*#__PURE__*/_react.default.createElement(_Permissions.PermissionInfo, {
-      title: t(_templateObject || (_templateObject = (0, _taggedTemplateLiteral2.default)(["Access Level"])))
-    })), /*#__PURE__*/_react.default.createElement(_Grid.Cell, {
-      span: 6
-    }, /*#__PURE__*/_react.default.createElement(Bind, {
-      name: "accessLevel"
-    }, /*#__PURE__*/_react.default.createElement(_Select.Select, {
-      label: t(_templateObject2 || (_templateObject2 = (0, _taggedTemplateLiteral2.default)(["Access Level"])))
-    }, /*#__PURE__*/_react.default.createElement("option", {
-      value: NO_ACCESS
-    }, t(_templateObject3 || (_templateObject3 = (0, _taggedTemplateLiteral2.default)(["No access"])))), /*#__PURE__*/_react.default.createElement("option", {
-      value: FULL_ACCESS
-    }, t(_templateObject4 || (_templateObject4 = (0, _taggedTemplateLiteral2.default)(["Full access"])))), /*#__PURE__*/_react.default.createElement("option", {
-      value: CUSTOM_ACCESS
-    }, t(_templateObject5 || (_templateObject5 = (0, _taggedTemplateLiteral2.default)(["Custom access"])))))))), data.accessLevel === CUSTOM_ACCESS && /*#__PURE__*/_react.default.createElement(_react.default.Fragment, null, /*#__PURE__*/_react.default.createElement(_Grid.Grid, null, /*#__PURE__*/_react.default.createElement(_Grid.Cell, {
-      span: 12
-    }, /*#__PURE__*/_react.default.createElement(Bind, {
-      name: "endpoints"
-    }, /*#__PURE__*/_react.default.createElement(_Checkbox.CheckboxGroup, {
-      label: t(_templateObject6 || (_templateObject6 = (0, _taggedTemplateLiteral2.default)(["GraphQL API types"]))),
-      description: t(_templateObject7 || (_templateObject7 = (0, _taggedTemplateLiteral2.default)(["Each type has a separate URL and a specific purpose.\n                                                 Check out the {link} key topic to learn more."])))({
-        link: /*#__PURE__*/_react.default.createElement(_reactRouter.Link, {
-          to: GRAPHQL_API_TYPES_LINK,
-          target: "_blank"
-        }, "Headless CMS GraphQL API")
-      })
-    }, function (_ref3) {
-      var getValue = _ref3.getValue,
-        onChange = _ref3.onChange;
-      return API_ENDPOINTS.map(function (_ref4) {
-        var id = _ref4.id,
-          name = _ref4.name;
-        return /*#__PURE__*/_react.default.createElement(_Checkbox.Checkbox, {
-          key: id,
-          label: name,
-          value: getValue(id),
-          onChange: onChange(id),
-          disabled: cannotUseAAcl
-        });
-      });
-    })))), /*#__PURE__*/_react.default.createElement(_ContentModelGroupPermission.default, {
-      data: data,
-      Bind: Bind,
-      disabled: cannotUseAAcl,
-      entity: "contentModelGroup",
-      title: "Content Model Groups",
-      locales: locales
-    }), /*#__PURE__*/_react.default.createElement(_ContentModelPermission.ContentModelPermission, {
-      locales: locales,
-      data: data,
-      setValue: setValue,
-      Bind: Bind,
-      disabled: cannotUseAAcl,
-      entity: "contentModel",
-      title: "Content Models",
-      selectedContentModelGroups: getSelectedContentModelGroups(data)
-    }), /*#__PURE__*/_react.default.createElement(_ContentEntryPermission.ContentEntryPermission, {
-      data: data,
-      Bind: Bind,
-      disabled: cannotUseAAcl,
-      setValue: setValue,
-      entity: "contentEntry",
-      title: "Content Entries"
-    })));
-  });
+  }, ({
+    data,
+    Bind,
+    setValue
+  }) => /*#__PURE__*/React.createElement(React.Fragment, null, /*#__PURE__*/React.createElement(Grid, {
+    className: gridWithPaddingClass
+  }, /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 12
+  }, data.accessLevel === "custom" && cannotUseAAcl && /*#__PURE__*/React.createElement(CannotUseAaclAlert, null))), /*#__PURE__*/React.createElement(Grid, {
+    className: gridWithPaddingClass
+  }, /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 6
+  }, /*#__PURE__*/React.createElement(PermissionInfo, {
+    title: t`Access Level`
+  })), /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 6
+  }, /*#__PURE__*/React.createElement(Bind, {
+    name: "accessLevel"
+  }, /*#__PURE__*/React.createElement(Select, {
+    options: [{
+      value: NO_ACCESS,
+      label: t`No access`
+    }, {
+      value: FULL_ACCESS,
+      label: t`Full access`
+    }, {
+      value: CUSTOM_ACCESS,
+      label: t`Custom access`
+    }]
+  })))), data.accessLevel === CUSTOM_ACCESS && /*#__PURE__*/React.createElement("div", {
+    className: "wby-mt-lg"
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "wby-mb-md"
+  }, /*#__PURE__*/React.createElement(Grid, null, /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 12
+  }, /*#__PURE__*/React.createElement(Bind, {
+    name: "endpoints"
+  }, bind => /*#__PURE__*/React.createElement(CheckboxGroup, Object.assign({}, bind, {
+    label: t`GraphQL API types`,
+    description: t`Each type has a separate URL and a specific purpose.
+                                                 Check out the {link} key topic to learn more.`({
+      link: /*#__PURE__*/React.createElement(Link, {
+        to: GRAPHQL_API_TYPES_LINK,
+        target: "_blank"
+      }, "Headless CMS GraphQL API")
+    }),
+    items: API_ENDPOINTS.map(({
+      id,
+      name
+    }) => ({
+      id,
+      label: name,
+      value: id
+    }))
+  })))))), /*#__PURE__*/React.createElement(ContentModelGroupPermission, {
+    data: data,
+    Bind: Bind,
+    disabled: cannotUseAAcl,
+    entity: "contentModelGroup",
+    title: "Content Model Groups",
+    locales: locales
+  }), /*#__PURE__*/React.createElement(ContentModelPermission, {
+    locales: locales,
+    data: data,
+    setValue: setValue,
+    Bind: Bind,
+    disabled: cannotUseAAcl,
+    entity: "contentModel",
+    title: "Content Models",
+    selectedContentModelGroups: getSelectedContentModelGroups(data)
+  }), /*#__PURE__*/React.createElement(ContentEntryPermission, {
+    data: data,
+    Bind: Bind,
+    disabled: cannotUseAAcl,
+    setValue: setValue,
+    entity: "contentEntry",
+    title: "Content Entries"
+  }))));
 };
 
 //# sourceMappingURL=CmsPermissions.js.map

package/admin/plugins/permissionRenderer/CmsPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["_react","_interopRequireWildcard","require","_ContentModelGroupPermission","_interopRequireDefault","_Grid","_Select","_i18n","_Permissions","_form","_ContentModelPermission","_ContentEntryPermission","_Checkbox","_useI18N2","_reactRouter","_appSecurity","_templateObject","_templateObject2","_templateObject3","_templateObject4","_templateObject5","_templateObject6","_templateObject7","t","i18n","ns","CMS_PERMISSION","CMS_PERMISSION_FULL_ACCESS","FULL_ACCESS","NO_ACCESS","CUSTOM_ACCESS","ENTITIES","API_ENDPOINTS","id","name","GRAPHQL_API_TYPES_LINK","CMSPermissions","exports","_ref","value","onChange","_useSecurity","useSecurity","getPermission","cannotUseAAcl","useMemo","_useI18N","useI18N","getLocales","canRead","useCallback","permissionName","permission","find","item","rwd","includes","getFormLocales","localePermission","startsWith","map","l","code","Array","isArray","locales","onFormChange","data","newValue","filter","accessLevel","push","endpoints","forEach","api","concat","entity","accessScope","own","pw","groups","undefined","models","join","props","reduce","acc","locale","initialFormData","hasFullAccess","some","permissions","length","returnData","p","replace","_defineProperty2","default","entityPermission","split","Object","assign","getSelectedContentModelGroups","contentModelGroupAccessScope","contentModelGroupProps","createElement","Form","_ref2","Bind","setValue","Fragment","Grid","className","gridNoPaddingClass","Cell","span","CannotUseAaclAlert","PermissionInfo","title","_taggedTemplateLiteral2","Select","label","CheckboxGroup","description","link","Link","to","target","_ref3","getValue","_ref4","Checkbox","key","disabled","ContentModelPermission","selectedContentModelGroups","ContentEntryPermission"],"sources":["CmsPermissions.tsx"],"sourcesContent":["/**\n * @pavel Please review types for security permissions\n * TODO @ts-refactor\n */\nimport React, { Fragment, useCallback, useMemo } from \"react\";\nimport ContentModelGroupPermission from \"./components/ContentModelGroupPermission\";\nimport { Grid, Cell } from \"@webiny/ui/Grid\";\nimport { Select } from \"@webiny/ui/Select\";\nimport { i18n } from \"@webiny/app/i18n\";\nimport {\n    CannotUseAaclAlert,\n    PermissionInfo,\n    gridNoPaddingClass\n} from \"@webiny/app-admin/components/Permissions\";\nimport { Form } from \"@webiny/form\";\nimport { ContentModelPermission } from \"./components/ContentModelPermission\";\nimport { ContentEntryPermission } from \"./components/ContentEntryPermission\";\nimport { Checkbox, CheckboxGroup } from \"@webiny/ui/Checkbox\";\nimport { useI18N } from \"@webiny/app-i18n/hooks/useI18N\";\nimport { Link } from \"@webiny/react-router\";\nimport { CmsSecurityPermission } from \"~/types\";\nimport { useSecurity } from \"@webiny/app-security\";\nimport { AaclPermission } from \"@webiny/app-admin\";\n\nconst t = i18n.ns(\"app-headless-cms/admin/plugins/permissionRenderer\");\n\nconst CMS_PERMISSION = \"cms\";\nconst CMS_PERMISSION_FULL_ACCESS = \"cms.*\";\nconst FULL_ACCESS = \"full\";\nconst NO_ACCESS = \"no\";\nconst CUSTOM_ACCESS = \"custom\";\nconst ENTITIES = [\"contentModel\", \"contentModelGroup\", \"contentEntry\"];\nconst API_ENDPOINTS = [\n    { id: \"read\", name: \"Read\" },\n    { id: \"manage\", name: \"Manage\" },\n    { id: \"preview\", name: \"Preview\" }\n];\n\nconst GRAPHQL_API_TYPES_LINK =\n    \"https://www.webiny.com/docs/key-topics/webiny-applications/headless-cms/graphql-api/#graphql-api-types\";\n\nexport interface CMSPermissionsProps {\n    value: CmsSecurityPermission[];\n    onChange: (value: CmsSecurityPermission[]) => void;\n}\n\nexport const CMSPermissions = ({ value, onChange }: CMSPermissionsProps) => {\n    const { getPermission } = useSecurity();\n\n    // We disable form elements for custom permissions if AACL cannot be used.\n    const cannotUseAAcl = useMemo(() => {\n        return !getPermission<AaclPermission>(\"aacl\", true);\n    }, []);\n\n    const { getLocales } = useI18N();\n\n    const canRead = useCallback((value: any[], permissionName: string) => {\n        const permission = value.find(item => item.name === permissionName);\n\n        if (!permission) {\n            return false;\n        }\n\n        if (typeof permission.rwd !== \"string\") {\n            return true;\n        }\n\n        return permission.rwd.includes(\"r\");\n    }, []);\n\n    const getFormLocales = () => {\n        const localePermission = (value || []).find(item => item.name.startsWith(\"content.i18n\"));\n        if (!localePermission) {\n            return getLocales().map(l => l.code);\n        }\n\n        return Array.isArray(localePermission.locales)\n            ? localePermission.locales\n            : getLocales().map(l => l.code);\n    };\n\n    const onFormChange = useCallback(\n        (data: CmsSecurityPermission) => {\n            let newValue: CmsSecurityPermission[] = [];\n            if (Array.isArray(value)) {\n                // Let's just filter out the `cms*` permission objects.\n                // Based on the `data` we rebuild new permission object from scratch.\n                newValue = value.filter(item => !item.name.startsWith(CMS_PERMISSION));\n            }\n\n            if (data.accessLevel === NO_ACCESS) {\n                onChange(newValue);\n                return;\n            }\n\n            if (data.accessLevel === FULL_ACCESS) {\n                newValue.push({\n                    name: CMS_PERMISSION_FULL_ACCESS\n                });\n                onChange(newValue);\n                return;\n            }\n\n            const endpoints = data.endpoints;\n\n            // Handling custom access level.\n            if (endpoints && Array.isArray(data.endpoints)) {\n                API_ENDPOINTS.forEach(api => {\n                    if (endpoints.includes(api.id)) {\n                        newValue.push({\n                            name: `${CMS_PERMISSION}.endpoint.${api.id}`\n                        });\n                    }\n                });\n            }\n\n            const locales = getFormLocales();\n\n            // Content models, content model groups, content entries\n            ENTITIES.forEach(entity => {\n                const accessScope = data[`${entity}AccessScope`];\n                if (accessScope && accessScope !== NO_ACCESS) {\n                    const permission: CmsSecurityPermission = {\n                        name: `${CMS_PERMISSION}.${entity}`,\n                        own: false,\n                        rwd: \"r\",\n                        pw: \"\",\n                        groups: undefined,\n                        models: undefined\n                    };\n\n                    if (accessScope === \"own\") {\n                        permission.own = true;\n                        permission.rwd = \"rwd\";\n                    } else {\n                        permission.rwd = data[`${entity}RWD`] || \"r\";\n                    }\n\n                    permission.pw = (data[`${entity}PW`] || []).join(\"\");\n\n                    if (accessScope === \"models\") {\n                        permission.models = {};\n                    }\n\n                    if (accessScope === \"groups\") {\n                        permission.groups = {};\n                    }\n\n                    const props = data[`${entity}Props`];\n                    if (props) {\n                        [\"models\", \"groups\"].forEach(entity => {\n                            if (accessScope === entity && props[entity]) {\n                                permission[entity] = locales.reduce((acc, locale) => {\n                                    if (props[entity][locale]) {\n                                        acc[locale] = props[entity][locale];\n                                    }\n                                    return acc;\n                                }, {} as Record<string, string>);\n                            }\n                        });\n                    }\n\n                    newValue.push(permission);\n                }\n            });\n            // Remove dependent permissions.\n            // The \"cms.contentModel\" permission can only be assigned if the user has the \"read\" access for the \"cms.contentModelGroup\".\n            if (!canRead(newValue, \"cms.contentModelGroup\")) {\n                newValue = newValue.filter(item => item.name !== \"cms.contentModel\");\n            }\n            // The \"cms.contentEntry\" permission can only be assigned if the user has the \"read\" access for the \"cms.contentModel\".\n            if (!canRead(newValue, \"cms.contentModel\")) {\n                newValue = newValue.filter(item => item.name !== \"cms.contentEntry\");\n            }\n\n            onChange(newValue);\n        },\n        [value]\n    );\n\n    const initialFormData = useMemo(() => {\n        // This function only runs once on Form mount\n        if (!Array.isArray(value)) {\n            return {\n                accessLevel: NO_ACCESS\n            };\n        }\n\n        const hasFullAccess = value.some(\n            item => item.name === CMS_PERMISSION_FULL_ACCESS || item.name === \"*\"\n        );\n\n        if (hasFullAccess) {\n            return {\n                accessLevel: FULL_ACCESS,\n                endpoints: API_ENDPOINTS.map(item => item.id)\n            };\n        }\n\n        const permissions = value.filter(item => item.name.startsWith(CMS_PERMISSION));\n\n        if (!permissions.length) {\n            return {\n                accessLevel: NO_ACCESS\n            };\n        }\n\n        // We're dealing with custom permissions. Let's first prepare data for \"content models\", \"content model groups\", \"content entries\" and \"environments\".\n        const returnData = {\n            accessLevel: CUSTOM_ACCESS,\n            endpoints: permissions\n                .filter(p => p.name.startsWith(\"cms.endpoint.\"))\n                .map(p => p.name.replace(\"cms.endpoint.\", \"\"))\n        };\n\n        ENTITIES.forEach(entity => {\n            const data: Record<string, any> = {\n                [`${entity}AccessScope`]: FULL_ACCESS,\n                [`${entity}RWD`]: \"r\",\n                [`${entity}Props`]: {}\n            };\n\n            const entityPermission = permissions.find(\n                item => item.name === `${CMS_PERMISSION}.${entity}`\n            );\n\n            if (entityPermission) {\n                data[`${entity}AccessScope`] = entityPermission.own ? \"own\" : FULL_ACCESS;\n                if (data[`${entity}AccessScope`] === \"own\") {\n                    data[`${entity}RWD`] = \"rwd\";\n                } else {\n                    data[`${entity}RWD`] = entityPermission.rwd;\n                }\n\n                // If there are any non-empty props we'll set \"AccessScope\" to that prop.\n                if (entityPermission.models) {\n                    data[`${entity}AccessScope`] = \"models\";\n                    data[`${entity}Props`] = { models: entityPermission.models };\n                }\n\n                if (entityPermission.groups) {\n                    data[`${entity}AccessScope`] = \"groups\";\n                    data[`${entity}Props`] = { groups: entityPermission.groups };\n                }\n\n                if (entity === \"contentEntry\") {\n                    data[`${entity}PW`] = entityPermission.pw ? entityPermission.pw.split(\"\") : [];\n                }\n            }\n\n            Object.assign(returnData, data);\n        });\n\n        return returnData;\n    }, []) as CmsSecurityPermission;\n\n    const locales = getFormLocales();\n\n    const getSelectedContentModelGroups = useCallback((data: CmsSecurityPermission) => {\n        if (data && data.contentModelGroupAccessScope === \"groups\" && data.contentModelGroupProps) {\n            return data.contentModelGroupProps.groups;\n        }\n    }, []);\n\n    return (\n        <Form<CmsSecurityPermission> data={initialFormData} onChange={onFormChange}>\n            {({ data, Bind, setValue }) => (\n                <>\n                    <Grid className={gridNoPaddingClass}>\n                        <Cell span={12}>\n                            {data.accessLevel === \"custom\" && cannotUseAAcl && (\n                                <CannotUseAaclAlert />\n                            )}\n                        </Cell>\n                    </Grid>\n\n                    <Grid className={gridNoPaddingClass}>\n                        <Cell span={6}>\n                            <PermissionInfo title={t`Access Level`} />\n                        </Cell>\n                        <Cell span={6}>\n                            <Bind name={\"accessLevel\"}>\n                                <Select label={t`Access Level`}>\n                                    <option value={NO_ACCESS}>{t`No access`}</option>\n                                    <option value={FULL_ACCESS}>{t`Full access`}</option>\n                                    <option value={CUSTOM_ACCESS}>{t`Custom access`}</option>\n                                </Select>\n                            </Bind>\n                        </Cell>\n                    </Grid>\n                    {data.accessLevel === CUSTOM_ACCESS && (\n                        <>\n                            <Grid>\n                                <Cell span={12}>\n                                    <Bind name={\"endpoints\"}>\n                                        <CheckboxGroup\n                                            label={t`GraphQL API types`}\n                                            description={t`Each type has a separate URL and a specific purpose.\n                                                 Check out the {link} key topic to learn more.`({\n                                                link: (\n                                                    <Link\n                                                        to={GRAPHQL_API_TYPES_LINK}\n                                                        target={\"_blank\"}\n                                                    >\n                                                        Headless CMS GraphQL API\n                                                    </Link>\n                                                )\n                                            })}\n                                        >\n                                            {({ getValue, onChange }) =>\n                                                API_ENDPOINTS.map(({ id, name }) => (\n                                                    <Checkbox\n                                                        key={id}\n                                                        label={name}\n                                                        value={getValue(id)}\n                                                        onChange={onChange(id)}\n                                                        disabled={cannotUseAAcl}\n                                                    />\n                                                ))\n                                            }\n                                        </CheckboxGroup>\n                                    </Bind>\n                                </Cell>\n                            </Grid>\n\n                            <ContentModelGroupPermission\n                                data={data}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                entity={\"contentModelGroup\"}\n                                title={\"Content Model Groups\"}\n                                locales={locales}\n                            />\n\n                            <ContentModelPermission\n                                locales={locales}\n                                data={data}\n                                setValue={setValue}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                entity={\"contentModel\"}\n                                title={\"Content Models\"}\n                                selectedContentModelGroups={getSelectedContentModelGroups(data)}\n                            />\n\n                            <ContentEntryPermission\n                                data={data}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                setValue={setValue}\n                                entity={\"contentEntry\"}\n                                title={\"Content Entries\"}\n                            />\n                        </>\n                    )}\n                </>\n            )}\n        </Form>\n    );\n};\n"],"mappings":";;;;;;;;;;AAIA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,4BAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,KAAA,GAAAL,OAAA;AACA,IAAAM,YAAA,GAAAN,OAAA;AAKA,IAAAO,KAAA,GAAAP,OAAA;AACA,IAAAQ,uBAAA,GAAAR,OAAA;AACA,IAAAS,uBAAA,GAAAT,OAAA;AACA,IAAAU,SAAA,GAAAV,OAAA;AACA,IAAAW,SAAA,GAAAX,OAAA;AACA,IAAAY,YAAA,GAAAZ,OAAA;AAEA,IAAAa,YAAA,GAAAb,OAAA;AAAmD,IAAAc,eAAA,EAAAC,gBAAA,EAAAC,gBAAA,EAAAC,gBAAA,EAAAC,gBAAA,EAAAC,gBAAA,EAAAC,gBAAA;AArBnD;AACA;AACA;AACA;AAqBA,IAAMC,CAAC,GAAGC,UAAI,CAACC,EAAE,CAAC,mDAAmD,CAAC;AAEtE,IAAMC,cAAc,GAAG,KAAK;AAC5B,IAAMC,0BAA0B,GAAG,OAAO;AAC1C,IAAMC,WAAW,GAAG,MAAM;AAC1B,IAAMC,SAAS,GAAG,IAAI;AACtB,IAAMC,aAAa,GAAG,QAAQ;AAC9B,IAAMC,QAAQ,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,cAAc,CAAC;AACtE,IAAMC,aAAa,GAAG,CAClB;EAAEC,EAAE,EAAE,MAAM;EAAEC,IAAI,EAAE;AAAO,CAAC,EAC5B;EAAED,EAAE,EAAE,QAAQ;EAAEC,IAAI,EAAE;AAAS,CAAC,EAChC;EAAED,EAAE,EAAE,SAAS;EAAEC,IAAI,EAAE;AAAU,CAAC,CACrC;AAED,IAAMC,sBAAsB,GACxB,wGAAwG;AAOrG,IAAMC,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAG,SAAjBA,cAAcA,CAAAE,IAAA,EAAiD;EAAA,IAA3CC,KAAK,GAAAD,IAAA,CAALC,KAAK;IAAEC,QAAQ,GAAAF,IAAA,CAARE,QAAQ;EAC5C,IAAAC,YAAA,GAA0B,IAAAC,wBAAW,EAAC,CAAC;IAA/BC,aAAa,GAAAF,YAAA,CAAbE,aAAa;;EAErB;EACA,IAAMC,aAAa,GAAG,IAAAC,cAAO,EAAC,YAAM;IAChC,OAAO,CAACF,aAAa,CAAiB,MAAM,EAAE,IAAI,CAAC;EACvD,CAAC,EAAE,EAAE,CAAC;EAEN,IAAAG,QAAA,GAAuB,IAAAC,iBAAO,EAAC,CAAC;IAAxBC,UAAU,GAAAF,QAAA,CAAVE,UAAU;EAElB,IAAMC,OAAO,GAAG,IAAAC,kBAAW,EAAC,UAACX,KAAY,EAAEY,cAAsB,EAAK;IAClE,IAAMC,UAAU,GAAGb,KAAK,CAACc,IAAI,CAAC,UAAAC,IAAI;MAAA,OAAIA,IAAI,CAACpB,IAAI,KAAKiB,cAAc;IAAA,EAAC;IAEnE,IAAI,CAACC,UAAU,EAAE;MACb,OAAO,KAAK;IAChB;IAEA,IAAI,OAAOA,UAAU,CAACG,GAAG,KAAK,QAAQ,EAAE;MACpC,OAAO,IAAI;IACf;IAEA,OAAOH,UAAU,CAACG,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC;EACvC,CAAC,EAAE,EAAE,CAAC;EAEN,IAAMC,cAAc,GAAG,SAAjBA,cAAcA,CAAA,EAAS;IACzB,IAAMC,gBAAgB,GAAG,CAACnB,KAAK,IAAI,EAAE,EAAEc,IAAI,CAAC,UAAAC,IAAI;MAAA,OAAIA,IAAI,CAACpB,IAAI,CAACyB,UAAU,CAAC,cAAc,CAAC;IAAA,EAAC;IACzF,IAAI,CAACD,gBAAgB,EAAE;MACnB,OAAOV,UAAU,CAAC,CAAC,CAACY,GAAG,CAAC,UAAAC,CAAC;QAAA,OAAIA,CAAC,CAACC,IAAI;MAAA,EAAC;IACxC;IAEA,OAAOC,KAAK,CAACC,OAAO,CAACN,gBAAgB,CAACO,OAAO,CAAC,GACxCP,gBAAgB,CAACO,OAAO,GACxBjB,UAAU,CAAC,CAAC,CAACY,GAAG,CAAC,UAAAC,CAAC;MAAA,OAAIA,CAAC,CAACC,IAAI;IAAA,EAAC;EACvC,CAAC;EAED,IAAMI,YAAY,GAAG,IAAAhB,kBAAW,EAC5B,UAACiB,IAA2B,EAAK;IAC7B,IAAIC,QAAiC,GAAG,EAAE;IAC1C,IAAIL,KAAK,CAACC,OAAO,CAACzB,KAAK,CAAC,EAAE;MACtB;MACA;MACA6B,QAAQ,GAAG7B,KAAK,CAAC8B,MAAM,CAAC,UAAAf,IAAI;QAAA,OAAI,CAACA,IAAI,CAACpB,IAAI,CAACyB,UAAU,CAACjC,cAAc,CAAC;MAAA,EAAC;IAC1E;IAEA,IAAIyC,IAAI,CAACG,WAAW,KAAKzC,SAAS,EAAE;MAChCW,QAAQ,CAAC4B,QAAQ,CAAC;MAClB;IACJ;IAEA,IAAID,IAAI,CAACG,WAAW,KAAK1C,WAAW,EAAE;MAClCwC,QAAQ,CAACG,IAAI,CAAC;QACVrC,IAAI,EAAEP;MACV,CAAC,CAAC;MACFa,QAAQ,CAAC4B,QAAQ,CAAC;MAClB;IACJ;IAEA,IAAMI,SAAS,GAAGL,IAAI,CAACK,SAAS;;IAEhC;IACA,IAAIA,SAAS,IAAIT,KAAK,CAACC,OAAO,CAACG,IAAI,CAACK,SAAS,CAAC,EAAE;MAC5CxC,aAAa,CAACyC,OAAO,CAAC,UAAAC,GAAG,EAAI;QACzB,IAAIF,SAAS,CAAChB,QAAQ,CAACkB,GAAG,CAACzC,EAAE,CAAC,EAAE;UAC5BmC,QAAQ,CAACG,IAAI,CAAC;YACVrC,IAAI,KAAAyC,MAAA,CAAKjD,cAAc,gBAAAiD,MAAA,CAAaD,GAAG,CAACzC,EAAE;UAC9C,CAAC,CAAC;QACN;MACJ,CAAC,CAAC;IACN;IAEA,IAAMgC,OAAO,GAAGR,cAAc,CAAC,CAAC;;IAEhC;IACA1B,QAAQ,CAAC0C,OAAO,CAAC,UAAAG,MAAM,EAAI;MACvB,IAAMC,WAAW,GAAGV,IAAI,IAAAQ,MAAA,CAAIC,MAAM,iBAAc;MAChD,IAAIC,WAAW,IAAIA,WAAW,KAAKhD,SAAS,EAAE;QAC1C,IAAMuB,UAAiC,GAAG;UACtClB,IAAI,KAAAyC,MAAA,CAAKjD,cAAc,OAAAiD,MAAA,CAAIC,MAAM,CAAE;UACnCE,GAAG,EAAE,KAAK;UACVvB,GAAG,EAAE,GAAG;UACRwB,EAAE,EAAE,EAAE;UACNC,MAAM,EAAEC,SAAS;UACjBC,MAAM,EAAED;QACZ,CAAC;QAED,IAAIJ,WAAW,KAAK,KAAK,EAAE;UACvBzB,UAAU,CAAC0B,GAAG,GAAG,IAAI;UACrB1B,UAAU,CAACG,GAAG,GAAG,KAAK;QAC1B,CAAC,MAAM;UACHH,UAAU,CAACG,GAAG,GAAGY,IAAI,IAAAQ,MAAA,CAAIC,MAAM,SAAM,IAAI,GAAG;QAChD;QAEAxB,UAAU,CAAC2B,EAAE,GAAG,CAACZ,IAAI,IAAAQ,MAAA,CAAIC,MAAM,QAAK,IAAI,EAAE,EAAEO,IAAI,CAAC,EAAE,CAAC;QAEpD,IAAIN,WAAW,KAAK,QAAQ,EAAE;UAC1BzB,UAAU,CAAC8B,MAAM,GAAG,CAAC,CAAC;QAC1B;QAEA,IAAIL,WAAW,KAAK,QAAQ,EAAE;UAC1BzB,UAAU,CAAC4B,MAAM,GAAG,CAAC,CAAC;QAC1B;QAEA,IAAMI,KAAK,GAAGjB,IAAI,IAAAQ,MAAA,CAAIC,MAAM,WAAQ;QACpC,IAAIQ,KAAK,EAAE;UACP,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAACX,OAAO,CAAC,UAAAG,MAAM,EAAI;YACnC,IAAIC,WAAW,KAAKD,MAAM,IAAIQ,KAAK,CAACR,MAAM,CAAC,EAAE;cACzCxB,UAAU,CAACwB,MAAM,CAAC,GAAGX,OAAO,CAACoB,MAAM,CAAC,UAACC,GAAG,EAAEC,MAAM,EAAK;gBACjD,IAAIH,KAAK,CAACR,MAAM,CAAC,CAACW,MAAM,CAAC,EAAE;kBACvBD,GAAG,CAACC,MAAM,CAAC,GAAGH,KAAK,CAACR,MAAM,CAAC,CAACW,MAAM,CAAC;gBACvC;gBACA,OAAOD,GAAG;cACd,CAAC,EAAE,CAAC,CAA2B,CAAC;YACpC;UACJ,CAAC,CAAC;QACN;QAEAlB,QAAQ,CAACG,IAAI,CAACnB,UAAU,CAAC;MAC7B;IACJ,CAAC,CAAC;IACF;IACA;IACA,IAAI,CAACH,OAAO,CAACmB,QAAQ,EAAE,uBAAuB,CAAC,EAAE;MAC7CA,QAAQ,GAAGA,QAAQ,CAACC,MAAM,CAAC,UAAAf,IAAI;QAAA,OAAIA,IAAI,CAACpB,IAAI,KAAK,kBAAkB;MAAA,EAAC;IACxE;IACA;IACA,IAAI,CAACe,OAAO,CAACmB,QAAQ,EAAE,kBAAkB,CAAC,EAAE;MACxCA,QAAQ,GAAGA,QAAQ,CAACC,MAAM,CAAC,UAAAf,IAAI;QAAA,OAAIA,IAAI,CAACpB,IAAI,KAAK,kBAAkB;MAAA,EAAC;IACxE;IAEAM,QAAQ,CAAC4B,QAAQ,CAAC;EACtB,CAAC,EACD,CAAC7B,KAAK,CACV,CAAC;EAED,IAAMiD,eAAe,GAAG,IAAA3C,cAAO,EAAC,YAAM;IAClC;IACA,IAAI,CAACkB,KAAK,CAACC,OAAO,CAACzB,KAAK,CAAC,EAAE;MACvB,OAAO;QACH+B,WAAW,EAAEzC;MACjB,CAAC;IACL;IAEA,IAAM4D,aAAa,GAAGlD,KAAK,CAACmD,IAAI,CAC5B,UAAApC,IAAI;MAAA,OAAIA,IAAI,CAACpB,IAAI,KAAKP,0BAA0B,IAAI2B,IAAI,CAACpB,IAAI,KAAK,GAAG;IAAA,CACzE,CAAC;IAED,IAAIuD,aAAa,EAAE;MACf,OAAO;QACHnB,WAAW,EAAE1C,WAAW;QACxB4C,SAAS,EAAExC,aAAa,CAAC4B,GAAG,CAAC,UAAAN,IAAI;UAAA,OAAIA,IAAI,CAACrB,EAAE;QAAA;MAChD,CAAC;IACL;IAEA,IAAM0D,WAAW,GAAGpD,KAAK,CAAC8B,MAAM,CAAC,UAAAf,IAAI;MAAA,OAAIA,IAAI,CAACpB,IAAI,CAACyB,UAAU,CAACjC,cAAc,CAAC;IAAA,EAAC;IAE9E,IAAI,CAACiE,WAAW,CAACC,MAAM,EAAE;MACrB,OAAO;QACHtB,WAAW,EAAEzC;MACjB,CAAC;IACL;;IAEA;IACA,IAAMgE,UAAU,GAAG;MACfvB,WAAW,EAAExC,aAAa;MAC1B0C,SAAS,EAAEmB,WAAW,CACjBtB,MAAM,CAAC,UAAAyB,CAAC;QAAA,OAAIA,CAAC,CAAC5D,IAAI,CAACyB,UAAU,CAAC,eAAe,CAAC;MAAA,EAAC,CAC/CC,GAAG,CAAC,UAAAkC,CAAC;QAAA,OAAIA,CAAC,CAAC5D,IAAI,CAAC6D,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;MAAA;IACrD,CAAC;IAEDhE,QAAQ,CAAC0C,OAAO,CAAC,UAAAG,MAAM,EAAI;MACvB,IAAMT,IAAyB,OAAA6B,gBAAA,CAAAC,OAAA,MAAAD,gBAAA,CAAAC,OAAA,MAAAD,gBAAA,CAAAC,OAAA,SAAAtB,MAAA,CACvBC,MAAM,kBAAgBhD,WAAW,MAAA+C,MAAA,CACjCC,MAAM,UAAQ,GAAG,MAAAD,MAAA,CACjBC,MAAM,YAAU,CAAC,CAAC,CACzB;MAED,IAAMsB,gBAAgB,GAAGP,WAAW,CAACtC,IAAI,CACrC,UAAAC,IAAI;QAAA,OAAIA,IAAI,CAACpB,IAAI,QAAAyC,MAAA,CAAQjD,cAAc,OAAAiD,MAAA,CAAIC,MAAM,CAAE;MAAA,CACvD,CAAC;MAED,IAAIsB,gBAAgB,EAAE;QAClB/B,IAAI,IAAAQ,MAAA,CAAIC,MAAM,iBAAc,GAAGsB,gBAAgB,CAACpB,GAAG,GAAG,KAAK,GAAGlD,WAAW;QACzE,IAAIuC,IAAI,IAAAQ,MAAA,CAAIC,MAAM,iBAAc,KAAK,KAAK,EAAE;UACxCT,IAAI,IAAAQ,MAAA,CAAIC,MAAM,SAAM,GAAG,KAAK;QAChC,CAAC,MAAM;UACHT,IAAI,IAAAQ,MAAA,CAAIC,MAAM,SAAM,GAAGsB,gBAAgB,CAAC3C,GAAG;QAC/C;;QAEA;QACA,IAAI2C,gBAAgB,CAAChB,MAAM,EAAE;UACzBf,IAAI,IAAAQ,MAAA,CAAIC,MAAM,iBAAc,GAAG,QAAQ;UACvCT,IAAI,IAAAQ,MAAA,CAAIC,MAAM,WAAQ,GAAG;YAAEM,MAAM,EAAEgB,gBAAgB,CAAChB;UAAO,CAAC;QAChE;QAEA,IAAIgB,gBAAgB,CAAClB,MAAM,EAAE;UACzBb,IAAI,IAAAQ,MAAA,CAAIC,MAAM,iBAAc,GAAG,QAAQ;UACvCT,IAAI,IAAAQ,MAAA,CAAIC,MAAM,WAAQ,GAAG;YAAEI,MAAM,EAAEkB,gBAAgB,CAAClB;UAAO,CAAC;QAChE;QAEA,IAAIJ,MAAM,KAAK,cAAc,EAAE;UAC3BT,IAAI,IAAAQ,MAAA,CAAIC,MAAM,QAAK,GAAGsB,gBAAgB,CAACnB,EAAE,GAAGmB,gBAAgB,CAACnB,EAAE,CAACoB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QAClF;MACJ;MAEAC,MAAM,CAACC,MAAM,CAACR,UAAU,EAAE1B,IAAI,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO0B,UAAU;EACrB,CAAC,EAAE,EAAE,CAA0B;EAE/B,IAAM5B,OAAO,GAAGR,cAAc,CAAC,CAAC;EAEhC,IAAM6C,6BAA6B,GAAG,IAAApD,kBAAW,EAAC,UAACiB,IAA2B,EAAK;IAC/E,IAAIA,IAAI,IAAIA,IAAI,CAACoC,4BAA4B,KAAK,QAAQ,IAAIpC,IAAI,CAACqC,sBAAsB,EAAE;MACvF,OAAOrC,IAAI,CAACqC,sBAAsB,CAACxB,MAAM;IAC7C;EACJ,CAAC,EAAE,EAAE,CAAC;EAEN,oBACIhF,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAChG,KAAA,CAAAiG,IAAI;IAAwBvC,IAAI,EAAEqB,eAAgB;IAAChD,QAAQ,EAAE0B;EAAa,GACtE,UAAAyC,KAAA;IAAA,IAAGxC,IAAI,GAAAwC,KAAA,CAAJxC,IAAI;MAAEyC,IAAI,GAAAD,KAAA,CAAJC,IAAI;MAAEC,QAAQ,GAAAF,KAAA,CAARE,QAAQ;IAAA,oBACpB7G,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAAzG,MAAA,CAAAiG,OAAA,CAAAa,QAAA,qBACI9G,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA0G,IAAI;MAACC,SAAS,EAAEC;IAAmB,gBAChCjH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA6G,IAAI;MAACC,IAAI,EAAE;IAAG,GACVhD,IAAI,CAACG,WAAW,KAAK,QAAQ,IAAI1B,aAAa,iBAC3C5C,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACjG,YAAA,CAAA4G,kBAAkB,MAAE,CAEvB,CACJ,CAAC,eAEPpH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA0G,IAAI;MAACC,SAAS,EAAEC;IAAmB,gBAChCjH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA6G,IAAI;MAACC,IAAI,EAAE;IAAE,gBACVnH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACjG,YAAA,CAAA6G,cAAc;MAACC,KAAK,EAAE/F,CAAC,CAAAP,eAAA,KAAAA,eAAA,OAAAuG,uBAAA,CAAAtB,OAAA;IAAe,CAAE,CACvC,CAAC,eACPjG,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA6G,IAAI;MAACC,IAAI,EAAE;IAAE,gBACVnH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACG,IAAI;MAAC1E,IAAI,EAAE;IAAc,gBACtBlC,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACnG,OAAA,CAAAkH,MAAM;MAACC,KAAK,EAAElG,CAAC,CAAAN,gBAAA,KAAAA,gBAAA,OAAAsG,uBAAA,CAAAtB,OAAA;IAAe,gBAC3BjG,MAAA,CAAAiG,OAAA,CAAAQ,aAAA;MAAQlE,KAAK,EAAEV;IAAU,GAAEN,CAAC,CAAAL,gBAAA,KAAAA,gBAAA,OAAAqG,uBAAA,CAAAtB,OAAA,kBAAoB,CAAC,eACjDjG,MAAA,CAAAiG,OAAA,CAAAQ,aAAA;MAAQlE,KAAK,EAAEX;IAAY,GAAEL,CAAC,CAAAJ,gBAAA,KAAAA,gBAAA,OAAAoG,uBAAA,CAAAtB,OAAA,oBAAsB,CAAC,eACrDjG,MAAA,CAAAiG,OAAA,CAAAQ,aAAA;MAAQlE,KAAK,EAAET;IAAc,GAAEP,CAAC,CAAAH,gBAAA,KAAAA,gBAAA,OAAAmG,uBAAA,CAAAtB,OAAA,sBAAwB,CACpD,CACN,CACJ,CACJ,CAAC,EACN9B,IAAI,CAACG,WAAW,KAAKxC,aAAa,iBAC/B9B,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAAzG,MAAA,CAAAiG,OAAA,CAAAa,QAAA,qBACI9G,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA0G,IAAI,qBACD/G,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACpG,KAAA,CAAA6G,IAAI;MAACC,IAAI,EAAE;IAAG,gBACXnH,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACG,IAAI;MAAC1E,IAAI,EAAE;IAAY,gBACpBlC,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAC7F,SAAA,CAAA8G,aAAa;MACVD,KAAK,EAAElG,CAAC,CAAAF,gBAAA,KAAAA,gBAAA,OAAAkG,uBAAA,CAAAtB,OAAA,0BAAoB;MAC5B0B,WAAW,EAAEpG,CAAC,CAAAD,gBAAA,KAAAA,gBAAA,OAAAiG,uBAAA,CAAAtB,OAAA,8JACsC;QAChD2B,IAAI,eACA5H,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAC3F,YAAA,CAAA+G,IAAI;UACDC,EAAE,EAAE3F,sBAAuB;UAC3B4F,MAAM,EAAE;QAAS,GACpB,0BAEK;MAEd,CAAC;IAAE,GAEF,UAAAC,KAAA;MAAA,IAAGC,QAAQ,GAAAD,KAAA,CAARC,QAAQ;QAAEzF,QAAQ,GAAAwF,KAAA,CAARxF,QAAQ;MAAA,OAClBR,aAAa,CAAC4B,GAAG,CAAC,UAAAsE,KAAA;QAAA,IAAGjG,EAAE,GAAAiG,KAAA,CAAFjG,EAAE;UAAEC,IAAI,GAAAgG,KAAA,CAAJhG,IAAI;QAAA,oBACzBlC,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAC7F,SAAA,CAAAuH,QAAQ;UACLC,GAAG,EAAEnG,EAAG;UACRwF,KAAK,EAAEvF,IAAK;UACZK,KAAK,EAAE0F,QAAQ,CAAChG,EAAE,CAAE;UACpBO,QAAQ,EAAEA,QAAQ,CAACP,EAAE,CAAE;UACvBoG,QAAQ,EAAEzF;QAAc,CAC3B,CAAC;MAAA,CACL,CAAC;IAAA,CAEK,CACb,CACJ,CACJ,CAAC,eAEP5C,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAACtG,4BAAA,CAAA8F,OAA2B;MACxB9B,IAAI,EAAEA,IAAK;MACXyC,IAAI,EAAEA,IAAK;MACXyB,QAAQ,EAAEzF,aAAc;MACxBgC,MAAM,EAAE,mBAAoB;MAC5B0C,KAAK,EAAE,sBAAuB;MAC9BrD,OAAO,EAAEA;IAAQ,CACpB,CAAC,eAEFjE,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAC/F,uBAAA,CAAA4H,sBAAsB;MACnBrE,OAAO,EAAEA,OAAQ;MACjBE,IAAI,EAAEA,IAAK;MACX0C,QAAQ,EAAEA,QAAS;MACnBD,IAAI,EAAEA,IAAK;MACXyB,QAAQ,EAAEzF,aAAc;MACxBgC,MAAM,EAAE,cAAe;MACvB0C,KAAK,EAAE,gBAAiB;MACxBiB,0BAA0B,EAAEjC,6BAA6B,CAACnC,IAAI;IAAE,CACnE,CAAC,eAEFnE,MAAA,CAAAiG,OAAA,CAAAQ,aAAA,CAAC9F,uBAAA,CAAA6H,sBAAsB;MACnBrE,IAAI,EAAEA,IAAK;MACXyC,IAAI,EAAEA,IAAK;MACXyB,QAAQ,EAAEzF,aAAc;MACxBiE,QAAQ,EAAEA,QAAS;MACnBjC,MAAM,EAAE,cAAe;MACvB0C,KAAK,EAAE;IAAkB,CAC5B,CACH,CAER,CAAC;EAAA,CAEL,CAAC;AAEf,CAAC","ignoreList":[]}
+{"version":3,"names":["React","useCallback","useMemo","ContentModelGroupPermission","i18n","CannotUseAaclAlert","PermissionInfo","gridWithPaddingClass","Form","ContentModelPermission","ContentEntryPermission","useI18N","Link","useSecurity","CheckboxGroup","Grid","Select","t","ns","CMS_PERMISSION","CMS_PERMISSION_FULL_ACCESS","FULL_ACCESS","NO_ACCESS","CUSTOM_ACCESS","ENTITIES","API_ENDPOINTS","id","name","GRAPHQL_API_TYPES_LINK","CMSPermissions","value","onChange","getPermission","cannotUseAAcl","getLocales","canRead","permissionName","permission","find","item","rwd","includes","getFormLocales","localePermission","startsWith","map","l","code","Array","isArray","locales","onFormChange","data","newValue","filter","accessLevel","push","endpoints","forEach","api","entity","accessScope","own","pw","groups","undefined","models","join","props","reduce","acc","locale","initialFormData","hasFullAccess","some","permissions","length","returnData","p","replace","entityPermission","split","Object","assign","getSelectedContentModelGroups","contentModelGroupAccessScope","contentModelGroupProps","createElement","Bind","setValue","Fragment","className","Column","span","title","options","label","bind","description","link","to","target","items","disabled","selectedContentModelGroups"],"sources":["CmsPermissions.tsx"],"sourcesContent":["/**\n * @pavel Please review types for security permissions\n * TODO @ts-refactor\n */\nimport React, { Fragment, useCallback, useMemo } from \"react\";\nimport ContentModelGroupPermission from \"./components/ContentModelGroupPermission\";\nimport { i18n } from \"@webiny/app/i18n\";\nimport {\n    CannotUseAaclAlert,\n    PermissionInfo,\n    gridWithPaddingClass\n} from \"@webiny/app-admin/components/Permissions\";\nimport { Form } from \"@webiny/form\";\nimport { ContentModelPermission } from \"./components/ContentModelPermission\";\nimport { ContentEntryPermission } from \"./components/ContentEntryPermission\";\nimport { useI18N } from \"@webiny/app-i18n/hooks/useI18N\";\nimport { Link } from \"@webiny/react-router\";\nimport { CmsSecurityPermission } from \"~/types\";\nimport { useSecurity } from \"@webiny/app-security\";\nimport { AaclPermission } from \"@webiny/app-admin\";\nimport { CheckboxGroup, Grid, Select } from \"@webiny/admin-ui\";\n\nconst t = i18n.ns(\"app-headless-cms/admin/plugins/permissionRenderer\");\n\nconst CMS_PERMISSION = \"cms\";\nconst CMS_PERMISSION_FULL_ACCESS = \"cms.*\";\nconst FULL_ACCESS = \"full\";\nconst NO_ACCESS = \"no\";\nconst CUSTOM_ACCESS = \"custom\";\nconst ENTITIES = [\"contentModel\", \"contentModelGroup\", \"contentEntry\"];\nconst API_ENDPOINTS = [\n    { id: \"read\", name: \"Read\" },\n    { id: \"manage\", name: \"Manage\" },\n    { id: \"preview\", name: \"Preview\" }\n];\n\nconst GRAPHQL_API_TYPES_LINK =\n    \"https://www.webiny.com/docs/key-topics/webiny-applications/headless-cms/graphql-api/#graphql-api-types\";\n\nexport interface CMSPermissionsProps {\n    value: CmsSecurityPermission[];\n    onChange: (value: CmsSecurityPermission[]) => void;\n}\n\nexport const CMSPermissions = ({ value, onChange }: CMSPermissionsProps) => {\n    const { getPermission } = useSecurity();\n\n    // We disable form elements for custom permissions if AACL cannot be used.\n    const cannotUseAAcl = useMemo(() => {\n        return !getPermission<AaclPermission>(\"aacl\", true);\n    }, []);\n\n    const { getLocales } = useI18N();\n\n    const canRead = useCallback((value: any[], permissionName: string) => {\n        const permission = value.find(item => item.name === permissionName);\n\n        if (!permission) {\n            return false;\n        }\n\n        if (typeof permission.rwd !== \"string\") {\n            return true;\n        }\n\n        return permission.rwd.includes(\"r\");\n    }, []);\n\n    const getFormLocales = () => {\n        const localePermission = (value || []).find(item => item.name.startsWith(\"content.i18n\"));\n        if (!localePermission) {\n            return getLocales().map(l => l.code);\n        }\n\n        return Array.isArray(localePermission.locales)\n            ? localePermission.locales\n            : getLocales().map(l => l.code);\n    };\n\n    const onFormChange = useCallback(\n        (data: CmsSecurityPermission) => {\n            let newValue: CmsSecurityPermission[] = [];\n            if (Array.isArray(value)) {\n                // Let's just filter out the `cms*` permission objects.\n                // Based on the `data` we rebuild new permission object from scratch.\n                newValue = value.filter(item => !item.name.startsWith(CMS_PERMISSION));\n            }\n\n            if (data.accessLevel === NO_ACCESS) {\n                onChange(newValue);\n                return;\n            }\n\n            if (data.accessLevel === FULL_ACCESS) {\n                newValue.push({\n                    name: CMS_PERMISSION_FULL_ACCESS\n                });\n                onChange(newValue);\n                return;\n            }\n\n            const endpoints = data.endpoints;\n\n            // Handling custom access level.\n            if (endpoints && Array.isArray(data.endpoints)) {\n                API_ENDPOINTS.forEach(api => {\n                    if (endpoints.includes(api.id)) {\n                        newValue.push({\n                            name: `${CMS_PERMISSION}.endpoint.${api.id}`\n                        });\n                    }\n                });\n            }\n\n            const locales = getFormLocales();\n\n            // Content models, content model groups, content entries\n            ENTITIES.forEach(entity => {\n                const accessScope = data[`${entity}AccessScope`];\n                if (accessScope && accessScope !== NO_ACCESS) {\n                    const permission: CmsSecurityPermission = {\n                        name: `${CMS_PERMISSION}.${entity}`,\n                        own: false,\n                        rwd: \"r\",\n                        pw: \"\",\n                        groups: undefined,\n                        models: undefined\n                    };\n\n                    if (accessScope === \"own\") {\n                        permission.own = true;\n                        permission.rwd = \"rwd\";\n                    } else {\n                        permission.rwd = data[`${entity}RWD`] || \"r\";\n                    }\n\n                    permission.pw = (data[`${entity}PW`] || []).join(\"\");\n\n                    if (accessScope === \"models\") {\n                        permission.models = {};\n                    }\n\n                    if (accessScope === \"groups\") {\n                        permission.groups = {};\n                    }\n\n                    const props = data[`${entity}Props`];\n                    if (props) {\n                        [\"models\", \"groups\"].forEach(entity => {\n                            if (accessScope === entity && props[entity]) {\n                                permission[entity] = locales.reduce((acc, locale) => {\n                                    if (props[entity][locale]) {\n                                        acc[locale] = props[entity][locale];\n                                    }\n                                    return acc;\n                                }, {} as Record<string, string>);\n                            }\n                        });\n                    }\n\n                    newValue.push(permission);\n                }\n            });\n            // Remove dependent permissions.\n            // The \"cms.contentModel\" permission can only be assigned if the user has the \"read\" access for the \"cms.contentModelGroup\".\n            if (!canRead(newValue, \"cms.contentModelGroup\")) {\n                newValue = newValue.filter(item => item.name !== \"cms.contentModel\");\n            }\n            // The \"cms.contentEntry\" permission can only be assigned if the user has the \"read\" access for the \"cms.contentModel\".\n            if (!canRead(newValue, \"cms.contentModel\")) {\n                newValue = newValue.filter(item => item.name !== \"cms.contentEntry\");\n            }\n\n            onChange(newValue);\n        },\n        [value]\n    );\n\n    const initialFormData = useMemo(() => {\n        // This function only runs once on Form mount\n        if (!Array.isArray(value)) {\n            return {\n                accessLevel: NO_ACCESS\n            };\n        }\n\n        const hasFullAccess = value.some(\n            item => item.name === CMS_PERMISSION_FULL_ACCESS || item.name === \"*\"\n        );\n\n        if (hasFullAccess) {\n            return {\n                accessLevel: FULL_ACCESS,\n                endpoints: API_ENDPOINTS.map(item => item.id)\n            };\n        }\n\n        const permissions = value.filter(item => item.name.startsWith(CMS_PERMISSION));\n\n        if (!permissions.length) {\n            return {\n                accessLevel: NO_ACCESS\n            };\n        }\n\n        // We're dealing with custom permissions. Let's first prepare data for \"content models\", \"content model groups\", \"content entries\" and \"environments\".\n        const returnData = {\n            accessLevel: CUSTOM_ACCESS,\n            endpoints: permissions\n                .filter(p => p.name.startsWith(\"cms.endpoint.\"))\n                .map(p => p.name.replace(\"cms.endpoint.\", \"\"))\n        };\n\n        ENTITIES.forEach(entity => {\n            const data: Record<string, any> = {\n                [`${entity}AccessScope`]: FULL_ACCESS,\n                [`${entity}RWD`]: \"r\",\n                [`${entity}Props`]: {}\n            };\n\n            const entityPermission = permissions.find(\n                item => item.name === `${CMS_PERMISSION}.${entity}`\n            );\n\n            if (entityPermission) {\n                data[`${entity}AccessScope`] = entityPermission.own ? \"own\" : FULL_ACCESS;\n                if (data[`${entity}AccessScope`] === \"own\") {\n                    data[`${entity}RWD`] = \"rwd\";\n                } else {\n                    data[`${entity}RWD`] = entityPermission.rwd;\n                }\n\n                // If there are any non-empty props we'll set \"AccessScope\" to that prop.\n                if (entityPermission.models) {\n                    data[`${entity}AccessScope`] = \"models\";\n                    data[`${entity}Props`] = { models: entityPermission.models };\n                }\n\n                if (entityPermission.groups) {\n                    data[`${entity}AccessScope`] = \"groups\";\n                    data[`${entity}Props`] = { groups: entityPermission.groups };\n                }\n\n                if (entity === \"contentEntry\") {\n                    data[`${entity}PW`] = entityPermission.pw ? entityPermission.pw.split(\"\") : [];\n                }\n            }\n\n            Object.assign(returnData, data);\n        });\n\n        return returnData;\n    }, []) as CmsSecurityPermission;\n\n    const locales = getFormLocales();\n\n    const getSelectedContentModelGroups = useCallback((data: CmsSecurityPermission) => {\n        if (data && data.contentModelGroupAccessScope === \"groups\" && data.contentModelGroupProps) {\n            return data.contentModelGroupProps.groups;\n        }\n    }, []);\n\n    return (\n        <Form<CmsSecurityPermission> data={initialFormData} onChange={onFormChange}>\n            {({ data, Bind, setValue }) => (\n                <>\n                    <Grid className={gridWithPaddingClass}>\n                        <Grid.Column span={12}>\n                            {data.accessLevel === \"custom\" && cannotUseAAcl && (\n                                <CannotUseAaclAlert />\n                            )}\n                        </Grid.Column>\n                    </Grid>\n\n                    <Grid className={gridWithPaddingClass}>\n                        <Grid.Column span={6}>\n                            <PermissionInfo title={t`Access Level`} />\n                        </Grid.Column>\n                        <Grid.Column span={6}>\n                            <Bind name={\"accessLevel\"}>\n                                <Select\n                                    options={[\n                                        {\n                                            value: NO_ACCESS,\n                                            label: t`No access`\n                                        },\n                                        {\n                                            value: FULL_ACCESS,\n                                            label: t`Full access`\n                                        },\n                                        {\n                                            value: CUSTOM_ACCESS,\n                                            label: t`Custom access`\n                                        }\n                                    ]}\n                                />\n                            </Bind>\n                        </Grid.Column>\n                    </Grid>\n                    {data.accessLevel === CUSTOM_ACCESS && (\n                        <div className={\"wby-mt-lg\"}>\n                            <div className={\"wby-mb-md\"}>\n                                <Grid>\n                                    <Grid.Column span={12}>\n                                        <Bind name={\"endpoints\"}>\n                                            {bind => (\n                                                <CheckboxGroup\n                                                    {...bind}\n                                                    label={t`GraphQL API types`}\n                                                    description={t`Each type has a separate URL and a specific purpose.\n                                                 Check out the {link} key topic to learn more.`({\n                                                        link: (\n                                                            <Link\n                                                                to={GRAPHQL_API_TYPES_LINK}\n                                                                target={\"_blank\"}\n                                                            >\n                                                                Headless CMS GraphQL API\n                                                            </Link>\n                                                        )\n                                                    })}\n                                                    items={API_ENDPOINTS.map(({ id, name }) => ({\n                                                        id,\n                                                        label: name,\n                                                        value: id\n                                                    }))}\n                                                />\n                                            )}\n                                        </Bind>\n                                    </Grid.Column>\n                                </Grid>\n                            </div>\n\n                            <ContentModelGroupPermission\n                                data={data}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                entity={\"contentModelGroup\"}\n                                title={\"Content Model Groups\"}\n                                locales={locales}\n                            />\n\n                            <ContentModelPermission\n                                locales={locales}\n                                data={data}\n                                setValue={setValue}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                entity={\"contentModel\"}\n                                title={\"Content Models\"}\n                                selectedContentModelGroups={getSelectedContentModelGroups(data)}\n                            />\n\n                            <ContentEntryPermission\n                                data={data}\n                                Bind={Bind}\n                                disabled={cannotUseAAcl}\n                                setValue={setValue}\n                                entity={\"contentEntry\"}\n                                title={\"Content Entries\"}\n                            />\n                        </div>\n                    )}\n                </>\n            )}\n        </Form>\n    );\n};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA,OAAOA,KAAK,IAAcC,WAAW,EAAEC,OAAO,QAAQ,OAAO;AAC7D,OAAOC,2BAA2B;AAClC,SAASC,IAAI,QAAQ,kBAAkB;AACvC,SACIC,kBAAkB,EAClBC,cAAc,EACdC,oBAAoB,QACjB,0CAA0C;AACjD,SAASC,IAAI,QAAQ,cAAc;AACnC,SAASC,sBAAsB;AAC/B,SAASC,sBAAsB;AAC/B,SAASC,OAAO,QAAQ,gCAAgC;AACxD,SAASC,IAAI,QAAQ,sBAAsB;AAE3C,SAASC,WAAW,QAAQ,sBAAsB;AAElD,SAASC,aAAa,EAAEC,IAAI,EAAEC,MAAM,QAAQ,kBAAkB;AAE9D,MAAMC,CAAC,GAAGb,IAAI,CAACc,EAAE,CAAC,mDAAmD,CAAC;AAEtE,MAAMC,cAAc,GAAG,KAAK;AAC5B,MAAMC,0BAA0B,GAAG,OAAO;AAC1C,MAAMC,WAAW,GAAG,MAAM;AAC1B,MAAMC,SAAS,GAAG,IAAI;AACtB,MAAMC,aAAa,GAAG,QAAQ;AAC9B,MAAMC,QAAQ,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,cAAc,CAAC;AACtE,MAAMC,aAAa,GAAG,CAClB;EAAEC,EAAE,EAAE,MAAM;EAAEC,IAAI,EAAE;AAAO,CAAC,EAC5B;EAAED,EAAE,EAAE,QAAQ;EAAEC,IAAI,EAAE;AAAS,CAAC,EAChC;EAAED,EAAE,EAAE,SAAS;EAAEC,IAAI,EAAE;AAAU,CAAC,CACrC;AAED,MAAMC,sBAAsB,GACxB,wGAAwG;AAO5G,OAAO,MAAMC,cAAc,GAAGA,CAAC;EAAEC,KAAK;EAAEC;AAA8B,CAAC,KAAK;EACxE,MAAM;IAAEC;EAAc,CAAC,GAAGnB,WAAW,CAAC,CAAC;;EAEvC;EACA,MAAMoB,aAAa,GAAG/B,OAAO,CAAC,MAAM;IAChC,OAAO,CAAC8B,aAAa,CAAiB,MAAM,EAAE,IAAI,CAAC;EACvD,CAAC,EAAE,EAAE,CAAC;EAEN,MAAM;IAAEE;EAAW,CAAC,GAAGvB,OAAO,CAAC,CAAC;EAEhC,MAAMwB,OAAO,GAAGlC,WAAW,CAAC,CAAC6B,KAAY,EAAEM,cAAsB,KAAK;IAClE,MAAMC,UAAU,GAAGP,KAAK,CAACQ,IAAI,CAACC,IAAI,IAAIA,IAAI,CAACZ,IAAI,KAAKS,cAAc,CAAC;IAEnE,IAAI,CAACC,UAAU,EAAE;MACb,OAAO,KAAK;IAChB;IAEA,IAAI,OAAOA,UAAU,CAACG,GAAG,KAAK,QAAQ,EAAE;MACpC,OAAO,IAAI;IACf;IAEA,OAAOH,UAAU,CAACG,GAAG,CAACC,QAAQ,CAAC,GAAG,CAAC;EACvC,CAAC,EAAE,EAAE,CAAC;EAEN,MAAMC,cAAc,GAAGA,CAAA,KAAM;IACzB,MAAMC,gBAAgB,GAAG,CAACb,KAAK,IAAI,EAAE,EAAEQ,IAAI,CAACC,IAAI,IAAIA,IAAI,CAACZ,IAAI,CAACiB,UAAU,CAAC,cAAc,CAAC,CAAC;IACzF,IAAI,CAACD,gBAAgB,EAAE;MACnB,OAAOT,UAAU,CAAC,CAAC,CAACW,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC;IACxC;IAEA,OAAOC,KAAK,CAACC,OAAO,CAACN,gBAAgB,CAACO,OAAO,CAAC,GACxCP,gBAAgB,CAACO,OAAO,GACxBhB,UAAU,CAAC,CAAC,CAACW,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC;EACvC,CAAC;EAED,MAAMI,YAAY,GAAGlD,WAAW,CAC3BmD,IAA2B,IAAK;IAC7B,IAAIC,QAAiC,GAAG,EAAE;IAC1C,IAAIL,KAAK,CAACC,OAAO,CAACnB,KAAK,CAAC,EAAE;MACtB;MACA;MACAuB,QAAQ,GAAGvB,KAAK,CAACwB,MAAM,CAACf,IAAI,IAAI,CAACA,IAAI,CAACZ,IAAI,CAACiB,UAAU,CAACzB,cAAc,CAAC,CAAC;IAC1E;IAEA,IAAIiC,IAAI,CAACG,WAAW,KAAKjC,SAAS,EAAE;MAChCS,QAAQ,CAACsB,QAAQ,CAAC;MAClB;IACJ;IAEA,IAAID,IAAI,CAACG,WAAW,KAAKlC,WAAW,EAAE;MAClCgC,QAAQ,CAACG,IAAI,CAAC;QACV7B,IAAI,EAAEP;MACV,CAAC,CAAC;MACFW,QAAQ,CAACsB,QAAQ,CAAC;MAClB;IACJ;IAEA,MAAMI,SAAS,GAAGL,IAAI,CAACK,SAAS;;IAEhC;IACA,IAAIA,SAAS,IAAIT,KAAK,CAACC,OAAO,CAACG,IAAI,CAACK,SAAS,CAAC,EAAE;MAC5ChC,aAAa,CAACiC,OAAO,CAACC,GAAG,IAAI;QACzB,IAAIF,SAAS,CAAChB,QAAQ,CAACkB,GAAG,CAACjC,EAAE,CAAC,EAAE;UAC5B2B,QAAQ,CAACG,IAAI,CAAC;YACV7B,IAAI,EAAE,GAAGR,cAAc,aAAawC,GAAG,CAACjC,EAAE;UAC9C,CAAC,CAAC;QACN;MACJ,CAAC,CAAC;IACN;IAEA,MAAMwB,OAAO,GAAGR,cAAc,CAAC,CAAC;;IAEhC;IACAlB,QAAQ,CAACkC,OAAO,CAACE,MAAM,IAAI;MACvB,MAAMC,WAAW,GAAGT,IAAI,CAAC,GAAGQ,MAAM,aAAa,CAAC;MAChD,IAAIC,WAAW,IAAIA,WAAW,KAAKvC,SAAS,EAAE;QAC1C,MAAMe,UAAiC,GAAG;UACtCV,IAAI,EAAE,GAAGR,cAAc,IAAIyC,MAAM,EAAE;UACnCE,GAAG,EAAE,KAAK;UACVtB,GAAG,EAAE,GAAG;UACRuB,EAAE,EAAE,EAAE;UACNC,MAAM,EAAEC,SAAS;UACjBC,MAAM,EAAED;QACZ,CAAC;QAED,IAAIJ,WAAW,KAAK,KAAK,EAAE;UACvBxB,UAAU,CAACyB,GAAG,GAAG,IAAI;UACrBzB,UAAU,CAACG,GAAG,GAAG,KAAK;QAC1B,CAAC,MAAM;UACHH,UAAU,CAACG,GAAG,GAAGY,IAAI,CAAC,GAAGQ,MAAM,KAAK,CAAC,IAAI,GAAG;QAChD;QAEAvB,UAAU,CAAC0B,EAAE,GAAG,CAACX,IAAI,CAAC,GAAGQ,MAAM,IAAI,CAAC,IAAI,EAAE,EAAEO,IAAI,CAAC,EAAE,CAAC;QAEpD,IAAIN,WAAW,KAAK,QAAQ,EAAE;UAC1BxB,UAAU,CAAC6B,MAAM,GAAG,CAAC,CAAC;QAC1B;QAEA,IAAIL,WAAW,KAAK,QAAQ,EAAE;UAC1BxB,UAAU,CAAC2B,MAAM,GAAG,CAAC,CAAC;QAC1B;QAEA,MAAMI,KAAK,GAAGhB,IAAI,CAAC,GAAGQ,MAAM,OAAO,CAAC;QACpC,IAAIQ,KAAK,EAAE;UACP,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAACV,OAAO,CAACE,MAAM,IAAI;YACnC,IAAIC,WAAW,KAAKD,MAAM,IAAIQ,KAAK,CAACR,MAAM,CAAC,EAAE;cACzCvB,UAAU,CAACuB,MAAM,CAAC,GAAGV,OAAO,CAACmB,MAAM,CAAC,CAACC,GAAG,EAAEC,MAAM,KAAK;gBACjD,IAAIH,KAAK,CAACR,MAAM,CAAC,CAACW,MAAM,CAAC,EAAE;kBACvBD,GAAG,CAACC,MAAM,CAAC,GAAGH,KAAK,CAACR,MAAM,CAAC,CAACW,MAAM,CAAC;gBACvC;gBACA,OAAOD,GAAG;cACd,CAAC,EAAE,CAAC,CAA2B,CAAC;YACpC;UACJ,CAAC,CAAC;QACN;QAEAjB,QAAQ,CAACG,IAAI,CAACnB,UAAU,CAAC;MAC7B;IACJ,CAAC,CAAC;IACF;IACA;IACA,IAAI,CAACF,OAAO,CAACkB,QAAQ,EAAE,uBAAuB,CAAC,EAAE;MAC7CA,QAAQ,GAAGA,QAAQ,CAACC,MAAM,CAACf,IAAI,IAAIA,IAAI,CAACZ,IAAI,KAAK,kBAAkB,CAAC;IACxE;IACA;IACA,IAAI,CAACQ,OAAO,CAACkB,QAAQ,EAAE,kBAAkB,CAAC,EAAE;MACxCA,QAAQ,GAAGA,QAAQ,CAACC,MAAM,CAACf,IAAI,IAAIA,IAAI,CAACZ,IAAI,KAAK,kBAAkB,CAAC;IACxE;IAEAI,QAAQ,CAACsB,QAAQ,CAAC;EACtB,CAAC,EACD,CAACvB,KAAK,CACV,CAAC;EAED,MAAM0C,eAAe,GAAGtE,OAAO,CAAC,MAAM;IAClC;IACA,IAAI,CAAC8C,KAAK,CAACC,OAAO,CAACnB,KAAK,CAAC,EAAE;MACvB,OAAO;QACHyB,WAAW,EAAEjC;MACjB,CAAC;IACL;IAEA,MAAMmD,aAAa,GAAG3C,KAAK,CAAC4C,IAAI,CAC5BnC,IAAI,IAAIA,IAAI,CAACZ,IAAI,KAAKP,0BAA0B,IAAImB,IAAI,CAACZ,IAAI,KAAK,GACtE,CAAC;IAED,IAAI8C,aAAa,EAAE;MACf,OAAO;QACHlB,WAAW,EAAElC,WAAW;QACxBoC,SAAS,EAAEhC,aAAa,CAACoB,GAAG,CAACN,IAAI,IAAIA,IAAI,CAACb,EAAE;MAChD,CAAC;IACL;IAEA,MAAMiD,WAAW,GAAG7C,KAAK,CAACwB,MAAM,CAACf,IAAI,IAAIA,IAAI,CAACZ,IAAI,CAACiB,UAAU,CAACzB,cAAc,CAAC,CAAC;IAE9E,IAAI,CAACwD,WAAW,CAACC,MAAM,EAAE;MACrB,OAAO;QACHrB,WAAW,EAAEjC;MACjB,CAAC;IACL;;IAEA;IACA,MAAMuD,UAAU,GAAG;MACftB,WAAW,EAAEhC,aAAa;MAC1BkC,SAAS,EAAEkB,WAAW,CACjBrB,MAAM,CAACwB,CAAC,IAAIA,CAAC,CAACnD,IAAI,CAACiB,UAAU,CAAC,eAAe,CAAC,CAAC,CAC/CC,GAAG,CAACiC,CAAC,IAAIA,CAAC,CAACnD,IAAI,CAACoD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;IACrD,CAAC;IAEDvD,QAAQ,CAACkC,OAAO,CAACE,MAAM,IAAI;MACvB,MAAMR,IAAyB,GAAG;QAC9B,CAAC,GAAGQ,MAAM,aAAa,GAAGvC,WAAW;QACrC,CAAC,GAAGuC,MAAM,KAAK,GAAG,GAAG;QACrB,CAAC,GAAGA,MAAM,OAAO,GAAG,CAAC;MACzB,CAAC;MAED,MAAMoB,gBAAgB,GAAGL,WAAW,CAACrC,IAAI,CACrCC,IAAI,IAAIA,IAAI,CAACZ,IAAI,KAAK,GAAGR,cAAc,IAAIyC,MAAM,EACrD,CAAC;MAED,IAAIoB,gBAAgB,EAAE;QAClB5B,IAAI,CAAC,GAAGQ,MAAM,aAAa,CAAC,GAAGoB,gBAAgB,CAAClB,GAAG,GAAG,KAAK,GAAGzC,WAAW;QACzE,IAAI+B,IAAI,CAAC,GAAGQ,MAAM,aAAa,CAAC,KAAK,KAAK,EAAE;UACxCR,IAAI,CAAC,GAAGQ,MAAM,KAAK,CAAC,GAAG,KAAK;QAChC,CAAC,MAAM;UACHR,IAAI,CAAC,GAAGQ,MAAM,KAAK,CAAC,GAAGoB,gBAAgB,CAACxC,GAAG;QAC/C;;QAEA;QACA,IAAIwC,gBAAgB,CAACd,MAAM,EAAE;UACzBd,IAAI,CAAC,GAAGQ,MAAM,aAAa,CAAC,GAAG,QAAQ;UACvCR,IAAI,CAAC,GAAGQ,MAAM,OAAO,CAAC,GAAG;YAAEM,MAAM,EAAEc,gBAAgB,CAACd;UAAO,CAAC;QAChE;QAEA,IAAIc,gBAAgB,CAAChB,MAAM,EAAE;UACzBZ,IAAI,CAAC,GAAGQ,MAAM,aAAa,CAAC,GAAG,QAAQ;UACvCR,IAAI,CAAC,GAAGQ,MAAM,OAAO,CAAC,GAAG;YAAEI,MAAM,EAAEgB,gBAAgB,CAAChB;UAAO,CAAC;QAChE;QAEA,IAAIJ,MAAM,KAAK,cAAc,EAAE;UAC3BR,IAAI,CAAC,GAAGQ,MAAM,IAAI,CAAC,GAAGoB,gBAAgB,CAACjB,EAAE,GAAGiB,gBAAgB,CAACjB,EAAE,CAACkB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QAClF;MACJ;MAEAC,MAAM,CAACC,MAAM,CAACN,UAAU,EAAEzB,IAAI,CAAC;IACnC,CAAC,CAAC;IAEF,OAAOyB,UAAU;EACrB,CAAC,EAAE,EAAE,CAA0B;EAE/B,MAAM3B,OAAO,GAAGR,cAAc,CAAC,CAAC;EAEhC,MAAM0C,6BAA6B,GAAGnF,WAAW,CAAEmD,IAA2B,IAAK;IAC/E,IAAIA,IAAI,IAAIA,IAAI,CAACiC,4BAA4B,KAAK,QAAQ,IAAIjC,IAAI,CAACkC,sBAAsB,EAAE;MACvF,OAAOlC,IAAI,CAACkC,sBAAsB,CAACtB,MAAM;IAC7C;EACJ,CAAC,EAAE,EAAE,CAAC;EAEN,oBACIhE,KAAA,CAAAuF,aAAA,CAAC/E,IAAI;IAAwB4C,IAAI,EAAEoB,eAAgB;IAACzC,QAAQ,EAAEoB;EAAa,GACtE,CAAC;IAAEC,IAAI;IAAEoC,IAAI;IAAEC;EAAS,CAAC,kBACtBzF,KAAA,CAAAuF,aAAA,CAAAvF,KAAA,CAAA0F,QAAA,qBACI1F,KAAA,CAAAuF,aAAA,CAACxE,IAAI;IAAC4E,SAAS,EAAEpF;EAAqB,gBAClCP,KAAA,CAAAuF,aAAA,CAACxE,IAAI,CAAC6E,MAAM;IAACC,IAAI,EAAE;EAAG,GACjBzC,IAAI,CAACG,WAAW,KAAK,QAAQ,IAAItB,aAAa,iBAC3CjC,KAAA,CAAAuF,aAAA,CAAClF,kBAAkB,MAAE,CAEhB,CACX,CAAC,eAEPL,KAAA,CAAAuF,aAAA,CAACxE,IAAI;IAAC4E,SAAS,EAAEpF;EAAqB,gBAClCP,KAAA,CAAAuF,aAAA,CAACxE,IAAI,CAAC6E,MAAM;IAACC,IAAI,EAAE;EAAE,gBACjB7F,KAAA,CAAAuF,aAAA,CAACjF,cAAc;IAACwF,KAAK,EAAE7E,CAAC;EAAe,CAAE,CAChC,CAAC,eACdjB,KAAA,CAAAuF,aAAA,CAACxE,IAAI,CAAC6E,MAAM;IAACC,IAAI,EAAE;EAAE,gBACjB7F,KAAA,CAAAuF,aAAA,CAACC,IAAI;IAAC7D,IAAI,EAAE;EAAc,gBACtB3B,KAAA,CAAAuF,aAAA,CAACvE,MAAM;IACH+E,OAAO,EAAE,CACL;MACIjE,KAAK,EAAER,SAAS;MAChB0E,KAAK,EAAE/E,CAAC;IACZ,CAAC,EACD;MACIa,KAAK,EAAET,WAAW;MAClB2E,KAAK,EAAE/E,CAAC;IACZ,CAAC,EACD;MACIa,KAAK,EAAEP,aAAa;MACpByE,KAAK,EAAE/E,CAAC;IACZ,CAAC;EACH,CACL,CACC,CACG,CACX,CAAC,EACNmC,IAAI,CAACG,WAAW,KAAKhC,aAAa,iBAC/BvB,KAAA,CAAAuF,aAAA;IAAKI,SAAS,EAAE;EAAY,gBACxB3F,KAAA,CAAAuF,aAAA;IAAKI,SAAS,EAAE;EAAY,gBACxB3F,KAAA,CAAAuF,aAAA,CAACxE,IAAI,qBACDf,KAAA,CAAAuF,aAAA,CAACxE,IAAI,CAAC6E,MAAM;IAACC,IAAI,EAAE;EAAG,gBAClB7F,KAAA,CAAAuF,aAAA,CAACC,IAAI;IAAC7D,IAAI,EAAE;EAAY,GACnBsE,IAAI,iBACDjG,KAAA,CAAAuF,aAAA,CAACzE,aAAa,EAAAoE,MAAA,CAAAC,MAAA,KACNc,IAAI;IACRD,KAAK,EAAE/E,CAAC,mBAAoB;IAC5BiF,WAAW,EAAEjF,CAAC;AAClE,+FAA+F,CAAC;MACxCkF,IAAI,eACAnG,KAAA,CAAAuF,aAAA,CAAC3E,IAAI;QACDwF,EAAE,EAAExE,sBAAuB;QAC3ByE,MAAM,EAAE;MAAS,GACpB,0BAEK;IAEd,CAAC,CAAE;IACHC,KAAK,EAAE7E,aAAa,CAACoB,GAAG,CAAC,CAAC;MAAEnB,EAAE;MAAEC;IAAK,CAAC,MAAM;MACxCD,EAAE;MACFsE,KAAK,EAAErE,IAAI;MACXG,KAAK,EAAEJ;IACX,CAAC,CAAC;EAAE,EACP,CAEH,CACG,CACX,CACL,CAAC,eAEN1B,KAAA,CAAAuF,aAAA,CAACpF,2BAA2B;IACxBiD,IAAI,EAAEA,IAAK;IACXoC,IAAI,EAAEA,IAAK;IACXe,QAAQ,EAAEtE,aAAc;IACxB2B,MAAM,EAAE,mBAAoB;IAC5BkC,KAAK,EAAE,sBAAuB;IAC9B5C,OAAO,EAAEA;EAAQ,CACpB,CAAC,eAEFlD,KAAA,CAAAuF,aAAA,CAAC9E,sBAAsB;IACnByC,OAAO,EAAEA,OAAQ;IACjBE,IAAI,EAAEA,IAAK;IACXqC,QAAQ,EAAEA,QAAS;IACnBD,IAAI,EAAEA,IAAK;IACXe,QAAQ,EAAEtE,aAAc;IACxB2B,MAAM,EAAE,cAAe;IACvBkC,KAAK,EAAE,gBAAiB;IACxBU,0BAA0B,EAAEpB,6BAA6B,CAAChC,IAAI;EAAE,CACnE,CAAC,eAEFpD,KAAA,CAAAuF,aAAA,CAAC7E,sBAAsB;IACnB0C,IAAI,EAAEA,IAAK;IACXoC,IAAI,EAAEA,IAAK;IACXe,QAAQ,EAAEtE,aAAc;IACxBwD,QAAQ,EAAEA,QAAS;IACnB7B,MAAM,EAAE,cAAe;IACvBkC,KAAK,EAAE;EAAkB,CAC5B,CACA,CAEX,CAEJ,CAAC;AAEf,CAAC","ignoreList":[]}