payload 3.0.0-beta.130 → 3.0.0-beta.131

package/dist/utilities/getEntityPolicies.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/getEntityPolicies.ts"],"sourcesContent":["import type { CollectionPermission, GlobalPermission } from '../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { Access } from '../config/types.js'\nimport type { Field, FieldAccess } from '../fields/config/types.js'\nimport type { SanitizedGlobalConfig } from '../globals/config/types.js'\nimport type { AllOperations, Document, PayloadRequest, Where } from '../types/index.js'\n\nimport { combineQueries } from '../database/combineQueries.js'\nimport { tabHasName } from '../fields/config/types.js'\n\ntype Args = {\n  entity: SanitizedCollectionConfig | SanitizedGlobalConfig\n  id?: number | string\n  operations: AllOperations[]\n  req: PayloadRequest\n  type: 'collection' | 'global'\n}\n\ntype ReturnType<T extends Args> = T['type'] extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype CreateAccessPromise = (args: {\n  access: Access | FieldAccess\n  accessLevel: 'entity' | 'field'\n  disableWhere?: boolean\n  operation: AllOperations\n  policiesObj: {\n    [key: string]: any\n  }\n}) => Promise<void>\n\nexport async function getEntityPolicies<T extends Args>(args: T): Promise<ReturnType<T>> {\n  const { id, type, entity, operations, req } = args\n  const { data, locale, payload, user } = req\n  const isLoggedIn = !!user\n\n  const policies = {\n    fields: {},\n  } as ReturnType<T>\n\n  let docBeingAccessed\n\n  async function getEntityDoc({ where }: { where?: Where } = {}): Promise<Document & TypeWithID> {\n    if (entity.slug) {\n      if (type === 'global') {\n        return payload.findGlobal({\n          slug: entity.slug,\n          fallbackLocale: null,\n          locale,\n          overrideAccess: true,\n          req,\n        })\n      }\n\n      if (type === 'collection' && id) {\n        if (typeof where === 'object') {\n          const paginatedRes = await payload.find({\n            collection: entity.slug,\n            depth: 0,\n            fallbackLocale: null,\n            limit: 1,\n            locale,\n            overrideAccess: true,\n            pagination: false,\n            req,\n            where: combineQueries(where, { id: { equals: id } }),\n          })\n\n          return paginatedRes?.docs?.[0] || undefined\n        }\n\n        return payload.findByID({\n          id,\n          collection: entity.slug,\n          depth: 0,\n          fallbackLocale: null,\n          locale,\n          overrideAccess: true,\n          req,\n        })\n      }\n    }\n\n    return undefined\n  }\n\n  const createAccessPromise: CreateAccessPromise = async ({\n    access,\n    accessLevel,\n    disableWhere = false,\n    operation,\n    policiesObj,\n  }) => {\n    const mutablePolicies = policiesObj\n\n    if (accessLevel === 'field' && docBeingAccessed === undefined) {\n      // assign docBeingAccessed first as the promise to avoid multiple calls to getEntityDoc\n      docBeingAccessed = getEntityDoc().then((doc) => {\n        docBeingAccessed = doc\n      })\n    }\n    // awaiting the promise to ensure docBeingAccessed is assigned before it is used\n    await docBeingAccessed\n\n    // https://payloadcms.slack.com/archives/C048Z9C2BEX/p1702054928343769\n    const accessResult = await access({ id, data, doc: docBeingAccessed, req })\n\n    if (typeof accessResult === 'object' && !disableWhere) {\n      mutablePolicies[operation] = {\n        permission:\n          id || type === 'global' ? !!(await getEntityDoc({ where: accessResult })) : true,\n        where: accessResult,\n      }\n    } else if (mutablePolicies[operation]?.permission !== false) {\n      mutablePolicies[operation] = {\n        permission: !!accessResult,\n      }\n    }\n  }\n\n  const executeFieldPolicies = async ({\n    entityPermission,\n    fields,\n    operation,\n    policiesObj,\n  }: {\n    entityPermission\n    fields: Field[]\n    operation: AllOperations\n    policiesObj\n  }) => {\n    const mutablePolicies = policiesObj.fields\n\n    await Promise.all(\n      fields.map(async (field) => {\n        if ('name' in field && field.name) {\n          if (!mutablePolicies[field.name]) {\n            mutablePolicies[field.name] = {}\n          }\n\n          if ('access' in field && field.access && typeof field.access[operation] === 'function') {\n            await createAccessPromise({\n              access: field.access[operation],\n              accessLevel: 'field',\n              disableWhere: true,\n              operation,\n              policiesObj: mutablePolicies[field.name],\n            })\n          } else {\n            mutablePolicies[field.name][operation] = {\n              permission: policiesObj[operation]?.permission,\n            }\n          }\n\n          if ('fields' in field && field.fields) {\n            if (!mutablePolicies[field.name].fields) {\n              mutablePolicies[field.name].fields = {}\n            }\n\n            await executeFieldPolicies({\n              entityPermission,\n              fields: field.fields,\n              operation,\n              policiesObj: mutablePolicies[field.name],\n            })\n          }\n\n          if ('blocks' in field && field?.blocks) {\n            if (!mutablePolicies[field.name]?.blocks) {\n              mutablePolicies[field.name].blocks = {}\n            }\n\n            await Promise.all(\n              field.blocks.map(async (block) => {\n                if (!mutablePolicies[field.name].blocks?.[block.slug]) {\n                  mutablePolicies[field.name].blocks[block.slug] = {\n                    fields: {},\n                    [operation]: { permission: entityPermission },\n                  }\n                } else if (!mutablePolicies[field.name].blocks[block.slug][operation]) {\n                  mutablePolicies[field.name].blocks[block.slug][operation] = {\n                    permission: entityPermission,\n                  }\n                }\n\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: block.fields,\n                  operation,\n                  policiesObj: mutablePolicies[field.name].blocks[block.slug],\n                })\n              }),\n            )\n          }\n        } else if ('fields' in field && field.fields) {\n          await executeFieldPolicies({\n            entityPermission,\n            fields: field.fields,\n            operation,\n            policiesObj,\n          })\n        } else if (field.type === 'tabs') {\n          await Promise.all(\n            field.tabs.map(async (tab) => {\n              if (tabHasName(tab)) {\n                if (!mutablePolicies[tab.name]) {\n                  mutablePolicies[tab.name] = {\n                    fields: {},\n                    [operation]: { permission: entityPermission },\n                  }\n                } else if (!mutablePolicies[tab.name][operation]) {\n                  mutablePolicies[tab.name][operation] = { permission: entityPermission }\n                }\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: tab.fields,\n                  operation,\n                  policiesObj: mutablePolicies[tab.name],\n                })\n              } else {\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: tab.fields,\n                  operation,\n                  policiesObj,\n                })\n              }\n            }),\n          )\n        }\n      }),\n    )\n  }\n\n  await operations.reduce(async (priorOperation, operation) => {\n    await priorOperation\n\n    let entityAccessPromise: Promise<void>\n\n    if (typeof entity.access[operation] === 'function') {\n      entityAccessPromise = createAccessPromise({\n        access: entity.access[operation],\n        accessLevel: 'entity',\n        operation,\n        policiesObj: policies,\n      })\n    } else {\n      policies[operation] = {\n        permission: isLoggedIn,\n      }\n    }\n\n    await entityAccessPromise\n\n    await executeFieldPolicies({\n      entityPermission: policies[operation].permission,\n      fields: entity.fields,\n      operation,\n      policiesObj: policies,\n    })\n  }, Promise.resolve())\n\n  return policies\n}\n"],"names":["combineQueries","tabHasName","getEntityPolicies","args","id","type","entity","operations","req","data","locale","payload","user","isLoggedIn","policies","fields","docBeingAccessed","getEntityDoc","where","slug","findGlobal","fallbackLocale","overrideAccess","paginatedRes","find","collection","depth","limit","pagination","equals","docs","undefined","findByID","createAccessPromise","access","accessLevel","disableWhere","operation","policiesObj","mutablePolicies","then","doc","accessResult","permission","executeFieldPolicies","entityPermission","Promise","all","map","field","name","blocks","block","tabs","tab","reduce","priorOperation","entityAccessPromise","resolve"],"mappings":"AAOA,SAASA,cAAc,QAAQ,gCAA+B;AAC9D,SAASC,UAAU,QAAQ,4BAA2B;AAwBtD,OAAO,eAAeC,kBAAkCC,IAAO;IAC7D,MAAM,EAAEC,EAAE,EAAEC,IAAI,EAAEC,MAAM,EAAEC,UAAU,EAAEC,GAAG,EAAE,GAAGL;IAC9C,MAAM,EAAEM,IAAI,EAAEC,MAAM,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAGJ;IACxC,MAAMK,aAAa,CAAC,CAACD;IAErB,MAAME,WAAW;QACfC,QAAQ,CAAC;IACX;IAEA,IAAIC;IAEJ,eAAeC,aAAa,EAAEC,KAAK,EAAqB,GAAG,CAAC,CAAC;QAC3D,IAAIZ,OAAOa,IAAI,EAAE;YACf,IAAId,SAAS,UAAU;gBACrB,OAAOM,QAAQS,UAAU,CAAC;oBACxBD,MAAMb,OAAOa,IAAI;oBACjBE,gBAAgB;oBAChBX;oBACAY,gBAAgB;oBAChBd;gBACF;YACF;YAEA,IAAIH,SAAS,gBAAgBD,IAAI;gBAC/B,IAAI,OAAOc,UAAU,UAAU;oBAC7B,MAAMK,eAAe,MAAMZ,QAAQa,IAAI,CAAC;wBACtCC,YAAYnB,OAAOa,IAAI;wBACvBO,OAAO;wBACPL,gBAAgB;wBAChBM,OAAO;wBACPjB;wBACAY,gBAAgB;wBAChBM,YAAY;wBACZpB;wBACAU,OAAOlB,eAAekB,OAAO;4BAAEd,IAAI;gCAAEyB,QAAQzB;4BAAG;wBAAE;oBACpD;oBAEA,OAAOmB,cAAcO,MAAM,CAAC,EAAE,IAAIC;gBACpC;gBAEA,OAAOpB,QAAQqB,QAAQ,CAAC;oBACtB5B;oBACAqB,YAAYnB,OAAOa,IAAI;oBACvBO,OAAO;oBACPL,gBAAgB;oBAChBX;oBACAY,gBAAgB;oBAChBd;gBACF;YACF;QACF;QAEA,OAAOuB;IACT;IAEA,MAAME,sBAA2C,OAAO,EACtDC,MAAM,EACNC,WAAW,EACXC,eAAe,KAAK,EACpBC,SAAS,EACTC,WAAW,EACZ;QACC,MAAMC,kBAAkBD;QAExB,IAAIH,gBAAgB,WAAWnB,qBAAqBe,WAAW;YAC7D,uFAAuF;YACvFf,mBAAmBC,eAAeuB,IAAI,CAAC,CAACC;gBACtCzB,mBAAmByB;YACrB;QACF;QACA,gFAAgF;QAChF,MAAMzB;QAEN,sEAAsE;QACtE,MAAM0B,eAAe,MAAMR,OAAO;YAAE9B;YAAIK;YAAMgC,KAAKzB;YAAkBR;QAAI;QAEzE,IAAI,OAAOkC,iBAAiB,YAAY,CAACN,cAAc;YACrDG,eAAe,CAACF,UAAU,GAAG;gBAC3BM,YACEvC,MAAMC,SAAS,WAAW,CAAC,CAAE,MAAMY,aAAa;oBAAEC,OAAOwB;gBAAa,KAAM;gBAC9ExB,OAAOwB;YACT;QACF,OAAO,IAAIH,eAAe,CAACF,UAAU,EAAEM,eAAe,OAAO;YAC3DJ,eAAe,CAACF,UAAU,GAAG;gBAC3BM,YAAY,CAAC,CAACD;YAChB;QACF;IACF;IAEA,MAAME,uBAAuB,OAAO,EAClCC,gBAAgB,EAChB9B,MAAM,EACNsB,SAAS,EACTC,WAAW,EAMZ;QACC,MAAMC,kBAAkBD,YAAYvB,MAAM;QAE1C,MAAM+B,QAAQC,GAAG,CACfhC,OAAOiC,GAAG,CAAC,OAAOC;YAChB,IAAI,UAAUA,SAASA,MAAMC,IAAI,EAAE;gBACjC,IAAI,CAACX,eAAe,CAACU,MAAMC,IAAI,CAAC,EAAE;oBAChCX,eAAe,CAACU,MAAMC,IAAI,CAAC,GAAG,CAAC;gBACjC;gBAEA,IAAI,YAAYD,SAASA,MAAMf,MAAM,IAAI,OAAOe,MAAMf,MAAM,CAACG,UAAU,KAAK,YAAY;oBACtF,MAAMJ,oBAAoB;wBACxBC,QAAQe,MAAMf,MAAM,CAACG,UAAU;wBAC/BF,aAAa;wBACbC,cAAc;wBACdC;wBACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC;oBAC1C;gBACF,OAAO;oBACLX,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACb,UAAU,GAAG;wBACvCM,YAAYL,WAAW,CAACD,UAAU,EAAEM;oBACtC;gBACF;gBAEA,IAAI,YAAYM,SAASA,MAAMlC,MAAM,EAAE;oBACrC,IAAI,CAACwB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACnC,MAAM,EAAE;wBACvCwB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACnC,MAAM,GAAG,CAAC;oBACxC;oBAEA,MAAM6B,qBAAqB;wBACzBC;wBACA9B,QAAQkC,MAAMlC,MAAM;wBACpBsB;wBACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC;oBAC1C;gBACF;gBAEA,IAAI,YAAYD,SAASA,OAAOE,QAAQ;oBACtC,IAAI,CAACZ,eAAe,CAACU,MAAMC,IAAI,CAAC,EAAEC,QAAQ;wBACxCZ,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,GAAG,CAAC;oBACxC;oBAEA,MAAML,QAAQC,GAAG,CACfE,MAAME,MAAM,CAACH,GAAG,CAAC,OAAOI;wBACtB,IAAI,CAACb,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,EAAE,CAACC,MAAMjC,IAAI,CAAC,EAAE;4BACrDoB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,GAAG;gCAC/CJ,QAAQ,CAAC;gCACT,CAACsB,UAAU,EAAE;oCAAEM,YAAYE;gCAAiB;4BAC9C;wBACF,OAAO,IAAI,CAACN,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,CAACkB,UAAU,EAAE;4BACrEE,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,CAACkB,UAAU,GAAG;gCAC1DM,YAAYE;4BACd;wBACF;wBAEA,MAAMD,qBAAqB;4BACzBC;4BACA9B,QAAQqC,MAAMrC,MAAM;4BACpBsB;4BACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC;wBAC7D;oBACF;gBAEJ;YACF,OAAO,IAAI,YAAY8B,SAASA,MAAMlC,MAAM,EAAE;gBAC5C,MAAM6B,qBAAqB;oBACzBC;oBACA9B,QAAQkC,MAAMlC,MAAM;oBACpBsB;oBACAC;gBACF;YACF,OAAO,IAAIW,MAAM5C,IAAI,KAAK,QAAQ;gBAChC,MAAMyC,QAAQC,GAAG,CACfE,MAAMI,IAAI,CAACL,GAAG,CAAC,OAAOM;oBACpB,IAAIrD,WAAWqD,MAAM;wBACnB,IAAI,CAACf,eAAe,CAACe,IAAIJ,IAAI,CAAC,EAAE;4BAC9BX,eAAe,CAACe,IAAIJ,IAAI,CAAC,GAAG;gCAC1BnC,QAAQ,CAAC;gCACT,CAACsB,UAAU,EAAE;oCAAEM,YAAYE;gCAAiB;4BAC9C;wBACF,OAAO,IAAI,CAACN,eAAe,CAACe,IAAIJ,IAAI,CAAC,CAACb,UAAU,EAAE;4BAChDE,eAAe,CAACe,IAAIJ,IAAI,CAAC,CAACb,UAAU,GAAG;gCAAEM,YAAYE;4BAAiB;wBACxE;wBACA,MAAMD,qBAAqB;4BACzBC;4BACA9B,QAAQuC,IAAIvC,MAAM;4BAClBsB;4BACAC,aAAaC,eAAe,CAACe,IAAIJ,IAAI,CAAC;wBACxC;oBACF,OAAO;wBACL,MAAMN,qBAAqB;4BACzBC;4BACA9B,QAAQuC,IAAIvC,MAAM;4BAClBsB;4BACAC;wBACF;oBACF;gBACF;YAEJ;QACF;IAEJ;IAEA,MAAM/B,WAAWgD,MAAM,CAAC,OAAOC,gBAAgBnB;QAC7C,MAAMmB;QAEN,IAAIC;QAEJ,IAAI,OAAOnD,OAAO4B,MAAM,CAACG,UAAU,KAAK,YAAY;YAClDoB,sBAAsBxB,oBAAoB;gBACxCC,QAAQ5B,OAAO4B,MAAM,CAACG,UAAU;gBAChCF,aAAa;gBACbE;gBACAC,aAAaxB;YACf;QACF,OAAO;YACLA,QAAQ,CAACuB,UAAU,GAAG;gBACpBM,YAAY9B;YACd;QACF;QAEA,MAAM4C;QAEN,MAAMb,qBAAqB;YACzBC,kBAAkB/B,QAAQ,CAACuB,UAAU,CAACM,UAAU;YAChD5B,QAAQT,OAAOS,MAAM;YACrBsB;YACAC,aAAaxB;QACf;IACF,GAAGgC,QAAQY,OAAO;IAElB,OAAO5C;AACT"}
+{"version":3,"sources":["../../src/utilities/getEntityPolicies.ts"],"sourcesContent":["import type { CollectionPermission, GlobalPermission } from '../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { Access } from '../config/types.js'\nimport type { Field, FieldAccess } from '../fields/config/types.js'\nimport type { SanitizedGlobalConfig } from '../globals/config/types.js'\nimport type { AllOperations, Document, PayloadRequest, Where } from '../types/index.js'\n\nimport { combineQueries } from '../database/combineQueries.js'\nimport { fieldAffectsData, tabHasName } from '../fields/config/types.js'\n\ntype Args = {\n  entity: SanitizedCollectionConfig | SanitizedGlobalConfig\n  id?: number | string\n  operations: AllOperations[]\n  req: PayloadRequest\n  type: 'collection' | 'global'\n}\n\ntype ReturnType<T extends Args> = T['type'] extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype CreateAccessPromise = (args: {\n  access: Access | FieldAccess\n  accessLevel: 'entity' | 'field'\n  disableWhere?: boolean\n  operation: AllOperations\n  policiesObj: {\n    [key: string]: any\n  }\n}) => Promise<void>\n\nexport async function getEntityPolicies<T extends Args>(args: T): Promise<ReturnType<T>> {\n  const { id, type, entity, operations, req } = args\n  const { data, locale, payload, user } = req\n  const isLoggedIn = !!user\n\n  const policies = {\n    fields: {},\n  } as ReturnType<T>\n\n  let docBeingAccessed\n\n  async function getEntityDoc({ where }: { where?: Where } = {}): Promise<Document & TypeWithID> {\n    if (entity.slug) {\n      if (type === 'global') {\n        return payload.findGlobal({\n          slug: entity.slug,\n          fallbackLocale: null,\n          locale,\n          overrideAccess: true,\n          req,\n        })\n      }\n\n      if (type === 'collection' && id) {\n        if (typeof where === 'object') {\n          const paginatedRes = await payload.find({\n            collection: entity.slug,\n            depth: 0,\n            fallbackLocale: null,\n            limit: 1,\n            locale,\n            overrideAccess: true,\n            pagination: false,\n            req,\n            where: combineQueries(where, { id: { equals: id } }),\n          })\n\n          return paginatedRes?.docs?.[0] || undefined\n        }\n\n        return payload.findByID({\n          id,\n          collection: entity.slug,\n          depth: 0,\n          fallbackLocale: null,\n          locale,\n          overrideAccess: true,\n          req,\n        })\n      }\n    }\n\n    return undefined\n  }\n\n  const createAccessPromise: CreateAccessPromise = async ({\n    access,\n    accessLevel,\n    disableWhere = false,\n    operation,\n    policiesObj,\n  }) => {\n    const mutablePolicies = policiesObj\n\n    if (accessLevel === 'field' && docBeingAccessed === undefined) {\n      // assign docBeingAccessed first as the promise to avoid multiple calls to getEntityDoc\n      docBeingAccessed = getEntityDoc().then((doc) => {\n        docBeingAccessed = doc\n      })\n    }\n    // awaiting the promise to ensure docBeingAccessed is assigned before it is used\n    await docBeingAccessed\n\n    // https://payloadcms.slack.com/archives/C048Z9C2BEX/p1702054928343769\n    const accessResult = await access({ id, data, doc: docBeingAccessed, req })\n\n    if (typeof accessResult === 'object' && !disableWhere) {\n      mutablePolicies[operation] = {\n        permission:\n          id || type === 'global' ? !!(await getEntityDoc({ where: accessResult })) : true,\n        where: accessResult,\n      }\n    } else if (mutablePolicies[operation]?.permission !== false) {\n      mutablePolicies[operation] = {\n        permission: !!accessResult,\n      }\n    }\n  }\n\n  const executeFieldPolicies = async ({\n    entityPermission,\n    fields,\n    operation,\n    policiesObj,\n  }: {\n    entityPermission\n    fields: Field[]\n    operation: AllOperations\n    policiesObj\n  }) => {\n    const mutablePolicies = policiesObj.fields\n\n    // Fields don't have all operations of a collection\n    if (operation === 'delete' || operation === 'readVersions' || operation === 'unlock') {\n      return\n    }\n\n    await Promise.all(\n      fields.map(async (field) => {\n        if ('name' in field && field.name) {\n          if (!mutablePolicies[field.name]) {\n            mutablePolicies[field.name] = {}\n          }\n\n          if ('access' in field && field.access && typeof field.access[operation] === 'function') {\n            await createAccessPromise({\n              access: field.access[operation],\n              accessLevel: 'field',\n              disableWhere: true,\n              operation,\n              policiesObj: mutablePolicies[field.name],\n            })\n          } else {\n            mutablePolicies[field.name][operation] = {\n              permission: policiesObj[operation]?.permission,\n            }\n          }\n\n          if ('fields' in field && field.fields) {\n            if (!mutablePolicies[field.name].fields) {\n              mutablePolicies[field.name].fields = {}\n            }\n\n            await executeFieldPolicies({\n              entityPermission,\n              fields: field.fields,\n              operation,\n              policiesObj: mutablePolicies[field.name],\n            })\n          }\n\n          if ('blocks' in field && field.blocks) {\n            if (!mutablePolicies[field.name]?.blocks) {\n              mutablePolicies[field.name].blocks = {}\n            }\n\n            await Promise.all(\n              field.blocks.map(async (block) => {\n                if (!mutablePolicies[field.name].blocks?.[block.slug]) {\n                  mutablePolicies[field.name].blocks[block.slug] = {\n                    fields: {},\n                    [operation]: { permission: entityPermission },\n                  }\n                } else if (!mutablePolicies[field.name].blocks[block.slug][operation]) {\n                  mutablePolicies[field.name].blocks[block.slug][operation] = {\n                    permission: entityPermission,\n                  }\n                }\n\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: block.fields,\n                  operation,\n                  policiesObj: mutablePolicies[field.name].blocks[block.slug],\n                })\n              }),\n            )\n          }\n        } else if ('fields' in field && field.fields) {\n          await executeFieldPolicies({\n            entityPermission,\n            fields: field.fields,\n            operation,\n            policiesObj,\n          })\n        } else if (field.type === 'tabs') {\n          await Promise.all(\n            field.tabs.map(async (tab) => {\n              if (tabHasName(tab)) {\n                if (!mutablePolicies[tab.name]) {\n                  mutablePolicies[tab.name] = {\n                    fields: {},\n                    [operation]: { permission: entityPermission },\n                  }\n                } else if (!mutablePolicies[tab.name][operation]) {\n                  mutablePolicies[tab.name][operation] = { permission: entityPermission }\n                }\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: tab.fields,\n                  operation,\n                  policiesObj: mutablePolicies[tab.name],\n                })\n              } else {\n                await executeFieldPolicies({\n                  entityPermission,\n                  fields: tab.fields,\n                  operation,\n                  policiesObj,\n                })\n              }\n            }),\n          )\n        }\n      }),\n    )\n  }\n\n  await operations.reduce(async (priorOperation, operation) => {\n    await priorOperation\n\n    let entityAccessPromise: Promise<void>\n\n    if (typeof entity.access[operation] === 'function') {\n      entityAccessPromise = createAccessPromise({\n        access: entity.access[operation],\n        accessLevel: 'entity',\n        operation,\n        policiesObj: policies,\n      })\n    } else {\n      policies[operation] = {\n        permission: isLoggedIn,\n      }\n    }\n\n    await entityAccessPromise\n\n    await executeFieldPolicies({\n      entityPermission: policies[operation].permission,\n      fields: entity.fields,\n      operation,\n      policiesObj: policies,\n    })\n  }, Promise.resolve())\n\n  return policies\n}\n"],"names":["combineQueries","tabHasName","getEntityPolicies","args","id","type","entity","operations","req","data","locale","payload","user","isLoggedIn","policies","fields","docBeingAccessed","getEntityDoc","where","slug","findGlobal","fallbackLocale","overrideAccess","paginatedRes","find","collection","depth","limit","pagination","equals","docs","undefined","findByID","createAccessPromise","access","accessLevel","disableWhere","operation","policiesObj","mutablePolicies","then","doc","accessResult","permission","executeFieldPolicies","entityPermission","Promise","all","map","field","name","blocks","block","tabs","tab","reduce","priorOperation","entityAccessPromise","resolve"],"mappings":"AAOA,SAASA,cAAc,QAAQ,gCAA+B;AAC9D,SAA2BC,UAAU,QAAQ,4BAA2B;AAwBxE,OAAO,eAAeC,kBAAkCC,IAAO;IAC7D,MAAM,EAAEC,EAAE,EAAEC,IAAI,EAAEC,MAAM,EAAEC,UAAU,EAAEC,GAAG,EAAE,GAAGL;IAC9C,MAAM,EAAEM,IAAI,EAAEC,MAAM,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAGJ;IACxC,MAAMK,aAAa,CAAC,CAACD;IAErB,MAAME,WAAW;QACfC,QAAQ,CAAC;IACX;IAEA,IAAIC;IAEJ,eAAeC,aAAa,EAAEC,KAAK,EAAqB,GAAG,CAAC,CAAC;QAC3D,IAAIZ,OAAOa,IAAI,EAAE;YACf,IAAId,SAAS,UAAU;gBACrB,OAAOM,QAAQS,UAAU,CAAC;oBACxBD,MAAMb,OAAOa,IAAI;oBACjBE,gBAAgB;oBAChBX;oBACAY,gBAAgB;oBAChBd;gBACF;YACF;YAEA,IAAIH,SAAS,gBAAgBD,IAAI;gBAC/B,IAAI,OAAOc,UAAU,UAAU;oBAC7B,MAAMK,eAAe,MAAMZ,QAAQa,IAAI,CAAC;wBACtCC,YAAYnB,OAAOa,IAAI;wBACvBO,OAAO;wBACPL,gBAAgB;wBAChBM,OAAO;wBACPjB;wBACAY,gBAAgB;wBAChBM,YAAY;wBACZpB;wBACAU,OAAOlB,eAAekB,OAAO;4BAAEd,IAAI;gCAAEyB,QAAQzB;4BAAG;wBAAE;oBACpD;oBAEA,OAAOmB,cAAcO,MAAM,CAAC,EAAE,IAAIC;gBACpC;gBAEA,OAAOpB,QAAQqB,QAAQ,CAAC;oBACtB5B;oBACAqB,YAAYnB,OAAOa,IAAI;oBACvBO,OAAO;oBACPL,gBAAgB;oBAChBX;oBACAY,gBAAgB;oBAChBd;gBACF;YACF;QACF;QAEA,OAAOuB;IACT;IAEA,MAAME,sBAA2C,OAAO,EACtDC,MAAM,EACNC,WAAW,EACXC,eAAe,KAAK,EACpBC,SAAS,EACTC,WAAW,EACZ;QACC,MAAMC,kBAAkBD;QAExB,IAAIH,gBAAgB,WAAWnB,qBAAqBe,WAAW;YAC7D,uFAAuF;YACvFf,mBAAmBC,eAAeuB,IAAI,CAAC,CAACC;gBACtCzB,mBAAmByB;YACrB;QACF;QACA,gFAAgF;QAChF,MAAMzB;QAEN,sEAAsE;QACtE,MAAM0B,eAAe,MAAMR,OAAO;YAAE9B;YAAIK;YAAMgC,KAAKzB;YAAkBR;QAAI;QAEzE,IAAI,OAAOkC,iBAAiB,YAAY,CAACN,cAAc;YACrDG,eAAe,CAACF,UAAU,GAAG;gBAC3BM,YACEvC,MAAMC,SAAS,WAAW,CAAC,CAAE,MAAMY,aAAa;oBAAEC,OAAOwB;gBAAa,KAAM;gBAC9ExB,OAAOwB;YACT;QACF,OAAO,IAAIH,eAAe,CAACF,UAAU,EAAEM,eAAe,OAAO;YAC3DJ,eAAe,CAACF,UAAU,GAAG;gBAC3BM,YAAY,CAAC,CAACD;YAChB;QACF;IACF;IAEA,MAAME,uBAAuB,OAAO,EAClCC,gBAAgB,EAChB9B,MAAM,EACNsB,SAAS,EACTC,WAAW,EAMZ;QACC,MAAMC,kBAAkBD,YAAYvB,MAAM;QAE1C,mDAAmD;QACnD,IAAIsB,cAAc,YAAYA,cAAc,kBAAkBA,cAAc,UAAU;YACpF;QACF;QAEA,MAAMS,QAAQC,GAAG,CACfhC,OAAOiC,GAAG,CAAC,OAAOC;YAChB,IAAI,UAAUA,SAASA,MAAMC,IAAI,EAAE;gBACjC,IAAI,CAACX,eAAe,CAACU,MAAMC,IAAI,CAAC,EAAE;oBAChCX,eAAe,CAACU,MAAMC,IAAI,CAAC,GAAG,CAAC;gBACjC;gBAEA,IAAI,YAAYD,SAASA,MAAMf,MAAM,IAAI,OAAOe,MAAMf,MAAM,CAACG,UAAU,KAAK,YAAY;oBACtF,MAAMJ,oBAAoB;wBACxBC,QAAQe,MAAMf,MAAM,CAACG,UAAU;wBAC/BF,aAAa;wBACbC,cAAc;wBACdC;wBACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC;oBAC1C;gBACF,OAAO;oBACLX,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACb,UAAU,GAAG;wBACvCM,YAAYL,WAAW,CAACD,UAAU,EAAEM;oBACtC;gBACF;gBAEA,IAAI,YAAYM,SAASA,MAAMlC,MAAM,EAAE;oBACrC,IAAI,CAACwB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACnC,MAAM,EAAE;wBACvCwB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACnC,MAAM,GAAG,CAAC;oBACxC;oBAEA,MAAM6B,qBAAqB;wBACzBC;wBACA9B,QAAQkC,MAAMlC,MAAM;wBACpBsB;wBACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC;oBAC1C;gBACF;gBAEA,IAAI,YAAYD,SAASA,MAAME,MAAM,EAAE;oBACrC,IAAI,CAACZ,eAAe,CAACU,MAAMC,IAAI,CAAC,EAAEC,QAAQ;wBACxCZ,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,GAAG,CAAC;oBACxC;oBAEA,MAAML,QAAQC,GAAG,CACfE,MAAME,MAAM,CAACH,GAAG,CAAC,OAAOI;wBACtB,IAAI,CAACb,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,EAAE,CAACC,MAAMjC,IAAI,CAAC,EAAE;4BACrDoB,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,GAAG;gCAC/CJ,QAAQ,CAAC;gCACT,CAACsB,UAAU,EAAE;oCAAEM,YAAYE;gCAAiB;4BAC9C;wBACF,OAAO,IAAI,CAACN,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,CAACkB,UAAU,EAAE;4BACrEE,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC,CAACkB,UAAU,GAAG;gCAC1DM,YAAYE;4BACd;wBACF;wBAEA,MAAMD,qBAAqB;4BACzBC;4BACA9B,QAAQqC,MAAMrC,MAAM;4BACpBsB;4BACAC,aAAaC,eAAe,CAACU,MAAMC,IAAI,CAAC,CAACC,MAAM,CAACC,MAAMjC,IAAI,CAAC;wBAC7D;oBACF;gBAEJ;YACF,OAAO,IAAI,YAAY8B,SAASA,MAAMlC,MAAM,EAAE;gBAC5C,MAAM6B,qBAAqB;oBACzBC;oBACA9B,QAAQkC,MAAMlC,MAAM;oBACpBsB;oBACAC;gBACF;YACF,OAAO,IAAIW,MAAM5C,IAAI,KAAK,QAAQ;gBAChC,MAAMyC,QAAQC,GAAG,CACfE,MAAMI,IAAI,CAACL,GAAG,CAAC,OAAOM;oBACpB,IAAIrD,WAAWqD,MAAM;wBACnB,IAAI,CAACf,eAAe,CAACe,IAAIJ,IAAI,CAAC,EAAE;4BAC9BX,eAAe,CAACe,IAAIJ,IAAI,CAAC,GAAG;gCAC1BnC,QAAQ,CAAC;gCACT,CAACsB,UAAU,EAAE;oCAAEM,YAAYE;gCAAiB;4BAC9C;wBACF,OAAO,IAAI,CAACN,eAAe,CAACe,IAAIJ,IAAI,CAAC,CAACb,UAAU,EAAE;4BAChDE,eAAe,CAACe,IAAIJ,IAAI,CAAC,CAACb,UAAU,GAAG;gCAAEM,YAAYE;4BAAiB;wBACxE;wBACA,MAAMD,qBAAqB;4BACzBC;4BACA9B,QAAQuC,IAAIvC,MAAM;4BAClBsB;4BACAC,aAAaC,eAAe,CAACe,IAAIJ,IAAI,CAAC;wBACxC;oBACF,OAAO;wBACL,MAAMN,qBAAqB;4BACzBC;4BACA9B,QAAQuC,IAAIvC,MAAM;4BAClBsB;4BACAC;wBACF;oBACF;gBACF;YAEJ;QACF;IAEJ;IAEA,MAAM/B,WAAWgD,MAAM,CAAC,OAAOC,gBAAgBnB;QAC7C,MAAMmB;QAEN,IAAIC;QAEJ,IAAI,OAAOnD,OAAO4B,MAAM,CAACG,UAAU,KAAK,YAAY;YAClDoB,sBAAsBxB,oBAAoB;gBACxCC,QAAQ5B,OAAO4B,MAAM,CAACG,UAAU;gBAChCF,aAAa;gBACbE;gBACAC,aAAaxB;YACf;QACF,OAAO;YACLA,QAAQ,CAACuB,UAAU,GAAG;gBACpBM,YAAY9B;YACd;QACF;QAEA,MAAM4C;QAEN,MAAMb,qBAAqB;YACzBC,kBAAkB/B,QAAQ,CAACuB,UAAU,CAACM,UAAU;YAChD5B,QAAQT,OAAOS,MAAM;YACrBsB;YACAC,aAAaxB;QACf;IACF,GAAGgC,QAAQY,OAAO;IAElB,OAAO5C;AACT"}

package/dist/utilities/removeUndefined.d.ts

@@ -0,0 +1,2 @@
+export declare function removeUndefined<T extends object>(obj: T): T;
+//# sourceMappingURL=removeUndefined.d.ts.map

package/dist/utilities/removeUndefined.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removeUndefined.d.ts","sourceRoot":"","sources":["../../src/utilities/removeUndefined.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAE3D"}

package/dist/utilities/removeUndefined.js

@@ -0,0 +1,5 @@
+export function removeUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, value])=>value !== undefined));
+}
+
+//# sourceMappingURL=removeUndefined.js.map

package/dist/utilities/removeUndefined.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/removeUndefined.ts"],"sourcesContent":["export function removeUndefined<T extends object>(obj: T): T {\n  return Object.fromEntries(Object.entries(obj).filter(([, value]) => value !== undefined)) as T\n}\n"],"names":["removeUndefined","obj","Object","fromEntries","entries","filter","value","undefined"],"mappings":"AAAA,OAAO,SAASA,gBAAkCC,GAAM;IACtD,OAAOC,OAAOC,WAAW,CAACD,OAAOE,OAAO,CAACH,KAAKI,MAAM,CAAC,CAAC,GAAGC,MAAM,GAAKA,UAAUC;AAChF"}

package/dist/utilities/sanitizePermissions.d.ts

@@ -0,0 +1,14 @@
+import type { Permissions, SanitizedPermissions } from '../auth/types.js';
+type PermissionObject = {
+    [key: string]: any;
+};
+/**
+ * Recursively resolve permissions in an object.
+ */
+export declare function recursivelySanitizePermissions(obj: PermissionObject): void;
+/**
+ * Recursively remove empty objects and false values from an object.
+ */
+export declare function sanitizePermissions(data: Permissions): SanitizedPermissions;
+export {};
+//# sourceMappingURL=sanitizePermissions.d.ts.map

package/dist/utilities/sanitizePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizePermissions.d.ts","sourceRoot":"","sources":["../../src/utilities/sanitizePermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEzE,KAAK,gBAAgB,GAAG;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,CAAA;AAiFD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CA4E1E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,oBAAoB,CAiB3E"}

package/dist/utilities/sanitizePermissions.js

@@ -0,0 +1,153 @@
+/**
+ * Check if all permissions in a FieldPermissions object are true on the condition that no nested blocks or fields are present.
+ */ function areAllPermissionsTrue(data) {
+    if (data.blocks) {
+        for(const key in data.blocks){
+            if (typeof data.blocks[key] === 'object') {
+                // If any recursive call returns false, the whole function returns false
+                if (key === 'fields' && !areAllPermissionsTrue(data.blocks[key].fields)) {
+                    return false;
+                }
+                if (data.blocks[key].fields && !areAllPermissionsTrue(data.blocks[key].fields)) {
+                    return false;
+                }
+            } else if (data.blocks[key] !== true) {
+                // If any value is not true, return false
+                return false;
+            }
+        }
+        // If all values are true or it's an empty object, return true
+        return true;
+    }
+    if (data.fields) {
+        for(const key in data.fields){
+            if (typeof data.fields[key] === 'object') {
+                // If any recursive call returns false, the whole function returns false
+                if (!areAllPermissionsTrue(data.fields[key])) {
+                    return false;
+                }
+            } else if (data.fields[key] !== true) {
+                // If any value is not true, return false
+                return false;
+            }
+        }
+        // If all values are true or it's an empty object, return true
+        return true;
+    }
+    for(const key in data){
+        if (typeof data[key] === 'object') {
+            // If any recursive call returns false, the whole function returns false
+            if (!areAllPermissionsTrue(data[key])) {
+                return false;
+            }
+        } else if (data[key] !== true) {
+            // If any value is not true, return false
+            return false;
+        }
+    }
+    // If all values are true or it's an empty object, return true
+    return true;
+}
+/**
+ * Check if an object is a permission object.
+ */ function isPermissionObject(data) {
+    return typeof data === 'object' && 'permission' in data && typeof data['permission'] === 'boolean';
+}
+/**
+ * Recursively remove empty objects from an object.
+ */ function cleanEmptyObjects(obj) {
+    Object.keys(obj).forEach((key)=>{
+        if (typeof obj[key] === 'object' && obj[key] !== null) {
+            // Recursive call
+            cleanEmptyObjects(obj[key]);
+            if (Object.keys(obj[key]).length === 0) {
+                // Delete the key if the object is empty
+                delete obj[key];
+            }
+        } else if (obj[key] === null || obj[key] === undefined) {
+            delete obj[key];
+        }
+    });
+}
+/**
+ * Recursively resolve permissions in an object.
+ */ export function recursivelySanitizePermissions(obj) {
+    if (typeof obj !== 'object') {
+        return;
+    }
+    const entries = Object.entries(obj);
+    for(let i = 0; i < entries.length; i++){
+        const [key, value] = entries[i];
+        // Check if it's a 'fields' key
+        if (key === 'fields') {
+            // Check if fields is empty
+            if (Object.keys(obj[key]).length === 0) {
+                delete obj[key];
+                continue;
+            } else if (areAllPermissionsTrue(value)) {
+                obj[key] = true;
+                continue;
+            }
+        } else if (key === 'blocks') {
+            // Check if fields is empty
+            if (Object.keys(obj[key]).length === 0) {
+                delete obj[key];
+                continue;
+            } else if (areAllPermissionsTrue(value)) {
+                obj[key] = true;
+                continue;
+            }
+        }
+        // Check if the whole object is a permission object
+        const isFullPermissionObject = Object.keys(value).every((subKey)=>subKey !== 'blocks' && typeof value?.[subKey] === 'object' && 'permission' in value[subKey] && !('where' in value[subKey]) && typeof value[subKey]['permission'] === 'boolean');
+        if (isFullPermissionObject) {
+            if (areAllPermissionsTrue(value)) {
+                obj[key] = true;
+                continue;
+            } else {
+                for(const subKey in value){
+                    if (value[subKey]['permission'] === true && !('where' in value[subKey])) {
+                        value[subKey] = true;
+                        continue;
+                    } else if (value[subKey]['permission'] === true && 'where' in value[subKey]) {
+                    // do nothing
+                    } else {
+                        delete value[subKey];
+                        continue;
+                    }
+                }
+            }
+        } else if (isPermissionObject(value)) {
+            if (value['permission'] === true && !('where' in value)) {
+                // If the permission is true and there is no where clause, set the key to true
+                obj[key] = true;
+                continue;
+            } else if (value['permission'] === true && 'where' in value) {
+            // otherwise do nothing so we can keep the where clause
+            } else {
+                delete obj[key];
+                continue;
+            }
+        } else {
+            recursivelySanitizePermissions(value);
+        }
+    }
+}
+/**
+ * Recursively remove empty objects and false values from an object.
+ */ export function sanitizePermissions(data) {
+    if (data.canAccessAdmin === false) {
+        delete data.canAccessAdmin;
+    }
+    if (data.collections) {
+        recursivelySanitizePermissions(data.collections);
+    }
+    if (data.globals) {
+        recursivelySanitizePermissions(data.globals);
+    }
+    // Run clean up of empty objects at the end
+    cleanEmptyObjects(data);
+    return data;
+}
+
+//# sourceMappingURL=sanitizePermissions.js.map

package/dist/utilities/sanitizePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/sanitizePermissions.ts"],"sourcesContent":["import type { Permissions, SanitizedPermissions } from '../auth/types.js'\n\ntype PermissionObject = {\n  [key: string]: any\n}\n\n/**\n * Check if all permissions in a FieldPermissions object are true on the condition that no nested blocks or fields are present.\n */\nfunction areAllPermissionsTrue(data: PermissionObject): boolean {\n  if (data.blocks) {\n    for (const key in data.blocks) {\n      if (typeof data.blocks[key] === 'object') {\n        // If any recursive call returns false, the whole function returns false\n        if (key === 'fields' && !areAllPermissionsTrue(data.blocks[key].fields)) {\n          return false\n        }\n        if (data.blocks[key].fields && !areAllPermissionsTrue(data.blocks[key].fields)) {\n          return false\n        }\n      } else if (data.blocks[key] !== true) {\n        // If any value is not true, return false\n        return false\n      }\n    }\n    // If all values are true or it's an empty object, return true\n    return true\n  }\n\n  if (data.fields) {\n    for (const key in data.fields) {\n      if (typeof data.fields[key] === 'object') {\n        // If any recursive call returns false, the whole function returns false\n        if (!areAllPermissionsTrue(data.fields[key])) {\n          return false\n        }\n      } else if (data.fields[key] !== true) {\n        // If any value is not true, return false\n        return false\n      }\n    }\n    // If all values are true or it's an empty object, return true\n    return true\n  }\n\n  for (const key in data) {\n    if (typeof data[key] === 'object') {\n      // If any recursive call returns false, the whole function returns false\n      if (!areAllPermissionsTrue(data[key])) {\n        return false\n      }\n    } else if (data[key] !== true) {\n      // If any value is not true, return false\n      return false\n    }\n  }\n  // If all values are true or it's an empty object, return true\n  return true\n}\n\n/**\n * Check if an object is a permission object.\n */\nfunction isPermissionObject(data: unknown): boolean {\n  return typeof data === 'object' && 'permission' in data && typeof data['permission'] === 'boolean'\n}\n\n/**\n * Recursively remove empty objects from an object.\n */\nfunction cleanEmptyObjects(obj: any): void {\n  Object.keys(obj).forEach((key) => {\n    if (typeof obj[key] === 'object' && obj[key] !== null) {\n      // Recursive call\n      cleanEmptyObjects(obj[key])\n      if (Object.keys(obj[key]).length === 0) {\n        // Delete the key if the object is empty\n        delete obj[key]\n      }\n    } else if (obj[key] === null || obj[key] === undefined) {\n      delete obj[key]\n    }\n  })\n}\n\n/**\n * Recursively resolve permissions in an object.\n */\nexport function recursivelySanitizePermissions(obj: PermissionObject): void {\n  if (typeof obj !== 'object') {\n    return\n  }\n\n  const entries = Object.entries(obj)\n\n  for (let i = 0; i < entries.length; i++) {\n    const [key, value] = entries[i]\n    // Check if it's a 'fields' key\n    if (key === 'fields') {\n      // Check if fields is empty\n      if (Object.keys(obj[key]).length === 0) {\n        delete obj[key]\n        continue\n      }\n      // Otherwise set fields to true if all permissions are true\n      else if (areAllPermissionsTrue(value)) {\n        obj[key] = true\n        continue\n      }\n    } else if (key === 'blocks') {\n      // Check if fields is empty\n      if (Object.keys(obj[key]).length === 0) {\n        delete obj[key]\n        continue\n      }\n      // Otherwise set fields to true if all permissions are true\n      else if (areAllPermissionsTrue(value)) {\n        obj[key] = true\n        continue\n      }\n    }\n\n    // Check if the whole object is a permission object\n    const isFullPermissionObject = Object.keys(value).every(\n      (subKey) =>\n        subKey !== 'blocks' &&\n        typeof value?.[subKey] === 'object' &&\n        'permission' in value[subKey] &&\n        !('where' in value[subKey]) &&\n        typeof value[subKey]['permission'] === 'boolean',\n    )\n\n    if (isFullPermissionObject) {\n      if (areAllPermissionsTrue(value)) {\n        obj[key] = true\n        continue\n      } else {\n        for (const subKey in value) {\n          if (value[subKey]['permission'] === true && !('where' in value[subKey])) {\n            value[subKey] = true\n            continue\n          } else if (value[subKey]['permission'] === true && 'where' in value[subKey]) {\n            // do nothing\n          } else {\n            delete value[subKey]\n            continue\n          }\n        }\n      }\n    } else if (isPermissionObject(value)) {\n      if (value['permission'] === true && !('where' in value)) {\n        // If the permission is true and there is no where clause, set the key to true\n        obj[key] = true\n        continue\n      } else if (value['permission'] === true && 'where' in value) {\n        // otherwise do nothing so we can keep the where clause\n      } else {\n        delete obj[key]\n        continue\n      }\n    } else {\n      recursivelySanitizePermissions(value)\n    }\n  }\n}\n\n/**\n * Recursively remove empty objects and false values from an object.\n */\nexport function sanitizePermissions(data: Permissions): SanitizedPermissions {\n  if (data.canAccessAdmin === false) {\n    delete data.canAccessAdmin\n  }\n\n  if (data.collections) {\n    recursivelySanitizePermissions(data.collections)\n  }\n\n  if (data.globals) {\n    recursivelySanitizePermissions(data.globals)\n  }\n\n  // Run clean up of empty objects at the end\n  cleanEmptyObjects(data)\n\n  return data as unknown as SanitizedPermissions\n}\n"],"names":["areAllPermissionsTrue","data","blocks","key","fields","isPermissionObject","cleanEmptyObjects","obj","Object","keys","forEach","length","undefined","recursivelySanitizePermissions","entries","i","value","isFullPermissionObject","every","subKey","sanitizePermissions","canAccessAdmin","collections","globals"],"mappings":"AAMA;;CAEC,GACD,SAASA,sBAAsBC,IAAsB;IACnD,IAAIA,KAAKC,MAAM,EAAE;QACf,IAAK,MAAMC,OAAOF,KAAKC,MAAM,CAAE;YAC7B,IAAI,OAAOD,KAAKC,MAAM,CAACC,IAAI,KAAK,UAAU;gBACxC,wEAAwE;gBACxE,IAAIA,QAAQ,YAAY,CAACH,sBAAsBC,KAAKC,MAAM,CAACC,IAAI,CAACC,MAAM,GAAG;oBACvE,OAAO;gBACT;gBACA,IAAIH,KAAKC,MAAM,CAACC,IAAI,CAACC,MAAM,IAAI,CAACJ,sBAAsBC,KAAKC,MAAM,CAACC,IAAI,CAACC,MAAM,GAAG;oBAC9E,OAAO;gBACT;YACF,OAAO,IAAIH,KAAKC,MAAM,CAACC,IAAI,KAAK,MAAM;gBACpC,yCAAyC;gBACzC,OAAO;YACT;QACF;QACA,8DAA8D;QAC9D,OAAO;IACT;IAEA,IAAIF,KAAKG,MAAM,EAAE;QACf,IAAK,MAAMD,OAAOF,KAAKG,MAAM,CAAE;YAC7B,IAAI,OAAOH,KAAKG,MAAM,CAACD,IAAI,KAAK,UAAU;gBACxC,wEAAwE;gBACxE,IAAI,CAACH,sBAAsBC,KAAKG,MAAM,CAACD,IAAI,GAAG;oBAC5C,OAAO;gBACT;YACF,OAAO,IAAIF,KAAKG,MAAM,CAACD,IAAI,KAAK,MAAM;gBACpC,yCAAyC;gBACzC,OAAO;YACT;QACF;QACA,8DAA8D;QAC9D,OAAO;IACT;IAEA,IAAK,MAAMA,OAAOF,KAAM;QACtB,IAAI,OAAOA,IAAI,CAACE,IAAI,KAAK,UAAU;YACjC,wEAAwE;YACxE,IAAI,CAACH,sBAAsBC,IAAI,CAACE,IAAI,GAAG;gBACrC,OAAO;YACT;QACF,OAAO,IAAIF,IAAI,CAACE,IAAI,KAAK,MAAM;YAC7B,yCAAyC;YACzC,OAAO;QACT;IACF;IACA,8DAA8D;IAC9D,OAAO;AACT;AAEA;;CAEC,GACD,SAASE,mBAAmBJ,IAAa;IACvC,OAAO,OAAOA,SAAS,YAAY,gBAAgBA,QAAQ,OAAOA,IAAI,CAAC,aAAa,KAAK;AAC3F;AAEA;;CAEC,GACD,SAASK,kBAAkBC,GAAQ;IACjCC,OAAOC,IAAI,CAACF,KAAKG,OAAO,CAAC,CAACP;QACxB,IAAI,OAAOI,GAAG,CAACJ,IAAI,KAAK,YAAYI,GAAG,CAACJ,IAAI,KAAK,MAAM;YACrD,iBAAiB;YACjBG,kBAAkBC,GAAG,CAACJ,IAAI;YAC1B,IAAIK,OAAOC,IAAI,CAACF,GAAG,CAACJ,IAAI,EAAEQ,MAAM,KAAK,GAAG;gBACtC,wCAAwC;gBACxC,OAAOJ,GAAG,CAACJ,IAAI;YACjB;QACF,OAAO,IAAII,GAAG,CAACJ,IAAI,KAAK,QAAQI,GAAG,CAACJ,IAAI,KAAKS,WAAW;YACtD,OAAOL,GAAG,CAACJ,IAAI;QACjB;IACF;AACF;AAEA;;CAEC,GACD,OAAO,SAASU,+BAA+BN,GAAqB;IAClE,IAAI,OAAOA,QAAQ,UAAU;QAC3B;IACF;IAEA,MAAMO,UAAUN,OAAOM,OAAO,CAACP;IAE/B,IAAK,IAAIQ,IAAI,GAAGA,IAAID,QAAQH,MAAM,EAAEI,IAAK;QACvC,MAAM,CAACZ,KAAKa,MAAM,GAAGF,OAAO,CAACC,EAAE;QAC/B,+BAA+B;QAC/B,IAAIZ,QAAQ,UAAU;YACpB,2BAA2B;YAC3B,IAAIK,OAAOC,IAAI,CAACF,GAAG,CAACJ,IAAI,EAAEQ,MAAM,KAAK,GAAG;gBACtC,OAAOJ,GAAG,CAACJ,IAAI;gBACf;YACF,OAEK,IAAIH,sBAAsBgB,QAAQ;gBACrCT,GAAG,CAACJ,IAAI,GAAG;gBACX;YACF;QACF,OAAO,IAAIA,QAAQ,UAAU;YAC3B,2BAA2B;YAC3B,IAAIK,OAAOC,IAAI,CAACF,GAAG,CAACJ,IAAI,EAAEQ,MAAM,KAAK,GAAG;gBACtC,OAAOJ,GAAG,CAACJ,IAAI;gBACf;YACF,OAEK,IAAIH,sBAAsBgB,QAAQ;gBACrCT,GAAG,CAACJ,IAAI,GAAG;gBACX;YACF;QACF;QAEA,mDAAmD;QACnD,MAAMc,yBAAyBT,OAAOC,IAAI,CAACO,OAAOE,KAAK,CACrD,CAACC,SACCA,WAAW,YACX,OAAOH,OAAO,CAACG,OAAO,KAAK,YAC3B,gBAAgBH,KAAK,CAACG,OAAO,IAC7B,CAAE,CAAA,WAAWH,KAAK,CAACG,OAAO,AAAD,KACzB,OAAOH,KAAK,CAACG,OAAO,CAAC,aAAa,KAAK;QAG3C,IAAIF,wBAAwB;YAC1B,IAAIjB,sBAAsBgB,QAAQ;gBAChCT,GAAG,CAACJ,IAAI,GAAG;gBACX;YACF,OAAO;gBACL,IAAK,MAAMgB,UAAUH,MAAO;oBAC1B,IAAIA,KAAK,CAACG,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAE,CAAA,WAAWH,KAAK,CAACG,OAAO,AAAD,GAAI;wBACvEH,KAAK,CAACG,OAAO,GAAG;wBAChB;oBACF,OAAO,IAAIH,KAAK,CAACG,OAAO,CAAC,aAAa,KAAK,QAAQ,WAAWH,KAAK,CAACG,OAAO,EAAE;oBAC3E,aAAa;oBACf,OAAO;wBACL,OAAOH,KAAK,CAACG,OAAO;wBACpB;oBACF;gBACF;YACF;QACF,OAAO,IAAId,mBAAmBW,QAAQ;YACpC,IAAIA,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAE,CAAA,WAAWA,KAAI,GAAI;gBACvD,8EAA8E;gBAC9ET,GAAG,CAACJ,IAAI,GAAG;gBACX;YACF,OAAO,IAAIa,KAAK,CAAC,aAAa,KAAK,QAAQ,WAAWA,OAAO;YAC3D,uDAAuD;YACzD,OAAO;gBACL,OAAOT,GAAG,CAACJ,IAAI;gBACf;YACF;QACF,OAAO;YACLU,+BAA+BG;QACjC;IACF;AACF;AAEA;;CAEC,GACD,OAAO,SAASI,oBAAoBnB,IAAiB;IACnD,IAAIA,KAAKoB,cAAc,KAAK,OAAO;QACjC,OAAOpB,KAAKoB,cAAc;IAC5B;IAEA,IAAIpB,KAAKqB,WAAW,EAAE;QACpBT,+BAA+BZ,KAAKqB,WAAW;IACjD;IAEA,IAAIrB,KAAKsB,OAAO,EAAE;QAChBV,+BAA+BZ,KAAKsB,OAAO;IAC7C;IAEA,2CAA2C;IAC3CjB,kBAAkBL;IAElB,OAAOA;AACT"}