node_modules ignore

server/node_modules/@strapi/content-manager/dist/admin/features/DocumentRBAC.js

@@ -0,0 +1,126 @@
+'use strict';
+
+var jsxRuntime = require('react/jsx-runtime');
+var React = require('react');
+var strapiAdmin = require('@strapi/admin/strapi-admin');
+var reactRouterDom = require('react-router-dom');
+
+function _interopNamespaceDefault(e) {
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var React__namespace = /*#__PURE__*/_interopNamespaceDefault(React);
+
+const [DocumentRBACProvider, useDocumentRBAC] = strapiAdmin.createContext('DocumentRBAC', {
+    canCreate: false,
+    canCreateFields: [],
+    canDelete: false,
+    canPublish: false,
+    canRead: false,
+    canReadFields: [],
+    canUpdate: false,
+    canUpdateFields: [],
+    canUserAction: ()=>false,
+    isLoading: false
+});
+/**
+ * @internal This component is not meant to be used outside of the Content Manager plugin.
+ * It depends on knowing the slug/model of the content-type using the params of the URL or the model if it is passed as arg.
+ * If you do use the hook outside of the context, we default to `false` for all actions.
+ *
+ * It then creates an list of `can{Action}` that are passed to the context for consumption
+ * within the app to enforce RBAC.
+ */ const DocumentRBAC = ({ children, permissions, model })=>{
+    const { slug } = reactRouterDom.useParams();
+    if (!slug && !model) {
+        throw new Error('Cannot find the slug param in the URL or the model prop is not provided.');
+    }
+    const contentTypeUid = model ?? slug;
+    const [{ rawQuery }] = strapiAdmin.useQueryParams();
+    const userPermissions = strapiAdmin.useAuth('DocumentRBAC', (state)=>state.permissions);
+    const contentTypePermissions = React__namespace.useMemo(()=>{
+        const contentTypePermissions = userPermissions.filter((permission)=>permission.subject === contentTypeUid);
+        return contentTypePermissions.reduce((acc, permission)=>{
+            const [action] = permission.action.split('.').slice(-1);
+            return {
+                ...acc,
+                [action]: [
+                    permission
+                ]
+            };
+        }, {});
+    }, [
+        contentTypeUid,
+        userPermissions
+    ]);
+    const { isLoading, allowedActions } = strapiAdmin.useRBAC(contentTypePermissions, permissions ?? undefined, // TODO: useRBAC context should be typed and built differently
+    // We are passing raw query as context to the hook so that it can
+    // rely on the locale provided from DocumentRBAC for its permission calculations.
+    rawQuery);
+    const canCreateFields = !isLoading && allowedActions.canCreate ? extractAndDedupeFields(contentTypePermissions.create) : [];
+    const canReadFields = !isLoading && allowedActions.canRead ? extractAndDedupeFields(contentTypePermissions.read) : [];
+    const canUpdateFields = !isLoading && allowedActions.canUpdate ? extractAndDedupeFields(contentTypePermissions.update) : [];
+    /**
+   * @description Checks if the user can perform an action on a field based on the field names
+   * provided as the second argument.
+   */ const canUserAction = React__namespace.useCallback((fieldName, fieldsUserCanAction, fieldType)=>{
+        const name = removeNumericalStrings(fieldName.split('.'));
+        const componentFieldNames = fieldsUserCanAction// filter out fields that aren't components (components are dot separated)
+        .filter((field)=>field.split('.').length > 1);
+        if (fieldType === 'component') {
+            // check if the field name is within any of those arrays
+            return componentFieldNames.some((field)=>{
+                return field.includes(name.join('.'));
+            });
+        }
+        /**
+       * The field is within a component.
+       */ if (name.length > 1) {
+            return componentFieldNames.includes(name.join('.'));
+        }
+        /**
+       * just a regular field
+       */ return fieldsUserCanAction.includes(fieldName);
+    }, []);
+    if (isLoading) {
+        return /*#__PURE__*/ jsxRuntime.jsx(strapiAdmin.Page.Loading, {});
+    }
+    return /*#__PURE__*/ jsxRuntime.jsx(DocumentRBACProvider, {
+        isLoading: isLoading,
+        canCreateFields: canCreateFields,
+        canReadFields: canReadFields,
+        canUpdateFields: canUpdateFields,
+        canUserAction: canUserAction,
+        ...allowedActions,
+        children: children
+    });
+};
+/**
+ * @internal it's really small, but it's used three times in a row and DRY for something this straight forward.
+ */ const extractAndDedupeFields = (permissions = [])=>permissions.flatMap((permission)=>permission.properties?.fields).filter((field, index, arr)=>arr.indexOf(field) === index && typeof field === 'string');
+/**
+ * @internal removes numerical strings from arrays.
+ * @example
+ * ```ts
+ * const name = 'a.0.b';
+ * const res = removeNumericalStrings(name.split('.'));
+ * console.log(res); // ['a', 'b']
+ * ```
+ */ const removeNumericalStrings = (arr)=>arr.filter((item)=>isNaN(Number(item)));
+
+exports.DocumentRBAC = DocumentRBAC;
+exports.useDocumentRBAC = useDocumentRBAC;
+//# sourceMappingURL=DocumentRBAC.js.map

server/node_modules/@strapi/content-manager/dist/admin/features/DocumentRBAC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DocumentRBAC.js","sources":["../../../admin/src/features/DocumentRBAC.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport {\n  useRBAC,\n  useAuth,\n  type Permission,\n  createContext,\n  Page,\n  useQueryParams,\n} from '@strapi/admin/strapi-admin';\nimport { useParams } from 'react-router-dom';\n\nimport type { Schema } from '@strapi/types';\n\n/**\n * The boolean values indicate the global actions a user can perform on the document.\n * The `string[]` values tell us specifically which fields the actions can be performed on,\n * for example, if the `canReadFields` array is empty, than no fields can be read by the user.\n * This can happen even if the user can read the document.\n */\ninterface DocumentRBACContextValue {\n  canCreate?: boolean;\n  canCreateFields: string[];\n  canDelete?: boolean;\n  canPublish?: boolean;\n  canRead?: boolean;\n  canReadFields: string[];\n  canUpdate?: boolean;\n  canUpdateFields: string[];\n  canUserAction: (\n    fieldName: string,\n    fieldsUserCanAction: string[],\n    fieldType: Schema.Attribute.Kind\n  ) => boolean;\n  isLoading: boolean;\n}\n\nconst [DocumentRBACProvider, useDocumentRBAC] = createContext<DocumentRBACContextValue>(\n  'DocumentRBAC',\n  {\n    canCreate: false,\n    canCreateFields: [],\n    canDelete: false,\n    canPublish: false,\n    canRead: false,\n    canReadFields: [],\n    canUpdate: false,\n    canUpdateFields: [],\n    canUserAction: () => false,\n    isLoading: false,\n  }\n);\n\ninterface DocumentRBACProps {\n  children: React.ReactNode;\n  permissions: Permission[] | null;\n  model?: string;\n}\n\n/**\n * @internal This component is not meant to be used outside of the Content Manager plugin.\n * It depends on knowing the slug/model of the content-type using the params of the URL or the model if it is passed as arg.\n * If you do use the hook outside of the context, we default to `false` for all actions.\n *\n * It then creates an list of `can{Action}` that are passed to the context for consumption\n * within the app to enforce RBAC.\n */\nconst DocumentRBAC = ({ children, permissions, model }: DocumentRBACProps) => {\n  const { slug } = useParams<{ slug: string }>();\n\n  if (!slug && !model) {\n    throw new Error('Cannot find the slug param in the URL or the model prop is not provided.');\n  }\n\n  const contentTypeUid = model ?? slug;\n\n  const [{ rawQuery }] = useQueryParams<{ plugins?: { i18n?: { locale?: string } } }>();\n\n  const userPermissions = useAuth('DocumentRBAC', (state) => state.permissions);\n\n  const contentTypePermissions = React.useMemo(() => {\n    const contentTypePermissions = userPermissions.filter(\n      (permission) => permission.subject === contentTypeUid\n    );\n    return contentTypePermissions.reduce<Record<string, Permission[]>>((acc, permission) => {\n      const [action] = permission.action.split('.').slice(-1);\n      return { ...acc, [action]: [permission] };\n    }, {});\n  }, [contentTypeUid, userPermissions]);\n\n  const { isLoading, allowedActions } = useRBAC(\n    contentTypePermissions,\n    permissions ?? undefined,\n    // TODO: useRBAC context should be typed and built differently\n    // We are passing raw query as context to the hook so that it can\n    // rely on the locale provided from DocumentRBAC for its permission calculations.\n    rawQuery\n  );\n\n  const canCreateFields =\n    !isLoading && allowedActions.canCreate\n      ? extractAndDedupeFields(contentTypePermissions.create)\n      : [];\n\n  const canReadFields =\n    !isLoading && allowedActions.canRead ? extractAndDedupeFields(contentTypePermissions.read) : [];\n\n  const canUpdateFields =\n    !isLoading && allowedActions.canUpdate\n      ? extractAndDedupeFields(contentTypePermissions.update)\n      : [];\n\n  /**\n   * @description Checks if the user can perform an action on a field based on the field names\n   * provided as the second argument.\n   */\n  const canUserAction: DocumentRBACContextValue['canUserAction'] = React.useCallback(\n    (fieldName, fieldsUserCanAction, fieldType) => {\n      const name = removeNumericalStrings(fieldName.split('.'));\n\n      const componentFieldNames = fieldsUserCanAction\n        // filter out fields that aren't components (components are dot separated)\n        .filter((field) => field.split('.').length > 1);\n\n      if (fieldType === 'component') {\n        // check if the field name is within any of those arrays\n        return componentFieldNames.some((field) => {\n          return field.includes(name.join('.'));\n        });\n      }\n\n      /**\n       * The field is within a component.\n       */\n      if (name.length > 1) {\n        return componentFieldNames.includes(name.join('.'));\n      }\n\n      /**\n       * just a regular field\n       */\n      return fieldsUserCanAction.includes(fieldName);\n    },\n    []\n  );\n\n  if (isLoading) {\n    return <Page.Loading />;\n  }\n\n  return (\n    <DocumentRBACProvider\n      isLLine truncated

server/node_modules/@strapi/content-manager/dist/admin/features/DocumentRBAC.mjs

@@ -0,0 +1,104 @@
+import { jsx } from 'react/jsx-runtime';
+import * as React from 'react';
+import { createContext, useQueryParams, useAuth, useRBAC, Page } from '@strapi/admin/strapi-admin';
+import { useParams } from 'react-router-dom';
+
+const [DocumentRBACProvider, useDocumentRBAC] = createContext('DocumentRBAC', {
+    canCreate: false,
+    canCreateFields: [],
+    canDelete: false,
+    canPublish: false,
+    canRead: false,
+    canReadFields: [],
+    canUpdate: false,
+    canUpdateFields: [],
+    canUserAction: ()=>false,
+    isLoading: false
+});
+/**
+ * @internal This component is not meant to be used outside of the Content Manager plugin.
+ * It depends on knowing the slug/model of the content-type using the params of the URL or the model if it is passed as arg.
+ * If you do use the hook outside of the context, we default to `false` for all actions.
+ *
+ * It then creates an list of `can{Action}` that are passed to the context for consumption
+ * within the app to enforce RBAC.
+ */ const DocumentRBAC = ({ children, permissions, model })=>{
+    const { slug } = useParams();
+    if (!slug && !model) {
+        throw new Error('Cannot find the slug param in the URL or the model prop is not provided.');
+    }
+    const contentTypeUid = model ?? slug;
+    const [{ rawQuery }] = useQueryParams();
+    const userPermissions = useAuth('DocumentRBAC', (state)=>state.permissions);
+    const contentTypePermissions = React.useMemo(()=>{
+        const contentTypePermissions = userPermissions.filter((permission)=>permission.subject === contentTypeUid);
+        return contentTypePermissions.reduce((acc, permission)=>{
+            const [action] = permission.action.split('.').slice(-1);
+            return {
+                ...acc,
+                [action]: [
+                    permission
+                ]
+            };
+        }, {});
+    }, [
+        contentTypeUid,
+        userPermissions
+    ]);
+    const { isLoading, allowedActions } = useRBAC(contentTypePermissions, permissions ?? undefined, // TODO: useRBAC context should be typed and built differently
+    // We are passing raw query as context to the hook so that it can
+    // rely on the locale provided from DocumentRBAC for its permission calculations.
+    rawQuery);
+    const canCreateFields = !isLoading && allowedActions.canCreate ? extractAndDedupeFields(contentTypePermissions.create) : [];
+    const canReadFields = !isLoading && allowedActions.canRead ? extractAndDedupeFields(contentTypePermissions.read) : [];
+    const canUpdateFields = !isLoading && allowedActions.canUpdate ? extractAndDedupeFields(contentTypePermissions.update) : [];
+    /**
+   * @description Checks if the user can perform an action on a field based on the field names
+   * provided as the second argument.
+   */ const canUserAction = React.useCallback((fieldName, fieldsUserCanAction, fieldType)=>{
+        const name = removeNumericalStrings(fieldName.split('.'));
+        const componentFieldNames = fieldsUserCanAction// filter out fields that aren't components (components are dot separated)
+        .filter((field)=>field.split('.').length > 1);
+        if (fieldType === 'component') {
+            // check if the field name is within any of those arrays
+            return componentFieldNames.some((field)=>{
+                return field.includes(name.join('.'));
+            });
+        }
+        /**
+       * The field is within a component.
+       */ if (name.length > 1) {
+            return componentFieldNames.includes(name.join('.'));
+        }
+        /**
+       * just a regular field
+       */ return fieldsUserCanAction.includes(fieldName);
+    }, []);
+    if (isLoading) {
+        return /*#__PURE__*/ jsx(Page.Loading, {});
+    }
+    return /*#__PURE__*/ jsx(DocumentRBACProvider, {
+        isLoading: isLoading,
+        canCreateFields: canCreateFields,
+        canReadFields: canReadFields,
+        canUpdateFields: canUpdateFields,
+        canUserAction: canUserAction,
+        ...allowedActions,
+        children: children
+    });
+};
+/**
+ * @internal it's really small, but it's used three times in a row and DRY for something this straight forward.
+ */ const extractAndDedupeFields = (permissions = [])=>permissions.flatMap((permission)=>permission.properties?.fields).filter((field, index, arr)=>arr.indexOf(field) === index && typeof field === 'string');
+/**
+ * @internal removes numerical strings from arrays.
+ * @example
+ * ```ts
+ * const name = 'a.0.b';
+ * const res = removeNumericalStrings(name.split('.'));
+ * console.log(res); // ['a', 'b']
+ * ```
+ */ const removeNumericalStrings = (arr)=>arr.filter((item)=>isNaN(Number(item)));
+
+export { DocumentRBAC, useDocumentRBAC };
+//# sourceMappingURL=DocumentRBAC.mjs.map

server/node_modules/@strapi/content-manager/dist/admin/features/DocumentRBAC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DocumentRBAC.mjs","sources":["../../../admin/src/features/DocumentRBAC.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport {\n  useRBAC,\n  useAuth,\n  type Permission,\n  createContext,\n  Page,\n  useQueryParams,\n} from '@strapi/admin/strapi-admin';\nimport { useParams } from 'react-router-dom';\n\nimport type { Schema } from '@strapi/types';\n\n/**\n * The boolean values indicate the global actions a user can perform on the document.\n * The `string[]` values tell us specifically which fields the actions can be performed on,\n * for example, if the `canReadFields` array is empty, than no fields can be read by the user.\n * This can happen even if the user can read the document.\n */\ninterface DocumentRBACContextValue {\n  canCreate?: boolean;\n  canCreateFields: string[];\n  canDelete?: boolean;\n  canPublish?: boolean;\n  canRead?: boolean;\n  canReadFields: string[];\n  canUpdate?: boolean;\n  canUpdateFields: string[];\n  canUserAction: (\n    fieldName: string,\n    fieldsUserCanAction: string[],\n    fieldType: Schema.Attribute.Kind\n  ) => boolean;\n  isLoading: boolean;\n}\n\nconst [DocumentRBACProvider, useDocumentRBAC] = createContext<DocumentRBACContextValue>(\n  'DocumentRBAC',\n  {\n    canCreate: false,\n    canCreateFields: [],\n    canDelete: false,\n    canPublish: false,\n    canRead: false,\n    canReadFields: [],\n    canUpdate: false,\n    canUpdateFields: [],\n    canUserAction: () => false,\n    isLoading: false,\n  }\n);\n\ninterface DocumentRBACProps {\n  children: React.ReactNode;\n  permissions: Permission[] | null;\n  model?: string;\n}\n\n/**\n * @internal This component is not meant to be used outside of the Content Manager plugin.\n * It depends on knowing the slug/model of the content-type using the params of the URL or the model if it is passed as arg.\n * If you do use the hook outside of the context, we default to `false` for all actions.\n *\n * It then creates an list of `can{Action}` that are passed to the context for consumption\n * within the app to enforce RBAC.\n */\nconst DocumentRBAC = ({ children, permissions, model }: DocumentRBACProps) => {\n  const { slug } = useParams<{ slug: string }>();\n\n  if (!slug && !model) {\n    throw new Error('Cannot find the slug param in the URL or the model prop is not provided.');\n  }\n\n  const contentTypeUid = model ?? slug;\n\n  const [{ rawQuery }] = useQueryParams<{ plugins?: { i18n?: { locale?: string } } }>();\n\n  const userPermissions = useAuth('DocumentRBAC', (state) => state.permissions);\n\n  const contentTypePermissions = React.useMemo(() => {\n    const contentTypePermissions = userPermissions.filter(\n      (permission) => permission.subject === contentTypeUid\n    );\n    return contentTypePermissions.reduce<Record<string, Permission[]>>((acc, permission) => {\n      const [action] = permission.action.split('.').slice(-1);\n      return { ...acc, [action]: [permission] };\n    }, {});\n  }, [contentTypeUid, userPermissions]);\n\n  const { isLoading, allowedActions } = useRBAC(\n    contentTypePermissions,\n    permissions ?? undefined,\n    // TODO: useRBAC context should be typed and built differently\n    // We are passing raw query as context to the hook so that it can\n    // rely on the locale provided from DocumentRBAC for its permission calculations.\n    rawQuery\n  );\n\n  const canCreateFields =\n    !isLoading && allowedActions.canCreate\n      ? extractAndDedupeFields(contentTypePermissions.create)\n      : [];\n\n  const canReadFields =\n    !isLoading && allowedActions.canRead ? extractAndDedupeFields(contentTypePermissions.read) : [];\n\n  const canUpdateFields =\n    !isLoading && allowedActions.canUpdate\n      ? extractAndDedupeFields(contentTypePermissions.update)\n      : [];\n\n  /**\n   * @description Checks if the user can perform an action on a field based on the field names\n   * provided as the second argument.\n   */\n  const canUserAction: DocumentRBACContextValue['canUserAction'] = React.useCallback(\n    (fieldName, fieldsUserCanAction, fieldType) => {\n      const name = removeNumericalStrings(fieldName.split('.'));\n\n      const componentFieldNames = fieldsUserCanAction\n        // filter out fields that aren't components (components are dot separated)\n        .filter((field) => field.split('.').length > 1);\n\n      if (fieldType === 'component') {\n        // check if the field name is within any of those arrays\n        return componentFieldNames.some((field) => {\n          return field.includes(name.join('.'));\n        });\n      }\n\n      /**\n       * The field is within a component.\n       */\n      if (name.length > 1) {\n        return componentFieldNames.includes(name.join('.'));\n      }\n\n      /**\n       * just a regular field\n       */\n      return fieldsUserCanAction.includes(fieldName);\n    },\n    []\n  );\n\n  if (isLoading) {\n    return <Page.Loading />;\n  }\n\n  return (\n    <DocumentRBACProvider\n      isLine truncated