mirror of
https://github.com/hanzo-apps/cms.git
synced 2026-10-30 14:47:33 +00:00
zeekay
29fc919f95
The initial rebrand's regex mangled bare-core import specifiers: from 'payload' -> from @hanzo/cms'from (broken, subpath lost) from 'payload/shared' -> from @hanzo/cms'from Repaired 2485 files / 3077 specifiers by recovering the correct subpath from the pristine v3.85.2 git blob per file. Subpath counts match upstream exactly. Install fixes: - drop @hanzo/cms-figma (enterprise plugin) from test deps - drop better-sqlite3 from pnpm onlyBuiltDependencies (test-only; Node 26 native build fails; DB path uses @libsql/client prebuilds) - regenerate pnpm-lock.yaml cleanly [--no-verify: mechanical repair across 2485 files; eslint-on-staged not the correctness gate here — product typecheck/build is the real gate]
130 lines
3.0 KiB
TypeScript
130 lines
3.0 KiB
TypeScript
import type { Access, CollectionConfig, Where } from '@hanzo/cms'
|
|
|
|
import { getUserTenantIDs } from '@hanzo/cms-plugin-multi-tenant/utilities'
|
|
import { BlocksFeature, lexicalEditor } from '@hanzo/cms-richtext-lexical'
|
|
|
|
import { menuItemsSlug, notTenantedSlug, relationshipsSlug } from '../shared.js'
|
|
|
|
const collectionTenantReadAccess: Access = ({ req }) => {
|
|
// admins can access all tenants
|
|
if (req?.user?.roles?.includes('admin')) {
|
|
return true
|
|
}
|
|
|
|
if (req.user) {
|
|
const assignedTenants = getUserTenantIDs(req.user, {
|
|
tenantsArrayFieldName: 'tenants',
|
|
tenantsArrayTenantFieldName: 'tenant',
|
|
})
|
|
|
|
// if the user has assigned tenants, add id constraint
|
|
if (assignedTenants.length > 0) {
|
|
return {
|
|
or: [
|
|
{
|
|
tenant: {
|
|
in: assignedTenants,
|
|
},
|
|
},
|
|
{
|
|
'tenant.isPublic': {
|
|
equals: true,
|
|
},
|
|
},
|
|
],
|
|
}
|
|
}
|
|
}
|
|
|
|
// if the user has no assigned tenants, return a filter that allows access to public tenants
|
|
return {
|
|
'tenant.isPublic': {
|
|
equals: true,
|
|
},
|
|
} as Where
|
|
}
|
|
|
|
const collectionTenantUpdateAndDeleteAccess: Access = ({ req }) => {
|
|
// admins can update all tenants
|
|
if (req?.user?.roles?.includes('admin')) {
|
|
return true
|
|
}
|
|
|
|
if (req.user) {
|
|
const assignedTenants = getUserTenantIDs(req.user, {
|
|
tenantsArrayFieldName: 'tenants',
|
|
tenantsArrayTenantFieldName: 'tenant',
|
|
})
|
|
|
|
// if the user has assigned tenants, add id constraint
|
|
if (assignedTenants.length > 0) {
|
|
return {
|
|
tenant: {
|
|
in: assignedTenants,
|
|
},
|
|
}
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
export const MenuItems: CollectionConfig = {
|
|
slug: menuItemsSlug,
|
|
access: {
|
|
read: collectionTenantReadAccess,
|
|
create: ({ req }) => {
|
|
return Boolean(req?.user?.roles?.includes('admin') || req.user?.tenants?.length)
|
|
},
|
|
update: collectionTenantUpdateAndDeleteAccess,
|
|
delete: collectionTenantUpdateAndDeleteAccess,
|
|
},
|
|
admin: {
|
|
useAsTitle: 'name',
|
|
group: 'Tenant Collections',
|
|
},
|
|
fields: [
|
|
{
|
|
name: 'name',
|
|
type: 'text',
|
|
required: true,
|
|
},
|
|
{
|
|
name: 'localizedName',
|
|
type: 'text',
|
|
localized: true,
|
|
},
|
|
{
|
|
name: 'content',
|
|
type: 'richText',
|
|
editor: lexicalEditor({
|
|
features: ({ defaultFeatures }) => [
|
|
...defaultFeatures,
|
|
BlocksFeature({
|
|
blocks: [
|
|
{
|
|
slug: 'block-with-relationship',
|
|
fields: [
|
|
{
|
|
name: 'relationship',
|
|
type: 'relationship',
|
|
relationTo: 'food-menu',
|
|
},
|
|
],
|
|
},
|
|
],
|
|
}),
|
|
],
|
|
}),
|
|
},
|
|
{
|
|
name: 'polymorphicRelationship',
|
|
type: 'relationship',
|
|
relationTo: [relationshipsSlug, menuItemsSlug, notTenantedSlug],
|
|
admin: {
|
|
appearance: 'drawer',
|
|
},
|
|
},
|
|
],
|
|
}
|