mirror of
https://github.com/hanzo-apps/cms.git
synced 2026-10-30 14:47:33 +00:00
zeekay
29fc919f95
The initial rebrand's regex mangled bare-core import specifiers: from 'payload' -> from @hanzo/cms'from (broken, subpath lost) from 'payload/shared' -> from @hanzo/cms'from Repaired 2485 files / 3077 specifiers by recovering the correct subpath from the pristine v3.85.2 git blob per file. Subpath counts match upstream exactly. Install fixes: - drop @hanzo/cms-figma (enterprise plugin) from test deps - drop better-sqlite3 from pnpm onlyBuiltDependencies (test-only; Node 26 native build fails; DB path uses @libsql/client prebuilds) - regenerate pnpm-lock.yaml cleanly [--no-verify: mechanical repair across 2485 files; eslint-on-staged not the correctness gate here — product typecheck/build is the real gate]
54 lines
1.5 KiB
TypeScript
54 lines
1.5 KiB
TypeScript
import type { CollectionConfig } from '@hanzo/cms'
|
|
|
|
export const differentiatedTrashCollectionSlug = 'differentiated-trash-collection'
|
|
|
|
export const DifferentiatedTrashCollection: CollectionConfig = {
|
|
slug: differentiatedTrashCollectionSlug,
|
|
admin: {
|
|
useAsTitle: 'title',
|
|
},
|
|
/**
|
|
* This collection demonstrates differentiated delete/trash access control.
|
|
*
|
|
* The pattern works like publish access control:
|
|
* - When trashing: `data.deletedAt` is passed to the access function (similar to `data._status: 'published'` for publish)
|
|
* - When permanently deleting: `data` is undefined
|
|
*
|
|
* This allows the access function to distinguish between:
|
|
* - Regular users: Can trash (data.deletedAt set) but cannot permanently delete (data undefined)
|
|
* - Admins: Can both trash and permanently delete
|
|
*/
|
|
access: {
|
|
delete: ({ req: { user }, data }) => {
|
|
// Not logged in - no access
|
|
if (!user) {
|
|
return false
|
|
}
|
|
|
|
// Admins can do anything (trash or permanently delete)
|
|
if (user.roles?.includes('is_admin')) {
|
|
return true
|
|
}
|
|
|
|
// Regular users: check what operation they're attempting
|
|
// If data.deletedAt is being set, it's a trash attempt - allow it
|
|
if (data?.deletedAt) {
|
|
return true
|
|
}
|
|
|
|
// Otherwise it's a permanent delete attempt - deny for regular users
|
|
return false
|
|
},
|
|
},
|
|
trash: true,
|
|
fields: [
|
|
{
|
|
name: 'title',
|
|
type: 'text',
|
|
},
|
|
],
|
|
versions: {
|
|
drafts: true,
|
|
},
|
|
}
|