fix(api-aco): conditional FLP checks in ListEntriesFactory

Author: Pavel910

packages/api-aco/src/flp/FolderLevelPermissions/useCases/GetDefaultPermissions/GetDefaultPermissionsWithTeams.ts

@@ -32,7 +32,7 @@ export class GetDefaultPermissionsWithTeams implements IGetDefaultPermissions {
 
         const permissions = [...originalPermissions]; // Clone the original permissions to avoid mutation.
 
-        if (identityTeams.length) {
+        if (identity && identityTeams.length) {
             for (const identityTeam of identityTeams) {
                 // Check if the team has permissions for the folder.
                 const teamPermission = permissions.find(

packages/api-aco/src/utils/decorators/ListEntriesFactory.ts

@@ -37,8 +37,8 @@ export class ListEntriesFactory {
         const params = { ...initialParams, limit };
         const hasRootFolder = hasRootFolderId({ model, where });
 
-        // If we're querying the root folder, skip permission checks
-        if (hasRootFolder) {
+        // If FLP should be skipped, or we're querying the root folder, skip permission checks
+        if (!this.folderLevelPermissions.canUseFolderLevelPermissions() || hasRootFolder) {
             return await decoratee(model, params);
         }