Revert PR #5, #4 and related changes

README.md

@@ -11,8 +11,8 @@ This template equips you with a foundational React application integrated with A
 - **Authentication**: Setup with Amazon Cognito for secure user authentication with email login.   
    - More info on how to setup and configuration option: https://docs.amplify.aws/react/build-a-backend/auth/set-up-auth/
 - **Storage**: Configured with multiple S3 buckets and granular access controls. The sample is configured with
-  - Default storage bucket with public, admin, and private access paths
-  - Secondary storage bucket with separate backup paths.
+  - Default `frauden-bucket` storage bucket with `doctrina`, `medios`, `jurisprudencia`, and `legislacion` access paths for authenticated readers and admin read/write/delete access.
+  - Secondary `frauden-expedientes` storage bucket with `publico`, `confidencial`, and owner-scoped `privado/{entity_id}` access paths, including delete permissions wherever write access is granted.
   - More info on how to setup : https://docs.amplify.aws/react/build-a-backend/storage/set-up-storage/#building-your-storage-backend
 - **UI Components**: Pre-integrated Amplify UI React components including:
   - Authenticator for sign-in/sign-up flows

amplify/auth/resource.ts

@@ -8,5 +8,5 @@ export const auth = defineAuth({
   loginWith: {
     email: true,
   },
-  groups: ['admin']
+  groups: ['admin', 'eliminadores'],
 });

amplify/backend.ts

@@ -2,12 +2,21 @@ import { defineBackend } from '@aws-amplify/backend';
 import { auth } from './auth/resource';
 import { storage, secondaryStorage } from './storage/resource';
 
-
 /**
  * @see https://docs.amplify.aws/react/build-a-backend/ to add storage, functions, and more
  */
-defineBackend({
+const backend = defineBackend({
   auth,
-  storage, 
-  secondaryStorage
+  storage,
+  secondaryStorage,
 });
+
+// Do not override cfnBucket.bucketName here. S3 bucket names are globally unique,
+// and Amplify's generated physical names avoid collisions during deployments.
+
+const { cfnUserPool } = backend.auth.resources.cfnResources;
+
+cfnUserPool.adminCreateUserConfig = {
+  ...cfnUserPool.adminCreateUserConfig,
+  allowAdminCreateUserOnly: true,
+};

amplify/storage/resource.ts

@@ -1,39 +1,46 @@
 import { defineStorage } from '@aws-amplify/backend';
 
 export const storage = defineStorage({
-  name: 'myStorageBucket',
+  name: 'frauden',
   isDefault: true,
-   access: (allow) => ({
-    'public/*': [
-        allow.guest.to(['read', 'write']),
-        allow.authenticated.to(['read', 'write', 'delete']),
+  access: (allow) => ({
+    'doctrina/*': [
+      allow.authenticated.to(['read']),
+      allow.groups(['admin']).to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
     ],
-    'admin/*': [
-        allow.groups(['admin']).to(['read', 'write', 'delete']),
-        allow.authenticated.to(['read'])
+    'medios/*': [
+      allow.authenticated.to(['read']),
+      allow.groups(['admin']).to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
     ],
-    'private/{entity_id}/*': [
-        allow.entity('identity').to(['read', 'write', 'delete'])
-    ]
-   })
+    'jurisprudencia/*': [
+      allow.authenticated.to(['read']),
+      allow.groups(['admin']).to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
+    ],
+    'legislacion/*': [
+      allow.authenticated.to(['read']),
+      allow.groups(['admin']).to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
+    ],
+  }),
 });
 
 export const secondaryStorage = defineStorage({
-  name: 'mySecondaryStorageBucket',
-   access: (allow) => ({
-    'backup_public/*': [
-        allow.guest.to(['read', 'write']),
-        allow.authenticated.to(['read', 'write', 'delete']),
+  name: 'frauden-expedientes',
+  access: (allow) => ({
+    'publico/*': [
+      allow.authenticated.to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
+    ],
+    'confidencial/*': [
+      allow.groups(['admin']).to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
     ],
-    'backup_admin/*': [
-        allow.groups(['admin']).to(['read', 'write', 'delete']),
-        allow.authenticated.to(['read'])
+    'privado/{entity_id}/*': [
+      allow.entity('identity').to(['read', 'write']),
+      allow.groups(['eliminadores']).to(['delete']),
     ],
-    'backup_private/{entity_id}/*': [
-        allow.entity('identity').to(['read', 'write', 'delete'])
-    ]
-   })
+  }),
 });
-
-
-

index.html

@@ -1,9 +1,9 @@
 <!doctype html>
-<html lang="en">
+<html lang="es">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Amplify Storage Browser Sample</title>
+    <title>Frauden | Gestor documental</title>
   </head>
   <body>
     <div id="root"></div>