FIX: unitary permitting

src/modules/catalog/catalog.controller.ts

@@ -222,7 +222,11 @@ export class CatalogController {
       user: user.user_id,
       customer: user.customer_name,
     });
-    const { user_id, customer_name, customer_id } = user;
+    const { user_id, customer_name, customer_id, permissions } = user;
+    const is_data_manager = permissions.includes(
+      PERMISSIONS_GROUPS.CATALOG.permissions.DATA_MANAGER.seqid,
+    );
+    let has_permission = false;
     const metadata = PackTheMetadata({
       user_id,
       customer_id,
@@ -233,13 +237,29 @@ export class CatalogController {
       const res = await this.catalogService.getAllTableMetadata(body);
       return res;
     } else {
+      const user_roles = await this.catalogService.getUserRolesIds(user_id);
       const res = await this.catalogService.getOneTableMetadata(
         body,
         query,
         metadata,
         customer_id,
       );
-      return res;
+      const table = res[0];
+
+      for (const role of user_roles) {
+        if (table.roles.includes(role)) has_permission = true;
+      }
+
+      if (table.users.includes(user_id)) has_permission = true;
+
+      if (is_data_manager || has_permission) {
+        return res;
+      }
+
+      throw new HttpException(
+        'You do not have permission to access this data asset.',
+        403,
+      );
     }
   }