diff --git a/src/modules/pipelines/pipelines.controller.ts b/src/modules/pipelines/pipelines.controller.ts index 24806c2..6054ff6 100644 --- a/src/modules/pipelines/pipelines.controller.ts +++ b/src/modules/pipelines/pipelines.controller.ts @@ -3,6 +3,7 @@ import { ApiOperation, ApiTags } from '@nestjs/swagger'; import { AuthenticateCondition, Authenticated, + RequireSomePermission, } from 'src/decorators/authentication.decorator'; import { PERMISSIONS_GROUPS } from '../../authentication/permissions.enum'; import { PipelinesService } from './pipelines.service'; @@ -13,26 +14,6 @@ import { ApiInternalOnlyController } from 'src/decorators/swagger.decorator'; @ApiTags('Pipelines') @Controller('pipelines') @Authenticated() -@AuthenticateCondition((req, user) => { - let action; - - switch (req.method) { - case 'POST': - action = 'CREATE'; - break; - - case 'PUT': - action = 'UPDATE'; - break; - - default: - action = req.method; - } - - return user.permissions.includes( - PERMISSIONS_GROUPS.PIPELINE.permissions[action].seqid, - ); -}) export class PipelinesController { logger: DadosferaLogger; constructor( @@ -44,6 +25,7 @@ export class PipelinesController { } @Post('start/:id') + @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.CREATE) @ApiOperation({ deprecated: true, description: @@ -71,6 +53,7 @@ export class PipelinesController { description: 'This method is deprecated. Please use route /pipelinesV2/:id/status instead', }) + @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET) async getPipelineStatus(@Body() body, @Param('id') id: string) { body.id = id; diff --git a/src/modules/pipelinesV2/pipelines.controller.ts b/src/modules/pipelinesV2/pipelines.controller.ts index 89e7876..4f5ff1d 100644 --- a/src/modules/pipelinesV2/pipelines.controller.ts +++ b/src/modules/pipelinesV2/pipelines.controller.ts @@ -161,7 +161,7 @@ export class PipelinesController { } @Get(':id/config') - @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET) + @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW,PERMISSIONS_GROUPS.PIPELINE.permissions.GET) async getPipelineproperties( @Language() language: LanguageEnum, @User() user: RequestUser, @@ -185,7 +185,7 @@ export class PipelinesController { } @Get(':id/status') - @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET) + @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET) async getPipelineStatus(@Body() body, @Param('id') id: string) { body.id = id; @@ -200,7 +200,7 @@ export class PipelinesController { } @Get('/:id') - @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.GET) + @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.GET) async findOne( @Language() language: LanguageEnum, @User() user: RequestUser, @@ -283,7 +283,7 @@ export class PipelinesController { deprecated: true, description: 'This method is deprecated. Please use PATCH instead', }) - @RequireSomePermission(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE) + @RequireSomePermission(PERMISSIONS_GROUPS.IMPORT_FILES.permissions.VIEW, PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE) async updateDeprecated( @Language() language: LanguageEnum, @Body() updatePipelineDto,