mirror of
https://github.com/dadosfera/maestro.git
synced 2026-10-06 13:49:08 +00:00
FIX: fixed permissions
This commit is contained in:
@@ -30,33 +30,22 @@ import { Info } from '@dadosfera/protospack-v2/dist/lib/Input/interfaces/entitie
|
||||
@ApiTags('inputs')
|
||||
@Controller('inputs')
|
||||
@AuthenticateCondition((req, user) => {
|
||||
let action: any;
|
||||
|
||||
switch (req.method) {
|
||||
case 'POST':
|
||||
action = 'CREATE';
|
||||
break;
|
||||
|
||||
case 'PUT':
|
||||
action = 'UPDATE';
|
||||
break;
|
||||
|
||||
case 'PATCH':
|
||||
action = 'UPDATE';
|
||||
break;
|
||||
return (
|
||||
user.permissions.includes(PERMISSIONS.PIPELINE.permissions.CREATE) ||
|
||||
user.permissions.includes(PERMISSIONS.PIPELINE.permissions.UPDATE)
|
||||
);
|
||||
|
||||
default:
|
||||
action = req.method;
|
||||
return (
|
||||
user.permissions.includes(PERMISSIONS.PIPELINE.permissions.CREATE) ||
|
||||
user.permissions.includes(PERMISSIONS.PIPELINE.permissions.UPDATE) ||
|
||||
user.permissions.includes(PERMISSIONS.PIPELINE.permissions.GET)
|
||||
);
|
||||
}
|
||||
|
||||
if (
|
||||
`${req.method} ${req.route.path}` ===
|
||||
'GET /inputs/available-entities/:plugin'
|
||||
) {
|
||||
action = 'GET_ENTITIES';
|
||||
}
|
||||
|
||||
return user.permissions.includes(PERMISSIONS.INPUT.permissions[action].seqid);
|
||||
})
|
||||
export class InputsController {
|
||||
logger: DadosferaLogger;
|
||||
|
||||
Reference in New Issue
Block a user