FIX: permissions for catalog

This commit is contained in:
Gabriel Rosa
2022-11-03 10:27:50 -03:00
parent aea6815de7
commit fb0c659cd1
4 changed files with 16 additions and 10 deletions
+7 -3
View File
@@ -33,12 +33,16 @@ import {
IUpdateDataRequest,
} from './dtos';
const catalogPermissions = PERMISSIONS_GROUPS.CATALOG.permissions;
@ApiTags('Catalog')
@Controller('catalog')
@Authenticated()
@AuthenticateCondition((req, user) => {
@AuthenticateCondition((req, user: RequestUser) => {
if (user.permissions.includes(catalogPermissions.DATA_MANAGER.seqid))
return true;
if (req.path.includes('/manage-permissions')) return true;
let action;
let action: keyof typeof catalogPermissions;
switch (req.method) {
case 'POST':
@@ -47,7 +51,7 @@ import {
break;
default:
action = req.method;
action = req.method as 'GET' | 'DELETE';
}
return user.permissions.includes(