FIX: user patch route

Merge pull request #425 from dadosfera/beta
Beta
2026-09-01 04:08:16 +00:00 · 2025-12-26 17:53:02 -03:00 · 2025-12-18 17:42:10 -03:00 · 2025-12-18 12:33:29 -03:00 · 2025-12-18 10:53:31 -03:00 · 2025-12-18 10:30:09 -03:00
2 changed files with 30 additions and 4 deletions
@@ -630,21 +630,39 @@ export class PlatformApiController {
  @ApiOperation({ summary: 'Execute a pipeline' })
  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
  async executePipeline(@Body() body: any, @User() user: RequestUser) {
-    return this.platformApiService.proxy('POST', '/pipeline/execute', user, body);
+    // Inject customer_id (actually customer_name) into body for Platform-API
+    // Note: Platform-API was created before customer_id existed, so it expects customer_name in the customer_id field
+    const enrichedBody = {
+      ...body,
+      customer_id: user.customer_name,
+    };
+    return this.platformApiService.proxy('POST', '/pipeline/execute', user, enrichedBody);
  }

  @Post('pipeline/pause')
  @ApiOperation({ summary: 'Pause a pipeline' })
  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
  async pausePipeline(@Body() body: any, @User() user: RequestUser) {
-    return this.platformApiService.proxy('POST', '/pipeline/pause', user, body);
+    // Inject customer_id (actually customer_name) into body for Platform-API
+    // Note: Platform-API was created before customer_id existed, so it expects customer_name in the customer_id field
+    const enrichedBody = {
+      ...body,
+      customer_id: user.customer_name,
+    };
+    return this.platformApiService.proxy('POST', '/pipeline/pause', user, enrichedBody);
  }

  @Post('pipeline/unpause')
  @ApiOperation({ summary: 'Unpause a pipeline' })
  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
  async unpausePipeline(@Body() body: any, @User() user: RequestUser) {
-    return this.platformApiService.proxy('POST', '/pipeline/unpause', user, body);
+    // Inject customer_id (actually customer_name) into body for Platform-API
+    // Note: Platform-API was created before customer_id existed, so it expects customer_name in the customer_id field
+    const enrichedBody = {
+      ...body,
+      customer_id: user.customer_name,
+    };
+    return this.platformApiService.proxy('POST', '/pipeline/unpause', user, enrichedBody);
  }

  @Put('pipeline/:pipelineId/memory')
@@ -274,9 +274,17 @@ export class UsersController {
    @Language() language: LanguageEnum,
  ) {

-    if (user.user_id !== id || !user.permissions.includes(PERMISSIONS_GROUPS.USERS.permissions.ADMIN.seqid)) {
+    const isSameUser = user.user_id === id;
+    const isSuperAdmin = user.permissions.includes(PERMISSIONS_GROUPS.USERS.permissions.ADMIN.seqid)
+    if (!isSameUser && !isSuperAdmin) {
      throw new ErrorBuilder(ErrorCodes.AUTH.FORBIDDEN);
    }
+
+    if (isSameUser && !isSuperAdmin && body.roleNames) {
+      // Prevent users from updating their own roles
+      delete body.roleNames;
+    }
+
    this.logger.info('updateUser', { user });
    this.userService.setLanguage(language);
    return await this.userService.updateUser(body, id, user.customer_id);
Author	SHA1	Message	Date
Marcos Rodrigues	76485f929d	FIX: user patch route	2025-12-26 17:53:02 -03:00
Marcos Rodrigues Silva	1f9d0c29ec	Merge pull request #425 from dadosfera/beta Beta	2025-12-18 17:42:10 -03:00
Marcos Rodrigues Silva	31f8c2c1a6	Merge pull request #424 from dadosfera/feature/user-form FEAT: protected update route with admin seqid or if user request to e…	2025-12-18 12:33:29 -03:00
Rafael Santana	adeb022818	Merge pull request #423 from dadosfera/fix/reference-column-object-format FIX: inject customer_id in pipeline execute/pause/unpause routes	2025-12-18 10:53:31 -03:00
RafaelandClaude Opus 4.5	f61c241dde	FIX: inject customer_id in pipeline execute/pause/unpause routes Users no longer need to provide customer_id in the request body for execute, pause, and unpause pipeline operations - it's now automatically injected from the authenticated user's session. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-18 10:30:09 -03:00
Marcos Rodrigues Silva	e326cab44d	Merge pull request #422 from dadosfera/feature/user-form FIX: send new user info	2025-12-18 10:29:09 -03:00
Marcos Rodrigues Silva	3f8dc5cabe	Merge pull request #421 from dadosfera/feature/user-form Feature/user form	2025-12-18 09:53:12 -03:00
Marcos Rodrigues Silva	e7f410831f	Merge pull request #395 from dadosfera/beta Beta	2025-12-01 17:47:24 -03:00