@7365admin1/core 3.73.0 → 3.73.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +1 -1
- package/dist/index.mjs.map +1 -1
- package/package.json +1 -1
- package/test/e2e/person-write-scope.e2e.test.mjs +57 -0
- package/test/people-create-gate.test.mjs +16 -13
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,11 @@
|
|
|
1
1
|
# @iservice365/core
|
|
2
2
|
|
|
3
|
+
## 3.73.1
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- b66bf09: Enforce the reach check on `POST /api/people` by default: a signed-in caller can only create a person at a site (or organisation) they belong to or serve. `PEOPLE_CREATE_REACH_MODE=log` switches back to counting without refusing.
|
|
8
|
+
|
|
3
9
|
## 3.73.0
|
|
4
10
|
|
|
5
11
|
### Minor Changes
|
package/dist/index.js
CHANGED
|
@@ -56330,7 +56330,7 @@ var import_node_server_utils149 = require("@7365admin1/node-server-utils");
|
|
|
56330
56330
|
var import_node_server_utils150 = require("@7365admin1/node-server-utils");
|
|
56331
56331
|
|
|
56332
56332
|
// src/utils/people-create-gate.util.ts
|
|
56333
|
-
var PEOPLE_CREATE_REACH_MODE_DEFAULT = "
|
|
56333
|
+
var PEOPLE_CREATE_REACH_MODE_DEFAULT = "enforce";
|
|
56334
56334
|
function peopleCreateReachMode(env2 = process.env) {
|
|
56335
56335
|
return gateMode(
|
|
56336
56336
|
env2.PEOPLE_CREATE_REACH_MODE,
|