@7365admin1/layer-common 4.1.2-staging.248 → 4.1.3-staging.249

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +21 -4
  2. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,22 @@
1
1
  # @iservice365/layer-common
2
2
 
3
+ ## 4.1.2
4
+
5
+ ### Patch Changes
6
+
7
+ - 89deaab: Check the permission the estate stores for the Bulletin Board gates
8
+
9
+ `useBulletinBoardPermission` asked for `bulletin-board:<action>`, a resource held
10
+ by 8-9 of the 428 roles in the live catalogue, while the same five actions under
11
+ `bulletin-board-mgmt:` are held by 80-82. `-hygiene`, `-security` and
12
+ `-pest-control` leave `canViewBulletinBoardDetails` unbound, so this composable
13
+ gates their sidebar-linked bulletin board page and ~74 roles that hold the right
14
+ were refused it.
15
+
16
+ Both resources are now accepted, and the list gate also accepts the singular
17
+ `see-all-bulletin-board` action that 80 roles store. No key is renamed, nothing
18
+ is granted and no role document changes.
19
+
3
20
  ## 4.1.1
4
21
 
5
22
  ### Patch Changes
@@ -313,11 +330,11 @@
313
330
  `utils/console-tier.ts` + `composables/useConsoleTier.ts` mirror the server's
314
331
  own rule from two endpoints the console already calls, unprojected:
315
332
 
316
- GET /api/members/user/:user/app/admin the Seven365 staff membership
317
- GET /api/roles/id/:role that membership's role document
333
+ GET /api/members/user/:user/app/admin the Seven365 staff membership
334
+ GET /api/roles/id/:role that membership's role document
318
335
 
319
- owner = member.type === "admin" && role.type === "admin" && role.default === true
320
- staff = member.type === "admin" && role.type === "admin"
336
+ owner = member.type === "admin" && role.type === "admin" && role.default === true
337
+ staff = member.type === "admin" && role.type === "admin"
321
338
 
322
339
  `role.default` is the marker because it is the only property of a platform
323
340
  staff role no API caller can set - `role.controller.ts` validates create and
package/package.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "@7365admin1/layer-common",
3
3
  "license": "MIT",
4
4
  "type": "module",
5
- "version": "4.1.2-staging.248",
5
+ "version": "4.1.3-staging.249",
6
6
  "author": "7365admin1",
7
7
  "main": "./nuxt.config.ts",
8
8
  "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",