@aeriajs/builtins 0.0.230 → 0.0.232

package/dist/collections/user/index.d.ts

@@ -218,19 +218,19 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             readonly error: undefined;
             readonly result: import("mongodb").WithId<Omit<import("@aeriajs/types").PackReferences<import("@aeriajs/types").SchemaWithId<import("@aeriajs/types").Description>>, "_id">> | null;
         } | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.ResourceNotFound;
+            readonly code: "RESOURCE_NOT_FOUND";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.OwnershipError;
+            readonly code: "OWNERSHIP_ERROR";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }>>;
         readonly upload: (payload: unknown, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.MalformedInput;
+            readonly code: "MALFORMED_INPUT";
             readonly details: import("@aeriajs/types").ValidationError | import("@aeriajs/types").PropertyValidationError;
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest;
+            httpStatus: 400;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -243,29 +243,29 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             readonly error: undefined;
             readonly result: any;
         } | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.OwnershipError;
+            readonly code: "OWNERSHIP_ERROR";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }>>;
         readonly insert: (payload: NoInfer<import("@aeriajs/types").InsertPayload<import("@aeriajs/types").SchemaWithId<import("@aeriajs/types").Description>>>, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.AuthorizationError;
+            readonly code: "AUTHORIZATION_ERROR";
             readonly message: "user is not allowed to edit other users roles";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.AuthorizationError;
+            readonly code: "AUTHORIZATION_ERROR";
             readonly message: "tried to set unallowed roles";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.ResourceNotFound;
+            readonly code: "RESOURCE_NOT_FOUND";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.AuthorizationError;
-            readonly message: "tried to edit an user with a roler higher in the hierarchy";
+            readonly code: "AUTHORIZATION_ERROR";
+            readonly message: "tried to edit an user with a role higher in the hierarchy";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").InsertReturnType<import("@aeriajs/types").SchemaWithId<import("@aeriajs/types").Description>>>;
         readonly editProfile: (payload: Partial<import("@aeriajs/types").PackReferences<import("@aeriajs/types").SchemaWithId<{
             readonly $id: "user";
@@ -476,9 +476,9 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                 };
             };
         }>> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.TargetImmutable;
+            readonly code: "TARGET_IMMUTABLE";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }>>;
         readonly authenticate: (payload: {
             email: string;
@@ -487,9 +487,9 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             token?: import("@aeriajs/types").TokenRecipient;
             revalidate: true;
         }, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.AuthorizationError;
+            readonly code: "AUTHORIZATION_ERROR";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -511,38 +511,38 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             readonly error: undefined;
             readonly result: import("../../authentication.js").SuccessfulAuthentication;
         } | import("@aeriajs/types").Result.Error<{
-            readonly code: import("../../authentication.js").AuthenticationError.InvalidCredentials;
+            readonly code: "INVALID_CREDENTIALS";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("../../authentication.js").AuthenticationError.InactiveUser;
+            readonly code: "INACTIVE_USER";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }>>;
         readonly activate: (payload: {
             password?: string;
             userId?: string;
             token?: string;
         }, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.InvalidLink;
+            readonly code: "INVALID_LINK";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.UserNotFound;
+            readonly code: "USER_NOT_FOUND";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.AlreadyActiveUser;
+            readonly code: "ALREADY_ACTIVE_USER";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.InvalidToken;
+            readonly code: "INVALID_TOKEN";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.MalformedInput;
+            readonly code: "MALFORMED_INPUT";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.UnprocessableContent;
+            httpStatus: 422;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -655,18 +655,18 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                 };
             };
         }>>> & Record<string, unknown>, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("./createAccount.js").CreateAccountError;
+            readonly code: "SIGNUP_DISALLOWED";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.MalformedInput;
+            readonly code: "MALFORMED_INPUT";
             readonly details: import("@aeriajs/types").PropertyValidationError | import("@aeriajs/types").ValidationError;
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest;
+            httpStatus: 400;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.OwnershipError;
+            readonly code: "OWNERSHIP_ERROR";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").InsertReturnType<import("@aeriajs/types").SchemaWithId<{
             readonly $id: "user";
             readonly icon: "users";
@@ -776,17 +776,17 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             userId: string;
             token: string;
         }, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("./getInfo.js").ActivationError.InvalidLink;
+            readonly code: "INVALID_LINK";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./getInfo.js").ActivationError.UserNotFound;
+            readonly code: "USER_NOT_FOUND";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./getInfo.js").ActivationError.InvalidToken;
+            readonly code: "INVALID_TOKEN";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -922,10 +922,10 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             readonly _tag: "Error";
             readonly error: Pick<{} & Omit<Readonly<import("@aeriajs/types").FilterReadonlyProperties<{
                 readonly httpStatus: {
-                    readonly enum: [import("@aeriajs/types").HTTPStatus.Forbidden, import("@aeriajs/types").HTTPStatus.NotFound, import("@aeriajs/types").HTTPStatus.BadRequest];
+                    readonly enum: [403, 404, 400];
                 };
                 readonly code: {
-                    readonly enum: [import("@aeriajs/types").ACError.ResourceNotFound, import("@aeriajs/types").ACError.OwnershipError, import("@aeriajs/types").ACError.InsecureOperator, import("@aeriajs/types").ACError.MalformedInput];
+                    readonly enum: ["RESOURCE_NOT_FOUND", "OWNERSHIP_ERROR", "INSECURE_OPERATOR", "MALFORMED_INPUT"];
                 };
                 readonly message: {
                     readonly type: "string";
@@ -935,16 +935,16 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                     readonly additionalProperties: true;
                 };
             }>> & {
-                code: import("@aeriajs/types").ACError.OwnershipError | import("@aeriajs/types").ACError.ResourceNotFound | import("@aeriajs/types").ACError.InsecureOperator | import("@aeriajs/types").ACError.MalformedInput;
-                httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest | import("@aeriajs/types").HTTPStatus.Forbidden | import("@aeriajs/types").HTTPStatus.NotFound;
+                code: "RESOURCE_NOT_FOUND" | "INSECURE_OPERATOR" | "OWNERSHIP_ERROR" | "MALFORMED_INPUT";
+                httpStatus: 403 | 400 | 404;
                 message: string;
                 details: any;
             }, never>, "code" | "httpStatus"> & Partial<{} & Omit<Readonly<import("@aeriajs/types").FilterReadonlyProperties<{
                 readonly httpStatus: {
-                    readonly enum: [import("@aeriajs/types").HTTPStatus.Forbidden, import("@aeriajs/types").HTTPStatus.NotFound, import("@aeriajs/types").HTTPStatus.BadRequest];
+                    readonly enum: [403, 404, 400];
                 };
                 readonly code: {
-                    readonly enum: [import("@aeriajs/types").ACError.ResourceNotFound, import("@aeriajs/types").ACError.OwnershipError, import("@aeriajs/types").ACError.InsecureOperator, import("@aeriajs/types").ACError.MalformedInput];
+                    readonly enum: ["RESOURCE_NOT_FOUND", "OWNERSHIP_ERROR", "INSECURE_OPERATOR", "MALFORMED_INPUT"];
                 };
                 readonly message: {
                     readonly type: "string";
@@ -954,20 +954,20 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                     readonly additionalProperties: true;
                 };
             }>> & {
-                code: import("@aeriajs/types").ACError.OwnershipError | import("@aeriajs/types").ACError.ResourceNotFound | import("@aeriajs/types").ACError.InsecureOperator | import("@aeriajs/types").ACError.MalformedInput;
-                httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest | import("@aeriajs/types").HTTPStatus.Forbidden | import("@aeriajs/types").HTTPStatus.NotFound;
+                code: "RESOURCE_NOT_FOUND" | "INSECURE_OPERATOR" | "OWNERSHIP_ERROR" | "MALFORMED_INPUT";
+                httpStatus: 403 | 400 | 404;
                 message: string;
                 details: any;
             }, never>>;
             readonly result: undefined;
         } | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.InvalidLink;
+            readonly code: "INVALID_LINK";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest;
+            httpStatus: 400;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./activate.js").ActivationError.AlreadyActiveUser;
+            readonly code: "ALREADY_ACTIVE_USER";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -982,10 +982,10 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             readonly _tag: "Error";
             readonly error: Pick<{} & Omit<Readonly<import("@aeriajs/types").FilterReadonlyProperties<{
                 readonly httpStatus: {
-                    readonly enum: [import("@aeriajs/types").HTTPStatus.Forbidden, import("@aeriajs/types").HTTPStatus.NotFound, import("@aeriajs/types").HTTPStatus.BadRequest];
+                    readonly enum: [403, 404, 400];
                 };
                 readonly code: {
-                    readonly enum: [import("@aeriajs/types").ACError.ResourceNotFound, import("@aeriajs/types").ACError.OwnershipError, import("@aeriajs/types").ACError.InsecureOperator, import("@aeriajs/types").ACError.MalformedInput];
+                    readonly enum: ["RESOURCE_NOT_FOUND", "OWNERSHIP_ERROR", "INSECURE_OPERATOR", "MALFORMED_INPUT"];
                 };
                 readonly message: {
                     readonly type: "string";
@@ -995,16 +995,16 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                     readonly additionalProperties: true;
                 };
             }>> & {
-                code: import("@aeriajs/types").ACError.OwnershipError | import("@aeriajs/types").ACError.ResourceNotFound | import("@aeriajs/types").ACError.InsecureOperator | import("@aeriajs/types").ACError.MalformedInput;
-                httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest | import("@aeriajs/types").HTTPStatus.Forbidden | import("@aeriajs/types").HTTPStatus.NotFound;
+                code: "RESOURCE_NOT_FOUND" | "INSECURE_OPERATOR" | "OWNERSHIP_ERROR" | "MALFORMED_INPUT";
+                httpStatus: 403 | 400 | 404;
                 message: string;
                 details: any;
             }, never>, "code" | "httpStatus"> & Partial<{} & Omit<Readonly<import("@aeriajs/types").FilterReadonlyProperties<{
                 readonly httpStatus: {
-                    readonly enum: [import("@aeriajs/types").HTTPStatus.Forbidden, import("@aeriajs/types").HTTPStatus.NotFound, import("@aeriajs/types").HTTPStatus.BadRequest];
+                    readonly enum: [403, 404, 400];
                 };
                 readonly code: {
-                    readonly enum: [import("@aeriajs/types").ACError.ResourceNotFound, import("@aeriajs/types").ACError.OwnershipError, import("@aeriajs/types").ACError.InsecureOperator, import("@aeriajs/types").ACError.MalformedInput];
+                    readonly enum: ["RESOURCE_NOT_FOUND", "OWNERSHIP_ERROR", "INSECURE_OPERATOR", "MALFORMED_INPUT"];
                 };
                 readonly message: {
                     readonly type: "string";
@@ -1014,16 +1014,16 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
                     readonly additionalProperties: true;
                 };
             }>> & {
-                code: import("@aeriajs/types").ACError.OwnershipError | import("@aeriajs/types").ACError.ResourceNotFound | import("@aeriajs/types").ACError.InsecureOperator | import("@aeriajs/types").ACError.MalformedInput;
-                httpStatus: import("@aeriajs/types").HTTPStatus.BadRequest | import("@aeriajs/types").HTTPStatus.Forbidden | import("@aeriajs/types").HTTPStatus.NotFound;
+                code: "RESOURCE_NOT_FOUND" | "INSECURE_OPERATOR" | "OWNERSHIP_ERROR" | "MALFORMED_INPUT";
+                httpStatus: 403 | 400 | 404;
                 message: string;
                 details: any;
             }, never>>;
             readonly result: undefined;
         } | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./redefinePassword.js").ActivationError.UserNotActive;
+            readonly code: "USER_NOT_ACTIVE";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;
@@ -1036,25 +1036,25 @@ export declare const user: Omit<Collection<never>, "functions" | "description" |
             userId?: string;
             token?: string;
         }, context: Omit<Context, "token">) => Promise<import("@aeriajs/types").Result.Error<{
-            readonly code: import("./redefinePassword.js").ActivationError.InvalidLink;
+            readonly code: "INVALID_LINK";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./redefinePassword.js").ActivationError.UserNotFound;
+            readonly code: "USER_NOT_FOUND";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.NotFound;
+            httpStatus: 404;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./redefinePassword.js").ActivationError.UserNotActive;
+            readonly code: "USER_NOT_ACTIVE";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Forbidden;
+            httpStatus: 403;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("./redefinePassword.js").ActivationError.InvalidToken;
+            readonly code: "INVALID_TOKEN";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.Unauthorized;
+            httpStatus: 401;
         }> | import("@aeriajs/types").Result.Error<{
-            readonly code: import("@aeriajs/types").ACError.MalformedInput;
+            readonly code: "MALFORMED_INPUT";
         } & {
-            httpStatus: import("@aeriajs/types").HTTPStatus.UnprocessableContent;
+            httpStatus: 422;
         }> | {
             readonly _tag: "Result";
             readonly error: undefined;

package/dist/collections/user/insert.d.ts

@@ -1,22 +1,21 @@
 import type { Context, SchemaWithId, InsertPayload, Description } from '@aeriajs/types';
-import { HTTPStatus, ACError } from '@aeriajs/types';
 export declare const insert: <TDescription extends Description, TInsertPayload extends InsertPayload<SchemaWithId<TDescription>>>(payload: NoInfer<TInsertPayload>, context: Context<TDescription>) => Promise<import("@aeriajs/types").Result.Error<{
-    readonly code: ACError.AuthorizationError;
+    readonly code: "AUTHORIZATION_ERROR";
     readonly message: "user is not allowed to edit other users roles";
 } & {
-    httpStatus: HTTPStatus.Forbidden;
+    httpStatus: 403;
 }> | import("@aeriajs/types").Result.Error<{
-    readonly code: ACError.AuthorizationError;
+    readonly code: "AUTHORIZATION_ERROR";
     readonly message: "tried to set unallowed roles";
 } & {
-    httpStatus: HTTPStatus.Forbidden;
+    httpStatus: 403;
 }> | import("@aeriajs/types").Result.Error<{
-    readonly code: ACError.ResourceNotFound;
+    readonly code: "RESOURCE_NOT_FOUND";
 } & {
-    httpStatus: HTTPStatus.NotFound;
+    httpStatus: 404;
 }> | import("@aeriajs/types").Result.Error<{
-    readonly code: ACError.AuthorizationError;
-    readonly message: "tried to edit an user with a roler higher in the hierarchy";
+    readonly code: "AUTHORIZATION_ERROR";
+    readonly message: "tried to edit an user with a role higher in the hierarchy";
 } & {
-    httpStatus: HTTPStatus.Forbidden;
+    httpStatus: 403;
 }> | import("@aeriajs/types").InsertReturnType<SchemaWithId<TDescription>>>;

package/dist/collections/user/insert.js

@@ -6,7 +6,10 @@ const common_1 = require("@aeriajs/common");
 const core_1 = require("@aeriajs/core");
 const bcrypt = require("bcrypt");
 const isRoleAllowed = (targetRole, context) => {
-    if (!context.config.security.rolesHierarchy || !context.token.authenticated) {
+    if (!context.config.security.rolesHierarchy) {
+        return true;
+    }
+    if (!context.token.authenticated) {
         throw new Error;
     }
     for (const role of context.token.roles) {
@@ -43,24 +46,23 @@ const insert = async (payload, context) => {
                     });
                 }
             }
-            if ('_id' in payload.what && typeof payload.what._id === 'string') {
-                context.collection.description.$id === 'oi';
-                const user = await context.collections.user.model.findOne({
-                    _id: new core_1.ObjectId(payload.what._id),
-                });
-                if (!user) {
-                    return context.error(types_1.HTTPStatus.NotFound, {
-                        code: types_1.ACError.ResourceNotFound,
-                    });
-                }
-                const allowed = user.roles.every((role) => isRoleAllowed(role, context));
-                if (!allowed) {
-                    return context.error(types_1.HTTPStatus.Forbidden, {
-                        code: types_1.ACError.AuthorizationError,
-                        message: 'tried to edit an user with a roler higher in the hierarchy',
-                    });
-                }
-            }
+        }
+    }
+    if ('_id' in payload.what && typeof payload.what._id === 'string') {
+        const user = await context.collections.user.model.findOne({
+            _id: new core_1.ObjectId(payload.what._id),
+        });
+        if (!user) {
+            return context.error(types_1.HTTPStatus.NotFound, {
+                code: types_1.ACError.ResourceNotFound,
+            });
+        }
+        const allowed = user.roles.every((role) => isRoleAllowed(role, context));
+        if (!allowed) {
+            return context.error(types_1.HTTPStatus.Forbidden, {
+                code: types_1.ACError.AuthorizationError,
+                message: 'tried to edit an user with a role higher in the hierarchy',
+            });
         }
     }
     if ('password' in payload.what && typeof payload.what.password === 'string') {

package/dist/collections/user/insert.mjs

@@ -4,7 +4,10 @@ import { arraysIntersect } from "@aeriajs/common";
 import { ObjectId, insert as originalInsert } from "@aeriajs/core";
 import * as bcrypt from "bcrypt";
 const isRoleAllowed = (targetRole, context) => {
-  if (!context.config.security.rolesHierarchy || !context.token.authenticated) {
+  if (!context.config.security.rolesHierarchy) {
+    return true;
+  }
+  if (!context.token.authenticated) {
     throw new Error();
   }
   for (const role of context.token.roles) {
@@ -41,24 +44,23 @@ export const insert = async (payload, context) => {
           });
         }
       }
-      if ("_id" in payload.what && typeof payload.what._id === "string") {
-        context.collection.description.$id === "oi";
-        const user = await context.collections.user.model.findOne({
-          _id: new ObjectId(payload.what._id)
-        });
-        if (!user) {
-          return context.error(HTTPStatus.NotFound, {
-            code: ACError.ResourceNotFound
-          });
-        }
-        const allowed = user.roles.every((role) => isRoleAllowed(role, context));
-        if (!allowed) {
-          return context.error(HTTPStatus.Forbidden, {
-            code: ACError.AuthorizationError,
-            message: "tried to edit an user with a roler higher in the hierarchy"
-          });
-        }
-      }
+    }
+  }
+  if ("_id" in payload.what && typeof payload.what._id === "string") {
+    const user = await context.collections.user.model.findOne({
+      _id: new ObjectId(payload.what._id)
+    });
+    if (!user) {
+      return context.error(HTTPStatus.NotFound, {
+        code: ACError.ResourceNotFound
+      });
+    }
+    const allowed = user.roles.every((role) => isRoleAllowed(role, context));
+    if (!allowed) {
+      return context.error(HTTPStatus.Forbidden, {
+        code: ACError.AuthorizationError,
+        message: "tried to edit an user with a role higher in the hierarchy"
+      });
     }
   }
   if ("password" in payload.what && typeof payload.what.password === "string") {

package/dist/collections/user/redefinePassword.d.ts

@@ -1,37 +1,37 @@
 import type { Context } from '@aeriajs/types';
 import type { description } from './description.js';
 import { ObjectId } from '@aeriajs/core';
-import { Result, ACError, HTTPStatus } from '@aeriajs/types';
-export declare enum ActivationError {
-    UserNotFound = "USER_NOT_FOUND",
-    UserNotActive = "USER_NOT_ACTIVE",
-    InvalidLink = "INVALID_LINK",
-    InvalidToken = "INVALID_TOKEN"
-}
+import { Result } from '@aeriajs/types';
+export declare const ActivationError: {
+    readonly UserNotFound: "USER_NOT_FOUND";
+    readonly UserNotActive: "USER_NOT_ACTIVE";
+    readonly InvalidLink: "INVALID_LINK";
+    readonly InvalidToken: "INVALID_TOKEN";
+};
 export declare const redefinePassword: (payload: {
     password?: string;
     userId?: string;
     token?: string;
 }, context: Context<typeof description>) => Promise<Result.Error<{
-    readonly code: ActivationError.InvalidLink;
+    readonly code: "INVALID_LINK";
 } & {
-    httpStatus: HTTPStatus.NotFound;
+    httpStatus: 404;
 }> | Result.Error<{
-    readonly code: ActivationError.UserNotFound;
+    readonly code: "USER_NOT_FOUND";
 } & {
-    httpStatus: HTTPStatus.NotFound;
+    httpStatus: 404;
 }> | Result.Error<{
-    readonly code: ActivationError.UserNotActive;
+    readonly code: "USER_NOT_ACTIVE";
 } & {
-    httpStatus: HTTPStatus.Forbidden;
+    httpStatus: 403;
 }> | Result.Error<{
-    readonly code: ActivationError.InvalidToken;
+    readonly code: "INVALID_TOKEN";
 } & {
-    httpStatus: HTTPStatus.Unauthorized;
+    httpStatus: 401;
 }> | Result.Error<{
-    readonly code: ACError.MalformedInput;
+    readonly code: "MALFORMED_INPUT";
 } & {
-    httpStatus: HTTPStatus.UnprocessableContent;
+    httpStatus: 422;
 }> | {
     readonly _tag: "Result";
     readonly error: undefined;

package/dist/collections/user/redefinePassword.js

@@ -4,13 +4,12 @@ exports.redefinePassword = exports.ActivationError = void 0;
 const core_1 = require("@aeriajs/core");
 const types_1 = require("@aeriajs/types");
 const bcrypt = require("bcrypt");
-var ActivationError;
-(function (ActivationError) {
-    ActivationError["UserNotFound"] = "USER_NOT_FOUND";
-    ActivationError["UserNotActive"] = "USER_NOT_ACTIVE";
-    ActivationError["InvalidLink"] = "INVALID_LINK";
-    ActivationError["InvalidToken"] = "INVALID_TOKEN";
-})(ActivationError || (exports.ActivationError = ActivationError = {}));
+exports.ActivationError = {
+    UserNotFound: 'USER_NOT_FOUND',
+    UserNotActive: 'USER_NOT_ACTIVE',
+    InvalidLink: 'INVALID_LINK',
+    InvalidToken: 'INVALID_TOKEN',
+};
 const redefinePassword = async (payload, context) => {
     const { userId, token, password, } = payload;
     if (!context.config.secret) {
@@ -18,7 +17,7 @@ const redefinePassword = async (payload, context) => {
     }
     if (!userId || !token) {
         return context.error(types_1.HTTPStatus.NotFound, {
-            code: ActivationError.InvalidLink,
+            code: exports.ActivationError.InvalidLink,
         });
     }
     const user = await context.collection.model.findOne({
@@ -31,18 +30,18 @@ const redefinePassword = async (payload, context) => {
     });
     if (!user) {
         return context.error(types_1.HTTPStatus.NotFound, {
-            code: ActivationError.UserNotFound,
+            code: exports.ActivationError.UserNotFound,
         });
     }
     if (!user.active) {
         return context.error(types_1.HTTPStatus.Forbidden, {
-            code: ActivationError.UserNotActive,
+            code: exports.ActivationError.UserNotActive,
         });
     }
     const decoded = await (0, core_1.decodeToken)(token, context.config.secret);
     if (!decoded) {
         return context.error(types_1.HTTPStatus.Unauthorized, {
-            code: ActivationError.InvalidToken,
+            code: exports.ActivationError.InvalidToken,
         });
     }
     if (!password) {