@baasix/sdk 0.1.20 → 0.1.21

package/dist/index.cjs

@@ -2710,9 +2710,21 @@ var PermissionsModule = class {
    *   action: 'update',
    *   fields: ['title', 'content', 'status'],
    *   conditions: {
-   *     author_Id: { eq: '$CURRENT_USER' }
+   *     author_Id: { eq: '$CURRENT_USER' }      // USING: which rows may be updated
+   *   },
+   *   checkConditions: {
+   *     author_Id: { eq: '$CURRENT_USER' }      // WITH CHECK: what they may become
    *   }
    * });
+   *
+   * // Create grants use checkConditions (conditions is rejected on create):
+   * await baasix.permissions.create({
+   *   role_Id: 'user-role-uuid',
+   *   collection: 'tasks',
+   *   action: 'create',
+   *   fields: ['*'],
+   *   checkConditions: { owner_Id: { eq: '$CURRENT_USER' } }
+   * });
    * ```
    */
   async create(data) {
@@ -2770,9 +2782,9 @@ var PermissionsModule = class {
    * @example
    * ```typescript
    * await baasix.permissions.createCrudPermissions('role-uuid', 'products', {
-   *   create: { fields: ['name', 'price', 'description'] },
+   *   create: { fields: ['name', 'price'], checkConditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   read: { fields: ['*'] },
-   *   update: { fields: ['name', 'price', 'description'] },
+   *   update: { fields: ['name', 'price'], conditions: { owner_Id: { eq: '$CURRENT_USER' } } },
    *   delete: false
    * });
    * ```
@@ -2783,12 +2795,15 @@ var PermissionsModule = class {
     for (const action of actions) {
       const actionConfig = config[action];
       if (actionConfig === false) continue;
+      const cfg = actionConfig;
       const permission = await this.create({
         role_Id: roleId,
         collection,
         action,
-        fields: actionConfig?.fields || ["*"],
-        conditions: actionConfig?.conditions
+        fields: cfg?.fields || ["*"],
+        // `conditions` filters existing rows (USING) — never sent for create
+        conditions: action === "create" ? void 0 : cfg?.conditions,
+        checkConditions: action === "create" || action === "update" ? cfg?.checkConditions : void 0
       });
       permissions.push(permission);
     }