@budibase/server 2.1.32-alpha.4 → 2.1.32-alpha.6

package/dist/api/routes/layout.js

@@ -1,10 +1,36 @@
 "use strict";
-const Router = require("@koa/router");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const controller = require("../controllers/layout");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const controller = __importStar(require("../controllers/layout"));
+const router = new router_1.default();
 router
-    .post("/api/layouts", authorized(BUILDER), controller.save)
-    .delete("/api/layouts/:layoutId/:layoutRev", authorized(BUILDER), controller.destroy);
+    .post("/api/layouts", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.save)
+    .delete("/api/layouts/:layoutId/:layoutRev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/metadata.js

@@ -1,13 +1,39 @@
 "use strict";
-const Router = require("@koa/router");
-const controller = require("../controllers/metadata");
-const { middleware: appInfoMiddleware, AppType, } = require("../../middleware/appInfo");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const controller = __importStar(require("../controllers/metadata"));
+const appInfo_1 = require("../../middleware/appInfo");
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const router = new router_1.default();
 router
-    .post("/api/metadata/:type/:entityId", authorized(BUILDER), appInfoMiddleware({ appType: AppType.DEV }), controller.saveMetadata)
-    .delete("/api/metadata/:type/:entityId", authorized(BUILDER), appInfoMiddleware({ appType: AppType.DEV }), controller.deleteMetadata)
-    .get("/api/metadata/type", authorized(BUILDER), appInfoMiddleware({ appType: AppType.DEV }), controller.getTypes)
-    .get("/api/metadata/:type/:entityId", authorized(BUILDER), appInfoMiddleware({ appType: AppType.DEV }), controller.getMetadata);
+    .post("/api/metadata/:type/:entityId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, appInfo_1.middleware)({ appType: appInfo_1.AppType.DEV }), controller.saveMetadata)
+    .delete("/api/metadata/:type/:entityId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, appInfo_1.middleware)({ appType: appInfo_1.AppType.DEV }), controller.deleteMetadata)
+    .get("/api/metadata/type", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, appInfo_1.middleware)({ appType: appInfo_1.AppType.DEV }), controller.getTypes)
+    .get("/api/metadata/:type/:entityId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, appInfo_1.middleware)({ appType: appInfo_1.AppType.DEV }), controller.getMetadata);
 module.exports = router;

package/dist/api/routes/migrations.js

@@ -1,9 +1,35 @@
 "use strict";
-const Router = require("@koa/router");
-const migrationsController = require("../controllers/migrations");
-const router = new Router();
-const { internalApi } = require("@budibase/backend-core/auth");
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const migrationsController = __importStar(require("../controllers/migrations"));
+const backend_core_1 = require("@budibase/backend-core");
+const router = new router_1.default();
 router
-    .post("/api/migrations/run", internalApi, migrationsController.migrate)
-    .get("/api/migrations/definitions", internalApi, migrationsController.fetchDefinitions);
+    .post("/api/migrations/run", backend_core_1.auth.internalApi, migrationsController.migrate)
+    .get("/api/migrations/definitions", backend_core_1.auth.internalApi, migrationsController.fetchDefinitions);
 module.exports = router;

package/dist/api/routes/permission.js

@@ -1,17 +1,43 @@
 "use strict";
-const Router = require("@koa/router");
-const controller = require("../controllers/permission");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const { permissionValidator } = require("./utils/validators");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const controller = __importStar(require("../controllers/permission"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const validators_1 = require("./utils/validators");
+const router = new router_1.default();
 router
-    .get("/api/permission/builtin", authorized(BUILDER), controller.fetchBuiltin)
-    .get("/api/permission/levels", authorized(BUILDER), controller.fetchLevels)
-    .get("/api/permission", authorized(BUILDER), controller.fetch)
-    .get("/api/permission/:resourceId", authorized(BUILDER), controller.getResourcePerms)
+    .get("/api/permission/builtin", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetchBuiltin)
+    .get("/api/permission/levels", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetchLevels)
+    .get("/api/permission", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
+    .get("/api/permission/:resourceId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.getResourcePerms)
     // adding a specific role/level for the resource overrides the underlying access control
-    .post("/api/permission/:roleId/:resourceId/:level", authorized(BUILDER), permissionValidator(), controller.addPermission)
+    .post("/api/permission/:roleId/:resourceId/:level", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.permissionValidator)(), controller.addPermission)
     // deleting the level defaults it back the underlying access control for the resource
-    .delete("/api/permission/:roleId/:resourceId/:level", authorized(BUILDER), permissionValidator(), controller.removePermission);
+    .delete("/api/permission/:roleId/:resourceId/:level", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.permissionValidator)(), controller.removePermission);
 module.exports = router;

package/dist/api/routes/plugin.js

@@ -29,11 +29,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const router_1 = __importDefault(require("@koa/router"));
 const controller = __importStar(require("../controllers/plugin"));
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const permissions_1 = require("@budibase/backend-core/permissions");
+const backend_core_1 = require("@budibase/backend-core");
 const router = new router_1.default();
 router
-    .post("/api/plugin/upload", (0, authorized_1.default)(permissions_1.BUILDER), controller.upload)
-    .post("/api/plugin", (0, authorized_1.default)(permissions_1.BUILDER), controller.create)
-    .get("/api/plugin", (0, authorized_1.default)(permissions_1.BUILDER), controller.fetch)
-    .delete("/api/plugin/:pluginId", (0, authorized_1.default)(permissions_1.BUILDER), controller.destroy);
+    .post("/api/plugin/upload", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.upload)
+    .post("/api/plugin", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.create)
+    .get("/api/plugin", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
+    .delete("/api/plugin/:pluginId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
 exports.default = router;

package/dist/api/routes/query.js

@@ -1,19 +1,46 @@
 "use strict";
-const Router = require("@koa/router");
-const queryController = require("../controllers/query");
-const authorized = require("../../middleware/authorized");
-const { PermissionLevel, PermissionType, BUILDER, } = require("@budibase/backend-core/permissions");
-const { bodyResource, bodySubResource, paramResource, } = require("../../middleware/resourceId");
-const { generateQueryPreviewValidation, generateQueryValidation, } = require("../controllers/query/validation");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const queryController = __importStar(require("../controllers/query"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const resourceId_1 = require("../../middleware/resourceId");
+const validation_1 = require("../controllers/query/validation");
+const { BUILDER, PermissionType, PermissionLevel } = backend_core_1.permissions;
+const router = new router_1.default();
 router
-    .get("/api/queries", authorized(BUILDER), queryController.fetch)
-    .post("/api/queries", bodySubResource("datasourceId", "_id"), authorized(BUILDER), generateQueryValidation(), queryController.save)
-    .post("/api/queries/import", authorized(BUILDER), queryController.import)
-    .post("/api/queries/preview", bodyResource("datasourceId"), authorized(BUILDER), generateQueryPreviewValidation(), queryController.preview)
-    .get("/api/queries/:queryId", paramResource("queryId"), authorized(PermissionType.QUERY, PermissionLevel.READ), queryController.find)
+    .get("/api/queries", (0, authorized_1.default)(BUILDER), queryController.fetch)
+    .post("/api/queries", (0, resourceId_1.bodySubResource)("datasourceId", "_id"), (0, authorized_1.default)(BUILDER), (0, validation_1.generateQueryValidation)(), queryController.save)
+    .post("/api/queries/import", (0, authorized_1.default)(BUILDER), queryController.import)
+    .post("/api/queries/preview", (0, resourceId_1.bodyResource)("datasourceId"), (0, authorized_1.default)(BUILDER), (0, validation_1.generateQueryPreviewValidation)(), queryController.preview)
+    .get("/api/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.READ), queryController.find)
     // DEPRECATED - use new query endpoint for future work
-    .post("/api/queries/:queryId", paramResource("queryId"), authorized(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV1)
-    .post("/api/v2/queries/:queryId", paramResource("queryId"), authorized(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV2)
-    .delete("/api/queries/:queryId/:revId", paramResource("queryId"), authorized(BUILDER), queryController.destroy);
+    .post("/api/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV1)
+    .delete("/api/queries/:queryId/:revId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(BUILDER), queryController.destroy)
+    .post("/api/v2/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV2);
 module.exports = router;

package/dist/api/routes/role.js

@@ -1,13 +1,39 @@
 "use strict";
-const Router = require("@koa/router");
-const controller = require("../controllers/role");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const { roleValidator } = require("./utils/validators");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const controller = __importStar(require("../controllers/role"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const validators_1 = require("./utils/validators");
+const router = new router_1.default();
 router
-    .post("/api/roles", authorized(BUILDER), roleValidator(), controller.save)
-    .get("/api/roles", authorized(BUILDER), controller.fetch)
-    .get("/api/roles/:roleId", authorized(BUILDER), controller.find)
-    .delete("/api/roles/:roleId/:rev", authorized(BUILDER), controller.destroy);
+    .post("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.roleValidator)(), controller.save)
+    .get("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
+    .get("/api/roles/:roleId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.find)
+    .delete("/api/roles/:roleId/:rev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/routing.js

@@ -1,12 +1,38 @@
 "use strict";
-const Router = require("@koa/router");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const controller = require("../controllers/routing");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const controller = __importStar(require("../controllers/routing"));
+const router = new router_1.default();
 router
     // gets correct structure for user role
     .get("/api/routing/client", controller.clientFetch)
     // gets the full structure, not just the correct screen ID for user role
-    .get("/api/routing", authorized(BUILDER), controller.fetch);
+    .get("/api/routing", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch);
 module.exports = router;

package/dist/api/routes/row.js

@@ -30,8 +30,9 @@ const router_1 = __importDefault(require("@koa/router"));
 const rowController = __importStar(require("../controllers/row"));
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
 const resourceId_1 = require("../../middleware/resourceId");
-const { PermissionLevel, PermissionType, } = require("@budibase/backend-core/permissions");
+const backend_core_1 = require("@budibase/backend-core");
 const { internalSearchValidator } = require("./utils/validators");
+const { PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 router
     /**

package/dist/api/routes/screen.js

@@ -1,12 +1,38 @@
 "use strict";
-const Router = require("@koa/router");
-const controller = require("../controllers/screen");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const { screenValidator } = require("./utils/validators");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const controller = __importStar(require("../controllers/screen"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const validators_1 = require("./utils/validators");
+const router = new router_1.default();
 router
-    .get("/api/screens", authorized(BUILDER), controller.fetch)
-    .post("/api/screens", authorized(BUILDER), screenValidator(), controller.save)
-    .delete("/api/screens/:screenId/:screenRev", authorized(BUILDER), controller.destroy);
+    .get("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
+    .post("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.screenValidator)(), controller.save)
+    .delete("/api/screens/:screenId/:screenRev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/script.js

@@ -1,8 +1,34 @@
 "use strict";
-const Router = require("@koa/router");
-const controller = require("../controllers/script");
-const authorized = require("../../middleware/authorized");
-const { BUILDER } = require("@budibase/backend-core/permissions");
-const router = new Router();
-router.post("/api/script", authorized(BUILDER), controller.save);
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const controller = __importStar(require("../controllers/script"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const backend_core_1 = require("@budibase/backend-core");
+const router = new router_1.default();
+router.post("/api/script", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.save);
 module.exports = router;

package/dist/api/routes/static.js

@@ -34,14 +34,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
-Object.defineProperty(exports, "__esModule", { value: true });
 const router_1 = __importDefault(require("@koa/router"));
 const controller = __importStar(require("../controllers/static"));
 const budibaseDir_1 = require("../../utilities/budibaseDir");
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const permissions_1 = require("@budibase/backend-core/permissions");
+const backend_core_1 = require("@budibase/backend-core");
 const env = __importStar(require("../../environment"));
 const resourceId_1 = require("../../middleware/resourceId");
+const { BUILDER, PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 /* istanbul ignore next */
 router.param("file", (file, ctx, next) => __awaiter(void 0, void 0, void 0, function* () {
@@ -67,13 +67,13 @@ if (env.isDev()) {
 router
     // TODO: for now this builder endpoint is not authorized/secured, will need to be
     .get("/builder/:file*", controller.serveBuilder)
-    .post("/api/attachments/process", (0, authorized_1.default)(permissions_1.BUILDER), controller.uploadFile)
-    .post("/api/attachments/delete", (0, authorized_1.default)(permissions_1.BUILDER), controller.deleteObjects)
+    .post("/api/attachments/process", (0, authorized_1.default)(BUILDER), controller.uploadFile)
+    .post("/api/attachments/delete", (0, authorized_1.default)(BUILDER), controller.deleteObjects)
     .post("/api/beta/:feature", controller.toggleBetaUiFeature)
-    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionType.TABLE, permissions_1.PermissionLevel.WRITE), controller.uploadFile)
-    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionType.TABLE, permissions_1.PermissionLevel.WRITE), controller.deleteObjects)
-    .get("/app/preview", (0, authorized_1.default)(permissions_1.BUILDER), controller.serveBuilderPreview)
+    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.uploadFile)
+    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.deleteObjects)
+    .get("/app/preview", (0, authorized_1.default)(BUILDER), controller.serveBuilderPreview)
     .get("/:appId/:path*", controller.serveApp)
     .get("/app/:appUrl/:path*", controller.serveApp)
-    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(permissions_1.PermissionType.TABLE, permissions_1.PermissionLevel.READ), controller.getSignedUploadURL);
-exports.default = router;
+    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), controller.getSignedUploadURL);
+module.exports = router;

package/dist/api/routes/table.js

@@ -1,11 +1,38 @@
 "use strict";
-const Router = require("@koa/router");
-const tableController = require("../controllers/table");
-const authorized = require("../../middleware/authorized");
-const { paramResource, bodyResource } = require("../../middleware/resourceId");
-const { BUILDER, PermissionLevel, PermissionType, } = require("@budibase/backend-core/permissions");
-const { tableValidator } = require("./utils/validators");
-const router = new Router();
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const router_1 = __importDefault(require("@koa/router"));
+const tableController = __importStar(require("../controllers/table"));
+const authorized_1 = __importDefault(require("../../middleware/authorized"));
+const resourceId_1 = require("../../middleware/resourceId");
+const backend_core_1 = require("@budibase/backend-core");
+const validators_1 = require("./utils/validators");
+const { BUILDER, PermissionLevel, PermissionType } = backend_core_1.permissions;
+const router = new router_1.default();
 router
     /**
      * @api {get} /api/tables Fetch all tables
@@ -19,7 +46,7 @@ router
      * @apiSuccess {object[]} body The response body will be the list of tables that was found - as
      * this does not take any parameters the only error scenario is no access.
      */
-    .get("/api/tables", authorized(BUILDER), tableController.fetch)
+    .get("/api/tables", (0, authorized_1.default)(BUILDER), tableController.fetch)
     /**
      * @api {get} /api/tables/:id Fetch a single table
      * @apiName Fetch a single table
@@ -32,7 +59,7 @@ router
      *
      * @apiSuccess {object[]} body The response body will be the table that was found.
      */
-    .get("/api/tables/:tableId", paramResource("tableId"), authorized(PermissionType.TABLE, PermissionLevel.READ, { schema: true }), tableController.find)
+    .get("/api/tables/:tableId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ, { schema: true }), tableController.find)
     /**
      * @api {post} /api/tables Save a table
      * @apiName Save a table
@@ -108,7 +135,7 @@ router
      */
     .post("/api/tables", 
 // allows control over updating a table
-bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save)
+(0, resourceId_1.bodyResource)("_id"), (0, authorized_1.default)(BUILDER), (0, validators_1.tableValidator)(), tableController.save)
     /**
      * @api {post} /api/tables/csv/validate Validate a CSV for a table
      * @apiName Validate a CSV for a table
@@ -129,7 +156,7 @@ bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save
      * @apiSuccess {object} schema The response body will contain a "schema" object that represents the schema found for
      * the CSV - this will be in the same format used for table schema.s
      */
-    .post("/api/tables/csv/validate", authorized(BUILDER), tableController.validateCSVSchema)
+    .post("/api/tables/csv/validate", (0, authorized_1.default)(BUILDER), tableController.validateCSVSchema)
     /**
      * @api {post} /api/tables/:tableId/:revId Delete a table
      * @apiName Delete a table
@@ -144,7 +171,7 @@ bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save
      *
      * @apiSuccess {string} message A message stating that the table was deleted successfully.
      */
-    .delete("/api/tables/:tableId/:revId", paramResource("tableId"), authorized(BUILDER), tableController.destroy)
+    .delete("/api/tables/:tableId/:revId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.destroy)
     /**
      * @api {post} /api/tables/:tableId/:revId Import CSV to existing table
      * @apiName Import CSV to existing table
@@ -162,5 +189,5 @@ bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save
      *
      * @apiSuccess {string} message A message stating that the data was imported successfully.
      */
-    .post("/api/tables/:tableId/import", paramResource("tableId"), authorized(BUILDER), tableController.bulkImport);
+    .post("/api/tables/:tableId/import", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.bulkImport);
 module.exports = router;