@budibase/server 2.1.32-alpha.7 → 2.1.32

package/dist/api/routes/role.js

@@ -1,39 +1,13 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/role"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/role");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const { roleValidator } = require("./utils/validators");
+const router = new Router();
 router
-    .post("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.roleValidator)(), controller.save)
-    .get("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .get("/api/roles/:roleId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.find)
-    .delete("/api/roles/:roleId/:rev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
+    .post("/api/roles", authorized(BUILDER), roleValidator(), controller.save)
+    .get("/api/roles", authorized(BUILDER), controller.fetch)
+    .get("/api/roles/:roleId", authorized(BUILDER), controller.find)
+    .delete("/api/roles/:roleId/:rev", authorized(BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/routing.js

@@ -1,38 +1,12 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const controller = __importStar(require("../controllers/routing"));
-const router = new router_1.default();
+const Router = require("@koa/router");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const controller = require("../controllers/routing");
+const router = new Router();
 router
     // gets correct structure for user role
     .get("/api/routing/client", controller.clientFetch)
     // gets the full structure, not just the correct screen ID for user role
-    .get("/api/routing", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch);
+    .get("/api/routing", authorized(BUILDER), controller.fetch);
 module.exports = router;

package/dist/api/routes/row.js

@@ -30,9 +30,8 @@ const router_1 = __importDefault(require("@koa/router"));
 const rowController = __importStar(require("../controllers/row"));
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
 const resourceId_1 = require("../../middleware/resourceId");
-const backend_core_1 = require("@budibase/backend-core");
+const { PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
 const { internalSearchValidator } = require("./utils/validators");
-const { PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 router
     /**
@@ -49,7 +48,7 @@ router
      *
      * @apiSuccess {object} row The response body will be the enriched row.
      */
-    .get("/api/:tableId/:rowId/enrich", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.fetchEnrichedRow)
+    .get("/api/:tableId/:rowId/enrich", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetchEnrichedRow)
     /**
      * @api {get} /api/:tableId/rows Get all rows in a table
      * @apiName Get all rows in a table
@@ -64,7 +63,7 @@ router
      *
      * @apiSuccess {object[]} rows The response body will be an array of all rows found.
      */
-    .get("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.fetch)
+    .get("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetch)
     /**
      * @api {get} /api/:tableId/rows/:rowId Retrieve a single row
      * @apiName Retrieve a single row
@@ -78,7 +77,7 @@ router
      *
      * @apiSuccess {object} body The response body will be the row that was found.
      */
-    .get("/api/:tableId/rows/:rowId", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.find)
+    .get("/api/:tableId/rows/:rowId", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.find)
     /**
      * @api {post} /api/:tableId/search Search for rows in a table
      * @apiName Search for rows in a table
@@ -142,10 +141,10 @@ router
      * @apiSuccess {string} bookmark The bookmark to be sent with the next request to get the next
      * page.
      */
-    .post("/api/:tableId/search", internalSearchValidator(), (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.search)
+    .post("/api/:tableId/search", internalSearchValidator(), (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     // DEPRECATED - this is an old API, but for backwards compat it needs to be
     // supported still
-    .post("/api/search/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.search)
+    .post("/api/search/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     /**
      * @api {post} /api/:tableId/rows Creates a new row
      * @apiName Creates a new row
@@ -170,7 +169,7 @@ router
      * @apiSuccess {string} [_rev] If saving to an internal table a revision will also be returned.
      * @apiSuccess {object} body The contents of the row that was saved will be returned as well.
      */
-    .post("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.save)
+    .post("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.save)
     /**
      * @api {patch} /api/:tableId/rows Updates a row
      * @apiName Update a row
@@ -179,7 +178,7 @@ router
      * @apiDescription This endpoint is identical to the row creation endpoint but instead it will
      * error if an _id isn't provided, it will only function for existing rows.
      */
-    .patch("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.patch)
+    .patch("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.patch)
     /**
      * @api {post} /api/:tableId/rows/validate Validate inputs for a row
      * @apiName Validate inputs for a row
@@ -200,7 +199,7 @@ router
      * which do not match the table schema. The key name will be the column names that have breached
      * the schema.
      */
-    .post("/api/:tableId/rows/validate", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.validate)
+    .post("/api/:tableId/rows/validate", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.validate)
     /**
      * @api {delete} /api/:tableId/rows Delete rows
      * @apiName Delete rows
@@ -221,7 +220,7 @@ router
      * of the deleted rows, if deleting a single row then the body will contain a "row" property which
      * is the deleted row.
      */
-    .delete("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.destroy)
+    .delete("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.destroy)
     /**
      * @api {post} /api/:tableId/rows/exportRows Export Rows
      * @apiName Export rows
@@ -235,5 +234,5 @@ router
      *
      * @apiSuccess {object[]|object}
      */
-    .post("/api/:tableId/rows/exportRows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.exportRows);
+    .post("/api/:tableId/rows/exportRows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.exportRows);
 exports.default = router;

package/dist/api/routes/screen.js

@@ -1,38 +1,12 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/screen"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/screen");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const { screenValidator } = require("./utils/validators");
+const router = new Router();
 router
-    .get("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .post("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.screenValidator)(), controller.save)
-    .delete("/api/screens/:screenId/:screenRev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
+    .get("/api/screens", authorized(BUILDER), controller.fetch)
+    .post("/api/screens", authorized(BUILDER), screenValidator(), controller.save)
+    .delete("/api/screens/:screenId/:screenRev", authorized(BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/script.js

@@ -1,34 +1,8 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/script"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const router = new router_1.default();
-router.post("/api/script", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.save);
+const Router = require("@koa/router");
+const controller = require("../controllers/script");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const router = new Router();
+router.post("/api/script", authorized(BUILDER), controller.save);
 module.exports = router;

package/dist/api/routes/static.js

@@ -34,14 +34,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
+Object.defineProperty(exports, "__esModule", { value: true });
 const router_1 = __importDefault(require("@koa/router"));
 const controller = __importStar(require("../controllers/static"));
 const budibaseDir_1 = require("../../utilities/budibaseDir");
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
+const permissions_1 = require("@budibase/backend-core/permissions");
 const env = __importStar(require("../../environment"));
 const resourceId_1 = require("../../middleware/resourceId");
-const { BUILDER, PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 /* istanbul ignore next */
 router.param("file", (file, ctx, next) => __awaiter(void 0, void 0, void 0, function* () {
@@ -67,13 +67,13 @@ if (env.isDev()) {
 router
     // TODO: for now this builder endpoint is not authorized/secured, will need to be
     .get("/builder/:file*", controller.serveBuilder)
-    .post("/api/attachments/process", (0, authorized_1.default)(BUILDER), controller.uploadFile)
-    .post("/api/attachments/delete", (0, authorized_1.default)(BUILDER), controller.deleteObjects)
+    .post("/api/attachments/process", (0, authorized_1.default)(permissions_1.BUILDER), controller.uploadFile)
+    .post("/api/attachments/delete", (0, authorized_1.default)(permissions_1.BUILDER), controller.deleteObjects)
     .post("/api/beta/:feature", controller.toggleBetaUiFeature)
-    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.uploadFile)
-    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.deleteObjects)
-    .get("/app/preview", (0, authorized_1.default)(BUILDER), controller.serveBuilderPreview)
+    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.WRITE), controller.uploadFile)
+    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.WRITE), controller.deleteObjects)
+    .get("/app/preview", (0, authorized_1.default)(permissions_1.BUILDER), controller.serveBuilderPreview)
     .get("/:appId/:path*", controller.serveApp)
     .get("/app/:appUrl/:path*", controller.serveApp)
-    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), controller.getSignedUploadURL);
-module.exports = router;
+    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.READ), controller.getSignedUploadURL);
+exports.default = router;

package/dist/api/routes/table.js

@@ -1,38 +1,11 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const tableController = __importStar(require("../controllers/table"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const resourceId_1 = require("../../middleware/resourceId");
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const { BUILDER, PermissionLevel, PermissionType } = backend_core_1.permissions;
-const router = new router_1.default();
+const Router = require("@koa/router");
+const tableController = require("../controllers/table");
+const authorized = require("../../middleware/authorized");
+const { paramResource, bodyResource } = require("../../middleware/resourceId");
+const { BUILDER, PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
+const { tableValidator } = require("./utils/validators");
+const router = new Router();
 router
     /**
      * @api {get} /api/tables Fetch all tables
@@ -46,7 +19,7 @@ router
      * @apiSuccess {object[]} body The response body will be the list of tables that was found - as
      * this does not take any parameters the only error scenario is no access.
      */
-    .get("/api/tables", (0, authorized_1.default)(BUILDER), tableController.fetch)
+    .get("/api/tables", authorized(BUILDER), tableController.fetch)
     /**
      * @api {get} /api/tables/:id Fetch a single table
      * @apiName Fetch a single table
@@ -59,7 +32,7 @@ router
      *
      * @apiSuccess {object[]} body The response body will be the table that was found.
      */
-    .get("/api/tables/:tableId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ, { schema: true }), tableController.find)
+    .get("/api/tables/:tableId", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ, { schema: true }), tableController.find)
     /**
      * @api {post} /api/tables Save a table
      * @apiName Save a table
@@ -135,7 +108,7 @@ router
      */
     .post("/api/tables", 
 // allows control over updating a table
-(0, resourceId_1.bodyResource)("_id"), (0, authorized_1.default)(BUILDER), (0, validators_1.tableValidator)(), tableController.save)
+bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save)
     /**
      * @api {post} /api/tables/csv/validate Validate a CSV for a table
      * @apiName Validate a CSV for a table
@@ -156,7 +129,7 @@ router
      * @apiSuccess {object} schema The response body will contain a "schema" object that represents the schema found for
      * the CSV - this will be in the same format used for table schema.s
      */
-    .post("/api/tables/csv/validate", (0, authorized_1.default)(BUILDER), tableController.validateCSVSchema)
+    .post("/api/tables/csv/validate", authorized(BUILDER), tableController.validateCSVSchema)
     /**
      * @api {post} /api/tables/:tableId/:revId Delete a table
      * @apiName Delete a table
@@ -171,7 +144,7 @@ router
      *
      * @apiSuccess {string} message A message stating that the table was deleted successfully.
      */
-    .delete("/api/tables/:tableId/:revId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.destroy)
+    .delete("/api/tables/:tableId/:revId", paramResource("tableId"), authorized(BUILDER), tableController.destroy)
     /**
      * @api {post} /api/tables/:tableId/:revId Import CSV to existing table
      * @apiName Import CSV to existing table
@@ -189,5 +162,5 @@ router
      *
      * @apiSuccess {string} message A message stating that the data was imported successfully.
      */
-    .post("/api/tables/:tableId/import", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.bulkImport);
+    .post("/api/tables/:tableId/import", paramResource("tableId"), authorized(BUILDER), tableController.bulkImport);
 module.exports = router;

package/dist/api/routes/templates.js

@@ -1,36 +1,10 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/templates"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/templates");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const router = new Router();
 router
-    .get("/api/templates", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .get("/api/templates/:type/:name", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.downloadTemplate);
+    .get("/api/templates", authorized(BUILDER), controller.fetch)
+    .get("/api/templates/:type/:name", authorized(BUILDER), controller.downloadTemplate);
 module.exports = router;

package/dist/api/routes/tests/utilities/TestFunctions.js

@@ -36,8 +36,10 @@ exports.runInProd = exports.testAutomation = exports.getDB = exports.checkPermis
 const rowController = __importStar(require("../../../controllers/row"));
 const appController = __importStar(require("../../../controllers/application"));
 const utils_1 = require("../../../../db/utils");
-const backend_core_1 = require("@budibase/backend-core");
+const roles_1 = require("@budibase/backend-core/roles");
+const tenancy_1 = require("@budibase/backend-core/tenancy");
 const structures_1 = require("../../../../tests/utilities/structures");
+const context_1 = require("@budibase/backend-core/context");
 const env = __importStar(require("../../../../environment"));
 class Request {
     constructor(appId, params) {
@@ -47,7 +49,7 @@ class Request {
     }
 }
 function runRequest(appId, controlFunc, request) {
-    return backend_core_1.context.doInAppContext(appId, () => __awaiter(this, void 0, void 0, function* () {
+    return (0, context_1.doInAppContext)(appId, () => __awaiter(this, void 0, void 0, function* () {
         return controlFunc(request);
     }));
 }
@@ -58,7 +60,7 @@ const getAllTableRows = (config) => __awaiter(void 0, void 0, void 0, function*
 });
 exports.getAllTableRows = getAllTableRows;
 const clearAllApps = (tenantId = structures_1.TENANT_ID) => __awaiter(void 0, void 0, void 0, function* () {
-    yield backend_core_1.tenancy.doInTenant(tenantId, () => __awaiter(void 0, void 0, void 0, function* () {
+    yield (0, tenancy_1.doInTenant)(tenantId, () => __awaiter(void 0, void 0, void 0, function* () {
         const req = { query: { status: utils_1.AppStatus.DEV }, user: { tenantId } };
         yield appController.fetch(req);
         const apps = req.body;
@@ -76,7 +78,7 @@ exports.clearAllApps = clearAllApps;
 const clearAllAutomations = (config) => __awaiter(void 0, void 0, void 0, function* () {
     const automations = yield config.getAllAutomations();
     for (let auto of automations) {
-        yield backend_core_1.context.doInAppContext(config.appId, () => __awaiter(void 0, void 0, void 0, function* () {
+        yield (0, context_1.doInAppContext)(config.appId, () => __awaiter(void 0, void 0, void 0, function* () {
             yield config.deleteAutomation(auto);
         }));
     }
@@ -119,7 +121,7 @@ const checkPermissionsEndpoint = ({ config, method, url, body, passRole, failRol
         .set(passHeader)
         .expect(200);
     let failHeader;
-    if (failRole === backend_core_1.roles.BUILTIN_ROLE_IDS.PUBLIC) {
+    if (failRole === roles_1.BUILTIN_ROLE_IDS.PUBLIC) {
         failHeader = config.publicHeaders({ prodApp: true });
     }
     else {
@@ -136,7 +138,7 @@ const checkPermissionsEndpoint = ({ config, method, url, body, passRole, failRol
 });
 exports.checkPermissionsEndpoint = checkPermissionsEndpoint;
 const getDB = () => {
-    return backend_core_1.context.getAppDB();
+    return (0, context_1.getAppDB)();
 };
 exports.getDB = getDB;
 const testAutomation = (config, automation) => __awaiter(void 0, void 0, void 0, function* () {

package/dist/api/routes/user.js

@@ -1,43 +1,16 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/user"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const { PermissionType, PermissionLevel } = backend_core_1.permissions;
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/user");
+const authorized = require("../../middleware/authorized");
+const { PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
+const router = new Router();
 router
-    .get("/api/users/metadata", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.READ), controller.fetchMetadata)
-    .get("/api/users/metadata/:id", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.READ), controller.findMetadata)
-    .put("/api/users/metadata", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.WRITE), controller.updateMetadata)
-    .post("/api/users/metadata/self", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.WRITE), controller.updateSelfMetadata)
-    .delete("/api/users/metadata/:id", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.WRITE), controller.destroyMetadata)
-    .post("/api/users/metadata/sync/:id", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.WRITE), controller.syncUser)
-    .post("/api/users/flags", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.WRITE), controller.setFlag)
-    .get("/api/users/flags", (0, authorized_1.default)(PermissionType.USER, PermissionLevel.READ), controller.getFlags);
+    .get("/api/users/metadata", authorized(PermissionTypes.USER, PermissionLevels.READ), controller.fetchMetadata)
+    .get("/api/users/metadata/:id", authorized(PermissionTypes.USER, PermissionLevels.READ), controller.findMetadata)
+    .put("/api/users/metadata", authorized(PermissionTypes.USER, PermissionLevels.WRITE), controller.updateMetadata)
+    .post("/api/users/metadata/self", authorized(PermissionTypes.USER, PermissionLevels.WRITE), controller.updateSelfMetadata)
+    .delete("/api/users/metadata/:id", authorized(PermissionTypes.USER, PermissionLevels.WRITE), controller.destroyMetadata)
+    .post("/api/users/metadata/sync/:id", authorized(PermissionTypes.USER, PermissionLevels.WRITE), controller.syncUser)
+    .post("/api/users/flags", authorized(PermissionTypes.USER, PermissionLevels.WRITE), controller.setFlag)
+    .get("/api/users/flags", authorized(PermissionTypes.USER, PermissionLevels.READ), controller.getFlags);
 module.exports = router;