@budibase/server 2.1.43-alpha.6 → 2.1.44

package/dist/api/routes/public/index.js

@@ -17,8 +17,8 @@ const environment_1 = __importDefault(require("../../../environment"));
 // below imports don't have declaration files
 const Router = require("@koa/router");
 const { RateLimit, Stores } = require("koa2-ratelimit");
-const backend_core_1 = require("@budibase/backend-core");
-const { PermissionType, PermissionLevel } = backend_core_1.permissions;
+const { PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
+const { getRedisOptions } = require("@budibase/backend-core/redis").utils;
 const PREFIX = "/api/public/v1";
 // allow a lot more requests when in test
 const DEFAULT_API_REQ_LIMIT_PER_SEC = environment_1.default.isTest() ? 100 : 10;
@@ -30,7 +30,7 @@ function getApiLimitPerSecond() {
 }
 let rateLimitStore = null;
 if (!environment_1.default.isTest()) {
-    const REDIS_OPTS = backend_core_1.redis.utils.getRedisOptions();
+    const REDIS_OPTS = getRedisOptions();
     let options;
     if (REDIS_OPTS.redisProtocolUrl) {
         // fully qualified redis URL
@@ -91,7 +91,7 @@ function applyRoutes(endpoints, permType, resource, subResource) {
         ? (0, resourceId_1.paramSubResource)(resource, subResource)
         : (0, resourceId_1.paramResource)(resource);
     const publicApiMiddleware = (0, publicApi_1.default)({
-        requiresAppId: permType !== PermissionType.APP && permType !== PermissionType.USER,
+        requiresAppId: permType !== PermissionTypes.APP && permType !== PermissionTypes.USER,
     });
     addMiddleware(endpoints.read, publicApiMiddleware);
     addMiddleware(endpoints.write, publicApiMiddleware);
@@ -99,20 +99,20 @@ function applyRoutes(endpoints, permType, resource, subResource) {
     addMiddleware(endpoints.read, paramMiddleware);
     addMiddleware(endpoints.write, paramMiddleware);
     // add the authorization middleware, using the correct perm type
-    addMiddleware(endpoints.read, (0, authorized_1.default)(permType, PermissionLevel.READ));
-    addMiddleware(endpoints.write, (0, authorized_1.default)(permType, PermissionLevel.WRITE));
+    addMiddleware(endpoints.read, (0, authorized_1.default)(permType, PermissionLevels.READ));
+    addMiddleware(endpoints.write, (0, authorized_1.default)(permType, PermissionLevels.WRITE));
     // add the output mapper middleware
     addMiddleware(endpoints.read, mapper_1.default, { output: true });
     addMiddleware(endpoints.write, mapper_1.default, { output: true });
     addToRouter(endpoints.read);
     addToRouter(endpoints.write);
 }
-applyRoutes(applications_1.default, PermissionType.APP, "appId");
-applyRoutes(tables_1.default, PermissionType.TABLE, "tableId");
-applyRoutes(users_1.default, PermissionType.USER, "userId");
-applyRoutes(queries_1.default, PermissionType.QUERY, "queryId");
+applyRoutes(applications_1.default, PermissionTypes.APP, "appId");
+applyRoutes(tables_1.default, PermissionTypes.TABLE, "tableId");
+applyRoutes(users_1.default, PermissionTypes.USER, "userId");
+applyRoutes(queries_1.default, PermissionTypes.QUERY, "queryId");
 // needs to be applied last for routing purposes, don't override other endpoints
-applyRoutes(rows_1.default, PermissionType.TABLE, "tableId", "rowId");
+applyRoutes(rows_1.default, PermissionTypes.TABLE, "tableId", "rowId");
 exports.default = publicRouter;
 const shutdown = () => {
     if (rateLimitStore) {

package/dist/api/routes/query.js

@@ -1,46 +1,19 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const queryController = __importStar(require("../controllers/query"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const resourceId_1 = require("../../middleware/resourceId");
-const validation_1 = require("../controllers/query/validation");
-const { BUILDER, PermissionType, PermissionLevel } = backend_core_1.permissions;
-const router = new router_1.default();
+const Router = require("@koa/router");
+const queryController = require("../controllers/query");
+const authorized = require("../../middleware/authorized");
+const { PermissionLevels, PermissionTypes, BUILDER, } = require("@budibase/backend-core/permissions");
+const { bodyResource, bodySubResource, paramResource, } = require("../../middleware/resourceId");
+const { generateQueryPreviewValidation, generateQueryValidation, } = require("../controllers/query/validation");
+const router = new Router();
 router
-    .get("/api/queries", (0, authorized_1.default)(BUILDER), queryController.fetch)
-    .post("/api/queries", (0, resourceId_1.bodySubResource)("datasourceId", "_id"), (0, authorized_1.default)(BUILDER), (0, validation_1.generateQueryValidation)(), queryController.save)
-    .post("/api/queries/import", (0, authorized_1.default)(BUILDER), queryController.import)
-    .post("/api/queries/preview", (0, resourceId_1.bodyResource)("datasourceId"), (0, authorized_1.default)(BUILDER), (0, validation_1.generateQueryPreviewValidation)(), queryController.preview)
-    .get("/api/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.READ), queryController.find)
+    .get("/api/queries", authorized(BUILDER), queryController.fetch)
+    .post("/api/queries", bodySubResource("datasourceId", "_id"), authorized(BUILDER), generateQueryValidation(), queryController.save)
+    .post("/api/queries/import", authorized(BUILDER), queryController.import)
+    .post("/api/queries/preview", bodyResource("datasourceId"), authorized(BUILDER), generateQueryPreviewValidation(), queryController.preview)
+    .get("/api/queries/:queryId", paramResource("queryId"), authorized(PermissionTypes.QUERY, PermissionLevels.READ), queryController.find)
     // DEPRECATED - use new query endpoint for future work
-    .post("/api/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV1)
-    .delete("/api/queries/:queryId/:revId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(BUILDER), queryController.destroy)
-    .post("/api/v2/queries/:queryId", (0, resourceId_1.paramResource)("queryId"), (0, authorized_1.default)(PermissionType.QUERY, PermissionLevel.WRITE), queryController.executeV2);
+    .post("/api/queries/:queryId", paramResource("queryId"), authorized(PermissionTypes.QUERY, PermissionLevels.WRITE), queryController.executeV1)
+    .post("/api/v2/queries/:queryId", paramResource("queryId"), authorized(PermissionTypes.QUERY, PermissionLevels.WRITE), queryController.executeV2)
+    .delete("/api/queries/:queryId/:revId", paramResource("queryId"), authorized(BUILDER), queryController.destroy);
 module.exports = router;

package/dist/api/routes/role.js

@@ -1,39 +1,13 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/role"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/role");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const { roleValidator } = require("./utils/validators");
+const router = new Router();
 router
-    .post("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.roleValidator)(), controller.save)
-    .get("/api/roles", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .get("/api/roles/:roleId", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.find)
-    .delete("/api/roles/:roleId/:rev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
+    .post("/api/roles", authorized(BUILDER), roleValidator(), controller.save)
+    .get("/api/roles", authorized(BUILDER), controller.fetch)
+    .get("/api/roles/:roleId", authorized(BUILDER), controller.find)
+    .delete("/api/roles/:roleId/:rev", authorized(BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/routing.js

@@ -1,38 +1,12 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const controller = __importStar(require("../controllers/routing"));
-const router = new router_1.default();
+const Router = require("@koa/router");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const controller = require("../controllers/routing");
+const router = new Router();
 router
     // gets correct structure for user role
     .get("/api/routing/client", controller.clientFetch)
     // gets the full structure, not just the correct screen ID for user role
-    .get("/api/routing", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch);
+    .get("/api/routing", authorized(BUILDER), controller.fetch);
 module.exports = router;

package/dist/api/routes/row.js

@@ -30,9 +30,8 @@ const router_1 = __importDefault(require("@koa/router"));
 const rowController = __importStar(require("../controllers/row"));
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
 const resourceId_1 = require("../../middleware/resourceId");
-const backend_core_1 = require("@budibase/backend-core");
+const { PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
 const { internalSearchValidator } = require("./utils/validators");
-const { PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 router
     /**
@@ -49,7 +48,7 @@ router
      *
      * @apiSuccess {object} row The response body will be the enriched row.
      */
-    .get("/api/:tableId/:rowId/enrich", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.fetchEnrichedRow)
+    .get("/api/:tableId/:rowId/enrich", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetchEnrichedRow)
     /**
      * @api {get} /api/:tableId/rows Get all rows in a table
      * @apiName Get all rows in a table
@@ -64,7 +63,7 @@ router
      *
      * @apiSuccess {object[]} rows The response body will be an array of all rows found.
      */
-    .get("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.fetch)
+    .get("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.fetch)
     /**
      * @api {get} /api/:tableId/rows/:rowId Retrieve a single row
      * @apiName Retrieve a single row
@@ -78,7 +77,7 @@ router
      *
      * @apiSuccess {object} body The response body will be the row that was found.
      */
-    .get("/api/:tableId/rows/:rowId", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.find)
+    .get("/api/:tableId/rows/:rowId", (0, resourceId_1.paramSubResource)("tableId", "rowId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.find)
     /**
      * @api {post} /api/:tableId/search Search for rows in a table
      * @apiName Search for rows in a table
@@ -142,10 +141,10 @@ router
      * @apiSuccess {string} bookmark The bookmark to be sent with the next request to get the next
      * page.
      */
-    .post("/api/:tableId/search", internalSearchValidator(), (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.search)
+    .post("/api/:tableId/search", internalSearchValidator(), (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     // DEPRECATED - this is an old API, but for backwards compat it needs to be
     // supported still
-    .post("/api/search/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), rowController.search)
+    .post("/api/search/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.READ), rowController.search)
     /**
      * @api {post} /api/:tableId/rows Creates a new row
      * @apiName Creates a new row
@@ -170,7 +169,7 @@ router
      * @apiSuccess {string} [_rev] If saving to an internal table a revision will also be returned.
      * @apiSuccess {object} body The contents of the row that was saved will be returned as well.
      */
-    .post("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.save)
+    .post("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.save)
     /**
      * @api {patch} /api/:tableId/rows Updates a row
      * @apiName Update a row
@@ -179,7 +178,7 @@ router
      * @apiDescription This endpoint is identical to the row creation endpoint but instead it will
      * error if an _id isn't provided, it will only function for existing rows.
      */
-    .patch("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.patch)
+    .patch("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.patch)
     /**
      * @api {post} /api/:tableId/rows/validate Validate inputs for a row
      * @apiName Validate inputs for a row
@@ -200,7 +199,7 @@ router
      * which do not match the table schema. The key name will be the column names that have breached
      * the schema.
      */
-    .post("/api/:tableId/rows/validate", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.validate)
+    .post("/api/:tableId/rows/validate", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.validate)
     /**
      * @api {delete} /api/:tableId/rows Delete rows
      * @apiName Delete rows
@@ -221,7 +220,7 @@ router
      * of the deleted rows, if deleting a single row then the body will contain a "row" property which
      * is the deleted row.
      */
-    .delete("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.destroy)
+    .delete("/api/:tableId/rows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.destroy)
     /**
      * @api {post} /api/:tableId/rows/exportRows Export Rows
      * @apiName Export rows
@@ -235,5 +234,5 @@ router
      *
      * @apiSuccess {object[]|object}
      */
-    .post("/api/:tableId/rows/exportRows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), rowController.exportRows);
+    .post("/api/:tableId/rows/exportRows", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionTypes.TABLE, PermissionLevels.WRITE), rowController.exportRows);
 exports.default = router;

package/dist/api/routes/screen.js

@@ -1,38 +1,12 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/screen"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/screen");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const { screenValidator } = require("./utils/validators");
+const router = new Router();
 router
-    .get("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .post("/api/screens", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), (0, validators_1.screenValidator)(), controller.save)
-    .delete("/api/screens/:screenId/:screenRev", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.destroy);
+    .get("/api/screens", authorized(BUILDER), controller.fetch)
+    .post("/api/screens", authorized(BUILDER), screenValidator(), controller.save)
+    .delete("/api/screens/:screenId/:screenRev", authorized(BUILDER), controller.destroy);
 module.exports = router;

package/dist/api/routes/script.js

@@ -1,34 +1,8 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/script"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const router = new router_1.default();
-router.post("/api/script", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.save);
+const Router = require("@koa/router");
+const controller = require("../controllers/script");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const router = new Router();
+router.post("/api/script", authorized(BUILDER), controller.save);
 module.exports = router;

package/dist/api/routes/static.js

@@ -34,14 +34,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
+Object.defineProperty(exports, "__esModule", { value: true });
 const router_1 = __importDefault(require("@koa/router"));
 const controller = __importStar(require("../controllers/static"));
 const budibaseDir_1 = require("../../utilities/budibaseDir");
 const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
+const permissions_1 = require("@budibase/backend-core/permissions");
 const env = __importStar(require("../../environment"));
 const resourceId_1 = require("../../middleware/resourceId");
-const { BUILDER, PermissionType, PermissionLevel } = backend_core_1.permissions;
 const router = new router_1.default();
 /* istanbul ignore next */
 router.param("file", (file, ctx, next) => __awaiter(void 0, void 0, void 0, function* () {
@@ -67,13 +67,13 @@ if (env.isDev()) {
 router
     // TODO: for now this builder endpoint is not authorized/secured, will need to be
     .get("/builder/:file*", controller.serveBuilder)
-    .post("/api/attachments/process", (0, authorized_1.default)(BUILDER), controller.uploadFile)
-    .post("/api/attachments/delete", (0, authorized_1.default)(BUILDER), controller.deleteObjects)
+    .post("/api/attachments/process", (0, authorized_1.default)(permissions_1.BUILDER), controller.uploadFile)
+    .post("/api/attachments/delete", (0, authorized_1.default)(permissions_1.BUILDER), controller.deleteObjects)
     .post("/api/beta/:feature", controller.toggleBetaUiFeature)
-    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.uploadFile)
-    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.WRITE), controller.deleteObjects)
-    .get("/app/preview", (0, authorized_1.default)(BUILDER), controller.serveBuilderPreview)
+    .post("/api/attachments/:tableId/upload", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.WRITE), controller.uploadFile)
+    .post("/api/attachments/:tableId/delete", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.WRITE), controller.deleteObjects)
+    .get("/app/preview", (0, authorized_1.default)(permissions_1.BUILDER), controller.serveBuilderPreview)
     .get("/:appId/:path*", controller.serveApp)
     .get("/app/:appUrl/:path*", controller.serveApp)
-    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ), controller.getSignedUploadURL);
-module.exports = router;
+    .post("/api/attachments/:datasourceId/url", (0, authorized_1.default)(permissions_1.PermissionTypes.TABLE, permissions_1.PermissionLevels.READ), controller.getSignedUploadURL);
+exports.default = router;

package/dist/api/routes/table.js

@@ -1,38 +1,11 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const tableController = __importStar(require("../controllers/table"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const resourceId_1 = require("../../middleware/resourceId");
-const backend_core_1 = require("@budibase/backend-core");
-const validators_1 = require("./utils/validators");
-const { BUILDER, PermissionLevel, PermissionType } = backend_core_1.permissions;
-const router = new router_1.default();
+const Router = require("@koa/router");
+const tableController = require("../controllers/table");
+const authorized = require("../../middleware/authorized");
+const { paramResource, bodyResource } = require("../../middleware/resourceId");
+const { BUILDER, PermissionLevels, PermissionTypes, } = require("@budibase/backend-core/permissions");
+const { tableValidator } = require("./utils/validators");
+const router = new Router();
 router
     /**
      * @api {get} /api/tables Fetch all tables
@@ -46,7 +19,7 @@ router
      * @apiSuccess {object[]} body The response body will be the list of tables that was found - as
      * this does not take any parameters the only error scenario is no access.
      */
-    .get("/api/tables", (0, authorized_1.default)(BUILDER), tableController.fetch)
+    .get("/api/tables", authorized(BUILDER), tableController.fetch)
     /**
      * @api {get} /api/tables/:id Fetch a single table
      * @apiName Fetch a single table
@@ -59,7 +32,7 @@ router
      *
      * @apiSuccess {object[]} body The response body will be the table that was found.
      */
-    .get("/api/tables/:tableId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(PermissionType.TABLE, PermissionLevel.READ, { schema: true }), tableController.find)
+    .get("/api/tables/:tableId", paramResource("tableId"), authorized(PermissionTypes.TABLE, PermissionLevels.READ, { schema: true }), tableController.find)
     /**
      * @api {post} /api/tables Save a table
      * @apiName Save a table
@@ -135,7 +108,7 @@ router
      */
     .post("/api/tables", 
 // allows control over updating a table
-(0, resourceId_1.bodyResource)("_id"), (0, authorized_1.default)(BUILDER), (0, validators_1.tableValidator)(), tableController.save)
+bodyResource("_id"), authorized(BUILDER), tableValidator(), tableController.save)
     /**
      * @api {post} /api/tables/csv/validate Validate a CSV for a table
      * @apiName Validate a CSV for a table
@@ -156,7 +129,7 @@ router
      * @apiSuccess {object} schema The response body will contain a "schema" object that represents the schema found for
      * the CSV - this will be in the same format used for table schema.s
      */
-    .post("/api/tables/csv/validate", (0, authorized_1.default)(BUILDER), tableController.validateCSVSchema)
+    .post("/api/tables/csv/validate", authorized(BUILDER), tableController.validateCSVSchema)
     /**
      * @api {post} /api/tables/:tableId/:revId Delete a table
      * @apiName Delete a table
@@ -171,7 +144,7 @@ router
      *
      * @apiSuccess {string} message A message stating that the table was deleted successfully.
      */
-    .delete("/api/tables/:tableId/:revId", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.destroy)
+    .delete("/api/tables/:tableId/:revId", paramResource("tableId"), authorized(BUILDER), tableController.destroy)
     /**
      * @api {post} /api/tables/:tableId/:revId Import CSV to existing table
      * @apiName Import CSV to existing table
@@ -189,5 +162,5 @@ router
      *
      * @apiSuccess {string} message A message stating that the data was imported successfully.
      */
-    .post("/api/tables/:tableId/import", (0, resourceId_1.paramResource)("tableId"), (0, authorized_1.default)(BUILDER), tableController.bulkImport);
+    .post("/api/tables/:tableId/import", paramResource("tableId"), authorized(BUILDER), tableController.bulkImport);
 module.exports = router;

package/dist/api/routes/templates.js

@@ -1,36 +1,10 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-const router_1 = __importDefault(require("@koa/router"));
-const controller = __importStar(require("../controllers/templates"));
-const authorized_1 = __importDefault(require("../../middleware/authorized"));
-const backend_core_1 = require("@budibase/backend-core");
-const router = new router_1.default();
+const Router = require("@koa/router");
+const controller = require("../controllers/templates");
+const authorized = require("../../middleware/authorized");
+const { BUILDER } = require("@budibase/backend-core/permissions");
+const router = new Router();
 router
-    .get("/api/templates", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.fetch)
-    .get("/api/templates/:type/:name", (0, authorized_1.default)(backend_core_1.permissions.BUILDER), controller.downloadTemplate);
+    .get("/api/templates", authorized(BUILDER), controller.fetch)
+    .get("/api/templates/:type/:name", authorized(BUILDER), controller.downloadTemplate);
 module.exports = router;