@contember/engine-tenant-api 1.3.0 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contember/engine-tenant-api",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "license": "Apache-2.0",
   "main": "dist/src/index.js",
   "typings": "dist/src/index.d.ts",
@@ -13,16 +13,16 @@
     "test": "vitest --dir ./tests/cases --no-threads"
   },
   "dependencies": {
-    "@contember/authorization": "1.3.0",
-    "@contember/config-loader": "1.3.0",
-    "@contember/database": "1.3.0",
-    "@contember/database-migrations": "1.3.0",
-    "@contember/dic": "1.3.0",
-    "@contember/graphql-utils": "1.3.0",
-    "@contember/logger": "1.3.0",
-    "@contember/schema": "1.3.0",
-    "@contember/schema-utils": "1.3.0",
-    "@contember/typesafe": "1.3.0",
+    "@contember/authorization": "1.3.2",
+    "@contember/config-loader": "1.3.2",
+    "@contember/database": "1.3.2",
+    "@contember/database-migrations": "1.3.2",
+    "@contember/dic": "1.3.2",
+    "@contember/graphql-utils": "1.3.2",
+    "@contember/logger": "1.3.2",
+    "@contember/schema": "1.3.2",
+    "@contember/schema-utils": "1.3.2",
+    "@contember/typesafe": "1.3.2",
     "@graphql-tools/utils": "^8.6.13",
     "graphql-tag": "^2.12.5",
     "jose": "^4.10",
@@ -32,7 +32,7 @@
     "otpauth": "^7.0.6"
   },
   "devDependencies": {
-    "@contember/database-tester": "1.3.0",
+    "@contember/database-tester": "1.3.2",
     "@graphql-codegen/cli": "^2.6.2",
     "@graphql-codegen/typescript": "^2.5.1",
     "@graphql-codegen/typescript-operations": "^2.4.2",

package/src/model/authorization/PermissionActions.ts

@@ -57,6 +57,7 @@ namespace PermissionActions {
 	export const IDP_UPDATE = Authorizator.createAction(Resources.idp, 'update')
 	export const IDP_DISABLE = Authorizator.createAction(Resources.idp, 'disable')
 	export const IDP_ENABLE = Authorizator.createAction(Resources.idp, 'enable')
+	export const IDP_LIST = Authorizator.createAction(Resources.idp, 'list')
 }
 
 export { PermissionActions }

package/src/model/authorization/PermissionsFactory.ts

@@ -57,6 +57,7 @@ class PermissionsFactory {
 		permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)
 		permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)
 		permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)
+		permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)
 
 		permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)
 

package/src/resolvers/query/IDPQueryResolver.ts

@@ -1,9 +1,14 @@
 import { IdentityProvider, QueryResolvers } from '../../schema'
-import { IdentityProvidersQuery } from '../../model'
+import { IdentityProvidersQuery, PermissionActions } from '../../model'
 import { TenantResolverContext } from '../TenantResolverContext'
 
 export class IDPQueryResolver implements QueryResolvers {
 	async identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {
+		await context.requireAccess({
+			action: PermissionActions.IDP_LIST,
+			message: 'You are not allowed to list IDP',
+		})
+
 		return await context.db.queryHandler.fetch(new IdentityProvidersQuery())
 	}
 }