@malevich-studio/strapi-sdk-typescript 1.2.28 → 1.2.29

package/dist/index.d.ts

@@ -192,7 +192,7 @@ declare class Strapi {
     uploadForm(form: FormData): Promise<File[]>;
     private baseFetch;
     private permissionsList?;
-    private mergePermissionsPreferChild;
+    private mergePermissionsPreferEnabled;
     private fetchRolePermissions;
     private collectRolePermissions;
     can(uid: string, controller: string, action: string): Promise<boolean>;

package/dist/index.mjs

@@ -21409,9 +21409,17 @@ class Strapi {
         log(data);
         return data;
     }
-    mergePermissionsPreferChild(parentPermissions, childPermissions) {
-        // Child permissions should override parent on conflicts; missing entries inherit from parent
-        return _.merge({}, parentPermissions, childPermissions);
+    mergePermissionsPreferEnabled(parentPermissions, childPermissions) {
+        // Merge permissions so that any action enabled in either source remains enabled in the result
+        const customizer = (objValue, srcValue, key) => {
+            if (key === 'enabled') {
+                const a = typeof objValue === 'boolean' ? objValue : false;
+                const b = typeof srcValue === 'boolean' ? srcValue : false;
+                return a || b;
+            }
+            return undefined; // fall back to default merge behavior
+        };
+        return _.mergeWith({}, parentPermissions, childPermissions, customizer);
     }
     async fetchRolePermissions(roleId) {
         const response = await this.fetchData(`users-permissions/roles/${roleId}`);
@@ -21425,7 +21433,7 @@ class Strapi {
         let currentParentId = initialParentId;
         while (currentParentId) {
             const { permissions: parentPermissions, parentId } = await this.fetchRolePermissions(currentParentId);
-            accumulatedPermissions = this.mergePermissionsPreferChild(parentPermissions, accumulatedPermissions);
+            accumulatedPermissions = this.mergePermissionsPreferEnabled(parentPermissions, accumulatedPermissions);
             currentParentId = parentId;
         }
         return accumulatedPermissions;