@mercurjs/core 2.3.2-canary.1 → 2.3.2-canary.2

package/.medusa/server/src/api/vendor/order-edits/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorOrderEditsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const framework_1 = require("@medusajs/framework");
 const helpers_1 = require("../orders/helpers");
 const validators_1 = require("./validators");
@@ -24,21 +26,45 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsReq),
             assertSellerOwnsOrderInBody,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.create,
+            },
+        ],
     },
     {
         method: ["DELETE"],
         matcher: "/vendor/order-edits/:id",
         middlewares: [assertSellerOwnsOrderInParam],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.delete,
+            },
+        ],
     },
     {
         method: ["POST"],
         matcher: "/vendor/order-edits/:id/request",
         middlewares: [assertSellerOwnsOrderInParam],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
         matcher: "/vendor/order-edits/:id/confirm",
         middlewares: [assertSellerOwnsOrderInParam],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -47,6 +73,12 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsAddItemsReq),
             assertSellerOwnsOrderInParam,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -55,11 +87,23 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsItemsActionReq),
             assertSellerOwnsOrderInParam,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["DELETE"],
         matcher: "/vendor/order-edits/:id/items/:action_id",
         middlewares: [assertSellerOwnsOrderInParam],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.delete,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -68,6 +112,12 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsUpdateItemQuantityReq),
             assertSellerOwnsOrderInParam,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -76,6 +126,12 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsShippingReq),
             assertSellerOwnsOrderInParam,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -84,11 +140,23 @@ exports.vendorOrderEditsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderEditsShippingActionReq),
             assertSellerOwnsOrderInParam,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["DELETE"],
         matcher: "/vendor/order-edits/:id/shipping-method/:action_id",
         middlewares: [assertSellerOwnsOrderInParam],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order_change,
+                operation: utils_1.PolicyOperation.delete,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9vcmRlci1lZGl0cy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFNQSxtREFBOEQ7QUFFOUQsK0NBQXVEO0FBQ3ZELDZDQU9xQjtBQUVyQixNQUFNLDJCQUEyQixHQUFHLEtBQUssRUFDdkMsR0FBcUQsRUFDckQsSUFBb0IsRUFDcEIsSUFBd0IsRUFDeEIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sT0FBTyxHQUFHLEdBQUcsQ0FBQyxhQUFjLENBQUMsUUFBUSxDQUFBO0lBQzNDLE1BQU0sSUFBQSw2QkFBbUIsRUFBQyxHQUFHLENBQUMsS0FBSyxFQUFFLFFBQVEsRUFBRSxPQUFPLENBQUMsQ0FBQTtJQUN2RCxPQUFPLElBQUksRUFBRSxDQUFBO0FBQ2YsQ0FBQyxDQUFBO0FBRUQsTUFBTSw0QkFBNEIsR0FBRyxLQUFLLEVBQ3hDLEdBQStCLEVBQy9CLElBQW9CLEVBQ3BCLElBQXdCLEVBQ3hCLEVBQUU7SUFDRixNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsQ0FBQTtJQUM5QyxNQUFNLEVBQUUsRUFBRSxFQUFFLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQTtJQUN6QixNQUFNLElBQUEsNkJBQW1CLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxRQUFRLEVBQUUsRUFBRSxDQUFDLENBQUE7SUFDbEQsT0FBTyxJQUFJLEVBQUUsQ0FBQTtBQUNmLENBQUMsQ0FBQTtBQUVZLFFBQUEsMkJBQTJCLEdBQXNCO0lBQzVEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSxxQkFBcUI7UUFDOUIsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyxvQ0FBdUIsQ0FBQztZQUNqRCwyQkFBMkI7U0FDNUI7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsUUFBUSxDQUFDO1FBQ2xCLE9BQU8sRUFBRSx5QkFBeUI7UUFDbEMsV0FBVyxFQUFFLENBQUMsNEJBQTRCLENBQUM7S0FDNUM7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsaUNBQWlDO1FBQzFDLFdBQVcsRUFBRSxDQUFDLDRCQUE0QixDQUFDO0tBQzVDO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLGlDQUFpQztRQUMxQyxXQUFXLEVBQUUsQ0FBQyw0QkFBNEIsQ0FBQztLQUM1QztJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSwrQkFBK0I7UUFDeEMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyw0Q0FBK0IsQ0FBQztZQUN6RCw0QkFBNEI7U0FDN0I7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSwwQ0FBMEM7UUFDbkQsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQywrQ0FBa0MsQ0FBQztZQUM1RCw0QkFBNEI7U0FDN0I7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsUUFBUSxDQUFDO1FBQ2xCLE9BQU8sRUFBRSwwQ0FBMEM7UUFDbkQsV0FBVyxFQUFFLENBQUMsNEJBQTRCLENBQUM7S0FDNUM7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsNkNBQTZDO1FBQ3RELFdBQVcsRUFBRTtZQUNYLElBQUEsb0NBQXdCLEVBQUMsc0RBQXlDLENBQUM7WUFDbkUsNEJBQTRCO1NBQzdCO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUseUNBQXlDO1FBQ2xELFdBQVcsRUFBRTtZQUNYLElBQUEsb0NBQXdCLEVBQUMsNENBQStCLENBQUM7WUFDekQsNEJBQTRCO1NBQzdCO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsb0RBQW9EO1FBQzdELFdBQVcsRUFBRTtZQUNYLElBQUEsb0NBQXdCLEVBQUMsa0RBQXFDLENBQUM7WUFDL0QsNEJBQTRCO1NBQzdCO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLFFBQVEsQ0FBQztRQUNsQixPQUFPLEVBQUUsb0RBQW9EO1FBQzdELFdBQVcsRUFBRSxDQUFDLDRCQUE0QixDQUFDO0tBQzVDO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9vcmRlci1lZGl0cy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxtRUFBNkQ7QUFDN0QscURBQTJEO0FBTzNELG1EQUE4RDtBQUU5RCwrQ0FBdUQ7QUFDdkQsNkNBT3FCO0FBRXJCLE1BQU0sMkJBQTJCLEdBQUcsS0FBSyxFQUN2QyxHQUFxRCxFQUNyRCxJQUFvQixFQUNwQixJQUF3QixFQUN4QixFQUFFO0lBQ0YsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLENBQUE7SUFDOUMsTUFBTSxPQUFPLEdBQUcsR0FBRyxDQUFDLGFBQWMsQ0FBQyxRQUFRLENBQUE7SUFDM0MsTUFBTSxJQUFBLDZCQUFtQixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsUUFBUSxFQUFFLE9BQU8sQ0FBQyxDQUFBO0lBQ3ZELE9BQU8sSUFBSSxFQUFFLENBQUE7QUFDZixDQUFDLENBQUE7QUFFRCxNQUFNLDRCQUE0QixHQUFHLEtBQUssRUFDeEMsR0FBK0IsRUFDL0IsSUFBb0IsRUFDcEIsSUFBd0IsRUFDeEIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBQ3pCLE1BQU0sSUFBQSw2QkFBbUIsRUFBQyxHQUFHLENBQUMsS0FBSyxFQUFFLFFBQVEsRUFBRSxFQUFFLENBQUMsQ0FBQTtJQUNsRCxPQUFPLElBQUksRUFBRSxDQUFBO0FBQ2YsQ0FBQyxDQUFBO0FBRVksUUFBQSwyQkFBMkIsR0FBc0I7SUFDNUQ7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLHFCQUFxQjtRQUM5QixXQUFXLEVBQUU7WUFDWCxJQUFBLG9DQUF3QixFQUFDLG9DQUF1QixDQUFDO1lBQ2pELDJCQUEyQjtTQUM1QjtRQUNELFFBQVEsRUFBRTtZQUNSO2dCQUNFLFFBQVEsRUFBRSxpQ0FBYyxDQUFDLFlBQVk7Z0JBQ3JDLFNBQVMsRUFBRSx1QkFBZSxDQUFDLE1BQU07YUFDbEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUM7UUFDbEIsT0FBTyxFQUFFLHlCQUF5QjtRQUNsQyxXQUFXLEVBQUUsQ0FBQyw0QkFBNEIsQ0FBQztRQUMzQyxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxZQUFZO2dCQUNyQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxNQUFNO2FBQ2xDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSxpQ0FBaUM7UUFDMUMsV0FBVyxFQUFFLENBQUMsNEJBQTRCLENBQUM7UUFDM0MsUUFBUSxFQUFFO1lBQ1I7Z0JBQ0UsUUFBUSxFQUFFLGlDQUFjLENBQUMsWUFBWTtnQkFDckMsU0FBUyxFQUFFLHVCQUFlLENBQUMsTUFBTTthQUNsQztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsaUNBQWlDO1FBQzFDLFdBQVcsRUFBRSxDQUFDLDRCQUE0QixDQUFDO1FBQzNDLFFBQVEsRUFBRTtZQUNSO2dCQUNFLFFBQVEsRUFBRSxpQ0FBYyxDQUFDLFlBQVk7Z0JBQ3JDLFNBQVMsRUFBRSx1QkFBZSxDQUFDLE1BQU07YUFDbEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLCtCQUErQjtRQUN4QyxXQUFXLEVBQUU7WUFDWCxJQUFBLG9DQUF3QixFQUFDLDRDQUErQixDQUFDO1lBQ3pELDRCQUE0QjtTQUM3QjtRQUNELFFBQVEsRUFBRTtZQUNSO2dCQUNFLFFBQVEsRUFBRSxpQ0FBYyxDQUFDLFlBQVk7Z0JBQ3JDLFNBQVMsRUFBRSx1QkFBZSxDQUFDLE1BQU07YUFDbEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLDBDQUEwQztRQUNuRCxXQUFXLEVBQUU7WUFDWCxJQUFBLG9DQUF3QixFQUFDLCtDQUFrQyxDQUFDO1lBQzVELDRCQUE0QjtTQUM3QjtRQUNELFFBQVEsRUFBRTtZQUNSO2dCQUNFLFFBQVEsRUFBRSxpQ0FBYyxDQUFDLFlBQVk7Z0JBQ3JDLFNBQVMsRUFBRSx1QkFBZSxDQUFDLE1BQU07YUFDbEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUM7UUFDbEIsT0FBTyxFQUFFLDBDQUEwQztRQUNuRCxXQUFXLEVBQUUsQ0FBQyw0QkFBNEIsQ0FBQztRQUMzQyxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxZQUFZO2dCQUNyQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxNQUFNO2FBQ2xDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSw2Q0FBNkM7UUFDdEQsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyxzREFBeUMsQ0FBQztZQUNuRSw0QkFBNEI7U0FDN0I7UUFDRCxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxZQUFZO2dCQUNyQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxNQUFNO2FBQ2xDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSx5Q0FBeUM7UUFDbEQsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyw0Q0FBK0IsQ0FBQztZQUN6RCw0QkFBNEI7U0FDN0I7UUFDRCxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxZQUFZO2dCQUNyQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxNQUFNO2FBQ2xDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSxvREFBb0Q7UUFDN0QsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBd0IsRUFBQyxrREFBcUMsQ0FBQztZQUMvRCw0QkFBNEI7U0FDN0I7UUFDRCxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxZQUFZO2dCQUNyQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxNQUFNO2FBQ2xDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsUUFBUSxDQUFDO1FBQ2xCLE9BQU8sRUFBRSxvREFBb0Q7UUFDN0QsV0FBVyxFQUFFLENBQUMsNEJBQTRCLENBQUM7UUFDM0MsUUFBUSxFQUFFO1lBQ1I7Z0JBQ0UsUUFBUSxFQUFFLGlDQUFjLENBQUMsWUFBWTtnQkFDckMsU0FBUyxFQUFFLHVCQUFlLENBQUMsTUFBTTthQUNsQztTQUNGO0tBQ0Y7Q0FDRixDQUFBIn0=

package/.medusa/server/src/api/vendor/orders/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorOrdersMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
@@ -21,6 +23,12 @@ exports.vendorOrdersMiddlewares = [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrdersParams, query_config_1.vendorOrderQueryConfig.list),
             applySellerLinkFilter,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -28,11 +36,23 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
         matcher: "/vendor/orders/:id/preview",
         middlewares: [],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -40,6 +60,12 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -47,6 +73,12 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -54,6 +86,12 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderChangesParams, query_config_1.vendorOrderChangesQueryConfig.list),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -61,6 +99,12 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreateFulfillment),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -69,6 +113,12 @@ exports.vendorOrdersMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCancelFulfillment),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -76,6 +126,12 @@ exports.vendorOrdersMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -84,6 +140,12 @@ exports.vendorOrdersMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreateShipment),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetOrderParams, query_config_1.vendorOrderQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.order,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9vcmRlcnMvbWlkZGxld2FyZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsbURBTWlDO0FBQ2pDLG1EQUc0QjtBQUU1QixpREFHdUI7QUFDdkIsNkNBT3FCO0FBRXJCLE1BQU0scUJBQXFCLEdBQUcsQ0FDNUIsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0IsRUFDeEIsRUFBRTtJQUNGLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxTQUFTLEdBQUcsR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLENBQUE7SUFFOUQsT0FBTyxJQUFBLDJCQUFvQixFQUFDO1FBQzFCLFVBQVUsRUFBRSxjQUFjO1FBQzFCLFVBQVUsRUFBRSxVQUFVO1FBQ3RCLGVBQWUsRUFBRSxXQUFXO0tBQzdCLENBQUMsQ0FBQyxHQUFHLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxDQUFBO0FBQ3BCLENBQUMsQ0FBQTtBQUVZLFFBQUEsdUJBQXVCLEdBQXNCO0lBQ3hEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLGdCQUFnQjtRQUN6QixXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2QixrQ0FBcUIsRUFDckIscUNBQXNCLENBQUMsSUFBSSxDQUM1QjtZQUNELHFCQUFxQjtTQUN0QjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxLQUFLLENBQUM7UUFDZixPQUFPLEVBQUUsb0JBQW9CO1FBQzdCLFdBQVcsRUFBRTtZQUNYLElBQUEscUNBQXlCLEVBQ3ZCLGlDQUFvQixFQUNwQixxQ0FBc0IsQ0FBQyxRQUFRLENBQ2hDO1NBQ0Y7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLDRCQUE0QjtRQUNyQyxXQUFXLEVBQUUsRUFBRTtLQUNoQjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsTUFBTSxDQUFDO1FBQ2hCLE9BQU8sRUFBRSwyQkFBMkI7UUFDcEMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsaUNBQW9CLEVBQ3BCLHFDQUFzQixDQUFDLFFBQVEsQ0FDaEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLDZCQUE2QjtRQUN0QyxXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2QixpQ0FBb0IsRUFDcEIscUNBQXNCLENBQUMsUUFBUSxDQUNoQztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSw0QkFBNEI7UUFDckMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsd0NBQTJCLEVBQzNCLDRDQUE2QixDQUFDLElBQUksQ0FDbkM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLGlDQUFpQztRQUMxQyxXQUFXLEVBQUU7WUFDWCxJQUFBLG9DQUF3QixFQUFDLG9DQUF1QixDQUFDO1NBQ2xEO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsd0RBQXdEO1FBQ2pFLFdBQVcsRUFBRTtZQUNYLElBQUEsb0NBQXdCLEVBQUMsb0NBQXVCLENBQUM7WUFDakQsSUFBQSxxQ0FBeUIsRUFDdkIsaUNBQW9CLEVBQ3BCLHFDQUFzQixDQUFDLFFBQVEsQ0FDaEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUM7UUFDaEIsT0FBTyxFQUFFLG1FQUFtRTtRQUM1RSxXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2QixpQ0FBb0IsRUFDcEIscUNBQXNCLENBQUMsUUFBUSxDQUNoQztTQUNGO0tBQ0Y7SUFDRDtRQUNFLE1BQU0sRUFBRSxDQUFDLE1BQU0sQ0FBQztRQUNoQixPQUFPLEVBQUUsMkRBQTJEO1FBQ3BFLFdBQVcsRUFBRTtZQUNYLElBQUEsb0NBQXdCLEVBQUMsaUNBQW9CLENBQUM7WUFDOUMsSUFBQSxxQ0FBeUIsRUFDdkIsaUNBQW9CLEVBQ3BCLHFDQUFzQixDQUFDLFFBQVEsQ0FDaEM7U0FDRjtLQUNGO0NBQ0YsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/orders/validators.d.ts

@@ -39,10 +39,10 @@ export declare const VendorGetOrdersParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -52,10 +52,10 @@ export declare const VendorGetOrdersParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -79,10 +79,10 @@ export declare const VendorGetOrdersParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -92,10 +92,10 @@ export declare const VendorGetOrdersParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -108,35 +108,35 @@ export declare const VendorGetOrdersParams: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     order?: string | undefined;
     id?: string | string[] | undefined;
-    customer_id?: string | string[] | undefined;
+    status?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
+    currency_code?: string | string[] | undefined;
+    customer_id?: string | string[] | undefined;
     fields?: string | undefined;
-    status?: string | string[] | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
     sales_channel_id?: string | string[] | undefined;
     region_id?: string | string[] | undefined;
-    currency_code?: string | string[] | undefined;
     fulfillment_status?: string | undefined;
     payment_status?: string | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
-    customer_id?: string | string[] | undefined;
+    status?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
+    currency_code?: string | string[] | undefined;
+    customer_id?: string | string[] | undefined;
     fields?: string | undefined;
-    status?: string | string[] | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
     sales_channel_id?: string | string[] | undefined;
     region_id?: string | string[] | undefined;
-    currency_code?: string | string[] | undefined;
     fulfillment_status?: string | undefined;
     payment_status?: string | undefined;
 }>;

package/.medusa/server/src/api/vendor/payments/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorPaymentsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
@@ -21,6 +23,12 @@ exports.vendorPaymentsMiddlewares = [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPaymentsParams, query_config_1.vendorPaymentQueryConfig.list),
             applySellerPaymentLinkFilter,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payment,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -28,6 +36,12 @@ exports.vendorPaymentsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPaymentProvidersParams, query_config_1.vendorPaymentProviderQueryConfig.list),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payment,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -35,6 +49,12 @@ exports.vendorPaymentsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPaymentParams, query_config_1.vendorPaymentQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payment,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -43,6 +63,12 @@ exports.vendorPaymentsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreatePaymentCapture),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPaymentParams, query_config_1.vendorPaymentQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payment,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -51,6 +77,12 @@ exports.vendorPaymentsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreatePaymentRefund),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPaymentParams, query_config_1.vendorPaymentQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payment,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/payments/validators.d.ts

@@ -32,10 +32,10 @@ export declare const VendorGetPaymentsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -45,10 +45,10 @@ export declare const VendorGetPaymentsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -72,10 +72,10 @@ export declare const VendorGetPaymentsParams: z.ZodObject<{
         $lt: any;
         $lte: any;
     }, z.core.$strip, z.ZodTypeAny, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -85,10 +85,10 @@ export declare const VendorGetPaymentsParams: z.ZodObject<{
         $lt?: any;
         $lte?: any;
     }, {
+        $nin?: any;
         $eq?: any;
         $ne?: any;
         $in?: any;
-        $nin?: any;
         $like?: any;
         $ilike?: any;
         $re?: any;
@@ -103,22 +103,22 @@ export declare const VendorGetPaymentsParams: z.ZodObject<{
     id?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
     payment_session_id?: string | string[] | undefined;
 }, {
     order?: string | undefined;
     id?: string | string[] | undefined;
     created_at?: any;
     updated_at?: any;
+    q?: string | undefined;
     fields?: string | undefined;
     offset?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     limit?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
     with_deleted?: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
-    q?: string | undefined;
     payment_session_id?: string | string[] | undefined;
 }>;
 export type VendorGetPaymentProvidersParamsType = z.infer<typeof VendorGetPaymentProvidersParams>;

package/.medusa/server/src/api/vendor/payout-accounts/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorPayoutAccountsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
@@ -21,6 +23,12 @@ exports.vendorPayoutAccountsMiddlewares = [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutAccountsParams, query_config_1.vendorPayoutAccountQueryConfig.list),
             applySellerPayoutAccountLinkFilter,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout_account,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -29,6 +37,12 @@ exports.vendorPayoutAccountsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreatePayoutAccount),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutAccountParams, query_config_1.vendorPayoutAccountQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout_account,
+                operation: utils_1.PolicyOperation.create,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -36,6 +50,12 @@ exports.vendorPayoutAccountsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutAccountParams, query_config_1.vendorPayoutAccountQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout_account,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["POST"],
@@ -44,6 +64,12 @@ exports.vendorPayoutAccountsMiddlewares = [
             (0, framework_1.validateAndTransformBody)(validators_1.VendorCreateOnboarding),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutAccountParams, query_config_1.vendorOnboardingQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout_account,
+                operation: utils_1.PolicyOperation.update,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/payouts/middlewares.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorPayoutsMiddlewares = void 0;
+const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("@medusajs/framework/utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
@@ -21,6 +23,12 @@ exports.vendorPayoutsMiddlewares = [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutsParams, query_config_1.vendorPayoutQueryConfig.list),
             applySellerPayoutLinkFilter,
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
     {
         method: ["GET"],
@@ -28,6 +36,12 @@ exports.vendorPayoutsMiddlewares = [
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetPayoutParams, query_config_1.vendorPayoutQueryConfig.retrieve),
         ],
+        policies: [
+            {
+                resource: policy_resources_1.PolicyResource.payout,
+                operation: utils_1.PolicyOperation.read,
+            },
+        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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