@mercurjs/core 2.3.2-canary.2 → 2.3.2-canary.3

package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts

@@ -0,0 +1,16 @@
+import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework";
+/**
+ * The acting member's effective permissions for the current seller, as a flat
+ * list of `resource:operation` strings with wildcards expanded.
+ *
+ * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
+ * populates from the member's `seller_member.role_id`. Reading them there rather
+ * than from the member keeps this scoped to the seller the request is acting on —
+ * one member can belong to several sellers with a different role in each.
+ *
+ * When the rbac flag is off `resolvePermissions` returns the whole universe, so
+ * the panel sees an unrestricted policy rather than an empty one.
+ */
+export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    permissions: string[];
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const framework_1 = require("@medusajs/framework");
+const utils_1 = require("@medusajs/framework/utils");
+/**
+ * The acting member's effective permissions for the current seller, as a flat
+ * list of `resource:operation` strings with wildcards expanded.
+ *
+ * Roles come from `req.auth_context.app_metadata`, which `ensureSellerMiddleware`
+ * populates from the member's `seller_member.role_id`. Reading them there rather
+ * than from the member keeps this scoped to the seller the request is acting on —
+ * one member can belong to several sellers with a different role in each.
+ *
+ * When the rbac flag is off `resolvePermissions` returns the whole universe, so
+ * the panel sees an unrestricted policy rather than an empty one.
+ */
+const GET = async (req, res) => {
+    const roleIds = req.auth_context?.app_metadata?.roles ?? [];
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const universe = [];
+    const seen = new Set();
+    const consider = (resource, operation) => {
+        if (!resource ||
+            !operation ||
+            resource === utils_1.WILDCARD ||
+            operation === utils_1.WILDCARD) {
+            return;
+        }
+        const key = `${resource}:${operation}`;
+        if (seen.has(key)) {
+            return;
+        }
+        seen.add(key);
+        universe.push({ resource, operation });
+    };
+    for (const definition of Object.values(utils_1.Policy)) {
+        consider(definition?.resource, definition?.operation);
+    }
+    // Covers policies persisted at runtime that the code registry doesn't know.
+    const { data: persistedPolicies } = await query.graph({
+        entity: "rbac_policy",
+        fields: ["resource", "operation"],
+    });
+    for (const policy of persistedPolicies ?? []) {
+        consider(policy?.resource, policy?.operation);
+    }
+    const granted = await (0, framework_1.resolvePermissions)({
+        roles: roleIds,
+        universe,
+        container: req.scope,
+    });
+    res.status(200).json({ permissions: Array.from(granted).sort() });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mercurjs/core",
-  "version": "2.3.2-canary.2",
+  "version": "2.3.2-canary.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/mercurjs/mercur",
@@ -60,7 +60,7 @@
     "@medusajs/medusa": "2.18.0",
     "@medusajs/test-utils": "2.18.0",
     "@medusajs/ui": "4.1.19",
-    "@mercurjs/types": "2.3.2-canary.2",
+    "@mercurjs/types": "2.3.2-canary.3",
     "@swc/core": "^1.7.28",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
@@ -79,7 +79,7 @@
     "multer": "^2.0.2",
     "http-proxy-middleware": "^3.0.3",
     "jsonwebtoken": "^9.0.2",
-    "@mercurjs/cli": "2.3.2-canary.2"
+    "@mercurjs/cli": "2.3.2-canary.3"
   },
   "peerDependencies": {
     "@medusajs/admin-sdk": ">=2.18.0",