@mercurjs/core 2.3.6-canary.0 → 2.3.6-canary.10

package/.medusa/server/src/api/admin/campaigns/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminCampaignsMiddlewares = void 0;
-const utils_1 = require("@medusajs/framework/utils");
-const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("@medusajs/medusa/api/admin/campaigns/query-config");
 const validators_1 = require("@medusajs/medusa/api/admin/campaigns/validators");
@@ -36,15 +35,10 @@ exports.adminCampaignsMiddlewares = [
         method: ["GET"],
         matcher: LIST_MATCHER,
         middlewares: [
+            (0, utils_1.requirePermission)("campaigns", "view"),
             (0, framework_1.validateAndTransformQuery)(AdminGetCampaignsWithFilters, query_config_1.listTransformQueryConfig),
             helpers_1.applyCampaignFilters,
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.campaign,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL2NhbXBhaWducy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSx1Q0FBK0M7QUFDL0MsbURBQStEO0FBRS9ELG9GQUE0RjtBQUM1RixnRkFBeUY7QUFDekYsNkJBQXVCO0FBRXZCLDBGQUFnRjtBQUNoRix1Q0FBZ0Q7QUFFaEQsTUFBTSxZQUFZLEdBQUcsa0JBQWtCLENBQUE7QUFFdkMsTUFBTSxZQUFZLEdBQUcsQ0FBQyxpREFBb0IsQ0FDeEMseUNBQXlDLENBQzFDLElBQUksRUFBRSxDQUFzQixDQUFBO0FBRTdCLE1BQU0sV0FBVyxHQUFHLENBQUMsS0FBc0IsRUFBRSxFQUFFO0lBQzdDLE1BQU0sT0FBTyxHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQztRQUN6QyxDQUFDLENBQUMsS0FBSyxDQUFDLE1BQU07UUFDZCxDQUFDLENBQUMsS0FBSyxDQUFDLE1BQU07WUFDZCxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDO1lBQ2hCLENBQUMsQ0FBQyxFQUFFLENBQUE7SUFDTixPQUFPLE9BQU8sQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLENBQUE7QUFDaEMsQ0FBQyxDQUFBO0FBRUQsTUFBTSxvQkFBb0IsR0FBRyxZQUFZLENBQUMsTUFBTSxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUU7SUFDekQsSUFBSSxLQUFLLENBQUMsT0FBTyxLQUFLLFlBQVksSUFBSSxXQUFXLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUN6RCxPQUFPLEtBQUssQ0FBQTtJQUNkLENBQUM7SUFDRCxPQUFPLElBQUksQ0FBQTtBQUNiLENBQUMsQ0FBQyxDQUFBO0FBRUYsTUFBTSw0QkFBNEIsR0FBRyxvQ0FBdUIsQ0FBQyxLQUFLLENBQ2hFLE9BQUMsQ0FBQyxNQUFNLENBQUM7SUFDUCxTQUFTLEVBQUUsT0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLEVBQUU7SUFDaEUsV0FBVyxFQUFFLE9BQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxRQUFRLEVBQUU7SUFDbEMsTUFBTSxFQUFFLE9BQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxRQUFRLEVBQUUsU0FBUyxFQUFFLFdBQVcsQ0FBQyxDQUFDLENBQUMsUUFBUSxFQUFFO0NBQzlELENBQUMsQ0FDSCxDQUFBO0FBRVksUUFBQSx5QkFBeUIsR0FBc0I7SUFDMUQsR0FBRyxvQkFBb0I7SUFDdkI7UUFDRSxNQUFNLEVBQUUsQ0FBQyxLQUFLLENBQUM7UUFDZixPQUFPLEVBQUUsWUFBWTtRQUNyQixXQUFXLEVBQUU7WUFDWCxJQUFBLHlCQUFpQixFQUFDLFdBQVcsRUFBRSxNQUFNLENBQUM7WUFDdEMsSUFBQSxxQ0FBeUIsRUFDdkIsNEJBQTRCLEVBQzVCLHVDQUF3QixDQUN6QjtZQUNELDhCQUFvQjtTQUNyQjtLQUNGO0NBQ0YsQ0FBQSJ9

package/.medusa/server/src/api/admin/collections/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminCollectionsMiddlewares = void 0;
-const policy_resources_1 = require("../../utils/policy-resources");
-const utils_1 = require("@medusajs/framework/utils");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const disable_medusa_middlewares_1 = require("../../../utils/disable-medusa-middlewares");
 const query_config_1 = require("./query-config");
@@ -16,66 +15,42 @@ exports.adminCollectionsMiddlewares = [
         method: ["GET"],
         matcher: "/admin/collections",
         middlewares: [
+            (0, utils_1.requirePermission)("product_collections", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminCollectionsParams, query_config_1.adminCollectionQueryConfig.list),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.product_collection,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["POST"],
         matcher: "/admin/collections",
         middlewares: [
+            (0, utils_1.requirePermission)("product_collections", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminCreateCollection),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminCollectionParams, query_config_1.adminCollectionQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.product_collection,
-                operation: utils_1.PolicyOperation.create,
-            },
-        ],
     },
     {
         method: ["GET"],
         matcher: "/admin/collections/:id",
         middlewares: [
+            (0, utils_1.requirePermission)("product_collections", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminCollectionParams, query_config_1.adminCollectionQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.product_collection,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["POST"],
         matcher: "/admin/collections/:id",
         middlewares: [
+            (0, utils_1.requirePermission)("product_collections", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminUpdateCollection),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminCollectionParams, query_config_1.adminCollectionQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.product_collection,
-                operation: utils_1.PolicyOperation.update,
-            },
-        ],
     },
     {
         method: ["DELETE"],
         matcher: "/admin/collections/:id",
-        middlewares: [],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.product_collection,
-                operation: utils_1.PolicyOperation.delete,
-            },
+        middlewares: [
+            (0, utils_1.requirePermission)("product_collections", "manage"),
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/commission-rates/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminCommissionRatesMiddlewares = void 0;
-const policy_resources_1 = require("../../utils/policy-resources");
-const utils_1 = require("@medusajs/framework/utils");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
@@ -11,79 +10,50 @@ exports.adminCommissionRatesMiddlewares = [
         method: ["GET"],
         matcher: "/admin/commission-rates",
         middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetCommissionRatesParams, query_config_1.adminCommissionRateQueryConfig.list),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["POST"],
         matcher: "/admin/commission-rates",
         middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminCreateCommissionRate),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetCommissionRateParams, query_config_1.adminCommissionRateQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.create,
-            },
-        ],
     },
     {
         method: ["GET"],
         matcher: "/admin/commission-rates/:id",
         middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetCommissionRateParams, query_config_1.adminCommissionRateQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["POST"],
         matcher: "/admin/commission-rates/:id",
         middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminUpdateCommissionRate),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetCommissionRateParams, query_config_1.adminCommissionRateQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.update,
-            },
-        ],
     },
     {
         method: ["DELETE"],
         matcher: "/admin/commission-rates/:id",
-        middlewares: [],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.delete,
-            },
+        middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "manage"),
         ],
     },
     {
         method: ["POST"],
         matcher: "/admin/commission-rates/:id/rules",
         middlewares: [
+            (0, utils_1.requirePermission)("commission_rates", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminBatchCommissionRules),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.commission_rate,
-                operation: utils_1.PolicyOperation.update,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/core-route-permissions.d.ts

@@ -0,0 +1,18 @@
+import { AuthenticatedMedusaRequest, MedusaNextFunction, MedusaResponse } from "@medusajs/framework";
+import { PermissionRight } from "@mercurjs/types";
+type CoreRoutePermission = {
+    pattern: RegExp;
+    key: string;
+    methods?: Partial<Record<string, PermissionRight>>;
+};
+export declare const CORE_ROUTE_PERMISSIONS: CoreRoutePermission[];
+export declare function matchCoreRoutePermission(path: string, method: string): {
+    key: string;
+    right: PermissionRight;
+} | null | undefined;
+/**
+ * Guards the core Medusa admin routes Mercur exposes. The map is Mercur's own
+ * and deliberately independent of Medusa's route `policies` declarations.
+ */
+export declare function enforceCoreRoutePermissions(req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction): void;
+export {};

package/.medusa/server/src/api/admin/core-route-permissions.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CORE_ROUTE_PERMISSIONS = void 0;
+exports.matchCoreRoutePermission = matchCoreRoutePermission;
+exports.enforceCoreRoutePermissions = enforceCoreRoutePermissions;
+const permissions_middleware_1 = require("../utils/permissions-middleware");
+const byMethod = (method) => method === "GET" || method === "HEAD"
+    ? "view"
+    : method === "DELETE"
+        ? "manage"
+        : "edit";
+// First match wins, so specific rules come before their domain's catch-all.
+exports.CORE_ROUTE_PERMISSIONS = [
+    { pattern: /^\/admin\/sellers\/[^/]+\/(approve|suspend|unsuspend|terminate|unterminate)$/, key: "sellers.approval" },
+    { pattern: /^\/admin\/products\/[^/]+\/(confirm|reject|request-changes)$/, key: "products.review" },
+    { pattern: /^\/admin\/product-changes\/[^/]+\/(confirm|decline|cancel)$/, key: "products.review" },
+    { pattern: /^\/admin\/orders\/[^/]+\/(refund|credit-lines)/, key: "orders.refunds" },
+    { pattern: /^\/admin\/payments\/[^/]+\/refund/, key: "orders.refunds" },
+    { pattern: /^\/admin\/(returns|claims|exchanges)(\/|$)/, key: "orders.returns" },
+    { pattern: /^\/admin\/(order-edits|order-changes)(\/|$)/, key: "orders.edits" },
+    { pattern: /^\/admin\/(orders|draft-orders)(\/|$)/, key: "orders" },
+    { pattern: /^\/admin\/(payments|payment-collections)(\/|$)/, key: "payments" },
+    { pattern: /^\/admin\/customer-groups(\/|$)/, key: "customer_groups" },
+    { pattern: /^\/admin\/customers(\/|$)/, key: "customers" },
+    { pattern: /^\/admin\/product-categories(\/|$)/, key: "product_categories" },
+    { pattern: /^\/admin\/collections(\/|$)/, key: "product_collections" },
+    { pattern: /^\/admin\/product-types(\/|$)/, key: "product_types" },
+    { pattern: /^\/admin\/product-tags(\/|$)/, key: "product_tags" },
+    { pattern: /^\/admin\/(products|product-variants|product-options)(\/|$)/, key: "products" },
+    { pattern: /^\/admin\/inventory-items(\/|$)/, key: "inventory_items" },
+    { pattern: /^\/admin\/reservations(\/|$)/, key: "reservations" },
+    { pattern: /^\/admin\/stock-locations(\/|$)/, key: "stock_locations" },
+    { pattern: /^\/admin\/price-preferences(\/|$)/, key: "price_preferences" },
+    { pattern: /^\/admin\/price-lists(\/|$)/, key: "price_lists" },
+    { pattern: /^\/admin\/promotions(\/|$)/, key: "promotions" },
+    { pattern: /^\/admin\/campaigns(\/|$)/, key: "campaigns" },
+    { pattern: /^\/admin\/shipping-profiles(\/|$)/, key: "shipping_profiles" },
+    { pattern: /^\/admin\/(shipping-options|shipping-option-types)(\/|$)/, key: "shipping_options" },
+    { pattern: /^\/admin\/(fulfillment-sets|fulfillment-providers|fulfillments)(\/|$)/, key: "fulfillment_sets" },
+    { pattern: /^\/admin\/(regions|currencies)(\/|$)/, key: "regions" },
+    { pattern: /^\/admin\/(tax-regions|tax-rates|tax-providers)(\/|$)/, key: "tax_regions" },
+    { pattern: /^\/admin\/sales-channels(\/|$)/, key: "sales_channels" },
+    { pattern: /^\/admin\/return-reasons(\/|$)/, key: "return_reasons" },
+    { pattern: /^\/admin\/refund-reasons(\/|$)/, key: "refund_reasons" },
+    // The shell and most forms read the store (currencies, default region and sales channel).
+    { pattern: /^\/admin\/stores(\/[^/]+)?$/, key: "store", methods: { GET: undefined } },
+    { pattern: /^\/admin\/stores(\/|$)/, key: "store" },
+    { pattern: /^\/admin\/invites(\/|$)/, key: "users" },
+    // Reading and editing your own profile needs no users permission.
+    { pattern: /^\/admin\/users\/me$/, key: "users", methods: { GET: undefined, POST: undefined } },
+    { pattern: /^\/admin\/users(\/|$)/, key: "users" },
+    { pattern: /^\/admin\/api-keys(\/|$)/, key: "api_keys" },
+    { pattern: /^\/admin\/(translations|locales)(\/|$)/, key: "translations" },
+    { pattern: /^\/admin\/notifications(\/|$)/, key: "notifications" },
+    { pattern: /^\/admin\/workflows-executions(\/|$)/, key: "workflow_executions" },
+    { pattern: /^\/admin\/(search|search-indexes|index|views|property-labels|plugins|layouts)(\/|$)/, key: "store" },
+];
+function matchCoreRoutePermission(path, method) {
+    const rule = exports.CORE_ROUTE_PERMISSIONS.find((candidate) => candidate.pattern.test(path));
+    if (!rule) {
+        return undefined;
+    }
+    const upper = method.toUpperCase();
+    if (rule.methods && upper in rule.methods) {
+        const right = rule.methods[upper];
+        return right ? { key: rule.key, right } : null;
+    }
+    return { key: rule.key, right: byMethod(upper) };
+}
+/**
+ * Guards the core Medusa admin routes Mercur exposes. The map is Mercur's own
+ * and deliberately independent of Medusa's route `policies` declarations.
+ */
+function enforceCoreRoutePermissions(req, res, next) {
+    const path = (req.originalUrl ?? req.url).split("?")[0];
+    const match = matchCoreRoutePermission(path, req.method);
+    if (!match) {
+        return next();
+    }
+    return (0, permissions_middleware_1.requirePermission)(match.key, match.right)(req, res, next);
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvYWRtaW4vY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUF5RUEsNERBbUJDO0FBTUQsa0VBYUM7QUF4R0QsNEVBQW1FO0FBUW5FLE1BQU0sUUFBUSxHQUFHLENBQUMsTUFBYyxFQUFtQixFQUFFLENBQ25ELE1BQU0sS0FBSyxLQUFLLElBQUksTUFBTSxLQUFLLE1BQU07SUFDbkMsQ0FBQyxDQUFDLE1BQU07SUFDUixDQUFDLENBQUMsTUFBTSxLQUFLLFFBQVE7UUFDbkIsQ0FBQyxDQUFDLFFBQVE7UUFDVixDQUFDLENBQUMsTUFBTSxDQUFBO0FBRWQsNEVBQTRFO0FBQy9ELFFBQUEsc0JBQXNCLEdBQTBCO0lBQzNELEVBQUUsT0FBTyxFQUFFLDhFQUE4RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUNwSCxFQUFFLE9BQU8sRUFBRSw4REFBOEQsRUFBRSxHQUFHLEVBQUUsaUJBQWlCLEVBQUU7SUFDbkcsRUFBRSxPQUFPLEVBQUUsNkRBQTZELEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBRWxHLEVBQUUsT0FBTyxFQUFFLGdEQUFnRCxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRixFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDdkUsRUFBRSxPQUFPLEVBQUUsNENBQTRDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ2hGLEVBQUUsT0FBTyxFQUFFLDZDQUE2QyxFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDL0UsRUFBRSxPQUFPLEVBQUUsdUNBQXVDLEVBQUUsR0FBRyxFQUFFLFFBQVEsRUFBRTtJQUNuRSxFQUFFLE9BQU8sRUFBRSxnREFBZ0QsRUFBRSxHQUFHLEVBQUUsVUFBVSxFQUFFO0lBRTlFLEVBQUUsT0FBTyxFQUFFLGlDQUFpQyxFQUFFLEdBQUcsRUFBRSxpQkFBaUIsRUFBRTtJQUN0RSxFQUFFLE9BQU8sRUFBRSwyQkFBMkIsRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFO0lBRTFELEVBQUUsT0FBTyxFQUFFLG9DQUFvQyxFQUFFLEdBQUcsRUFBRSxvQkFBb0IsRUFBRTtJQUM1RSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUscUJBQXFCLEVBQUU7SUFDdEUsRUFBRSxPQUFPLEVBQUUsK0JBQStCLEVBQUUsR0FBRyxFQUFFLGVBQWUsRUFBRTtJQUNsRSxFQUFFLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSxHQUFHLEVBQUUsY0FBYyxFQUFFO0lBQ2hFLEVBQUUsT0FBTyxFQUFFLDZEQUE2RCxFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDM0YsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLDhCQUE4QixFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDaEUsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLG1DQUFtQyxFQUFFLEdBQUcsRUFBRSxtQkFBbUIsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUsYUFBYSxFQUFFO0lBQzlELEVBQUUsT0FBTyxFQUFFLDRCQUE0QixFQUFFLEdBQUcsRUFBRSxZQUFZLEVBQUU7SUFDNUQsRUFBRSxPQUFPLEVBQUUsMkJBQTJCLEVBQUUsR0FBRyxFQUFFLFdBQVcsRUFBRTtJQUMxRCxFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsbUJBQW1CLEVBQUU7SUFDMUUsRUFBRSxPQUFPLEVBQUUsMERBQTBELEVBQUUsR0FBRyxFQUFFLGtCQUFrQixFQUFFO0lBQ2hHLEVBQUUsT0FBTyxFQUFFLHVFQUF1RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUU3RyxFQUFFLE9BQU8sRUFBRSxzQ0FBc0MsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFO0lBQ25FLEVBQUUsT0FBTyxFQUFFLHVEQUF1RCxFQUFFLEdBQUcsRUFBRSxhQUFhLEVBQUU7SUFDeEYsRUFBRSxPQUFPLEVBQUUsZ0NBQWdDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ3BFLEVBQUUsT0FBTyxFQUFFLGdDQUFnQyxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRSxFQUFFLE9BQU8sRUFBRSxnQ0FBZ0MsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDcEUsMEZBQTBGO0lBQzFGLEVBQUUsT0FBTyxFQUFFLDZCQUE2QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUUsT0FBTyxFQUFFLEVBQUUsR0FBRyxFQUFFLFNBQVMsRUFBRSxFQUFFO0lBQ3JGLEVBQUUsT0FBTyxFQUFFLHdCQUF3QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUU7SUFDbkQsRUFBRSxPQUFPLEVBQUUseUJBQXlCLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRTtJQUNwRCxrRUFBa0U7SUFDbEUsRUFBRSxPQUFPLEVBQUUsc0JBQXNCLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsRUFBRTtJQUMvRixFQUFFLE9BQU8sRUFBRSx1QkFBdUIsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0lBQ2xELEVBQUUsT0FBTyxFQUFFLDBCQUEwQixFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDeEQsRUFBRSxPQUFPLEVBQUUsd0NBQXdDLEVBQUUsR0FBRyxFQUFFLGNBQWMsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSwrQkFBK0IsRUFBRSxHQUFHLEVBQUUsZUFBZSxFQUFFO0lBQ2xFLEVBQUUsT0FBTyxFQUFFLHNDQUFzQyxFQUFFLEdBQUcsRUFBRSxxQkFBcUIsRUFBRTtJQUMvRSxFQUFFLE9BQU8sRUFBRSxxRkFBcUYsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0NBQ2pILENBQUE7QUFFRCxTQUFnQix3QkFBd0IsQ0FDdEMsSUFBWSxFQUNaLE1BQWM7SUFFZCxNQUFNLElBQUksR0FBRyw4QkFBc0IsQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUNyRCxTQUFTLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FDN0IsQ0FBQTtJQUVELElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNWLE9BQU8sU0FBUyxDQUFBO0lBQ2xCLENBQUM7SUFFRCxNQUFNLEtBQUssR0FBRyxNQUFNLENBQUMsV0FBVyxFQUFFLENBQUE7SUFDbEMsSUFBSSxJQUFJLENBQUMsT0FBTyxJQUFJLEtBQUssSUFBSSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDMUMsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsQ0FBQTtRQUNqQyxPQUFPLEtBQUssQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFHLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFBO0lBQ2hELENBQUM7SUFFRCxPQUFPLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxHQUFHLEVBQUUsS0FBSyxFQUFFLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFBO0FBQ2xELENBQUM7QUFFRDs7O0dBR0c7QUFDSCxTQUFnQiwyQkFBMkIsQ0FDekMsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0I7SUFFeEIsTUFBTSxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsV0FBVyxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFDdkQsTUFBTSxLQUFLLEdBQUcsd0JBQXdCLENBQUMsSUFBSSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQTtJQUV4RCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxPQUFPLElBQUksRUFBRSxDQUFBO0lBQ2YsQ0FBQztJQUVELE9BQU8sSUFBQSwwQ0FBaUIsRUFBQyxLQUFLLENBQUMsR0FBRyxFQUFFLEtBQUssQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxDQUFBO0FBQ2xFLENBQUMifQ==

package/.medusa/server/src/api/admin/customer-groups/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminCustomerGroupsMiddlewares = void 0;
-const utils_1 = require("@medusajs/framework/utils");
-const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("../../utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("@medusajs/medusa/api/admin/customer-groups/query-config");
@@ -37,15 +36,10 @@ exports.adminCustomerGroupsMiddlewares = [
         method: ["GET"],
         matcher: LIST_MATCHER,
         middlewares: [
+            (0, utils_1.requirePermission)("customer_groups", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetCustomerGroupsParams, query_config_1.listTransformQueryConfig),
             maybeApplyCustomerGroupSellerFilter,
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.customer_group,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/inventory-items/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminInventoryItemsMiddlewares = void 0;
-const utils_1 = require("@medusajs/framework/utils");
-const policy_resources_1 = require("../../utils/policy-resources");
+const utils_1 = require("../../utils");
 const http_1 = require("@medusajs/framework/http");
 const framework_1 = require("@medusajs/framework");
 const zod_1 = require("zod");
@@ -40,15 +39,10 @@ exports.adminInventoryItemsMiddlewares = [
         method: ["GET"],
         matcher: LIST_MATCHER,
         middlewares: [
+            (0, utils_1.requirePermission)("inventory_items", "view"),
             (0, framework_1.validateAndTransformQuery)(AdminGetInventoryItemsParamsWithSeller, query_config_1.listTransformQueryConfig),
             maybeApplySellerInventoryFilter,
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.inventory_item,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/members/middlewares.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminMembersMiddlewares = void 0;
-const policy_resources_1 = require("../../utils/policy-resources");
-const utils_1 = require("@medusajs/framework/utils");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
@@ -11,14 +10,9 @@ exports.adminMembersMiddlewares = [
         method: ["GET"],
         matcher: "/admin/members",
         middlewares: [
+            (0, utils_1.requirePermission)("members", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetMembersParams, query_config_1.adminMemberListQueryConfig.list),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.seller_member,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/middlewares.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminMiddlewares = void 0;
 const framework_1 = require("@medusajs/framework");
 const utils_1 = require("../utils");
+const core_route_permissions_1 = require("./core-route-permissions");
 const middlewares_1 = require("./order-groups/middlewares");
 const query_config_1 = require("./order-groups/query-config");
 const validators_1 = require("./order-groups/validators");
@@ -27,10 +28,14 @@ const middlewares_19 = require("./inventory-items/middlewares");
 const middlewares_20 = require("./shipping-options/middlewares");
 const middlewares_21 = require("./shipping-profiles/middlewares");
 const middlewares_22 = require("./reviews/middlewares");
+const middlewares_23 = require("./users/middlewares");
 exports.adminMiddlewares = [
     {
         matcher: "/admin/*",
-        middlewares: [utils_1.resolveAdminRolesMiddleware],
+        middlewares: [
+            (0, utils_1.resolvePermissionsMiddleware)("admin"),
+            core_route_permissions_1.enforceCoreRoutePermissions,
+        ],
     },
     ...middlewares_1.adminOrderGroupsMiddlewares,
     {
@@ -61,5 +66,6 @@ exports.adminMiddlewares = [
     ...middlewares_20.adminShippingOptionsMiddlewares,
     ...middlewares_21.adminShippingProfilesMiddlewares,
     ...middlewares_22.adminReviewsMiddlewares,
+    ...middlewares_23.adminUsersMiddlewares,
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/offers/middlewares.js

@@ -1,53 +1,42 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminOffersMiddlewares = void 0;
-const policy_resources_1 = require("../../utils/policy-resources");
-const utils_1 = require("@medusajs/framework/utils");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const utils_2 = require("../../utils");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
 exports.adminOffersMiddlewares = [
+    {
+        method: ["DELETE"],
+        matcher: "/admin/offers/:id",
+        middlewares: [(0, utils_1.requirePermission)("offers", "manage")],
+    },
     {
         method: ["GET"],
         matcher: "/admin/offers",
         middlewares: [
+            (0, utils_1.requirePermission)("offers", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOffersParams, query_config_1.adminOfferQueryConfig.list),
             utils_2.applyGroupedOfferProductFilter,
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.offer,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["POST"],
         matcher: "/admin/offers/batch",
         middlewares: [
+            (0, utils_1.requirePermission)("offers", "edit"),
             (0, framework_1.validateAndTransformBody)(validators_1.AdminCreateOffersBatch),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOffersParams, query_config_1.adminOfferQueryConfig.list),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.offer,
-                operation: utils_1.PolicyOperation.create,
-            },
-        ],
     },
     {
         method: ["GET"],
         matcher: "/admin/offers/:id",
         middlewares: [
+            (0, utils_1.requirePermission)("offers", "view"),
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOfferParams, query_config_1.adminOfferQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.offer,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/order-groups/middlewares.js

@@ -1,39 +1,34 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.adminOrderGroupsMiddlewares = void 0;
-const policy_resources_1 = require("../../utils/policy-resources");
-const utils_1 = require("@medusajs/framework/utils");
+const utils_1 = require("../../utils");
 const framework_1 = require("@medusajs/framework");
 const helpers_1 = require("./helpers");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
+// The admin orders list is a list of order groups, so orders:view is enough
+// to read them.
+const canViewOrderGroups = (0, utils_1.requireAnyPermission)([
+    { key: "orders", right: "view" },
+    { key: "order_groups", right: "view" },
+]);
 exports.adminOrderGroupsMiddlewares = [
     {
         method: ["GET"],
         matcher: "/admin/order-groups",
         middlewares: [
+            canViewOrderGroups,
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupsParams, query_config_1.adminOrderGroupQueryConfig.list),
             helpers_1.applyOrderGroupSellerFilter,
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.order_group,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
     {
         method: ["GET"],
         matcher: "/admin/order-groups/:id",
         middlewares: [
+            canViewOrderGroups,
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupParams, query_config_1.adminOrderGroupQueryConfig.retrieve),
         ],
-        policies: [
-            {
-                resource: policy_resources_1.PolicyResource.order_group,
-                operation: utils_1.PolicyOperation.read,
-            },
-        ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL29yZGVyLWdyb3Vwcy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxtRUFBNkQ7QUFDN0QscURBQTJEO0FBQzNELG1EQUU0QjtBQUc1Qix1Q0FBdUQ7QUFDdkQsaURBQTJEO0FBQzNELDZDQUdxQjtBQUVSLFFBQUEsMkJBQTJCLEdBQXNCO0lBQzVEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHFCQUFxQjtRQUM5QixXQUFXLEVBQUU7WUFDWCxJQUFBLHFDQUF5QixFQUN2QixzQ0FBeUIsRUFDekIseUNBQTBCLENBQUMsSUFBSSxDQUNoQztZQUNELHFDQUEyQjtTQUM1QjtRQUNELFFBQVEsRUFBRTtZQUNSO2dCQUNFLFFBQVEsRUFBRSxpQ0FBYyxDQUFDLFdBQVc7Z0JBQ3BDLFNBQVMsRUFBRSx1QkFBZSxDQUFDLElBQUk7YUFDaEM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxLQUFLLENBQUM7UUFDZixPQUFPLEVBQUUseUJBQXlCO1FBQ2xDLFdBQVcsRUFBRTtZQUNYLElBQUEscUNBQXlCLEVBQ3ZCLHFDQUF3QixFQUN4Qix5Q0FBMEIsQ0FBQyxRQUFRLENBQ3BDO1NBQ0Y7UUFDRCxRQUFRLEVBQUU7WUFDUjtnQkFDRSxRQUFRLEVBQUUsaUNBQWMsQ0FBQyxXQUFXO2dCQUNwQyxTQUFTLEVBQUUsdUJBQWUsQ0FBQyxJQUFJO2FBQ2hDO1NBQ0Y7S0FDRjtDQUNGLENBQUEifQ==
+//# sourceMappingURL=data:application/json;base64,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