@mercurjs/core 2.3.6-canary.1 → 2.3.6-canary.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.medusa/server/src/api/admin/campaigns/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/collections/middlewares.js +8 -33
- package/.medusa/server/src/api/admin/commission-rates/middlewares.js +9 -39
- package/.medusa/server/src/api/admin/core-route-permissions.d.ts +18 -0
- package/.medusa/server/src/api/admin/core-route-permissions.js +79 -0
- package/.medusa/server/src/api/admin/customer-groups/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/inventory-items/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/members/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/middlewares.js +6 -2
- package/.medusa/server/src/api/admin/offers/middlewares.js +10 -21
- package/.medusa/server/src/api/admin/order-groups/middlewares.js +4 -15
- package/.medusa/server/src/api/admin/orders/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/payouts/middlewares.js +4 -15
- package/.medusa/server/src/api/admin/price-lists/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/product-attributes/middlewares.js +11 -51
- package/.medusa/server/src/api/admin/product-categories/middlewares.js +14 -45
- package/.medusa/server/src/api/admin/product-changes/middlewares.js +8 -15
- package/.medusa/server/src/api/admin/products/[id]/route.js +8 -3
- package/.medusa/server/src/api/admin/products/middlewares.js +21 -99
- package/.medusa/server/src/api/admin/products/validators.d.ts +3 -3
- package/.medusa/server/src/api/admin/products/validators.js +4 -3
- package/.medusa/server/src/api/admin/promotions/middlewares.js +7 -21
- package/.medusa/server/src/api/admin/reservations/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/reviews/middlewares.js +8 -33
- package/.medusa/server/src/api/admin/sellers/middlewares.js +32 -117
- package/.medusa/server/src/api/admin/sellers/query-config.js +2 -3
- package/.medusa/server/src/api/admin/shipping-options/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/shipping-profiles/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/stock-locations/middlewares.js +3 -9
- package/.medusa/server/src/api/admin/users/me/route.d.ts +3 -0
- package/.medusa/server/src/api/admin/users/me/route.js +24 -0
- package/.medusa/server/src/api/utils/ensure-seller-middleware.js +1 -15
- package/.medusa/server/src/api/utils/index.d.ts +1 -2
- package/.medusa/server/src/api/utils/index.js +2 -3
- package/.medusa/server/src/api/utils/permissions-middleware.d.ts +25 -0
- package/.medusa/server/src/api/utils/permissions-middleware.js +103 -0
- package/.medusa/server/src/api/vendor/campaigns/middlewares.js +9 -39
- package/.medusa/server/src/api/vendor/claims/middlewares.js +37 -129
- package/.medusa/server/src/api/vendor/collections/middlewares.js +5 -21
- package/.medusa/server/src/api/vendor/currencies/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/customer-groups/middlewares.js +9 -39
- package/.medusa/server/src/api/vendor/customers/middlewares.js +5 -21
- package/.medusa/server/src/api/vendor/exchanges/middlewares.js +31 -105
- package/.medusa/server/src/api/vendor/fulfillment-providers/middlewares.js +3 -9
- package/.medusa/server/src/api/vendor/fulfillment-sets/middlewares.js +8 -33
- package/.medusa/server/src/api/vendor/inventory-items/middlewares.js +14 -69
- package/.medusa/server/src/api/vendor/members/me/route.js +6 -3
- package/.medusa/server/src/api/vendor/members/middlewares.js +2 -17
- package/.medusa/server/src/api/vendor/middlewares.js +2 -1
- package/.medusa/server/src/api/vendor/offers/middlewares.js +10 -45
- package/.medusa/server/src/api/vendor/order-edits/middlewares.js +23 -69
- package/.medusa/server/src/api/vendor/orders/middlewares.js +18 -63
- package/.medusa/server/src/api/vendor/payments/middlewares.js +7 -33
- package/.medusa/server/src/api/vendor/payout-accounts/middlewares.js +6 -27
- package/.medusa/server/src/api/vendor/payouts/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/price-lists/middlewares.js +11 -51
- package/.medusa/server/src/api/vendor/price-preferences/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/product-attributes/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/product-categories/middlewares.js +5 -21
- package/.medusa/server/src/api/vendor/product-tags/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/product-types/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/product-variants/middlewares.js +3 -9
- package/.medusa/server/src/api/vendor/products/middlewares.js +24 -75
- package/.medusa/server/src/api/vendor/products/validators.d.ts +2 -2
- package/.medusa/server/src/api/vendor/products/validators.js +4 -3
- package/.medusa/server/src/api/vendor/promotions/middlewares.js +14 -69
- package/.medusa/server/src/api/vendor/refund-reasons/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/regions/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/reservations/middlewares.js +9 -33
- package/.medusa/server/src/api/vendor/return-reasons/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/returns/middlewares.js +26 -135
- package/.medusa/server/src/api/vendor/reviews/middlewares.js +5 -21
- package/.medusa/server/src/api/vendor/sales-channels/middlewares.js +5 -21
- package/.medusa/server/src/api/vendor/sellers/me/route.js +1 -1
- package/.medusa/server/src/api/vendor/sellers/middlewares.js +16 -92
- package/.medusa/server/src/api/vendor/sellers/query-config.d.ts +0 -4
- package/.medusa/server/src/api/vendor/sellers/query-config.js +5 -11
- package/.medusa/server/src/api/vendor/shipping-option-types/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/shipping-options/middlewares.js +9 -39
- package/.medusa/server/src/api/vendor/shipping-profiles/middlewares.js +4 -15
- package/.medusa/server/src/api/vendor/stock-locations/middlewares.js +11 -51
- package/.medusa/server/src/api/vendor/stock-locations/validators.d.ts +2 -2
- package/.medusa/server/src/api/vendor/uploads/middlewares.js +5 -9
- package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.d.ts +5 -0
- package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.js +14 -0
- package/.medusa/server/src/modules/payout/models/payout-account.js +2 -2
- package/.medusa/server/src/patches/index.d.ts +9 -0
- package/.medusa/server/src/patches/index.js +47 -11
- package/.medusa/server/src/patches/loader.d.ts +10 -0
- package/.medusa/server/src/patches/loader.js +46 -4
- package/.medusa/server/src/patches/register.d.ts +1 -0
- package/.medusa/server/src/patches/register.js +10 -0
- package/.medusa/server/src/permissions/definitions/api-keys.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/api-keys.js +8 -0
- package/.medusa/server/src/permissions/definitions/commissions.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/commissions.js +9 -0
- package/.medusa/server/src/permissions/definitions/customers.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/customers.js +9 -0
- package/.medusa/server/src/permissions/definitions/fulfillment.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/fulfillment.js +10 -0
- package/.medusa/server/src/permissions/definitions/inventory.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/inventory.js +10 -0
- package/.medusa/server/src/permissions/definitions/members.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/members.js +9 -0
- package/.medusa/server/src/permissions/definitions/notifications.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/notifications.js +8 -0
- package/.medusa/server/src/permissions/definitions/offers.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/offers.js +8 -0
- package/.medusa/server/src/permissions/definitions/orders.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/orders.js +12 -0
- package/.medusa/server/src/permissions/definitions/payments.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/payments.js +8 -0
- package/.medusa/server/src/permissions/definitions/payouts.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/payouts.js +9 -0
- package/.medusa/server/src/permissions/definitions/price-lists.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/price-lists.js +9 -0
- package/.medusa/server/src/permissions/definitions/product-attributes.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/product-attributes.js +8 -0
- package/.medusa/server/src/permissions/definitions/products.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/products.js +14 -0
- package/.medusa/server/src/permissions/definitions/promotions.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/promotions.js +9 -0
- package/.medusa/server/src/permissions/definitions/refund-reasons.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/refund-reasons.js +8 -0
- package/.medusa/server/src/permissions/definitions/regions.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/regions.js +9 -0
- package/.medusa/server/src/permissions/definitions/return-reasons.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/return-reasons.js +8 -0
- package/.medusa/server/src/permissions/definitions/reviews.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/reviews.js +8 -0
- package/.medusa/server/src/permissions/definitions/roles.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/roles.js +9 -0
- package/.medusa/server/src/permissions/definitions/sales-channels.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/sales-channels.js +8 -0
- package/.medusa/server/src/permissions/definitions/sellers.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/sellers.js +10 -0
- package/.medusa/server/src/permissions/definitions/store.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/store.js +8 -0
- package/.medusa/server/src/permissions/definitions/translations.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/translations.js +8 -0
- package/.medusa/server/src/permissions/definitions/users.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/users.js +8 -0
- package/.medusa/server/src/permissions/definitions/workflow-executions.d.ts +1 -0
- package/.medusa/server/src/permissions/definitions/workflow-executions.js +8 -0
- package/.medusa/server/src/permissions/index.d.ts +27 -0
- package/.medusa/server/src/permissions/index.js +44 -0
- package/.medusa/server/src/permissions/registry.d.ts +18 -0
- package/.medusa/server/src/permissions/registry.js +86 -0
- package/.medusa/server/src/utils/sanitize-rich-text.d.ts +2 -0
- package/.medusa/server/src/utils/sanitize-rich-text.js +50 -0
- package/.medusa/server/src/with-mercur.d.ts +5 -3
- package/.medusa/server/src/with-mercur.js +4 -23
- package/.medusa/server/src/workflows/index.d.ts +1 -0
- package/.medusa/server/src/workflows/index.js +2 -1
- package/.medusa/server/src/workflows/payout/workflows/create-payout.d.ts +4 -1
- package/.medusa/server/src/workflows/payout/workflows/create-payout.js +6 -2
- package/.medusa/server/src/workflows/product-edit/workflows/apply-product-change-actions.js +18 -2
- package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.d.ts +1 -0
- package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.js +2 -2
- package/.medusa/server/src/workflows/seller/steps/index.d.ts +0 -1
- package/.medusa/server/src/workflows/seller/steps/index.js +1 -2
- package/.medusa/server/src/workflows/seller/workflows/accept-member-invite.js +1 -2
- package/.medusa/server/src/workflows/seller/workflows/create-seller-account.js +1 -2
- package/.medusa/server/src/workflows/seller/workflows/index.d.ts +0 -1
- package/.medusa/server/src/workflows/seller/workflows/index.js +1 -2
- package/package.json +6 -4
- package/.medusa/server/src/api/utils/policy-resources.d.ts +0 -59
- package/.medusa/server/src/api/utils/policy-resources.js +0 -64
- package/.medusa/server/src/api/utils/rbac-role-fields.d.ts +0 -1
- package/.medusa/server/src/api/utils/rbac-role-fields.js +0 -10
- package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.d.ts +0 -19
- package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.js +0 -55
- package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts +0 -16
- package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js +0 -58
- package/.medusa/server/src/links/seller-member-rbac-role.d.ts +0 -2
- package/.medusa/server/src/links/seller-member-rbac-role.js +0 -41
- package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.d.ts +0 -11
- package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.js +0 -128
- package/.medusa/server/src/policies/commission.d.ts +0 -1
- package/.medusa/server/src/policies/commission.js +0 -12
- package/.medusa/server/src/policies/offer.d.ts +0 -1
- package/.medusa/server/src/policies/offer.js +0 -7
- package/.medusa/server/src/policies/payout.d.ts +0 -1
- package/.medusa/server/src/policies/payout.js +0 -7
- package/.medusa/server/src/policies/product-attribute.d.ts +0 -1
- package/.medusa/server/src/policies/product-attribute.js +0 -7
- package/.medusa/server/src/policies/product-edit.d.ts +0 -1
- package/.medusa/server/src/policies/product-edit.js +0 -7
- package/.medusa/server/src/policies/review.d.ts +0 -1
- package/.medusa/server/src/policies/review.js +0 -7
- package/.medusa/server/src/policies/seller.d.ts +0 -1
- package/.medusa/server/src/policies/seller.js +0 -13
- package/.medusa/server/src/utils/generate-resource-policies.d.ts +0 -7
- package/.medusa/server/src/utils/generate-resource-policies.js +0 -30
- package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.d.ts +0 -2
- package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.js +0 -16
- package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.d.ts +0 -2
- package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.js +0 -11
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.PERMISSIONS_FIELD = exports.REQUIRED_PERMISSION = void 0;
|
|
4
|
+
exports.isPermissionsModuleEnabled = isPermissionsModuleEnabled;
|
|
5
|
+
exports.resolvePermissionsMiddleware = resolvePermissionsMiddleware;
|
|
6
|
+
exports.requirePermission = requirePermission;
|
|
7
|
+
exports.takePermissionsField = takePermissionsField;
|
|
8
|
+
exports.attachPermissions = attachPermissions;
|
|
9
|
+
const utils_1 = require("@medusajs/framework/utils");
|
|
10
|
+
const types_1 = require("@mercurjs/types");
|
|
11
|
+
const permissions_1 = require("../../permissions");
|
|
12
|
+
function isPermissionsModuleEnabled(config) {
|
|
13
|
+
const modules = config.modules;
|
|
14
|
+
const entry = modules?.[types_1.PERMISSIONS_MODULE];
|
|
15
|
+
if (!entry) {
|
|
16
|
+
return false;
|
|
17
|
+
}
|
|
18
|
+
return !(typeof entry === "object" && "disable" in entry && entry.disable);
|
|
19
|
+
}
|
|
20
|
+
function getResolver(req) {
|
|
21
|
+
const config = req.scope.resolve(utils_1.ContainerRegistrationKeys.CONFIG_MODULE);
|
|
22
|
+
if (!isPermissionsModuleEnabled(config)) {
|
|
23
|
+
return undefined;
|
|
24
|
+
}
|
|
25
|
+
return req.scope.resolve(types_1.PERMISSIONS_MODULE);
|
|
26
|
+
}
|
|
27
|
+
let catalogValidated = false;
|
|
28
|
+
function resolvePermissionsMiddleware(surface) {
|
|
29
|
+
return async (req, _res, next) => {
|
|
30
|
+
const catalog = (0, permissions_1.getPermissionCatalog)();
|
|
31
|
+
if (!catalogValidated) {
|
|
32
|
+
(0, permissions_1.validatePermissionCatalog)(catalog);
|
|
33
|
+
catalogValidated = true;
|
|
34
|
+
}
|
|
35
|
+
const resolver = getResolver(req);
|
|
36
|
+
const actorId = req.auth_context?.actor_id;
|
|
37
|
+
if (!resolver || !actorId) {
|
|
38
|
+
req.permissions = (0, permissions_1.grantAll)(catalog);
|
|
39
|
+
req.permissions_enforced = false;
|
|
40
|
+
return next();
|
|
41
|
+
}
|
|
42
|
+
const actor = {
|
|
43
|
+
actor_type: req.auth_context.actor_type,
|
|
44
|
+
actor_id: actorId,
|
|
45
|
+
surface,
|
|
46
|
+
seller_id: req.seller_context?.seller_id,
|
|
47
|
+
seller_member_id: req.seller_context?.seller_member?.id,
|
|
48
|
+
};
|
|
49
|
+
try {
|
|
50
|
+
req.permissions = await resolver.resolvePermissions(actor, catalog);
|
|
51
|
+
req.permissions_enforced = true;
|
|
52
|
+
next();
|
|
53
|
+
}
|
|
54
|
+
catch (error) {
|
|
55
|
+
next(error);
|
|
56
|
+
}
|
|
57
|
+
};
|
|
58
|
+
}
|
|
59
|
+
exports.REQUIRED_PERMISSION = Symbol.for("mercur:required-permission");
|
|
60
|
+
function requirePermission(key, right) {
|
|
61
|
+
const middleware = (req, res, next) => {
|
|
62
|
+
req.required_permissions ??= [];
|
|
63
|
+
req.required_permissions.push({ key, right });
|
|
64
|
+
// Routes reached before the resolving middleware (public or pre-seller
|
|
65
|
+
// routes) have nothing to enforce against.
|
|
66
|
+
if (!req.permissions_enforced) {
|
|
67
|
+
return next();
|
|
68
|
+
}
|
|
69
|
+
if ((0, permissions_1.satisfiesRight)(req.permissions?.[key], right)) {
|
|
70
|
+
return next();
|
|
71
|
+
}
|
|
72
|
+
res.status(403).json({
|
|
73
|
+
type: "not_allowed",
|
|
74
|
+
code: types_1.MISSING_PERMISSION_CODE,
|
|
75
|
+
message: `Missing required permission: ${key}:${right}`,
|
|
76
|
+
permission: key,
|
|
77
|
+
right,
|
|
78
|
+
});
|
|
79
|
+
};
|
|
80
|
+
return Object.assign(middleware, {
|
|
81
|
+
[exports.REQUIRED_PERMISSION]: { key, right },
|
|
82
|
+
});
|
|
83
|
+
}
|
|
84
|
+
exports.PERMISSIONS_FIELD = "permissions";
|
|
85
|
+
/**
|
|
86
|
+
* `permissions` is a virtual field: pull it out of the query config before it
|
|
87
|
+
* reaches `query.graph`, and report whether the client asked for it.
|
|
88
|
+
*/
|
|
89
|
+
function takePermissionsField(req) {
|
|
90
|
+
const fields = req.queryConfig?.fields ?? [];
|
|
91
|
+
const requested = fields.includes(exports.PERMISSIONS_FIELD);
|
|
92
|
+
if (requested) {
|
|
93
|
+
req.queryConfig.fields = fields.filter((field) => field !== exports.PERMISSIONS_FIELD);
|
|
94
|
+
}
|
|
95
|
+
return requested;
|
|
96
|
+
}
|
|
97
|
+
function attachPermissions(req, entity, requested) {
|
|
98
|
+
if (!requested || !req.permissions_enforced || !req.permissions) {
|
|
99
|
+
return entity;
|
|
100
|
+
}
|
|
101
|
+
return { ...entity, permissions: req.permissions };
|
|
102
|
+
}
|
|
103
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,8 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.vendorCampaignsMiddlewares = void 0;
|
|
4
|
-
const
|
|
5
|
-
const utils_1 = require("@medusajs/framework/utils");
|
|
4
|
+
const utils_1 = require("../../utils");
|
|
6
5
|
const http_1 = require("@medusajs/framework/http");
|
|
7
6
|
const framework_1 = require("@medusajs/framework");
|
|
8
7
|
const validators_1 = require("@medusajs/medusa/api/utils/validators");
|
|
@@ -22,82 +21,53 @@ exports.vendorCampaignsMiddlewares = [
|
|
|
22
21
|
method: ["GET"],
|
|
23
22
|
matcher: "/vendor/campaigns",
|
|
24
23
|
middlewares: [
|
|
24
|
+
(0, utils_1.requirePermission)("campaigns", "view"),
|
|
25
25
|
(0, framework_1.validateAndTransformQuery)(validators_2.VendorGetCampaignsParams, query_config_1.vendorCampaignQueryConfig.list),
|
|
26
26
|
applySellerCampaignLinkFilter,
|
|
27
27
|
helpers_1.applyCampaignFilters,
|
|
28
28
|
],
|
|
29
|
-
policies: [
|
|
30
|
-
{
|
|
31
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
32
|
-
operation: utils_1.PolicyOperation.read,
|
|
33
|
-
},
|
|
34
|
-
],
|
|
35
29
|
},
|
|
36
30
|
{
|
|
37
31
|
method: ["POST"],
|
|
38
32
|
matcher: "/vendor/campaigns",
|
|
39
33
|
middlewares: [
|
|
34
|
+
(0, utils_1.requirePermission)("campaigns", "edit"),
|
|
40
35
|
(0, framework_1.validateAndTransformBody)(validators_2.VendorCreateCampaign),
|
|
41
36
|
(0, framework_1.validateAndTransformQuery)(validators_2.VendorGetCampaignParams, query_config_1.vendorCampaignQueryConfig.retrieve),
|
|
42
37
|
],
|
|
43
|
-
policies: [
|
|
44
|
-
{
|
|
45
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
46
|
-
operation: utils_1.PolicyOperation.create,
|
|
47
|
-
},
|
|
48
|
-
],
|
|
49
38
|
},
|
|
50
39
|
{
|
|
51
40
|
method: ["GET"],
|
|
52
41
|
matcher: "/vendor/campaigns/:id",
|
|
53
42
|
middlewares: [
|
|
43
|
+
(0, utils_1.requirePermission)("campaigns", "view"),
|
|
54
44
|
(0, framework_1.validateAndTransformQuery)(validators_2.VendorGetCampaignParams, query_config_1.vendorCampaignQueryConfig.retrieve),
|
|
55
45
|
],
|
|
56
|
-
policies: [
|
|
57
|
-
{
|
|
58
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
59
|
-
operation: utils_1.PolicyOperation.read,
|
|
60
|
-
},
|
|
61
|
-
],
|
|
62
46
|
},
|
|
63
47
|
{
|
|
64
48
|
method: ["POST"],
|
|
65
49
|
matcher: "/vendor/campaigns/:id",
|
|
66
50
|
middlewares: [
|
|
51
|
+
(0, utils_1.requirePermission)("campaigns", "edit"),
|
|
67
52
|
(0, framework_1.validateAndTransformBody)(validators_2.VendorUpdateCampaign),
|
|
68
53
|
(0, framework_1.validateAndTransformQuery)(validators_2.VendorGetCampaignParams, query_config_1.vendorCampaignQueryConfig.retrieve),
|
|
69
54
|
],
|
|
70
|
-
policies: [
|
|
71
|
-
{
|
|
72
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
73
|
-
operation: utils_1.PolicyOperation.update,
|
|
74
|
-
},
|
|
75
|
-
],
|
|
76
55
|
},
|
|
77
56
|
{
|
|
78
57
|
method: ["DELETE"],
|
|
79
58
|
matcher: "/vendor/campaigns/:id",
|
|
80
|
-
middlewares: [
|
|
81
|
-
|
|
82
|
-
{
|
|
83
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
84
|
-
operation: utils_1.PolicyOperation.delete,
|
|
85
|
-
},
|
|
59
|
+
middlewares: [
|
|
60
|
+
(0, utils_1.requirePermission)("campaigns", "manage"),
|
|
86
61
|
],
|
|
87
62
|
},
|
|
88
63
|
{
|
|
89
64
|
method: ["POST"],
|
|
90
65
|
matcher: "/vendor/campaigns/:id/promotions",
|
|
91
66
|
middlewares: [
|
|
67
|
+
(0, utils_1.requirePermission)("campaigns", "edit"),
|
|
92
68
|
(0, framework_1.validateAndTransformBody)((0, validators_1.createLinkBody)()),
|
|
93
69
|
(0, framework_1.validateAndTransformQuery)(validators_2.VendorGetCampaignParams, query_config_1.vendorCampaignQueryConfig.retrieve),
|
|
94
70
|
],
|
|
95
|
-
policies: [
|
|
96
|
-
{
|
|
97
|
-
resource: policy_resources_1.PolicyResource.campaign,
|
|
98
|
-
operation: utils_1.PolicyOperation.update,
|
|
99
|
-
},
|
|
100
|
-
],
|
|
101
71
|
},
|
|
102
72
|
];
|
|
103
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
73
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,8 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.vendorClaimsMiddlewares = void 0;
|
|
4
|
-
const
|
|
5
|
-
const utils_1 = require("@medusajs/framework/utils");
|
|
4
|
+
const utils_1 = require("../../utils");
|
|
6
5
|
const http_1 = require("@medusajs/framework/http");
|
|
7
6
|
const framework_1 = require("@medusajs/framework");
|
|
8
7
|
const helpers_1 = require("../orders/helpers");
|
|
@@ -39,274 +38,183 @@ exports.vendorClaimsMiddlewares = [
|
|
|
39
38
|
method: ["GET"],
|
|
40
39
|
matcher: "/vendor/claims",
|
|
41
40
|
middlewares: [
|
|
41
|
+
(0, utils_1.requirePermission)("orders.returns", "view"),
|
|
42
42
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetClaimsParams, query_config_1.vendorClaimQueryConfig.list),
|
|
43
43
|
applySellerClaimsFilter,
|
|
44
44
|
],
|
|
45
|
-
policies: [
|
|
46
|
-
{
|
|
47
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
48
|
-
operation: utils_1.PolicyOperation.read,
|
|
49
|
-
},
|
|
50
|
-
],
|
|
51
45
|
},
|
|
52
46
|
{
|
|
53
47
|
method: ["POST"],
|
|
54
48
|
matcher: "/vendor/claims",
|
|
55
49
|
middlewares: [
|
|
50
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
56
51
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostOrderClaimsReq),
|
|
57
52
|
assertSellerOwnsOrderInBody,
|
|
58
53
|
],
|
|
59
|
-
policies: [
|
|
60
|
-
{
|
|
61
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
62
|
-
operation: utils_1.PolicyOperation.create,
|
|
63
|
-
},
|
|
64
|
-
],
|
|
65
54
|
},
|
|
66
55
|
{
|
|
67
56
|
method: ["GET"],
|
|
68
57
|
matcher: "/vendor/claims/:id",
|
|
69
58
|
middlewares: [
|
|
59
|
+
(0, utils_1.requirePermission)("orders.returns", "view"),
|
|
70
60
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetClaimParams, query_config_1.vendorClaimQueryConfig.retrieve),
|
|
71
61
|
assertSellerOwnsClaimInParam,
|
|
72
62
|
],
|
|
73
|
-
policies: [
|
|
74
|
-
{
|
|
75
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
76
|
-
operation: utils_1.PolicyOperation.read,
|
|
77
|
-
},
|
|
78
|
-
],
|
|
79
63
|
},
|
|
80
64
|
{
|
|
81
65
|
method: ["POST"],
|
|
82
66
|
matcher: "/vendor/claims/:id/cancel",
|
|
83
67
|
middlewares: [
|
|
68
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
84
69
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostCancelClaimReq),
|
|
85
70
|
assertSellerOwnsClaimInParam,
|
|
86
71
|
],
|
|
87
|
-
policies: [
|
|
88
|
-
{
|
|
89
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
90
|
-
operation: utils_1.PolicyOperation.update,
|
|
91
|
-
},
|
|
92
|
-
],
|
|
93
72
|
},
|
|
94
73
|
{
|
|
95
74
|
method: ["POST"],
|
|
96
75
|
matcher: "/vendor/claims/:id/request",
|
|
97
|
-
middlewares: [
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
101
|
-
operation: utils_1.PolicyOperation.update,
|
|
102
|
-
},
|
|
76
|
+
middlewares: [
|
|
77
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
78
|
+
assertSellerOwnsClaimInParam
|
|
103
79
|
],
|
|
104
80
|
},
|
|
105
81
|
{
|
|
106
82
|
method: ["DELETE"],
|
|
107
83
|
matcher: "/vendor/claims/:id/request",
|
|
108
|
-
middlewares: [
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
112
|
-
operation: utils_1.PolicyOperation.delete,
|
|
113
|
-
},
|
|
84
|
+
middlewares: [
|
|
85
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
86
|
+
assertSellerOwnsClaimInParam
|
|
114
87
|
],
|
|
115
88
|
},
|
|
116
89
|
{
|
|
117
90
|
method: ["POST"],
|
|
118
91
|
matcher: "/vendor/claims/:id/claim-items",
|
|
119
92
|
middlewares: [
|
|
93
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
120
94
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimItemsReq),
|
|
121
95
|
assertSellerOwnsClaimInParam,
|
|
122
96
|
],
|
|
123
|
-
policies: [
|
|
124
|
-
{
|
|
125
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
126
|
-
operation: utils_1.PolicyOperation.update,
|
|
127
|
-
},
|
|
128
|
-
],
|
|
129
97
|
},
|
|
130
98
|
{
|
|
131
99
|
method: ["POST"],
|
|
132
100
|
matcher: "/vendor/claims/:id/claim-items/:action_id",
|
|
133
101
|
middlewares: [
|
|
102
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
134
103
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsItemsActionReq),
|
|
135
104
|
assertSellerOwnsClaimInParam,
|
|
136
105
|
],
|
|
137
|
-
policies: [
|
|
138
|
-
{
|
|
139
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
140
|
-
operation: utils_1.PolicyOperation.update,
|
|
141
|
-
},
|
|
142
|
-
],
|
|
143
106
|
},
|
|
144
107
|
{
|
|
145
108
|
method: ["DELETE"],
|
|
146
109
|
matcher: "/vendor/claims/:id/claim-items/:action_id",
|
|
147
|
-
middlewares: [
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
151
|
-
operation: utils_1.PolicyOperation.delete,
|
|
152
|
-
},
|
|
110
|
+
middlewares: [
|
|
111
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
112
|
+
assertSellerOwnsClaimInParam
|
|
153
113
|
],
|
|
154
114
|
},
|
|
155
115
|
{
|
|
156
116
|
method: ["POST"],
|
|
157
117
|
matcher: "/vendor/claims/:id/inbound/items",
|
|
158
118
|
middlewares: [
|
|
119
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
159
120
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsRequestReturnItemsReq),
|
|
160
121
|
assertSellerOwnsClaimInParam,
|
|
161
122
|
],
|
|
162
|
-
policies: [
|
|
163
|
-
{
|
|
164
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
165
|
-
operation: utils_1.PolicyOperation.update,
|
|
166
|
-
},
|
|
167
|
-
],
|
|
168
123
|
},
|
|
169
124
|
{
|
|
170
125
|
method: ["POST"],
|
|
171
126
|
matcher: "/vendor/claims/:id/inbound/items/:action_id",
|
|
172
127
|
middlewares: [
|
|
128
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
173
129
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsRequestItemsReturnActionReq),
|
|
174
130
|
assertSellerOwnsClaimInParam,
|
|
175
131
|
],
|
|
176
|
-
policies: [
|
|
177
|
-
{
|
|
178
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
179
|
-
operation: utils_1.PolicyOperation.update,
|
|
180
|
-
},
|
|
181
|
-
],
|
|
182
132
|
},
|
|
183
133
|
{
|
|
184
134
|
method: ["DELETE"],
|
|
185
135
|
matcher: "/vendor/claims/:id/inbound/items/:action_id",
|
|
186
|
-
middlewares: [
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
190
|
-
operation: utils_1.PolicyOperation.delete,
|
|
191
|
-
},
|
|
136
|
+
middlewares: [
|
|
137
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
138
|
+
assertSellerOwnsClaimInParam
|
|
192
139
|
],
|
|
193
140
|
},
|
|
194
141
|
{
|
|
195
142
|
method: ["POST"],
|
|
196
143
|
matcher: "/vendor/claims/:id/inbound/shipping-method",
|
|
197
144
|
middlewares: [
|
|
145
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
198
146
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsShippingReq),
|
|
199
147
|
assertSellerOwnsClaimInParam,
|
|
200
148
|
],
|
|
201
|
-
policies: [
|
|
202
|
-
{
|
|
203
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
204
|
-
operation: utils_1.PolicyOperation.update,
|
|
205
|
-
},
|
|
206
|
-
],
|
|
207
149
|
},
|
|
208
150
|
{
|
|
209
151
|
method: ["POST"],
|
|
210
152
|
matcher: "/vendor/claims/:id/inbound/shipping-method/:action_id",
|
|
211
153
|
middlewares: [
|
|
154
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
212
155
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsShippingActionReq),
|
|
213
156
|
assertSellerOwnsClaimInParam,
|
|
214
157
|
],
|
|
215
|
-
policies: [
|
|
216
|
-
{
|
|
217
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
218
|
-
operation: utils_1.PolicyOperation.update,
|
|
219
|
-
},
|
|
220
|
-
],
|
|
221
158
|
},
|
|
222
159
|
{
|
|
223
160
|
method: ["DELETE"],
|
|
224
161
|
matcher: "/vendor/claims/:id/inbound/shipping-method/:action_id",
|
|
225
|
-
middlewares: [
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
229
|
-
operation: utils_1.PolicyOperation.delete,
|
|
230
|
-
},
|
|
162
|
+
middlewares: [
|
|
163
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
164
|
+
assertSellerOwnsClaimInParam
|
|
231
165
|
],
|
|
232
166
|
},
|
|
233
167
|
{
|
|
234
168
|
method: ["POST"],
|
|
235
169
|
matcher: "/vendor/claims/:id/outbound/items",
|
|
236
170
|
middlewares: [
|
|
171
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
237
172
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsAddItemsReq),
|
|
238
173
|
assertSellerOwnsClaimInParam,
|
|
239
174
|
],
|
|
240
|
-
policies: [
|
|
241
|
-
{
|
|
242
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
243
|
-
operation: utils_1.PolicyOperation.update,
|
|
244
|
-
},
|
|
245
|
-
],
|
|
246
175
|
},
|
|
247
176
|
{
|
|
248
177
|
method: ["POST"],
|
|
249
178
|
matcher: "/vendor/claims/:id/outbound/items/:action_id",
|
|
250
179
|
middlewares: [
|
|
180
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
251
181
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsAddItemsActionReq),
|
|
252
182
|
assertSellerOwnsClaimInParam,
|
|
253
183
|
],
|
|
254
|
-
policies: [
|
|
255
|
-
{
|
|
256
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
257
|
-
operation: utils_1.PolicyOperation.update,
|
|
258
|
-
},
|
|
259
|
-
],
|
|
260
184
|
},
|
|
261
185
|
{
|
|
262
186
|
method: ["DELETE"],
|
|
263
187
|
matcher: "/vendor/claims/:id/outbound/items/:action_id",
|
|
264
|
-
middlewares: [
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
268
|
-
operation: utils_1.PolicyOperation.delete,
|
|
269
|
-
},
|
|
188
|
+
middlewares: [
|
|
189
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
190
|
+
assertSellerOwnsClaimInParam
|
|
270
191
|
],
|
|
271
192
|
},
|
|
272
193
|
{
|
|
273
194
|
method: ["POST"],
|
|
274
195
|
matcher: "/vendor/claims/:id/outbound/shipping-method",
|
|
275
196
|
middlewares: [
|
|
197
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
276
198
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsShippingReq),
|
|
277
199
|
assertSellerOwnsClaimInParam,
|
|
278
200
|
],
|
|
279
|
-
policies: [
|
|
280
|
-
{
|
|
281
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
282
|
-
operation: utils_1.PolicyOperation.update,
|
|
283
|
-
},
|
|
284
|
-
],
|
|
285
201
|
},
|
|
286
202
|
{
|
|
287
203
|
method: ["POST"],
|
|
288
204
|
matcher: "/vendor/claims/:id/outbound/shipping-method/:action_id",
|
|
289
205
|
middlewares: [
|
|
206
|
+
(0, utils_1.requirePermission)("orders.returns", "edit"),
|
|
290
207
|
(0, framework_1.validateAndTransformBody)(validators_1.VendorPostClaimsShippingActionReq),
|
|
291
208
|
assertSellerOwnsClaimInParam,
|
|
292
209
|
],
|
|
293
|
-
policies: [
|
|
294
|
-
{
|
|
295
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
296
|
-
operation: utils_1.PolicyOperation.update,
|
|
297
|
-
},
|
|
298
|
-
],
|
|
299
210
|
},
|
|
300
211
|
{
|
|
301
212
|
method: ["DELETE"],
|
|
302
213
|
matcher: "/vendor/claims/:id/outbound/shipping-method/:action_id",
|
|
303
|
-
middlewares: [
|
|
304
|
-
|
|
305
|
-
|
|
306
|
-
resource: policy_resources_1.PolicyResource.order_claim,
|
|
307
|
-
operation: utils_1.PolicyOperation.delete,
|
|
308
|
-
},
|
|
214
|
+
middlewares: [
|
|
215
|
+
(0, utils_1.requirePermission)("orders.returns", "manage"),
|
|
216
|
+
assertSellerOwnsClaimInParam
|
|
309
217
|
],
|
|
310
218
|
},
|
|
311
219
|
];
|
|
312
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
220
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,8 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.vendorCollectionsMiddlewares = void 0;
|
|
4
|
-
const
|
|
5
|
-
const utils_1 = require("@medusajs/framework/utils");
|
|
4
|
+
const utils_1 = require("../../utils");
|
|
6
5
|
const framework_1 = require("@medusajs/framework");
|
|
7
6
|
const query_config_1 = require("./query-config");
|
|
8
7
|
const validators_1 = require("./validators");
|
|
@@ -12,41 +11,26 @@ exports.vendorCollectionsMiddlewares = [
|
|
|
12
11
|
method: ["GET"],
|
|
13
12
|
matcher: "/vendor/collections",
|
|
14
13
|
middlewares: [
|
|
14
|
+
(0, utils_1.requirePermission)("product_collections", "view"),
|
|
15
15
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetCollectionsParams, query_config_1.listTransformQueryConfig),
|
|
16
16
|
],
|
|
17
|
-
policies: [
|
|
18
|
-
{
|
|
19
|
-
resource: policy_resources_1.PolicyResource.product_collection,
|
|
20
|
-
operation: utils_1.PolicyOperation.read,
|
|
21
|
-
},
|
|
22
|
-
],
|
|
23
17
|
},
|
|
24
18
|
{
|
|
25
19
|
method: ["GET"],
|
|
26
20
|
matcher: "/vendor/collections/:id",
|
|
27
21
|
middlewares: [
|
|
22
|
+
(0, utils_1.requirePermission)("product_collections", "view"),
|
|
28
23
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetCollectionParams, query_config_1.retrieveTransformQueryConfig),
|
|
29
24
|
],
|
|
30
|
-
policies: [
|
|
31
|
-
{
|
|
32
|
-
resource: policy_resources_1.PolicyResource.product_collection,
|
|
33
|
-
operation: utils_1.PolicyOperation.read,
|
|
34
|
-
},
|
|
35
|
-
],
|
|
36
25
|
},
|
|
37
26
|
{
|
|
38
27
|
method: ["POST"],
|
|
39
28
|
matcher: "/vendor/collections/:id/products",
|
|
40
29
|
middlewares: [
|
|
30
|
+
(0, utils_1.requirePermission)("product_collections", "edit"),
|
|
41
31
|
(0, framework_1.validateAndTransformBody)((0, validators_2.createLinkBody)()),
|
|
42
32
|
(0, framework_1.validateAndTransformQuery)(validators_1.VendorGetCollectionParams, query_config_1.retrieveTransformQueryConfig),
|
|
43
33
|
],
|
|
44
|
-
policies: [
|
|
45
|
-
{
|
|
46
|
-
resource: policy_resources_1.PolicyResource.product_collection,
|
|
47
|
-
operation: utils_1.PolicyOperation.update,
|
|
48
|
-
},
|
|
49
|
-
],
|
|
50
34
|
},
|
|
51
35
|
];
|
|
52
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
36
|
+
//# sourceMappingURL=data:application/json;base64,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
|