@mercurjs/core 2.3.6-canary.2 → 2.3.6-canary.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (189) hide show
  1. package/.medusa/server/src/api/admin/campaigns/middlewares.js +3 -9
  2. package/.medusa/server/src/api/admin/collections/middlewares.js +8 -33
  3. package/.medusa/server/src/api/admin/commission-rates/middlewares.js +9 -39
  4. package/.medusa/server/src/api/admin/core-route-permissions.d.ts +18 -0
  5. package/.medusa/server/src/api/admin/core-route-permissions.js +79 -0
  6. package/.medusa/server/src/api/admin/customer-groups/middlewares.js +3 -9
  7. package/.medusa/server/src/api/admin/inventory-items/middlewares.js +3 -9
  8. package/.medusa/server/src/api/admin/members/middlewares.js +3 -9
  9. package/.medusa/server/src/api/admin/middlewares.js +6 -2
  10. package/.medusa/server/src/api/admin/offers/middlewares.js +10 -21
  11. package/.medusa/server/src/api/admin/order-groups/middlewares.js +4 -15
  12. package/.medusa/server/src/api/admin/orders/middlewares.js +3 -9
  13. package/.medusa/server/src/api/admin/payouts/middlewares.js +4 -15
  14. package/.medusa/server/src/api/admin/price-lists/middlewares.js +3 -9
  15. package/.medusa/server/src/api/admin/product-attributes/middlewares.js +11 -51
  16. package/.medusa/server/src/api/admin/product-categories/middlewares.js +14 -45
  17. package/.medusa/server/src/api/admin/product-changes/middlewares.js +8 -15
  18. package/.medusa/server/src/api/admin/products/[id]/route.js +8 -3
  19. package/.medusa/server/src/api/admin/products/middlewares.js +21 -99
  20. package/.medusa/server/src/api/admin/products/validators.d.ts +3 -3
  21. package/.medusa/server/src/api/admin/products/validators.js +4 -3
  22. package/.medusa/server/src/api/admin/promotions/middlewares.js +7 -21
  23. package/.medusa/server/src/api/admin/reservations/middlewares.js +3 -9
  24. package/.medusa/server/src/api/admin/reviews/middlewares.js +8 -33
  25. package/.medusa/server/src/api/admin/sellers/middlewares.js +32 -117
  26. package/.medusa/server/src/api/admin/sellers/query-config.js +2 -3
  27. package/.medusa/server/src/api/admin/shipping-options/middlewares.js +3 -9
  28. package/.medusa/server/src/api/admin/shipping-profiles/middlewares.js +3 -9
  29. package/.medusa/server/src/api/admin/stock-locations/middlewares.js +3 -9
  30. package/.medusa/server/src/api/admin/users/me/route.d.ts +3 -0
  31. package/.medusa/server/src/api/admin/users/me/route.js +24 -0
  32. package/.medusa/server/src/api/utils/ensure-seller-middleware.js +1 -15
  33. package/.medusa/server/src/api/utils/index.d.ts +1 -2
  34. package/.medusa/server/src/api/utils/index.js +2 -3
  35. package/.medusa/server/src/api/utils/permissions-middleware.d.ts +25 -0
  36. package/.medusa/server/src/api/utils/permissions-middleware.js +103 -0
  37. package/.medusa/server/src/api/vendor/campaigns/middlewares.js +9 -39
  38. package/.medusa/server/src/api/vendor/claims/middlewares.js +37 -129
  39. package/.medusa/server/src/api/vendor/collections/middlewares.js +5 -21
  40. package/.medusa/server/src/api/vendor/currencies/middlewares.js +4 -15
  41. package/.medusa/server/src/api/vendor/customer-groups/middlewares.js +9 -39
  42. package/.medusa/server/src/api/vendor/customers/middlewares.js +5 -21
  43. package/.medusa/server/src/api/vendor/exchanges/middlewares.js +31 -105
  44. package/.medusa/server/src/api/vendor/fulfillment-providers/middlewares.js +3 -9
  45. package/.medusa/server/src/api/vendor/fulfillment-sets/middlewares.js +8 -33
  46. package/.medusa/server/src/api/vendor/inventory-items/middlewares.js +14 -69
  47. package/.medusa/server/src/api/vendor/members/me/route.js +6 -3
  48. package/.medusa/server/src/api/vendor/members/middlewares.js +2 -17
  49. package/.medusa/server/src/api/vendor/middlewares.js +2 -1
  50. package/.medusa/server/src/api/vendor/offers/middlewares.js +10 -45
  51. package/.medusa/server/src/api/vendor/order-edits/middlewares.js +23 -69
  52. package/.medusa/server/src/api/vendor/orders/middlewares.js +18 -63
  53. package/.medusa/server/src/api/vendor/payments/middlewares.js +7 -33
  54. package/.medusa/server/src/api/vendor/payout-accounts/middlewares.js +6 -27
  55. package/.medusa/server/src/api/vendor/payouts/middlewares.js +4 -15
  56. package/.medusa/server/src/api/vendor/price-lists/middlewares.js +11 -51
  57. package/.medusa/server/src/api/vendor/price-preferences/middlewares.js +4 -15
  58. package/.medusa/server/src/api/vendor/product-attributes/middlewares.js +4 -15
  59. package/.medusa/server/src/api/vendor/product-categories/middlewares.js +5 -21
  60. package/.medusa/server/src/api/vendor/product-tags/middlewares.js +4 -15
  61. package/.medusa/server/src/api/vendor/product-types/middlewares.js +4 -15
  62. package/.medusa/server/src/api/vendor/product-variants/middlewares.js +3 -9
  63. package/.medusa/server/src/api/vendor/products/middlewares.js +24 -75
  64. package/.medusa/server/src/api/vendor/products/validators.d.ts +2 -2
  65. package/.medusa/server/src/api/vendor/products/validators.js +4 -3
  66. package/.medusa/server/src/api/vendor/promotions/middlewares.js +14 -69
  67. package/.medusa/server/src/api/vendor/refund-reasons/middlewares.js +4 -15
  68. package/.medusa/server/src/api/vendor/regions/middlewares.js +4 -15
  69. package/.medusa/server/src/api/vendor/reservations/middlewares.js +9 -33
  70. package/.medusa/server/src/api/vendor/return-reasons/middlewares.js +4 -15
  71. package/.medusa/server/src/api/vendor/returns/middlewares.js +26 -135
  72. package/.medusa/server/src/api/vendor/reviews/middlewares.js +5 -21
  73. package/.medusa/server/src/api/vendor/sales-channels/middlewares.js +5 -21
  74. package/.medusa/server/src/api/vendor/sellers/me/route.js +1 -1
  75. package/.medusa/server/src/api/vendor/sellers/middlewares.js +16 -92
  76. package/.medusa/server/src/api/vendor/sellers/query-config.d.ts +0 -4
  77. package/.medusa/server/src/api/vendor/sellers/query-config.js +5 -11
  78. package/.medusa/server/src/api/vendor/shipping-option-types/middlewares.js +4 -15
  79. package/.medusa/server/src/api/vendor/shipping-options/middlewares.js +9 -39
  80. package/.medusa/server/src/api/vendor/shipping-profiles/middlewares.js +4 -15
  81. package/.medusa/server/src/api/vendor/stock-locations/middlewares.js +11 -51
  82. package/.medusa/server/src/api/vendor/stock-locations/validators.d.ts +2 -2
  83. package/.medusa/server/src/api/vendor/uploads/middlewares.js +5 -9
  84. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.d.ts +5 -0
  85. package/.medusa/server/src/modules/payout/migrations/Migration20260928120000.js +14 -0
  86. package/.medusa/server/src/modules/payout/models/payout-account.js +2 -2
  87. package/.medusa/server/src/permissions/definitions/api-keys.d.ts +1 -0
  88. package/.medusa/server/src/permissions/definitions/api-keys.js +8 -0
  89. package/.medusa/server/src/permissions/definitions/commissions.d.ts +1 -0
  90. package/.medusa/server/src/permissions/definitions/commissions.js +9 -0
  91. package/.medusa/server/src/permissions/definitions/customers.d.ts +1 -0
  92. package/.medusa/server/src/permissions/definitions/customers.js +9 -0
  93. package/.medusa/server/src/permissions/definitions/fulfillment.d.ts +1 -0
  94. package/.medusa/server/src/permissions/definitions/fulfillment.js +10 -0
  95. package/.medusa/server/src/permissions/definitions/inventory.d.ts +1 -0
  96. package/.medusa/server/src/permissions/definitions/inventory.js +10 -0
  97. package/.medusa/server/src/permissions/definitions/members.d.ts +1 -0
  98. package/.medusa/server/src/permissions/definitions/members.js +9 -0
  99. package/.medusa/server/src/permissions/definitions/notifications.d.ts +1 -0
  100. package/.medusa/server/src/permissions/definitions/notifications.js +8 -0
  101. package/.medusa/server/src/permissions/definitions/offers.d.ts +1 -0
  102. package/.medusa/server/src/permissions/definitions/offers.js +8 -0
  103. package/.medusa/server/src/permissions/definitions/orders.d.ts +1 -0
  104. package/.medusa/server/src/permissions/definitions/orders.js +12 -0
  105. package/.medusa/server/src/permissions/definitions/payments.d.ts +1 -0
  106. package/.medusa/server/src/permissions/definitions/payments.js +8 -0
  107. package/.medusa/server/src/permissions/definitions/payouts.d.ts +1 -0
  108. package/.medusa/server/src/permissions/definitions/payouts.js +9 -0
  109. package/.medusa/server/src/permissions/definitions/price-lists.d.ts +1 -0
  110. package/.medusa/server/src/permissions/definitions/price-lists.js +9 -0
  111. package/.medusa/server/src/permissions/definitions/product-attributes.d.ts +1 -0
  112. package/.medusa/server/src/permissions/definitions/product-attributes.js +8 -0
  113. package/.medusa/server/src/permissions/definitions/products.d.ts +1 -0
  114. package/.medusa/server/src/permissions/definitions/products.js +14 -0
  115. package/.medusa/server/src/permissions/definitions/promotions.d.ts +1 -0
  116. package/.medusa/server/src/permissions/definitions/promotions.js +9 -0
  117. package/.medusa/server/src/permissions/definitions/refund-reasons.d.ts +1 -0
  118. package/.medusa/server/src/permissions/definitions/refund-reasons.js +8 -0
  119. package/.medusa/server/src/permissions/definitions/regions.d.ts +1 -0
  120. package/.medusa/server/src/permissions/definitions/regions.js +9 -0
  121. package/.medusa/server/src/permissions/definitions/return-reasons.d.ts +1 -0
  122. package/.medusa/server/src/permissions/definitions/return-reasons.js +8 -0
  123. package/.medusa/server/src/permissions/definitions/reviews.d.ts +1 -0
  124. package/.medusa/server/src/permissions/definitions/reviews.js +8 -0
  125. package/.medusa/server/src/permissions/definitions/roles.d.ts +1 -0
  126. package/.medusa/server/src/permissions/definitions/roles.js +9 -0
  127. package/.medusa/server/src/permissions/definitions/sales-channels.d.ts +1 -0
  128. package/.medusa/server/src/permissions/definitions/sales-channels.js +8 -0
  129. package/.medusa/server/src/permissions/definitions/sellers.d.ts +1 -0
  130. package/.medusa/server/src/permissions/definitions/sellers.js +10 -0
  131. package/.medusa/server/src/permissions/definitions/store.d.ts +1 -0
  132. package/.medusa/server/src/permissions/definitions/store.js +8 -0
  133. package/.medusa/server/src/permissions/definitions/translations.d.ts +1 -0
  134. package/.medusa/server/src/permissions/definitions/translations.js +8 -0
  135. package/.medusa/server/src/permissions/definitions/users.d.ts +1 -0
  136. package/.medusa/server/src/permissions/definitions/users.js +8 -0
  137. package/.medusa/server/src/permissions/definitions/workflow-executions.d.ts +1 -0
  138. package/.medusa/server/src/permissions/definitions/workflow-executions.js +8 -0
  139. package/.medusa/server/src/permissions/index.d.ts +27 -0
  140. package/.medusa/server/src/permissions/index.js +44 -0
  141. package/.medusa/server/src/permissions/registry.d.ts +18 -0
  142. package/.medusa/server/src/permissions/registry.js +86 -0
  143. package/.medusa/server/src/utils/sanitize-rich-text.d.ts +2 -0
  144. package/.medusa/server/src/utils/sanitize-rich-text.js +50 -0
  145. package/.medusa/server/src/with-mercur.js +2 -15
  146. package/.medusa/server/src/workflows/payout/workflows/create-payout.d.ts +4 -1
  147. package/.medusa/server/src/workflows/payout/workflows/create-payout.js +6 -2
  148. package/.medusa/server/src/workflows/product-edit/workflows/apply-product-change-actions.js +18 -2
  149. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.d.ts +1 -0
  150. package/.medusa/server/src/workflows/product-edit/workflows/product-edit-delete-product.js +2 -2
  151. package/.medusa/server/src/workflows/seller/steps/index.d.ts +0 -1
  152. package/.medusa/server/src/workflows/seller/steps/index.js +1 -2
  153. package/.medusa/server/src/workflows/seller/workflows/accept-member-invite.js +1 -2
  154. package/.medusa/server/src/workflows/seller/workflows/create-seller-account.js +1 -2
  155. package/.medusa/server/src/workflows/seller/workflows/index.d.ts +0 -1
  156. package/.medusa/server/src/workflows/seller/workflows/index.js +1 -2
  157. package/package.json +6 -4
  158. package/.medusa/server/src/api/utils/policy-resources.d.ts +0 -59
  159. package/.medusa/server/src/api/utils/policy-resources.js +0 -64
  160. package/.medusa/server/src/api/utils/rbac-role-fields.d.ts +0 -1
  161. package/.medusa/server/src/api/utils/rbac-role-fields.js +0 -10
  162. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.d.ts +0 -19
  163. package/.medusa/server/src/api/utils/resolve-admin-roles-middleware.js +0 -55
  164. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.d.ts +0 -16
  165. package/.medusa/server/src/api/vendor/rbac/me/permissions/route.js +0 -58
  166. package/.medusa/server/src/links/seller-member-rbac-role.d.ts +0 -2
  167. package/.medusa/server/src/links/seller-member-rbac-role.js +0 -41
  168. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.d.ts +0 -11
  169. package/.medusa/server/src/modules/seller/utils/ensure-seller-default-roles.js +0 -128
  170. package/.medusa/server/src/policies/commission.d.ts +0 -1
  171. package/.medusa/server/src/policies/commission.js +0 -12
  172. package/.medusa/server/src/policies/offer.d.ts +0 -1
  173. package/.medusa/server/src/policies/offer.js +0 -7
  174. package/.medusa/server/src/policies/payout.d.ts +0 -1
  175. package/.medusa/server/src/policies/payout.js +0 -7
  176. package/.medusa/server/src/policies/product-attribute.d.ts +0 -1
  177. package/.medusa/server/src/policies/product-attribute.js +0 -7
  178. package/.medusa/server/src/policies/product-edit.d.ts +0 -1
  179. package/.medusa/server/src/policies/product-edit.js +0 -7
  180. package/.medusa/server/src/policies/review.d.ts +0 -1
  181. package/.medusa/server/src/policies/review.js +0 -7
  182. package/.medusa/server/src/policies/seller.d.ts +0 -1
  183. package/.medusa/server/src/policies/seller.js +0 -13
  184. package/.medusa/server/src/utils/generate-resource-policies.d.ts +0 -7
  185. package/.medusa/server/src/utils/generate-resource-policies.js +0 -30
  186. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.d.ts +0 -2
  187. package/.medusa/server/src/workflows/seller/steps/create-seller-default-roles.js +0 -16
  188. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.d.ts +0 -2
  189. package/.medusa/server/src/workflows/seller/workflows/create-seller-defaults.js +0 -11
@@ -1,266 +1,181 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.adminSellersMiddlewares = void 0;
4
- const policy_resources_1 = require("../../utils/policy-resources");
5
- const utils_1 = require("@medusajs/framework/utils");
4
+ const utils_1 = require("../../utils");
6
5
  const framework_1 = require("@medusajs/framework");
7
6
  const query_config_1 = require("./query-config");
8
7
  const validators_1 = require("./validators");
9
8
  exports.adminSellersMiddlewares = [
9
+ {
10
+ method: ["POST"],
11
+ matcher: "/admin/sellers/:id/members/invites/:invite_id/resend",
12
+ middlewares: [(0, utils_1.requirePermission)("members.invites", "edit")],
13
+ },
14
+ {
15
+ method: ["DELETE"],
16
+ matcher: "/admin/sellers/:id/members/invites/:invite_id",
17
+ middlewares: [(0, utils_1.requirePermission)("members.invites", "manage")],
18
+ },
10
19
  {
11
20
  method: ["GET"],
12
21
  matcher: "/admin/sellers",
13
22
  middlewares: [
23
+ (0, utils_1.requirePermission)("sellers", "view"),
14
24
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellersParams, query_config_1.adminSellerQueryConfig.list),
15
25
  ],
16
- policies: [
17
- {
18
- resource: policy_resources_1.PolicyResource.seller,
19
- operation: utils_1.PolicyOperation.read,
20
- },
21
- ],
22
26
  },
23
27
  {
24
28
  method: ["POST"],
25
29
  matcher: "/admin/sellers",
26
30
  middlewares: [
31
+ (0, utils_1.requirePermission)("sellers", "edit"),
27
32
  (0, framework_1.validateAndTransformBody)(validators_1.AdminCreateSeller),
28
33
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
29
34
  ],
30
- policies: [
31
- {
32
- resource: policy_resources_1.PolicyResource.seller,
33
- operation: utils_1.PolicyOperation.create,
34
- },
35
- ],
36
35
  },
37
36
  {
38
37
  method: ["GET"],
39
38
  matcher: "/admin/sellers/:id",
40
39
  middlewares: [
40
+ (0, utils_1.requirePermission)("sellers", "view"),
41
41
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
42
42
  ],
43
- policies: [
44
- {
45
- resource: policy_resources_1.PolicyResource.seller,
46
- operation: utils_1.PolicyOperation.read,
47
- },
48
- ],
49
43
  },
50
44
  {
51
45
  method: ["POST"],
52
46
  matcher: "/admin/sellers/:id",
53
47
  middlewares: [
48
+ (0, utils_1.requirePermission)("sellers", "edit"),
54
49
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUpdateSeller),
55
50
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
56
51
  ],
57
- policies: [
58
- {
59
- resource: policy_resources_1.PolicyResource.seller,
60
- operation: utils_1.PolicyOperation.update,
61
- },
62
- ],
63
52
  },
64
53
  {
65
54
  method: ["POST"],
66
55
  matcher: "/admin/sellers/:id/suspend",
67
56
  middlewares: [
57
+ (0, utils_1.requirePermission)("sellers.approval", "edit"),
68
58
  (0, framework_1.validateAndTransformBody)(validators_1.AdminSuspendSeller),
69
59
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
70
60
  ],
71
- policies: [
72
- {
73
- resource: policy_resources_1.PolicyResource.seller,
74
- operation: utils_1.PolicyOperation.update,
75
- },
76
- ],
77
61
  },
78
62
  {
79
63
  method: ["POST"],
80
64
  matcher: "/admin/sellers/:id/unsuspend",
81
65
  middlewares: [
66
+ (0, utils_1.requirePermission)("sellers.approval", "edit"),
82
67
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUnsuspendSeller),
83
68
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
84
69
  ],
85
- policies: [
86
- {
87
- resource: policy_resources_1.PolicyResource.seller,
88
- operation: utils_1.PolicyOperation.update,
89
- },
90
- ],
91
70
  },
92
71
  {
93
72
  method: ["POST"],
94
73
  matcher: "/admin/sellers/:id/approve",
95
74
  middlewares: [
75
+ (0, utils_1.requirePermission)("sellers.approval", "edit"),
96
76
  (0, framework_1.validateAndTransformBody)(validators_1.AdminApproveSeller),
97
77
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
98
78
  ],
99
- policies: [
100
- {
101
- resource: policy_resources_1.PolicyResource.seller,
102
- operation: utils_1.PolicyOperation.update,
103
- },
104
- ],
105
79
  },
106
80
  {
107
81
  method: ["POST"],
108
82
  matcher: "/admin/sellers/:id/terminate",
109
83
  middlewares: [
84
+ (0, utils_1.requirePermission)("sellers.approval", "edit"),
110
85
  (0, framework_1.validateAndTransformBody)(validators_1.AdminTerminateSeller),
111
86
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
112
87
  ],
113
- policies: [
114
- {
115
- resource: policy_resources_1.PolicyResource.seller,
116
- operation: utils_1.PolicyOperation.update,
117
- },
118
- ],
119
88
  },
120
89
  {
121
90
  method: ["POST"],
122
91
  matcher: "/admin/sellers/:id/unterminate",
123
92
  middlewares: [
93
+ (0, utils_1.requirePermission)("sellers.approval", "edit"),
124
94
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUnterminateSeller),
125
95
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
126
96
  ],
127
- policies: [
128
- {
129
- resource: policy_resources_1.PolicyResource.seller,
130
- operation: utils_1.PolicyOperation.update,
131
- },
132
- ],
133
97
  },
134
98
  {
135
99
  method: ["POST"],
136
100
  matcher: "/admin/sellers/:id/address",
137
101
  middlewares: [
102
+ (0, utils_1.requirePermission)("sellers", "edit"),
138
103
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUpsertSellerAddress),
139
104
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
140
105
  ],
141
- policies: [
142
- {
143
- resource: policy_resources_1.PolicyResource.seller,
144
- operation: utils_1.PolicyOperation.update,
145
- },
146
- ],
147
106
  },
148
107
  {
149
108
  method: ["POST"],
150
109
  matcher: "/admin/sellers/:id/payment-details",
151
110
  middlewares: [
111
+ (0, utils_1.requirePermission)("sellers", "edit"),
152
112
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUpsertSellerPaymentDetails),
153
113
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
154
114
  ],
155
- policies: [
156
- {
157
- resource: policy_resources_1.PolicyResource.seller,
158
- operation: utils_1.PolicyOperation.update,
159
- },
160
- ],
161
115
  },
162
116
  {
163
117
  method: ["POST"],
164
118
  matcher: "/admin/sellers/:id/professional-details",
165
119
  middlewares: [
120
+ (0, utils_1.requirePermission)("sellers", "edit"),
166
121
  (0, framework_1.validateAndTransformBody)(validators_1.AdminUpsertSellerProfessionalDetails),
167
122
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
168
123
  ],
169
- policies: [
170
- {
171
- resource: policy_resources_1.PolicyResource.seller,
172
- operation: utils_1.PolicyOperation.update,
173
- },
174
- ],
175
124
  },
176
125
  {
177
126
  method: ["DELETE"],
178
127
  matcher: "/admin/sellers/:id/professional-details",
179
128
  middlewares: [
129
+ (0, utils_1.requirePermission)("sellers", "manage"),
180
130
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerParams, query_config_1.adminSellerQueryConfig.retrieve),
181
131
  ],
182
- policies: [
183
- {
184
- resource: policy_resources_1.PolicyResource.seller,
185
- operation: utils_1.PolicyOperation.delete,
186
- },
187
- ],
188
132
  },
189
133
  {
190
134
  method: ["GET"],
191
135
  matcher: "/admin/sellers/:id/members",
192
136
  middlewares: [
137
+ (0, utils_1.requirePermission)("members", "view"),
193
138
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellersParams, query_config_1.adminMembersQueryConfig.list),
194
139
  ],
195
- policies: [
196
- {
197
- resource: policy_resources_1.PolicyResource.seller_member,
198
- operation: utils_1.PolicyOperation.read,
199
- },
200
- ],
201
140
  },
202
141
  {
203
142
  method: ["GET"],
204
143
  matcher: "/admin/sellers/:id/products",
205
144
  middlewares: [
145
+ (0, utils_1.requirePermission)("products", "view"),
206
146
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellerProductsParams, query_config_1.adminSellerProductsQueryConfig.list),
207
147
  ],
208
- policies: [
209
- {
210
- resource: policy_resources_1.PolicyResource.product,
211
- operation: utils_1.PolicyOperation.read,
212
- },
213
- ],
214
148
  },
215
149
  {
216
150
  method: ["POST"],
217
151
  matcher: "/admin/sellers/:id/members",
218
152
  middlewares: [
153
+ (0, utils_1.requirePermission)("members", "edit"),
219
154
  (0, framework_1.validateAndTransformBody)(validators_1.AdminAddSellerMember),
220
155
  ],
221
- policies: [
222
- {
223
- resource: policy_resources_1.PolicyResource.seller_member,
224
- operation: utils_1.PolicyOperation.update,
225
- },
226
- ],
227
156
  },
228
157
  {
229
158
  method: ["GET"],
230
159
  matcher: "/admin/sellers/:id/members/invites",
231
160
  middlewares: [
161
+ (0, utils_1.requirePermission)("members.invites", "view"),
232
162
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetSellersParams, query_config_1.adminMemberInvitesQueryConfig.list),
233
163
  ],
234
- policies: [
235
- {
236
- resource: policy_resources_1.PolicyResource.member_invite,
237
- operation: utils_1.PolicyOperation.read,
238
- },
239
- ],
240
164
  },
241
165
  {
242
166
  method: ["POST"],
243
167
  matcher: "/admin/sellers/:id/members/invite",
244
168
  middlewares: [
169
+ (0, utils_1.requirePermission)("members.invites", "edit"),
245
170
  (0, framework_1.validateAndTransformBody)(validators_1.AdminInviteSellerMember),
246
171
  ],
247
- policies: [
248
- {
249
- resource: policy_resources_1.PolicyResource.member_invite,
250
- operation: utils_1.PolicyOperation.update,
251
- },
252
- ],
253
172
  },
254
173
  {
255
174
  method: ["DELETE"],
256
175
  matcher: "/admin/sellers/:id/members/:member_id",
257
- middlewares: [],
258
- policies: [
259
- {
260
- resource: policy_resources_1.PolicyResource.seller_member,
261
- operation: utils_1.PolicyOperation.delete,
262
- },
176
+ middlewares: [
177
+ (0, utils_1.requirePermission)("members", "manage"),
263
178
  ],
264
179
  },
265
180
  ];
266
- //# sourceMappingURL=data:application/json;base64,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
181
+ //# sourceMappingURL=data:application/json;base64,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
@@ -1,7 +1,6 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.adminSellerProductsQueryConfig = exports.adminMemberInvitesQueryConfig = exports.adminMembersQueryConfig = exports.adminSellerQueryConfig = exports.adminSellerRetrieveFields = exports.adminSellerFields = void 0;
4
- const rbac_role_fields_1 = require("../../utils/rbac-role-fields");
5
4
  exports.adminSellerFields = [
6
5
  "id",
7
6
  "name",
@@ -54,7 +53,7 @@ exports.adminSellerQueryConfig = {
54
53
  exports.adminMembersQueryConfig = {
55
54
  list: {
56
55
  get defaults() {
57
- return (0, rbac_role_fields_1.withRbacRoleFields)([
56
+ return ([
58
57
  "id",
59
58
  "is_owner",
60
59
  "member.*",
@@ -99,4 +98,4 @@ exports.adminSellerProductsQueryConfig = {
99
98
  isList: true,
100
99
  },
101
100
  };
102
- //# sourceMappingURL=data:application/json;base64,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
101
+ //# sourceMappingURL=data:application/json;base64,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
@@ -1,8 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.adminShippingOptionsMiddlewares = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const policy_resources_1 = require("../../utils/policy-resources");
4
+ const utils_1 = require("../../utils");
6
5
  const http_1 = require("@medusajs/framework/http");
7
6
  const framework_1 = require("@medusajs/framework");
8
7
  const zod_1 = require("zod");
@@ -40,15 +39,10 @@ exports.adminShippingOptionsMiddlewares = [
40
39
  method: ["GET"],
41
40
  matcher: LIST_MATCHER,
42
41
  middlewares: [
42
+ (0, utils_1.requirePermission)("shipping_options", "view"),
43
43
  (0, framework_1.validateAndTransformQuery)(AdminGetShippingOptionsParamsWithSeller, query_config_1.listTransformQueryConfig),
44
44
  maybeApplySellerShippingOptionFilter,
45
45
  ],
46
- policies: [
47
- {
48
- resource: policy_resources_1.PolicyResource.shipping_option,
49
- operation: utils_1.PolicyOperation.read,
50
- },
51
- ],
52
46
  },
53
47
  ];
54
- //# sourceMappingURL=data:application/json;base64,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
48
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL3NoaXBwaW5nLW9wdGlvbnMvbWlkZGxld2FyZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsdUNBQStDO0FBQy9DLG1EQU1pQztBQUNqQyxtREFBK0Q7QUFDL0QsNkJBQXVCO0FBQ3ZCLHVGQUFzRztBQUN0RywyRkFBbUc7QUFFbkcsMEZBQWdGO0FBRWhGLE1BQU0sWUFBWSxHQUFHLHlCQUF5QixDQUFBO0FBRTlDLE1BQU0sWUFBWSxHQUFHLENBQUMsaURBQW9CLENBQ3hDLGdEQUFnRCxDQUNqRCxJQUFJLEVBQUUsQ0FBc0IsQ0FBQTtBQUU3QixNQUFNLGtCQUFrQixHQUFHLFlBQVksQ0FBQyxNQUFNLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRTtJQUN2RCxJQUFJLEtBQUssQ0FBQyxPQUFPLEtBQUssWUFBWTtRQUFFLE9BQU8sSUFBSSxDQUFBO0lBQy9DLE1BQU0sT0FBTyxHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQztRQUN6QyxDQUFDLENBQUMsS0FBSyxDQUFDLE1BQU07UUFDZCxDQUFDLENBQUMsS0FBSyxDQUFDLE1BQU07WUFDZCxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDO1lBQ2hCLENBQUMsQ0FBQyxFQUFFLENBQUE7SUFDTixPQUFPLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQTtBQUNqQyxDQUFDLENBQUMsQ0FBQTtBQUVGLE1BQU0sdUNBQXVDLEdBQzNDLDBDQUE2QixDQUFDLEtBQUssQ0FDakMsT0FBQyxDQUFDLE1BQU0sQ0FBQztJQUNQLFNBQVMsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxFQUFFLE9BQUMsQ0FBQyxLQUFLLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsRUFBRTtDQUNqRSxDQUFDLENBQ0gsQ0FBQTtBQUVILE1BQU0sb0NBQW9DLEdBQUcsQ0FDM0MsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0IsRUFDeEIsRUFBRTtJQUNGLElBQUksQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsU0FBUyxFQUFFLENBQUM7UUFDcEMsT0FBTyxJQUFJLEVBQUUsQ0FBQTtJQUNmLENBQUM7SUFFRCxPQUFPLElBQUEsMkJBQW9CLEVBQUM7UUFDMUIsVUFBVSxFQUFFLHdCQUF3QjtRQUNwQyxVQUFVLEVBQUUsb0JBQW9CO1FBQ2hDLGVBQWUsRUFBRSxXQUFXO0tBQzdCLENBQUMsQ0FBQyxHQUFHLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxDQUFBO0FBQ3BCLENBQUMsQ0FBQTtBQUVZLFFBQUEsK0JBQStCLEdBQXNCO0lBQ2hFLEdBQUcsa0JBQWtCO0lBQ3JCO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLFlBQVk7UUFDckIsV0FBVyxFQUFFO1lBQ1gsSUFBQSx5QkFBaUIsRUFBQyxrQkFBa0IsRUFBRSxNQUFNLENBQUM7WUFDN0MsSUFBQSxxQ0FBeUIsRUFDdkIsdUNBQXVDLEVBQ3ZDLHVDQUF3QixDQUN6QjtZQUNELG9DQUFvQztTQUNyQztLQUNGO0NBQ0YsQ0FBQSJ9
@@ -1,8 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.adminShippingProfilesMiddlewares = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const policy_resources_1 = require("../../utils/policy-resources");
4
+ const utils_1 = require("../../utils");
6
5
  const framework_1 = require("@medusajs/framework");
7
6
  const validators_1 = require("@medusajs/medusa/api/admin/shipping-profiles/validators");
8
7
  const query_config_1 = require("@medusajs/medusa/api/admin/shipping-profiles/query-config");
@@ -25,14 +24,9 @@ exports.adminShippingProfilesMiddlewares = [
25
24
  method: ["GET"],
26
25
  matcher: LIST_MATCHER,
27
26
  middlewares: [
27
+ (0, utils_1.requirePermission)("shipping_profiles", "view"),
28
28
  (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetShippingProfilesParams, query_config_1.listTransformQueryConfig),
29
29
  ],
30
- policies: [
31
- {
32
- resource: policy_resources_1.PolicyResource.shipping_profile,
33
- operation: utils_1.PolicyOperation.read,
34
- },
35
- ],
36
30
  },
37
31
  ];
38
- //# sourceMappingURL=data:application/json;base64,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
32
+ //# sourceMappingURL=data:application/json;base64,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
@@ -1,8 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.adminStockLocationsMiddlewares = void 0;
4
- const utils_1 = require("@medusajs/framework/utils");
5
- const policy_resources_1 = require("../../utils/policy-resources");
4
+ const utils_1 = require("../../utils");
6
5
  const http_1 = require("@medusajs/framework/http");
7
6
  const framework_1 = require("@medusajs/framework");
8
7
  const zod_1 = require("zod");
@@ -40,15 +39,10 @@ exports.adminStockLocationsMiddlewares = [
40
39
  method: ["GET"],
41
40
  matcher: LIST_MATCHER,
42
41
  middlewares: [
42
+ (0, utils_1.requirePermission)("stock_locations", "view"),
43
43
  (0, framework_1.validateAndTransformQuery)(AdminGetStockLocationsParamsWithSeller, query_config_1.listTransformQueryConfig),
44
44
  maybeApplySellerStockLocationFilter,
45
45
  ],
46
- policies: [
47
- {
48
- resource: policy_resources_1.PolicyResource.stock_location,
49
- operation: utils_1.PolicyOperation.read,
50
- },
51
- ],
52
46
  },
53
47
  ];
54
- //# sourceMappingURL=data:application/json;base64,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
48
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,3 @@
1
+ import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
2
+ import { HttpTypes } from "@mercurjs/types";
3
+ export declare const GET: (req: AuthenticatedMedusaRequest<HttpTypes.AdminUserParams>, res: MedusaResponse<HttpTypes.AdminUserWithPermissionsResponse>) => Promise<void>;
@@ -0,0 +1,24 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.GET = void 0;
4
+ const utils_1 = require("@medusajs/framework/utils");
5
+ const utils_2 = require("../../../utils");
6
+ const GET = async (req, res) => {
7
+ const id = req.auth_context.actor_id;
8
+ if (!id) {
9
+ throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `User ID not found`);
10
+ }
11
+ const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
12
+ const withPermissions = (0, utils_2.takePermissionsField)(req);
13
+ const { data: [user], } = await query.graph({
14
+ entity: "user",
15
+ fields: req.queryConfig.fields,
16
+ filters: { id },
17
+ });
18
+ if (!user) {
19
+ throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `User with id: ${id} was not found`);
20
+ }
21
+ res.status(200).json({ user: (0, utils_2.attachPermissions)(req, user, withPermissions) });
22
+ };
23
+ exports.GET = GET;
24
+ //# sourceMappingURL=data:application/json;base64,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
@@ -2,8 +2,6 @@
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.ensureSellerMiddleware = ensureSellerMiddleware;
4
4
  const utils_1 = require("@medusajs/framework/utils");
5
- const types_1 = require("@mercurjs/types");
6
- const ensure_seller_default_roles_1 = require("../../modules/seller/utils/ensure-seller-default-roles");
7
5
  const SELLER_ID_HEADER = "x-seller-id";
8
6
  async function ensureSellerMiddleware(req, res, next) {
9
7
  let sellerId = req.get(SELLER_ID_HEADER) || req.session?.seller_id;
@@ -29,18 +27,6 @@ async function ensureSellerMiddleware(req, res, next) {
29
27
  seller_member: sellerMember,
30
28
  currency_code: sellerMember.seller.currency_code,
31
29
  };
32
- if (!utils_1.FeatureFlag.isFeatureEnabled("rbac")) {
33
- return next();
34
- }
35
- const rbacService = req.scope.resolve(utils_1.Modules.RBAC);
36
- await (0, ensure_seller_default_roles_1.ensureSellerDefaultRoles)(rbacService);
37
- req.auth_context.app_metadata = {
38
- ...req.auth_context.app_metadata,
39
- // Members predating RBAC have no role. Route policy checks reject an actor
40
- // with an empty role list outright, so fall back to the administration role
41
- // rather than locking them out of their own store.
42
- roles: [sellerMember.role_id || types_1.SellerRole.SELLER_ADMINISTRATION],
43
- };
44
30
  next();
45
31
  }
46
- //# sourceMappingURL=data:application/json;base64,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
32
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW5zdXJlLXNlbGxlci1taWRkbGV3YXJlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL2FwaS91dGlscy9lbnN1cmUtc2VsbGVyLW1pZGRsZXdhcmUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFhQSx3REFpREM7QUF6REQscURBR2tDO0FBR2xDLE1BQU0sZ0JBQWdCLEdBQUcsYUFBYSxDQUFBO0FBRS9CLEtBQUssVUFBVSxzQkFBc0IsQ0FDMUMsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0I7SUFFeEIsSUFBSSxRQUFRLEdBQUcsR0FBRyxDQUFDLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxJQUFJLEdBQUcsQ0FBQyxPQUFPLEVBQUUsU0FBUyxDQUFBO0lBRWxFLElBQUksQ0FBQyxRQUFRLEVBQUUsQ0FBQztRQUNkLE9BQU8sSUFBSSxDQUNULElBQUksbUJBQVcsQ0FDYixtQkFBVyxDQUFDLEtBQUssQ0FBQyxXQUFXLEVBQzdCLEdBQUcsZ0JBQWdCLHVDQUF1QyxDQUMzRCxDQUNGLENBQUE7SUFDSCxDQUFDO0lBRUQsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLFlBQVksQ0FBQyxRQUFRLENBQUE7SUFDMUMsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFFaEUsTUFBTSxFQUFFLElBQUksRUFBRSxhQUFhLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQy9DO1FBQ0UsTUFBTSxFQUFFLGVBQWU7UUFDdkIsTUFBTSxFQUFFLENBQUMsSUFBSSxFQUFFLFdBQVcsRUFBRSxXQUFXLEVBQUUsU0FBUyxFQUFFLFVBQVUsQ0FBQztRQUMvRCxPQUFPLEVBQUU7WUFDUCxTQUFTLEVBQUUsUUFBUTtZQUNuQixTQUFTLEVBQUUsUUFBUTtTQUNwQjtLQUNGLEVBQ0QsRUFBRSxLQUFLLEVBQUUsRUFBRSxNQUFNLEVBQUUsSUFBSSxFQUFFLEVBQUUsQ0FDNUIsQ0FBQTtJQUVELElBQUksQ0FBQyxhQUFhLENBQUMsTUFBTSxFQUFFLENBQUM7UUFDMUIsT0FBTyxJQUFJLENBQ1QsSUFBSSxtQkFBVyxDQUNiLG1CQUFXLENBQUMsS0FBSyxDQUFDLFdBQVcsRUFDN0IsNkNBQTZDLENBQzlDLENBQ0YsQ0FBQTtJQUNILENBQUM7SUFFRCxNQUFNLFlBQVksR0FBRyxhQUFhLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFFckMsR0FBRyxDQUFDLGNBQWMsR0FBRztRQUNuQixTQUFTLEVBQUUsUUFBUTtRQUNuQixhQUFhLEVBQUUsWUFBWTtRQUMzQixhQUFhLEVBQUUsWUFBWSxDQUFDLE1BQU0sQ0FBQyxhQUFhO0tBQ2hDLENBQUE7SUFFbEIsSUFBSSxFQUFFLENBQUE7QUFDUixDQUFDIn0=
@@ -2,8 +2,7 @@ export * from "./unless-base-url";
2
2
  export * from "./scan-unauthenticated-routes";
3
3
  export * from "./ensure-seller-middleware";
4
4
  export * from "./ensure-seller-scope-middleware";
5
- export * from "./resolve-admin-roles-middleware";
6
- export * from "./policy-resources";
5
+ export * from "./permissions-middleware";
7
6
  export * from "./filter-by-seller-id";
8
7
  export * from "./vendor-cors-middleware";
9
8
  export * from "./format-product-attributes";
@@ -18,8 +18,7 @@ __exportStar(require("./unless-base-url"), exports);
18
18
  __exportStar(require("./scan-unauthenticated-routes"), exports);
19
19
  __exportStar(require("./ensure-seller-middleware"), exports);
20
20
  __exportStar(require("./ensure-seller-scope-middleware"), exports);
21
- __exportStar(require("./resolve-admin-roles-middleware"), exports);
22
- __exportStar(require("./policy-resources"), exports);
21
+ __exportStar(require("./permissions-middleware"), exports);
23
22
  __exportStar(require("./filter-by-seller-id"), exports);
24
23
  __exportStar(require("./vendor-cors-middleware"), exports);
25
24
  __exportStar(require("./format-product-attributes"), exports);
@@ -27,4 +26,4 @@ __exportStar(require("./product-attribute-fields"), exports);
27
26
  __exportStar(require("./filter-attributes-by-category-link"), exports);
28
27
  __exportStar(require("./offers"), exports);
29
28
  __exportStar(require("./split-order-payment-status"), exports);
30
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3V0aWxzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxvREFBaUM7QUFDakMsZ0VBQTZDO0FBQzdDLDZEQUEwQztBQUMxQyxtRUFBZ0Q7QUFDaEQsbUVBQWdEO0FBQ2hELHFEQUFrQztBQUNsQyx3REFBcUM7QUFDckMsMkRBQXdDO0FBQ3hDLDhEQUEyQztBQUMzQyw2REFBMEM7QUFDMUMsdUVBQW9EO0FBQ3BELDJDQUF3QjtBQUN4QiwrREFBNEMifQ==
29
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3V0aWxzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxvREFBaUM7QUFDakMsZ0VBQTZDO0FBQzdDLDZEQUEwQztBQUMxQyxtRUFBZ0Q7QUFDaEQsMkRBQXdDO0FBQ3hDLHdEQUFxQztBQUNyQywyREFBd0M7QUFDeEMsOERBQTJDO0FBQzNDLDZEQUEwQztBQUMxQyx1RUFBb0Q7QUFDcEQsMkNBQXdCO0FBQ3hCLCtEQUE0QyJ9
@@ -0,0 +1,25 @@
1
+ import { AuthenticatedMedusaRequest, MedusaNextFunction, MedusaResponse } from "@medusajs/framework";
2
+ import { ConfigModule } from "@medusajs/framework/types";
3
+ import { PermissionMap, PermissionRequirement, PermissionRight, PermissionSurface } from "@mercurjs/types";
4
+ declare module "express" {
5
+ interface Request {
6
+ permissions?: PermissionMap;
7
+ permissions_enforced?: boolean;
8
+ required_permissions?: PermissionRequirement[];
9
+ }
10
+ }
11
+ export declare function isPermissionsModuleEnabled(config: ConfigModule): boolean;
12
+ export declare function resolvePermissionsMiddleware(surface: PermissionSurface): (req: AuthenticatedMedusaRequest, _res: MedusaResponse, next: MedusaNextFunction) => Promise<void>;
13
+ export declare const REQUIRED_PERMISSION: unique symbol;
14
+ export declare function requirePermission(key: string, right: PermissionRight): ((req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction) => void) & {
15
+ [REQUIRED_PERMISSION]: PermissionRequirement;
16
+ };
17
+ export declare const PERMISSIONS_FIELD = "permissions";
18
+ /**
19
+ * `permissions` is a virtual field: pull it out of the query config before it
20
+ * reaches `query.graph`, and report whether the client asked for it.
21
+ */
22
+ export declare function takePermissionsField(req: AuthenticatedMedusaRequest): boolean;
23
+ export declare function attachPermissions<T extends object>(req: AuthenticatedMedusaRequest, entity: T, requested: boolean): T & {
24
+ permissions?: PermissionMap;
25
+ };