@mercurjs/core 2.3.6-canary.6 → 2.3.6-canary.7

package/.medusa/server/src/api/admin/core-route-permissions.js

@@ -46,7 +46,8 @@ exports.CORE_ROUTE_PERMISSIONS = [
     { pattern: /^\/admin\/stores(\/[^/]+)?$/, key: "store", methods: { GET: undefined } },
     { pattern: /^\/admin\/stores(\/|$)/, key: "store" },
     { pattern: /^\/admin\/invites(\/|$)/, key: "users" },
-    { pattern: /^\/admin\/users\/me$/, key: "users", methods: { GET: undefined } },
+    // Reading and editing your own profile needs no users permission.
+    { pattern: /^\/admin\/users\/me$/, key: "users", methods: { GET: undefined, POST: undefined } },
     { pattern: /^\/admin\/users(\/|$)/, key: "users" },
     { pattern: /^\/admin\/api-keys(\/|$)/, key: "api_keys" },
     { pattern: /^\/admin\/(translations|locales)(\/|$)/, key: "translations" },
@@ -78,4 +79,4 @@ function enforceCoreRoutePermissions(req, res, next) {
     }
     return (0, permissions_middleware_1.requirePermission)(match.key, match.right)(req, res, next);
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvYWRtaW4vY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUF3RUEsNERBbUJDO0FBTUQsa0VBYUM7QUF2R0QsNEVBQW1FO0FBUW5FLE1BQU0sUUFBUSxHQUFHLENBQUMsTUFBYyxFQUFtQixFQUFFLENBQ25ELE1BQU0sS0FBSyxLQUFLLElBQUksTUFBTSxLQUFLLE1BQU07SUFDbkMsQ0FBQyxDQUFDLE1BQU07SUFDUixDQUFDLENBQUMsTUFBTSxLQUFLLFFBQVE7UUFDbkIsQ0FBQyxDQUFDLFFBQVE7UUFDVixDQUFDLENBQUMsTUFBTSxDQUFBO0FBRWQsNEVBQTRFO0FBQy9ELFFBQUEsc0JBQXNCLEdBQTBCO0lBQzNELEVBQUUsT0FBTyxFQUFFLDhFQUE4RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUNwSCxFQUFFLE9BQU8sRUFBRSw4REFBOEQsRUFBRSxHQUFHLEVBQUUsaUJBQWlCLEVBQUU7SUFDbkcsRUFBRSxPQUFPLEVBQUUsNkRBQTZELEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBRWxHLEVBQUUsT0FBTyxFQUFFLGdEQUFnRCxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRixFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDdkUsRUFBRSxPQUFPLEVBQUUsNENBQTRDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ2hGLEVBQUUsT0FBTyxFQUFFLDZDQUE2QyxFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDL0UsRUFBRSxPQUFPLEVBQUUsdUNBQXVDLEVBQUUsR0FBRyxFQUFFLFFBQVEsRUFBRTtJQUNuRSxFQUFFLE9BQU8sRUFBRSxnREFBZ0QsRUFBRSxHQUFHLEVBQUUsVUFBVSxFQUFFO0lBRTlFLEVBQUUsT0FBTyxFQUFFLGlDQUFpQyxFQUFFLEdBQUcsRUFBRSxpQkFBaUIsRUFBRTtJQUN0RSxFQUFFLE9BQU8sRUFBRSwyQkFBMkIsRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFO0lBRTFELEVBQUUsT0FBTyxFQUFFLG9DQUFvQyxFQUFFLEdBQUcsRUFBRSxvQkFBb0IsRUFBRTtJQUM1RSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUscUJBQXFCLEVBQUU7SUFDdEUsRUFBRSxPQUFPLEVBQUUsK0JBQStCLEVBQUUsR0FBRyxFQUFFLGVBQWUsRUFBRTtJQUNsRSxFQUFFLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSxHQUFHLEVBQUUsY0FBYyxFQUFFO0lBQ2hFLEVBQUUsT0FBTyxFQUFFLDZEQUE2RCxFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDM0YsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLDhCQUE4QixFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDaEUsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLG1DQUFtQyxFQUFFLEdBQUcsRUFBRSxtQkFBbUIsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUsYUFBYSxFQUFFO0lBQzlELEVBQUUsT0FBTyxFQUFFLDRCQUE0QixFQUFFLEdBQUcsRUFBRSxZQUFZLEVBQUU7SUFDNUQsRUFBRSxPQUFPLEVBQUUsMkJBQTJCLEVBQUUsR0FBRyxFQUFFLFdBQVcsRUFBRTtJQUMxRCxFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsbUJBQW1CLEVBQUU7SUFDMUUsRUFBRSxPQUFPLEVBQUUsMERBQTBELEVBQUUsR0FBRyxFQUFFLGtCQUFrQixFQUFFO0lBQ2hHLEVBQUUsT0FBTyxFQUFFLHVFQUF1RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUU3RyxFQUFFLE9BQU8sRUFBRSxzQ0FBc0MsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFO0lBQ25FLEVBQUUsT0FBTyxFQUFFLHVEQUF1RCxFQUFFLEdBQUcsRUFBRSxhQUFhLEVBQUU7SUFDeEYsRUFBRSxPQUFPLEVBQUUsZ0NBQWdDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ3BFLEVBQUUsT0FBTyxFQUFFLGdDQUFnQyxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRSxFQUFFLE9BQU8sRUFBRSxnQ0FBZ0MsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDcEUsMEZBQTBGO0lBQzFGLEVBQUUsT0FBTyxFQUFFLDZCQUE2QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUUsT0FBTyxFQUFFLEVBQUUsR0FBRyxFQUFFLFNBQVMsRUFBRSxFQUFFO0lBQ3JGLEVBQUUsT0FBTyxFQUFFLHdCQUF3QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUU7SUFDbkQsRUFBRSxPQUFPLEVBQUUseUJBQXlCLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRTtJQUNwRCxFQUFFLE9BQU8sRUFBRSxzQkFBc0IsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFLE9BQU8sRUFBRSxFQUFFLEdBQUcsRUFBRSxTQUFTLEVBQUUsRUFBRTtJQUM5RSxFQUFFLE9BQU8sRUFBRSx1QkFBdUIsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0lBQ2xELEVBQUUsT0FBTyxFQUFFLDBCQUEwQixFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDeEQsRUFBRSxPQUFPLEVBQUUsd0NBQXdDLEVBQUUsR0FBRyxFQUFFLGNBQWMsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSwrQkFBK0IsRUFBRSxHQUFHLEVBQUUsZUFBZSxFQUFFO0lBQ2xFLEVBQUUsT0FBTyxFQUFFLHNDQUFzQyxFQUFFLEdBQUcsRUFBRSxxQkFBcUIsRUFBRTtJQUMvRSxFQUFFLE9BQU8sRUFBRSxxRkFBcUYsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0NBQ2pILENBQUE7QUFFRCxTQUFnQix3QkFBd0IsQ0FDdEMsSUFBWSxFQUNaLE1BQWM7SUFFZCxNQUFNLElBQUksR0FBRyw4QkFBc0IsQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUNyRCxTQUFTLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FDN0IsQ0FBQTtJQUVELElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNWLE9BQU8sU0FBUyxDQUFBO0lBQ2xCLENBQUM7SUFFRCxNQUFNLEtBQUssR0FBRyxNQUFNLENBQUMsV0FBVyxFQUFFLENBQUE7SUFDbEMsSUFBSSxJQUFJLENBQUMsT0FBTyxJQUFJLEtBQUssSUFBSSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDMUMsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsQ0FBQTtRQUNqQyxPQUFPLEtBQUssQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFHLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFBO0lBQ2hELENBQUM7SUFFRCxPQUFPLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxHQUFHLEVBQUUsS0FBSyxFQUFFLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFBO0FBQ2xELENBQUM7QUFFRDs7O0dBR0c7QUFDSCxTQUFnQiwyQkFBMkIsQ0FDekMsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0I7SUFFeEIsTUFBTSxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsV0FBVyxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFDdkQsTUFBTSxLQUFLLEdBQUcsd0JBQXdCLENBQUMsSUFBSSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQTtJQUV4RCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxPQUFPLElBQUksRUFBRSxDQUFBO0lBQ2YsQ0FBQztJQUVELE9BQU8sSUFBQSwwQ0FBaUIsRUFBQyxLQUFLLENBQUMsR0FBRyxFQUFFLEtBQUssQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxDQUFBO0FBQ2xFLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvYWRtaW4vY29yZS1yb3V0ZS1wZXJtaXNzaW9ucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUF5RUEsNERBbUJDO0FBTUQsa0VBYUM7QUF4R0QsNEVBQW1FO0FBUW5FLE1BQU0sUUFBUSxHQUFHLENBQUMsTUFBYyxFQUFtQixFQUFFLENBQ25ELE1BQU0sS0FBSyxLQUFLLElBQUksTUFBTSxLQUFLLE1BQU07SUFDbkMsQ0FBQyxDQUFDLE1BQU07SUFDUixDQUFDLENBQUMsTUFBTSxLQUFLLFFBQVE7UUFDbkIsQ0FBQyxDQUFDLFFBQVE7UUFDVixDQUFDLENBQUMsTUFBTSxDQUFBO0FBRWQsNEVBQTRFO0FBQy9ELFFBQUEsc0JBQXNCLEdBQTBCO0lBQzNELEVBQUUsT0FBTyxFQUFFLDhFQUE4RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUNwSCxFQUFFLE9BQU8sRUFBRSw4REFBOEQsRUFBRSxHQUFHLEVBQUUsaUJBQWlCLEVBQUU7SUFDbkcsRUFBRSxPQUFPLEVBQUUsNkRBQTZELEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBRWxHLEVBQUUsT0FBTyxFQUFFLGdEQUFnRCxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRixFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDdkUsRUFBRSxPQUFPLEVBQUUsNENBQTRDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ2hGLEVBQUUsT0FBTyxFQUFFLDZDQUE2QyxFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDL0UsRUFBRSxPQUFPLEVBQUUsdUNBQXVDLEVBQUUsR0FBRyxFQUFFLFFBQVEsRUFBRTtJQUNuRSxFQUFFLE9BQU8sRUFBRSxnREFBZ0QsRUFBRSxHQUFHLEVBQUUsVUFBVSxFQUFFO0lBRTlFLEVBQUUsT0FBTyxFQUFFLGlDQUFpQyxFQUFFLEdBQUcsRUFBRSxpQkFBaUIsRUFBRTtJQUN0RSxFQUFFLE9BQU8sRUFBRSwyQkFBMkIsRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFO0lBRTFELEVBQUUsT0FBTyxFQUFFLG9DQUFvQyxFQUFFLEdBQUcsRUFBRSxvQkFBb0IsRUFBRTtJQUM1RSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUscUJBQXFCLEVBQUU7SUFDdEUsRUFBRSxPQUFPLEVBQUUsK0JBQStCLEVBQUUsR0FBRyxFQUFFLGVBQWUsRUFBRTtJQUNsRSxFQUFFLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSxHQUFHLEVBQUUsY0FBYyxFQUFFO0lBQ2hFLEVBQUUsT0FBTyxFQUFFLDZEQUE2RCxFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDM0YsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLDhCQUE4QixFQUFFLEdBQUcsRUFBRSxjQUFjLEVBQUU7SUFDaEUsRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsR0FBRyxFQUFFLGlCQUFpQixFQUFFO0lBQ3RFLEVBQUUsT0FBTyxFQUFFLG1DQUFtQyxFQUFFLEdBQUcsRUFBRSxtQkFBbUIsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxHQUFHLEVBQUUsYUFBYSxFQUFFO0lBQzlELEVBQUUsT0FBTyxFQUFFLDRCQUE0QixFQUFFLEdBQUcsRUFBRSxZQUFZLEVBQUU7SUFDNUQsRUFBRSxPQUFPLEVBQUUsMkJBQTJCLEVBQUUsR0FBRyxFQUFFLFdBQVcsRUFBRTtJQUMxRCxFQUFFLE9BQU8sRUFBRSxtQ0FBbUMsRUFBRSxHQUFHLEVBQUUsbUJBQW1CLEVBQUU7SUFDMUUsRUFBRSxPQUFPLEVBQUUsMERBQTBELEVBQUUsR0FBRyxFQUFFLGtCQUFrQixFQUFFO0lBQ2hHLEVBQUUsT0FBTyxFQUFFLHVFQUF1RSxFQUFFLEdBQUcsRUFBRSxrQkFBa0IsRUFBRTtJQUU3RyxFQUFFLE9BQU8sRUFBRSxzQ0FBc0MsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFO0lBQ25FLEVBQUUsT0FBTyxFQUFFLHVEQUF1RCxFQUFFLEdBQUcsRUFBRSxhQUFhLEVBQUU7SUFDeEYsRUFBRSxPQUFPLEVBQUUsZ0NBQWdDLEVBQUUsR0FBRyxFQUFFLGdCQUFnQixFQUFFO0lBQ3BFLEVBQUUsT0FBTyxFQUFFLGdDQUFnQyxFQUFFLEdBQUcsRUFBRSxnQkFBZ0IsRUFBRTtJQUNwRSxFQUFFLE9BQU8sRUFBRSxnQ0FBZ0MsRUFBRSxHQUFHLEVBQUUsZ0JBQWdCLEVBQUU7SUFDcEUsMEZBQTBGO0lBQzFGLEVBQUUsT0FBTyxFQUFFLDZCQUE2QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUUsT0FBTyxFQUFFLEVBQUUsR0FBRyxFQUFFLFNBQVMsRUFBRSxFQUFFO0lBQ3JGLEVBQUUsT0FBTyxFQUFFLHdCQUF3QixFQUFFLEdBQUcsRUFBRSxPQUFPLEVBQUU7SUFDbkQsRUFBRSxPQUFPLEVBQUUseUJBQXlCLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRTtJQUNwRCxrRUFBa0U7SUFDbEUsRUFBRSxPQUFPLEVBQUUsc0JBQXNCLEVBQUUsR0FBRyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsRUFBRSxHQUFHLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsRUFBRTtJQUMvRixFQUFFLE9BQU8sRUFBRSx1QkFBdUIsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0lBQ2xELEVBQUUsT0FBTyxFQUFFLDBCQUEwQixFQUFFLEdBQUcsRUFBRSxVQUFVLEVBQUU7SUFDeEQsRUFBRSxPQUFPLEVBQUUsd0NBQXdDLEVBQUUsR0FBRyxFQUFFLGNBQWMsRUFBRTtJQUMxRSxFQUFFLE9BQU8sRUFBRSwrQkFBK0IsRUFBRSxHQUFHLEVBQUUsZUFBZSxFQUFFO0lBQ2xFLEVBQUUsT0FBTyxFQUFFLHNDQUFzQyxFQUFFLEdBQUcsRUFBRSxxQkFBcUIsRUFBRTtJQUMvRSxFQUFFLE9BQU8sRUFBRSxxRkFBcUYsRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO0NBQ2pILENBQUE7QUFFRCxTQUFnQix3QkFBd0IsQ0FDdEMsSUFBWSxFQUNaLE1BQWM7SUFFZCxNQUFNLElBQUksR0FBRyw4QkFBc0IsQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUNyRCxTQUFTLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FDN0IsQ0FBQTtJQUVELElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNWLE9BQU8sU0FBUyxDQUFBO0lBQ2xCLENBQUM7SUFFRCxNQUFNLEtBQUssR0FBRyxNQUFNLENBQUMsV0FBVyxFQUFFLENBQUE7SUFDbEMsSUFBSSxJQUFJLENBQUMsT0FBTyxJQUFJLEtBQUssSUFBSSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDMUMsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsQ0FBQTtRQUNqQyxPQUFPLEtBQUssQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFHLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFBO0lBQ2hELENBQUM7SUFFRCxPQUFPLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxHQUFHLEVBQUUsS0FBSyxFQUFFLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFBO0FBQ2xELENBQUM7QUFFRDs7O0dBR0c7QUFDSCxTQUFnQiwyQkFBMkIsQ0FDekMsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsSUFBd0I7SUFFeEIsTUFBTSxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsV0FBVyxJQUFJLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUE7SUFDdkQsTUFBTSxLQUFLLEdBQUcsd0JBQXdCLENBQUMsSUFBSSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQTtJQUV4RCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxPQUFPLElBQUksRUFBRSxDQUFBO0lBQ2YsQ0FBQztJQUVELE9BQU8sSUFBQSwwQ0FBaUIsRUFBQyxLQUFLLENBQUMsR0FBRyxFQUFFLEtBQUssQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLEVBQUUsR0FBRyxFQUFFLElBQUksQ0FBQyxDQUFBO0FBQ2xFLENBQUMifQ==

package/.medusa/server/src/api/admin/middlewares.js

@@ -28,6 +28,7 @@ const middlewares_19 = require("./inventory-items/middlewares");
 const middlewares_20 = require("./shipping-options/middlewares");
 const middlewares_21 = require("./shipping-profiles/middlewares");
 const middlewares_22 = require("./reviews/middlewares");
+const middlewares_23 = require("./users/middlewares");
 exports.adminMiddlewares = [
     {
         matcher: "/admin/*",
@@ -65,5 +66,6 @@ exports.adminMiddlewares = [
     ...middlewares_20.adminShippingOptionsMiddlewares,
     ...middlewares_21.adminShippingProfilesMiddlewares,
     ...middlewares_22.adminReviewsMiddlewares,
+    ...middlewares_23.adminUsersMiddlewares,
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL21pZGRsZXdhcmVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUNBLG1EQUErRDtBQUUvRCxvQ0FBdUQ7QUFDdkQscUVBQXNFO0FBQ3RFLDREQUF3RTtBQUN4RSw4REFBd0U7QUFDeEUsMERBQW9FO0FBQ3BFLHNEQUE2RDtBQUM3RCwrREFBOEU7QUFDOUUsc0RBQTZEO0FBQzdELHVEQUErRDtBQUMvRCx1REFBK0Q7QUFDL0QsdURBQStEO0FBQy9ELGdFQUFnRjtBQUVoRix3REFBaUU7QUFDakUsMkRBQXFFO0FBQ3JFLDBEQUFtRTtBQUNuRSw0REFBc0U7QUFDdEUsNERBQXVFO0FBQ3ZFLG1FQUFvRjtBQUNwRixtRUFBb0Y7QUFDcEYsZ0VBQThFO0FBQzlFLGdFQUE4RTtBQUM5RSw2REFBeUU7QUFDekUsZ0VBQThFO0FBQzlFLGlFQUFnRjtBQUNoRixrRUFBa0Y7QUFDbEYsd0RBQStEO0FBRWxELFFBQUEsZ0JBQWdCLEdBQXNCO0lBQ2pEO1FBQ0UsT0FBTyxFQUFFLFVBQVU7UUFDbkIsV0FBVyxFQUFFO1lBQ1gsSUFBQSxvQ0FBNEIsRUFBQyxPQUFPLENBQUM7WUFDckMsb0RBQTJCO1NBQzVCO0tBQ0Y7SUFDRCxHQUFHLHlDQUEyQjtJQUM5QjtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSwrQkFBK0I7UUFDeEMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIscUNBQXdCLEVBQ3hCLHlDQUEwQixDQUFDLFFBQVEsQ0FDcEM7U0FDRjtLQUNGO0lBQ0QsR0FBRyxvQ0FBc0I7SUFDekIsR0FBRyw0Q0FBOEI7SUFDakMsR0FBRyxvQ0FBc0I7SUFDekIsR0FBRyxxQ0FBdUI7SUFDMUIsR0FBRyxxQ0FBdUI7SUFDMUIsR0FBRyxxQ0FBdUI7SUFDMUIsR0FBRyw2Q0FBK0I7SUFDbEMsR0FBRyxzQ0FBd0I7SUFDM0IsR0FBRyx5Q0FBMEI7SUFDN0IsR0FBRyx3Q0FBeUI7SUFDNUIsR0FBRyx5Q0FBMEI7SUFDN0IsR0FBRywwQ0FBMkI7SUFDOUIsR0FBRyxnREFBaUM7SUFDcEMsR0FBRyxnREFBaUM7SUFDcEMsR0FBRyw2Q0FBOEI7SUFDakMsR0FBRyw2Q0FBOEI7SUFDakMsR0FBRywyQ0FBNEI7SUFDL0IsR0FBRyw2Q0FBOEI7SUFDakMsR0FBRyw4Q0FBK0I7SUFDbEMsR0FBRywrQ0FBZ0M7SUFDbkMsR0FBRyxzQ0FBdUI7Q0FDM0IsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/order-groups/middlewares.js

@@ -6,12 +6,18 @@ const framework_1 = require("@medusajs/framework");
 const helpers_1 = require("./helpers");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
+// The admin orders list is a list of order groups, so orders:view is enough
+// to read them.
+const canViewOrderGroups = (0, utils_1.requireAnyPermission)([
+    { key: "orders", right: "view" },
+    { key: "order_groups", right: "view" },
+]);
 exports.adminOrderGroupsMiddlewares = [
     {
         method: ["GET"],
         matcher: "/admin/order-groups",
         middlewares: [
-            (0, utils_1.requirePermission)("order_groups", "view"),
+            canViewOrderGroups,
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupsParams, query_config_1.adminOrderGroupQueryConfig.list),
             helpers_1.applyOrderGroupSellerFilter,
         ],
@@ -20,9 +26,9 @@ exports.adminOrderGroupsMiddlewares = [
         method: ["GET"],
         matcher: "/admin/order-groups/:id",
         middlewares: [
-            (0, utils_1.requirePermission)("order_groups", "view"),
+            canViewOrderGroups,
             (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetOrderGroupParams, query_config_1.adminOrderGroupQueryConfig.retrieve),
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL29yZGVyLWdyb3Vwcy9taWRkbGV3YXJlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSx1Q0FBa0Q7QUFDbEQsbURBRTRCO0FBRzVCLHVDQUF1RDtBQUN2RCxpREFBMkQ7QUFDM0QsNkNBR3FCO0FBRXJCLDRFQUE0RTtBQUM1RSxnQkFBZ0I7QUFDaEIsTUFBTSxrQkFBa0IsR0FBRyxJQUFBLDRCQUFvQixFQUFDO0lBQzlDLEVBQUUsR0FBRyxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFO0lBQ2hDLEVBQUUsR0FBRyxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFO0NBQ3ZDLENBQUMsQ0FBQTtBQUVXLFFBQUEsMkJBQTJCLEdBQXNCO0lBQzVEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHFCQUFxQjtRQUM5QixXQUFXLEVBQUU7WUFDWCxrQkFBa0I7WUFDbEIsSUFBQSxxQ0FBeUIsRUFDdkIsc0NBQXlCLEVBQ3pCLHlDQUEwQixDQUFDLElBQUksQ0FDaEM7WUFDRCxxQ0FBMkI7U0FDNUI7S0FDRjtJQUNEO1FBQ0UsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDO1FBQ2YsT0FBTyxFQUFFLHlCQUF5QjtRQUNsQyxXQUFXLEVBQUU7WUFDWCxrQkFBa0I7WUFDbEIsSUFBQSxxQ0FBeUIsRUFDdkIscUNBQXdCLEVBQ3hCLHlDQUEwQixDQUFDLFFBQVEsQ0FDcEM7U0FDRjtLQUNGO0NBQ0YsQ0FBQSJ9

package/.medusa/server/src/api/admin/users/me/route.d.ts

@@ -1,3 +1,4 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
 import { HttpTypes } from "@mercurjs/types";
 export declare const GET: (req: AuthenticatedMedusaRequest<HttpTypes.AdminUserParams>, res: MedusaResponse<HttpTypes.AdminUserWithPermissionsResponse>) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<HttpTypes.AdminUpdateUser>, res: MedusaResponse<HttpTypes.AdminUserResponse>) => Promise<void>;

package/.medusa/server/src/api/admin/users/me/route.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GET = void 0;
+exports.POST = exports.GET = void 0;
+const core_flows_1 = require("@medusajs/core-flows");
 const utils_1 = require("@medusajs/framework/utils");
 const utils_2 = require("../../../utils");
 const GET = async (req, res) => {
@@ -21,4 +22,21 @@ const GET = async (req, res) => {
     res.status(200).json({ user: (0, utils_2.attachPermissions)(req, user, withPermissions) });
 };
 exports.GET = GET;
-//# sourceMappingURL=data:application/json;base64,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
+const POST = async (req, res) => {
+    const id = req.auth_context.actor_id;
+    if (!id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `User ID not found`);
+    }
+    await (0, core_flows_1.updateUsersWorkflow)(req.scope).run({
+        input: { updates: [{ id, ...req.validatedBody }] },
+    });
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: [user], } = await query.graph({
+        entity: "user",
+        fields: req.queryConfig.fields,
+        filters: { id },
+    });
+    res.status(200).json({ user });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/users/middlewares.d.ts

@@ -0,0 +1,2 @@
+import { MiddlewareRoute } from "@medusajs/framework/http";
+export declare const adminUsersMiddlewares: MiddlewareRoute[];

package/.medusa/server/src/api/admin/users/middlewares.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminUsersMiddlewares = void 0;
+const framework_1 = require("@medusajs/framework");
+const query_config_1 = require("@medusajs/medusa/api/admin/users/query-config");
+const validators_1 = require("@medusajs/medusa/api/admin/users/validators");
+exports.adminUsersMiddlewares = [
+    {
+        method: ["POST"],
+        matcher: "/admin/users/me",
+        middlewares: [
+            (0, framework_1.validateAndTransformBody)(validators_1.AdminUpdateUser),
+            (0, framework_1.validateAndTransformQuery)(validators_1.AdminGetUserParams, query_config_1.retrieveTransformQueryConfig),
+        ],
+    },
+];
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/utils/permissions-middleware.d.ts

@@ -14,6 +14,13 @@ export declare const REQUIRED_PERMISSION: unique symbol;
 export declare function requirePermission(key: string, right: PermissionRight): ((req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction) => void) & {
     [REQUIRED_PERMISSION]: PermissionRequirement;
 };
+/**
+ * Passes when the actor holds any one of the requirements. For routes shared
+ * by several domains, e.g. uploads used by both products and the store profile.
+ */
+export declare function requireAnyPermission(requirements: PermissionRequirement[]): ((req: AuthenticatedMedusaRequest, res: MedusaResponse, next: MedusaNextFunction) => void) & {
+    [REQUIRED_PERMISSION]: PermissionRequirement;
+};
 export declare const PERMISSIONS_FIELD = "permissions";
 /**
  * `permissions` is a virtual field: pull it out of the query config before it

package/.medusa/server/src/api/utils/permissions-middleware.js

@@ -4,6 +4,7 @@ exports.PERMISSIONS_FIELD = exports.REQUIRED_PERMISSION = void 0;
 exports.isPermissionsModuleEnabled = isPermissionsModuleEnabled;
 exports.resolvePermissionsMiddleware = resolvePermissionsMiddleware;
 exports.requirePermission = requirePermission;
+exports.requireAnyPermission = requireAnyPermission;
 exports.takePermissionsField = takePermissionsField;
 exports.attachPermissions = attachPermissions;
 const utils_1 = require("@medusajs/framework/utils");
@@ -81,6 +82,35 @@ function requirePermission(key, right) {
         [exports.REQUIRED_PERMISSION]: { key, right },
     });
 }
+/**
+ * Passes when the actor holds any one of the requirements. For routes shared
+ * by several domains, e.g. uploads used by both products and the store profile.
+ */
+function requireAnyPermission(requirements) {
+    const middleware = (req, res, next) => {
+        req.required_permissions ??= [];
+        req.required_permissions.push(...requirements);
+        if (!req.permissions_enforced) {
+            return next();
+        }
+        if (requirements.some(({ key, right }) => (0, permissions_1.satisfiesRight)(req.permissions?.[key], right))) {
+            return next();
+        }
+        const [{ key, right }] = requirements;
+        res.status(403).json({
+            type: "not_allowed",
+            code: types_1.MISSING_PERMISSION_CODE,
+            message: `Missing required permission: ${requirements
+                .map((requirement) => `${requirement.key}:${requirement.right}`)
+                .join(" or ")}`,
+            permission: key,
+            right,
+        });
+    };
+    return Object.assign(middleware, {
+        [exports.REQUIRED_PERMISSION]: requirements[0],
+    });
+}
 exports.PERMISSIONS_FIELD = "permissions";
 /**
  * `permissions` is a virtual field: pull it out of the query config before it
@@ -100,4 +130,4 @@ function attachPermissions(req, entity, requested) {
     }
     return { ...entity, permissions: req.permissions };
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/sellers/middlewares.js

@@ -157,7 +157,6 @@ exports.vendorSellersMiddlewares = [
         method: ["GET"],
         matcher: "/vendor/sellers/:id/members",
         middlewares: [
-            (0, utils_1.requirePermission)("store", "view"),
             (0, utils_1.requirePermission)("members", "view"),
             ensure_seller_scope_middleware_1.ensureSellerIdParamMiddleware,
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetSellersParams, QueryConfig.listVendorMembersQueryConfig),
@@ -192,4 +191,4 @@ exports.vendorSellersMiddlewares = [
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/uploads/middlewares.js

@@ -12,9 +12,13 @@ exports.vendorUploadsMiddlewares = [
         method: ["POST"],
         matcher: "/vendor/uploads",
         middlewares: [
-            (0, utils_1.requirePermission)("products", "edit"),
-            upload.array("files")
+            // Product media and the store logo/banner both upload through here.
+            (0, utils_1.requireAnyPermission)([
+                { key: "products", right: "edit" },
+                { key: "store", right: "edit" },
+            ]),
+            upload.array("files"),
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mercurjs/core",
-  "version": "2.3.6-canary.6",
+  "version": "2.3.6-canary.7",
   "repository": {
     "type": "git",
     "url": "https://github.com/mercurjs/mercur",
@@ -61,7 +61,7 @@
     "@medusajs/medusa": "2.21.0",
     "@medusajs/test-utils": "2.21.0",
     "@medusajs/ui": "4.2.3",
-    "@mercurjs/types": "2.3.6-canary.6",
+    "@mercurjs/types": "2.3.6-canary.7",
     "@swc/core": "^1.7.28",
     "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
@@ -81,7 +81,7 @@
     "multer": "^2.0.2",
     "http-proxy-middleware": "^3.0.3",
     "jsonwebtoken": "^9.0.3",
-    "@mercurjs/cli": "2.3.6-canary.6"
+    "@mercurjs/cli": "2.3.6-canary.7"
   },
   "peerDependencies": {
     "@medusajs/admin-sdk": ">=2.21.0",