@nauticana/sail 1.1.25 → 1.1.27

package/src/service/user_payment_method.service.ts

@@ -8,13 +8,10 @@ import { UserPaymentMethod } from '../model/appdata';
 /**
  * UserPaymentMethodService — consumer-side saved-payment-methods API.
  *
- * list and delete go through keel's generic REST CRUD against the
- * basis user_payment_method table — that table is UserSpecific (FK
- * column `user_id`), so the auto-filter scopes reads + owner-locks
- * DELETE without any custom server-side glue. setDefault has a custom
- * endpoint because it needs an atomic multi-row UPDATE
- * (`SET is_default = (id = ?) WHERE user_id = session`) that abstract
- * single-row CRUD can't express.
+ * list goes through keel's generic REST CRUD against the UserSpecific basis
+ * user_payment_method table. remove and setDefault are keel table actions:
+ * remove detaches the method at the provider before deleting the row, so keel
+ * grants no generic DELETE on the table.
  */
 @Injectable({ providedIn: 'root' })
 export class UserPaymentMethodService extends BaseRestService {
@@ -29,15 +26,12 @@ export class UserPaymentMethodService extends BaseRestService {
     return this.backend.list<UserPaymentMethod>('user_payment_method');
   }
 
-  /** Delete a saved payment method. user_id is auto-scoped by keel. */
-  delete(id: number): Observable<{ message: string }> {
-    return this.backend.delete('user_payment_method', { Id: String(id) });
+  /** Detach a saved payment method at the provider and delete it. */
+  remove(id: number): Observable<{ message: string }> {
+    return this.http.post<{ message: string }>(this.url(RestURL.paymentMethodRemoveURL), { id });
   }
 
-  /**
-   * Mark one row as default; clears every other row in the same call.
-   * Custom endpoint — see service-class doc for the rationale.
-   */
+  /** Mark one row as default; clears every other row in the same call. */
   setDefault(id: number): Observable<{ message: string }> {
     return this.http.post<{ message: string }>(this.url(RestURL.paymentMethodSetDefaultURL), { id });
   }

package/src/util/errors.ts

@@ -31,6 +31,11 @@ export function isTransportFailure(err: unknown): boolean {
   return statusOf(err) === 0;
 }
 
+/** True for keel's 403: the session is valid but lacks the grant for this action. */
+export function isPermissionDenied(err: unknown): boolean {
+  return statusOf(err) === 403;
+}
+
 /**
  * Human-readable message from any sail error shape — SailApiError (BackendService),
  * raw HttpErrorResponse (direct HttpClient calls), or plain Error.