@opengis/fastify-table 1.4.42 → 1.4.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "1.4.42",
+  "version": "1.4.44",
   "type": "module",
   "description": "core-plugins",
   "keywords": [

package/server/plugins/pg/funcs/getMeta.js

@@ -11,7 +11,7 @@ export default async function getMeta(opt, nocache) {
 
   if (pg?.options?.database && data[pg.options.database]?.[table] && !nocache) return data[pg.options.database][table];
 
-  if (!pg?.tlist?.includes(table)) {
+  if (!pg?.tlist?.includes(table) && !pg?.tlist?.includes(table?.replace?.(/"/g, ''))) {
     return { error: `${table} - not found`, status: 400 };
   }
 

package/server/plugins/policy/funcs/checkPolicy.js

@@ -18,6 +18,9 @@ export default function checkPolicy(req, reply) {
   const {
     originalUrl: path, hostname, query, params, headers, method, session, routeOptions, unittest,
   } = req;
+
+  if (config.local || unittest) { return null; }
+
   const body = JSON.stringify(req?.body || {}).substring(30);
 
   const isAdmin = process.env.NODE_ENV === 'admin' || hostname.split(':').shift() === config.adminDomain || config.admin || hostname.startsWith('admin');
@@ -75,7 +78,7 @@ export default function checkPolicy(req, reply) {
   }
 
   /* === policy: public === */
-  if (policy.includes('public') || skipCheckPolicy(path) || !config.pg || config.auth?.disable || config.local || config.debug || unittest) {
+  if (policy.includes('public') || skipCheckPolicy(path) || !config.pg || config.auth?.disable || config.local || config.debug) {
     return null;
   }
 

package/server/routes/properties/controllers/properties.post.js

@@ -1,4 +1,6 @@
-import { logger, dataInsert, pgClients } from '../../../../utils.js';
+import {
+  config, logger, dataInsert, pgClients,
+} from '../../../../utils.js';
 
 function checkValueType(val) {
   if (val && typeof val === 'object') {
@@ -15,7 +17,7 @@ export default async function postAppSettings({
 }, reply) {
   const { uid } = user;
 
-  if ((!params.entity || params.entity === 'app') && !user?.user_type?.includes?.('admin')) {
+  if ((!params.entity || params.entity === 'app') && !user?.user_type?.includes?.('admin') && !config.local) {
     return reply.status(403).send('access restricted');
   }