@restura/core 0.1.2 → 0.1.3

package/dist/index.js

@@ -1761,7 +1761,7 @@ var import_core_utils4 = require("@redskytech/core-utils");
 var SqlEngine = class {
   async runQueryForRoute(req, routeData, schema) {
     if (!this.doesRoleHavePermissionToTable(req.requesterDetails.role, schema, routeData.table))
-      throw new RsError("UNAUTHORIZED", "You do not have permission to access this table");
+      throw new RsError("FORBIDDEN", "You do not have permission to access this table");
     switch (routeData.method) {
       case "POST":
         return this.executeCreateRequest(req, routeData, schema);
@@ -2254,7 +2254,7 @@ var PsqlEngine = class extends SqlEngine {
       if (item.subquery || this.doesRoleHavePermissionToColumn(userRole, schema, item, routeData.joins))
         selectColumns.push(item);
     });
-    if (!selectColumns.length) throw new RsError("UNAUTHORIZED", `You do not have permission to access this data.`);
+    if (!selectColumns.length) throw new RsError("FORBIDDEN", `You do not have permission to access this data.`);
     let selectStatement = "SELECT \n";
     selectStatement += `	${selectColumns.map((item) => {
       if (item.subquery) {
@@ -2362,7 +2362,7 @@ DELETE FROM "${routeData.table}" ${joinStatement} ${whereClause}`;
     let joinStatements = "";
     joins.forEach((item) => {
       if (!this.doesRoleHavePermissionToTable(userRole, schema, item.table))
-        throw new RsError("UNAUTHORIZED", "You do not have permission to access this table");
+        throw new RsError("FORBIDDEN", "You do not have permission to access this table");
       if (item.custom) {
         const customReplaced = this.replaceParamKeywords(item.custom, routeData, req, sqlParams);
         joinStatements += `	${item.type} JOIN ${escapeColumnName(item.table)}${item.alias ? `AS "${item.alias}"` : ""} ON ${customReplaced}
@@ -3005,8 +3005,7 @@ var ResturaEngine = class {
   validateAuthorization(req, routeData) {
     const role = req.requesterDetails.role;
     if (routeData.roles.length === 0 || !role) return;
-    if (!routeData.roles.includes(role))
-      throw new RsError("UNAUTHORIZED", "Not authorized to access this endpoint");
+    if (!routeData.roles.includes(role)) throw new RsError("FORBIDDEN", "Not authorized to access this endpoint");
   }
   getRouteData(method, baseUrl, path5) {
     const endpoint = this.schema.endpoints.find((item) => {