@stamhoofd/backend 2.122.8 → 2.122.9

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@stamhoofd/backend",
-    "version": "2.122.8",
+    "version": "2.122.9",
     "type": "module",
     "main": "./dist/index.js",
     "exports": {
@@ -57,20 +57,20 @@
         "@simonbackx/simple-endpoints": "1.21.1",
         "@simonbackx/simple-errors": "1.5.0",
         "@simonbackx/simple-logging": "1.0.1",
-        "@stamhoofd/backend-env": "2.122.8",
-        "@stamhoofd/backend-i18n": "2.122.8",
-        "@stamhoofd/backend-middleware": "2.122.8",
-        "@stamhoofd/crons": "2.122.8",
-        "@stamhoofd/email": "2.122.8",
-        "@stamhoofd/excel-writer": "2.122.8",
-        "@stamhoofd/logging": "2.122.8",
-        "@stamhoofd/models": "2.122.8",
-        "@stamhoofd/object-differ": "2.122.8",
-        "@stamhoofd/queues": "2.122.8",
-        "@stamhoofd/sql": "2.122.8",
-        "@stamhoofd/structures": "2.122.8",
-        "@stamhoofd/types": "2.122.8",
-        "@stamhoofd/utility": "2.122.8",
+        "@stamhoofd/backend-env": "2.122.9",
+        "@stamhoofd/backend-i18n": "2.122.9",
+        "@stamhoofd/backend-middleware": "2.122.9",
+        "@stamhoofd/crons": "2.122.9",
+        "@stamhoofd/email": "2.122.9",
+        "@stamhoofd/excel-writer": "2.122.9",
+        "@stamhoofd/logging": "2.122.9",
+        "@stamhoofd/models": "2.122.9",
+        "@stamhoofd/object-differ": "2.122.9",
+        "@stamhoofd/queues": "2.122.9",
+        "@stamhoofd/sql": "2.122.9",
+        "@stamhoofd/structures": "2.122.9",
+        "@stamhoofd/types": "2.122.9",
+        "@stamhoofd/utility": "2.122.9",
         "archiver": "7.0.1",
         "axios": "1.16.0",
         "base-x": "3.0.11",
@@ -91,7 +91,7 @@
         "stripe": "16.12.0"
     },
     "devDependencies": {
-        "@stamhoofd/test-utils": "2.122.8",
+        "@stamhoofd/test-utils": "2.122.9",
         "@types/cookie": "0.6.0",
         "@types/luxon": "3.7.1",
         "@types/mailparser": "3.4.6",
@@ -107,5 +107,5 @@
     "publishConfig": {
         "access": "public"
     },
-    "gitHead": "6326798a67de66af62b5cdebcb81eacd48afdb29"
+    "gitHead": "f3f81008f51b26e7eb368643a05995f70cfad327"
 }

package/src/helpers/AdminPermissionChecker.ts

@@ -209,6 +209,14 @@ export class AdminPermissionChecker {
         return this.user.permissions.organizationPermissions.get(typeof organizationOrId === 'string' ? organizationOrId : organizationOrId.id) ?? null;
     }
 
+    getUnloadedPlatformPermissions() {
+        if (!this.user.permissions) {
+            return null;
+        }
+
+        return this.user.permissions.globalPermissions;
+    }
+
     async canAccessPrivateOrganizationData(organization: Organization) {
         if (!this.checkScope(organization.id)) {
             return false;
@@ -232,7 +240,7 @@ export class AdminPermissionChecker {
             return false;
         }
 
-        if (!await this.hasSomeUnloadedAccess(organization)) {
+        if (!await this.hasSomeUnloadedAccess(organization) && !this.hasSomeUnloadedPlatformAccess()) {
             return false;
         }
         return true;
@@ -1130,6 +1138,11 @@ export class AdminPermissionChecker {
         return !!unloadedPermissions && !unloadedPermissions.isEmpty;
     }
 
+    hasSomeUnloadedPlatformAccess(): boolean {
+        const unloadedPermissions = this.getUnloadedPlatformPermissions();
+        return !!unloadedPermissions && !unloadedPermissions.isEmpty;
+    }
+
     async canManageAdmins(organizationId: string) {
         return !this.user.isApiUser && (await this.hasFullAccess(organizationId));
     }