@xen-orchestra/rest-api 0.32.0 → 0.33.0

package/README.md

@@ -70,7 +70,7 @@ If an endpoint does not have a middleware ACL, it will be accessible **ONLY** to
 
 It is sometimes necessary to check ACLs based on the body of the request sent by the user (for example, for a PATCH endpoint). For this, you can use `actions` (which allows you to pass multiple actions) and `actionsFromBody` (a function exported from `acl.middleware.mts`).
 
-`actionsFromBody(['update:name_label', 'update:name_description'])` checks if `name_label` is present in the request body, and then applies the ACL check. The same applies to `name_description`.
+`actionsFromBody(['update:nameLabel', 'update:nameDescription'])` checks if `nameLabel` is present in the request body, and then applies the ACL check. The same applies to `nameDescription`.
 
 `actionIfNotSelfUser('read')` returns the given action only if the current user is **not** the target user. If the current user is the target (self), no action is returned and the ACL check is skipped entirely.
 
@@ -128,11 +128,11 @@ It is sometimes necessary to check ACLs based on the body of the request sent by
  *
    * Required privileges:
    * - resource: vm, action: update (grants all fields)
-   * - resource: vm, action: update:name_label (if name_label is passed)
-   * - resource: vm, action: update:name_description (if name_description is passed)
+   * - resource: vm, action: update:nameLabel (if nameLabel is passed)
+   * - resource: vm, action: update:nameDescription (if nameDescription is passed)
   */
  @Patch('{id}')
- @Middlewares(acl({resource: 'vm', actions: actionsFromBody(['update:name_label', 'update:name_description']), objectId: 'params.id'}))
+ @Middlewares(acl({resource: 'vm', actions: actionsFromBody(['update:nameLabel', 'update:nameDescription']), objectId: 'params.id'}))
  @Response(403)
  createVdi(@Path() id: string, @Body() body: patchBody) {
   updateVm(id, body)