exguard-backend 1.0.11 → 1.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "exguard-backend",
-  "version": "1.0.11",
+  "version": "1.0.13",
   "private": false,
   "publishConfig": {
     "access": "public"

package/scripts/setup-nestjs.cjs

@@ -201,6 +201,17 @@ export class ExGuardNestGuard implements CanActivate {
 @Injectable()
 export class ExGuardPermissionGuard extends ExGuardNestGuard {
   public async checkPermissions(context: GuardContext) {
+    // Check if user has any read permission (more flexible)
+    const user = context.request.user;
+    const hasReadPermission = user?.permissions?.some(perm => 
+      perm.includes('read') || perm === 'read'
+    );
+    
+    if (hasReadPermission) {
+      return { allowed: true, user };
+    }
+    
+    // Fallback to specific 'read' permission
     return this.exGuard.requirePermissions(context, ['read']);
   }
 }
@@ -343,7 +354,8 @@ function createExampleController() {
   Post, 
   Body, 
   UseGuards, 
-  Request 
+  Request,
+  ForbiddenException
 } from '@nestjs/common';
 import { 
   RequirePermissions, 
@@ -363,7 +375,18 @@ export class EventsController {
   @Get()
   async getEvents(@Request() req) {
     console.log('User accessing events:', req.user);
-    return { success: true, data: [] };
+    console.log('User permissions:', req.user?.permissions);
+    
+    return { 
+      success: true, 
+      data: [], 
+      user: {
+        id: req.user?.id,
+        permissions: req.user?.permissions,
+        roles: req.user?.roles
+      },
+      message: 'Events retrieved successfully'
+    };
   }
 
   @Post()
@@ -373,6 +396,20 @@ export class EventsController {
     return { success: true, data: createEventDto };
   }
 
+  @Get('debug')
+  async getDebugInfo(@Request() req) {
+    // Debug endpoint to check user permissions
+    return {
+      success: true,
+      user: req.user,
+      permissions: req.user?.permissions || [],
+      roles: req.user?.roles || [],
+      modules: req.user?.modules || [],
+      fieldOffices: req.user?.fieldOffices || [],
+      message: 'Debug information'
+    };
+  }
+
   @Get('admin')
   @RequireRoles(['Admin']) // Using decorator
   @UseGuards(createRoleGuard(['Admin']))