json-rest-api 1.0.15 → 1.0.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "json-rest-api",
-  "version": "1.0.15",
+  "version": "1.0.16",
   "main": "index.js",
   "type": "module",
   "scripts": {

package/plugins/core/lib/querying-writing/compile-schemas.js

@@ -184,7 +184,8 @@ export async function compileSchemas (scope, deps) {
   const schemaContext = {
     fields: enrichedFields,    // Mutable
     originalFields: rawFields,  // Read-only
-    scopeName
+    scopeName,
+    scopeOptions: scope.scopeOptions || {}
   }
   await runHooks('schema:enrich', schemaContext)
 

package/plugins/core/rest-api-access.js

@@ -27,7 +27,6 @@ export const AccessPlugin = {
     const evaluateOwnership = ({ record, field, schemaInfo, userId }) => {
       if (!record) return 'unknown'
 
-      debugger
       const idProperty = schemaInfo?.idProperty || 'id'
       const schemaStructure = schemaInfo?.schemaStructure || {}
       const schemaRelationships = schemaInfo?.schemaRelationships || {}
@@ -146,7 +145,6 @@ export const AccessPlugin = {
       const auth = context.scopeOptions?.auth
       if (!auth) return
 
-      debugger
       scope.vars.authRules = auth
       scope.vars.ownershipField = context.scopeOptions?.ownershipField
 
@@ -159,11 +157,11 @@ export const AccessPlugin = {
       })
     })
 
-    addHook('schema:enrich', 'rest-auth-auto-ownership-field', {}, ({ context, scopeOptions }) => {
+    addHook('schema:enrich', 'rest-auth-auto-ownership-field', {}, ({ context }) => {
       if (!config.ownership.enabled) return
-      const { fields, scopeName } = context
+      const { fields, scopeName, scopeOptions = {} } = context
       if (config.ownership.excludeResources.includes(scopeName)) return
-      if (scopeOptions?.ownership === false) return
+      if (scopeOptions.ownership === false) return
 
       const field = ownershipField()
       const relationshipName = fields[field]?.as || fields[field]?.belongsTo || field
@@ -285,7 +283,6 @@ export const AccessPlugin = {
 
     addHook('checkPermissions', 'rest-auth-enforce', { sequence: -100 }, async ({ context, scope, scopeName }) => {
       const operation = context.method
-      debugger
       const scopeVars = scope?.vars
       const authRules = scopeVars?.authRules
       const minimalRecord = context.originalContext?.minimalRecord
@@ -300,7 +297,6 @@ export const AccessPlugin = {
       const failures = []
 
       for (const rule of rules) {
-        // if (rule === 'owns') debugger
         try {
           const [checkerName, ...paramParts] = rule.split(':')
           const checker = state.authCheckers.get(checkerName)