Browse Source

fix(core): Fix permissions for `pendingSearchIndexUpdates` query

Michael Bromley 4 years ago
parent
commit
152e64be1c

+ 1 - 1
packages/core/src/api/resolvers/admin/search.resolver.ts

@@ -32,7 +32,7 @@ export class SearchResolver {
     }
 
     @Query()
-    @Allow(Permission.UpdateCatalog, Permission.UpdateProduct)
+    @Allow(Permission.ReadCatalog, Permission.ReadProduct)
     async pendingSearchIndexUpdates(...args: any[]): Promise<any> {
         throw new InternalServerError(`error.no-search-plugin-configured`);
     }

+ 1 - 1
packages/core/src/plugin/default-search-plugin/api/fulltext-search.resolver.ts

@@ -95,7 +95,7 @@ export class AdminFulltextSearchResolver implements BaseSearchResolver {
     }
 
     @Query()
-    @Allow(Permission.UpdateCatalog, Permission.UpdateProduct)
+    @Allow(Permission.ReadCatalog, Permission.ReadProduct)
     async pendingSearchIndexUpdates(...args: any[]): Promise<any> {
         return this.searchJobBufferService.getPendingSearchUpdates();
     }