Browse Source

fix(core): Add ReadOrder perm to fulfillment-related shipping queries

Closes #644
Michael Bromley 5 years ago
parent
commit
72ed50c8df
1 changed files with 3 additions and 3 deletions
  1. 3 3
      packages/core/src/api/resolvers/admin/shipping-method.resolver.ts

+ 3 - 3
packages/core/src/api/resolvers/admin/shipping-method.resolver.ts

@@ -47,19 +47,19 @@ export class ShippingMethodResolver {
     }
 
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     shippingEligibilityCheckers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getShippingEligibilityCheckers(ctx);
     }
 
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     shippingCalculators(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getShippingCalculators(ctx);
     }
 
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     fulfillmentHandlers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getFulfillmentHandlers(ctx);
     }