Просмотр исходного кода

fix(core): Add ReadOrder perm to fulfillment-related shipping queries

Closes #644
Michael Bromley 5 лет назад
Родитель
Сommit
72ed50c8df
1 измененных файлов с 3 добавлено и 3 удалено
  1. 3 3
      packages/core/src/api/resolvers/admin/shipping-method.resolver.ts

+ 3 - 3
packages/core/src/api/resolvers/admin/shipping-method.resolver.ts

@@ -47,19 +47,19 @@ export class ShippingMethodResolver {
     }
     }
 
 
     @Query()
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     shippingEligibilityCheckers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
     shippingEligibilityCheckers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getShippingEligibilityCheckers(ctx);
         return this.shippingMethodService.getShippingEligibilityCheckers(ctx);
     }
     }
 
 
     @Query()
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     shippingCalculators(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
     shippingCalculators(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getShippingCalculators(ctx);
         return this.shippingMethodService.getShippingCalculators(ctx);
     }
     }
 
 
     @Query()
     @Query()
-    @Allow(Permission.ReadSettings)
+    @Allow(Permission.ReadSettings, Permission.ReadOrder)
     fulfillmentHandlers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
     fulfillmentHandlers(@Ctx() ctx: RequestContext): ConfigurableOperationDefinition[] {
         return this.shippingMethodService.getFulfillmentHandlers(ctx);
         return this.shippingMethodService.getFulfillmentHandlers(ctx);
     }
     }