fix: solución de bloqueos y estandarización de permisos
This commit is contained in:
@@ -78,6 +78,11 @@ customs_broker_crud = TenantCRUDRoutes(
|
||||
id_name="broker_key",
|
||||
id_type=str,
|
||||
enable_list=True,
|
||||
list_permissions=["customs_brokers.view"],
|
||||
get_permissions=["customs_brokers.view"],
|
||||
create_permissions=["customs_brokers.create"],
|
||||
update_permissions=["customs_brokers.edit"],
|
||||
delete_permissions=["customs_brokers.delete"],
|
||||
)
|
||||
|
||||
router.include_router(customs_broker_crud.router)
|
||||
@@ -97,7 +102,7 @@ def update_customs_broker(
|
||||
"""
|
||||
Actualización parcial (PATCH).
|
||||
"""
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user)
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
|
||||
|
||||
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
|
||||
if not broker:
|
||||
@@ -128,7 +133,7 @@ def update_customs_broker_vu(
|
||||
db: Session = Depends(get_core_db),
|
||||
current_user: Dict[str, Any] = Depends(get_current_user),
|
||||
):
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user)
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
|
||||
|
||||
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
|
||||
if not broker:
|
||||
@@ -152,7 +157,7 @@ def update_customs_broker_personnel(
|
||||
db: Session = Depends(get_core_db),
|
||||
current_user: Dict[str, Any] = Depends(get_current_user),
|
||||
):
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user)
|
||||
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
|
||||
|
||||
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
|
||||
if not broker:
|
||||
@@ -192,7 +197,7 @@ async def upload_customs_broker_vu_file(
|
||||
- VU: certificate_path, key_path, xml_files_path
|
||||
- DODA: doda_certificate_path, doda_key_path, doda_xml_files_path
|
||||
"""
|
||||
validate_access_to_resource(db, company_id, current_user)
|
||||
validate_access_to_resource(db, company_id, current_user, ["customs_brokers.create"])
|
||||
tenant_id = _resolve_tenant_id_int(current_user)
|
||||
|
||||
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
|
||||
|
||||
Reference in New Issue
Block a user