fix: solución de bloqueos y estandarización de permisos

This commit is contained in:
2026-04-27 10:47:30 -05:00
parent fa3cbb4d0a
commit 5c2a84e95d
312 changed files with 13889 additions and 7911 deletions

View File

@@ -78,6 +78,11 @@ customs_broker_crud = TenantCRUDRoutes(
id_name="broker_key",
id_type=str,
enable_list=True,
list_permissions=["customs_brokers.view"],
get_permissions=["customs_brokers.view"],
create_permissions=["customs_brokers.create"],
update_permissions=["customs_brokers.edit"],
delete_permissions=["customs_brokers.delete"],
)
router.include_router(customs_broker_crud.router)
@@ -97,7 +102,7 @@ def update_customs_broker(
"""
Actualización parcial (PATCH).
"""
tenant_id = validate_access_to_resource(db, company_id, current_user)
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
if not broker:
@@ -128,7 +133,7 @@ def update_customs_broker_vu(
db: Session = Depends(get_core_db),
current_user: Dict[str, Any] = Depends(get_current_user),
):
tenant_id = validate_access_to_resource(db, company_id, current_user)
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
if not broker:
@@ -152,7 +157,7 @@ def update_customs_broker_personnel(
db: Session = Depends(get_core_db),
current_user: Dict[str, Any] = Depends(get_current_user),
):
tenant_id = validate_access_to_resource(db, company_id, current_user)
tenant_id = validate_access_to_resource(db, company_id, current_user, ["customs_brokers.edit"])
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)
if not broker:
@@ -192,7 +197,7 @@ async def upload_customs_broker_vu_file(
- VU: certificate_path, key_path, xml_files_path
- DODA: doda_certificate_path, doda_key_path, doda_xml_files_path
"""
validate_access_to_resource(db, company_id, current_user)
validate_access_to_resource(db, company_id, current_user, ["customs_brokers.create"])
tenant_id = _resolve_tenant_id_int(current_user)
broker = services.CustomsBrokerService.get_by_id(db, broker_key, tenant_id, company_id)