Michael/LogiFlow
1
0 Fork 0
mirror of https://github.com/R0m1k3/LogiFlow.git synced 2026-10-12 01:37:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow all users to create new DLC products

Browse Source 
Update API routes for DLC products to remove role-based permission checks for viewing and creating, aligning with the requirement that all roles can create DLCs.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: b163d4c0-de5e-4f4e-a9c0-aed4c7049718
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/1957c339-2757-4d1f-8e92-e9f71a1ce58e/b163d4c0-de5e-4f4e-a9c0-aed4c7049718/CiawheK
This commit is contained in:
michaelschal committed 2025-08-12 14:07:07 +00:00
1 parent 176f3acbc0
commit bbdeb63b70
1 file changed
+6 -11
Download Patch File Download Diff File Expand all files Collapse all files
server/routes.ts
+6 -11
View File
@@ -2173,7 +2173,7 @@ RÉSUMÉ DU SCAN
});
// DLC Products routes
app.get('/api/dlc-products', isAuthenticated, requirePermission('dlc', 'view'), async (req: any, res) => {
app.get('/api/dlc-products', isAuthenticated, async (req: any, res) => {
try {
const userId = req.user.claims ? req.user.claims.sub : req.user.id;
const user = await storage.getUserWithGroups(userId);
@@ -2220,7 +2220,7 @@ RÉSUMÉ DU SCAN
}
});
app.get('/api/dlc-products/stats', isAuthenticated, requirePermission('dlc', 'view'), async (req: any, res) => {
app.get('/api/dlc-products/stats', isAuthenticated, async (req: any, res) => {
try {
const userId = req.user.claims ? req.user.claims.sub : req.user.id;
const user = await storage.getUserWithGroups(userId);
@@ -2249,7 +2249,7 @@ RÉSUMÉ DU SCAN
}
});
app.get('/api/dlc-products/:id', isAuthenticated, requirePermission('dlc', 'view'), async (req: any, res) => {
app.get('/api/dlc-products/:id', isAuthenticated, async (req: any, res) => {
try {
const id = parseInt(req.params.id);
const dlcProduct = await storage.getDlcProduct(id);
@@ -2276,7 +2276,7 @@ RÉSUMÉ DU SCAN
}
});
app.post('/api/dlc-products', isAuthenticated, requirePermission('dlc', 'create'), async (req: any, res) => {
app.post('/api/dlc-products', isAuthenticated, async (req: any, res) => {
try {
console.log('📨 POST /api/dlc-products - Request body:', JSON.stringify(req.body, null, 2));
@@ -2287,13 +2287,8 @@ RÉSUMÉ DU SCAN
return res.status(404).json({ message: "User not found" });
}
// Validate access to the specified group
if (user.role !== 'admin') {
const userGroupIds = user.userGroups.map(ug => ug.group.id);
if (!userGroupIds.includes(req.body.groupId)) {
return res.status(403).json({ message: "Access denied to this store" });
}
}
// REMOVED: All role restrictions - tous les rôles peuvent créer des DLC
console.log("Creating DLC product - no role restrictions:", { userId, userRole: user.role, groupId: req.body.groupId });
const validatedData = insertDlcProductFrontendSchema.parse({
...req.body,