Nick.Rosenloecher/ApiCore
1
0 Fork 0
Code Issues 22 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: RBAC Phase 2c - Ernte & Lager auf @RequirePermission umgestellt

Browse Source 
Harvests, Extractions, HoneyBatches, Storage, Products, Bottling,
Equipment: @Roles(...) durch @RequirePermission(...) ersetzt,
ungeschuetzte GET-Routen mit :read-Rechten geschlossen. HoneyBatches
behaelt die feine Unterscheidung relocate (auch STAFF) vs.
create/measurements (nur BEEKEEPER+); Storage bekommt konsequent
keine STAFF-Schreibrechte (deckt sich mit dem bisherigen @Roles-Stand).

Verifiziert: tsc, lint, volle e2e-Suite 158/159 gruen (1 getrackter Skip).

Co-Authored-By: Claude Sonnet 5 <[email protected]>
This commit is contained in:
Nick SzaunigandClaude Sonnet 5 committed 2026-08-26 07:05:32 +02:00
1 parent cdbdaedb8f
commit c510304813
7 files changed
+43 -30
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ApiCore-Backend/src/honey-batches/honey-batches.controller.ts
+9 -5
View File
@@ -1,7 +1,7 @@
import { Body, Controller, Get, Param, Post, Query } from '@nestjs/common';
import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
import { HoneyBatchStatus, LegacyRole as Role } from '../../generated/prisma';
import { Roles } from '../auth/decorators/roles.decorator';
import { HoneyBatchStatus } from '../../generated/prisma';
import { RequirePermission } from '../auth/decorators/require-permission.decorator';
import { CurrentUser } from '../auth/decorators/current-user.decorator';
import type { AuthenticatedUser } from '../auth/types/authenticated-user';
import { CreateHoneyBatchDto } from './dto/create-honey-batch.dto';
@@ -15,27 +15,31 @@ import { HoneyBatchesService } from './honey-batches.service';
export class HoneyBatchesController {
constructor(private readonly honeyBatchesService: HoneyBatchesService) {}
@RequirePermission('honey-batches:read')
@Get()
findAll(@Query('status') status?: HoneyBatchStatus) {
return this.honeyBatchesService.findAll({ status });
}
@RequirePermission('honey-batches:read')
@Get(':id')
findOne(@Param('id') id: string) {
return this.honeyBatchesService.findById(id);
}
@RequirePermission('honey-batches:read')
@Get(':id/traceability')
traceability(@Param('id') id: string) {
return this.honeyBatchesService.traceability(id);
}
@RequirePermission('honey-batches:read')
@Get(':id/relocations')
findRelocations(@Param('id') id: string) {
return this.honeyBatchesService.findRelocations(id);
}
@Roles(Role.ADMIN, Role.BEEKEEPER, Role.STAFF)
@RequirePermission('honey-batches:relocate')
@Post(':id/relocate')
relocate(
@Param('id') id: string,
@@ -45,7 +49,7 @@ export class HoneyBatchesController {
return this.honeyBatchesService.relocate(id, dto, actor.id);
}
@Roles(Role.ADMIN, Role.BEEKEEPER)
@RequirePermission('honey-batches:create')
@Post()
create(
@Body() dto: CreateHoneyBatchDto,
@@ -54,7 +58,7 @@ export class HoneyBatchesController {
return this.honeyBatchesService.create(dto, actor.id);
}
@Roles(Role.ADMIN, Role.BEEKEEPER)
@RequirePermission('honey-batches:measure')
@Post(':id/measurements')
addMeasurement(
@Param('id') id: string,