feat(user): implement entity level authorization (#5819)

This commit is contained in:
Rachit Naithani
2024-09-05 23:08:35 +05:30
committed by GitHub
parent 9dd1511b4d
commit e15ea184d9
25 changed files with 806 additions and 246 deletions

View File

@ -4,6 +4,7 @@
))]
use actix_multipart::form::MultipartForm;
use actix_web::{web, HttpRequest, HttpResponse};
use common_enums::EntityType;
use common_utils::{errors::CustomResult, id_type};
use diesel_models::enums::IntentStatus;
use error_stack::ResultExt;
@ -663,11 +664,17 @@ pub async fn list_countries_currencies_for_connector_payment_method(
#[cfg(not(feature = "release"))]
auth::auth_type(
&auth::HeaderAuth(auth::ApiKeyAuth),
&auth::JWTAuth(Permission::MerchantConnectorAccountWrite),
&auth::JWTAuth {
permission: Permission::MerchantConnectorAccountWrite,
minimum_entity_level: EntityType::Merchant,
},
req.headers(),
),
#[cfg(feature = "release")]
&auth::JWTAuth(Permission::MerchantConnectorAccountWrite),
&auth::JWTAuth {
permission: Permission::MerchantConnectorAccountWrite,
minimum_entity_level: EntityType::Merchant,
},
api_locking::LockAction::NotApplicable,
))
.await