Merge pull request #8439 from strapi/fix/ctb-permissions

Add permission to CTB routes
strapi · Oct 22, 2020 · 3cdd739 · 3cdd739
2 parents 4d00bc0 + 15e8a76
commit 3cdd739
Showing 1 changed file with 42 additions and 14 deletions.
diff --git a/packages/strapi-plugin-content-type-builder/config/routes.json b/packages/strapi-plugin-content-type-builder/config/routes.json
@@ -5,111 +5,139 @@
       "path": "/reserved-names",
       "handler": "Builder.getReservedNames",
       "config": {
-        "policies": []
+        "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "GET",
       "path": "/connections",
       "handler": "Connections.getConnections",
       "config": {
-        "policies": []
+        "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "GET",
       "path": "/content-types",
       "handler": "ContentTypes.getContentTypes",
       "config": {
-        "policies": []
+        "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "GET",
       "path": "/content-types/:uid",
       "handler": "ContentTypes.getContentType",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "POST",
       "path": "/content-types",
       "handler": "ContentTypes.createContentType",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "PUT",
       "path": "/content-types/:uid",
       "handler": "ContentTypes.updateContentType",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "DELETE",
       "path": "/content-types/:uid",
       "handler": "ContentTypes.deleteContentType",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "GET",
       "path": "/components",
       "handler": "Components.getComponents",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "GET",
       "path": "/components/:uid",
       "handler": "Components.getComponent",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "POST",
       "path": "/components",
       "handler": "Components.createComponent",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "PUT",
       "path": "/components/:uid",
       "handler": "Components.updateComponent",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "DELETE",
       "path": "/components/:uid",
       "handler": "Components.deleteComponent",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "PUT",
       "path": "/component-categories/:name",
       "handler": "ComponentCategories.editCategory",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     },
     {
       "method": "DELETE",
       "path": "/component-categories/:name",
       "handler": "ComponentCategories.deleteCategory",
       "config": {
-        "policies": []
+      "policies": [
+          ["admin::hasPermissions", ["plugins::content-type-builder.read"]]
+        ]
       }
     }
   ]