danak/dsc-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor permissions

Browse Source
This commit is contained in:
morteza-mortezai
2026-07-20 10:16:45 +03:30
parent c82cc654f0
commit 6b222db890
32 changed files with 765 additions and 172 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/modules/blogs/blogs.controller.ts
+13 -13
View File
@@ -51,7 +51,7 @@ export class BlogsController {
@ApiOperation({ summary: "Get all blogs (admin route)" })
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_READ)
@Get("list")
getBlogList(@Query() queryDto: BlogListSearchQueryDto) {
return this.blogsService.getBlogList(queryDto);
@@ -85,7 +85,7 @@ export class BlogsController {
}
@ApiOperation({ summary: "toggle status of blogs (admin route)" })
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_CREATE)
@HttpCode(HttpStatus.OK)
@Post(":id/toggle-status")
toggleBlogStatus(@Param() paramDto: ParamDto) {
@@ -103,7 +103,7 @@ export class BlogsController {
@ApiOperation({ summary: "Toggle pinned status of a blog (admin route)" })
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_CREATE)
@Post(":id/toggle-pinned")
togglePinnedStatus(@Param() paramDto: ParamDto) {
return this.blogsService.togglePinnedStatus(paramDto.id);
@@ -112,7 +112,7 @@ export class BlogsController {
@ApiOperation({ summary: "Create a new blog (admin route)" })
@Post()
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_CREATE)
createBlog(@Body() createBlogDto: CreateBlogDto, @UserIpAndHeaders() userIpAndHeaders: IUserIpAndHeaders) {
return this.blogsService.createBlog(createBlogDto, userIpAndHeaders);
}
@@ -120,7 +120,7 @@ export class BlogsController {
@ApiOperation({ summary: "Update a blog (admin route)" })
@Patch(":id")
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_UPDATE)
updateBlog(@Param() paramDto: ParamDto, @Body() updateBlogDto: UpdateBlogDto, @UserIpAndHeaders() userIpAndHeaders: IUserIpAndHeaders) {
return this.blogsService.updateBlog(paramDto.id, updateBlogDto, userIpAndHeaders);
}
@@ -128,7 +128,7 @@ export class BlogsController {
@ApiOperation({ summary: "Delete a blog (admin route) " })
@Delete(":id")
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_DELETE)
deleteBlog(@Param() paramDto: ParamDto, @UserIpAndHeaders() userIpAndHeaders: IUserIpAndHeaders) {
return this.blogsService.deleteBlog(paramDto.id, userIpAndHeaders);
}
@@ -149,7 +149,7 @@ export class BlogsController {
@ApiOperation({ summary: "Get all comments for a blog (admin route)" })
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_READ)
@Get(":id/comments")
getBlogCommentsForAdmin(@Param() paramDto: ParamDto) {
return this.blogCommentService.getBlogCommentsForAdmin(paramDto.id);
@@ -157,7 +157,7 @@ export class BlogsController {
@ApiOperation({ summary: "Get all comments for a blog (admin route)" })
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_READ)
@Get("comments")
getAllCommentForAdmin(@Query() queryDto: BlogCommentQueryDto) {
return this.blogCommentService.getAllCommentForAdmin(queryDto);
@@ -165,7 +165,7 @@ export class BlogsController {
@ApiOperation({ summary: "Update the status of a comment (admin route)" })
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_UPDATE)
@Patch("comments/:id/status")
updateCommentStatus(@Param() paramDto: ParamDto, @Body() updateCommentStatusDto: UpdateCommentStatusDto) {
return this.blogCommentService.updateCommentStatus(paramDto.id, updateCommentStatusDto);
@@ -196,7 +196,7 @@ export class BlogsController {
@ApiOperation({ summary: "Create a new category (admin route)" })
@Post("categories")
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_CREATE)
createCategory(@Body() createCategoryDto: CreateBlogCategoryDto) {
return this.blogsService.createCategory(createCategoryDto);
}
@@ -204,7 +204,7 @@ export class BlogsController {
@ApiOperation({ summary: "Update a category (admin route)" })
@Patch("categories/:id")
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_UPDATE)
updateCategory(@Param() paramDto: ParamDto, @Body() updateCategoryDto: UpdateBlogCategoryDto) {
return this.blogsService.updateCategory(paramDto.id, updateCategoryDto);
}
@@ -212,13 +212,13 @@ export class BlogsController {
@ApiOperation({ summary: "Delete a category (admin route)" })
@Delete("categories/:id")
@AdminRoute()
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_DELETE)
deleteCategory(@Param() paramDto: ParamDto, @UserIpAndHeaders() userIpAndHeaders: IUserIpAndHeaders) {
return this.blogsService.deleteCategory(paramDto.id, userIpAndHeaders);
}
@ApiOperation({ summary: "toggle status of categories (admin route)" })
@PermissionsDec(PermissionEnum.BLOGS)
@PermissionsDec(PermissionEnum.BLOGS_CREATE)
@HttpCode(HttpStatus.OK)
@Post("categories/toggle-status/:id")
toggleCategoryStatus(@Param() paramDto: ParamDto, @UserIpAndHeaders() userIpAndHeaders: IUserIpAndHeaders) {