form builder permission

src/modules/form-builder/controller/form-builder.controller.ts

@@ -8,6 +8,8 @@ import { FieldOptionService } from '../provider/field-option.service';
 import { UpdateFieldDto } from '../dto/update-field.dto';
 import { UpdateFieldOptionDto } from '../dto/update-field-option.dto';
 import { FindFieldsGroupDto } from '../dto/find-field-group.dto';
+import { Permissions } from 'src/common/decorators/permissions.decorator';
+import { Permission } from 'src/common/enums/permission.enum';
 
 @Controller()
 @ApiBearerAuth()
@@ -19,15 +21,17 @@ export class FormBuilderController {
 
 
   /*================================ Field ========================== */
+
   @Get('public/entity/:id/field')
   @ApiOperation({ summary: 'find all  fields' })
-  // @UseGuards(AdminAuthGuard)
   findAllSectionFieldsAsUser(@Param('id') entityId: string) {
     return this.fieldService.findAll(+entityId);
   }
 
+  // ============= Admin =================
   @Post('admin/entity/:id/field')
   @ApiOperation({ summary: 'Create field for entity' })
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   @UseGuards(AdminAuthGuard)
   createField(@Body() dto: CreateFieldDto, @Param('id') entityId: string) {
     return this.fieldService.create(+entityId, dto);
@@ -57,6 +61,7 @@ export class FormBuilderController {
   @Patch('admin/entity/field/:id')
   @ApiOperation({ summary: 'Update field' })
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   updateField(@Param('id') id: string, @Body() dto: UpdateFieldDto) {
     return this.fieldService.update(+id, dto);
   }
@@ -64,6 +69,7 @@ export class FormBuilderController {
   @Delete('admin/entity/field/:id')
   @ApiOperation({ summary: 'Remove field' })
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   removeField(@Param('id') id: string) {
     return this.fieldService.remove(+id);
   }
@@ -73,6 +79,7 @@ export class FormBuilderController {
   @Post('admin/entity/field/:id/option')
   @ApiOperation({ summary: 'Create field Options ' })
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   createFieldOption(@Body() dto: CreateFieldOptionDto, @Param('id') id: string) {
     return this.fieldOptionService.create(+id, dto);
   }
@@ -94,6 +101,7 @@ export class FormBuilderController {
   @Patch('admin/entity/field/option/:id')
   @ApiOperation({ summary: 'Update field Option' })
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   updateFieldOption(@Param('id') id: string, @Body() dto: UpdateFieldOptionDto) {
     return this.fieldOptionService.update(+id, dto);
   }
@@ -101,6 +109,7 @@ export class FormBuilderController {
   @Delete('admin/entity/field/option/:id')
   @ApiOperation({ summary: 'Renopve field Option' })
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_FORM_BUILDER)
   removeFieldOption(@Param('id') id: string) {
     return this.fieldOptionService.remove(+id);
   }