set perms

src/modules/foods/controllers/category.controller.ts

@@ -16,11 +16,13 @@ import {
 import { AdminAuthGuard } from 'src/modules/auth/guards/adminAuth.guard';
 import { UseGuards } from '@nestjs/common';
 import { RestId } from 'src/common/decorators';
+import { Permission } from 'src/common/enums/permission.enum';
+import { Permissions } from 'src/common/decorators/permissions.decorator';
 
 @ApiTags('category')
 @Controller()
 export class CategoryController {
-  constructor(private readonly categoryService: CategoryService) {}
+  constructor(private readonly categoryService: CategoryService) { }
 
   @Get('public/categories/restaurant/:slug')
   @ApiOperation({ summary: 'Get all categories by restaurant slug' })
@@ -38,31 +40,31 @@ export class CategoryController {
     return this.categoryService.findAllByRestaurant(slug);
   }
 
+  /*** Admin ***/
+
   @ApiOperation({ summary: 'Create category' })
-  @ApiCreatedResponse({ description: 'Category created', type: CreateCategoryDto })
   @ApiBody({ type: CreateCategoryDto })
+  @Permissions(Permission.MANAGE_CATEGORIES)
   @UseGuards(AdminAuthGuard)
   @ApiBearerAuth()
   @Post('admin/categories')
   create(@Body() dto: CreateCategoryDto, @RestId() restId: string) {
     return this.categoryService.create(restId, dto);
   }
-
+  @Permissions(Permission.MANAGE_CATEGORIES)
   @ApiOperation({ summary: 'my restaurant categories' })
-  @ApiOkResponse({ description: 'List of categories' })
   @UseGuards(AdminAuthGuard)
   @ApiBearerAuth()
-  @Get('admin/categories')
+  @Get('admin/categories') 
   findAll(@RestId() restId: string) {
     return this.categoryService.findAllByRestaurantId(restId);
-  }
+  } 
 
+  @Permissions(Permission.MANAGE_CATEGORIES)
   @UseGuards(AdminAuthGuard)
   @ApiBearerAuth()
   @Get('admin/categories/:id')
   @ApiOperation({ summary: 'Get category' })
-  @ApiOkResponse({ description: 'Category detail', type: CreateCategoryDto })
-  @ApiNotFoundResponse({ description: 'Category not found' })
   @ApiParam({ name: 'id', required: true, type: String })
   findOne(@Param('id') id: string, @RestId() restId: string) {
     return this.categoryService.findOne(restId, id);
@@ -70,17 +72,18 @@ export class CategoryController {
 
   @UseGuards(AdminAuthGuard)
   @ApiBearerAuth()
+  @Permissions(Permission.MANAGE_CATEGORIES)
   @Patch('admin/categories/:id')
   @ApiOperation({ summary: 'Update category' })
   @ApiParam({ name: 'id' })
   @ApiBody({ type: UpdateCategoryDto })
-  @ApiOkResponse({ description: 'Updated category', type: UpdateCategoryDto })
   update(@Param('id') id: string, @Body() dto: UpdateCategoryDto, @RestId() restId: string) {
     return this.categoryService.update(restId, id, dto);
   }
 
   @UseGuards(AdminAuthGuard)
   @ApiBearerAuth()
+  @Permissions(Permission.MANAGE_CATEGORIES)
   @Delete('admin/categories/:id')
   @ApiOperation({ summary: 'Delete category' })
   @ApiParam({ name: 'id' })
@@ -89,11 +92,4 @@ export class CategoryController {
     return this.categoryService.remove(restId, id);
   }
 
-  // @Get('restaurant/:restId')
-  // @ApiOperation({ summary: 'Restaurant categories for user' })
-  // @ApiOkResponse({ description: 'List of categories' })
-  // @ApiParam({ name: 'restId', required: true, type: String })
-  // findAllForRestaurant(@Param('restId') restId: string) {
-  //   return this.categoryService.findRestaurantCategories(restId);
-  // }
 }