Lock deleteUserProductReviews

unchainedshop · Nov 6, 2024 · e378d1c · e378d1c
1 parent a5d79a2
commit e378d1c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/packages/api/src/roles/index.ts b/packages/api/src/roles/index.ts
@@ -114,6 +114,7 @@ const actions: Record<string, string> = [
   'confirmMediaUpload',
   'viewStatistics',
   'deleteUser',
+  'deleteUserProductReviews',
 ].reduce((oldValue, actionValue) => {
   const newValue = oldValue;
   newValue[actionValue] = actionValue;

diff --git a/packages/api/src/roles/loggedIn.ts b/packages/api/src/roles/loggedIn.ts
@@ -203,6 +203,7 @@ export const loggedIn = (role: any, actions: Record<string, string>) => {
   role.allow(actions.viewUserTokens, isMyself);
   role.allow(actions.updateUser, isMyself);
   role.allow(actions.deleteUser, isMyself);
+  role.allow(actions.deleteUserProductReviews, isMyself);
   role.allow(actions.sendEmail, isOwnedEmailAddress);
   role.allow(actions.viewOrder, isOwnedOrder);
   role.allow(actions.updateOrder, isOwnedOrder);