Migrate Fine-grained Authorisation
This allows to grant fine-grained permissions to staff users, and query for each endpoint if the user is allowed to perform the task.
It can be combined with business authorisation, such as being the PI of the team.
- Original module: https://gitlab.igem.org/hq-tech/my-igem-api/-/tree/main/src/modules/staff-privileges
- Example of utilisation: https://gitlab.igem.org/hq-tech/my-igem-api/-/blob/main/src/modules/teams/teams.controller.ts#L42
Fix the following (AssertCanManagerOrderGuard
should inherit from the other guard)
@UseGuards(CookieAuthGuard, AssertCanManageOrderGuard)
Edited by Fabio Maschi