mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-06-24 08:35:26 +02:00
- Introduced new test files for permission checks, including `check-permission.test.ts`, `enterprise-only-resources.test.ts`, `resolve-permissions.test.ts`, and `service-access.test.ts`. - Implemented permission checks in various components to ensure actions are gated by user permissions, including `ShowTraefikConfig`, `UpdateTraefikConfig`, `ShowVolumes`, `ShowDomains`, and others. - Enhanced the logic for displaying UI elements based on user permissions, ensuring that only authorized users can access or modify resources.
70 lines
1.9 KiB
TypeScript
70 lines
1.9 KiB
TypeScript
import {
|
|
findRollbackById,
|
|
removeRollbackById,
|
|
rollback,
|
|
} from "@dokploy/server";
|
|
import { checkServicePermissionAndAccess } from "@dokploy/server/services/permission";
|
|
import { TRPCError } from "@trpc/server";
|
|
import { audit } from "@/server/api/utils/audit";
|
|
import { apiFindOneRollback } from "@/server/db/schema";
|
|
import { createTRPCRouter, protectedProcedure } from "../trpc";
|
|
|
|
export const rollbackRouter = createTRPCRouter({
|
|
delete: protectedProcedure
|
|
.input(apiFindOneRollback)
|
|
.mutation(async ({ input, ctx }) => {
|
|
try {
|
|
const rb = await findRollbackById(input.rollbackId);
|
|
const serviceId = rb.deployment.applicationId;
|
|
if (serviceId) {
|
|
await checkServicePermissionAndAccess(ctx, serviceId, {
|
|
deployment: ["create"],
|
|
});
|
|
}
|
|
const result = await removeRollbackById(input.rollbackId);
|
|
await audit(ctx, {
|
|
action: "delete",
|
|
resourceType: "deployment",
|
|
resourceId: input.rollbackId,
|
|
});
|
|
return result;
|
|
} catch (error) {
|
|
const message =
|
|
error instanceof Error
|
|
? error.message
|
|
: "Error input: Deleting rollback";
|
|
throw new TRPCError({
|
|
code: "BAD_REQUEST",
|
|
message,
|
|
});
|
|
}
|
|
}),
|
|
rollback: protectedProcedure
|
|
.input(apiFindOneRollback)
|
|
.mutation(async ({ input, ctx }) => {
|
|
try {
|
|
const rb = await findRollbackById(input.rollbackId);
|
|
const serviceId = rb.deployment.applicationId;
|
|
if (serviceId) {
|
|
await checkServicePermissionAndAccess(ctx, serviceId, {
|
|
deployment: ["create"],
|
|
});
|
|
}
|
|
const result = await rollback(input.rollbackId);
|
|
await audit(ctx, {
|
|
action: "restore",
|
|
resourceType: "deployment",
|
|
resourceId: input.rollbackId,
|
|
});
|
|
return result;
|
|
} catch (error) {
|
|
console.error(error);
|
|
throw new TRPCError({
|
|
code: "BAD_REQUEST",
|
|
message: "Error input: Rolling back",
|
|
cause: error,
|
|
});
|
|
}
|
|
}),
|
|
});
|