Skip to content

Commit ae64c61

Browse files
authored
fix(permissions): Fix permissions in integrations resolver (#3359)
## Context Account manager role not see the Anrok connection on a customer under "information" tab. ## Description This PR adds `customers:view` permission to GQL `IntegrationsResolver` so users with the manager role can see all the integrations not just payment providers.
1 parent 3985af0 commit ae64c61

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

app/graphql/resolvers/integrations_resolver.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ class IntegrationsResolver < Resolvers::BaseResolver
55
include AuthenticableApiUser
66
include RequiredOrganization
77

8-
REQUIRED_PERMISSION = "organization:integrations:view"
8+
REQUIRED_PERMISSION = %w[organization:integrations:view customers:view]
99

1010
description "Query organization's integrations"
1111

spec/graphql/resolvers/integrations_resolver_spec.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
require "rails_helper"
44

55
RSpec.describe Resolvers::IntegrationsResolver, type: :graphql do
6-
let(:required_permission) { "organization:integrations:view" }
6+
let(:required_permission) { "customers:view" }
77
let(:query) do
88
<<~GQL
99
query {
@@ -29,7 +29,7 @@
2929

3030
it_behaves_like "requires current user"
3131
it_behaves_like "requires current organization"
32-
it_behaves_like "requires permission", "organization:integrations:view"
32+
it_behaves_like "requires permission", %w[customers:view organization:integrations:view]
3333

3434
context "when type is present" do
3535
let(:query) do

0 commit comments

Comments
 (0)