feat: add rbac policies for new product option endpoints

Author: fPolic

packages/medusa/src/api/admin/product-options/middlewares.ts

@@ -1,9 +1,11 @@
-import * as QueryConfig from "./query-config"
-import { MiddlewareRoute } from "@medusajs/framework/http"
 import {
   validateAndTransformBody,
   validateAndTransformQuery,
 } from "@medusajs/framework"
+import { MiddlewareRoute } from "@medusajs/framework/http"
+import { PolicyOperation } from "@medusajs/framework/utils"
+import * as QueryConfig from "./query-config"
+import { Entities } from "./query-config"
 import {
   AdminCreateProductOption,
   AdminGetProductOptionParams,
@@ -12,6 +14,15 @@ import {
 } from "./validators"
 
 export const adminProductOptionRoutesMiddlewares: MiddlewareRoute[] = [
+  {
+    matcher: "/admin/product-options/*",
+    policies: [
+      {
+        resource: Entities.product_option,
+        operation: PolicyOperation.read,
+      },
+    ],
+  },
   {
     method: ["GET"],
     matcher: "/admin/product-options",
@@ -42,6 +53,12 @@ export const adminProductOptionRoutesMiddlewares: MiddlewareRoute[] = [
         QueryConfig.retrieveProductOptionsTransformQueryConfig
       ),
     ],
+    policies: [
+      {
+        resource: Entities.product_option,
+        operation: PolicyOperation.create,
+      },
+    ],
   },
   {
     method: ["POST"],
@@ -53,9 +70,22 @@ export const adminProductOptionRoutesMiddlewares: MiddlewareRoute[] = [
         QueryConfig.retrieveProductOptionsTransformQueryConfig
       ),
     ],
+    policies: [
+      {
+        resource: Entities.product_option,
+        operation: PolicyOperation.update,
+      },
+    ],
   },
   {
     method: ["DELETE"],
     matcher: "/admin/product-options/:id",
+    middlewares: [],
+    policies: [
+      {
+        resource: Entities.product_option,
+        operation: PolicyOperation.delete,
+      },
+    ],
   },
 ]

packages/medusa/src/api/admin/product-options/query-config.ts

@@ -1,3 +1,7 @@
+export enum Entities {
+  product_option = "product_option",
+}
+
 export const defaultAdminProductOptionsFields = [
   "id",
   "title",
@@ -12,10 +16,12 @@ export const defaultAdminProductOptionsFields = [
 export const retrieveProductOptionsTransformQueryConfig = {
   defaults: defaultAdminProductOptionsFields,
   isList: false,
+  entity: Entities.product_option,
 }
 
 export const listProductOptionsTransformQueryConfig = {
   ...retrieveProductOptionsTransformQueryConfig,
   defaultLimit: 20,
   isList: true,
+  entity: Entities.product_option,
 }