feat: improved routes authz

Author: aartoni

server/src/bootstrap.ts

@@ -26,6 +26,12 @@ export default async ({ strapi }: { strapi: Core.Strapi }) => {
       uid: "read",
       pluginName: PLUGIN_ID,
     },
+    {
+      section: "plugins",
+      displayName: "Update",
+      uid: "update",
+      pluginName: PLUGIN_ID,
+    },
   ];
   await strapi.admin.services.permission.actionProvider.registerMany(actions);
 };

server/src/routes/index.ts

@@ -6,13 +6,29 @@ export default {
         method: "GET",
         path: "/sso-roles",
         handler: "role.find",
-        config: { policies: ["admin::isAuthenticatedAdmin"] },
+        config: {
+          policies: [
+            "admin::isAuthenticatedAdmin",
+            {
+              name: "admin::hasPermissions",
+              config: { actions: ["plugin::oidc.read"] },
+            },
+          ],
+        },
       },
       {
         method: "PUT",
         path: "/sso-roles",
         handler: "role.update",
-        config: { policies: ["admin::isAuthenticatedAdmin"] },
+        config: {
+          policies: [
+            "admin::isAuthenticatedAdmin",
+            {
+              name: "admin::hasPermissions",
+              config: { actions: ["plugin::oidc.update"] },
+            },
+          ],
+        },
       },
     ],
   },