chore: add certify scope check in query

opencrvs · Oct 21, 2024 · 94b35f3 · 94b35f3
1 parent aceb971
commit 94b35f3
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/packages/commons/src/scopes.ts b/packages/commons/src/scopes.ts
@@ -58,6 +58,7 @@ export const scopes = [
   'record.export-records',
   'record.print-issue-certified-copies',
   'record.bulk-print-certified-copies',
+  'record.certify',
 
   // correct
   'record.registration-request-correction',

diff --git a/packages/gateway/src/features/registration/root-resolvers.ts b/packages/gateway/src/features/registration/root-resolvers.ts
@@ -491,7 +491,7 @@ export const resolvers: GQLResolver = {
       }
     },
     async markBirthAsCertified(_, { id, details }, { headers: authHeader }) {
-      if (!hasScope(authHeader, 'record.print-issue-certified-copies')) {
+      if (!hasScope(authHeader, 'record.certify')) {
         return Promise.reject(new Error('User does not have enough scope'))
       }
       return markEventAsCertified(id, details, authHeader, EVENT_TYPE.BIRTH)
@@ -503,7 +503,7 @@ export const resolvers: GQLResolver = {
       return markEventAsIssued(id, details, authHeader, EVENT_TYPE.BIRTH)
     },
     async markDeathAsCertified(_, { id, details }, { headers: authHeader }) {
-      if (!hasScope(authHeader, 'record.print-issue-certified-copies')) {
+      if (!hasScope(authHeader, 'record.certify')) {
         return Promise.reject(new Error('User does not have enough scope'))
       }
       return markEventAsCertified(id, details, authHeader, EVENT_TYPE.DEATH)
@@ -515,7 +515,7 @@ export const resolvers: GQLResolver = {
       return markEventAsIssued(id, details, authHeader, EVENT_TYPE.DEATH)
     },
     async markMarriageAsCertified(_, { id, details }, { headers: authHeader }) {
-      if (!hasScope(authHeader, 'record.print-issue-certified-copies')) {
+      if (!hasScope(authHeader, 'record.certify')) {
         return Promise.reject(new Error('User does not have enough scope'))
       }
       return markEventAsCertified(id, details, authHeader, EVENT_TYPE.MARRIAGE)