Merge pull request #100 from gadget-inc/wishlist-pcs

Adding pcsda
gadget-inc · Oct 7, 2024 · 5bd7eb6 · 5bd7eb6
2 parents 25ee13d + 146871f
commit 5bd7eb6
Show file tree

Hide file tree

Showing 7 changed files with 21 additions and 5 deletions.
diff --git a/shopify/wishlist-template/api/models/wishlist/actions/create.js b/shopify/wishlist-template/api/models/wishlist/actions/create.js
@@ -3,6 +3,7 @@ import {
   save,
   ActionOptions,
   CreateWishlistActionContext,
+  preventCrossShopDataAccess,
 } from "gadget-server";
 import { updateWishlistMetafield } from "../../../utilities";
 
@@ -11,6 +12,7 @@ import { updateWishlistMetafield } from "../../../utilities";
  */
 export async function run({ params, record, logger, api, connections }) {
   applyParams(params, record);
+  await preventCrossShopDataAccess(params, record);
   await save(record);
 }
 

diff --git a/shopify/wishlist-template/api/models/wishlist/actions/delete.js b/shopify/wishlist-template/api/models/wishlist/actions/delete.js
@@ -2,13 +2,15 @@ import {
   deleteRecord,
   ActionOptions,
   DeleteWishlistActionContext,
+  preventCrossShopDataAccess,
 } from "gadget-server";
 import { updateWishlistMetafield } from "../../../utilities";
 
 /**
  * @param { DeleteWishlistActionContext } context
  */
 export async function run({ params, record, logger, api, connections }) {
+  await preventCrossShopDataAccess(params, record);
   await deleteRecord(record);
 }
 

diff --git a/shopify/wishlist-template/api/models/wishlist/actions/update.js b/shopify/wishlist-template/api/models/wishlist/actions/update.js
@@ -1,21 +1,28 @@
-import { applyParams, save, ActionOptions, UpdateWishlistActionContext } from "gadget-server";
+import {
+  applyParams,
+  save,
+  ActionOptions,
+  UpdateWishlistActionContext,
+  preventCrossShopDataAccess,
+} from "gadget-server";
 
 /**
  * @param { UpdateWishlistActionContext } context
  */
 export async function run({ params, record, logger, api, connections }) {
   applyParams(params, record);
+  await preventCrossShopDataAccess(params, record);
   await save(record);
-};
+}
 
 /**
  * @param { UpdateWishlistActionContext } context
  */
 export async function onSuccess({ params, record, logger, api, connections }) {
   // Your logic goes here
-};
+}
 
 /** @type { ActionOptions } */
 export const options = {
-  actionType: "update"
+  actionType: "update",
 };
diff --git a/shopify/wishlist-template/api/models/wishlistItem/actions/create.js b/shopify/wishlist-template/api/models/wishlistItem/actions/create.js
@@ -3,6 +3,7 @@ import {
   save,
   ActionOptions,
   CreateWishlistItemActionContext,
+  preventCrossShopDataAccess,
 } from "gadget-server";
 import { updateWishlistMetafield } from "../../../utilities";
 
@@ -11,6 +12,7 @@ import { updateWishlistMetafield } from "../../../utilities";
  */
 export async function run({ params, record, logger, api, connections }) {
   applyParams(params, record);
+  await preventCrossShopDataAccess(params, record);
   await save(record);
 }
 

diff --git a/shopify/wishlist-template/api/models/wishlistItem/actions/delete.js b/shopify/wishlist-template/api/models/wishlistItem/actions/delete.js
@@ -2,13 +2,15 @@ import {
   deleteRecord,
   ActionOptions,
   DeleteWishlistItemActionContext,
+  preventCrossShopDataAccess,
 } from "gadget-server";
 import { updateWishlistMetafield } from "../../../utilities";
 
 /**
  * @param { DeleteWishlistItemActionContext } context
  */
 export async function run({ params, record, logger, api, connections }) {
+  await preventCrossShopDataAccess(params, record);
   await deleteRecord(record);
 }
 

diff --git a/shopify/wishlist-template/api/models/wishlistItem/actions/update.js b/shopify/wishlist-template/api/models/wishlistItem/actions/update.js
@@ -3,6 +3,7 @@ import {
   save,
   ActionOptions,
   UpdateWishlistItemActionContext,
+  preventCrossShopDataAccess,
 } from "gadget-server";
 import { updateWishlistMetafield } from "../../../utilities";
 
@@ -11,6 +12,7 @@ import { updateWishlistMetafield } from "../../../utilities";
  */
 export async function run({ params, record, logger, api, connections }) {
   applyParams(params, record);
+  await preventCrossShopDataAccess(params, record);
   await save(record);
 }
 

diff --git a/shopify/wishlist-template/extensions/wishlists/src/components/NewWishlist.jsx b/shopify/wishlist-template/extensions/wishlists/src/components/NewWishlist.jsx
@@ -24,7 +24,6 @@ export default ({ wishlists }) => {
     defaultValues: {
       wishlist: {
         name: "",
-        shopId: shop?.id,
         customerId: shop?.customers?.edges[0]?.node.id,
       },
     },