Merge pull request #43 from vtex-apps/hotfix/B2BTEAM-1487-remove-getR…

…oles-from-metrics

fix: remove checkPermissions from metrics

CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Remove get permissions from access audit metrics
+
 ## [2.4.0] - 2023-11-07
 
 ### Added

node/resolvers/directives/auditAccess.ts

@@ -2,7 +2,6 @@ import type { GraphQLField } from 'graphql'
 import { defaultFieldResolver } from 'graphql'
 import { SchemaDirectiveVisitor } from 'graphql-tools'
 
-import type StorefrontPermissions from '../../clients/storefrontPermissions'
 import sendAuthMetric, { AuthMetric } from '../../metrics/auth'
 
 export class AuditAccess extends SchemaDirectiveVisitor {
@@ -23,7 +22,6 @@ export class AuditAccess extends SchemaDirectiveVisitor {
 
   private async sendAuthMetric(field: GraphQLField<any, any>, context: any) {
     const {
-      clients: { storefrontPermissions },
       vtex: { adminUserAuthToken, storeUserAuthToken, account, logger },
       request,
     } = context
@@ -43,37 +41,15 @@ export class AuditAccess extends SchemaDirectiveVisitor {
     const hasStoreToken = !!storeUserAuthToken
     const hasApiToken = !!request.headers['vtex-api-apptoken']
 
-    let role
-    let permissions
-
-    if (hasAdminToken || hasStoreToken) {
-      const userPermissions = await this.getUserPermission(
-        storefrontPermissions
-      )
-
-      role = userPermissions?.role?.slug
-      permissions = userPermissions?.permissions
-    }
-
     const authMetric = new AuthMetric(account, {
       caller,
       forwardedHost,
       hasAdminToken,
       hasApiToken,
       hasStoreToken,
       operation,
-      permissions,
-      role,
     })
 
     await sendAuthMetric(logger, authMetric)
   }
-
-  private async getUserPermission(
-    storefrontPermissions: StorefrontPermissions
-  ) {
-    const result = await storefrontPermissions.checkUserPermission()
-
-    return result?.data?.checkUserPermission ?? null
-  }
 }