include authorization

packages/bookshop/srv/admin-service.cds

@@ -1,6 +1,6 @@
 using { sap.capire.bookshop as my } from '../db/schema';
 
-service AdminService @(_requires:'authenticated-user') {
+service AdminService @(requires:'admin') {
   entity Books as projection on my.Books;
   entity Authors as projection on my.Authors;
   entity Orders as select from my.Orders;

packages/bookshop/srv/admin-service.js

@@ -59,6 +59,9 @@ module.exports = cds.service.impl(function () {
 
 async function _readAddresses (req) {
   const businessPartner = req.user.id
+  if (!businessPartner) {
+    return req.reject('You need to be authorized.')
+  }
   const tx = bupaSrv.transaction(req)
   const ql = SELECT.from('API_BUSINESS_PARTNER.A_BusinessPartnerAddress').where(
     { BusinessPartner: businessPartner.toUpperCase() }
@@ -80,6 +83,9 @@ async function _readAddresses (req) {
 async function _fillAddress (req) {
   if (req.data.shippingAddress_AddressID) {
     const businessPartner = req.user.id
+    if (!businessPartner) {
+      return req.reject('You need to be authorized.')
+    }
     const tx = bupaSrv.transaction(req)
     const response = await tx.run(
       SELECT.from('API_BUSINESS_PARTNER.A_BusinessPartnerAddress')

packages/bookshop/srv/init.js

@@ -23,6 +23,24 @@ module.exports = db => {
       StreetName: 'SAP-Allee',
       HouseNumber: '25'
     },
+    {
+      BusinessPartner: 'ALICE',
+      AddressID: '62640',
+      CityName: 'Walldorf',
+      PostalCode: '69190',
+      Country: 'Germany',
+      StreetName: 'Dietmar-Hopp-Allee',
+      HouseNumber: '16'
+    },
+    {
+      BusinessPartner: 'ALICE',
+      AddressID: '22222',
+      CityName: 'St. Leon-Rot',
+      PostalCode: '68789',
+      Country: 'Germany',
+      StreetName: 'SAP-Allee',
+      HouseNumber: '25'
+    },
     {
       BusinessPartner: '1003765',
       AddressID: '28241',