Serve /permissions/effective (crm, messagign) without any middleware checks

crm/rest/router.go

@@ -9,7 +9,6 @@ import (
 
 func MountRoutes() func(chi.Router) {
 	var (
-		permissions  = Permissions{}.New()
 		module       = Module{}.New()
 		record       = Record{}.New()
 		page         = Page{}.New()
@@ -23,12 +22,16 @@ func MountRoutes() func(chi.Router) {
 
 	// Initialize handlers & controllers.
 	return func(r chi.Router) {
+
+		r.Group(func(r chi.Router) {
+			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
+		})
+
 		// Protect all _private_ routes
 		r.Group(func(r chi.Router) {
 			r.Use(auth.MiddlewareValidOnly)
 			r.Use(middlewareAllowedAccess)
 
-			handlers.NewPermissions(permissions).MountRoutes(r)
 			handlers.NewPage(page).MountRoutes(r)
 			handlers.NewModule(module).MountRoutes(r)
 			handlers.NewRecord(record).MountRoutes(r)

messaging/rest/router.go

@@ -15,12 +15,15 @@ func MountRoutes() func(chi.Router) {
 			handlers.NewAttachmentDownloadable(Attachment{}.New()).MountRoutes(r)
 		})
 
+		r.Group(func(r chi.Router) {
+			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
+		})
+
 		// Protect all _private_ routes
 		r.Group(func(r chi.Router) {
 			r.Use(auth.MiddlewareValidOnly)
 			r.Use(middlewareAllowedAccess)
 
-			handlers.NewPermissions(Permissions{}.New()).MountRoutes(r)
 			handlers.NewChannel(Channel{}.New()).MountRoutes(r)
 			handlers.NewMessage(Message{}.New()).MountRoutes(r)
 			handlers.NewSearch(Search{}.New()).MountRoutes(r)