update post route permissions

README.md

@@ -178,8 +178,9 @@ Once set up, run tests using `npm run tests` to validate any changes before depl
 
 <br>
 
-## TODOs (Limitations)
+## TODOs (Improvements)
 
 - fix disappering `stripeProductObject` and `stripePriceObject` data when moved between `draft` and `published` modes and vice versa
 - optional product piece type REST API or configurable schema fields
+- automatic synchronization on product catalog changes with global schema field to enable
 - two-way synchronization between ApostropheCMS and Stripe

index.js

@@ -155,9 +155,7 @@ module.exports = {
             }
           }
 
-          if (req.user && (req.user.role === 'editor' || req.user.role === 'admin')) {
-
-            /* TODO req.user && (req.user._permissions || {}) */
+          if (req.user && self.apos.permission.can(req, 'create', 'stripe-products/product')) {
 
             let jobResolve, reporting;
             const jobPromise = new Promise((resolve, reject) => {

modules/stripe-products/product/index.js

@@ -23,11 +23,15 @@ module.exports = {
   batchOperations: {
     remove: [ 'publish' ]
   },
+  icons: {
+    sync: 'Sync'
+  },
   utilityOperations(self) {
     return {
       add: {
         synchronizeProducts: {
           label: 'stripeProducts:synchronizeProducts',
+          icon: 'sync',
           canEdit: true,
           button: true,
           eventOptions: {

package.json

@@ -1,6 +1,6 @@
 {
     "name": "@stepanjakl/apostrophe-stripe-products",
-    "version": "0.0.7",
+    "version": "0.0.8",
     "description": "Stripe Products For ApostropheCMS",
     "keywords": [
         "apostrophe",