From a1d22305ce39414a0fc8523c69468325ba82a84f Mon Sep 17 00:00:00 2001
From: Ian Chen <ian@open.gov.sg>
Date: Wed, 9 Oct 2024 15:17:46 +0800
Subject: [PATCH] chore: allow admins to retry step (#767)

---
 packages/backend/src/helpers/authentication.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages/backend/src/helpers/authentication.ts b/packages/backend/src/helpers/authentication.ts
index 78f7a464e..c6cd4aca0 100644
--- a/packages/backend/src/helpers/authentication.ts
+++ b/packages/backend/src/helpers/authentication.ts
@@ -91,6 +91,12 @@ const authentication = shield(
         isAuthenticated,
         not(isAdminOperation), // Limiting admins to read-only for now.
       ),
+      /**
+       * Allow admins to retry steps and publish/unpublish pipes
+       */
+      retryPartialStep: or(isAuthenticated, isAdminOperation),
+      retryExecutionStep: or(isAuthenticated, isAdminOperation),
+      bulkRetryExecutions: or(isAuthenticated, isAdminOperation),
       updateFlowStatus: or(isAuthenticated, isAdminOperation),
       requestOtp: rateLimitRule({ window: '1s', max: 5 }),
       verifyOtp: rateLimitRule({ window: '1s', max: 5 }),