rights system

2026-03-23 10:50:52 +01:00
parent 2bb22850f4
commit 515f14956e
24 changed files with 629 additions and 363 deletions
--- a/backend/src/routes/banner.routes.ts
+++ b/backend/src/routes/banner.routes.ts
@@ -4,7 +4,7 @@ import { authenticate } from '../middleware/auth.middleware';
 import { requirePermission } from '../middleware/rbac.middleware';

 const router = Router();
-const adminAuth = [authenticate, requirePermission('admin:access')] as const;
+const adminAuth = [authenticate, requirePermission('admin:write')] as const;

 // Public (authenticated): get active banners
 router.get('/active', authenticate, bannerController.getActive.bind(bannerController));