rights system

2026-03-23 10:50:52 +01:00
parent 2bb22850f4
commit 515f14956e
24 changed files with 629 additions and 363 deletions
--- a/backend/src/routes/settings.routes.ts
+++ b/backend/src/routes/settings.routes.ts
@@ -4,7 +4,7 @@ import { authenticate } from '../middleware/auth.middleware';
 import { requirePermission } from '../middleware/rbac.middleware';

 const router = Router();
-const auth = [authenticate, requirePermission('admin:access')] as const;
+const auth = [authenticate, requirePermission('admin:write')] as const;

 router.get('/', ...auth, settingsController.getAll.bind(settingsController));
 router.get('/preferences', authenticate, settingsController.getUserPreferences.bind(settingsController));