resolve issues with new features

2026-03-12 11:37:25 +01:00
parent d5be68ca63
commit 71a04aee89
38 changed files with 699 additions and 108 deletions
--- a/backend/src/middleware/rbac.middleware.ts
+++ b/backend/src/middleware/rbac.middleware.ts
@@ -124,6 +124,16 @@ export function requirePermission(permission: string) {
    (req as Request & { userRole?: AppRole }).userRole = role;

    if (!hasPermission(role, permission)) {
+      // Fallback: dashboard_admin group grants admin:access
+      if (permission === 'admin:access') {
+        const userGroups: string[] = req.user?.groups ?? [];
+        if (userGroups.includes('dashboard_admin')) {
+          (req as Request & { userRole?: AppRole }).userRole = 'admin';
+          next();
+          return;
+        }
+      }
+
      logger.warn('Permission denied', {
        userId: req.user.id,
        role,