refine vehicle freatures

backend/src/routes/equipment.routes.ts

@@ -0,0 +1,32 @@
+import { Router } from 'express';
+import equipmentController from '../controllers/equipment.controller';
+import { authenticate } from '../middleware/auth.middleware';
+import { requireGroups } from '../middleware/rbac.middleware';
+
+const ADMIN_GROUPS = ['dashboard_admin'];
+const WRITE_GROUPS = ['dashboard_admin', 'dashboard_fahrmeister'];
+
+const router = Router();
+
+// ── Read-only (any authenticated user) ───────────────────────────────────────
+
+router.get('/',                    authenticate, equipmentController.listEquipment.bind(equipmentController));
+router.get('/stats',               authenticate, equipmentController.getStats.bind(equipmentController));
+router.get('/alerts',              authenticate, equipmentController.getAlerts.bind(equipmentController));
+router.get('/categories',          authenticate, equipmentController.getCategories.bind(equipmentController));
+router.get('/vehicle-warnings',    authenticate, equipmentController.getVehicleWarnings.bind(equipmentController));
+router.get('/vehicle/:fahrzeugId', authenticate, equipmentController.getByVehicle.bind(equipmentController));
+router.get('/:id',                 authenticate, equipmentController.getEquipment.bind(equipmentController));
+
+// ── Write — admin + fahrmeister ──────────────────────────────────────────────
+
+router.post('/',           authenticate, requireGroups(WRITE_GROUPS), equipmentController.createEquipment.bind(equipmentController));
+router.patch('/:id',       authenticate, requireGroups(WRITE_GROUPS), equipmentController.updateEquipment.bind(equipmentController));
+router.patch('/:id/status', authenticate, requireGroups(WRITE_GROUPS), equipmentController.updateStatus.bind(equipmentController));
+router.post('/:id/wartung', authenticate, requireGroups(WRITE_GROUPS), equipmentController.addWartung.bind(equipmentController));
+
+// ── Delete — admin only ──────────────────────────────────────────────────────
+
+router.delete('/:id', authenticate, requireGroups(ADMIN_GROUPS), equipmentController.deleteEquipment.bind(equipmentController));
+
+export default router;