fix permissions

This commit is contained in:
Matthias Hochmeister
2026-03-24 17:54:36 +01:00
parent e6ddf67d95
commit f228dd67ba
11 changed files with 521 additions and 7 deletions

View File

@@ -5,6 +5,42 @@ import { requirePermission } from '../middleware/rbac.middleware';
const router = Router();
// --- Statusmeldungen routes (BEFORE /:id) ---
router.get(
'/statusmeldungen',
authenticate,
issueController.getStatusmeldungen.bind(issueController)
);
router.post(
'/statusmeldungen',
authenticate,
requirePermission('issues:edit_settings'),
issueController.createStatusmeldung.bind(issueController)
);
router.patch(
'/statusmeldungen/:id',
authenticate,
requirePermission('issues:edit_settings'),
issueController.updateStatusmeldung.bind(issueController)
);
router.delete(
'/statusmeldungen/:id',
authenticate,
requirePermission('issues:edit_settings'),
issueController.deleteStatusmeldung.bind(issueController)
);
// --- Widget summary route (BEFORE /:id) ---
router.get(
'/widget-summary',
authenticate,
requirePermission('issues:view_all'),
issueController.getWidgetSummary.bind(issueController)
);
// --- Type management routes (BEFORE /:id to avoid conflict) ---
router.get(
'/typen',