Sebastian Krüger
670c18bcb7
- Separate admin identity from role: viewer|model + is_admin boolean flag - DB migration 0001_is_admin: adds column, migrates former admin role users - Update ACL helpers, auth session, GraphQL types and all resolvers - Admin layout guard and header links check is_admin instead of role - Admin users table: show Admin badge next to name, remove admin from role select - Admin user edit page: is_admin checkbox toggle - Install shadcn Badge component; use in admin users table - Fix duplicate photo keys in adminGetUser resolver - Replace confirm() in /me recordings with Dialog component Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
19 lines
567 B
TypeScript
19 lines
567 B
TypeScript
import { GraphQLError } from "graphql";
|
|
import type { Context } from "../graphql/builder";
|
|
|
|
export function requireAuth(ctx: Context): void {
|
|
if (!ctx.currentUser) throw new GraphQLError("Unauthorized");
|
|
}
|
|
|
|
export function requireAdmin(ctx: Context): void {
|
|
requireAuth(ctx);
|
|
if (!ctx.currentUser!.is_admin) throw new GraphQLError("Forbidden");
|
|
}
|
|
|
|
export function requireOwnerOrAdmin(ctx: Context, ownerId: string): void {
|
|
requireAuth(ctx);
|
|
if (ctx.currentUser!.id !== ownerId && !ctx.currentUser!.is_admin) {
|
|
throw new GraphQLError("Forbidden");
|
|
}
|
|
}
|