RBAC 2.0

2026-03-12 21:26:53 -05:00
parent 5da706bc88
commit 409ed35f5b
30 changed files with 1097 additions and 36 deletions
@@ -203,6 +203,10 @@ export async function handlePageRoutes(
      return serveLoginOrUnauthorized(deps);
    }

+    if (user.role !== "admin" && user.role !== "operator") {
+      return new Response("Forbidden", { status: 403 });
+    }
+
    const maybeChange = await serveChangePasswordIfRequired(deps, user.userId);
    if (maybeChange) return maybeChange;