Updated A LOT
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
const express = require('express');
|
||||
const { requireRole } = require('../middleware/auth');
|
||||
const { requireCapability } = require('../middleware/auth');
|
||||
const {
|
||||
assignAsset,
|
||||
assignmentRows,
|
||||
@@ -15,7 +15,7 @@ router.get('/employees', (req, res) => {
|
||||
res.json({ employees: listEmployees(req.query) });
|
||||
});
|
||||
|
||||
router.post('/employees', requireRole('admin', 'finance', 'operations'), (req, res) => {
|
||||
router.post('/employees', requireCapability('assets.assign'), (req, res) => {
|
||||
res.status(201).json({ employee: upsertEmployee({ ...req.body, source: req.body.source || 'manual' }) });
|
||||
});
|
||||
|
||||
@@ -30,7 +30,7 @@ router.get('/assignments', (req, res) => {
|
||||
});
|
||||
});
|
||||
|
||||
router.post('/assignments', requireRole('admin', 'finance', 'operations'), (req, res, next) => {
|
||||
router.post('/assignments', requireCapability('assets.assign'), (req, res, next) => {
|
||||
try {
|
||||
res.status(201).json({ assignment: assignAsset(req.body, req.user.id) });
|
||||
} catch (error) {
|
||||
@@ -38,7 +38,7 @@ router.post('/assignments', requireRole('admin', 'finance', 'operations'), (req,
|
||||
}
|
||||
});
|
||||
|
||||
router.put('/assignments/:id/release', requireRole('admin', 'finance', 'operations'), (req, res) => {
|
||||
router.put('/assignments/:id/release', requireCapability('assets.assign'), (req, res) => {
|
||||
const assignment = releaseAssignment(req.params.id, req.body, req.user.id);
|
||||
if (!assignment) return res.status(404).json({ error: 'Assignment not found' });
|
||||
return res.json({ assignment });
|
||||
|
||||
Reference in New Issue
Block a user