mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-13 10:26:38 +08:00
fix(openflare): align admin permission model with Wavelet
Unify OpenFlare console auth to user.IsAdmin and token_admin instead of the legacy Admin/Root role tiers. Route groups now use apiutil.AdminMiddlewares (LoginRequired + LoginAdminRequired) so admin checks cannot be skipped. Add middleware tests and extend integration coverage for 401/404/400 responses.
This commit is contained in:
@@ -11,7 +11,7 @@ import (
|
||||
|
||||
func registerPagesRoutes(apiGroup *gin.RouterGroup) {
|
||||
pagesRoute := apiGroup.Group("/pages")
|
||||
pagesRoute.Use(apiutil.AdminRequired())
|
||||
pagesRoute.Use(apiutil.AdminMiddlewares()...)
|
||||
{
|
||||
apiutil.RegisterCollection(pagesRoute, "GET", pages.ListProjectsHandler)
|
||||
pagesRoute.GET("/:id", pages.GetProjectHandler)
|
||||
|
||||
Reference in New Issue
Block a user