feat: Allow access for users with Administrator permission in permissions guard

2025-09-26 01:30:00 +07:00
parent 17cc4ccdba
commit 14690a378f
1 changed files with 6 additions and 0 deletions
@@ -45,6 +45,12 @@ pub async fn permissions_guard(

 	// Check permissions from database
 	let user_permissions: Vec<String> = user.role.permissions.as_ref().unwrap_or(&vec![]).iter().filter_map(|p| p.as_ref().and_then(|pp| pp.name.clone())).collect();
+
+	// If user has Administrator permission, allow all
+	if user_permissions.contains(&"Administrator".to_string()) {
+		return Ok((claims, state));
+	}
+
 	for required in &required_permissions {
 		let required_str = required.to_string();
 		if !user_permissions.contains(&required_str) {