feat: Introduce Administrator permission and update permissions checks for access control

This commit is contained in:
MythEclipse
2025-09-25 23:47:29 +07:00
parent 012aff60ef
commit ff2e14d5f9
3 changed files with 9 additions and 40 deletions
@@ -89,7 +89,10 @@ where
};
let user_permissions: Vec<String> =
user.role.permissions.into_iter().map(|p| p.name).collect();
let allowed = permissions
// Check if user has Administrator permission - if yes, allow access to everything
let has_administrator_permission = user_permissions.contains(&PermissionsEnum::Administrator.to_string());
let allowed = has_administrator_permission || permissions
.iter()
.all(|p| user_permissions.contains(&p.to_string()));
if !allowed {