Feat admin rbac migration (#1)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

server/main.go

@@ -287,7 +287,6 @@ func main() {
 			HeaderFingerprint: cfg.MTLSHeaderFingerprint,
 			AutoActivate:      cfg.MTLSAutoActivate,
 			DefaultTeam:       cfg.MTLSDefaultTeam,
-			DefaultRole:       cfg.MTLSDefaultRole,
 		})
 	case auth.ModeOIDC:
 		var err error
@@ -299,7 +298,6 @@ func main() {
 			RedirectURL:        cfg.OIDCRedirectURL,
 			AutoActivate:       cfg.OIDCAutoActivate,
 			DefaultTeam:        cfg.OIDCDefaultTeam,
-			DefaultRole:        cfg.OIDCDefaultRole,
 			RolesClaim:         cfg.OIDCRolesClaim,
 			GroupsClaim:        cfg.OIDCGroupsClaim,
 			AdminRole:          cfg.OIDCAdminRole,
@@ -513,7 +511,7 @@ func main() {
 		// ── Admin routes ────────────────────────
 		admin := api.Group("/admin")
 		admin.Use(middleware.Auth(cfg, stores.Users, userCache))
-		admin.Use(middleware.RequireAdmin())
+		admin.Use(middleware.RequireAdmin(stores))
 		admin.Use(middleware.ValidatePathParams())
 		{
 			adm := handlers.NewAdminHandler(stores, keyResolver, uekCache, objStore)
@@ -693,7 +691,7 @@ func main() {
 		Authenticated: middleware.AuthOrRedirect(cfg, stores.Users, userCache),
 		Admin: []gin.HandlerFunc{
 			middleware.AuthOrRedirect(cfg, stores.Users, userCache),
-			middleware.RequireAdminPage(),
+			middleware.RequireAdminPage(stores),
 		},
 		Session: middleware.AuthOrRedirect(cfg, stores.Users, userCache), // TODO: session middleware for workflow visitors (v0.2.0)
 	})