Jeffrey Smith
316c9cbfa7
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 19s
CI/CD / test-frontend (pull_request) Has been skipped
CI/CD / test-go-pg (pull_request) Successful in 2m14s
CI/CD / test-sqlite (pull_request) Successful in 2m56s
CI/CD / build-and-deploy (pull_request) Successful in 1m21s
surface.admin.access permission + seeded Admins system group replaces hardcoded role == "admin" middleware checks. Admin bypass removed from RequirePermission — all permissions flow through group membership. Bootstrap, seed, OIDC, and admin handlers sync group membership on role changes. Demotion/deletion safeguards use group member count. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
28 lines
708 B
Go
28 lines
708 B
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"switchboard-core/auth"
|
|
"switchboard-core/store"
|
|
)
|
|
|
|
// RequireAdmin returns middleware that restricts access to users with the
|
|
// surface.admin.access permission (i.e. members of the Admins group).
|
|
// Must be used after Auth() middleware which sets "user_id" in context.
|
|
func RequireAdmin(stores store.Stores) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
userID := c.GetString("user_id")
|
|
perms, err := resolveAndCachePerms(c, stores, userID)
|
|
if err != nil || !perms[auth.PermSurfaceAdminAccess] {
|
|
c.AbortWithStatusJSON(http.StatusForbidden, gin.H{
|
|
"error": "admin access required",
|
|
})
|
|
return
|
|
}
|
|
c.Next()
|
|
}
|
|
}
|