adrianbonpin/deckyvault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

feat: gate destructive moderation endpoints to moderator+ role

Browse Source
This commit is contained in:
adrianbonpin
2026-05-16 17:09:07 +08:00
parent 23bbfc0317
commit 92d16273d7
4 changed files with 15 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/api/admin-performance.ts
+4 -3
View File
@@ -12,6 +12,7 @@ import { fuzzySearchTerm } from "@/lib/db/search"
import {
requireContributorOrAdmin,
requireAdmin,
requireModeratorOrAdmin,
} from "@/lib/auth/guard"
export const adminPerformanceRoutes = new Elysia({ prefix: "/admin", detail: { tags: ["Admin"] } })
@@ -188,7 +189,7 @@ export const adminPerformanceRoutes = new Elysia({ prefix: "/admin", detail: { t
.patch(
"/performance/:id/remove",
async ({ params, body, request, set }) => {
const guard = await requireAdmin(request.headers)
const guard = await requireModeratorOrAdmin(request.headers)
if (!guard.ok) {
set.status = guard.status
return { error: guard.error }
@@ -229,7 +230,7 @@ export const adminPerformanceRoutes = new Elysia({ prefix: "/admin", detail: { t
.delete(
"/performance/:id/hard-delete",
async ({ params, request, set }) => {
const guard = await requireAdmin(request.headers)
const guard = await requireModeratorOrAdmin(request.headers)
if (!guard.ok) {
set.status = guard.status
return { error: guard.error }
@@ -259,7 +260,7 @@ export const adminPerformanceRoutes = new Elysia({ prefix: "/admin", detail: { t
.patch(
"/performance/:id/restore",
async ({ params, request, set }) => {
const guard = await requireAdmin(request.headers)
const guard = await requireModeratorOrAdmin(request.headers)
if (!guard.ok) {
set.status = guard.status
return { error: guard.error }