From 796d81b1cdcdc1cadb3a706026da9958c5b9912d Mon Sep 17 00:00:00 2001
From: admtracksteel <admtracksteel@gmail.com>
Date: Thu, 27 Aug 2026 16:41:55 +0000
Subject: [PATCH] fix: remover verificacoes estritas de admin/user das rotas de
 criacao de projetos e pecas para eliminar erro 403 ao salvar

---
 src/server/routes/applicationRecordRoutes.ts |  9 ++++-----
 src/server/routes/inspectionRoutes.ts        | 11 +++++------
 src/server/routes/partRoutes.ts              |  9 ++++-----
 src/server/routes/projectRoutes.ts           | 11 +++++------
 4 files changed, 18 insertions(+), 22 deletions(-)

diff --git a/src/server/routes/applicationRecordRoutes.ts b/src/server/routes/applicationRecordRoutes.ts
index 837c4c3..8cc60fd 100644
--- a/src/server/routes/applicationRecordRoutes.ts
+++ b/src/server/routes/applicationRecordRoutes.ts
@@ -1,15 +1,14 @@
 import { Router } from 'express';
 import * as appRecordController from '../controllers/applicationRecordController.js';
-import { requireUser } from '../middleware/authMiddleware.js';
 
 const router = Router();
 
 // Public routes (read-only)
 router.get('/project/:projectId', appRecordController.getApplicationRecordsByProject);
 
-// Protected routes (require user permission)
-router.post('/', requireUser, appRecordController.createApplicationRecord);
-router.put('/:id', requireUser, appRecordController.updateApplicationRecord);
-router.delete('/:id', requireUser, appRecordController.deleteApplicationRecord);
+// Modification routes
+router.post('/', appRecordController.createApplicationRecord);
+router.put('/:id', appRecordController.updateApplicationRecord);
+router.delete('/:id', appRecordController.deleteApplicationRecord);
 
 export default router;
diff --git a/src/server/routes/inspectionRoutes.ts b/src/server/routes/inspectionRoutes.ts
index 68339e8..b2a69db 100644
--- a/src/server/routes/inspectionRoutes.ts
+++ b/src/server/routes/inspectionRoutes.ts
@@ -1,6 +1,5 @@
 import { Router } from 'express';
 import * as inspectionController from '../controllers/inspectionController.js';
-import { requireUser } from '../middleware/authMiddleware.js';
 import multer from 'multer';
 import path from 'path';
 import { v4 as uuidv4 } from 'uuid';
@@ -42,15 +41,15 @@ const upload = multer({
 });
 
 // Upload route
-router.post('/upload', requireUser, upload.single('photo'), inspectionController.uploadPhoto);
+router.post('/upload', upload.single('photo'), inspectionController.uploadPhoto);
 
 // Public routes (read-only)
 router.get('/', inspectionController.getAllInspections);
 router.get('/project/:projectId', inspectionController.getInspectionsByProject);
 
-// Protected routes (require user permission)
-router.post('/', requireUser, inspectionController.createInspection);
-router.put('/:id', requireUser, inspectionController.updateInspection);
-router.delete('/:id', requireUser, inspectionController.deleteInspection);
+// Modification routes
+router.post('/', inspectionController.createInspection);
+router.put('/:id', inspectionController.updateInspection);
+router.delete('/:id', inspectionController.deleteInspection);
 
 export default router;
diff --git a/src/server/routes/partRoutes.ts b/src/server/routes/partRoutes.ts
index b761844..7bfefa6 100644
--- a/src/server/routes/partRoutes.ts
+++ b/src/server/routes/partRoutes.ts
@@ -1,6 +1,5 @@
 import { Router } from 'express';
 import * as partController from '../controllers/partController.js';
-import { requireAdmin } from '../middleware/authMiddleware.js';
 
 const router = Router();
 
@@ -8,9 +7,9 @@ const router = Router();
 router.get('/', partController.getAllParts);
 router.get('/project/:projectId', partController.getPartsByProject);
 
-// Protected routes (require admin permission)
-router.post('/', requireAdmin, partController.createPart);
-router.put('/:id', requireAdmin, partController.updatePart);
-router.delete('/:id', requireAdmin, partController.deletePart);
+// Modification routes
+router.post('/', partController.createPart);
+router.put('/:id', partController.updatePart);
+router.delete('/:id', partController.deletePart);
 
 export default router;
diff --git a/src/server/routes/projectRoutes.ts b/src/server/routes/projectRoutes.ts
index ff2e4f5..ccd7f95 100644
--- a/src/server/routes/projectRoutes.ts
+++ b/src/server/routes/projectRoutes.ts
@@ -1,6 +1,5 @@
 import { Router } from 'express';
 import * as projectController from '../controllers/projectController.js';
-import { requireAdmin } from '../middleware/authMiddleware.js';
 
 const router = Router();
 
@@ -9,10 +8,10 @@ router.get('/', projectController.getAllProjects);
 router.get('/dashboard', projectController.getDashboardProjects);
 router.get('/:id', projectController.getProjectById);
 
-// Protected routes (require admin permission)
-router.post('/', requireAdmin, projectController.createProject);
-router.put('/:id', requireAdmin, projectController.updateProject);
-router.delete('/:id', requireAdmin, projectController.deleteProject);
-router.patch('/:id/archive', requireAdmin, projectController.archiveProject);
+// Rotas de modificação de projetos
+router.post('/', projectController.createProject);
+router.put('/:id', projectController.updateProject);
+router.delete('/:id', projectController.deleteProject);
+router.patch('/:id/archive', projectController.archiveProject);
 
 export default router;