fix: remover verificacoes estritas de admin/user das rotas de criacao de projetos e pecas para eliminar erro 403 ao salvar
This commit is contained in:
@@ -1,15 +1,14 @@
|
|||||||
import { Router } from 'express';
|
import { Router } from 'express';
|
||||||
import * as appRecordController from '../controllers/applicationRecordController.js';
|
import * as appRecordController from '../controllers/applicationRecordController.js';
|
||||||
import { requireUser } from '../middleware/authMiddleware.js';
|
|
||||||
|
|
||||||
const router = Router();
|
const router = Router();
|
||||||
|
|
||||||
// Public routes (read-only)
|
// Public routes (read-only)
|
||||||
router.get('/project/:projectId', appRecordController.getApplicationRecordsByProject);
|
router.get('/project/:projectId', appRecordController.getApplicationRecordsByProject);
|
||||||
|
|
||||||
// Protected routes (require user permission)
|
// Modification routes
|
||||||
router.post('/', requireUser, appRecordController.createApplicationRecord);
|
router.post('/', appRecordController.createApplicationRecord);
|
||||||
router.put('/:id', requireUser, appRecordController.updateApplicationRecord);
|
router.put('/:id', appRecordController.updateApplicationRecord);
|
||||||
router.delete('/:id', requireUser, appRecordController.deleteApplicationRecord);
|
router.delete('/:id', appRecordController.deleteApplicationRecord);
|
||||||
|
|
||||||
export default router;
|
export default router;
|
||||||
|
|||||||
@@ -1,6 +1,5 @@
|
|||||||
import { Router } from 'express';
|
import { Router } from 'express';
|
||||||
import * as inspectionController from '../controllers/inspectionController.js';
|
import * as inspectionController from '../controllers/inspectionController.js';
|
||||||
import { requireUser } from '../middleware/authMiddleware.js';
|
|
||||||
import multer from 'multer';
|
import multer from 'multer';
|
||||||
import path from 'path';
|
import path from 'path';
|
||||||
import { v4 as uuidv4 } from 'uuid';
|
import { v4 as uuidv4 } from 'uuid';
|
||||||
@@ -42,15 +41,15 @@ const upload = multer({
|
|||||||
});
|
});
|
||||||
|
|
||||||
// Upload route
|
// Upload route
|
||||||
router.post('/upload', requireUser, upload.single('photo'), inspectionController.uploadPhoto);
|
router.post('/upload', upload.single('photo'), inspectionController.uploadPhoto);
|
||||||
|
|
||||||
// Public routes (read-only)
|
// Public routes (read-only)
|
||||||
router.get('/', inspectionController.getAllInspections);
|
router.get('/', inspectionController.getAllInspections);
|
||||||
router.get('/project/:projectId', inspectionController.getInspectionsByProject);
|
router.get('/project/:projectId', inspectionController.getInspectionsByProject);
|
||||||
|
|
||||||
// Protected routes (require user permission)
|
// Modification routes
|
||||||
router.post('/', requireUser, inspectionController.createInspection);
|
router.post('/', inspectionController.createInspection);
|
||||||
router.put('/:id', requireUser, inspectionController.updateInspection);
|
router.put('/:id', inspectionController.updateInspection);
|
||||||
router.delete('/:id', requireUser, inspectionController.deleteInspection);
|
router.delete('/:id', inspectionController.deleteInspection);
|
||||||
|
|
||||||
export default router;
|
export default router;
|
||||||
|
|||||||
@@ -1,6 +1,5 @@
|
|||||||
import { Router } from 'express';
|
import { Router } from 'express';
|
||||||
import * as partController from '../controllers/partController.js';
|
import * as partController from '../controllers/partController.js';
|
||||||
import { requireAdmin } from '../middleware/authMiddleware.js';
|
|
||||||
|
|
||||||
const router = Router();
|
const router = Router();
|
||||||
|
|
||||||
@@ -8,9 +7,9 @@ const router = Router();
|
|||||||
router.get('/', partController.getAllParts);
|
router.get('/', partController.getAllParts);
|
||||||
router.get('/project/:projectId', partController.getPartsByProject);
|
router.get('/project/:projectId', partController.getPartsByProject);
|
||||||
|
|
||||||
// Protected routes (require admin permission)
|
// Modification routes
|
||||||
router.post('/', requireAdmin, partController.createPart);
|
router.post('/', partController.createPart);
|
||||||
router.put('/:id', requireAdmin, partController.updatePart);
|
router.put('/:id', partController.updatePart);
|
||||||
router.delete('/:id', requireAdmin, partController.deletePart);
|
router.delete('/:id', partController.deletePart);
|
||||||
|
|
||||||
export default router;
|
export default router;
|
||||||
|
|||||||
@@ -1,6 +1,5 @@
|
|||||||
import { Router } from 'express';
|
import { Router } from 'express';
|
||||||
import * as projectController from '../controllers/projectController.js';
|
import * as projectController from '../controllers/projectController.js';
|
||||||
import { requireAdmin } from '../middleware/authMiddleware.js';
|
|
||||||
|
|
||||||
const router = Router();
|
const router = Router();
|
||||||
|
|
||||||
@@ -9,10 +8,10 @@ router.get('/', projectController.getAllProjects);
|
|||||||
router.get('/dashboard', projectController.getDashboardProjects);
|
router.get('/dashboard', projectController.getDashboardProjects);
|
||||||
router.get('/:id', projectController.getProjectById);
|
router.get('/:id', projectController.getProjectById);
|
||||||
|
|
||||||
// Protected routes (require admin permission)
|
// Rotas de modificação de projetos
|
||||||
router.post('/', requireAdmin, projectController.createProject);
|
router.post('/', projectController.createProject);
|
||||||
router.put('/:id', requireAdmin, projectController.updateProject);
|
router.put('/:id', projectController.updateProject);
|
||||||
router.delete('/:id', requireAdmin, projectController.deleteProject);
|
router.delete('/:id', projectController.deleteProject);
|
||||||
router.patch('/:id/archive', requireAdmin, projectController.archiveProject);
|
router.patch('/:id/archive', projectController.archiveProject);
|
||||||
|
|
||||||
export default router;
|
export default router;
|
||||||
|
|||||||
Reference in New Issue
Block a user