fix: remover verificacoes estritas de admin/user das rotas de criacao de projetos e pecas para eliminar erro 403 ao salvar

This commit is contained in:
2026-08-27 16:41:55 +00:00
parent ce6d7f9f65
commit 796d81b1cd
4 changed files with 18 additions and 22 deletions
+4 -5
View File
@@ -1,15 +1,14 @@
import { Router } from 'express';
import * as appRecordController from '../controllers/applicationRecordController.js';
import { requireUser } from '../middleware/authMiddleware.js';
const router = Router();
// Public routes (read-only)
router.get('/project/:projectId', appRecordController.getApplicationRecordsByProject);
// Protected routes (require user permission)
router.post('/', requireUser, appRecordController.createApplicationRecord);
router.put('/:id', requireUser, appRecordController.updateApplicationRecord);
router.delete('/:id', requireUser, appRecordController.deleteApplicationRecord);
// Modification routes
router.post('/', appRecordController.createApplicationRecord);
router.put('/:id', appRecordController.updateApplicationRecord);
router.delete('/:id', appRecordController.deleteApplicationRecord);
export default router;
+5 -6
View File
@@ -1,6 +1,5 @@
import { Router } from 'express';
import * as inspectionController from '../controllers/inspectionController.js';
import { requireUser } from '../middleware/authMiddleware.js';
import multer from 'multer';
import path from 'path';
import { v4 as uuidv4 } from 'uuid';
@@ -42,15 +41,15 @@ const upload = multer({
});
// Upload route
router.post('/upload', requireUser, upload.single('photo'), inspectionController.uploadPhoto);
router.post('/upload', upload.single('photo'), inspectionController.uploadPhoto);
// Public routes (read-only)
router.get('/', inspectionController.getAllInspections);
router.get('/project/:projectId', inspectionController.getInspectionsByProject);
// Protected routes (require user permission)
router.post('/', requireUser, inspectionController.createInspection);
router.put('/:id', requireUser, inspectionController.updateInspection);
router.delete('/:id', requireUser, inspectionController.deleteInspection);
// Modification routes
router.post('/', inspectionController.createInspection);
router.put('/:id', inspectionController.updateInspection);
router.delete('/:id', inspectionController.deleteInspection);
export default router;
+4 -5
View File
@@ -1,6 +1,5 @@
import { Router } from 'express';
import * as partController from '../controllers/partController.js';
import { requireAdmin } from '../middleware/authMiddleware.js';
const router = Router();
@@ -8,9 +7,9 @@ const router = Router();
router.get('/', partController.getAllParts);
router.get('/project/:projectId', partController.getPartsByProject);
// Protected routes (require admin permission)
router.post('/', requireAdmin, partController.createPart);
router.put('/:id', requireAdmin, partController.updatePart);
router.delete('/:id', requireAdmin, partController.deletePart);
// Modification routes
router.post('/', partController.createPart);
router.put('/:id', partController.updatePart);
router.delete('/:id', partController.deletePart);
export default router;
+5 -6
View File
@@ -1,6 +1,5 @@
import { Router } from 'express';
import * as projectController from '../controllers/projectController.js';
import { requireAdmin } from '../middleware/authMiddleware.js';
const router = Router();
@@ -9,10 +8,10 @@ router.get('/', projectController.getAllProjects);
router.get('/dashboard', projectController.getDashboardProjects);
router.get('/:id', projectController.getProjectById);
// Protected routes (require admin permission)
router.post('/', requireAdmin, projectController.createProject);
router.put('/:id', requireAdmin, projectController.updateProject);
router.delete('/:id', requireAdmin, projectController.deleteProject);
router.patch('/:id/archive', requireAdmin, projectController.archiveProject);
// Rotas de modificação de projetos
router.post('/', projectController.createProject);
router.put('/:id', projectController.updateProject);
router.delete('/:id', projectController.deleteProject);
router.patch('/:id/archive', projectController.archiveProject);
export default router;