Merge pull request #43 from ReflectionsProjections/dev/aydan/add-staf…

…f-role Added staff-level role
ReflectionsProjections · May 26, 2024 · 7ac0a43 · 7ac0a43
2 parents 85458b6 + 2b1db99
commit 7ac0a43
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/src/middleware/role-checker.ts b/src/middleware/role-checker.ts
@@ -40,8 +40,11 @@ export default function RoleChecker(
                 return next();
             }
 
-            // Admins (staff) can access any endpoint
-            if (userRoles.includes(Role.Enum.ADMIN)) {
+            // Admins and staff can access any endpoint
+            if (
+                userRoles.includes(Role.Enum.ADMIN) ||
+                userRoles.includes(Role.Enum.STAFF)
+            ) {
                 return next();
             }
 

diff --git a/src/services/auth/auth-models.ts b/src/services/auth/auth-models.ts
@@ -1,6 +1,6 @@
 import { z } from "zod";
 
-export const Role = z.enum(["USER", "ADMIN", "CORPORATE"]);
+export const Role = z.enum(["USER", "STAFF", "ADMIN", "CORPORATE"]);
 
 export const JwtPayloadValidator = z.object({
     userId: z.string(),

diff --git a/src/services/s3/s3-router.ts b/src/services/s3/s3-router.ts
@@ -63,7 +63,7 @@ s3Router.get(
 
 s3Router.get(
     "/download/:USERID",
-    RoleChecker([Role.enum.ADMIN], false),
+    RoleChecker([Role.enum.STAFF], false),
     s3ClientMiddleware,
     async (req: Request, res: Response) => {
         const userId: string = req.params.USERID;