From 2d5725f45b5442a1ed54c870d8605723fd1b0be6 Mon Sep 17 00:00:00 2001 From: michaelschal <35957947-michaelschal@users.noreply.replit.com> Date: Wed, 3 Sep 2025 09:11:45 +0000 Subject: [PATCH] Restrict director access to only their assigned groups Update the application logic to filter deliveries, allowing only administrators to view all data, while directors can only access deliveries within their assigned groups. Replit-Commit-Author: Agent Replit-Commit-Session-Id: 28b81ac1-a55f-409c-b6a9-88ad420d8a9a Replit-Commit-Checkpoint-Type: full_checkpoint Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/1957c339-2757-4d1f-8e92-e9f71a1ce58e/28b81ac1-a55f-409c-b6a9-88ad420d8a9a/hAUonZr --- server/routes.ts | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/server/routes.ts b/server/routes.ts index 97e7cd8..b47f22d 100644 --- a/server/routes.ts +++ b/server/routes.ts @@ -678,15 +678,15 @@ export async function registerRoutes(app: Express): Promise { console.log('Deliveries API called with:', { startDate, endDate, storeId, withBL, userRole: user.role }); - if (user.role === 'admin' || user.role === 'directeur') { + if (user.role === 'admin') { let groupIds: number[] | undefined; - // If admin/directeur selected a specific store, filter by it + // If admin selected a specific store, filter by it if (storeId) { groupIds = [parseInt(storeId as string)]; - console.log('🔍 Admin/Directeur deliveries filtering by store:', { storeId, groupIds, role: user.role }); + console.log('🔍 Admin deliveries filtering by store:', { storeId, groupIds, role: user.role }); } else { - console.log('🔍 Admin/Directeur deliveries - showing all stores', { role: user.role }); + console.log('🔍 Admin deliveries - showing all stores', { role: user.role }); } // Only filter by date if both startDate and endDate are provided