Expand administrative access to include additional user roles

Update API endpoint to grant 'directeur' and 'manager' roles access to user data, alongside existing 'admin' role.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: f2b9c241-9fdd-4abd-9041-720afc8b27d6
Replit-Commit-Checkpoint-Type: full_checkpoint
This commit is contained in:
michaelschal committed 2025-09-02 07:40:27 +00:00
1 parent 989b2c8c40
commit 7cdbdfff68
2 files changed
+1 -1

No files matched your search

Binary file not shown.

After

Width:  |  Height:  |  Size: 13 KiB

+1 -1
View File
@@ -2063,7 +2063,7 @@ export async function registerRoutes(app: Express): Promise<Server> {
app.get('/api/users', isAuthenticated, async (req: any, res) => {
try {
const user = await storage.getUserWithGroups(req.user.claims ? req.user.claims.sub : req.user.id);
if (!user || user.role !== 'admin') {
if (!user || !['admin', 'directeur', 'manager'].includes(user.role)) {
return res.status(403).json({ message: "Access denied" });
}