f89e074dd1
Governed substrate for autonomous agents: scoped identity (passports), audited actions, MCP workspace. Infra IPs and secrets redacted for public release.
23 lines
592 B
JavaScript
23 lines
592 B
JavaScript
// system/helpers.js — Shared middleware for system routes
|
|
|
|
import { forbidden } from '../../../utils/response.js';
|
|
|
|
/**
|
|
* Middleware to check if user is owner
|
|
*/
|
|
export const ownerOnly = (req, res, next) => {
|
|
if (req.user?.role !== 'owner') {
|
|
return forbidden(res, 'Only owner can access system settings');
|
|
}
|
|
next();
|
|
};
|
|
|
|
/**
|
|
* Middleware to check if user is owner or admin
|
|
*/
|
|
export const adminOrOwner = (req, res, next) => {
|
|
if (req.user?.role !== 'owner' && req.user?.role !== 'admin') {
|
|
return forbidden(res, 'Only admin or owner can access this');
|
|
}
|
|
next();
|
|
};
|