wip: access control

2024-11-16 01:24:34 -08:00
parent 4eb8b1450c
commit 240c91e79d
10 changed files with 211 additions and 88 deletions
@@ -22,8 +22,11 @@ router = APIRouter()


@router.get("/", response_model=list[GroupResponse])
-async def get_groups(user=Depends(get_admin_user)):
-    return Groups.get_groups()
+async def get_groups(user=Depends(get_verified_user)):
+    if user.role == "admin":
+        return Groups.get_groups()
+    else:
+        return Groups.get_groups_by_member_id(user.id)


 ############################