P2 tighten route auth

This commit is contained in:
root
2026-06-08 16:34:28 +00:00
parent 36123d784f
commit 1755e9759b
2 changed files with 6 additions and 4 deletions
+3 -2
View File
@@ -5,12 +5,13 @@ import re
import xml.etree.ElementTree as ET
import zipfile
from fastapi import APIRouter, File, HTTPException, Query, UploadFile
from fastapi import APIRouter, Depends, File, HTTPException, Query, UploadFile
from backend.database import db
from backend.routers.auth import require_roles
from backend.schemas import CaseListResponse, CaseResponse, CaseUpdate, DashboardResponse, ParseDocResponse
router = APIRouter(prefix='/api/v1/admin', tags=['admin'])
router = APIRouter(prefix='/api/v1/admin', tags=['admin'], dependencies=[Depends(require_roles(['admin']))])
def _parse_bool(value: str | None) -> bool | None:
+3 -2
View File
@@ -1,11 +1,12 @@
from __future__ import annotations
from fastapi import APIRouter, HTTPException, Query
from fastapi import APIRouter, Depends, HTTPException, Query
from backend.database import db
from backend.routers.auth import require_roles
from backend.schemas import CaseCreate, CaseListResponse, CaseResponse, CaseUpdate
router = APIRouter(prefix='/api/v1/cases', tags=['cases'])
router = APIRouter(prefix='/api/v1/cases', tags=['cases'], dependencies=[Depends(require_roles(['operator', 'field', 'admin']))])
@router.post('', response_model=CaseResponse)