P2 tighten route auth
This commit is contained in:
@@ -5,12 +5,13 @@ import re
|
|||||||
import xml.etree.ElementTree as ET
|
import xml.etree.ElementTree as ET
|
||||||
import zipfile
|
import zipfile
|
||||||
|
|
||||||
from fastapi import APIRouter, File, HTTPException, Query, UploadFile
|
from fastapi import APIRouter, Depends, File, HTTPException, Query, UploadFile
|
||||||
|
|
||||||
from backend.database import db
|
from backend.database import db
|
||||||
|
from backend.routers.auth import require_roles
|
||||||
from backend.schemas import CaseListResponse, CaseResponse, CaseUpdate, DashboardResponse, ParseDocResponse
|
from backend.schemas import CaseListResponse, CaseResponse, CaseUpdate, DashboardResponse, ParseDocResponse
|
||||||
|
|
||||||
router = APIRouter(prefix='/api/v1/admin', tags=['admin'])
|
router = APIRouter(prefix='/api/v1/admin', tags=['admin'], dependencies=[Depends(require_roles(['admin']))])
|
||||||
|
|
||||||
|
|
||||||
def _parse_bool(value: str | None) -> bool | None:
|
def _parse_bool(value: str | None) -> bool | None:
|
||||||
|
|||||||
@@ -1,11 +1,12 @@
|
|||||||
from __future__ import annotations
|
from __future__ import annotations
|
||||||
|
|
||||||
from fastapi import APIRouter, HTTPException, Query
|
from fastapi import APIRouter, Depends, HTTPException, Query
|
||||||
|
|
||||||
from backend.database import db
|
from backend.database import db
|
||||||
|
from backend.routers.auth import require_roles
|
||||||
from backend.schemas import CaseCreate, CaseListResponse, CaseResponse, CaseUpdate
|
from backend.schemas import CaseCreate, CaseListResponse, CaseResponse, CaseUpdate
|
||||||
|
|
||||||
router = APIRouter(prefix='/api/v1/cases', tags=['cases'])
|
router = APIRouter(prefix='/api/v1/cases', tags=['cases'], dependencies=[Depends(require_roles(['operator', 'field', 'admin']))])
|
||||||
|
|
||||||
|
|
||||||
@router.post('', response_model=CaseResponse)
|
@router.post('', response_model=CaseResponse)
|
||||||
|
|||||||
Reference in New Issue
Block a user