jason/polaris-task-force
1
0
Fork 0
Code Issues Wiki Activity

feat(auth): protect role management page

Browse source 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Jason Fraley 2026-09-01 21:39:34 -04:00
parent 9841fb3628
commit 2a1c94072f
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/collections/users/Roles.ts
View file

@ -1,5 +1,6 @@
import type { CollectionConfig } from "payload";
import { isAdmin, isDeveloper } from "@/utils/access-control/isRole";
import { requirePermission } from "@/utils/access-control/hasPermission";
import { permissionSelectOptions } from "@/permissions";
import { invalidatePermissionCache } from "@/utils/access-control/loadUserPermissions";
@ -12,7 +13,7 @@ export const Roles: CollectionConfig = {
"Dynamic roles for the RBAC permission system. Assign permissions to roles, then assign roles to users.",
},
access: {
admin: isAdmin,
admin: requirePermission("admin:roles:manage"),
create: isAdmin,
update: isAdmin,
delete: isDeveloper,