From 2a1c94072feb201251c9c0c479f1297bfd348851 Mon Sep 17 00:00:00 2001 From: Z8MB1E Date: Tue, 1 Sep 2026 21:39:34 -0400 Subject: [PATCH] feat(auth): protect role management page Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus --- src/collections/users/Roles.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/collections/users/Roles.ts b/src/collections/users/Roles.ts index 0f57495..8da4098 100644 --- a/src/collections/users/Roles.ts +++ b/src/collections/users/Roles.ts @@ -1,5 +1,6 @@ import type { CollectionConfig } from "payload"; import { isAdmin, isDeveloper } from "@/utils/access-control/isRole"; +import { requirePermission } from "@/utils/access-control/hasPermission"; import { permissionSelectOptions } from "@/permissions"; import { invalidatePermissionCache } from "@/utils/access-control/loadUserPermissions"; @@ -12,7 +13,7 @@ export const Roles: CollectionConfig = { "Dynamic roles for the RBAC permission system. Assign permissions to roles, then assign roles to users.", }, access: { - admin: isAdmin, + admin: requirePermission("admin:roles:manage"), create: isAdmin, update: isAdmin, delete: isDeveloper,