jason/polaris-task-force
1
0
Fork 0
Code Issues Wiki Activity

feat(auth): protect role management page

Browse source 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Jason Fraley 2026-09-01 21:39:34 -04:00
parent 9841fb3628
commit 2a1c94072f
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/collections/users/Roles.ts
View file

@ -1,5 +1,6 @@
import type { CollectionConfig } from "payload"; import type { CollectionConfig } from "payload";
import { isAdmin, isDeveloper } from "@/utils/access-control/isRole"; import { isAdmin, isDeveloper } from "@/utils/access-control/isRole";
import { requirePermission } from "@/utils/access-control/hasPermission";
import { permissionSelectOptions } from "@/permissions"; import { permissionSelectOptions } from "@/permissions";
import { invalidatePermissionCache } from "@/utils/access-control/loadUserPermissions"; import { invalidatePermissionCache } from "@/utils/access-control/loadUserPermissions";
@ -12,7 +13,7 @@ export const Roles: CollectionConfig = {
"Dynamic roles for the RBAC permission system. Assign permissions to roles, then assign roles to users.", "Dynamic roles for the RBAC permission system. Assign permissions to roles, then assign roles to users.",
}, },
access: { access: {
admin: isAdmin, admin: requirePermission("admin:roles:manage"),
create: isAdmin, create: isAdmin,
update: isAdmin, update: isAdmin,
delete: isDeveloper, delete: isDeveloper,