Function requirePermission

apps/api/src/lib/roles.ts:68–111

(
  requiredPermissions: Permission | Permission[],
  requireAll: boolean = true
)

 * @param requireAll - If true, user must have ALL permissions. If false, only ONE permission is required
 */
export function requirePermission(
  requiredPermissions: Permission | Permission[],
  requireAll: boolean = true
) {
  return async (req: any, res: any, next: any) => {
    try {
      const user = await checkSession(req);
      const config = await prisma.config.findFirst();

      if (config?.roles_active) {
        const userWithRoles = user
          ? await prisma.user.findUnique({
              where: { id: user.id },
              include: {
                roles: true,
              },
            })
          : null;

        if (!userWithRoles) {
          return res.status(401).send({
            message: "Unauthorized",
            success: false,
          });
        }

        if (!hasPermission(userWithRoles, requiredPermissions, requireAll)) {
          return res.status(401).send({
            message:
              "You do not have the required permission to access this resource.",
            success: false,
            status: 403,
          });
        }

        return;
      } else {
        return;
      }
    } catch (error) {
      next(error);
    }
  };
}

// Usage examples:
/*