VPS 4 Builder
31 lines
859 B
TypeScript
31 lines
859 B
TypeScript
import { Request, Response, NextFunction } from 'express';
|
|
|
|
const roleHierarchy: Record<string, number> = {
|
|
user: 1,
|
|
secretary: 2,
|
|
clinical_manager: 3,
|
|
finance: 3,
|
|
partner_admin: 4,
|
|
admin: 5,
|
|
super_admin: 10,
|
|
};
|
|
|
|
export function authorize(roles: string[]) {
|
|
return (req: Request, res: Response, next: NextFunction) => {
|
|
if (!req.user || !roles.includes(req.user.role)) {
|
|
return res.status(403).json({ error: 'Acesso negado' });
|
|
}
|
|
next();
|
|
};
|
|
}
|
|
|
|
export function minRole(role: string) {
|
|
return (req: Request, res: Response, next: NextFunction) => {
|
|
const userRole = req.user?.role || 'user';
|
|
if (roleHierarchy[userRole] < roleHierarchy[role]) {
|
|
return res.status(403).json({ error: 'Nível de privilégio insuficiente' });
|
|
}
|
|
next();
|
|
};
|
|
}
|