Add auth checks to et pages

2024-02-26 14:05:43 -05:00
parent b34ca64200
commit 18e63c22dd
3 changed files with 44 additions and 0 deletions
--- a/app/routes/events-team.tsx
+++ b/app/routes/events-team.tsx
@ -31,6 +31,15 @@ export async function loader({ context }: { context: RequestContext }) {
      status: 401,
    });

+  if (
+    ![1 << 3, 1 << 4, 1 << 12].find(
+      (p) => context.data.current_user.permissions & p,
+    )
+  )
+    throw new Response(null, {
+      status: 403,
+    });
+
  const now = new Date();
  const monthEventList = await context.env.D1.prepare(
    "SELECT answer, approved, created_by, day, details, id, month, pending, type, year FROM events WHERE month = ? AND year = ?;",