15 lines
487 B
JavaScript
15 lines
487 B
JavaScript
const router = require("express").Router();
|
|
const controller = require("../controllers/lists.controller");
|
|
const auth = require("../middleware/auth");
|
|
const requireRole = require("../middleware/rbac");
|
|
|
|
|
|
router.get("/", auth, requireRole("viewer", "editor", "admin"), controller.getList);
|
|
|
|
|
|
router.post("/add", auth, requireRole("editor", "admin"), controller.addItem);
|
|
router.post("/mark-bought", auth, requireRole("editor", "admin"), controller.markBought);
|
|
|
|
|
|
module.exports = router;
|