13 lines
660 B
JavaScript
13 lines
660 B
JavaScript
const router = require("express").Router();
|
|
const auth = require("../middleware/auth");
|
|
const requireRole = require("../middleware/rbac");
|
|
const usersController = require("../controllers/users.controller");
|
|
const { ROLES } = require("../models/user.model");
|
|
|
|
// router.get("/users", auth, (req, res, next) => next(), usersController.getAllUsers);
|
|
router.get("/users", auth, requireRole(ROLES.SYSTEM_ADMIN), usersController.getAllUsers);
|
|
router.put("/users", auth, requireRole(ROLES.SYSTEM_ADMIN), usersController.updateUserRole);
|
|
router.delete("/users", auth, requireRole(ROLES.SYSTEM_ADMIN), usersController.deleteUser);
|
|
|
|
module.exports = router;
|