19 lines
724 B
JavaScript
19 lines
724 B
JavaScript
const router = require("express").Router();
|
|
const controller = require("../controllers/lists.controller");
|
|
const auth = require("../middleware/auth");
|
|
const requireRole = require("../middleware/rbac");
|
|
const { ROLES } = require("../models/user.model");
|
|
const User = require("../models/user.model");
|
|
|
|
|
|
|
|
router.get("/", auth, requireRole(ROLES.VIEWER, ROLES.EDITOR, ROLES.ADMIN), controller.getList);
|
|
router.get("/suggest", auth, requireRole(ROLES.VIEWER, ROLES.EDITOR, ROLES.ADMIN), controller.getSuggestions);
|
|
|
|
|
|
router.post("/add", auth, requireRole(ROLES.EDITOR, ROLES.ADMIN), controller.addItem);
|
|
router.post("/mark-bought", auth, requireRole(ROLES.EDITOR, ROLES.ADMIN), controller.markBought);
|
|
|
|
|
|
module.exports = router;
|