Add permission definitions to route handlers
This update introduces explicit permission definitions for various route handlers across multiple routes. These changes enhance clarity and allow for more granular control over route access based on defined permissions. The updates ensure better manageability and scalability of endpoint permissions.
This commit is contained in:
@@ -5,7 +5,6 @@ namespace routes;
|
||||
use classes\authentication;
|
||||
use objects\customer_vehicles_o;
|
||||
use objects\logs_o;
|
||||
use objects\users_o;
|
||||
use traits\route_t;
|
||||
|
||||
class vehiclesRoute
|
||||
@@ -38,7 +37,11 @@ class vehiclesRoute
|
||||
// Return an error
|
||||
$response->error('Invalid session', 400);
|
||||
}
|
||||
});
|
||||
},
|
||||
[
|
||||
'list_own_vehicles' => 'List own vehicles'
|
||||
]
|
||||
);
|
||||
|
||||
$this->post('/user/vehicles', function () {
|
||||
// Require the user to be logged in
|
||||
@@ -75,7 +78,11 @@ class vehiclesRoute
|
||||
// Return an error
|
||||
$response->error('Invalid session', 401);
|
||||
}
|
||||
});
|
||||
},
|
||||
[
|
||||
'add_vehicle' => 'Add a vehicle to own vehicles'
|
||||
]
|
||||
);
|
||||
}
|
||||
|
||||
private function getData(mixed $data, $response)
|
||||
|
||||
Reference in New Issue
Block a user