15 lines
451 B
TypeScript
15 lines
451 B
TypeScript
import { requireAuth } from '~/server/utils/auth'
|
|
import { nodes } from '~/server/utils/db'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const user = requireAuth(event)
|
|
|
|
// RBAC: filter nodes by assigned_to or role
|
|
const allNodes = Array.from(nodes.values())
|
|
const filtered = user.role === 'admin'
|
|
? allNodes
|
|
: allNodes.filter((n: any) => n.assigned_to === user.id || n.assigned_to === 'all')
|
|
|
|
return { nodes: filtered }
|
|
})
|