소유자 관리자 진입 권한 보강
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
import { getUserById } from '../../repositories/member-repository'
|
||||
import { getUserById, isPrivilegedMemberRole } from '../../repositories/member-repository'
|
||||
import { getVerifiedMemberSession, requireMemberSession } from '../../utils/member-auth'
|
||||
|
||||
/**
|
||||
@@ -34,7 +34,7 @@ export default defineEventHandler(async (event) => {
|
||||
username: user.username,
|
||||
email: user.email,
|
||||
avatarUrl: user.avatarUrl || '',
|
||||
isAdmin: Boolean(user.isAdmin),
|
||||
isAdmin: Boolean(user.isAdmin) || isPrivilegedMemberRole(user.role),
|
||||
role: user.role || 'member'
|
||||
}
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user