17 lines
553 B
JavaScript
17 lines
553 B
JavaScript
// FILE: backend/src/routes/permissions.js
|
|
import { Router } from "express";
|
|
import sql from "../db/index.js";
|
|
import { requirePerm } from "../middleware/requirePerm.js";
|
|
|
|
const r = Router();
|
|
|
|
// GLOBAL: settings.manage จึงเห็นได้ทั้งหมด
|
|
r.get("/", requirePerm("settings.manage"), async (_req, res) => {
|
|
const [rows] = await sql.query(
|
|
"SELECT permission_id, perm_code AS permission_code, scope_level, description FROM permissions ORDER BY perm_code"
|
|
);
|
|
res.json(rows);
|
|
});
|
|
|
|
export default r;
|