feat(admin): dedicated routes for user management (#37) #47
@@ -1,4 +1,4 @@
|
|||||||
import { error, fail, redirect } from '@sveltejs/kit';
|
import { fail, redirect } from '@sveltejs/kit';
|
||||||
import { env } from '$env/dynamic/private';
|
import { env } from '$env/dynamic/private';
|
||||||
import { createApiClient } from '$lib/api.server';
|
import { createApiClient } from '$lib/api.server';
|
||||||
import { parseBackendError, getErrorMessage } from '$lib/errors';
|
import { parseBackendError, getErrorMessage } from '$lib/errors';
|
||||||
@@ -16,7 +16,7 @@ export async function load({
|
|||||||
locals.user?.groups?.some((g: { permissions: string[] }) =>
|
locals.user?.groups?.some((g: { permissions: string[] }) =>
|
||||||
g.permissions.includes('WRITE_ALL')
|
g.permissions.includes('WRITE_ALL')
|
||||||
) ?? false;
|
) ?? false;
|
||||||
if (!canWrite) throw error(403, 'Forbidden');
|
if (!canWrite) throw redirect(303, '/');
|
||||||
|
|
||||||
const senderId = url.searchParams.get('senderId') || '';
|
const senderId = url.searchParams.get('senderId') || '';
|
||||||
const receiverId = url.searchParams.get('receiverId') || '';
|
const receiverId = url.searchParams.get('receiverId') || '';
|
||||||
|
|||||||
Reference in New Issue
Block a user