18 lines
527 B
TypeScript
18 lines
527 B
TypeScript
import { readUsers } from "~/server/database"
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const session = await requireServerSession(event);
|
|
const users = await readUsers();
|
|
|
|
if (session.account.type === "admin") {
|
|
return users.map(serverUserToApi);
|
|
}
|
|
if (session.account.type === "crew") {
|
|
return users.filter(u => u.type === "crew" || u.type === "admin").map(serverUserToApi);
|
|
}
|
|
throw createError({
|
|
status: 403,
|
|
statusText: "Forbidden",
|
|
message: "You do not have permission to list users",
|
|
});
|
|
})
|