show admin pages only when permissions are correct
This commit is contained in:
@@ -2,8 +2,13 @@ import type { PageServerLoad } from './$types';
|
||||
import { User } from '$lib/server/database';
|
||||
import { getSession } from '$lib/server/session';
|
||||
import { Permissions } from '$lib/permissions';
|
||||
import { redirect } from '@sveltejs/kit';
|
||||
import { env } from '$env/dynamic/public';
|
||||
|
||||
export const load: PageServerLoad = async ({ parent, cookies }) => {
|
||||
const { userCount } = await parent();
|
||||
if (userCount == null) throw redirect(302, `${env.PUBLIC_BASE_PATH}/admin`);
|
||||
|
||||
export const load: PageServerLoad = async ({ cookies }) => {
|
||||
return {
|
||||
count:
|
||||
getSession(cookies, { permissions: [Permissions.UserRead] }) != null ? await User.count() : 0
|
||||
|
||||
Reference in New Issue
Block a user