tkuser.partners 권한이 부여된 일반 사용자도 업체/작업자 등록·수정·비활성화 가능. 완전삭제는 admin 전용 유지. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
23 lines
915 B
JavaScript
23 lines
915 B
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const { requireAuth, requireAdmin, requireAdminOrPermission } = require('../middleware/auth');
|
|
const ctrl = require('../controllers/partnerController');
|
|
const partnerPerm = requireAdminOrPermission('tkuser.partners');
|
|
|
|
router.use(requireAuth);
|
|
|
|
router.get('/', ctrl.list);
|
|
router.get('/:id/delete-info', requireAdmin, ctrl.getDeleteInfo);
|
|
router.delete('/:id/permanent', requireAdmin, ctrl.permanentDelete);
|
|
router.get('/:id', ctrl.getById);
|
|
router.post('/', partnerPerm, ctrl.create);
|
|
router.put('/:id', partnerPerm, ctrl.update);
|
|
router.delete('/:id', partnerPerm, ctrl.deactivate);
|
|
|
|
router.get('/:id/workers', ctrl.listWorkers);
|
|
router.post('/:id/workers', partnerPerm, ctrl.createWorker);
|
|
router.put('/workers/:id', partnerPerm, ctrl.updateWorker);
|
|
router.delete('/workers/:id', partnerPerm, ctrl.deactivateWorker);
|
|
|
|
module.exports = router;
|