added role checking for maintenance routes

backend/gsmaster/routes.go

@@ -1,39 +1,44 @@
 package gsmaster
 
 import (
+	"bamort/user"
+
 	"github.com/gin-gonic/gin"
 )
 
 func RegisterRoutes(r *gin.RouterGroup) {
 	maintGrp := r.Group("/maintenance")
-	maintGrp.GET("", GetMasterData)
-	maintGrp.GET("/skills", GetMDSkills)
-	maintGrp.GET("/skills/:id", GetMDSkill)
-	maintGrp.PUT("/skills/:id", UpdateMDSkill)
-	maintGrp.POST("/skills", AddSkill)
-	maintGrp.DELETE("/skills/:id", DeleteMDSkill)
+	maintGrp.Use(user.RequireMaintainer())
+	{
+		maintGrp.GET("", GetMasterData)
+		maintGrp.GET("/skills", GetMDSkills)
+		maintGrp.GET("/skills/:id", GetMDSkill)
+		maintGrp.PUT("/skills/:id", UpdateMDSkill)
+		maintGrp.POST("/skills", AddSkill)
+		maintGrp.DELETE("/skills/:id", DeleteMDSkill)
 
-	maintGrp.GET("/weaponskills", GetMDWeaponSkills)
-	maintGrp.GET("/weaponskills/:id", GetMDWeaponSkill)
-	maintGrp.PUT("/weaponskills/:id", UpdateMDWeaponSkill)
-	maintGrp.POST("/weaponskills", AddWeaponSkill)
-	maintGrp.DELETE("/weaponskills/:id", DeleteMDWeaponSkill)
+		maintGrp.GET("/weaponskills", GetMDWeaponSkills)
+		maintGrp.GET("/weaponskills/:id", GetMDWeaponSkill)
+		maintGrp.PUT("/weaponskills/:id", UpdateMDWeaponSkill)
+		maintGrp.POST("/weaponskills", AddWeaponSkill)
+		maintGrp.DELETE("/weaponskills/:id", DeleteMDWeaponSkill)
 
-	maintGrp.GET("/spells", GetMDSpells)
-	maintGrp.GET("/spells/:id", GetMDSpell)
-	maintGrp.PUT("/spells/:id", UpdateMDSpell)
-	maintGrp.POST("/spells", AddSpell)
-	maintGrp.DELETE("/spells/:id", DeleteMDSpell)
+		maintGrp.GET("/spells", GetMDSpells)
+		maintGrp.GET("/spells/:id", GetMDSpell)
+		maintGrp.PUT("/spells/:id", UpdateMDSpell)
+		maintGrp.POST("/spells", AddSpell)
+		maintGrp.DELETE("/spells/:id", DeleteMDSpell)
 
-	maintGrp.GET("/equipment", GetMDEquipments)
-	maintGrp.GET("/equipment/:id", GetMDEquipment)
-	maintGrp.PUT("/equipment/:id", UpdateMDEquipment)
-	maintGrp.POST("/equipment", AddEquipment)
-	maintGrp.DELETE("/equipment/:id", DeleteMDEquipment)
+		maintGrp.GET("/equipment", GetMDEquipments)
+		maintGrp.GET("/equipment/:id", GetMDEquipment)
+		maintGrp.PUT("/equipment/:id", UpdateMDEquipment)
+		maintGrp.POST("/equipment", AddEquipment)
+		maintGrp.DELETE("/equipment/:id", DeleteMDEquipment)
 
-	maintGrp.GET("/weapons", GetMDWeapons)
-	maintGrp.GET("/weapons/:id", GetMDWeapon)
-	maintGrp.PUT("/weapons/:id", UpdateMDWeapon)
-	maintGrp.POST("/weapons", AddWeapon)
-	maintGrp.DELETE("/weapons/:id", DeleteMDWeapon)
+		maintGrp.GET("/weapons", GetMDWeapons)
+		maintGrp.GET("/weapons/:id", GetMDWeapon)
+		maintGrp.PUT("/weapons/:id", UpdateMDWeapon)
+		maintGrp.POST("/weapons", AddWeapon)
+		maintGrp.DELETE("/weapons/:id", DeleteMDWeapon)
+	}
 }

backend/maintenance/routes.go

@@ -1,22 +1,26 @@
 package maintenance
 
 import (
+	"bamort/user"
+
 	"github.com/gin-gonic/gin"
 )
 
 func RegisterRoutes(r *gin.RouterGroup) {
 	charGrp := r.Group("/maintenance")
-	charGrp.GET("/setupcheck", SetupCheck)
-	charGrp.GET("/setupcheck-dev", SetupCheckDev)
-	charGrp.GET("/mktestdata", MakeTestdataFromLive)
-	charGrp.GET("/reconndb", ReconnectDataBase) // Datenbank neu verbinden
-	charGrp.GET("/reloadenv", ReloadENV)
-	charGrp.POST("/transfer-sqlite-to-mariadb", TransferSQLiteToMariaDB) // Transfer data from SQLite to MariaDB
-	/*
-		//nur zur einmaligen Ausführung, um das Lernkosten-System zu initialisieren
-		charGrp.POST("/initialize-learning-costs", InitializeLearningCosts)
-		// Zur Überprüfung der Lernkosten-Daten
-		charGrp.GET("/learning-costs-summary", gsmaster.GetLearningCostsSummaryHandler)
-	*/
-
+	charGrp.Use(user.RequireMaintainer())
+	{
+		charGrp.GET("/setupcheck", SetupCheck)
+		charGrp.GET("/setupcheck-dev", SetupCheckDev)
+		charGrp.GET("/mktestdata", MakeTestdataFromLive)
+		charGrp.GET("/reconndb", ReconnectDataBase) // Datenbank neu verbinden
+		charGrp.GET("/reloadenv", ReloadENV)
+		charGrp.POST("/transfer-sqlite-to-mariadb", TransferSQLiteToMariaDB) // Transfer data from SQLite to MariaDB
+		/*
+			//nur zur einmaligen Ausführung, um das Lernkosten-System zu initialisieren
+			charGrp.POST("/initialize-learning-costs", InitializeLearningCosts)
+			// Zur Überprüfung der Lernkosten-Daten
+			charGrp.GET("/learning-costs-summary", gsmaster.GetLearningCostsSummaryHandler)
+		*/
+	}
 }

backend/pdfrender/routes.go

@@ -20,6 +20,6 @@ func RegisterRoutes(r *gin.RouterGroup) {
 
 // RegisterPublicRoutes registers public PDF routes (no authentication required)
 func RegisterPublicRoutes(r *gin.Engine) {
-	// Get PDF file from xporttemp (public - for direct browser access)
+	// Get PDF file from export_temp (public - for direct browser access)
 	r.GET("/api/pdf/file/:filename", GetPDFFile)
 }