refactor(auth): simplify authorization checks to use membership only

- Remove explicit ADMIN role checks in API handlers
- Replace combined creator/member role checks with membership-only filters
- Update seed data roles to reflect changed authorization logic
- Add migration to insert hunt creators as members for consistent checks
- Prevent removal of hunt creator as a member with new explicit check
- Adjust related user role updates and queries accordingly
- Upgrade dependencies including nuxt and zod for compatibility
This commit is contained in:
2026-07-30 21:59:36 +02:00
parent a6053855b8
commit cfda014760
18 changed files with 2598 additions and 487 deletions
+5 -2
View File
@@ -14,7 +14,7 @@ async function main() {
create: {
email: 'admin@mail.com',
name: 'Admin user',
role: 'ADMIN',
role: 'CREATOR',
password,
emailConfirmedAt: new Date()
}
@@ -25,7 +25,7 @@ async function main() {
create: {
email: 'team@mail.com',
name: 'Hunt member',
role: 'ADMIN',
role: 'USER',
password,
emailConfirmedAt: new Date()
}
@@ -202,6 +202,9 @@ async function main() {
creatorId: admin.id,
members: {
create: [
{
memberId: admin.id
},
{
memberId: huntMember.id
}