Benutzer, Ticketzuweißungen

public/js/core/auth-guard.js

@@ -7,6 +7,16 @@ window.addEventListener('unhandledrejection', (ev) => {
   }
 });
 
+/** @param {object|null|undefined} user – aus /auth/status */
+export function canEditCrm(user) {
+  return user?.canEditCrm === true;
+}
+
+/** @param {object|null|undefined} user – aus /auth/status */
+export function canAdmin(user) {
+  return user?.canAdmin === true;
+}
+
 /**
  * @param {{ needsAdmin?: boolean, activeNav?: string }} opts
  * @returns {Promise<object|null>} Session-Status oder null bei Redirect
@@ -40,7 +50,7 @@ export async function guard(opts = {}) {
     location.href = '/start.html';
     return null;
   }
-  if (needsAdmin && st.user?.role !== 'admin') {
+  if (needsAdmin && !canAdmin(st.user)) {
     location.href = '/start.html';
     return null;
   }

public/js/core/layout.js

@@ -19,7 +19,7 @@ export function updateNav(st, activeNav = '') {
     nav.innerHTML = '';
     return;
   }
-  const isAdmin = st.user?.role === 'admin';
+  const isAdmin = st.user?.canAdmin === true;
   const na = (key) => (activeNav === key ? 'nav-active' : '');
   nav.innerHTML = `
     <a href="/start.html" class="${na('start')}">Start</a>