/v2/db/query — SELECT SQL-endpoint для ADMIN_EMAIL. Версия 0.1.22

2026-07-09 07:30:11 +04:00
parent 56a064888e
commit e4a494f18c
3 changed files with 46 additions and 1 deletions
@@ -107,6 +107,7 @@ function applyContext(req, u) {
  req.companyName      = u.companyName || req.clientId;
  const allCids         = u.allClientIds || [u.clientId || ''];
  req.canAdmin         = allCids.includes('WZ01112') || u.clientId === 'WZ01112' || !!u.isAdmin || u.email === (process.env.ADMIN_EMAIL || '');
+  req.canQueryDB       = u.email === (process.env.ADMIN_EMAIL || ''); // SQL-доступ только для ADMIN_EMAIL
  req.adminMode        = req.canAdmin;
  req.isAdmin          = req.canAdmin;
  req.isImpersonated   = isImpersonated;