fix service account use

Author: tgmstudios

backend/managers/instances.js

@@ -11,8 +11,8 @@ async function getAllInstances(user, filters = {}) {
   let whereConditions = [];
   let params = [];
 
-  // If user is admin, show all instances
-  if (user.role === 'ADMIN') {
+  // If user is admin or service account, show all instances
+  if (user.role === 'ADMIN' || user.role === 'SERVICE_ACCOUNT') {
     let baseQuery = `
       SELECT i.*, 
              w.name as workshop_name,

backend/managers/teams.js

@@ -7,8 +7,8 @@ const { search, searchAll, insert, update, deleteFrom, executeQuery } = require(
 async function getAllTeams(user) {
   let teams;
 
-  // If user is admin, show all teams
-  if (user.role === 'ADMIN') {
+  // If user is admin or service account, show all teams
+  if (user.role === 'ADMIN' || user.role === 'SERVICE_ACCOUNT') {
     teams = await searchAll('teams', [], [], { orderBy: 'team_number' });
   } else {
     // Get teams that user belongs to
@@ -397,9 +397,9 @@ async function getTeamStats() {
  * Check if user can access team
  */
 async function canUserAccessTeam(userId, teamId) {
-  // Admin can access all teams
+  // Admin and service accounts can access all teams
   const user = await search('users', 'id', userId);
-  if (user && user.role === 'ADMIN') {
+  if (user && (user.role === 'ADMIN' || user.role === 'SERVICE_ACCOUNT')) {
     return true;
   }
 

backend/managers/workshops.js

@@ -7,8 +7,8 @@ const { search, searchAll, insert, update, deleteFrom, executeQuery } = require(
 async function getAllWorkshops(user) {
   let workshops;
 
-  // If user is admin, show all workshops
-  if (user.role === 'ADMIN') {
+  // If user is admin or service account, show all workshops
+  if (user.role === 'ADMIN' || user.role === 'SERVICE_ACCOUNT') {
     workshops = await searchAll('workshops', [], [], { orderBy: 'name' });
   } else {
     // Get workshops that user has access to
@@ -236,9 +236,9 @@ async function getWorkshopStats() {
  * Check if user can access workshop
  */
 async function canUserAccessWorkshop(userId, workshopId) {
-  // Admin can access all workshops
+  // Admin and service accounts can access all workshops
   const user = await search('users', 'id', userId);
-  if (user && user.role === 'ADMIN') {
+  if (user && (user.role === 'ADMIN' || user.role === 'SERVICE_ACCOUNT')) {
     return true;
   }
 

backend/middleware/auth.js

@@ -104,8 +104,8 @@ const canAccessWorkshop = async (req, res, next) => {
     const { id: workshopId } = req.params;
     const userId = req.user.id;
 
-    // Admins can access all workshops
-    if (req.user.role === 'ADMIN') {
+    // Admins and service accounts can access all workshops
+    if (req.user.role === 'ADMIN' || req.user.role === 'SERVICE_ACCOUNT') {
       return next();
     }
 
@@ -142,8 +142,8 @@ const canAccessInstance = async (req, res, next) => {
     const instanceIdToUse = instanceId || id;
     const userId = req.user.id;
 
-    // Admins can access all instances
-    if (req.user.role === 'ADMIN') {
+    // Admins and service accounts can access all instances
+    if (req.user.role === 'ADMIN' || req.user.role === 'SERVICE_ACCOUNT') {
       return next();
     }
 
@@ -183,8 +183,8 @@ const canAccessTeam = async (req, res, next) => {
     const { teamId } = req.params;
     const userId = req.user.id;
 
-    // Admins can access all teams
-    if (req.user.role === 'ADMIN') {
+    // Admins and service accounts can access all teams
+    if (req.user.role === 'ADMIN' || req.user.role === 'SERVICE_ACCOUNT') {
       return next();
     }
 

backend/routes/teams.js

@@ -22,8 +22,8 @@ router.get('/', authenticateToken, async (req, res) => {
   try {
     let teams;
 
-    // If user is admin, show all teams
-    if (req.user.role === 'ADMIN') {
+    // If user is admin or service account, show all teams
+    if (req.user.role === 'ADMIN' || req.user.role === 'SERVICE_ACCOUNT') {
       teams = await searchAll('teams', [], [], { orderBy: 'team_number' });
     } else {
       // Get teams that user belongs to

backend/routes/workshops.js

@@ -41,8 +41,8 @@ router.get('/', authenticateToken, async (req, res) => {
   try {
     let workshops;
 
-    // If user is admin, show all workshops with provider information
-    if (req.user.role === 'ADMIN') {
+    // If user is admin or service account, show all workshops with provider information
+    if (req.user.role === 'ADMIN' || req.user.role === 'SERVICE_ACCOUNT') {
       workshops = await executeQuery(`
         SELECT w.*, p.name as provider_name
         FROM workshops w