diff --git a/src/controllers/customer-branch-controller.ts b/src/controllers/customer-branch-controller.ts index 188448f..ccfc674 100644 --- a/src/controllers/customer-branch-controller.ts +++ b/src/controllers/customer-branch-controller.ts @@ -24,7 +24,27 @@ if (!process.env.MINIO_BUCKET) { } const MINIO_BUCKET = process.env.MINIO_BUCKET; -const MANAGE_ROLES = ["system", "head_of_admin", "admin", "branch_manager", "head_of_sale", "sale"]; +const MANAGE_ROLES = [ + "system", + "head_of_admin", + "admin", + "branch_manager", + "head_of_sale", + "sale", + "head_of_account", + "account", +]; +function globalAllow(user: RequestWithUser["user"]) { + const allowList = [ + "system", + "head_of_admin", + "admin", + "branch_manager", + "head_of_sale", + "head_of_account", + ]; + return allowList.some((v) => user.roles?.includes(v)); +} function imageLocation(id: string) { return `employee/profile-img-${id}`;