refactor: remove role from allow cross branch

src/controllers/03-customer-branch-controller.ts

@@ -39,7 +39,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-customer-controller.ts

@@ -39,7 +39,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-checkup-controller.ts

@@ -30,7 +30,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-controller.ts

@@ -42,7 +42,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-in-country-notice-controller.ts

@@ -28,7 +28,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-other-info-controller.ts

@@ -29,7 +29,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-passport-controller.ts

@@ -28,7 +28,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-visa-controller.ts

@@ -28,7 +28,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/03-employee-work-controller.ts

@@ -28,7 +28,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/04-product-controller.ts

@@ -38,7 +38,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/04-product-group-controller.ts

@@ -52,7 +52,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }
 

src/controllers/04-service-controller.ts

@@ -38,7 +38,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const allowList = ["system", "head_of_admin", "admin", "head_of_account", "head_of_sale"];
+  const allowList = ["system", "head_of_admin", "head_of_account", "head_of_sale"];
   return allowList.some((v) => user.roles?.includes(v));
 }