feat: allow anybody to edit customer data if can manage

src/controllers/03-customer-branch-citizen-controller.ts

@@ -31,7 +31,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-customer-controller.ts

@@ -52,7 +52,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-checkup-controller.ts

@@ -33,7 +33,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-controller.ts

@@ -61,7 +61,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-other-info-controller.ts

@@ -33,7 +33,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-passport-controller.ts

@@ -32,7 +32,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-visa-controller.ts

@@ -32,7 +32,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }
 

src/controllers/03-employee-work-controller.ts

@@ -32,7 +32,7 @@ const MANAGE_ROLES = [
 ];
 
 function globalAllow(user: RequestWithUser["user"]) {
-  const listAllowed = ["system", "head_of_admin", "admin", "executive", "accountant"];
+  const listAllowed = MANAGE_ROLES;
   return user.roles?.some((v) => listAllowed.includes(v)) || false;
 }