Add confirmed admin override for provisioning player checks

2026-10-05 18:16:02 -04:00
parent 4b0f341d64
commit 8abe71b915
20 changed files with 362 additions and 26 deletions
@@ -29,6 +29,7 @@ export function routePermission(routeId: string | null, method: string): RoutePe
        || within(routeId, '/api/server-keys') || within(routeId, '/server-keys') || within(routeId, '/keys')) return 'admin';

    if (!reading && ['/api/hosts', '/api/settings', '/api/game-files'].some(base => within(routeId, base))) return 'admin';
+    if (routeId === '/api/provisioning/[id]/override') return 'admin';
    // These endpoints mix operational actions with global policy and schedule
    // changes. Per-incident/job actions remain available to operators.
    if (!reading && ['/api/maintenance', '/api/plutonium', '/api/watchdog'].includes(routeId)) return 'admin';