forked from BRETT/BRETT
24 lines
1023 B
TypeScript
24 lines
1023 B
TypeScript
import { and, eq } from 'drizzle-orm'
|
|
import { roles, userRoles } from '../../../../../db/schema'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const admin = await requirePermission(event, 'users.manage')
|
|
const userId = Number(getRouterParam(event, 'id'))
|
|
const roleId = Number(getRouterParam(event, 'roleId'))
|
|
if (!Number.isInteger(userId) || userId <= 0 || !Number.isInteger(roleId) || roleId <= 0) {
|
|
throw createError({ statusCode: 400, statusMessage: 'Ungültige ID' })
|
|
}
|
|
const db = useDb()
|
|
|
|
const [role] = await db.select({ name: roles.name }).from(roles).where(eq(roles.id, roleId)).limit(1)
|
|
if (!role) {
|
|
throw createError({ statusCode: 404, statusMessage: 'Rolle nicht gefunden' })
|
|
}
|
|
if (role.name === 'admin' && userId === admin.id) {
|
|
throw createError({ statusCode: 400, statusMessage: 'Du kannst dir nicht selbst die Admin-Rolle entziehen' })
|
|
}
|
|
|
|
await db.delete(userRoles).where(and(eq(userRoles.userId, userId), eq(userRoles.roleId, roleId)))
|
|
return { ok: true }
|
|
})
|