auth with role problem

[ghost]

Hi,

Hope you are all well !

How can I restrict the access to the admin path to only users with the "Admin" role set in the database ?

I tried with qor-example and anybody can have access to the admin dashboard with a confirmed account.
Also, I noticed that new accounts have an empty role when they create a new account. How to set it while submitting the registration form ?

Is it possible to fix the demo ? Or is there a parameter to add somewhere to check the user's role ?

Thanks in advance for your replies and insights about these questions.

Have a nice day !

Cheers,
X

[lutfuahmet]

You can use middleware.

Admin.GetRouter().Use(&admin.Middleware{
		Name: "restrict",
		Handler: func(context *admin.Context, middleware *admin.Middleware) {

		        if currentUser,ok := ctx.CurrentUser.(*models.User);!ok || currentUser.Role != "Admin" {
			        http.Redirect(ctx.Writer, ctx.Request, "/", 302)
                                 return
		        }

			middleware.Next(context)
		},
	})

[ghost]

Awesome, thanks @lutfuahmet :-)