weskubo-cgi
commented
3 months ago - Added permissions to all endpoints where defined (they were left off for simplicity's sake in the frontend but added to backend for completeness)
- Added role validation to all endpoints which don't clearly map to a permission (e.g. documents)
- Added one-off role validation for Impersonate since there's an endpoint which is only used during that functionality
- Minor code cleanup