Restrict access to admin panel unless role is admin

cyanph03nix10 months ago

2

• 

  hristo600411 months ago

  In your Users collection (or the one you're using for auth, under

  access

  you can add additional property

  admin

  :

  
  
  

    access: {
      create: // ...,
      read: // ... ,
      update: // ...,
      delete: // ...,
      admin: ({ req: { user } }) => user?.role === 'admin',
    },

  
  
  

  This way, only users with the role

  admin

  will be able to access the admin panel.