Ролевая модель и аудит Часть 1.

src/handlers/admin/admin_handler_users.erl

@@ -1,35 +1,40 @@
 -module(admin_handler_users).
--behaviour(cowboy_handler).
+-include("records.hrl").
 -export([init/2]).
 
 init(Req, _Opts) ->
   case cowboy_req:method(Req) of
-    <<"GET">> ->
-      case handler_auth:authenticate(Req) of
-        {ok, _UserId, Req1} ->
-          {ok, Users} = core_user:list_users(),
-          Response = [user_to_map(U) || U <- Users],
-          send_json(Req1, 200, Response);
-        {error, Code, Message, Req1} ->
-          send_error(Req1, Code, Message)
-      end;
-    _ ->
-      send_error(Req, 405, <<"Method not allowed">>)
+    <<"GET">> -> list_users(Req);
+    _ -> send_error(Req, 405, <<"Method not allowed">>)
   end.
 
-user_to_map(User) ->
+list_users(Req) ->
+  case handler_auth:authenticate(Req) of
+    {ok, AdminId, Req1} ->
+      case admin_utils:is_admin(AdminId) of
+        true ->
+          Users = core_user:list_users(),
+          send_json(Req1, 200, [user_to_json(U) || U <- Users]);
+        false ->
+          send_error(Req1, 403, <<"Admin access required">>)
+      end;
+    {error, Code, Message, Req1} ->
+      send_error(Req1, Code, Message)
+  end.
+
+user_to_json(U) ->
   #{
-    id => maps:get(id, User),
-    email => maps:get(email, User),
-    role => maps:get(role, User),
-    status => maps:get(status, User),
-    created_at => datetime_to_iso8601(maps:get(created_at, User)),
-    updated_at => datetime_to_iso8601(maps:get(updated_at, User))
+    id => U#user.id,
+    email => U#user.email,
+    role => U#user.role,
+    status => U#user.status,
+    created_at => datetime_to_iso8601(U#user.created_at),
+    updated_at => datetime_to_iso8601(U#user.updated_at)
   }.
 
-datetime_to_iso8601({{Year, Month, Day}, {Hour, Minute, Second}}) ->
-  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ",
-    [Year, Month, Day, Hour, Minute, Second])).
+datetime_to_iso8601({{Y,M,D},{H,Min,S}}) ->
+  iolist_to_binary(io_lib:format("~4..0B-~2..0B-~2..0BT~2..0B:~2..0B:~2..0BZ", [Y,M,D,H,Min,S]));
+datetime_to_iso8601(_) -> null.
 
 send_json(Req, Status, Data) ->
   Body = jsx:encode(Data),