cleanup

internal/server/api/listener.go

@@ -189,14 +189,8 @@ func New(ctx context.Context, cfg Config) (*Server, error) {
 	cfg.SetRouter(e)
 
 	// auth start - may move to separate rbac function
-	routePermissions := map[string][]string{
-		"/users":                {"exporters", "uploaders", "querybuilders"},
-		"/users/:id":            {"exporters", "querybuilders"},
-		"/orders":               {"exporters"},
-		"/reports/sales":        {"exporters", "uploaders", "querybuilders"},
-		"/settings":             {"exporters"},
-		"/api/inventory/update": {"exporters", "uploaders"},
-	}
+	// update these to match the endpoints.
+	routePermissions := GetRoutePermissions()
 	cfg.SetAuthRoutePermissions(routePermissions)
 
 	cognitoauth.RegisterRoutes(cfg.GetRouter(), cfg)

internal/server/api/route_permissions.go

@@ -0,0 +1,11 @@
+package api
+
+func GetRoutePermissions() map[string][]string {
+	return map[string][]string{
+		"/client":   {"exporters", "uploaders", "querybuilders"},
+		"/document": {"exporters", "querybuilders"},
+		"/query":    {"exporters", "uploaders", "querybuilders"},
+		"/export":   {"exporters"},
+		"/settings": {"exporters"},
+	}
+}