feat: gateway store.

middleware/user_permission.go

@@ -7,6 +7,31 @@ import (
 	"github.com/gin-gonic/gin"
 )
 
+func RequireOperatorOrHigher() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		roleValue, exists := c.Get("role")
+		if !exists {
+			c.JSON(http.StatusForbidden, gin.H{"error": "missing user role"})
+			c.Abort()
+			return
+		}
+		role, ok := roleValue.(models.UserRole)
+		if !ok {
+			c.JSON(http.StatusForbidden, gin.H{"error": "invalid user role"})
+			c.Abort()
+			return
+		}
+		if role != models.UserRoleOperator &&
+			role != models.UserRoleRegionAdmin &&
+			role != models.UserRoleSuperAdmin {
+			c.JSON(http.StatusForbidden, gin.H{"error": "insufficient role permissions"})
+			c.Abort()
+			return
+		}
+		c.Next()
+	}
+}
+
 func RequireStepTrainingAccess() gin.HandlerFunc {
 	return func(c *gin.Context) {
 		roleValue, exists := c.Get("role")