import {auth} from "./auth";import {db} from "./db";export async function requirePermission(permission:string){const s=await auth();if(!s?.user)throw new Error("UNAUTHENTICATED");const uid=(s.user as any).id;const count=await db.userRole.count({where:{userId:uid,role:{permissions:{some:{permission:{slug:permission}}}}}});if(!count)throw new Error("FORBIDDEN");return s}export function ownsOrAll(userId:string,ownerId:string,all:boolean){return all||userId===ownerId}