diff --git a/shop/app/admin/layout.tsx b/shop/app/admin/layout.tsx index 44624a2..a8a744a 100644 --- a/shop/app/admin/layout.tsx +++ b/shop/app/admin/layout.tsx @@ -1,11 +1,28 @@ import Link from 'next/link' import { LayoutDashboard, Package, Settings, Users, LogOut, LayoutGrid, ShoppingCart } from 'lucide-react' -export default function AdminLayout({ +import { redirect } from 'next/navigation' +import { createClient } from '@/lib/supabase/server' + +export default async function AdminLayout({ children, }: { children: React.ReactNode }) { + const supabase = await createClient() + const { data: { user } } = await supabase.auth.getUser() + if (!user) redirect('/auth/login') + + const { data: userData } = await supabase + .from('users') + .select('role') + .eq('id', user.id) + .single() + + if (!userData || userData.role !== 'admin') { + redirect('/') + } + return (
{/* Sidebar */} diff --git a/shop/components/Navbar.tsx b/shop/components/Navbar.tsx index 938adae..75e2157 100644 --- a/shop/components/Navbar.tsx +++ b/shop/components/Navbar.tsx @@ -38,12 +38,23 @@ export async function Navbar() { ); let user = null; + let role = "partner"; try { const { data } = await supabase.auth.getUser(); user = data.user; + if (user) { + const { data: dbUser } = await supabase + .from("users") + .select("role") + .eq("id", user.id) + .single(); + if (dbUser) { + role = dbUser.role; + } + } } catch (error) { console.error("Fehler beim Abrufen des Users in Navbar:", error); } - return ; + return ; } diff --git a/shop/components/NavbarClient.tsx b/shop/components/NavbarClient.tsx index e2ce60e..0e50db6 100644 --- a/shop/components/NavbarClient.tsx +++ b/shop/components/NavbarClient.tsx @@ -10,11 +10,13 @@ import { Button } from "@/components/ui/button"; interface NavbarClientProps { user: User | null; + role?: string; } -export function NavbarClient({ user }: NavbarClientProps) { +export function NavbarClient({ user, role = "partner" }: NavbarClientProps) { const router = useRouter(); const [currentUser, setCurrentUser] = useState(user); + const [userRole, setUserRole] = useState(role); const [isMobileMenuOpen, setIsMobileMenuOpen] = useState(false); const [open, setOpen] = useState(false); @@ -53,8 +55,24 @@ export function NavbarClient({ user }: NavbarClientProps) { useEffect(() => { const { data: { subscription }, - } = supabase.auth.onAuthStateChange((event, session) => { + } = supabase.auth.onAuthStateChange(async (event, session) => { setCurrentUser(session?.user ?? null); + if (session?.user) { + try { + const { data } = await supabase + .from("users") + .select("role") + .eq("id", session.user.id) + .single(); + if (data) { + setUserRole(data.role); + } + } catch { + setUserRole("partner"); + } + } else { + setUserRole("partner"); + } }); return () => { @@ -131,20 +149,48 @@ export function NavbarClient({ user }: NavbarClientProps) {
{currentUser.email}
- setOpen(false)} - className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" - > - Account Einstellungen - - setOpen(false)} - className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" - > - Kundenliste - + {userRole === "admin" ? ( + <> + setOpen(false)} + className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" + > + Dashboard + + setOpen(false)} + className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" + > + Admin Einstellungen + + setOpen(false)} + className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" + > + Benutzerverwaltung + + + ) : ( + <> + setOpen(false)} + className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" + > + Account Einstellungen + + setOpen(false)} + className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5" + > + Kundenliste + + + )}