diff --git a/shop/app/admin/layout.tsx b/shop/app/admin/layout.tsx
index 44624a2..a8a744a 100644
--- a/shop/app/admin/layout.tsx
+++ b/shop/app/admin/layout.tsx
@@ -1,11 +1,28 @@
import Link from 'next/link'
import { LayoutDashboard, Package, Settings, Users, LogOut, LayoutGrid, ShoppingCart } from 'lucide-react'
-export default function AdminLayout({
+import { redirect } from 'next/navigation'
+import { createClient } from '@/lib/supabase/server'
+
+export default async function AdminLayout({
children,
}: {
children: React.ReactNode
}) {
+ const supabase = await createClient()
+ const { data: { user } } = await supabase.auth.getUser()
+ if (!user) redirect('/auth/login')
+
+ const { data: userData } = await supabase
+ .from('users')
+ .select('role')
+ .eq('id', user.id)
+ .single()
+
+ if (!userData || userData.role !== 'admin') {
+ redirect('/')
+ }
+
return (
{/* Sidebar */}
diff --git a/shop/components/Navbar.tsx b/shop/components/Navbar.tsx
index 938adae..75e2157 100644
--- a/shop/components/Navbar.tsx
+++ b/shop/components/Navbar.tsx
@@ -38,12 +38,23 @@ export async function Navbar() {
);
let user = null;
+ let role = "partner";
try {
const { data } = await supabase.auth.getUser();
user = data.user;
+ if (user) {
+ const { data: dbUser } = await supabase
+ .from("users")
+ .select("role")
+ .eq("id", user.id)
+ .single();
+ if (dbUser) {
+ role = dbUser.role;
+ }
+ }
} catch (error) {
console.error("Fehler beim Abrufen des Users in Navbar:", error);
}
- return
;
+ return
;
}
diff --git a/shop/components/NavbarClient.tsx b/shop/components/NavbarClient.tsx
index e2ce60e..0e50db6 100644
--- a/shop/components/NavbarClient.tsx
+++ b/shop/components/NavbarClient.tsx
@@ -10,11 +10,13 @@ import { Button } from "@/components/ui/button";
interface NavbarClientProps {
user: User | null;
+ role?: string;
}
-export function NavbarClient({ user }: NavbarClientProps) {
+export function NavbarClient({ user, role = "partner" }: NavbarClientProps) {
const router = useRouter();
const [currentUser, setCurrentUser] = useState
(user);
+ const [userRole, setUserRole] = useState(role);
const [isMobileMenuOpen, setIsMobileMenuOpen] = useState(false);
const [open, setOpen] = useState(false);
@@ -53,8 +55,24 @@ export function NavbarClient({ user }: NavbarClientProps) {
useEffect(() => {
const {
data: { subscription },
- } = supabase.auth.onAuthStateChange((event, session) => {
+ } = supabase.auth.onAuthStateChange(async (event, session) => {
setCurrentUser(session?.user ?? null);
+ if (session?.user) {
+ try {
+ const { data } = await supabase
+ .from("users")
+ .select("role")
+ .eq("id", session.user.id)
+ .single();
+ if (data) {
+ setUserRole(data.role);
+ }
+ } catch {
+ setUserRole("partner");
+ }
+ } else {
+ setUserRole("partner");
+ }
});
return () => {
@@ -131,20 +149,48 @@ export function NavbarClient({ user }: NavbarClientProps) {
{currentUser.email}
- setOpen(false)}
- className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
- >
- Account Einstellungen
-
- setOpen(false)}
- className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
- >
- Kundenliste
-
+ {userRole === "admin" ? (
+ <>
+ setOpen(false)}
+ className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
+ >
+ Dashboard
+
+ setOpen(false)}
+ className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
+ >
+ Admin Einstellungen
+
+ setOpen(false)}
+ className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
+ >
+ Benutzerverwaltung
+
+ >
+ ) : (
+ <>
+ setOpen(false)}
+ className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
+ >
+ Account Einstellungen
+
+ setOpen(false)}
+ className="block px-3 py-2 text-sm rounded-lg font-medium hover:bg-slate-100 dark:hover:bg-white/5"
+ >
+ Kundenliste
+
+ >
+ )}