릴리스: v0.1.42 관리자 티어표 관리 추가

backend/src/routes/tierlists.js

@@ -10,6 +10,7 @@ const {
   deleteTierList,
   saveTierList,
   createCustomItem,
+  findUserById,
 } = require('../db')
 const { requireAuth } = require('../middleware/auth')
 
@@ -99,7 +100,9 @@ router.get('/:id', async (req, res) => {
   const t = await findTierListById(req.params.id)
   if (!t) return res.status(404).json({ error: 'not_found' })
   if (!t.isPublic) {
-    if (!req.session || req.session.userId !== t.authorId) return res.status(403).json({ error: 'forbidden' })
+    if (!req.session?.userId) return res.status(403).json({ error: 'forbidden' })
+    const currentUser = req.session.userId === t.authorId ? { isAdmin: false } : await findUserById(req.session.userId)
+    if (req.session.userId !== t.authorId && !currentUser?.isAdmin) return res.status(403).json({ error: 'forbidden' })
   }
   res.json({ tierList: normalizeTierList(t) })
 })