Initial public release v0.1.0

src/middleware/permissions.rs

@@ -0,0 +1,12 @@
+use sqlx::SqlitePool;
+
+use crate::{error::AppError, identity::permissions};
+
+/// Enforce that the calling user has the given permission.
+///
+/// Alias for `permissions::require_permission` — imported in handlers for
+/// readability: `require(pool, user_id, "users:create").await?`
+#[inline]
+pub async fn require(pool: &SqlitePool, user_id: &str, permission: &str) -> Result<(), AppError> {
+    permissions::require_permission(pool, user_id, permission).await
+}