// /middlewares/requireSuperAdmin.js
'use strict';

const AppError = require('../utils/AppError');

const requireSuperAdmin = (req, res, next) => {
  if (!req.user) {
    return next(new AppError('UNAUTHORIZED'));
  }

  if (req.user.role?.name !== 'SuperAdmin') {
    return next(new AppError('FORBIDDEN'));
  }

  return next();
};

module.exports = requireSuperAdmin;