set permissions

src/modules/pager/controllers/pager.controller.ts

@@ -11,11 +11,14 @@ import { AdminAuthGuard } from '../../auth/guards/adminAuth.guard';
 import { AdminId } from 'src/common/decorators/admin-id.decorator';
 import { UpdatePagerStatusDto } from '../dto/update-pager.dto';
 import { PagerMessage } from 'src/common/enums/message.enum';
+import { Permissions } from 'src/common/decorators/permissions.decorator';
+import { Permission } from 'src/common/enums/permission.enum';
+import { API_HEADER_SLUG } from 'src/common/constants';
 
 @ApiTags('pager')
 @Controller()
 export class PagerController {
-  constructor(private readonly pagerService: PagerService) {}
+  constructor(private readonly pagerService: PagerService) { }
 
   @UseGuards(OptionalAuthGuard)
   @Post('public/pager')
@@ -55,17 +58,11 @@ export class PagerController {
     });
   }
 
+
   @UseGuards(OptionalAuthGuard)
   @Get('public/pager')
   @ApiOperation({ summary: 'Get all pager requests for the current session' })
-  @ApiHeader({
-    name: 'X-Slug',
-    required: true,
-    schema: {
-      type: 'string',
-      default: 'zhivan',
-    },
-  })
+  @ApiHeader(API_HEADER_SLUG)
   @ApiHeader({ name: 'Authorization', required: false, description: 'Bearer token (optional authentication)' })
   async findAll(@Req() request: FastifyRequest) {
     const cookieId = request.cookies['pagerId'] || undefined;
@@ -75,7 +72,10 @@ export class PagerController {
     return this.pagerService.findAll(cookieId);
   }
 
+  /********************  Admin Routes **********************/
+
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_PAGER)
   @ApiBearerAuth()
   @Get('admin/pager')
   @ApiOperation({ summary: 'Get all pager requests for the restaurant' })
@@ -84,6 +84,7 @@ export class PagerController {
   }
 
   @UseGuards(AdminAuthGuard)
+  @Permissions(Permission.MANAGE_PAGER)
   @ApiBearerAuth()
   @Patch('admin/pager/:pagerId/status')
   @ApiParam({ name: 'pagerId', required: true, type: String })