package common

import (
	"git.apinb.com/bsm-sdk/core/errcode"
	"git.apinb.com/bsm-sdk/core/infra"
	"git.apinb.com/bsm-sdk/core/middleware"
	"github.com/gin-gonic/gin"
)

// RequirePlatformRoot restricts sensitive platform configuration operations to the root role.
func RequirePlatformRoot(ctx *gin.Context) bool {
	claims, err := middleware.ParseAuth(ctx)
	if err == nil && claims.Role == "root" {
		return true
	}
	infra.Response.Error(ctx, errcode.ErrPermissionDenied)
	return false
}