Admin mode. Data driven content sections. Bugfixes.

backend/app/api/programs.py

@@ -4,9 +4,11 @@ from fastapi import APIRouter, Depends, Query
 from sqlalchemy import select, func
 from sqlalchemy.ext.asyncio import AsyncSession
 
+from app.auth import get_current_admin_user
 from app.database import get_session
 from app.models import Program
 from app.schemas import ProgramCreate, ProgramUpdate, ProgramResponse
+from app.user_models import User
 
 router = APIRouter()
 
@@ -39,7 +41,9 @@ async def get_program(program_id: int, session: AsyncSession = Depends(get_sessi
 
 @router.post("/", response_model=ProgramResponse, status_code=201)
 async def create_program(
-    payload: ProgramCreate, session: AsyncSession = Depends(get_session)
+    payload: ProgramCreate,
+    session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
 ):
     program = Program(**payload.model_dump())
     session.add(program)
@@ -53,6 +57,7 @@ async def update_program(
     program_id: int,
     payload: ProgramUpdate,
     session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
 ):
     result = await session.execute(select(Program).where(Program.id == program_id))
     program = result.scalar_one_or_none()
@@ -66,7 +71,11 @@ async def update_program(
 
 
 @router.delete("/{program_id}", status_code=204)
-async def delete_program(program_id: int, session: AsyncSession = Depends(get_session)):
+async def delete_program(
+    program_id: int,
+    session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
+):
     result = await session.execute(select(Program).where(Program.id == program_id))
     program = result.scalar_one_or_none()
     if not program: