Admin mode. Data driven content sections. Bugfixes.

backend/app/api/tiers.py

@@ -1,12 +1,12 @@
-from typing import Optional
-
 from fastapi import APIRouter, Depends
 from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
 
+from app.auth import get_current_admin_user
 from app.database import get_session
 from app.models import DonationTier
 from app.schemas import TierCreate, TierUpdate, TierResponse
+from app.user_models import User
 
 router = APIRouter()
 
@@ -30,7 +30,9 @@ async def get_tier(tier_id: int, session: AsyncSession = Depends(get_session)):
 
 @router.post("/", response_model=TierResponse, status_code=201)
 async def create_tier(
-    payload: TierCreate, session: AsyncSession = Depends(get_session)
+    payload: TierCreate,
+    session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
 ):
     tier = DonationTier(**payload.model_dump())
     session.add(tier)
@@ -44,6 +46,7 @@ async def update_tier(
     tier_id: int,
     payload: TierUpdate,
     session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
 ):
     result = await session.execute(select(DonationTier).where(DonationTier.id == tier_id))
     tier = result.scalar_one_or_none()
@@ -57,7 +60,11 @@ async def update_tier(
 
 
 @router.delete("/{tier_id}", status_code=204)
-async def delete_tier(tier_id: int, session: AsyncSession = Depends(get_session)):
+async def delete_tier(
+    tier_id: int,
+    session: AsyncSession = Depends(get_session),
+    _: User = Depends(get_current_admin_user),
+):
     result = await session.execute(select(DonationTier).where(DonationTier.id == tier_id))
     tier = result.scalar_one_or_none()
     if not tier: