const { authenticate } = require("./auth.middleware");
const { ACCOUNT_TYPES } = require("../constants/accountTypes");
module.exports = (req, res, next) => authenticate(req, res, () => {
  if ([ACCOUNT_TYPES.ADMIN, ACCOUNT_TYPES.SUPER_ADMIN].includes(req.user.accountType)) return next();
  return res.status(403).json({ success: false, error: { code: "FORBIDDEN", message: "Administrative access required" } });
});