feat(acls): added backend acls

server/api/v1/admin/news/[id].delete.ts

@@ -0,0 +1,23 @@
+import { defineEventHandler, createError } from "h3";
+import newsManager from "~/server/internal/news";
+
+export default defineEventHandler(async (event) => {
+  const userId = await event.context.session.getUserId(event);
+  if (!userId) {
+    throw createError({
+      statusCode: 401,
+      message: "Unauthorized",
+    });
+  }
+
+  const id = event.context.params?.id;
+  if (!id) {
+    throw createError({
+      statusCode: 400,
+      message: "Missing news ID",
+    });
+  }
+
+  await newsManager.delete(id);
+  return { success: true };
+}); 

server/api/v1/admin/news/index.post.ts

@@ -0,0 +1,24 @@
+import { defineEventHandler, createError, readBody } from "h3";
+import newsManager from "~/server/internal/news";
+
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event);
+  
+  if (!body.authorId) {
+    throw createError({
+      statusCode: 400,
+      message: 'Author ID is required'
+    });
+  }
+
+  const article = await newsManager.create({
+    title: body.title,
+    content: body.content,
+    excerpt: body.excerpt,
+    tags: body.tags,
+    image: body.image,
+    authorId: body.authorId,
+  });
+
+  return article;
+});