feat(acls): added backend acls

server/api/v1/news/[id].delete.ts

@@ -1,23 +0,0 @@
-import { defineEventHandler, createError } from "h3";
-import newsManager from "~/server/internal/news";
-
-export default defineEventHandler(async (event) => {
-  const userId = await event.context.session.getUserId(event);
-  if (!userId) {
-    throw createError({
-      statusCode: 401,
-      message: "Unauthorized",
-    });
-  }
-
-  const id = event.context.params?.id;
-  if (!id) {
-    throw createError({
-      statusCode: 400,
-      message: "Missing news ID",
-    });
-  }
-
-  await newsManager.delete(id);
-  return { success: true };
-}); 

server/api/v1/news/index.post.ts

@@ -1,24 +0,0 @@
-import { defineEventHandler, createError, readBody } from "h3";
-import newsManager from "~/server/internal/news";
-
-export default defineEventHandler(async (event) => {
-  const body = await readBody(event);
-  
-  if (!body.authorId) {
-    throw createError({
-      statusCode: 400,
-      message: 'Author ID is required'
-    });
-  }
-
-  const article = await newsManager.create({
-    title: body.title,
-    content: body.content,
-    excerpt: body.excerpt,
-    tags: body.tags,
-    image: body.image,
-    authorId: body.authorId,
-  });
-
-  return article;
-});