drop/server/api/v1/admin/users/index.get.ts

import aclManager from "~/server/internal/acls";
import prisma from "~/server/internal/db/database";

export default defineEventHandler(async (h3) => {
  const allowed = await aclManager.allowSystemACL(h3, ["user:read"]);
  if (!allowed) throw createError({ statusCode: 403 });

  const users = await prisma.user.findMany({
    where: {
      id: { not: "system" },
    },
    include: {
      authMecs: {
        select: {
          mec: true,
        },
      },
    },
  });

  return users;
});