fix(worker-platform): restrict withdrawal blacklist actions to admin role only

2026-09-13 12:38:19 +08:00
parent 061a5d897f
commit abccecf8ed
2 changed files with 12 additions and 8 deletions
@@ -123,7 +123,7 @@ router.post(

 router.post(
  '/worker-platform/workers/:workerId/withdrawal-blacklist',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin']),
  createJsonHandler(
    (req) =>
      updateAdminWorkerWithdrawalBlacklist(String(req.params.workerId || ''), req.body || {}),