use tenet_aws::{

    ApiError,

    models::{organisation::OrganisationId, profile::UserId, project::ProjectId},

};

use crate::http::AppState;

pub async fn require_org_admin(

    state: &AppState,

    org_id: &OrganisationId,

    user_id: &UserId,

) -> Result<(), ApiError> {

    state.authz.verify_admin_access(org_id, user_id).await

}

pub async fn require_project_access(

    state: &AppState,

    org_id: &OrganisationId,

    project_id: &ProjectId,

    user_id: &UserId,

) -> Result<(), ApiError> {

    state

        .authz

        .verify_project_access(org_id, project_id, user_id)

        .await

}