Add user right checks to some detail routes

backend/src/routes/project.ts

@@ -1,5 +1,7 @@
 import { Router } from 'express'
 import { getAllProjects, getProjectDetails } from '../services/project'
+import { requireOneOf } from '../middlewares/authorizer'
+import { Role } from '../../../frontend/src/types'
 
 const router = Router()
 
@@ -8,7 +10,7 @@ router.get('/all', async (_req, res) => {
   return res.status(200).send(projects)
 })
 
-router.get('/:id', async (req, res) => {
+router.get('/:id', requireOneOf([Role.Admin]), async (req, res) => {
   const id = parseInt(req.params.id)
   const project = await getProjectDetails(id)
   if (!project) return res.status(404).send()

backend/src/routes/region.ts

@@ -1,5 +1,7 @@
 import { Router } from 'express'
 import { getAllRegions, getRegionDetails } from '../services/region'
+import { requireOneOf } from '../middlewares/authorizer'
+import { Role } from '../../../frontend/src/types'
 
 const router = Router()
 
@@ -8,7 +10,7 @@ router.get('/all', async (_req, res) => {
   return res.status(200).send(regions)
 })
 
-router.get('/:id', async (req, res) => {
+router.get('/:id', requireOneOf([Role.Admin]), async (req, res) => {
   const id = parseInt(req.params.id)
   const region = await getRegionDetails(id)
   if (!region) return res.status(404).send()