KnowledgeBase/server/src/auth/tenant-admin.guard.ts

import { Injectable, CanActivate, ExecutionContext } from '@nestjs/common';
import { UserRole } from '../user/user-role.enum';

@Injectable()
export class TenantAdminGuard implements CanActivate {
    canActivate(context: ExecutionContext): boolean {
        const request = context.switchToHttp().getRequest();
        const user = request.user;
        return (
            user &&
            (user.role === UserRole.SUPER_ADMIN ||
                user.role === UserRole.TENANT_ADMIN ||
                user.isAdmin === true)
        );
    }
}