Added Roles and Permissions. Some minor UI fixes

backend/equipment/router.py

@@ -1,7 +1,7 @@
 from fastapi import APIRouter, Depends, Query
 from typing import Optional
 from auth.models import TokenPayload
-from auth.dependencies import require_device_access, require_viewer
+from auth.dependencies import require_permission
 from equipment.models import (
     NoteCreate, NoteUpdate, NoteInDB, NoteListResponse,
 )
@@ -16,7 +16,7 @@ async def list_notes(
     category: Optional[str] = Query(None),
     device_id: Optional[str] = Query(None),
     user_id: Optional[str] = Query(None),
-    _user: TokenPayload = Depends(require_viewer),
+    _user: TokenPayload = Depends(require_permission("equipment", "view")),
 ):
     notes = service.list_notes(
         search=search, category=category,
@@ -28,7 +28,7 @@ async def list_notes(
 @router.get("/{note_id}", response_model=NoteInDB)
 async def get_note(
     note_id: str,
-    _user: TokenPayload = Depends(require_viewer),
+    _user: TokenPayload = Depends(require_permission("equipment", "view")),
 ):
     return service.get_note(note_id)
 
@@ -36,7 +36,7 @@ async def get_note(
 @router.post("", response_model=NoteInDB, status_code=201)
 async def create_note(
     body: NoteCreate,
-    _user: TokenPayload = Depends(require_device_access),
+    _user: TokenPayload = Depends(require_permission("equipment", "add")),
 ):
     return service.create_note(body, created_by=_user.name or _user.email)
 
@@ -45,7 +45,7 @@ async def create_note(
 async def update_note(
     note_id: str,
     body: NoteUpdate,
-    _user: TokenPayload = Depends(require_device_access),
+    _user: TokenPayload = Depends(require_permission("equipment", "edit")),
 ):
     return service.update_note(note_id, body)
 
@@ -53,6 +53,6 @@ async def update_note(
 @router.delete("/{note_id}", status_code=204)
 async def delete_note(
     note_id: str,
-    _user: TokenPayload = Depends(require_device_access),
+    _user: TokenPayload = Depends(require_permission("equipment", "delete")),
 ):
     service.delete_note(note_id)