first commit

src/services/adminLock.service.js

@@ -0,0 +1,14 @@
+import { env } from '../config/env.js';
+
+export const isEnvAdmin = (user) => {
+  if (!env.adminRoleLock) return false;
+  if (!user) return false;
+  return (
+    Boolean(env.adminEmail) &&
+    Boolean(env.adminUsername) &&
+    user.email === env.adminEmail &&
+    user.username === env.adminUsername
+  );
+};
+
+export const getEffectiveRole = (user) => (isEnvAdmin(user) ? 'admin' : 'user');