Create restriction 'admin' to create topic

lib/diskuy_web/controllers/topic_controller.ex

@@ -4,6 +4,7 @@ defmodule DiskuyWeb.TopicController do
   alias Diskuy.Forum
   alias Diskuy.Forum.Topic
   alias Diskuy.Utility.Utility
+  alias DiskuyWeb.Auth.Guardian
 
   action_fallback DiskuyWeb.FallbackController
 
@@ -13,7 +14,9 @@ defmodule DiskuyWeb.TopicController do
   end
 
   def create(conn, %{"topic" => topic_params}) do
-    with {:ok, %Topic{} = topic} <- Forum.create_topic(topic_params) do
+    current_user = Guardian.Plug.current_resource(conn)
+    with {:ok, :authorized} <- Guardian.check_admin(current_user),
+         {:ok, %Topic{} = topic} <- Forum.create_topic(topic_params) do
       conn
       |> put_status(:created)
       |> put_resp_header("location", Routes.topic_path(conn, :show, topic))
@@ -28,8 +31,9 @@ defmodule DiskuyWeb.TopicController do
 
   def update(conn, %{"id" => id, "topic" => topic_params}) do
     topic = Forum.get_topic_by_name!(id)
-
-    with {:ok, %Topic{} = topic} <- Forum.update_topic(topic, topic_params) do
+    current_user = Guardian.Plug.current_resource(conn)
+    with {:ok, :authorized} <- Guardian.check_admin(current_user),
+         {:ok, %Topic{} = topic} <- Forum.update_topic(topic, topic_params) do
       render(conn, "show.json", topic: topic)
     end
   end