From 2b64dc25fb96b902f4ddeb14e9566ce94844d8b2 Mon Sep 17 00:00:00 2001
From: Ubuntu <ubuntu@vps-97784c65.vps.ovh.net>
Date: Thu, 21 May 2026 02:27:57 +0000
Subject: [PATCH] fix: admin voit tous les projets, pas seulement les siens

- listAllProjects() pour les admins (sans filtre userId)
- Les users normaux voient toujours uniquement leurs projets

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 server/db.ts      | 6 ++++++
 server/routers.ts | 3 +++
 2 files changed, 9 insertions(+)

diff --git a/server/db.ts b/server/db.ts
index b3e5ae6..8f1e2cb 100644
--- a/server/db.ts
+++ b/server/db.ts
@@ -88,6 +88,12 @@ export async function listProjects(userId: number) {
   return db.select().from(projects).where(eq(projects.userId, userId)).orderBy(desc(projects.createdAt));
 }
 
+export async function listAllProjects() {
+  const db = await getDb();
+  if (!db) return [];
+  return db.select().from(projects).orderBy(desc(projects.createdAt));
+}
+
 export async function updateProject(id: number, data: Partial<InsertProject>) {
   const db = await getDb();
   if (!db) return;
diff --git a/server/routers.ts b/server/routers.ts
index 1c3b847..23ad408 100644
--- a/server/routers.ts
+++ b/server/routers.ts
@@ -70,6 +70,9 @@ export const appRouter = router({
   // ============ PROJECTS ============
   projects: router({
     list: protectedProcedure.query(async ({ ctx }) => {
+      if (ctx.user.role === "admin") {
+        return db.listAllProjects();
+      }
       return db.listProjects(ctx.user.id);
     }),
     get: protectedProcedure