fix(geoip): ограничить изменение баз правами записи трафика

backend/src/lib/permissions.ts

@@ -42,6 +42,8 @@ type Rule = {
 }
 
 const RULES: Rule[] = [
+  { methods: ["GET"], match: path => path === "/api/geoip", permission: "mm:traffic:read" },
+  { methods: ["PUT", "POST"], match: path => path === "/api/geoip" || path === "/api/geoip/update", permission: "mm:traffic:write" },
   {
     methods: ["GET"],
     match: p => /^\/api\/servers\/\d+\/ospf(?:\/|$)/.test(p),