Administrator privileges to get and delete subscribers

src/startup.rs

@@ -85,14 +85,17 @@ pub fn app(
         base_url,
     };
     let admin_routes = Router::new()
+        .route("/subscribers", get(get_subscribers_page))
+        .route("/subscribers/{subscriber_id}", delete(delete_subscriber))
+        .route("/posts/{post_id}", delete(delete_post))
+        .layer(middleware::from_fn(require_admin));
+    let auth_routes = Router::new()
         .route("/dashboard", get(admin_dashboard))
         .route("/password", post(change_password))
         .route("/newsletters", post(publish_newsletter))
         .route("/posts", post(create_post))
-        .route("/posts/{post_id}", delete(delete_post))
         .route("/logout", get(logout))
-        .route("/subscribers", get(get_subscribers_page))
-        .route("/subscribers/{subscriber_id}", delete(delete_subscriber))
+        .merge(admin_routes)
         .layer(middleware::from_fn(require_auth));
     Router::new()
         .route("/", get(home))
@@ -106,7 +109,7 @@ pub fn app(
         .route("/posts/load_more", get(load_more))
         .route("/posts/{post_id}", get(see_post))
         .route("/favicon.ico", get(favicon))
-        .nest("/admin", admin_routes)
+        .nest("/admin", auth_routes)
         .nest_service("/assets", ServeDir::new("assets"))
         .layer(
             TraceLayer::new_for_http().make_span_with(|request: &Request<_>| {