budibase/packages/server/src/api/routes/user.js

const Router = require("@koa/router")
const controller = require("../controllers/user")
const authorized = require("../../middleware/authorized")
const { USER_MANAGEMENT, LIST_USERS } = require("../../utilities/accessLevels")

const router = Router()

router
  .get("/api/:instanceId/users", authorized(LIST_USERS), controller.fetch)
  .get(
    "/api/:instanceId/users/:username",
    authorized(USER_MANAGEMENT),
    controller.find
  )
  .post(
    "/api/:instanceId/users",
    authorized(USER_MANAGEMENT),
    controller.create
  )
  .delete(
    "/api/:instanceId/users/:username",
    authorized(USER_MANAGEMENT),
    controller.destroy
  )

module.exports = router