budibase/packages/worker/src/middleware/builderOnly.js

module.exports = async (ctx, next) => {
  if (
    !ctx.internal &&
    (!ctx.user || !ctx.user.builder || !ctx.user.builder.global)
  ) {
    ctx.throw(403, "Builder user only endpoint.")
  }
  return next()
}