account system and syslogs

src/app/api/match-logs/[matchId]/route.ts

@@ -1,4 +1,5 @@
-import { getSessionRole } from "@/lib/auth/require-session";
+import { getSessionAccount } from "@/lib/auth/require-session";
+import { canReadPage } from "@/lib/auth/permissions";
 import {
   parseMatchIdParam,
   readMatchLogFile,
@@ -8,8 +9,11 @@ export async function GET(
   _request: Request,
   context: { params: Promise<{ matchId: string }> },
 ) {
-  const role = await getSessionRole();
-  if (!role) {
+  const account = await getSessionAccount();
+  if (
+    !account ||
+    (!canReadPage(account, "matches") && !canReadPage(account, "analysis"))
+  ) {
     return Response.json({ error: "Unauthorized" }, { status: 401 });
   }