feat: add admin session rbac foundation

WonderQ-Admin/app/routers/shared.py

@@ -4,6 +4,13 @@ from ..models import DemandFeatureCard, DemandForm, DemandHero, DestinationHero,
 from ..serializers import model_dict
 
 
+def public_model_dict(item) -> dict:
+    result = model_dict(item)
+    result.pop("deptId", None)
+    result.pop("createdById", None)
+    return result
+
+
 def site_config(db: Session, active_only: bool, include_public_extras: bool = True) -> dict:
     hero_stmt = select(HeroSlide).order_by(HeroSlide.sortOrder.asc())
     destination_hero_stmt = select(DestinationHero).order_by(DestinationHero.sortOrder.asc())
@@ -24,14 +31,14 @@ def site_config(db: Session, active_only: bool, include_public_extras: bool = Tr
     hero_slides = db.scalars(hero_stmt).all()
     destination_hero = db.scalars(destination_hero_stmt).all()
     result = {
-        "heroSlides": [model_dict(item) for item in hero_slides],
-        "destinationHero": [model_dict(item) for item in destination_hero],
+        "heroSlides": [public_model_dict(item) for item in hero_slides],
+        "destinationHero": [public_model_dict(item) for item in destination_hero],
     }
     if include_public_extras:
-        result["vehicleOptions"] = [model_dict(item) for item in db.scalars(vehicle_stmt).all()]
+        result["vehicleOptions"] = [public_model_dict(item) for item in db.scalars(vehicle_stmt).all()]
         vehicle_service = db.scalars(vehicle_service_stmt).first()
-        result["vehicleService"] = model_dict(vehicle_service) if vehicle_service else None
-    result["demandHero"] = [model_dict(item) for item in db.scalars(demand_hero_stmt).all()]
-    result["demandFeatureCards"] = [model_dict(item) for item in db.scalars(demand_feature_card_stmt).all()]
-    result["demandForm"] = [model_dict(item) for item in db.scalars(demand_form_stmt).all()]
+        result["vehicleService"] = public_model_dict(vehicle_service) if vehicle_service else None
+    result["demandHero"] = [public_model_dict(item) for item in db.scalars(demand_hero_stmt).all()]
+    result["demandFeatureCards"] = [public_model_dict(item) for item in db.scalars(demand_feature_card_stmt).all()]
+    result["demandForm"] = [public_model_dict(item) for item in db.scalars(demand_form_stmt).all()]
     return result