const express = require('express');
const router = express.Router();
const ctrl = require('../controllers/securityReport.controller');
const { authenticateToken } = require('../middleware/auth');
const { requireAdmin } = require('../middleware/roleCheck');

router.use(authenticateToken);
router.use(requireAdmin);

router.post('/upload', ctrl.uploadReport);
router.get('/', ctrl.getAllReports);
router.get('/:id', ctrl.getReport);
router.delete('/:id', ctrl.deleteReport);

module.exports = router;
