from fastapi import APIRouter, Depends
from sqlalchemy.orm import Session
from .. import models, schemas, database
from ..security import require_roles

zametki = APIRouter(prefix="/zametki", tags=["zametki"])

@zametki.post("/", response_model=schemas.ZametkaRead, dependencies=[Depends(require_roles(["admin", "editor"]))])
def create_zametka(item: schemas.ZametkaCreate, db: Session = Depends(database.get_db)):
    obj = models.Zametki(**item.dict())
    db.add(obj)
    db.commit()
    db.refresh(obj)
    return obj

@zametki.get("/", response_model=list[schemas.ZametkaRead])
def list_zametki(db: Session = Depends(database.get_db)):
    return db.query(models.Zametki).all()