Jun 26 - Update AI Analysis History viewable for every user, removable only for Admin

routes/ai_summary.py

@@ -35,9 +35,7 @@ SUPPORTED_EXT = {".txt", ".md", ".csv", ".pdf", ".doc", ".docx", ".xlsx", ".xls"
 def ai_summary():
     user       = session["user"]
     criteria   = get_all_criteria()
-    history    = get_ai_analysis_history(
-        user_id=(None if user["role"] == "admin" else user["id"])
-    )
+    history    = get_ai_analysis_history(user_id=None)
     groq_key   = get_setting("groq.api_key", "")
     groq_model = get_setting("groq.model", GROQ_MODELS[0])
     return render_template("ai_summary.html",
@@ -366,9 +364,6 @@ def analysis_detail(analysis_id):
     record = get_ai_analysis_detail(analysis_id)
     if not record:
         return jsonify({"error": "Not found"}), 404
-    user = session["user"]
-    if user["role"] != "admin" and record["user_id"] != user["id"]:
-        return jsonify({"error": "Access denied"}), 403
     return jsonify({
         "id":                record["id"],
         "username":          record.get("username"),
@@ -384,12 +379,12 @@ def analysis_detail(analysis_id):
 @ai_summary_bp.route("/history/<int:analysis_id>/delete", methods=["POST"])
 @login_required
 def delete_analysis(analysis_id):
+    user = session["user"]
+    if user["role"] != "admin":
+        return jsonify({"error": "Access denied"}), 403
     record = get_ai_analysis_detail(analysis_id)
     if not record:
         return jsonify({"error": "Not found"}), 404
-    user = session["user"]
-    if user["role"] != "admin" and record["user_id"] != user["id"]:
-        return jsonify({"error": "Access denied"}), 403
     delete_ai_analysis(analysis_id)
     log_action(user["id"], "DELETE_AI_ANALYSIS", "ai_analysis_log", analysis_id,
                f"Deleted AI analysis id={analysis_id}.")