fix admin pages accessible by non admin users (#2988)

Co-authored-by: Michael Genson <71845777+michael-genson@users.noreply.github.com>

frontend/layouts/admin.vue

@@ -34,7 +34,7 @@ import { SidebarLinks } from "~/types/application-types";
 
 export default defineComponent({
   components: { AppHeader, AppSidebar, TheSnackbar },
-  middleware: "auth",
+  middleware: ["auth", "admin-only"],
   auth: true,
   setup() {
     const { $globals, i18n, $vuetify } = useContext();

frontend/middleware/admin-only.ts

@@ -0,0 +1,10 @@
+interface AuthRedirectParams {
+    $auth: any
+    redirect: (path: string) => void
+}
+export default function ({ $auth, redirect }: AuthRedirectParams) {
+    // If the user is not an admin redirect to the home page
+    if (!$auth.user.admin) {
+        return redirect("/")
+    }
+}