fix(webapp): authorize queue management at collection scope

Author: carderne

apps/webapp/app/routes/api.v1.queues.$queueParam.concurrency.override.ts

@@ -30,7 +30,7 @@ const route = createActionApiRoute(
     }),
     authorization: {
       action: "write",
-      resource: (params) => ({ type: "queues", id: params.queueParam }),
+      resource: () => ({ type: "queues" }),
     },
   },
   async ({ params, body, authentication }) => {

apps/webapp/app/routes/api.v1.queues.$queueParam.concurrency.reset.ts

@@ -17,7 +17,7 @@ const route = createActionApiRoute(
     }),
     authorization: {
       action: "write",
-      resource: (params) => ({ type: "queues", id: params.queueParam }),
+      resource: () => ({ type: "queues" }),
     },
   },
   async ({ params, body, authentication }) => {

apps/webapp/app/routes/api.v1.queues.$queueParam.pause.ts

@@ -17,7 +17,7 @@ const route = createActionApiRoute(
     }),
     authorization: {
       action: "write",
-      resource: (params) => ({ type: "queues", id: params.queueParam }),
+      resource: () => ({ type: "queues" }),
     },
   },
   async ({ params, body, authentication }) => {

apps/webapp/app/routes/api.v1.queues.$queueParam.ts

@@ -17,7 +17,7 @@ export const loader = createLoaderApiRoute(
     findResource: async () => 1, // This is a dummy function, we don't need to find a resource
     authorization: {
       action: "read",
-      resource: (_, params) => ({ type: "queues", id: params.queueParam }),
+      resource: () => ({ type: "queues" }),
     },
   },
   async ({ params, searchParams, authentication }) => {