read-only should work now

src/clj/auto_ap/routes/auth.clj

@@ -55,12 +55,11 @@
                                               (select-keys c [:client/code :db/id :client/locations])))
 
                                        gzip))
-                (not= "admin" (name (:user/role user)))
+               (not (#{"read-only" "admin"} (name (:user/role user))))
                (assoc :user/clients
                       (->> (:user/clients user)
                            (map (fn [c]
                                   (select-keys c [:client/code :db/id :client/locations]))))))]
-
     (when (and user oauth-token)
       auth)))
 

src/clj/auto_ap/ssr/admin/transaction_rules.fiddle

@@ -0,0 +1 @@
+(user/start-db)