permissions review

src/utils/users/deactivateUser.js

@@ -0,0 +1,34 @@
+import getXSRFToken from "../getXSRF.js";
+
+export default async function deactivateUser(userId) {
+    const csrfToken = await getXSRFToken();
+
+    try {
+        const response = await fetch(`${import.meta.env.VITE_API_URL}/api/users/${userId}/deactivate`, {
+            method: 'POST',
+            credentials: 'include',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-XSRF-TOKEN': csrfToken,
+                'Accept': 'application/json'
+            },
+            body: JSON.stringify({
+                id: userId
+            })
+        });
+
+        const data = await response.json();
+
+        if (!response.ok) {
+            return {
+                status: response.status,
+                errors: data.errors || data.message
+            };
+        }
+
+        return { status: response.status, data };
+
+    } catch (error) {
+        return { status: 500, error };
+    }
+}