<?php

use App\Http\Controllers\InstitutionCategoryController;
use Illuminate\Support\Facades\Route;

// rotte pubbliche con throttling
Route::middleware('throttle:public')->group(function () {
    Route::apiResource('institution-categories', InstitutionCategoryController::class)
        ->only(['index', 'show']);
});

// Prefisso `api` e tier applicati dal loader in bootstrap/app.php.

// Lettura: utente pienamente operativo.
Route::middleware('tier.app')->group(function () {
    Route::get('institution-categories/{institution_category}/usage', [InstitutionCategoryController::class, 'usage']);
});

// Scrittura: solo Admin.
Route::middleware('tier.admin')->group(function () {
    Route::apiResource('institution-categories', InstitutionCategoryController::class)
        ->only(['store', 'update', 'destroy']);
});