Added character service and such.

internal/auth/permitted.go

@@ -2,6 +2,7 @@ package auth
 
 import (
 	"context"
+	"log"
 	"reflect"
 
 	"git.aiterp.net/rpdata/api/models"
@@ -43,6 +44,8 @@ func CheckPermission(ctx context.Context, op string, obj interface{}) error {
 		authorized = token.PermittedUser(v.Author, "member", "story."+op)
 	case *models.User:
 		authorized = token.Permitted("user." + op)
+	default:
+		log.Panicf("Invalid model %T: %#+v", v, v)
 	}
 
 	if !authorized {