routes.php

<?php

namespace SciMS;

use SciMS\Secure;
use SciMS\Model\User;
use SciMS\Model\ArticleQuery;

return [
  '/articles' => [
    'method' => 'GET',
    'controller' => 'SciMS\Controller\ArticleController:getPage',
    'secure' => false, // can be omitted
  ],
  
  '/articles' => [
    'method' => 'POST',
    'controller' => 'SciMS\Controller\ArticleController:index',
    'secure' => Secure::hasRole('user'),
  ],
  
  '/articles/:id' => [
    'method' => 'PATCH',
    'controller' => 'SciMS\Controller\ArticleController:update',
    'secure' => function(User $currentUser, array $args) {
      $article = ArticleQuery::create()->findById($args['id']);
      return $user->getId() === $article->getAccountId();
    },
  ],
  
  '/articles/:id' => [
    'method' => 'DELETE',
    'controller' => 'SciMS\Controller\ArticleController:destroy',
    'secure' => Secure::hasRole('admin'),
  ],
]