centralize roles guards

app/inventory/api/engine/manager.php

@@ -1,17 +1,21 @@
-<?php 
+<?php
     session_start();
-
     require '../../../assets/utils/db_auth.php';
 
-    $sql = "SELECT * 
-        FROM user
-        WHERE 
-            username not in ('support','extra')";
-    $sth = $pdo1->query($sql);
+    require_role($user_role, ['owner', 'admin']);
+
+    $sth = $pdo1->prepare(
+        "SELECT u.user_id, u.name, u.surname, u.email
+         FROM user u
+         INNER JOIN company_map_user m
+            ON m.user_id = u.user_id
+           AND m.company_id = :company_id
+         ORDER BY u.name ASC"
+    );
+    $sth->execute([':company_id' => $company_id]);
     db_check($sth, $answer);
 
-    $answer["output"] = $sth->fetchAll(PDO::FETCH_ASSOC);
-    $answer["success"] = 1;
+    $answer['output']  = $sth->fetchAll(PDO::FETCH_ASSOC);
+    $answer['success'] = 1;
     exit(json_encode($answer));
-
-?>
+?>