Improve LDAP connection handling and add permission checks.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 705f2157-ef97-4fbd-89e4-8c7f2ecaea90
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7ed01c5f-a82d-405a-b728-b2e3d127c60c/9f1689f9-354e-48da-9155-329f0295a865.jpg

server/routes.ts

@@ -25,7 +25,8 @@ import {
   requireAuth, 
   requirePermission, 
   requireAdmin, 
-  initializeRBAC
+  initializeRBAC,
+  checkPermission
 } from "./authorization";
 import { ldapClient } from "./ldap";
 import { 
@@ -34,9 +35,19 @@ import {
   parseFilter, 
   parsePagination 
 } from "./query-parser";
+
 import { eq, sql, count } from "drizzle-orm";
+
 import { v4 as uuidv4 } from "uuid";
 
+// Helper function to connect to LDAP server
+async function connectToLdap(connection: any) {
+  if (!ldapClient.isConnectionActive(connection.id)) {
+    await ldapClient.connect(connection);
+  }
+  return ldapClient.getClient(connection.id);
+}
+
 // Extend Express Request to include user property
 interface Request extends ExpressRequest {
   user: {