diff --git a/services/adminService.js b/services/adminService.js index 41ac39c..61e500a 100644 --- a/services/adminService.js +++ b/services/adminService.js @@ -21,7 +21,7 @@ async function registerAdmin(username, plainPassword, permissions = []) { } async function checkAdminAccess(adminId, requiredPermission) { - if (!adminId || !requiredPermission) { + if (typeof adminId != "number" || !requiredPermission) { throw new DefaultError(400, "Administrator ID or permission missing.") } @@ -105,7 +105,6 @@ function hasPermission(requiredPermission) { throw new DefaultError(403, "Invalid token.") } - console.log(decoded, requiredPermission) const hasAccess = await checkAdminAccess(decoded.id, requiredPermission) if (!hasAccess) { throw new DefaultError(403, `Missing permission : ${requiredPermission}`)