From d8318f874f9903bc45b3dae1691d74cdcfb5d20d Mon Sep 17 00:00:00 2001 From: azures04 Date: Sun, 18 Jan 2026 21:23:56 +0100 Subject: [PATCH] Update adminService.js --- services/adminService.js | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/services/adminService.js b/services/adminService.js index 41ac39c..61e500a 100644 --- a/services/adminService.js +++ b/services/adminService.js @@ -21,7 +21,7 @@ async function registerAdmin(username, plainPassword, permissions = []) { } async function checkAdminAccess(adminId, requiredPermission) { - if (!adminId || !requiredPermission) { + if (typeof adminId != "number" || !requiredPermission) { throw new DefaultError(400, "Administrator ID or permission missing.") } @@ -105,7 +105,6 @@ function hasPermission(requiredPermission) { throw new DefaultError(403, "Invalid token.") } - console.log(decoded, requiredPermission) const hasAccess = await checkAdminAccess(decoded.id, requiredPermission) if (!hasAccess) { throw new DefaultError(403, `Missing permission : ${requiredPermission}`)