Update adminService.js
This commit is contained in:
parent
487bd08141
commit
d8318f874f
@ -21,7 +21,7 @@ async function registerAdmin(username, plainPassword, permissions = []) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
async function checkAdminAccess(adminId, requiredPermission) {
|
async function checkAdminAccess(adminId, requiredPermission) {
|
||||||
if (!adminId || !requiredPermission) {
|
if (typeof adminId != "number" || !requiredPermission) {
|
||||||
throw new DefaultError(400, "Administrator ID or permission missing.")
|
throw new DefaultError(400, "Administrator ID or permission missing.")
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -105,7 +105,6 @@ function hasPermission(requiredPermission) {
|
|||||||
throw new DefaultError(403, "Invalid token.")
|
throw new DefaultError(403, "Invalid token.")
|
||||||
}
|
}
|
||||||
|
|
||||||
console.log(decoded, requiredPermission)
|
|
||||||
const hasAccess = await checkAdminAccess(decoded.id, requiredPermission)
|
const hasAccess = await checkAdminAccess(decoded.id, requiredPermission)
|
||||||
if (!hasAccess) {
|
if (!hasAccess) {
|
||||||
throw new DefaultError(403, `Missing permission : ${requiredPermission}`)
|
throw new DefaultError(403, `Missing permission : ${requiredPermission}`)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user