RageStudio/comty
1
0
Fork 0
mirror of https://github.com/ragestudio/comty.git synced 2025-06-10 02:54:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix endpoint

Browse Source
This commit is contained in:
srgooglo 2022-09-09 20:38:27 +02:00
parent 4913dedb30
commit 01339a175f
1 changed files with 7 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
packages/server/src/controllers/PostsController/methods/deletePost.js
View File

@ -1,19 +1,5 @@
import { Post, User } from "../../../models"
async function hasAdmin(user_id) {
if (!user_id) {
return false
}
const userData = await User.findById(user_id)
if (!userData) {
return false
}
return userData.roles.includes("admin")
}
export default async (payload) => {
const { post_id, by_user_id } = payload
@ -27,7 +13,13 @@ export default async (payload) => {
throw new Error("Post not found")
}
const hasAdmin = await hasAdmin(by_user_id)
const userData = await User.findById(by_user_id)
if (!userData) {
throw new Error("User not found")
}
const hasAdmin = userData.roles.includes("admin")
// check if user is the owner of the post
if (post.user_id !== by_user_id && !hasAdmin) {