diff --git a/packages/server/middlewares/onlyAdmin/index.js b/packages/server/middlewares/onlyAdmin/index.js index eea3a6b2..617dfb5d 100755 --- a/packages/server/middlewares/onlyAdmin/index.js +++ b/packages/server/middlewares/onlyAdmin/index.js @@ -1,8 +1,10 @@ -export default (req, res, next) => { +export default async (req, res, next) => { if (!req.auth) { return res.status(401).json({ error: "No authenticated" }) } + req.auth.user = await req.auth.user() + if (!req.auth.user.roles.includes("admin")) { return res.status(403).json({ error: "To make this request it is necessary to have administrator permissions" }) }