norbipeti/Szakdolgozat
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Add backend check for self unadmining

Browse source
This commit is contained in:
Norbi Peti 2022-03-02 23:55:44 +01:00
parent 1f45a3fb84
commit 30433e5985
No known key found for this signature in database
GPG key ID: DBA4C4549A927E56
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
backend/src/controllers/user.controller.ts
View file

@ -1,5 +1,5 @@
import {Count, CountSchema, Filter, FilterExcludingWhere, repository, Where,} from '@loopback/repository';
import {del, get, getModelSchemaRef, param, patch, post, Request, requestBody, response, RestBindings,} from '@loopback/rest';
import { del, get, getModelSchemaRef, HttpErrors, param, patch, post, Request, requestBody, response, RestBindings, } from '@loopback/rest';
import {User} from '../models';
import {UserRepository} from '../repositories';
import {
@ -197,6 +197,11 @@ export class UserController {
})
user: User,
): Promise<void> {
if(id === +this.user.id) {
const loggedInUser = await this.userService.findUserById(this.user.id);
if(user.isAdmin !== undefined && loggedInUser.isAdmin !== user.isAdmin)
throw new HttpErrors.BadRequest('Cannot change admin status of self');
}
await this.userRepository.updateById(id, user);
}