yvachot/PolyNotFound
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update: findAll can only be retrieve by a Advertiser or above

Browse source
This commit is contained in:
Yûki VACHOT 2021-12-11 11:00:39 +01:00
parent e52d756d3b
commit 4a64e01693
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app-backend/controllers/ad.controller.js
View file

@ -48,7 +48,7 @@ exports.create = (req, res) => {
// Retrieve all Ad from id if admin or session id
exports.findAll = (req, res) => {
const token = checkLogin(req, res);
const token = checkLogin(req, res, roles.Advertiser);
if(token){
let query = {};
let condition;
@ -229,7 +229,7 @@ exports.delete = (req, res) => {
if(token && typeof req.params.id !== 'undefined') {
const id = req.params.id;
if(id && ObjectId.isValid(id)){
Ad.findByIdAndUpdate(id, {isActive: false}, {useFindAndModify: false})
Ad.updateOne({_id: id, userId: token.id}, {isActive: false}, {useFindAndModify: false})
.then(data => {
if(data) {
return sendMessage(res, 45, {message: `Ad ${id} was successfully deleted.`}, token);