From d220a68f3de7c543ff40090c09dff5490902dc56 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Y=C3=BBki=20Vachot?= Date: Wed, 15 Dec 2021 08:50:19 +0100 Subject: [PATCH] Update: Ad.findAll add userId --- app-backend/controllers/ad.controller.js | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/app-backend/controllers/ad.controller.js b/app-backend/controllers/ad.controller.js index 6cd3cf2..d92be1f 100644 --- a/app-backend/controllers/ad.controller.js +++ b/app-backend/controllers/ad.controller.js @@ -57,7 +57,16 @@ exports.findAll = (req, res) => { condition = adId ? adId : undefined; query._id = condition; - const userId = req.query.userId; + let userId; + if(typeof token.role !== 'undefined' && + typeof token.role.permission !== 'undefined' && + typeof token.role.isAccepted !== 'undefined' && + token.role.isAccepted === true && + token.role.permission >= roles.Admin.permission) { + userId = req.query.userId; + } else { + userId = token.id; + } condition = userId ? userId : undefined; query.userId = condition;