Aggiornamento Ore

src/server/router/projects_router.js

@@ -11,6 +11,7 @@ const { authenticate } = require('../middleware/authenticate');
 
 const { Project } = require('../models/project');
 const { Todo } = require('../models/todo');
+const { User } = require('../models/user');
 
 const _ = require('lodash');
 
@@ -160,7 +161,6 @@ router.get('/:userId', authenticate, (req, res) => {
   const userId = req.params.userId;
   const idapp = req.query.idapp;
 
-  tools.mylog('GET PROJECTS : ', req.params);
 
   if (!ObjectID.isValid(userId)) {
     return res.status(404).send();
@@ -171,21 +171,28 @@ router.get('/:userId', authenticate, (req, res) => {
     return res.status(404).send({ code: server_constants.RIS_CODE_TODO_CREATING_NOTMYUSER });
   }
 
-  // Extract all the projects of the userId only
-  return Project.getAllProjects(userId, idapp).then((objprojects) => {
-    if (!!objprojects.arrproj)
-      tools.mylog('projects', objprojects.arrproj.length);
+  // Receive the Projects only for specific Users:
+  return User.isUserVisuProjects(idapp, req.user.username).then((isresidente) => {
+    // Extract all the projects of the userId only
+    if (!isresidente)
+      return res.send({ projects: [] });
 
-    return objprojects
+    return Project.getAllProjects(userId, idapp).then((objprojects) => {
+      if (!!objprojects.arrproj)
+        tools.mylog('projects', objprojects.arrproj.length);
 
-  }).then((objprojects) => {
+      return objprojects
 
-    res.send({ projects: objprojects.arrproj });
+    }).then((objprojects) => {
 
-  }).catch((e) => {
-    console.log(e.message);
-    res.status(400).send(e);
-  });
+      res.send({ projects: objprojects.arrproj });
+
+    }).catch((e) => {
+      console.log(e.message);
+      res.status(400).send(e);
+    });
+
+  })
 
 });