surya/freeplanet_serverside
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Bot Telegram ...

Browse Source
This commit is contained in:
Paolo Arena
2020-01-03 22:02:18 +01:00
parent f359f8f723
commit 8f784df4fa
10 changed files with 208 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/server/router/index_router.js
View File

@@ -250,7 +250,7 @@ router.patch('/chval', authenticate, (req, res) => {
tools.mylogshow('PATCH CHVAL: ', id, fieldsvalue);
// If I change my record...
if ((!User.isAdmin(req.user) && !User.isManager(req.user)) && !(req.user._id.toString() === id)) {
if ((!User.isAdmin(req.user.perm) && !User.isManager(req.user.perm)) && !(req.user._id.toString() === id)) {
// If without permissions, exit
return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
}
@@ -278,7 +278,7 @@ router.delete('/delrec/:table/:id', authenticate, (req, res) => {
const mytable = getTableByTableName(tablename);
if (!User.isAdmin(req.user) && !User.isManager(req.user)) {
if (!User.isAdmin(req.user.perm) && !User.isManager(req.user.perm)) {
// If without permissions, exit
return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
}
@@ -315,7 +315,11 @@ router.post('/duprec/:table/:id', authenticate, (req, res) => {
const mytable = getTableByTableName(tablename);
if (!User.isAdmin(req.user) && !User.isManager(req.user)) {
if (!req.user) {
return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
}
if (!User.isAdmin(req.user.perm) && !User.isManager(req.user.perm)) {
// If without permissions, exit
return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
}
@@ -447,7 +451,7 @@ router.get(process.env.LINK_CHECK_UPDATES, authenticate, (req, res) => {
if (req.user) {
// If User is Admin, then send user Lists
if (User.isAdmin(req.user)) {
if (User.isAdmin(req.user.perm)) {
// Send UsersList
usersList = User.getUsersList(req.user.idapp)
}