- User Profile

- DashBoard start
2019-12-29 23:30:49 +01:00
parent 8fd04d3b1c
commit c39a14bb9e
5 changed files with 43 additions and 6 deletions
--- a/src/server/router/index_router.js
+++ b/src/server/router/index_router.js
@@ -247,7 +247,7 @@ router.patch('/chval', authenticate, (req, res) => {
  tools.mylogshow('PATCH CHVAL: ', id, fieldsvalue);

  // If I change my record...
-  if ((!User.isAdmin(req.user) && !User.isManager(req.user)) || (req.user._id === id)) {
+  if ((!User.isAdmin(req.user) && !User.isManager(req.user)) && !(req.user._id.toString() === id)) {
    // If without permissions, exit
    return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
  }