- Cleanup
This commit is contained in:
@@ -2,7 +2,7 @@ const aqp = require('api-query-params');
|
||||
const errors = require('restify-errors');
|
||||
|
||||
const User = require('../models/user');
|
||||
const { PUBLIC, PROTECTED } = require('../strategies/selects/user');
|
||||
const { PUBLIC, STAFF } = require('../strategies/selects/user');
|
||||
|
||||
module.exports = function (server, auth) {
|
||||
server.post('/users', auth.manager, (req, res, next) => {
|
||||
@@ -27,7 +27,7 @@ module.exports = function (server, auth) {
|
||||
|
||||
server.get('/users', auth.manager, (req, res, next) => {
|
||||
const { filter } = aqp(req.query);
|
||||
const select = req.user.isManager ? PROTECTED : PUBLIC;
|
||||
const select = req.user.isManager ? STAFF : PUBLIC;
|
||||
|
||||
User.find(filter, select, function (err, docs) {
|
||||
if (err) {
|
||||
@@ -43,7 +43,7 @@ module.exports = function (server, auth) {
|
||||
});
|
||||
|
||||
server.get('/users/:user_id', auth.managerOrSelf, (req, res, next) => {
|
||||
const select = req.user.isManager ? PROTECTED : PUBLIC;
|
||||
const select = req.user.isManager ? STAFF : PUBLIC;
|
||||
|
||||
User.findOne({ _id: req.params.user_id }, select, function (err, doc) {
|
||||
if (err) {
|
||||
|
||||
Reference in New Issue
Block a user