From 1cb920499f9512e901ded56b74b3f62a3aaafd97 Mon Sep 17 00:00:00 2001 From: Mike Fitzpatrick Date: Tue, 6 Mar 2018 00:45:34 -0500 Subject: [PATCH] no message --- routes/profiles.js | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/routes/profiles.js b/routes/profiles.js index d323619..3b90529 100644 --- a/routes/profiles.js +++ b/routes/profiles.js @@ -327,13 +327,13 @@ Router.route('/:id?') }) .patch( update ) .post((req, res) => { -// Token.verifyThen(req.get('authorization'), 'add', (err, decoded) => { -// if (err || (decoded && !decoded.hasPermission)) { -// res.status(403).json({ message: 'User not authorized to perform this action.', err: err }); -// return; -// } -// -// if (decoded && decoded.hasPermission) { + Token.verifyThen(req.get('authorization'), 'add', (err, decoded) => { + if (err || (decoded && !decoded.hasPermission)) { + res.status(403).json({ message: 'User not authorized to perform this action.', err: err }); + return; + } + + if (decoded && decoded.hasPermission) { var ProfileEvents = new EventEmitter(); var profile = Array.isArray(req.body) ? req.body : [ req.body ]; var multi = profile.length > 1; @@ -349,8 +349,8 @@ Router.route('/:id?') }); Profiles.create(ProfileEvents, profile); -// } -// }); + } + }); }) .put( update );