sasjs/server
1
0
Fork 0
mirror of https://github.com/sasjs/server.git synced 2025-12-10 19:34:34 +00:00
Code Issues Projects Releases Wiki Activity

chore: throw error when adding permission for admin user

Browse Source
This commit is contained in:
Sabir Hassan
2022-06-24 23:19:19 +05:00
parent 907aa485fd
commit 35439d7d51
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api/src/controllers/permission.ts
View File

@@ -167,10 +167,14 @@ const createPermission = async ({
const userInDB = await User.findOne({ id: principalId })
if (!userInDB) throw new Error('User not found.')
if (userInDB.isAdmin)
throw new Error('Can not add permission for admin user.')
const alreadyExists = await Permission.findOne({
uri,
user: userInDB._id
})
if (alreadyExists)
throw new Error('Permission already exists with provided URI and User.')